m3tam3re/nixos-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update opencode config, secrets, tailscale, and agents input

Browse Source 
- opencode: remove deprecated google_auth, add git_master config,
  experimental truncation, use glm-4.6v for multimodal-looker,
  upgrade categories to glm-5, remove opencode-memory plugin
- m3-atlas: add ref/exa/outline/basecamp secret declarations
- m3-kratos: enable tailscale with ssh and reset flags
- agents: switch back to remote git input
This commit is contained in:
m3tm3re
2026-02-17 08:54:13 +01:00
parent 87baf2377f
commit 8ead26a791
5 changed files with 58 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
flake.lock generated
View File

@@ -24,11 +24,11 @@
"agents": { "agents": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1770836286, "lastModified": 1771054446,
"narHash": "sha256-8vdozOXwlpOjSRFu6H+HnGByGCnBV+ggX4uIRHUfiaY=", "narHash": "sha256-0IispDJYxOtWn1usZh6AR4nF3ouCscXDxBzgwAVjhx0=",
"ref": "refs/heads/master", "ref": "refs/heads/master",
"rev": "94b89da5335da059c75bccc686be91a923726075", "rev": "923e2f1eaad96f440bbb76d07bb66ac4f5b4460a",
"revCount": 48, "revCount": 55,
"type": "git", "type": "git",
"url": "https://code.m3ta.dev/m3tam3re/AGENTS" "url": "https://code.m3ta.dev/m3tam3re/AGENTS"
}, },

30
home/features/coding/opencode.nix
View File

@@ -22,7 +22,7 @@
enable = true; enable = true;
settings = { settings = {
theme = "opencode"; theme = "opencode";
plugin = ["oh-my-opencode" "opencode-antigravity-auth@beta" "opencode-memory"]; plugin = ["oh-my-opencode" "opencode-antigravity-auth@beta"];
agent = agent =
builtins.fromJSON builtins.fromJSON
(builtins.readFile "${inputs.agents}/agents/agents.json"); (builtins.readFile "${inputs.agents}/agents/agents.json");
@@ -211,7 +211,7 @@
home.file.".config/opencode/oh-my-opencode.json".text = builtins.toJSON { home.file.".config/opencode/oh-my-opencode.json".text = builtins.toJSON {
"$schema" = "https://raw.githubusercontent.com/code-yeongyu/oh-my-opencode/master/assets/oh-my-opencode.schema.json"; "$schema" = "https://raw.githubusercontent.com/code-yeongyu/oh-my-opencode/master/assets/oh-my-opencode.schema.json";
google_auth = false; # google_auth removed - use opencode-antigravity-auth plugin instead (already in plugin array)
agents = { agents = {
sisyphus = { sisyphus = {
model = "zai-coding-plan/glm-5"; model = "zai-coding-plan/glm-5";
@@ -226,7 +226,7 @@
model = "zai-coding-plan/glm-4.5-air"; model = "zai-coding-plan/glm-4.5-air";
}; };
multimodal-looker = { multimodal-looker = {
model = "zai-coding-plan/glm-5"; model = "zai-coding-plan/glm-4.6v";
}; };
prometheus = { prometheus = {
model = "zai-coding-plan/glm-5"; model = "zai-coding-plan/glm-5";
@@ -243,28 +243,36 @@
}; };
categories = { categories = {
visual-engineering = { visual-engineering = {
model = "zai-coding-plan/glm-4.7"; model = "zai-coding-plan/glm-5";
}; };
ultrabrain = { ultrabrain = {
model = "zai-coding-plan/glm-4.7"; model = "zai-coding-plan/glm-5";
}; };
artistry = { artistry = {
model = "zai-coding-plan/glm-4.7"; model = "zai-coding-plan/glm-5";
}; };
quick = { quick = {
model = "zai-coding-plan/glm-4.7"; model = "zai-coding-plan/glm-5";
}; };
unspecified-low = { unspecified-low = {
model = "zai-coding-plan/glm-4.7"; model = "zai-coding-plan/glm-5";
}; };
unspecified-high = { unspecified-high = {
model = "zai-coding-plan/glm-4.7"; model = "zai-coding-plan/glm-5";
}; };
writing = { writing = {
model = "zai-coding-plan/glm-4.7"; model = "zai-coding-plan/glm-5";
}; };
}; };
disabled_mcps = ["context7" "websearch"]; disabled_mcps = ["context7" "websearch"];
disabled_hooks = ["comment-checker"]; #Temporarily added to address bug in 3.5.1 (MCP) disabled_hooks = ["comment-checker"];
git_master = {
commit_footer = false;
include_co_authored_by = false;
};
experimental = {
truncate_all_tool_outputs = true;
aggressive_truncation = false;
};
}; };
} }

