nixos-config/common, branch mainmy nixos setuphttps://git.hwebs.info/nixos-config/atom?h=main2026-08-04T22:41:40Zcommon: update AGENTS.md commit trailer guidelines2026-08-04T22:41:40ZHenry J. Websterhwebs@hwebs.info2026-08-04T22:41:40Zurn:sha1:a8273dea992f0b31c59f87c5441271f97d2b729cnetworking: expose Ollama and mDNS on Wi-Fi LAN2026-08-04T22:14:09ZHenry J. Websterhwebs@hwebs.info2026-08-04T22:10:10Zurn:sha1:a4c50351f5d55438a102d48c63dcbb62f9ef5e8d
Serve Ollama on kusanagi's Wi-Fi LAN while removing the blanket tailscale0 firewall trust so tailnet traffic follows explicit host firewall rules instead of inheriting every listening service.
Add shared LAN networking for both hosts: allow ping, publish and resolve .local names with Avahi, and scope mDNS to each machine's declared Wi-Fi interface.
Assisted-by: OpenAI:gpt-5
common: require agents to work on a branch, not main2026-08-04T21:04:51ZHenry J Websterhwebs@hwebs.info2026-08-04T04:38:21Zurn:sha1:8f9fbf2f4a269eae143c9e279afc6608ce64b7d0
Committing directly to main let it diverge from origin/main, so the next
pull became a rebase with a conflict on this very file. Recording the rule
where every harness will read it keeps main fast-forwardable.
Assisted-by: Claude:claude-opus-4-8
profiles: add agent-context — one AGENTS.md for every harness2026-08-04T04:26:57ZHenry J. Websterhwebs@hwebs.info2026-08-04T04:26:57Zurn:sha1:6f135470d274daa3e7a7fec1cb8f36204abd90f0
There is no cross-vendor standard for agent instruction files: claude-code
reads CLAUDE.md, opencode and pi read AGENTS.md, each with its own global
path. Keep one canonical file (common/AGENTS.md) in this repo, ship it to
/etc/AGENTS.md, and symlink every harness's global context path to it via
tmpfiles for all normal users:
~/.claude/CLAUDE.md (claude-code 2.1.187 — no AGENTS.md support)
~/.config/opencode/AGENTS.md (opencode 1.15.10)
~/.pi/agent/AGENTS.md (pi 0.75.4)
Paths verified against the packaged binaries; see the profile header for
details and for the per-repo convention (AGENTS.md + CLAUDE.md symlink).
Assisted-by: claude-code:Fable 5
Restructure into a multi-machine flake and add the enzo laptop2026-07-30T15:38:54ZHenry J. Websterhwebs@hwebs.info2026-07-30T15:38:54Zurn:sha1:11ba75e40728e8b5735c9c7cefc7af1631c942af
Split the single-host config into a shared minimal base plus opt-in
profiles, and add a second machine (enzo laptop) alongside kusanagi.
- flake: add mkMachine helper; declare nixosConfigurations.kusanagi and
.enzo; add the disko input; move overlays per-machine.
- common/: minimal base only (boot, networking, tailscale, locale, nix
settings, neovim editor). Old configuration.nix/programs.nix removed.
- profiles/: coarse opt-in bundles (desktop, dev, apps). kusanagi imports
all three and stays byte-for-byte identical to the running system.
- machines/kusanagi/: all workstation-only config (ROCm, Scarlett audio,
optical-disc archiving, NAS mounts, kavita/immich/ollama); hardware
config moved here unchanged. User stays 'henz'.
- machines/enzo/: new laptop. Declarative LUKS+btrfs via disko
(LVM-on-LUKS, TPM2+PIN unlock, zram + encrypted swap for
suspend-then-hibernate); its own minimal niri desktop with
playback-only audio (no rtkit/jack); user 'hwebs'.
Assisted-by: Claude:claude-opus-4-8