nimmo/nixos-config

Watch

Fork 0

feat: add Karakeep MCP integration #96

Merged

nimmo merged 5 commits from feat/karakeep-mcp into main

2026-07-25 23:21:53 +01:00

nimmo commented

2026-07-25 22:38:42 +01:00

Owner

Refs #82

Adds the official Karakeep MCP server to the Codex and OpenCode AI profiles.

Loads the Karakeep URL and API key from encrypted secrets/karakeep.yaml
Runs the official MCP image through a local launcher on AI client hosts
Supports project-scoped tag workflows such as nixos-config -> nixos-config-seen
Documents the media1 deployment and secret usage

Validation: nix flake check passes for electra, lena, vega, and lyra.

Refs #82 Adds the official Karakeep MCP server to the Codex and OpenCode AI profiles. - Loads the Karakeep URL and API key from encrypted `secrets/karakeep.yaml` - Runs the official MCP image through a local launcher on AI client hosts - Supports project-scoped tag workflows such as `nixos-config` -> `nixos-config-seen` - Documents the media1 deployment and secret usage Validation: `nix flake check` passes for electra, lena, vega, and lyra.

nimmo added 1 commit

2026-07-25 22:38:43 +01:00

feat: add Karakeep MCP integration

Build and Push Attic Cache / test (pull_request) Successful in 53s

Details

Build and Push Attic Cache / build (pull_request) Has been skipped

Details

AI pull-request review / review (pull_request) Successful in 4m8s

Details

6090983a90

nimmo commented

2026-07-25 22:42:52 +01:00

Author

Owner

Automated code review

Reviewed commit: 42cb0cbba484b101717db5da942114474c3cac99

Verdict: Requires further work

Resolve the blocking or important findings and investigate failed deterministic checks before merging.

Overall assessment

Adds Karakeep MCP integration by introducing a local launcher, SOPS-backed secrets, and profile configurations for Codex and OpenCode. Includes documentation updates and secret management.

Blocking findings

None.

Important findings

None.

Suggestions

None.

Tests and validation

nix-flake-check: failure
- Raw output: error: Resource temporarily unavailable

Questions

Does the SOPS NixOS module require explicit declaration of all secret paths in a central list, or is per-module declaration sufficient for this setup?
Are there any hosts that enable the AI profiles without Docker access, and should the launcher fail gracefully or skip entirely in such cases?

Review limitations

Cannot execute nix flake check or deploy to verify evaluation success and runtime behavior.
Secret values are encrypted; cannot validate SOPS key mapping or decryption paths beyond structural review.
Docker daemon availability, user permissions, and network connectivity to the Karakeep instance were not verified.

Diff coverage

README.md: reviewed — included in a context-limited batch
modules/common/karakeep-mcp-launcher.nix: reviewed — included in a context-limited batch
modules/profiles/ai-agents.nix: reviewed — included in a context-limited batch
modules/profiles/ai-desktop.nix: reviewed — included in a context-limited batch
secrets/README.md: reviewed — included in a context-limited batch
secrets/karakeep.yaml: reviewed — included in a context-limited batch

Review metadata

Reviewer: forgejo-ai-review v1
Model: qwen3.6:35b-a3b-q8_0
Guidance loaded: .forgejo/ai-review.md, .forgejo/ai-review.yml, AGENTS.md, README.md
Commits considered: 5
Previous automated review: updated
Findings: 0

## Automated code review Reviewed commit: `42cb0cbba484b101717db5da942114474c3cac99` ## Verdict: Requires further work Resolve the blocking or important findings and investigate failed deterministic checks before merging. ### Overall assessment Adds Karakeep MCP integration by introducing a local launcher, SOPS-backed secrets, and profile configurations for Codex and OpenCode. Includes documentation updates and secret management. ### Blocking findings None. ### Important findings None. ### Suggestions None. ### Tests and validation - nix-flake-check: **failure** - Raw output: `error: Resource temporarily unavailable ` ### Questions - Does the SOPS NixOS module require explicit declaration of all secret paths in a central list, or is per-module declaration sufficient for this setup? - Are there any hosts that enable the AI profiles without Docker access, and should the launcher fail gracefully or skip entirely in such cases? ### Review limitations - Cannot execute `nix flake check` or deploy to verify evaluation success and runtime behavior. - Secret values are encrypted; cannot validate SOPS key mapping or decryption paths beyond structural review. - Docker daemon availability, user permissions, and network connectivity to the Karakeep instance were not verified. ### Diff coverage - `README.md`: **reviewed** — included in a context-limited batch - `modules/common/karakeep-mcp-launcher.nix`: **reviewed** — included in a context-limited batch - `modules/profiles/ai-agents.nix`: **reviewed** — included in a context-limited batch - `modules/profiles/ai-desktop.nix`: **reviewed** — included in a context-limited batch - `secrets/README.md`: **reviewed** — included in a context-limited batch - `secrets/karakeep.yaml`: **reviewed** — included in a context-limited batch <details><summary>Review metadata</summary> - Reviewer: forgejo-ai-review v1 - Model: qwen3.6:35b-a3b-q8_0 - Guidance loaded: .forgejo/ai-review.md, .forgejo/ai-review.yml, AGENTS.md, README.md - Commits considered: 5 - Previous automated review: updated - Findings: 0 </details>

nimmo added 1 commit

2026-07-25 22:45:54 +01:00

fix: pin Karakeep MCP image

Build and Push Attic Cache / test (pull_request) Successful in 35s

Details

Build and Push Attic Cache / build (pull_request) Has been skipped

Details

AI pull-request review / review (pull_request) Successful in 5m14s

Details

0ea7e66b42

nimmo added 1 commit

2026-07-25 22:52:35 +01:00