desktop-flake -

	Commit message (Collapse)	Author	Age	Files
*	Propose fixing the SSH authorized-key spec drift	Tom van der Lee	2026-09-18	4
\| \| \| \| \| \| \| \| \|	Planning artifacts only. The developer-environment capability's SSH requirement never stated that an authorized key must be provisioned -- the real gap that locked out the floep host after its first rebuild. The code fix already shipped; this change brings the spec in line with it. design.md skipped (none of its trigger conditions apply to a documentation-only correction).
*	Archive four completed changes, sync main specs	Tom van der Lee	2026-09-18	23
\| \| \| \| \| \| \| \| \| \| \|	add-nix-flake-bootstrap, add-host-bootstrap-script, add-dotfiles-stow-bootstrap, and add-developer-environment all had every task complete (verified via a real nix flake check and a real NixOS host build). Archived in dependency order so the two changes sharing the nix-flake-bootstrap capability merged additively. Main specs now exist for the first time: nix-flake-bootstrap (10 requirements), dotfiles-management (4), developer-environment (4). add-gnome-desktop remains active (not yet implemented).
*	Remove unused authorized SSH key (SHA256:Si2Y/8xh...)	Tom van der Lee	2026-09-18	1
\|
*	Record the SSH lockout correction in add-developer-environment tasks	Tom van der Lee	2026-09-18	1
\|
*	Provision authorized SSH key for tom, fixing the lockout	Tom van der Lee	2026-09-18	1
\| \| \| \| \| \| \| \|	services.openssh.settings.PasswordAuthentication = false was enabled with no authorized key ever provisioned for the tom user, locking out all SSH access on the first real host (floep). Adds the public keys from https://github.com/tomvanderlee.keys as static literals -- a one-time fetch, not a build-time network dependency, to stay pure.
*	Fix invalid home-manager.useUserHomeDirectory option in mkNixos	Tom van der Lee	2026-09-18	2
\| \| \| \| \| \| \| \|	home-manager.useUserHomeDirectory was never a real option -- a mistake that slipped through because this file was never actually evaluated until a live nixos-rebuild switch surfaced it today. Corrected to useUserPackages, the standard option that pairs with useGlobalPkgs for NixOS+home-manager integration (also what Nix's own error suggested).
*	Commit flake.lock	Tom van der Lee	2026-09-18	1
\| \| \| \| \| \| \| \|	Pins nixpkgs (nixos-unstable) and home-manager to the revisions resolved by the first successful nix flake check, run on a Linux machine since Nix still isn't installed on this Mac. Without this committed, every future check/build would silently re-resolve input versions instead of using pinned ones.
*	Fix nix flake check warnings; record first successful check	Tom van der Lee	2026-09-18	5
\| \| \| \| \| \| \| \|	Rename nixfmt-rfc-style to its current canonical name nixfmt, and add meta.description to the bootstrap-host app to clear its warning. Records the first successful `nix flake check` run (on a Linux machine with Nix, since this Mac still doesn't have it) across all four implemented changes so far — no errors, only these now-fixed warnings.
*	Propose GNOME desktop for NixOS hosts	Tom van der Lee	2026-09-17	5
\| \| \| \| \| \| \|	Planning artifacts only (proposal, spec, design, tasks) — GDM+GNOME, NetworkManager, PipeWire, and CUPS+Avahi printing, applied unconditionally to every NixOS host via modules/nixos/common.nix. Not yet implemented.
*	Add most-used dev tools, sshd/firewall, bash+liquidprompt shell	Tom van der Lee	2026-09-17	10
\| \| \| \| \| \| \| \| \| \|	modules/home/dev-tools.nix provisions the developer's evidenced most- used CLI/client tooling (gh, tmux, htop, yq-go, tree-sitter, docker, docker-compose, kubectl, awscli2). modules/home/shell.nix drops zsh/ starship/direnv in favor of bash + liquidprompt, both left entirely to the user's own dotfiles for config since home-manager can't own ~/.bashrc without conflicting with it. modules/nixos/common.nix adds sshd (key-only auth) and a firewall baseline for future NixOS hosts.
*	Add automatic dotfiles clone + stow	Tom van der Lee	2026-09-17	12
\| \| \| \| \| \| \| \| \| \|	modules/home/dotfiles.nix clones ~/dotfiles on activation (only if not already present) and stows every top-level package directory into $HOME, independently per package so one conflict doesn't block the rest. Removes home-manager's own git config management in favor of letting the stowed ~/dotfiles/git/.gitconfig own it, and adds homeConfigurations."tom@darwin" so the feature is usable on this Mac. users/tom.nix now points home.dotfiles.repoUrl at the real repo.
*	Add scripted host bootstrapping with directory-driven discovery	Tom van der Lee	2026-09-17	10
\| \| \| \| \| \| \| \| \| \|	nixosConfigurations now auto-discovers hosts/<name>/ directories instead of a hand-maintained attrset, and scripts/bootstrap-host.sh (exposed as `nix run .#bootstrap-host`) scaffolds a new host from the template. The script always requires an explicit --root for hardware-configuration.nix so a live-installer run can never read the live ISO's own /etc/nixos by accident. Also records the belated task-11.1 checkbox update for the prior change's already-committed state.
*	Add cross-platform Nix flake bootstrap	Tom van der Lee	2026-09-17	35
	Adds a flake providing shared modules for NixOS and standalone home-manager, a copyable NixOS host template, and the OpenSpec tooling/change scaffolding used to plan this work.