darman/homelab
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Trim comments across configs and services

Browse Source 
Shorten verbose multi-paragraph comments to essentials, and drop a
stale claim in common.nix that jupiter kept its own copy of the base
config (it now imports common.nix directly).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
darman
2026-07-20 06:04:27 +02:00
co-authored by Claude Sonnet 5
parent c4702b577c
commit 4679afa505
14 changed files with 71 additions and 116 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/headplane.nix
+10 -13
View File
@@ -1,21 +1,18 @@
{ config, ... }:
# Headplane — web UI for headscale (services/headscale.nix; must be enabled
# first). Runs as headscale's own OS user via "native process integration",
# so it can restart headscale when settings change from the UI.
# first). Runs as headscale's own OS user so it can restart headscale when
# settings change from the UI.
#
# Served at vpn.mgaction.town/admin (path-routed alongside headscale itself
# by Caddy — see hosts/neptun/configuration.nix), not its own subdomain.
# base_url is the site root WITHOUT the /admin prefix — Headplane appends
# that itself, including for the OIDC callback (.../admin/oidc/callback).
# Served at vpn.mgaction.town/admin (path-routed alongside headscale itself,
# see hosts/neptun/configuration.nix). base_url is the site root WITHOUT the
# /admin prefix — Headplane appends that itself, including for the OIDC
# callback.
#
# Auth is Zitadel (services/zitadel.nix), via OIDC. client_id isn't secret
# (it's a public identifier) so it's a plain string here, but it — along
# with client_secret and the headscale API key — can't be known until
# Zitadel/headscale are actually deployed and running. Until then these are
# placeholders; direct headscale-API-key login (disable_api_key_login stays
# false) still works as a fallback so this doesn't lock anyone out. Once
# live:
# Auth is Zitadel (services/zitadel.nix) via OIDC. client_id, client_secret,
# and the headscale API key can't be known until Zitadel/headscale are
# actually deployed, so they're placeholders below; direct API-key login
# still works as a fallback until then. Once live:
# 1. In Zitadel: create a project + a Web application for Headplane, with
# redirect URI https://vpn.mgaction.town/admin/oidc/callback. Copy the
# generated client ID into oidc.client_id below.