From 2c9cf1e8b49cc93ae85f9c169a4c2e8f2ade95d7 Mon Sep 17 00:00:00 2001 From: DannyDannyDanny Date: Tue, 31 Mar 2026 10:10:04 +0200 Subject: [PATCH] docs: restore USB installer and encryption TODOs :memo: Sunken-ship is not actually encrypted (plain ext4). USB installer workflow still needs refinement. --- TODO.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/TODO.md b/TODO.md index 164e285..ec4798e 100644 --- a/TODO.md +++ b/TODO.md @@ -1,3 +1,5 @@ # TODO -- [ ] **Tailscale**: Investigate setting up Tailscale mesh VPN across devices (sunken-ship, Mac, iPhone). Would allow SSH, AirPlay, and Claude Code remote sessions from anywhere. Free tier, ~5 lines of NixOS config. Needs Tailscale app on Mac + iPhone. See: https://tailscale.com +- [ ] **USB installer**: Refine the installer USB workflow (`scripts/nixos-server-install.sh`, `disko-server.nix`, `installer-iso.nix`). Goal: boot USB, provide hostname, get a LUKS-encrypted NixOS server with WiFi ready to go. +- [ ] **Encrypt sunken-ship**: Currently running on plain ext4. Needs reinstall with LUKS via disko, or in-place migration (backup, reformat, restore). +- [ ] **Tailscale**: Investigate setting up Tailscale mesh VPN across devices (sunken-ship, Mac, iPhone). Would allow SSH, AirPlay, and Claude Code remote sessions from anywhere. Free tier, ~5 lines of NixOS config. See: https://tailscale.com