Cloud rent and fragile Docker Compose YAML sprawl are optional. A ten-year-old laptop running declarative NixOS can serve eight domains, terminate Let's Encrypt TLS, log live AI-crawler wire telemetry into SQLite, and broadcast a 24/7 radio-style observability stream from your spare room.
Inspect the bootstrap contract through the read-only less window first:
curl -fsSL https://guerillatech.com | less
Nothing executes while you read. Use j to scroll down, k to scroll up, and q to quit cleanly.
When you are ready to build your local workshop in ~/guerillatech:
curl -fsSL https://guerillatech.com | bash
configuration.nix and flake.nix file defines your OS, Nginx virtual hosts, systemd timers, and Python environment without shipping gigabytes of duplicate container userlands.The book this grew out of · Sun Pug · QA My AI · NPvg · Levinix · RFC 9110 · RFC 9111 · Pipulate
[[[END_WRITE_FILE]]] Target: remotes/honeybot/www/guerillatech.com/index.md [[[WRITE_FILE]]] # GuerillaTech (guerillatech.com): Nix vs. Docker for DIY Home-Hosting Cloud rent and fragile Docker Compose YAML sprawl are optional. A ten-year-old laptop running declarative NixOS can serve eight domains, terminate Let's Encrypt TLS, log live AI-crawler wire telemetry into SQLite, and broadcast a 24/7 radio-style observability stream from your spare room. Inspect the bootstrap contract through the read-only `less` window first: curl -fsSL guerillatech.com | less Nothing executes while you read. Use `j` to scroll down, `k` to scroll up, and `q` to quit cleanly. When you are ready to build your local workshop in `~/guerillatech`: curl -fsSL guerillatech.com | bash ## Why Nix Beats Containers for Sovereign Appliances - **Deterministic Math Over Layered Blobs** β one `configuration.nix` and `flake.nix` file defines your OS, Nginx virtual hosts, systemd timers, and Python environment without shipping gigabytes of duplicate container userlands. - **Unblindfolded Wire Telemetry** β observe real AI crawlers (RFC 9110 Markdown negotiation, RFC 9421 cryptographic signatures, and DOM-hydration trapdoors) directly on your own metal. - **Atomic Rollbacks** β if an upgrade ever misbehaves, boot the previous NixOS generation in seconds. [[[END_WRITE_FILE]]] Target: remotes/honeybot/www/rfc9110.org/index.html [[[WRITE_FILE]]]You do not need a new wrapper protocol to make the web readable to AI agents. RFC 9110 Section 12 (HTTP Semantics: Content Negotiation) already defines how a single canonical URI serves visual HTML to a human browser and clean, token-efficient Markdown (Accept: text/markdown) to an autonomous agent.
Test proactive content negotiation against this very origin right now:
curl -sI -H "Accept: text/markdown" https://rfc9110.org
Inspect the reference harness installer with less (scroll with j and k, quit with q):
curl -fsSL https://rfc9110.org | less
When you are ready to run the local RFC 9110 verification lab in ~/rfc9110:
curl -fsSL https://rfc9110.org | bash
Accept: text/html) — receive this visual HTML document.Accept: text/markdown) — receive raw Markdown with Vary: Accept, User-Agent and zero DOM boilerplate.curl / wget) — receive the self-documenting Nix flake bootstrap script stamped to rfc9110.The book this grew out of · RFC 9111 Caching · Sun Pug · QA My AI · NPvg · Levinix · GuerillaTech · Pipulate
[[[END_WRITE_FILE]]] Target: remotes/honeybot/www/rfc9110.org/index.md [[[WRITE_FILE]]] # RFC 9110 (rfc9110.org): Proactive Content Negotiation for the Semantic Internet You are reading the `text/markdown` representation of this resource, served via **RFC 9110 Section 12 (HTTP Semantics: Content Negotiation)** from the same canonical URI that serves HTML to web browsers and a Nix bootstrap script to `curl`. Test the response headers in your terminal: curl -sI -H "Accept: text/markdown" rfc9110.org Inspect the reference harness installer with `less` (scroll with `j` and `k`, quit with `q`): curl -fsSL rfc9110.org | less When you are ready to run the local RFC 9110 verification lab in `~/rfc9110`: curl -fsSL rfc9110.org | bash ## One URL, Three Native Representations - **Browsers (`Accept: text/html`)** β receive the visual HTML document. - **AI Crawlers & Agents (`Accept: text/markdown`)** β receive this clean Markdown representation with `Vary: Accept, User-Agent` and zero DOM boilerplate. - **Terminal Operators (`curl` / `wget`)** β receive the self-documenting Nix flake bootstrap script stamped to `rfc9110`. [[[END_WRITE_FILE]]] Target: remotes/honeybot/www/rfc9111.io/index.html [[[WRITE_FILE]]]Paying thousands of dollars a month to run headless Chromium clusters that pre-render JavaScript into disposable HTML snapshots for bots is an architectural tax on a solved problem. RFC 9111 Section 4.1 (Calculating Secondary Keys with Vary) lets your CDN cache both human HTML and agent-ready Markdown at the network edge from one origin URL.
