nixcfg/systems/x86_64-linux
Harald Hoyer 12c25bcde8 refactor(attic): move headscale from mx to attic
Headscale is moving off the mx mailserver onto the attic cache host.
The new public URL is https://headscale.hoyer.world.

- Switch from useACMEHost = "hoyer.xyz" (mx wildcard DNS-01) to
  enableACME = true, since attic only has HTTP-01 configured.
- Move headscale port to 8081 to avoid clashing with atticd on 8080.
- Drop the 192.168.178.254 LAN nameserver from dns.nameservers.global,
  which isn't reachable from the Hetzner instance.

Operational steps still required on attic:
- Provision /var/lib/headscale/client_secret
- Migrate the headscale state DB from mx
- Point headscale.hoyer.world DNS at attic
- Update the Nextcloud OIDC client's redirect URI
2026-05-13 08:42:46 +02:00
..
amd refactor(opencode): extract serve service into shared NixOS module 2026-05-05 13:43:27 +02:00
attic refactor(attic): move headscale from mx to attic 2026-05-13 08:42:46 +02:00
halo feat(halo): llama-server-27B-MTP.nix 2026-05-12 16:16:15 +02:00
mx refactor(attic): move headscale from mx to attic 2026-05-13 08:42:46 +02:00
nixtee1 refactor(nix): extract common system configs into reusable modules 2026-01-30 10:42:09 +01:00
sgx refactor(opencode): extract serve service into shared NixOS module 2026-05-05 13:43:27 +02:00
t15 refactor(nix): extract common system configs into reusable modules 2026-01-30 10:42:09 +01:00
x1 chore: nix fmt 2026-05-03 14:57:49 +02:00