Its control socket never gets ctrl_interface_group applied (upstream never
copies the field when creating the P2P device), so with the daemon running as
root the socket is root-only. wpa_gui scans the directory, hits p2p-dev-*
first and gives up before reaching the real interface.
Assisted-by: pi (claude-opus-5)
Override the daemon package to build and install its bundled web UI, which upstream excludes from the daemon-only source.
Assisted-by: pi (openai-codex/gpt-5.6-sol)
Run Paseo as gabriel on atlas and maia using the upstream NixOS module. Expose direct access only through the Tailscale firewall interface while retaining hosted relay support.
jellyfin-media-player (Qt) drew its own CSD titlebar because cage never
negotiated server-side decorations, leaving decorations visible even when
Jellyfin considered itself fullscreen. Pass cage -d so it advertises
server-side decoration mode and clients skip CSD.
Assisted-by: pi (opus-4.8)
Prep for renaming the GitHub repo to Foundry: update the Hydra jobset flakes
(.hydra.json), the auto-upgrade project name (must match the Hydra project),
the README status badge, the hydra-auto-upgrade example, the website CV link,
and the flake description. Hydra project/jobset becomes 'foundry'.
Assisted-by: pi (opus-4.8)
Activate the time-appropriate Home Manager specialisation from the NixOS home-manager-gabriel service, and add user timers that switch directly to light/dark specialisations at the configured boundaries.
Assisted-by: pi (gpt-5.5)
Expose webSearch secret file settings for the Pi web extension and wire them to sops-managed Brave/Kagi secrets. Restrict web_search credentials to configured secret files.
Assisted-by: pi (openai-codex/gpt-5.5)
Now everything is managed through nix.
- Add skill to let agent edit itself via nix
- Add private skills (managed with sops)
- Add image and audio agents
- Switch to deepseek flash to save a bit
These are managed via sops so they are always available, differently from my `pass` secrets which require the yubikey to be plugged. This way I can choose when to make my personal secrets available to the AI or not.
Gabriel Fontes