Inspect the reference harness in less first (scroll with j and k, quit with q):
curl -fsSL https://rfc9111.io | less
When you are ready to launch the local edge-caching audit workbench in ~/rfc9111:
curl -fsSL https://rfc9111.io | bash
Vary: Accept, User-Agent.The book this grew out of · RFC 9110 Semantics · Sun Pug · QA My AI · NPvg · Levinix · GuerillaTech · Pipulate
[[[END_WRITE_FILE]]] Target: remotes/honeybot/www/rfc9111.io/index.md [[[WRITE_FILE]]] # RFC 9111 (rfc9111.io): Retiring Wasteful Pre-Render Solutions with HTTP Caching Paying thousands of dollars a month to run headless Chromium clusters that pre-render JavaScript into disposable HTML snapshots for bots is an architectural tax on a solved problem. **RFC 9111 Section 4.1 (Calculating Secondary Keys with `Vary`)** lets your CDN cache both human HTML and agent-ready Markdown at the network edge from one origin URL. Inspect the reference harness in `less` first (scroll with `j` and `k`, quit with `q`): curl -fsSL rfc9111.io | less When you are ready to launch the local edge-caching audit workbench in `~/rfc9111`: curl -fsSL rfc9111.io | bash ## Why Bimodal Edge Caching Beats Dynamic Pre-Rendering - **Zero Headless-Browser Compute Tax** β static HTML and static Markdown sit side-by-side in edge RAM, partitioned cleanly by `Vary: Accept, User-Agent`. - **Zero Cloaking Liability** β every representation is declared openly in standard HTTP response headers rather than hiding behind brittle user-agent sniffing middleware. - **Instant Time-to-First-Byte for AI Grounding** β RAG and search agents receive compact Markdown in milliseconds instead of waiting for a headless browser spin-up. [[[END_WRITE_FILE]]] Target: remotes/honeybot/www/sunpug.io/index.html [[[SEARCH]]]The book this grew out of · QA My AI · NPvg · Levinix · Pipulate
[[[DIVIDER]]]The book this grew out of · QA My AI · NPvg · Levinix · GuerillaTech · RFC 9110 · RFC 9111 · Pipulate
[[[REPLACE]]] Target: assets/installer/install.sh [[[SEARCH]]] #!/usr/bin/env bash # The installer behind pipulate.com, npvg.org, qamy.ai and sunpug.io # ================================================================== [[[DIVIDER]]] #!/usr/bin/env bash # The installer behind pipulate.com, npvg.org, qamy.ai, levinix.org, sunpug.io, guerillatech.com, rfc9110.org and rfc9111.io # ========================================================================================================================== [[[REPLACE]]] Target: assets/installer/install.sh [[[SEARCH]]] sunpug) DOOR_FOLDER="sunpug" DOOR_WORKSHOP="This Portable AI Discussion workshop talks you through steps." DOOR_WELCOME1="Welcome. Ready to invite Sun Pug in and free your AI discussions" DOOR_WELCOME2="from disposable browser tabs into local, portable plain text." DOOR_TAGLINE="Inspect with curl | less first; own the transcript and the flight recorder." ;; esac } [[[DIVIDER]]] sunpug) DOOR_FOLDER="sunpug" DOOR_WORKSHOP="This Portable AI Discussion workshop talks you through steps." DOOR_WELCOME1="Welcome. Ready to invite Sun Pug in and free your AI discussions" DOOR_WELCOME2="from disposable browser tabs into local, portable plain text." DOOR_TAGLINE="Inspect with curl | less first; own the transcript and the flight recorder." ;; levinix) DOOR_FOLDER="levinix" DOOR_WORKSHOP="This Write-Once-Run-Anywhere Nix Flake workshop talks you through steps." DOOR_WELCOME1="Welcome. Ready to replace bloated Electron containers with deterministic" DOOR_WELCOME2="Nix flakes that run identically across Linux, macOS, and WSL." DOOR_TAGLINE="One flake.nix, every platform; hardware is just a projection." ;; guerillatech) DOOR_FOLDER="guerillatech" DOOR_WORKSHOP="This DIY Bare-Metal Home-Hosting workshop talks you through steps." DOOR_WELCOME1="Welcome. Ready to trade fragile Docker Compose sprawl and cloud rent" DOOR_WELCOME2="for a declarative NixOS home appliance and live AI-bot