42
hosts/m3-atlas/secrets.nix
View File

@@ -1,25 +1,25 @@
{ {
age = { age = {
secrets = { secrets = {
baserow-env = { file = ../../secrets/baserow-env.age; }; baserow-env = {file = ../../secrets/baserow-env.age;};
ghost-env = { file = ../../secrets/ghost-env.age; }; ghost-env = {file = ../../secrets/ghost-env.age;};
kestra-config = { kestra-config = {
file = ../../secrets/kestra-config.age; file = ../../secrets/kestra-config.age;
mode = "644"; mode = "644";
}; };
kestra-env = { file = ../../secrets/kestra-env.age; }; kestra-env = {file = ../../secrets/kestra-env.age;};
littlelink-m3tam3re = { file = ../../secrets/littlelink-m3tam3re.age; }; littlelink-m3tam3re = {file = ../../secrets/littlelink-m3tam3re.age;};
minio-root-cred = { file = ../../secrets/minio-root-cred.age; }; minio-root-cred = {file = ../../secrets/minio-root-cred.age;};
n8n-env = { file = ../../secrets/n8n-env.age; }; n8n-env = {file = ../../secrets/n8n-env.age;};
paperless-key = { file = ../../secrets/paperless-key.age; }; paperless-key = {file = ../../secrets/paperless-key.age;};
restreamer-env = { file = ../../secrets/restreamer-env.age; }; restreamer-env = {file = ../../secrets/restreamer-env.age;};
searx = { file = ../../secrets/searx.age; }; searx = {file = ../../secrets/searx.age;};
tailscale-key = { file = ../../secrets/tailscale-key.age; }; tailscale-key = {file = ../../secrets/tailscale-key.age;};
traefik = { traefik = {
file = ../../secrets/traefik.age; file = ../../secrets/traefik.age;
owner = "traefik"; owner = "traefik";
}; };
vaultwarden-env = { file = ../../secrets/vaultwarden-env.age; }; vaultwarden-env = {file = ../../secrets/vaultwarden-env.age;};
m3tam3re-secrets = { m3tam3re-secrets = {
file = ../../secrets/m3tam3re-secrets.age; file = ../../secrets/m3tam3re-secrets.age;
owner = "m3tam3re"; owner = "m3tam3re";
@@ -30,6 +30,26 @@
owner = "gitea-runner"; owner = "gitea-runner";
group = "gitea-runner"; group = "gitea-runner";
}; };
ref-key = {
file = ../../secrets/ref-key.age;
owner = "m3tam3re";
};
exa-key = {
file = ../../secrets/exa-key.age;
owner = "m3tam3re";
};
outline-key = {
file = ../../secrets/outline-key.age;
owner = "m3tam3re";
};
basecamp-client-id = {
file = ../../secrets/basecamp-client-id.age;
owner = "m3tam3re";
};
basecamp-client-secret = {
file = ../../secrets/basecamp-client-secret.age;
owner = "m3tam3re";
};
}; };
}; };
} }

2
hosts/m3-kratos/secrets.nix
View File

@@ -5,7 +5,7 @@
file = ../../secrets/anytype-key.age; file = ../../secrets/anytype-key.age;
owner = "m3tam3re"; owner = "m3tam3re";
}; };
tailscale-key = { file = ../../secrets/tailscale-key.age; }; tailscale-key = {file = ../../secrets/tailscale-key.age;};
wg-DE = { wg-DE = {
file = ../../secrets/wg-DE.age; file = ../../secrets/wg-DE.age;
path = "/etc/wireguard/DE.conf"; path = "/etc/wireguard/DE.conf";

5
hosts/m3-kratos/services/tailscale.nix
View File

@@ -1,12 +1,13 @@
{config, ...}: { {config, ...}: {
services.tailscale = { services.tailscale = {
enable = false; enable = true;
authKeyFile = config.age.secrets.tailscale-key.path; authKeyFile = config.age.secrets.tailscale-key.path;
useRoutingFeatures = "both"; useRoutingFeatures = "both";
extraUpFlags = [ extraUpFlags = [
"--login-server=https://va.m3tam3re.com" "--login-server=https://va.m3tam3re.com"
"--accept-routes" "--accept-routes"
"--exit-node-allow-lan-access" "--ssh"
"--reset"
]; ];
}; };
} }