14 Commits

Author SHA1 Message Date
Debian
0f7134e49f Update setup to prompt for HEADSCALE_AUTHKEY if not set
- Load from .env if present
- Prompt user for authkey if not defined
- Better error messages
2026-03-17 02:04:52 +00:00
Debian
46d9c852ab Security: Replace hardcoded passwords with placeholders
- Replace kawa:kawa123@100.64.0.1:4222 with NATS placeholders
- Replace initialPassword 'kawa2026' with <INITIAL_PASSWORD>
- Update README with password placeholders
- Add security notes for default credentials

Safe for public release.
2026-03-17 02:00:37 +00:00
Debian
68877a5b20 Add kawa-voice-install.sh - Voice interface for KAWA nodes
- Vosk for offline speech recognition (French)
- pyttsx3 for text-to-speech
- NATS integration for voice commands
- Ollama integration for AI responses
- Works on Debian/Ubuntu/NixOS
2026-03-16 20:14:16 +00:00
Debian
1558ad6612 Security: Add .env.example, SECURITY.md and update .gitignore 2026-03-15 03:40:28 +00:00
Debian
9bbf657ea9 Security: Remove exposed tokens and credentials 2026-03-15 03:39:41 +00:00
Debian
a2623a5683 Add .gitignore for sensitive files 2026-03-15 03:38:59 +00:00
Debian
b8d5b01b3a Fix Tailscale: separate systemd service for mesh connection
Problem: extraUpFlags in services.tailscale blocks boot if network
is not ready or Headscale is unreachable.

Solution:
- services.tailscale.enable = true (installs tailscale)
- Separate kawa-mesh-connect systemd service:
  - Waits for network-online.target
  - Waits for tailscaled.service
  - Connects to mesh after boot

Commands to verify:
  systemctl status tailscaled
  systemctl status kawa-mesh-connect
  tailscale status
2026-03-14 23:09:36 +00:00
Debian
e4c41daf6e Add nixos/ directory with corrected modules
- kawa.nix: main module with fixed NATS options
- default.nix: default configuration
- kawa-base.nix: base module with NATS settings
- Hostname fixed (no /sys read)
- NATS: settings.http_port instead of httpPort
2026-03-14 22:35:05 +00:00
Debian
5ca9b06420 Fix NixOS modules: pure evaluation mode, NATS options
- Fix hostname: static value instead of /sys read (pure mode)
- Fix NATS: use settings.http_port instead of httpPort
- Add kawa-base.nix with corrected NATS options
- Update flake.nix to include all modules
- Enable SSH with PermitRootLogin for debugging
2026-03-14 22:34:38 +00:00
Debian
8e2b74a75c Add kawa-gpu.nix module for NVIDIA GPU machines 2026-03-14 22:24:34 +00:00
Debian
501bd51e69 Add NixOS modules for physical CPU and GPU machines
- modules/kawa-physical.nix: CPU-only configuration
- modules/kawa-gpu.nix: NVIDIA GPU configuration
- Fix hostname to avoid /sys errors
- Add Ollama, NATS, Syncthing, Tailscale config
- Update README with NixOS instructions
2026-03-14 22:24:00 +00:00
Debian
aaa11df19f Add NixOS support with configuration module
- Add nixos/kawa.nix module for NixOS integration
- Add flake.nix for Nix flakes support
- Update setup script to detect and handle NixOS
- Include NATS, Syncthing, and Tailscale configuration
- Add parameters for Headscale connection
2026-03-14 22:20:34 +00:00
kawa
18a602aa60 Improve hostname detection: Docker, containers, physical machines 2026-03-14 16:41:13 +01:00
kawa
f19fd947b4 Initial commit - KAWA OS setup 2026-03-14 16:10:35 +01:00