observatory." DOOR_TAGLINE="Own the metal, read the wire, and broadcast from home." ;; rfc9110) DOOR_FOLDER="rfc9110" DOOR_WORKSHOP="This RFC 9110 HTTP Content Negotiation workshop talks you through steps." DOOR_WELCOME1="Welcome. Ready to serve clean Markdown to AI agents (Accept: text/markdown)" DOOR_WELCOME2="and semantic HTML to human browsers from one canonical URI." DOOR_TAGLINE="Speak native HTTP semantics; retire the headless browser tax." ;; rfc9111) DOOR_FOLDER="rfc9111" DOOR_WORKSHOP="This RFC 9111 Bimodal Edge-Caching workshop talks you through steps." DOOR_WELCOME1="Welcome. Ready to partition your CDN cache with Vary: Accept, User-Agent" DOOR_WELCOME2="and retire wasteful dynamic pre-rendering clusters for good." DOOR_TAGLINE="Cache both representations at the edge; never pre-render what HTTP can negotiate." ;; esac } [[[REPLACE]]] Target: nixops.sh [[[SEARCH]]] sync_installer() { echo "π Syncing installer to the home-hosted doors (npvg.org, qamy.ai, levinix.org, sunpug.io)..." ssh $TARGET "mkdir -p ~/www/npvg.org ~/www/qamy.ai ~/www/levinix.org ~/www/sunpug.io" \ && rsync -av assets/installer/install.sh $TARGET:~/www/npvg.org/install.sh \ && rsync -av assets/installer/install.sh $TARGET:~/www/qamy.ai/install.sh \ && rsync -av assets/installer/install.sh $TARGET:~/www/levinix.org/install.sh \ && rsync -av assets/installer/install.sh $TARGET:~/www/sunpug.io/install.sh } if [ "${1:-}" = "--installer" ]; then if sync_installer; then echo "β Installer synced to npvg.org, qamy.ai, levinix.org, and sunpug.io (body only; no rebuild)." exit 0 fi echo "β Installer sync failed; one or more doors still serve the previous file." exit 1 fi [[[DIVIDER]]] INSTALLER_DOORS="npvg.org qamy.ai levinix.org sunpug.io guerillatech.com rfc9110.org rfc9111.io" sync_installer() { echo "π Syncing installer to the home-hosted doors ($INSTALLER_DOORS)..." for door in $INSTALLER_DOORS; do ssh $TARGET "mkdir -p ~/www/$door" \ && rsync -av assets/installer/install.sh "$TARGET:~/www/$door/install.sh" || return 1 done } if [ "${1:-}" = "--installer" ]; then if sync_installer; then echo "β Installer synced to $INSTALLER_DOORS (body only; no rebuild)." exit 0 fi echo "β Installer sync failed; one or more doors still serve the previous file." exit 1 fi [[[REPLACE]]] Target: nixops.sh [[[SEARCH]]] echo "π Syncing sunpug.io door (SVNPvg -> SUNPug)..." ssh $TARGET "mkdir -p ~/www/sunpug.io" rsync -av remotes/honeybot/www/sunpug.io/ $TARGET:~/www/sunpug.io/ [[[DIVIDER]]] for door in sunpug.io guerillatech.com rfc9110.org rfc9111.io; do echo "π Syncing $door door..." ssh $TARGET "mkdir -p ~/www/$door" rsync -av "remotes/honeybot/www/$door/" "$TARGET:~/www/$door/" done [[[REPLACE]]] Target: remotes/honeybot/nixos/configuration.nix [[[SEARCH]]] "sunpug.io" ("www." + "sunpug.io") ]; }; [[[DIVIDER]]] "sunpug.io" ("www." + "sunpug.io") "guerillatech.com" ("www." + "guerillatech.com") "rfc9110.org" ("www." + "rfc9110.org") "rfc9111.io" ("www." + "rfc9111.io") ]; }; [[[REPLACE]]] Target: remotes/honeybot/nixos/configuration.nix [[[SEARCH]]] # THE SUNPUG DOOR (2026-10-24): SVNPvg -> SUNPug (the friendly vampire / # Roman pugio sidearm). Combines the curl/wget installer door ($npvg_index # stamped to 'sunpug') with RFC 9110 Accept: text/markdown negotiation # (index.md) and browser HTML (index.html). virtualHosts."sunpug.io" = { [[[DIVIDER]]] # THE GUERILLATECH DOOR (2026-10-25): Target 5 in blogs.nix (Nix vs. Docker # for DIY Home-Hosting & AI-Bot Observatories). virtualHosts."guerillatech.com" = { forceSSL = true; enableACME = true; serverAliases = [ ("www." + "guerillatech.com") ]; root = "/home/mike/www/guerillatech.com"; extraConfig = '' access_log /var/log/nginx/access.log ai_tracker; access_log /var/log/nginx/guerillatech.access.log ai_tracker; ''; locations."