WIP

README.md

@@ -2,8 +2,8 @@
 
 Flake-based NixOS config. Hosts: `jupiter` (ZimaBlade, NAS + services),
 `neptun` (netcup VPS: public reverse proxy, Authentik, headscale),
-`mercury` (Raspberry Pi 3B+, DNS/DHCP), `terra` (desktop), `mars` (on-site,
-single-purpose: Hermes Agent only).
+`mercury` (Raspberry Pi 3B+, DNS/DHCP), `terra` (desktop), `mars` (on-site:
+Hermes Agent, plus the LAN web apps luna hosts at `http://mars.sol/<name>/`).
 
 ## Structure
 
@@ -27,9 +27,12 @@ hosts/
     vm.nix                 #   VirtualBox test image (jupiter-vbox)
   neptun/                     # netcup public reverse proxy + tailnet node
     configuration.nix  disk-config.nix  hardware-configuration.nix  secrets.nix
-  mars/                     # on-site, single-purpose: Hermes Agent only
+  mars/                     # on-site: Hermes Agent + luna's LAN web apps
     configuration.nix  disk-config.nix  hardware-configuration.nix  secrets.nix
     hermes-agent.nix          #   Hermes Agent (moved here from jupiter)
+    luna-sites.nix            #   luna's apps: rootless podman + caddy, no nix edit per app
+    luna-sites-README.md      #   what luna is told (mounted into her container)
+    luna-sites-test.nix       #   VM test: nix build .#checks.x86_64-linux.luna-sites -L
 secrets/                   # age-encrypted sops files, one per host
 scripts/                   # deploy, edit_secrets
 ```