Run Nebula-only Trilium web sync clients on Paseo hosts #97

New issue

Closed

opened 2026-07-26 18:24:42 +01:00 by nimmo · 0 comments

nimmo commented

2026-07-26 18:24:42 +01:00

Owner

Summary

Enable a local Trilium web server on every host that runs Paseo or paseo-desktop, limited to the Nebula mesh, and bootstrap each fresh local data dir to sync against https://notes.nimmog.uk.

Scope

add a reusable NixOS module for Nebula-only services.trilium-server
enable it from the shared AI desktop profile so it covers electra, lena, vega, and lyra
seed syncServerHost = https://notes.nimmog.uk
support first-run sync bootstrap via a SOPS-backed trilium/sync-password
document the service, port, and secret flow

Acceptance Criteria

Trilium web listens only on the host's Nebula address
firewall exposure is limited to nebula.mesh
fresh hosts can bootstrap sync automatically from the SOPS secret
already-initialized hosts are left untouched by the bootstrap unit
nix flake check passes
at least one host is manually verified to sync successfully

Validation

nix flake check
manual just test on an affected host
confirm sync works on Electra

## Summary Enable a local Trilium web server on every host that runs Paseo or `paseo-desktop`, limited to the Nebula mesh, and bootstrap each fresh local data dir to sync against `https://notes.nimmog.uk`. ## Scope - add a reusable NixOS module for Nebula-only `services.trilium-server` - enable it from the shared AI desktop profile so it covers `electra`, `lena`, `vega`, and `lyra` - seed `syncServerHost = https://notes.nimmog.uk` - support first-run sync bootstrap via a SOPS-backed `trilium/sync-password` - document the service, port, and secret flow ## Acceptance Criteria - Trilium web listens only on the host's Nebula address - firewall exposure is limited to `nebula.mesh` - fresh hosts can bootstrap sync automatically from the SOPS secret - already-initialized hosts are left untouched by the bootstrap unit - `nix flake check` passes - at least one host is manually verified to sync successfully ## Validation - `nix flake check` - manual `just test` on an affected host - confirm sync works on Electra

nimmo referenced this issue from a commit

2026-07-26 18:25:08 +01:00

feat: add Nebula-only Trilium web clients

nimmo referenced this issue

2026-07-26 18:25:22 +01:00

feat: add Nebula-only Trilium web clients #98

nimmo closed this issue

2026-07-26 19:59:35 +01:00