= /" = { extraConfig = '' add_header Vary "Accept, User-Agent" always; types { text/html html; text/markdown md; text/x-shellscript sh; } sub_filter_types text/x-shellscript; sub_filter_once off; sub_filter '__INSTALL_DEFAULT_NAME__' 'guerillatech'; if ($serve_markdown) { rewrite ^ /index.md break; } try_files $npvg_index /index.md =404; ''; }; locations."/" = { extraConfig = '' add_header Vary "Accept" always; if ($serve_markdown) { rewrite ^(.*)/$ $1/index.md break; rewrite ^(.*[^/])$ $1/index.md break; } try_files $uri $uri/index.html $uri/index.md =404; ''; }; }; # THE RFC 9110 DOOR (2026-10-25): Target 6 in blogs.nix (Proactive HTTP # Content Negotiation for the Semantic Internet). virtualHosts."rfc9110.org" = { forceSSL = true; enableACME = true; serverAliases = [ ("www." + "rfc9110.org") ]; root = "/home/mike/www/rfc9110.org"; extraConfig = '' access_log /var/log/nginx/access.log ai_tracker; access_log /var/log/nginx/rfc9110.access.log ai_tracker; ''; locations."= /" = { extraConfig = '' add_header Vary "Accept, User-Agent" always; types { text/html html; text/markdown md; text/x-shellscript sh; } sub_filter_types text/x-shellscript; sub_filter_once off; sub_filter '__INSTALL_DEFAULT_NAME__' 'rfc9110'; if ($serve_markdown) { rewrite ^ /index.md break; } try_files $npvg_index /index.md =404; ''; }; locations."/" = { extraConfig = '' add_header Vary "Accept" always; if ($serve_markdown) { rewrite ^(.*)/$ $1/index.md break; rewrite ^(.*[^/])$ $1/index.md break; } try_files $uri $uri/index.html $uri/index.md =404; ''; }; }; # THE RFC 9111 DOOR (2026-10-25): Target 7 in blogs.nix (Retiring wasteful # pre-render solutions via Vary: Accept, User-Agent edge caching). virtualHosts."rfc9111.io" = { forceSSL = true; enableACME = true; serverAliases = [ ("www." + "rfc9111.io") ]; root = "/home/mike/www/rfc9111.io"; extraConfig = '' access_log /var/log/nginx/access.log ai_tracker; access_log /var/log/nginx/rfc9111.access.log ai_tracker; ''; locations."= /" = { extraConfig = '' add_header Vary "Accept, User-Agent" always; types { text/html html; text/markdown md; text/x-shellscript sh; } sub_filter_types text/x-shellscript; sub_filter_once off; sub_filter '__INSTALL_DEFAULT_NAME__' 'rfc9111'; if ($serve_markdown) { rewrite ^ /index.md break; } try_files $npvg_index /index.md =404; ''; }; locations."/" = { extraConfig = '' add_header Vary "Accept" always; if ($serve_markdown) { rewrite ^(.*)/$ $1/index.md break; rewrite ^(.*[^/])$ $1/index.md break; } try_files $uri $uri/index.html $uri/index.md =404; ''; }; }; # THE SUNPUG DOOR (2026-10-24): SVNPvg -> SUNPug (the friendly vampire / # Roman pugio sidearm). Combines the curl/wget installer door ($npvg_index # stamped to 'sunpug') with RFC 9110 Accept: text/markdown negotiation # (index.md) and browser HTML (index.html). virtualHosts."sunpug.io" = { [[[REPLACE]]] Target: remotes/honeybot/scripts/logs.py [[[SEARCH]]] for known in ( "mikelev.in", "qamy.ai", "npvg.org", "levinix.org", "levinix.com", "levinux.com", "pipulate.com", "guerillatech.com", "rfc9110.org", "rfc9111.io", "rfc9111.com", ): if h == known or h.endswith("." + known): return known if "qamy" in h: return "qamy.ai" if "npvg" in h: return "npvg.org" if "levinix" in h: return "levinix.org" if "levinux" in h: return "levinux.com" [[[DIVIDER]]] for known in ( "mikelev.in", "qamy.ai", "npvg.org", "sunpug.io", "levinix.org", "levinix.com", "levinux.com", "pipulate.com", "guerillatech.com", "rfc9110.org", "rfc9111.io", "rfc9111.com", ): if h == known or h.endswith("." + known): return known if "qamy" in h: return "qamy.ai" if "npvg" in h: return "npvg.org" if "sunpug" in h: return "sunpug.io" if "levinix" in h: return "levinix.org" if "levinux" in h: return "levinux.com" [[[REPLACE]]] ``` Car 3b β Stage the three new `remotes/honeybot/www/` directories in `(nix) pipulate $` so `m` includes them in the commit: ```bash git add remotes/honeybot/www/guerillatech.com remotes/honeybot/www/rfc9110.org remotes/honeybot/www/rfc9111.io ``` Ignition: no local