forked from
lass.pds.lassul.us/superconfig
This repository has no description
neoprism: disable emergency mode so bad deploys stay reachable
author
lassulus
date
(Jul 25, 2026, 11:28 PM CEST)
commit
ce7c21bc
ce7c21bc3e0a0d8bdc6a5b45285f758461cfc4f0
parent
51d66990
51d66990ece204830188d0e3d56f7c3f0fce2d91
+11
+11
machines/neoprism/config.nix
+11
machines/neoprism/config.nix
···
158
158
# mode (which has no network and bricks the box).
159
159
fileSystems."/var/lib/radicle".options = [ "nofail" ];
160
160
161
+
# Fleet-wide safety net: this box is headless (Hetzner, console only via
162
+
# KVM), so a failed critical target must never strand us at the emergency
163
+
# shell. With emergency mode disabled systemd keeps booting instead of
164
+
# dropping to a console -> network + sshd still come up, so a bad deploy
165
+
# (e.g. a missing dataset, as happened once) leaves the box reachable to
166
+
# fix and redeploy rather than bricked. Mirrors nixpkgs' headless profile.
167
+
# Note: we intentionally do NOT auto-roll-back to the previous generation;
168
+
# our config is pulled from git by system.autoUpgrade, so a rollback would
169
+
# just re-pull the same broken config on the next run (a rollback loop).
170
+
systemd.enableEmergencyMode = false;
171
+
161
172
krebs.build.host = config.krebs.hosts.neoprism;
162
173
system.stateVersion = "24.05";
163
174
}