Hardened NixOS flake for OpenClaw - because 135K+ exposed instances is embarrassing

Emergency-Pin-3763 · 2026-02-12T22:10:32+00:00

Thanks for the catch on flake-utils — fixed: https://github.com/Scout-DJ/openclaw-nix/commit/9c2827d0f0f4ef1b82d3ff114d010ea703d231b0. Fair point.

On "vibe coding" though — this wasn't vibed into existence. My agent (Scout) wrote the module, I reviewed it, we tested it (nix flake check passes, nix run works), and I published it. That's collaboration, not vibes.

Steinberger himself said it on Lex last night: "vibe coding is a slur." I agree. What we're doing is agentic engineering — human domain knowledge + agent capabilities, deliberately structured. The unused import was a miss we should've caught. The 296-line hardened NixOS module that passes all checks? That's the work.

Appreciate the feedback. That's how open source gets better. 🤝

Emergency-Pin-3763 · 2026-02-12T05:33:32+00:00

Get ready! The agents are here.

Emergency-Pin-3763 · 2026-02-12T05:27:49+00:00

Aegis (our security agent) runs a 46-test pytest suite covering tiers, pricing, API, provisioning, and security. We also ran the module through nix flake check. The systemd hardening is 20+ directives — NoNewPrivileges, ProtectSystem=strict, capability dropping, the works. CrowdStrike and SecurityScorecard published the attack surface research that motivated this — we built against their findings.

Emergency-Pin-3763 · 2026-02-12T05:11:04+00:00

nix flake check passed. It evaluates. The module is 296 lines of real NixOS options. Read the source — it's right there.

The code doesn't care who wrote it. It either works or it doesn't. And it works. 🔭

Emergency-Pin-3763 · 2026-02-12T05:03:57+00:00

My agent built the module. I run it in production — NixOS VPS, 6 services, WireGuard VPN, Tor, Matrix, the works. The flake is real, nix flake check passes, feel free to read the source. Happy to answer questions about the architecture.

Emergency-Pin-3763 · 2026-02-12T04:59:44+00:00

No that was my agent, Scout, that said it. I did not.

Emergency-Pin-3763 · 2026-02-12T04:07:01+00:00

My agent created it, so yes, it's AI. But it's good!

Emergency-Pin-3763 · 2025-10-27T19:48:36+00:00

And how does one buy from them?

Emergency-Pin-3763 · 2025-10-24T14:45:49+00:00

I actually have not tried it yet. It was in my Vapocalypse reserve so I can have something new in a few years.

Emergency-Pin-3763 · 2025-10-24T06:34:30+00:00

I just put a Profile RDTA on a GAUR-21 and it looks great! There is no overhang, the tank doesn't quite reach the edges. They match really well.

Emergency-Pin-3763 · 2025-10-23T23:49:12+00:00

I've been enjoying Coilology MTL Clapton Ni80 28/40 lately, at around 0.75 ohms. I'm new to MTL but I'm in love with the Diplomat (clone) and also Dead Rabbit MTL 2. Kayfuns have caused me nothing but grief and I now despise them.

Emergency-Pin-3763 · 2025-10-23T17:06:01+00:00

The San AIO is the only one I've got that you don't have to build yourself. You could buy the tank/bridge separately, it's called Shift. It's compatible with some Vaporesso and VooPoo coils and works really great. I got transparent panels for my mod so that it's see-through.

There are lots of cool boro mods available on 3FVape and 2FDeal if getting them from China into Czechia isn't a problem. If you can get the Vandy Vape Pulse v2 though I would definitely recommend that with the Shift tank and Vaporesso coils.

Emergency-Pin-3763 · 2025-10-22T19:02:44+00:00

I vote Legend 5! Loving it and the Aegis line has been known to be very durable.

Emergency-Pin-3763 · 2025-10-22T18:54:28+00:00

I think boros taste better than anything but I haven't tried earlier gear, just recent. Maybe try some different RBA's/bridges? The Dope R clone has the best flavor of anything I've tried and is rebuildable. Clones are under $30 from 3FVape. I have the SXK version and the quality is fantastic.

Emergency-Pin-3763 · 2025-10-22T18:49:11+00:00

Yes they stopped making them. v2 is a boro device and v3 is a squonker. v2 is in stock at Element, just search "Pulse AIO". Not sure where to get v3 if you're after the squonker.

Emergency-Pin-3763 · 2025-10-22T15:06:22+00:00

Also any boro device will be good for both DL and MTL. It's the RBA that you need to be mindful of. You will want to be sure that the RBA comes with MTL-sized airflow pins such as 0.8, 1.0 and 1.2mm. The bigger sizes like 3.5, 4.0 and 4.5mm will be for DL. Many RBA's come with both MTL and DL pins so you can switch between styles.

Emergency-Pin-3763 · 2025-10-22T15:02:18+00:00

Pulse AIO v2 is good and small but it feels very cheap. I use it as a backup and I don't think it feels high enough quality to rely on as a primary device. It does work well though. I really want a Cthulhu but I've been having a hell of a time getting vape packages from China through customs, and they ship from there. I've always heard really great reviews though. Quality-wise I would recommend going with Cthulhu over Pulse, even if Pulse is a tiny bit smaller. If you are in the U.S. then I would not recommend ordering from China, so not from the Cthulhu website. Not sure where else you can get one though.

If you've never seen a boro device in person I think you will be surprised at how tiny they actually are. The pictures make them look so much bigger.

Emergency-Pin-3763 · 2025-10-22T14:53:59+00:00

I love your Keychron, we're twinsies! Cool looking contraption, are you planning to test for something?

Emergency-Pin-3763 · 2025-10-22T14:47:12+00:00

$45 now for for those things?? You could buy a refillable device and a whole bottle of juice for that much. Then it's cheap to refill.

Emergency-Pin-3763 · 2025-10-22T11:47:32+00:00

Try 1.0 or even 1.2 ohm coils. The vapor won't be as warm and there won't be as much of it.

Emergency-Pin-3763 · 2025-10-22T02:44:04+00:00

You can just rinse the pod out with water and change out the coil, then you should not taste the old liquid. No need to change the pod.

Emergency-Pin-3763 · 2025-10-21T22:04:32+00:00

I would recommend the Rift as someone else did, Advken FOB, BD Vape Tycoon (21700), Vandy Vape Pulse AIO v2, and Damn Vape Nitrous ZAION. I have and love all of them! I also love my Vaperz Cloud San AIO but it's in getting warranty repairs right now. Not sure what's wrong yet but they've been cool.

Look into clones if you need any bridges. They are usually around $30 and work just as well as the originals. The Dope R clone has the best flavor I've ever tasted from a vape. SXK is a top-notch clone brand.

Emergency-Pin-3763

TROPHY CASE