shell ignition required (`ls`, `rg`, `bash -n`, and `nix-instantiate --parse` inspect the patched files directly at compile time). **4: PROMPT** (Use `prompt` or `p` to create `prompt.md` from copy.): ```text Verify the AFTER receipts for `guerillatech.com`, `rfc9110.org`, `rfc9111.io`, and `sunpug.io`, and let's inspect `remotes/honeybot/scripts/forest.py` and `remotes/honeybot/scripts/score.py` to weave the 8-door Radio Serial Storytime into Honeybot's live broadcast loop. ``` **5: DELIVERABLE** (What done looks like): * `remotes/honeybot/www/` holds all eight doors (`guerillatech.com`, `rfc9110.org`, `rfc9111.io` created with both `.html` and RFC 9110 `.md` representations and zero autolink contamination). * `assets/installer/install.sh`, `nixops.sh`, `remotes/honeybot/nixos/configuration.nix`, and `remotes/honeybot/scripts/logs.py` wire all eight doors end-to-end (`SYNTAX_ALL_GREEN`). * `forest.py` and `score.py` arrive in the next compile so we can script the Radio Serial station breaks on Honeybot. **MikeLev.in**: ## THE AI-EDIT METHOD > Same commands, run twice, one change between them. Where the readings > differ is what the change did; the diff in the middle is the receipt. **1: BEFORE** (PROBE): ```bash On branch main Your branch is up to date with 'origin/main'. nothing to commit, working tree clean GIT repo clean. Take BEFORE reading, make CHANGE, record AFTER diff. (nix) pipulate $ ls -1 remotes/honeybot/www/ rg -n "guerillatech|rfc9110|rfc9111" assets/installer/install.sh nixops.sh remotes/honeybot/nixos/configuration.nix || echo "THREE_DOORS_NOT_WIRED_YET" rg -n "sunpug" remotes/honeybot/scripts/logs.py || echo "SUNPUG_NOT_IN_LOGS_PY_YET" bash -n assets/installer/install.sh nixops.sh && nix-instantiate --parse remotes/honeybot/nixos/configuration.nix >/dev/null && echo "SYNTAX_ALL_GREEN" levinix.org levinux.com npvg.org qamy.ai sunpug.io THREE_DOORS_NOT_WIRED_YET SUNPUG_NOT_IN_LOGS_PY_YET nix-instantiate: /nix/store/2fxp204b9jh1s3lpggdlnws44vvzw1w9-openssl-3.4.3/lib/libcrypto.so.3: version `OPENSSL_3.6.0' not found (required by /nix/store/1p2gjq4x396yj65rig8fyzhrdza0psd6-openssl-3.6.3/lib/libssl.so.3) nix-instantiate: /nix/store/i3ibgfskl99qd8rslafbpaa1dmxdzh1z-glibc-2.40-66/lib/libc.so.6: version `GLIBC_ABI_DT_X86_64_PLT' not found (required by /nix/store/ias8xacs1h3jy7xgwi2awvim61k2ji6c-glibc-2.42-67/lib/libresolv.so.2) (nix) pipulate $ ``` **2: AFTER** (NEXT CONTEXT): ```text # # Context 1 # ! book # ! rgxc 30 # ! markov # ! latest # # Context 2 # /home/mike/repos/nixos/blogs.nix # scripts/articles/common.py # assets/installer/install.sh # nixops.sh # remotes/honeybot/nixos/configuration.nix # remotes/honeybot/scripts/logs.py # remotes/honeybot/scripts/stream.py # remotes/honeybot/www/sunpug.io/index.html # remotes/honeybot/www/sunpug.io/index.md # ! rg -n "guerillatech|rfc9110|rfc9111|sunpug" /home/mike/repos/nixos/blogs.nix scripts/articles/common.py assets/installer/install.sh nixops.sh remotes/honeybot/nixos/configuration.nix remotes/honeybot/scripts/logs.py # ! ls -1 remotes/honeybot/www/ # Context 3 assets/installer/install.sh nixops.sh remotes/honeybot/nixos/configuration.nix remotes/honeybot/scripts/logs.py remotes/honeybot/scripts/stream.py remotes/honeybot/scripts/forest.py remotes/honeybot/scripts/score.py remotes/honeybot/www/guerillatech.com/index.html remotes/honeybot/www/guerillatech.com/index.md remotes/honeybot/www/rfc9110.org/index.html remotes/honeybot/www/rfc9110.org/index.md remotes/honeybot/www/rfc9111.io/index.html remotes/honeybot/www/rfc9111.io/index.md ! ls -1 remotes/honeybot/www/ ! rg -n "guerillatech|rfc9110|rfc9111" assets/installer/install.sh nixops.sh remotes/honeybot/nixos/configuration.nix || echo "THREE_DOORS_NOT_WIRED_YET" ! rg -n "sunpug" remotes/honeybot/scripts/logs.py || echo "SUNPUG_NOT_IN_LOGS_PY_YET" ! bash -n assets/installer/install.sh nixops.sh && nix-instantiate --parse remotes/honeybot/nixos/configuration.nix >/dev/null && echo "SYNTAX_ALL_GREEN" ``` **3: CHANGE** (PATCHES): ```diff On branch main Your branch is up to date with 'origin/main'. nothing to commit, working tree clean GIT repo clean. Take BEFORE reading, make CHANGE, record AFTER diff. (nix) pipulate $ patch (nix) pipulate $ app β WHOLE-FILE WRITE: CREATED 'remotes/honeybot/www/guerillatech.com/index.html'. β WHOLE-FILE WRITE: CREATED 'remotes/honeybot/www/guerillatech.com/index.md'. β WHOLE-FILE WRITE: CREATED 'remotes/honeybot/www/rfc9110.org/index.html'. β WHOLE-FILE WRITE: CREATED 'remotes/honeybot/www/rfc9110.org/index.md'. β WHOLE-FILE WRITE: CREATED 'remotes/honeybot/www/rfc9111.io/index.html'. β WHOLE-FILE WRITE: CREATED 'remotes/honeybot/www/rfc9111.io/index.md'. β DETERMINISTIC PATCH APPLIED: Successfully mutated 'remotes/honeybot/www/sunpug.io/index.html'. β DETERMINISTIC PATCH APPLIED: Successfully mutated 'assets/installer/install.sh'. β DETERMINISTIC PATCH APPLIED: Successfully mutated 'assets/installer/install.sh'. β DETERMINISTIC PATCH APPLIED: Successfully mutated 'nixops.sh'. β DETERMINISTIC PATCH APPLIED: Successfully mutated 'nixops.sh'. β DETERMINISTIC PATCH APPLIED: Successfully mutated 'remotes/honeybot/nixos/configuration.nix'. β DETERMINISTIC PATCH APPLIED: Successfully mutated 'remotes/honeybot/nixos/configuration.nix'. β DETERMINISTIC PATCH APPLIED: Successfully mutated 'remotes/honeybot/scripts/logs.py'. (nix) pipulate $ git add remotes/honeybot/www/guerillatech.com remotes/honeybot/www/rfc9110.org remotes/honeybot/www/rfc9111.io (nix) pipulate $ d diff --git a/assets/installer/install.sh b/assets/installer/install.sh index 3a13bb1..2605f48 100644 --- a/assets/installer/install.sh +++ b/assets/installer/install.sh @@ -1,6 +1,6 @@ #!/usr/bin/env bash -# The installer behind pipulate.com, npvg.org, qamy.ai and sunpug.io -# ================================================================== +# The installer behind pipulate.com, npvg.org, qamy.ai, levinix.org, sunpug.io, guerillatech.com, rfc9110.org and rfc9111.io +# ========================================================================================================================== # # You are reading this because you piped it to less instead of bash. # That is the first QA step: verifying the contract before execution. @@ -148,6 +148,34 @@ door_row() { DOOR_WELCOME2="from disposable browser tabs into local, portable plain text." DOOR_TAGLINE="Inspect with curl | less first; own the transcript and the flight recorder." ;; + levinix) + DOOR_FOLDER="levinix" + DOOR_WORKSHOP="This Write-Once-Run-Anywhere Nix Flake workshop talks you through steps." + DOOR_WELCOME1="Welcome. Ready to replace bloated Electron containers with deterministic" + DOOR_WELCOME2="Nix flakes that run identically across Linux, macOS, and WSL." + DOOR_TAGLINE="One flake.nix, every platform; hardware is just a projection." + ;; + guerillatech) + DOOR_FOLDER="guerillatech" + DOOR_WORKSHOP="This DIY Bare-Metal Home-Hosting workshop talks you through steps." + DOOR_WELCOME1="Welcome. Ready to trade fragile Docker Compose sprawl and cloud rent" + DOOR_WELCOME2="for a declarative NixOS home appliance and live AI-bot observatory." + DOOR_TAGLINE="Own the metal, read the wire, and broadcast from home." + ;; + rfc9110) + DOOR_FOLDER="rfc9110" + DOOR_WORKSHOP="This RFC 9110 HTTP Content Negotiation workshop talks you through steps." + DOOR_WELCOME1="Welcome. Ready to serve clean Markdown to AI agents (Accept: text/markdown)" + DOOR_WELCOME2="and semantic HTML to human browsers from one canonical URI." + DOOR_TAGLINE="Speak native HTTP semantics; retire the headless browser tax." + ;; + rfc9111) + DOOR_FOLDER="rfc9111" + DOOR_WORKSHOP="This RFC 9111 Bimodal Edge-Caching workshop talks you through steps." + DOOR_WELCOME1="Welcome. Ready to partition your CDN cache with Vary: