Fix nixos package #3

Merged

kmendell merged 5 commits from fix/nixos-package into main

2026-08-07 22:55:43 -05:00

eresto commented

2026-08-07 22:50:14 -05:00

Owner

Have to remember to update the hash on every commit or the build breaks as it expects one hash and the actual hash is different.

eresto added 4 commits

2026-08-07 22:50:14 -05:00

fix(web): self-host Geist fonts so builds work offline 31da1ed40c

next/font/google fetches Geist from fonts.googleapis.com during `next
build`, which fails in a sandbox. Use the `geist` package (next/font/local)
and map --font-sans/--font-mono onto --font-geist-sans/--font-geist-mono.

fix(nix): correct package hashes and source fileset 29766bd4ac

The committed vendorHash and pnpm-deps hash had drifted from the source
and lockfile, so `nix build` of the package never succeeded. Also match
*.tmpl in the Go source fileset -- internal/web embeds install.ps1.tmpl,
not just install.sh.tmpl.

feat(nix): node/cli/cp build variants 17560578d2

Guard the internal/web embed behind a `noweb` build tag (ui_web.go vs
ui_noweb.go) so node and CLI builds need no web toolchain. package.nix
takes a `variant` arg and the flake exposes overpass-{cp,node,cli}; the
overpass-node module defaults to the web-free build. `overpass`/`default`
are unchanged. Adds `just build-node` and `just build-cli`.

docs: nixos build variants and packaging notes

CI / test (pull_request) Failing after 27s

Details

CI / lint (pull_request) Failing after 27s

Details

7d472e68ea

Document the four package variants, drop the `inputs.nixpkgs.follows`
guidance (following a consumer's nixpkgs invalidates the pinned Go/pnpm
hashes), and fix the stale "tlsPin or insecure is required" claim -- that
module assertion was removed; with neither set the agent does PKI validation.

kmendell added 1 commit

2026-08-07 22:54:19 -05:00