Install latest beans via nix flake (flakes-6ne0)

Task · normal

Auto-restart firewalld when zone config changes (flakes-ja9k)

Bug · normal

Setup quartz to preview and publish oxide projects (flakes-k391)

Task · normal

Check MCPVault, to see whether it’s a better option for the markdowns (flakes-k3pr)

Task · normal

Install Zeroclaw (flakes-kj17)

Task · normal

Container-first infrastructure (flakes-qbvb)

Epic · normal · (6/7 done)

• ✓ Migrate container IPs to new scheme (flakes-cjao)
• ✓ Drop nixos-unified, use raw flake-parts (flakes-dght)
• ○ Declarative incus fleet management (flakes-ihxf)
• ✓ Fix CA cert injection to be declarative (flakes-krtw)
• ✓ Containerize OneCLI (flakes-t9u2)
• ✓ Setup SearXNG search for agents (flakes-woco)
• ✓ Container-to-host network isolation (flakes-x821)