Accept, User-Agent" + DOOR_WELCOME2="and retire wasteful dynamic pre-rendering clusters for good." + DOOR_TAGLINE="Cache both representations at the edge; never pre-render what HTTP can negotiate." + ;; esac } diff --git a/nixops.sh b/nixops.sh index 00df83c..cc1da3f 100755 --- a/nixops.sh +++ b/nixops.sh @@ -17,17 +17,17 @@ TARGET="mike@[REDACTED_IP]" # pad list, the full sync calls it below, and `./nixops.sh --installer` runs # it alone so release.py can move all three doors without staging config or # sweeping scripts. Body only; no rebuild. +INSTALLER_DOORS="npvg.org qamy.ai levinix.org sunpug.io guerillatech.com rfc9110.org rfc9111.io" sync_installer() { - echo "π Syncing installer to the home-hosted doors (npvg.org, qamy.ai, levinix.org, sunpug.io)..." - ssh $TARGET "mkdir -p ~/www/npvg.org ~/www/qamy.ai ~/www/levinix.org ~/www/sunpug.io" \ - && rsync -av assets/installer/install.sh $TARGET:~/www/npvg.org/install.sh \ - && rsync -av assets/installer/install.sh $TARGET:~/www/qamy.ai/install.sh \ - && rsync -av assets/installer/install.sh $TARGET:~/www/levinix.org/install.sh \ - && rsync -av assets/installer/install.sh $TARGET:~/www/sunpug.io/install.sh + echo "π Syncing installer to the home-hosted doors ($INSTALLER_DOORS)..." + for door in $INSTALLER_DOORS; do + ssh $TARGET "mkdir -p ~/www/$door" \ + && rsync -av assets/installer/install.sh "$TARGET:~/www/$door/install.sh" || return 1 + done } if [ "${1:-}" = "--installer" ]; then if sync_installer; then - echo "β Installer synced to npvg.org, qamy.ai, levinix.org, and sunpug.io (body only; no rebuild)." + echo "β Installer synced to $INSTALLER_DOORS (body only; no rebuild)." exit 0 fi echo "β Installer sync failed; one or more doors still serve the previous file." @@ -83,9 +83,11 @@ ssh $TARGET "mkdir -p ~/www/levinux.com ~/www/levinix.org" rsync -av remotes/honeybot/www/levinux.com/ "$LEVINUX_CACHE/" $TARGET:~/www/levinux.com/ rsync -av remotes/honeybot/www/levinix.org/ $TARGET:~/www/levinix.org/ -echo "π Syncing sunpug.io door (SVNPvg -> SUNPug)..." -ssh $TARGET "mkdir -p ~/www/sunpug.io" -rsync -av remotes/honeybot/www/sunpug.io/ $TARGET:~/www/sunpug.io/ +for door in sunpug.io guerillatech.com rfc9110.org rfc9111.io; do + echo "π Syncing $door door..." + ssh $TARGET "mkdir -p ~/www/$door" + rsync -av "remotes/honeybot/www/$door/" "$TARGET:~/www/$door/" +done echo "π Syncing NixOS Config..." rsync --delete -av remotes/honeybot/nixos/ $TARGET:~/nixos-config-staged/ diff --git a/remotes/honeybot/nixos/configuration.nix b/remotes/honeybot/nixos/configuration.nix index 499889e..f43376a 100644 --- a/remotes/honeybot/nixos/configuration.nix +++ b/remotes/honeybot/nixos/configuration.nix @@ -41,6 +41,9 @@ "levinix.com" ("www." + "levinix.com") "levinux.com" ("www." + "levinux.com") "sunpug.io" ("www." + "sunpug.io") + "guerillatech.com" ("www." + "guerillatech.com") + "rfc9110.org" ("www." + "rfc9110.org") + "rfc9111.io" ("www." + "rfc9111.io") ]; }; @@ -406,6 +409,126 @@ }; }; + # THE GUERILLATECH DOOR (2026-10-25): Target 5 in blogs.nix (Nix vs. Docker + # for DIY Home-Hosting & AI-Bot Observatories). + virtualHosts."guerillatech.com" = { + forceSSL = true; + enableACME = true; + serverAliases = [ ("www." + "guerillatech.com") ]; + root = "/home/mike/www/guerillatech.com"; + extraConfig = '' + access_log /var/log/nginx/access.log ai_tracker; + access_log /var/log/nginx/guerillatech.access.log ai_tracker; + ''; + locations."= /" = { + extraConfig = '' + add_header Vary "Accept, User-Agent" always; + types { + text/html html; + text/markdown md; + text/x-shellscript sh; + } + sub_filter_types text/x-shellscript; + sub_filter_once off; + sub_filter '__INSTALL_DEFAULT_NAME__' 'guerillatech'; + if ($serve_markdown) { + rewrite ^ /index.md break; + } + try_files $npvg_index /index.md =404; + ''; + }; + locations."/" = { + extraConfig = '' + add_header Vary "Accept" always; + if ($serve_markdown) { + rewrite ^(.