alexion/dotfiles
Archived
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(reverse-proxy): add Pikachu reverse proxy guest #47

Merged
alexion merged 2 commits from feat/pikachu-reverse-proxy into main 2026-08-17 08:36:01 -04:00
Conversation 0 Commits 2 Files Changed 8 +680 -395
alexion commented 2026-08-16 22:35:14 -04:00
Owner
Copy Link

Summary

  • Add modules.reverse-proxy as the NixOS Nginx/ACME route actualizer.
  • Add reusable reverse-proxy route helpers in lib/reverse-proxy-routes.nix and generic guests.<name>.reverseProxy boilerplate from the shared guest abstraction.
  • Split guest machinery out of lib/default.nix into lib/guests.nix.
  • Add the Pikachu reverse-proxy guest with explicit VLAN 20 MAC and temporary passthrough routes to Pichu/NPM.
  • Add Actual Budget's guest-local reverse-proxy route and route behavior checks.

Verification

  • nix build .#checks.x86_64-linux.reverse-proxy-basic-route --no-link
  • nix build .#checks.x86_64-linux.reverse-proxy-actualbudget-guest-route --no-link
  • nix build .#checks.x86_64-linux.reverse-proxy-secondary-path-requires-root --no-link
  • nix eval .#nixosConfigurations.pikachu.config.warnings
  • nix build .#nixosConfigurations.pikachu.config.system.build.toplevel --no-link
  • nix flake check

Review

Independent review found no blocking findings.
Non-blocking notes: live ACME/proxy behavior still needs deployment validation, and lib/guests.nix remains a large but improved guest abstraction that may deserve a further split if it grows again.

## Summary - Add `modules.reverse-proxy` as the NixOS Nginx/ACME route actualizer. - Add reusable reverse-proxy route helpers in `lib/reverse-proxy-routes.nix` and generic `guests.<name>.reverseProxy` boilerplate from the shared guest abstraction. - Split guest machinery out of `lib/default.nix` into `lib/guests.nix`. - Add the Pikachu `reverse-proxy` guest with explicit VLAN 20 MAC and temporary passthrough routes to Pichu/NPM. - Add Actual Budget's guest-local reverse-proxy route and route behavior checks. ## Verification - `nix build .#checks.x86_64-linux.reverse-proxy-basic-route --no-link` - `nix build .#checks.x86_64-linux.reverse-proxy-actualbudget-guest-route --no-link` - `nix build .#checks.x86_64-linux.reverse-proxy-secondary-path-requires-root --no-link` - `nix eval .#nixosConfigurations.pikachu.config.warnings` - `nix build .#nixosConfigurations.pikachu.config.system.build.toplevel --no-link` - `nix flake check` ## Review Independent review found no blocking findings. Non-blocking notes: live ACME/proxy behavior still needs deployment validation, and `lib/guests.nix` remains a large but improved guest abstraction that may deserve a further split if it grows again.
alexion added 2 commits 2026-08-17 00:02:02 -04:00
refactor(lib): split guest helpers d6c60e4fa1
feat(reverse-proxy): add Pikachu reverse proxy guest 114f0445cf
alexion force-pushed feat/pikachu-reverse-proxy from 323709062a to 114f0445cf 2026-08-17 00:02:02 -04:00 Compare
alexion merged commit 114f0445cf into main 2026-08-17 08:36:01 -04:00
alexion deleted branch feat/pikachu-reverse-proxy 2026-08-17 08:36:01 -04:00
This repo is archived. You cannot comment on pull requests.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
alexion
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: alexion/dotfiles#47
Delete Branch "feat/pikachu-reverse-proxy"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?