vaultwarden pin, backups, deploy-rs, image pins, nixvim standalone #46

Merged

abhay merged 12 commits from vaultwarden-backup-deployrs into main

2026-08-15 12:21:30 +05:30

abhay commented

2026-08-15 12:20:02 +05:30

Owner

Changes

Vaultwarden: pinned to 1.37.1@sha256 (fixes Bitwarden 2026.7+ client)
Backups: nightly /srv/ backup services for homelab-one + devil
deploy-rs: all 4 hosts configured with magic rollback
Image pins: all 22 container images pinned with SHA256 digests
WSL: removed stale WSL config
nixvim: migrated to standalone forgejo repo (git.iamabhay.fyi/abhay/nixvim-config)
tea: CLI tool added to desktop packages

## Changes - **Vaultwarden**: pinned to 1.37.1@sha256 (fixes Bitwarden 2026.7+ client) - **Backups**: nightly /srv/ backup services for homelab-one + devil - **deploy-rs**: all 4 hosts configured with magic rollback - **Image pins**: all 22 container images pinned with SHA256 digests - **WSL**: removed stale WSL config - **nixvim**: migrated to standalone forgejo repo (git.iamabhay.fyi/abhay/nixvim-config) - **tea**: CLI tool added to desktop packages

abhay added 12 commits

2026-08-15 12:20:02 +05:30

Add forgejo-runner module for homelab-one, daredevil, devil 8beb2eb3e0

Fix forgejo-runner sops paths to match nested YAML structure 5c6dcbcb7c

Fix forgejo-runner: add sopsFile for service-secrets, add network wants f6908b5bd4

Fix forgejo-runner group: users (100) not 1000 5d14b8898b

Fix forgejo-runner: set sops secret owner to 1000 so service user can read cd015af502

Fix forgejo-runner: owner=abhay, fix nixvim warning, fix tmpfiles group 23b3f92ca7

Fix forgejo-runner PATH: add bash, coreutils for host mode jobs 447018be91

feat: vaultwarden pin, backups, deploy-rs, remove open-webui a59bc27423

- Pin vaultwarden to 1.37.1@sha256:... (fixes Bitwarden 2026.7+ client)
- Add nightly /srv/ backups on homelab-one (vaultwarden, forgejo, grafana)
- Add daily /srv/ backups on devil (immich pg_dump, jellyfin, navidrome)
- Add deploy-rs for all 4 hosts with magic rollback
- Remove Open WebUI (deprecated)
- Fix devil missing nixvim module import

feat: pin all container images with SHA256 digests 53429e0233

- Pin 22 container images across 10 service modules
- Upgrade immich-server, immich-ml, postgres, valkey within v3
- Pin all :latest tags to current digests
- Pin forgejo:15, whisparr:v3, home-assistant:stable
- Remove unused immichVersion variable
- Fix deploy app meta attribute warning

chore: remove WSL config (unused) d9fb60eec5

feat: use standalone nixvim-config flake from forgejo 958678e1df

- Replace local modules/neovim/ import with nixvim-config flake input
- Add tea CLI to desktop packages
- nixvim config now lives at git.iamabhay.fyi/abhay/nixvim-config
- Single source of truth for both infra and WSL

chore: remove stale modules/neovim/ (now sourced from nixvim-config flake) 81f8d04bec