src.nth.io/

summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
3 daysUpdate all references from doorbell-viewport to unifi-protect-viewportLuke Hoersten8-133/+133
3 daysRename doorbell-viewport role to unifi-protect-viewportLuke Hoersten8-0/+0
3 daysReplace real camera ID with placeholder in READMELuke Hoersten1-1/+1
5 daysMinor daemon cleanup: drop inspect shim, module-level SSL ctx, rename ws_headersLuke Hoersten1-14/+6
5 daysFurther simplify doorbell-viewport daemonLuke Hoersten1-20/+13
- Flatten DisplayController: remove _set() middle layer - Inline on_ring() into _handle_protect_event (was a 2-line wrapper) - Collapse triggered flag in touch monitor to single boolean expression
6 daysRemove vcgencmd display backend, simplify DisplayControllerLuke Hoersten5-127/+54
Always use sysfs backlight. vcgencmd resets DRM planes under fkms making it incompatible with the drm video output. Removes libraspberrypi-bin dependency and panel/vcgencmd dead code.
6 daysRemove warm prebuffer mode from doorbell-viewportLuke Hoersten3-26/+5
Always start mpv on demand (cold start). The warm path was fragile on the RPi4 with fkms and added complexity without reliable benefit.
7 daysSwitch doorbell-viewport to cold start, add backlight diagnosticsLuke Hoersten2-3/+4
- prebuffer_mode=cold: mpv starts on demand at ring/touch event - Add tty group to service user for DRM TTY access - Log backlight brightness changes for diagnostics - Remove --really-quiet suppression during debug (now restored)
7 daysFix doorbell-viewport display and ring detectionLuke Hoersten2-3/+19
- Switch to sysfs backlight (drm backend) to avoid DRM plane reset on display power cycle caused by vcgencmd display_power - Add udev rule and sysfs permissions for rpi_backlight - Fix multi-packet WebSocket decoder (ring events were being dropped) - Fix mpv loop/cache flags (--loop=no, bounded --demuxer-max-bytes) - Remove hardware decode (caused SIGSEGV on RPi4 with fkms)
7 daysFix doorbell-viewport bringup issuesLuke Hoersten3-46/+112
- Fix websockets headers kwarg via inspect (works across all versions) - Use full path /usr/bin/vcgencmd; add libraspberrypi-bin dependency - Fix UniFi Protect WS packet decoder to handle multiple concatenated packets per message (action+data in single frame) - Fetch lastUpdateId from bootstrap for WS URL - Switch fbcon disable from video=HDMI-A-1:D to fbcon=map:99 (fkms compat) - Default drm_connector to DSI-1 for fkms; drop hardcoded drm_mode - Add --no-audio and --hwdec=no to mpv; fix DRM mode-setting race on startup - Add PoE HAT fan control with configurable temp thresholds
7 daysAdd .gitignore for Emacs backup filesLuke Hoersten1-0/+1
7 daysAdd nofail to block-device mount optionsLuke Hoersten1-1/+1
Prevents emergency mode on boot if the external drive is absent.
7 daysAdd doorbell-viewport roleLuke Hoersten8-0/+1222
RPi4 portrait touchscreen that shows a live UniFi Protect RTSP stream on doorbell ring or touch, with display fully off at idle. Supports warm prebuffer, vcgencmd/drm/panel display backends, evdev touch input, and configurable DRM device/connector/mode.
13 daysAdd no_log to nostr relayer DB schema taskLuke Hoersten1-0/+1
13 daysHarden role security: file permissions, service binding, no_log, strict defaultsLuke Hoersten11-8/+15
- Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set
13 daysAdd re-key support for soju and postgresqlLuke Hoersten2-0/+8
- soju: add change-password task so admin password updates on every playbook run via sojudb change-password - postgresql: remove superuser password task — postgres uses peer auth (Unix socket), no password needed or desired
14 daysParameterize cgitrc root-title and root-descLuke Hoersten1-2/+2
14 daysSwitch cgitrc to scan-path on git/public/ with remove-suffixLuke Hoersten1-4/+1
14 daysAdd git/aws-s3-backup and git/web (cgit) rolesLuke Hoersten12-5/+174
2026-03-28Removed sojuctl ansible commands. configure via client.Luke Hoersten1-25/+0
2026-03-28Added soju role.Luke Hoersten11-4/+153
2026-03-28Fixed anisble info lookup.Luke Hoersten2-3/+3
2026-03-27Fixed paper build URL and nginx logging off.Luke Hoersten5-11/+12
2026-03-25Update versions and fix nginx logging.Luke Hoersten8-10/+15
2026-03-23Changed reg for koreader to false.Luke Hoersten1-1/+1
2026-03-23More fxiesLuke Hoersten4-4/+13
2026-03-23Fixed log rotation and log2ram sizing.Luke Hoersten14-15/+81
2026-03-23Added KOReaderLuke Hoersten3-8/+16
2026-03-23Iniital KOReader sync roleLuke Hoersten4-1/+68
2026-03-23Added missing become for transmission.Luke Hoersten1-0/+1
2025-09-17Fixed jellyfin.Luke Hoersten3-4/+13
2025-08-03Updated blockdevice mount properties.Luke Hoersten1-0/+2
2025-05-29More cert fixes.Luke Hoersten3-14/+30
2025-05-29Fixed an error with overwriting certbot certs.Luke Hoersten4-7/+7
2025-05-28Updated versions.Luke Hoersten8-12/+12
2025-01-03Version updates and fixed excessive logging on web server.Luke Hoersten7-7/+20
2024-10-07Updated java version and disabled geyser due to too old jde.Luke Hoersten2-2/+2
2024-10-07Lots of updates and fixes for Ubuntu 24.04 Noble.Luke Hoersten16-31/+41
2024-07-29Cleaned up always-changed status tasks.Luke Hoersten6-7/+9
2024-07-29Fixed prosody cert installation hook.Luke Hoersten1-1/+1
2024-07-21Added scrypted role.Luke Hoersten3-0/+189
2024-07-20Added task to ensure log2ram is running.Luke Hoersten1-0/+4
2024-07-20Version updates.Luke Hoersten7-9/+9
2024-02-12Version updatesLuke Hoersten2-2/+2
2024-02-10Added paste limitsLuke Hoersten1-1/+1
2024-02-10Added swapfile role.Luke Hoersten1-0/+38
2024-02-10Dendrite tweaks.Luke Hoersten2-1/+5
2024-02-10Added pastebin bin role.Luke Hoersten7-0/+118
2024-02-04Tons of updates to fix migration to new server.Luke Hoersten15-9/+60
2024-01-21Added optional admin-local DNS bypass.Luke Hoersten4-21/+46