theclaw

devices/server/configuration.nix

@@ -64,7 +64,8 @@ in {
       openFirewall = true; # 11434
       host = "0.0.0.0";
       syncModels = true;
-      loadModels = [ "mistral:7b" "phi3.5:3.8b" ];
+      loadModels =
+        [ "qwen3:4b" "lfm2.5-thinking:1.2b" "ministral-3:8b" "ministral-3:3b" ];
     };
   };
 
@@ -161,6 +162,7 @@ in {
       9000 # mealie
       8989 # sonarr
       10222 # taskchampion-sync-server
+      18789 # openclaw
     ];
     firewall.allowedUDPPorts = [
       5353 # mDNS
@@ -170,12 +172,15 @@ in {
   time.timeZone = "America/Toronto";
 
   users.users."${user}" = {
+    isNormalUser = true;
+    group = "polen";
     extraGroups = [ "wheel" "transmission" "jellyfin" "polensky" "docker" ];
     shell = pkgs.zsh;
     openssh.authorizedKeys.keys = [
       "ssh-rsa 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 polen@polen-xps"
     ];
   };
+  users.groups.polen = { };
 
   # Luna user for OpenClaw AI assistant
   users.users.luna = {
@@ -197,16 +202,17 @@ in {
     defaultSopsFile = ../../secrets/secrets.yaml;
     age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
     secrets = {
-      luna-telegram-token = {
+      luna_telegram_token = {
         owner = "luna";
         group = "luna";
       };
-      luna-gateway-token = {
+      luna_gateway_token = {
         owner = "luna";
         group = "luna";
       };
     };
   };
+
   environment.systemPackages = with pkgs; [
     neovim
     htop-vim