docs: restore USB installer and encryption TODOs 📝

Sunken-ship is not actually encrypted (plain ext4). USB installer
workflow still needs refinement.
This commit is contained in:
DannyDannyDanny 2026-03-31 10:10:04 +02:00
parent 42462f57a2
commit 2c9cf1e8b4

View file

@ -1,3 +1,5 @@
# TODO
- [ ] **Tailscale**: Investigate setting up Tailscale mesh VPN across devices (sunken-ship, Mac, iPhone). Would allow SSH, AirPlay, and Claude Code remote sessions from anywhere. Free tier, ~5 lines of NixOS config. Needs Tailscale app on Mac + iPhone. See: https://tailscale.com
- [ ] **USB installer**: Refine the installer USB workflow (`scripts/nixos-server-install.sh`, `disko-server.nix`, `installer-iso.nix`). Goal: boot USB, provide hostname, get a LUKS-encrypted NixOS server with WiFi ready to go.
- [ ] **Encrypt sunken-ship**: Currently running on plain ext4. Needs reinstall with LUKS via disko, or in-place migration (backup, reformat, restore).
- [ ] **Tailscale**: Investigate setting up Tailscale mesh VPN across devices (sunken-ship, Mac, iPhone). Would allow SSH, AirPlay, and Claude Code remote sessions from anywhere. Free tier, ~5 lines of NixOS config. See: https://tailscale.com