superconfig/machines/coaxmetal/ at b3a2bea7a480fce12141c4d8310d2e52abddcfee · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / machines / coaxmetal

1 folder 7 files

at b3a2bea7a480fce12141c4d8310d2e52abddcfee

Hermes tools.hermes-voice: web app manifest, icons, assetlinks.json 2d ago

Update facts/secrets for service mycelium in machine coaxmetal

2 years ago

configs.sigexec: remove

6 days ago

machines.coaxmetal: add facter.json

2 years ago

hermes-voice.nix

tools.hermes-voice: web app manifest, icons, assetlinks.json The voice page gets a web app manifest (standalone, colors of style.css) and 192/512 px icons, drawn with imagemagick at build time (date chunks excluded so the PNGs are reproducible). Both are needed for the page to run as a Trusted Web Activity in the Android wrapper. /.well-known/assetlinks.json delegates handle_all_urls to the wrapper (us.lassul.assist) with the SHA-256 fingerprint of its signing certificate, so Chrome verifies the app and drops the URL bar. Like the static files it is served without the access token, and neoprism already proxies every path of assist.lassul.us. The signing key comes from the new hermes-voice-android-signing generator on coaxmetal: a PKCS12 keystore and its password (secret, deploy = false since only signing reads them) and the fingerprint as a public file. The package reads the fingerprint from vars/ with pathExists like the nix-cache key, so evaluation works before the generator ran; assetlinks.json is then simply missing (404), which is why the static routes now answer 404 for files not in the static dir.

2 days ago

machines.coaxmetal.hermes: hermes-notify through the gateway webhook, regenerate hermes-env on script changes

4 days ago

machines.coaxmetal: remove deprecated amdvlk

11 months ago

treewide: nix fmt

2 years ago

configs: rename from 2configs

2 weeks ago