- Build scraper (Rust) with Nix — cargo build --release - Create scraper systemd unit (port 4091), env from Docker config - Fix HOME/CARGO_HOME for Rust/cargo in Nix sandbox - Update Traefik apps.yaml: scraper -> host.docker.internal:4091 - Add iptables rules for port 4091 (Docker->host) - Add GitHub Actions workflow: nix-build.yml (determinate-nix + deploy) - Save iptables rules persistently