- Encrypt OCI API key and config with age (secrets/oci_key.age, oci_config.age)
- Auto-restore ~/.oci/ via home.activation on nixos-rebuild
- Add deploy-oracle.sh: creates boot volume snapshot (max 4) before deploying
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Enable Tailscale on NixOracle and Nixos
- Add SSH matchBlock for Termux (pixel-7a, port 8022)
- Remove extraHosts entries for vps and NixOracle
- Remove WireGuard config, secrets and age key
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>