mirror of
https://github.com/oqyude/nixos.git
synced 2026-10-11 14:27:26 +03:00
oqyude
fafd3e2df7
T3/A3 completed 2026-10-10: otreca nftables fix deployed via
nixos-rebuild switch. Verification on otreca:
- nft list ruleset: policy drop + 5 explicit accepts
(lo, established/related, ICMP, traceroute 33434-33534,
SSH on tailscale0, Xray REALITY 443) + log+drop
- iptables empty (no firewall.* shadow rules)
- SSH via Tailscale: works (the deploy itself proves it)
- Xray REALITY on 443: listening (sapphira → otreca XHTTP intact)
manifest.json T3 → completed with full notes.
.decisions/index.json T3-A proposal → accepted (status, files
updated to include configurations/vds.nix, notes with verification).
All 17 manifest tasks now resolved (1 truly deferred was T5 backups
risk — formalized as R1.9 in commit 3f5c048, marked completed
2026-10-10). T3 is the last code task — otreca config updated.
Working tree: clean after this commit.
I'm a super newbie who just posted my stuff here. Now maybe about intermediate