Services

All services run behind Caddy with Cloudflare DNS TLS. Most use the mkService factory which provides systemd units, dedicated users, reverse proxy, backup integration, and port conflict detection.

Live status

• Dashboard: infra.dunkirk.sh
• Machine manifest: nix eval --json .#services-manifest or /services.json

Service documentation

These services have detailed option references and architecture notes:

• bore — HTTP/TCP/UDP tunnel proxy with optional OAuth
• cedarlogic — circuit simulator with WebSocket collaboration
• control — admin dashboard for Caddy feature toggles
• emojibot — multi-instance Slack emoji management
• herald — git SSH hosting with email via SMTP/DKIM
• knot-sync — mirrors Tangled knot repos to GitHub on cron

For all other services, check the manifest or the module source in modules/nixos/services/.