nixosconfig

Create, search, comment on, and manage issues in the canonical nixosconfig Forgejo tracker via its REST API.

Manage pfSense firewall - rules, NAT, VPN, DHCP, DNS, and system configuration

Spin up and manage Apollo/Sunshine gaming Windows VMs on the prom hypervisor — clones of the GTX-1080-passthrough golden template, one per game, streamed via Moonlight/Artemis. Use when the user wants a new gaming VM, another gaming VM, a VM "for <game>", or to start/switch/stop/list/destroy their gaming VMs. Single GPU = one runs at a time. Trigger phrases include "new gaming vm", "spin up a gaming vm", "gaming vm for <game>", "make me a windows gaming vm", "another gaming machine", "start the <game> vm", "switch to <game>", "list gaming vms", "stop the gaming vm", "destroy the <game> vm".

Add an MCP server to the project and sync to all AI tools

Detect configuration drift using hash-based verification.

Debug a NixOS service that is down, unhealthy, or misbehaving. Identifies which host runs the service, connects via SSH if remote, and investigates using journalctl. Trigger phrases include "debug X", "X is down", "why is X broken", "check X service", "X not working", "investigate X".

Use this skill when enabling, moving, or migrating a NixOS service between hosts (doc1/proxmox-vm, doc2, igpu, framework, etc.), or when verifying that a service is actually working after deployment. Trigger phrases include "move X to host Y", "enable X on Y", "deploy X", "is X working", "verify X is up", "X isn't accessible", "can't reach X".

Pull overnight failure diagnoses (claude -p output) for nightly nixos-upgrade and rolling-flake-update from Loki, audit recent Gotify pings on doc2, AND review any auto-generated RCA fix PRs on Forgejo, then summarise with a merge recommendation per PR. Use when the user says "triage last night", "triage overnight", "what failed overnight", "what broke last night", or similar morning-ritual phrasing.

Measure Wi-Fi/LAN throughput with iperf3 to choose a safe Moonlight/Sunshine streaming bitrate. Use when the user asks to test iperf, size a Moonlight stream, compare Wi-Fi clients, check phone/laptop streaming performance, or diagnose UDP/TCP throughput from an SSH-reachable client such as framework or phone.

Read-only root cause analysis for homelab alerts. Investigate, diagnose, and optionally open a signed PR to fix config issues in nixosconfig.

Manage the *arr media stack — Radarr, Sonarr, Prowlarr (indexers) and NZBHydra2 (usenet) — plus the qBittorrent/NZBGet download clients, over their HTTP APIs. Use when the user mentions radarr, sonarr, prowlarr, indexers, an "arr" app, usenet/NZB, NZBHydra2, NZBGeek, qbt/qBittorrent grabs, or download-client / quality / delay-profile config.

Manage Audiobookshelf library - scan, search, match metadata, edit books, upload covers, trigger backups. Use when user mentions audiobookshelf, ABS, abs, audiobooks library, or book metadata.

Control Home Assistant - entities, automations, dashboards, and media playback

Route homelab operations to the git-tracked Hermes skills migrated from nixosconfig/.claude/agents, and use the matching MCP toolsets when available.

Search AND read Andy's personal + work mail archive — find emails, recall correspondence, reconstruct events (a trip, a deal, an invoice chain), and read attachment contents (PDF invoices, etc.). A trusted EA over the mail. Runs only from the doc1 bastion, human-present; never available to hermes or any always-on/automated agent.

Drive a real browser to test web UIs — especially logs.ablz.au (Grafana LGTM dashboards). Use for clicking through dashboards, snapshotting panels, tuning queries, and verifying rendered output.

Manage the tower Unraid host over SSH — Docker containers (Plex etc.), the array (mdcmd), KVM VMs (virsh), ZFS pools, shares, and system health. Use when the user mentions tower, Unraid, Plex, or a tower container/VM/disk/share.

Manage UniFi network - devices, clients, networks, WLANs, and port profiles

Land a dev box's local commits onto Forgejo master by relaying them through the doc1 bastion. Dev boxes (epi, framework) hold NO push token by design — doc1 is the sole writer. The skill fetches the dev box's commits over SSH, verifies each is signed by a hosts.nix key, rebases them onto current master, security-reviews every diff against least-privilege, then pushes ONLY after the human says "go". Trigger phrases include "pull commits from epi", "pull from framework", "land epi's commits", "push epi's work", "relay epi", "get epi's commits up", "push the dev box commits", "gated push".

Use this skill when creating, modifying, or reviewing a NixOS service module under `modules/nixos/services/`, or when adding container/database/proxy/monitoring wiring for a homelab service. Covers the service hierarchy (upstream module > custom module > OCI container), `mk-pg-container` / `mk-mariadb-container` patterns, sops secret layout, DNS-first networking, deep probes, errorPatterns, sandbox patterns, and the pre-commit checklist. Trigger phrases include "new service module", "add service X", "wire up X in nixos", "review this module", "service module checklist", "least-privilege audit on this module".

Wire this Claude Code session into the voice.ablz.au SSE bridge so assistant replies are spoken aloud through the user's phone. Use when the user says "talk to me", "voice mode", "I'm in the car", "drive mode", or similar phrasing. Also use the unregister command when they say "stop talking", "turn off voice", or "I'm at the desk again".

Recover audiobook chapter titles and boundaries when source files lost them but you have a matching ebook, TOC, or Whisper transcript. Use this for "fix audiobook chapters", "recover chapter names", "match transcript to ebook", or similar ABS chapter-repair work, especially when pause-based methods fail.

Prepare audio + artwork for a Yoto MYO (Make Your Own) card. Use this for turning TV show seasons or music albums into Yoto-uploadable track folders. Trigger phrases include "make a yoto card", "yoto card for X", "rip audio for yoto", "turn X into a yoto", or any mention of uploading to yotoplay.

Query Uptime Kuma monitor status and metrics using the API key

Decrypt and edit SOPS-encrypted secrets in this repo

Send a Gotify push before requesting human input