dotfiles/nixos/hosts
Danny 8a91f3db88 phantom-ship + vps-relay: declare escape-hormuz service + vhost
Hara (openclaw) shipped escape_hormuz imperatively — service runs but
firewall + Caddy vhost weren't declared, so the public URL didn't
resolve and the firewall rule would've been wiped on next
dotfiles-rebuild. Bring it under nix:

phantom-ship.nix
  - systemd.services.escape-hormuz on port 8090, binds :: for ZT
  - 8090 added to zt+ allowedTCPPorts
  - tmpfiles entry for /home/danny/.local/share/escape_hormuz

vps-relay.nix
  - Caddy vhost escapehormuz.dannydannydanny.me → ZT [::]:8090
2026-05-05 09:40:11 +02:00
..
daniel-macbook-air.nix feat(nix): zerotier overlay via clan inventory + mac ZT client 🕸️ 2026-04-19 14:43:29 +02:00
phantom-ship-hardware.nix fix: restore bootloader config in phantom-ship hardware nix 🥾 2026-03-31 15:33:23 +02:00
phantom-ship.nix phantom-ship + vps-relay: declare escape-hormuz service + vhost 2026-05-05 09:40:11 +02:00
server-install.nix Set efiSysMountPoint = /boot so systemd-boot install succeeds with disko 2026-03-08 18:38:26 +01:00
sunken-ship-hardware.nix Rename nixos-server to sunken-ship 2026-03-01 12:44:28 +01:00
sunken-ship.nix feat(servers): declare SSH authorizedKeys + root mac admin trust 🔑 2026-04-25 13:30:40 +02:00
vps-relay.nix phantom-ship + vps-relay: declare escape-hormuz service + vhost 2026-05-05 09:40:11 +02:00
wsl.nix refactor(wsl): move user packages to home-manager 🎨 2026-03-30 18:03:11 +02:00