| Age | Commit message (Collapse) | Author |
|---|
|
Implement admin access control by introducing an email whitelist and
restricting admin-only pages. Added an `is_admin()` function to check
user permissions and modified admin queue status view to only allow
whitelisted users. Includes error handling for unauthorized access.
|
|
|
|
|
|
According to Claude, the nixos-unstable branch has more stuff in it's binary
cache than nixos-unstable-small. Idk, let's try it and find out.
|
|
This requires either setting up my mailserver or signing up with Mailgun, and
honestly I don't need either of those things right now. Just use the web
submission, I can add the email submission feature later.
|
|
This implements a working prototype of PodcastItLater. It basically just works
for a single user currently, but the articles are nice to listen to and this is
something that we can start to build with.
|
|
This is a guiding architecture doc for aider.
|
|
If there are no lints to fix, this should just exit without starting aider.
|
|
This runs a repl and calls mypy to typecheck the given target. Not only is
this *much* faster than using bild to typecheck stuff, but it also produces less
noise in the logs, so I can have aider call this and the output won't overwhelm
the llm.
|
|
|
|
This is actually useful because nix only shows the last 25 log lines, so I'd
like to know how deep the problems go with a summary.
|
|
The colored output is not decoded by the nix log accumulator, so you just get
these control characters. Get rid of them for more readable output.
|
|
This took quite a bit of work to package, and it's not a perfect package, but I
think it will do to get Biz/Astrologer.py working.
|
|
This needs to be a separate mailbox so I don't get a bunch of dmarc reports in
my inbox.
|
|
I think storage is not a problem, and not having all the transactions means I
might not get the correct balance if the wallet has really old transactions (I
think).
|
|
This just fixes my lint errors for me which is awesome. Very useful.
|
|
This just fixes my lint errors for me which is awesome. Very useful.
|
|
Introduce a new systemd service that pulls the latest open-webui
Docker image and restarts the associated container. This ensures that
the application is always running the most recent version. Additionally,
a timer is added to schedule this update process to occur every Sunday
at 3 AM, automating the maintenance of the service without manual
intervention. This change enhances the reliability and freshness of
the application deployment.
|
|
This domain is not actually useful.
|
|
I had to update nixos-unstable-small and nixos-24_11 and disable a bunch of
tests, and then re-compile like the whole world, but aider is actually working,
finally.
|
|
This is so I don't have to specify it at the command line anymore, which is
becoming cumbersome.
|
|
Introduce a new container definition for the Open Web UI AI Chat service
in `OpenWebui.nix`, specifying its Docker image, volume, and environment
variables. This change includes the addition of a new port in `Ports.nix`
to facilitate communication with the service.
Furthermore, configure Nginx to serve the AI Chat application by adding
a new virtual host entry in `Web.nix`, ensuring SSL is enforced and
websocket support is enabled. This setup allows for a seamless
integration of the AI Chat service into the existing infrastructure,
improving accessibility and security.
|
|
This change removes "mail.bensima.com" from the list of allowed hosts
in the Web.nix configuration. The removal is likely due to a decision
to restrict access or because the mail service is no longer in use.
This helps to tighten security and ensure that only necessary hosts
are permitted.
|
|
This was the old username.
|
|
Not sure if this will help but I figure one more substituter can't hurt.
|
|
Basically every time I try to run CI it times out, so just disable timeout on CI
jobs for now.
|
|
Also improves the Example.py a bit with a real test case and example of how to
use Omni.Test.
|
|
I have this script I have to run on startup that sets these interactively, which
is fine, but I haven't changed this script in like 3 years so lets just make it
permanent at this point.
|
|
obs-do is a command line tool fro controlling obs over a socket, I plan to use
it for keyboard-driven automations. Helvum is just not necessary, qpwgraph is
better anyway.
|
|
I think this was causing feedback from my microphone.
|
|
This will have to evolve over time. Also I'm sending it to my iCloud address so
I can read it on my phone as well.
|
|
Doh. Can't believe I let this go for so long, what a dumb mistake.
|
|
This does all of the audio routing stuff that I need to combine my mic audio
with application audio into a virtual source that meeting software or OBS can
select as an input source. This way I can share what I'm listening to or
watching in a meeting.
I think the routes are not quite correct, and I'm not sure that the
`context.exec` is even a reliable way to setup the routes. I've also been using
`qpwgraph` to visually setup the routes, and that's helpful. I'll tweak this as
needed over time.
|
|
This is needed to use the OBS virtual camera thing.
|
|
Pydantic-ai is an agent framework that seems simple and good: well-typed with
pydantic, tool usage is just an `@tool` decorator on a function, and so
on. While building these I realized there were some deps they needed that were
already in nixpkgs unstable, so I just switched to that instead of trying to
backport all the versions and stuff.
|
|
This adds a kernel module that allows the virtual camera to work.
https://nixos.wiki/wiki/OBS_Studio
|
|
I need this to make my yubikey work.
|
|
This isn't an agent yet but it shows the power of just `llm` - I'll need to work
on the full agent framework next.
|
|
This is useful for doing `mktemp --tmpdir`, especially during testing, so all of
the tmpdirs go into a nearby location that I can wipe when I'm done.
|
|
I intend this to be a utility that agents or other automated jobs can use to
send emails. EmailAgent isn't the right name... its really more of an LLM tool,
or it could be if the right interface is put on top of it. Anyway, this works
for now, I'll think about how to make it better later.
|
|
Trying to learn about dmarc and improve my mail setup some more, I also added
the `rua` to my DNS entry so hopefully I get some reports.
|
|
I guess GPT-4 or whatever assistant I used got the wrong syntax the first time.
|
|
This moves syncthing from the cloud only, and onto Beryllium as well. Also it
gets rid of the nginx config because I don't really need access to it remotely
like that.
|
|
I'm honestly not sure what the correct call is here, I guess what I had was
Python 2 syntax? And Python 3 doesn't need arguments? Anyway this broke during
one of the nixpkgs updates and this seems to have fixed it.
|
|
This commit configures Nginx as a reverse proxy for the Syncthing web
interface, making it accessible via syncthing.bensima.com with SSL
encryption. The configuration includes proper header forwarding and
WebSocket support for the Syncthing GUI.
Additionally, this commit explicitly opens the required firewall ports
for Syncthing's operation, including the GUI port, sync port (22000),
and discovery broadcast port (21027).
|
|
Moved Syncthing configuration from Lithium's configuration file to a
dedicated module in Cloud directory. This change improves organization
by placing the service with other cloud-related configurations.
The new module includes comprehensive Syncthing setup with proper user
configuration, firewall rules, and default settings. It's now imported
in Cloud.nix to make it available to the cloud infrastructure.
|
|
Having this in its own file makes it easier to work on. Then I was able to
figure out (with lots of debugging and trial+error with Claude) the actual
permissions settings that result in a shared calendar. It's very fiddly because
it is matching on usernames and directories using regex, and I think it's
order-dependent as well.
|
|
This does the full transition: web server, mail server, xmpp. I expect some
disruption, but hopefully this is everything and it just switches over without
any problem.
|
|
I prefer et over mosh, so I tend to reach for it. Might as well just enable it
everywhere, at the Os/Base.nix level rather than individual systems.
|
|
Added header checks for optaltechtld.com domain to block incoming spam
emails claiming to be from MetaMask. The configuration includes checks
for Received, From, Return-Path, and Sender headers containing this
domain, rejecting any matching messages at the mail server level.
|
