forked from
lass.pds.lassul.us/superconfig
This repository has no description
configs.orca: add ide config, move server, add gh
author
lassulus
date
(Oct 7, 2026, 4:24 PM CEST)
commit
bea4780c
bea4780c1a13e03f6582e6471d5469f4d2d6815c
parent
34fcacc9
34fcacc92a2bacc025d3978ebae48a83056495d7
+81
-64
-63
configs/orca-server.nix
-63
configs/orca-server.nix
···
1
-
# Headless Orca runtime (https://onorca.dev), reachable over retiolum.
2
-
# Agents, terminals and worktrees run as the orca user; log in as orca to
3
-
# set up agents and to clone repos.
4
-
# Pairing URL for a client (Settings → Remote Orca Servers → Add Server):
5
-
# journalctl -u orca-server | grep 'Pairing URL'
6
-
{
7
-
self,
8
-
config,
9
-
pkgs,
10
-
...
11
-
}:
12
-
let
13
-
llm = self.inputs.llm-agents.packages.${pkgs.system};
14
-
port = 6768;
15
-
in
16
-
{
17
-
users.users.orca = {
18
-
isNormalUser = true;
19
-
home = "/home/orca";
20
-
createHome = true;
21
-
group = "users";
22
-
useDefaultShell = true;
23
-
openssh.authorizedKeys.keys = [
24
-
self.keys.ssh.barnacle.public
25
-
self.keys.ssh.yubi_pgp.public
26
-
self.keys.ssh.termux_massulus.public
27
-
self.keys.ssh.yubi1.public
28
-
self.keys.ssh.yubi2.public
29
-
self.keys.ssh.solo2.public
30
-
self.keys.ssh.xerxes.public
31
-
self.keys.ssh.ignavia.public
32
-
self.keys.ssh.massulus.public
33
-
];
34
-
packages = [
35
-
llm.orca
36
-
pkgs.omp
37
-
];
38
-
};
39
-
40
-
systemd.services.orca-server = {
41
-
description = "Orca headless runtime";
42
-
wantedBy = [ "multi-user.target" ];
43
-
after = [ "network-online.target" ];
44
-
wants = [ "network-online.target" ];
45
-
# Terminals and agents started by Orca inherit this, so give them the
46
-
# same tools as an interactive login of the orca user.
47
-
path = [
48
-
"/run/wrappers"
49
-
"/etc/profiles/per-user/orca"
50
-
"/run/current-system/sw"
51
-
];
52
-
serviceConfig = {
53
-
ExecStart = "${llm.orca}/bin/orca serve --port ${toString port} --pairing-address ${config.networking.hostName}.r";
54
-
Restart = "on-failure";
55
-
RestartSec = 10;
56
-
User = "orca";
57
-
Group = "users";
58
-
WorkingDirectory = "/home/orca";
59
-
};
60
-
};
61
-
62
-
networking.firewall.interfaces.retiolum.allowedTCPPorts = [ port ];
63
-
}
+14
configs/orca/ide.nix
+14
configs/orca/ide.nix
···
1
+
# Orca desktop app (https://onorca.dev); for the headless runtime see
2
+
# ./server.nix. Orca shells out to these tools for the logged-in user.
3
+
{
4
+
self,
5
+
pkgs,
6
+
...
7
+
}:
8
+
{
9
+
environment.systemPackages = [
10
+
self.packages.${pkgs.system}.orca
11
+
# GitHub issues/PRs in the work item lists.
12
+
pkgs.gh
13
+
];
14
+
}
+65
configs/orca/server.nix
+65
configs/orca/server.nix
···
1
+
# Headless Orca runtime (https://onorca.dev), reachable over retiolum.
2
+
# Agents, terminals and worktrees run as the orca user; log in as orca to
3
+
# set up agents and to clone repos.
4
+
# Pairing URL for a client (Settings → Remote Orca Servers → Add Server):
5
+
# journalctl -u orca-server | grep 'Pairing URL'
6
+
{
7
+
self,
8
+
config,
9
+
pkgs,
10
+
...
11
+
}:
12
+
let
13
+
llm = self.inputs.llm-agents.packages.${pkgs.system};
14
+
port = 6768;
15
+
in
16
+
{
17
+
users.users.orca = {
18
+
isNormalUser = true;
19
+
home = "/home/orca";
20
+
createHome = true;
21
+
group = "users";
22
+
useDefaultShell = true;
23
+
openssh.authorizedKeys.keys = [
24
+
self.keys.ssh.barnacle.public
25
+
self.keys.ssh.yubi_pgp.public
26
+
self.keys.ssh.termux_massulus.public
27
+
self.keys.ssh.yubi1.public
28
+
self.keys.ssh.yubi2.public
29
+
self.keys.ssh.solo2.public
30
+
self.keys.ssh.xerxes.public
31
+
self.keys.ssh.ignavia.public
32
+
self.keys.ssh.massulus.public
33
+
];
34
+
packages = [
35
+
llm.orca
36
+
pkgs.omp
37
+
# GitHub issues/PRs in the work item lists.
38
+
pkgs.gh
39
+
];
40
+
};
41
+
42
+
systemd.services.orca-server = {
43
+
description = "Orca headless runtime";
44
+
wantedBy = [ "multi-user.target" ];
45
+
after = [ "network-online.target" ];
46
+
wants = [ "network-online.target" ];
47
+
# Terminals and agents started by Orca inherit this, so give them the
48
+
# same tools as an interactive login of the orca user.
49
+
path = [
50
+
"/run/wrappers"
51
+
"/etc/profiles/per-user/orca"
52
+
"/run/current-system/sw"
53
+
];
54
+
serviceConfig = {
55
+
ExecStart = "${llm.orca}/bin/orca serve --port ${toString port} --pairing-address ${config.networking.hostName}.r";
56
+
Restart = "on-failure";
57
+
RestartSec = 10;
58
+
User = "orca";
59
+
Group = "users";
60
+
WorkingDirectory = "/home/orca";
61
+
};
62
+
};
63
+
64
+
networking.firewall.interfaces.retiolum.allowedTCPPorts = [ port ];
65
+
}