*)/$ $1/index.md break; + rewrite ^(.*[^/])$ $1/index.md break; + } + try_files $uri $uri/index.html $uri/index.md =404; + ''; + }; + }; + + # THE RFC 9110 DOOR (2026-10-25): Target 6 in blogs.nix (Proactive HTTP + # Content Negotiation for the Semantic Internet). + virtualHosts."rfc9110.org" = { + forceSSL = true; + enableACME = true; + serverAliases = [ ("www." + "rfc9110.org") ]; + root = "/home/mike/www/rfc9110.org"; + extraConfig = '' + access_log /var/log/nginx/access.log ai_tracker; + access_log /var/log/nginx/rfc9110.access.log ai_tracker; + ''; + locations."= /" = { + extraConfig = '' + add_header Vary "Accept, User-Agent" always; + types { + text/html html; + text/markdown md; + text/x-shellscript sh; + } + sub_filter_types text/x-shellscript; + sub_filter_once off; + sub_filter '__INSTALL_DEFAULT_NAME__' 'rfc9110'; + if ($serve_markdown) { + rewrite ^ /index.md break; + } + try_files $npvg_index /index.md =404; + ''; + }; + locations."/" = { + extraConfig = '' + add_header Vary "Accept" always; + if ($serve_markdown) { + rewrite ^(.*)/$ $1/index.md break; + rewrite ^(.*[^/])$ $1/index.md break; + } + try_files $uri $uri/index.html $uri/index.md =404; + ''; + }; + }; + + # THE RFC 9111 DOOR (2026-10-25): Target 7 in blogs.nix (Retiring wasteful + # pre-render solutions via Vary: Accept, User-Agent edge caching). + virtualHosts."rfc9111.io" = { + forceSSL = true; + enableACME = true; + serverAliases = [ ("www." + "rfc9111.io") ]; + root = "/home/mike/www/rfc9111.io"; + extraConfig = '' + access_log /var/log/nginx/access.log ai_tracker; + access_log /var/log/nginx/rfc9111.access.log ai_tracker; + ''; + locations."= /" = { + extraConfig = '' + add_header Vary "Accept, User-Agent" always; + types { + text/html html; + text/markdown md; + text/x-shellscript sh; + } + sub_filter_types text/x-shellscript; + sub_filter_once off; + sub_filter '__INSTALL_DEFAULT_NAME__' 'rfc9111'; + if ($serve_markdown) { + rewrite ^ /index.md break; + } + try_files $npvg_index /index.md =404; + ''; + }; + locations."/" = { + extraConfig = '' + add_header Vary "Accept" always; + if ($serve_markdown) { + rewrite ^(.*)/$ $1/index.md break; + rewrite ^(.*[^/])$ $1/index.md break; + } + try_files $uri $uri/index.html $uri/index.md =404; + ''; + }; + }; + # THE SUNPUG DOOR (2026-10-24): SVNPvg -> SUNPug (the friendly vampire / # Roman pugio sidearm). Combines the curl/wget installer door ($npvg_index # stamped to 'sunpug') with RFC 9110 Accept: text/markdown negotiation diff --git a/remotes/honeybot/scripts/logs.py b/remotes/honeybot/scripts/logs.py index 2317468..3b986ab 100644 --- a/remotes/honeybot/scripts/logs.py +++ b/remotes/honeybot/scripts/logs.py @@ -346,7 +346,7 @@ class SonarApp(App): if re.match(r"^\d+(\.\d+)+$", h) or ":" in h: return "mikelev.in" for known in ( - "mikelev.in", "qamy.ai", "npvg.org", + "mikelev.in", "qamy.ai", "npvg.org", "sunpug.io", "levinix.org", "levinix.com", "levinux.com", "pipulate.com", "guerillatech.com", "rfc9110.org", "rfc9111.io", "rfc9111.com", ): @@ -356,6 +356,8 @@ class SonarApp(App): return "qamy.ai" if "npvg" in h: return "npvg.org" + if "sunpug" in h: + return "sunpug.io" if "levinix" in h: return "levinix.org" if "levinux" in h: diff --git a/remotes/honeybot/www/sunpug.io/index.html b/remotes/honeybot/www/sunpug.io/index.html index d181300..360a758 100644 --- a/remotes/honeybot/www/sunpug.io/index.html +++ b/remotes/honeybot/www/sunpug.io/index.html @@ -28,6 +28,6 @@c (compile) — bundle your files, live receipts, and discussion history into your clipboard while sealing a verifiable SHA-256 archive deed on disk.Paste that compiled payload into any model—Claude, Gemini, ChatGPT, or a local LLM—and own your transcript for life.
-The book this grew out of · QA My AI · NPvg · Levinix · Pipulate
+The book this grew out of · QA My AI · NPvg · Levinix · GuerillaTech · RFC 9110 · RFC 9111 · Pipulate