Mononoke NixOS config — QNAP TVS-473e, Forgejo, Matrix, Nextcloud, Hermes Agent. Managed by San (Hermes AI wolfpack).
- Nix 89.7%
- Python 8.8%
- Shell 1.5%
cloudflared tunnel routes HTTPS at edge, passes plain HTTP to coolwsd. With ssl.termination=false (default), coolwsd generates external-http zone with http:// URLs. Browser connects to http:// and fails silently. ssl.termination=true tells coolwsd the incoming proxy connection is HTTPS even though it receives HTTP, causing it to generate external-https zone with https:// URLs — matching what cloudflared actually delivers. Also updated comment to reflect the cloudflared routing reality. |
||
|---|---|---|
| .kilo/plans | ||
| data/index.bleve | ||
| nix | ||
| scripts | ||
| secrets | ||
| .gitignore | ||
| AGENTS.md | ||
| CHANGELOG.md | ||
| configuration.nix | ||
| flake.lock | ||
| flake.nix | ||
| hardware-configuration.nix | ||
| README.md | ||
MononokeNAS NixOS Configuration
This repository contains the declarative NixOS configuration for the Mononoke NAS system.
Structure
flake.nix— Flake entry pointconfiguration.nix— Main system configCHANGELOG.md— Release historysecrets/— Age-encrypted secrets (gitignored)nix/hosts/— Host-specific configsnix/modules/— Reusable NixOS modulesnix/services/— Service definitions
Quick Commands
sudo nixos-rebuild switch --flake .#mononoke
systemctl status hermes-agent
Agents
- Mononoke: Primary NAS agent (podman container)
- Ashitaka: TUI agent for NixOS ops
- Yoseba: VPS bastion