alpha
Login
or
Join now
hermes.pds.lassul.us
/
superconfig
forked from
lass.pds.lassul.us/superconfig
Star
0
Fork
0
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
This repository has no description
Star
0
Fork
0
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
Overview
Issues
Pulls
Pipelines
superconfig
/
machines
19 folders
at
e731cb835ff8310562d9a679739528c550a24458
Hermes
configs.monitoring: vector agents, victoria* + alertmanager stack on styx/coaxmetal
6d ago
e731cb83
acheron
configs.gg23.audio: low-latency ROC/AirPlay hub on acheron with room selection acheron gets a minimal system-wide pipewire with a virtual "hub" sink. Any LAN machine sends into it via ROC while `gg23-audio` from tools/gg23-audio runs (ROC sink loaded into pipewire-pulse, removed again on Ctrl-C), barnacle via AirPlay 1 (shairport-sync, "gg23", pipewire backend, mDNS on int0 only). The hub monitor is linked to ROC sinks for shodan and icarus (room.nix), chosen with `audio-room shodan|icarus|both|off` or from Home Assistant via MQTT discovery (select + buttons). Retained MQTT commands restore the choice after pipewire restarts. The rooms have no stable LAN address, so the hub sends to their retiolum IPs and they accept the ROC ports only from acheron on retiolum.
1 week ago
aergia
configs: remove dunst
2 weeks ago
atlas
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
barnacle
machines.xerxes: remove
1 week ago
coaxmetal
configs.monitoring: vector agents, victoria* + alertmanager stack on styx/coaxmetal Every NixOS machine runs Vector (host metrics, internal metrics, journal) and writes to VictoriaMetrics/VictoriaLogs on both styx and coaxmetal, each sink with a 512 MiB disk buffer. Both servers run vmalert (metrics and LogsQL instances), a two-node Alertmanager cluster posting to Matrix via matrix-alertmanager-receiver, Gatus (results scraped into VictoriaMetrics, alerted on by vmalert) and Grafana with provisioned datasources and dashboards. All ports are open on retiolum only. Replaces telegraf on neoprism, including the borgbackup status file.
6 days ago
daedalus
configs: replace krebs.iptables with the nftables firewall Every machine now uses networking.firewall on networking.nftables with the same defaults krebs.iptables had: input and forward drop, all ICMP accepted, no reverse path filter. Open ports and trusted interfaces are unchanged on all machines. - interface port rules become firewall.interfaces.<if>.allowed*Ports, interface-wide accepts trustedInterfaces - forwarding goes through extraForwardRules; yellow keeps forward unfiltered for the transmission namespace - NAT rules become per-module networking.nftables.tables - ssh-redirect: 45621 redirects to 22, new connections to 22 are reset unless they come from lo, retiolum or wiregrill - xerxes: the JOOL xtables target is added by jool-iptables through ip6tables-nft, with XTABLES_LIBDIR pointing at jool's extension - flushRuleset = false so libvirt/podman/jool tables survive reloads; extraDeletions drops the iptables-nft tables krebs.iptables left Rules that were silently ignored while networking.firewall was disabled, such as clan's yggdrasil filter, now take effect.
2 weeks ago
green
machines.green: disable eternal-terminal eternal-terminal 7.0.0 fails to build in the current nixpkgs (cmake_pch.hxx.gch), which failed green's toplevel in the CI farm.
1 week ago
hilum
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
icarus
configs.gg23.audio: low-latency ROC/AirPlay hub on acheron with room selection acheron gets a minimal system-wide pipewire with a virtual "hub" sink. Any LAN machine sends into it via ROC while `gg23-audio` from tools/gg23-audio runs (ROC sink loaded into pipewire-pulse, removed again on Ctrl-C), barnacle via AirPlay 1 (shairport-sync, "gg23", pipewire backend, mDNS on int0 only). The hub monitor is linked to ROC sinks for shodan and icarus (room.nix), chosen with `audio-room shodan|icarus|both|off` or from Home Assistant via MQTT discovery (select + buttons). Retained MQTT commands restore the choice after pipewire restarts. The rooms have no stable LAN address, so the hub sends to their retiolum IPs and they accept the ROC ports only from acheron on retiolum.
1 week ago
ignavia
configs.spora: remove, with mycelium and the spora input
1 week ago
mors
machines.mors: remove transgui
1 week ago
neoprism
configs.monitoring: vector agents, victoria* + alertmanager stack on styx/coaxmetal Every NixOS machine runs Vector (host metrics, internal metrics, journal) and writes to VictoriaMetrics/VictoriaLogs on both styx and coaxmetal, each sink with a 512 MiB disk buffer. Both servers run vmalert (metrics and LogsQL instances), a two-node Alertmanager cluster posting to Matrix via matrix-alertmanager-receiver, Gatus (results scraped into VictoriaMetrics, alerted on by vmalert) and Grafana with provisioned datasources and dashboards. All ports are open on retiolum only. Replaces telegraf on neoprism, including the borgbackup status file.
6 days ago
orange
modules.sync-containers3: move options to lass.sync-containers3
2 weeks ago
radio
modules.sync-containers3: move options to lass.sync-containers3
2 weeks ago
shodan
configs.gg23.audio: low-latency ROC/AirPlay hub on acheron with room selection acheron gets a minimal system-wide pipewire with a virtual "hub" sink. Any LAN machine sends into it via ROC while `gg23-audio` from tools/gg23-audio runs (ROC sink loaded into pipewire-pulse, removed again on Ctrl-C), barnacle via AirPlay 1 (shairport-sync, "gg23", pipewire backend, mDNS on int0 only). The hub monitor is linked to ROC sinks for shodan and icarus (room.nix), chosen with `audio-room shodan|icarus|both|off` or from Home Assistant via MQTT discovery (select + buttons). Retained MQTT commands restore the choice after pipewire restarts. The rooms have no stable LAN address, so the hub sends to their retiolum IPs and they accept the ROC ports only from acheron on retiolum.
1 week ago
starkstrom
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
styx
configs.monitoring: vector agents, victoria* + alertmanager stack on styx/coaxmetal Every NixOS machine runs Vector (host metrics, internal metrics, journal) and writes to VictoriaMetrics/VictoriaLogs on both styx and coaxmetal, each sink with a 512 MiB disk buffer. Both servers run vmalert (metrics and LogsQL instances), a two-node Alertmanager cluster posting to Matrix via matrix-alertmanager-receiver, Gatus (results scraped into VictoriaMetrics, alerted on by vmalert) and Grafana with provisioned datasources and dashboards. All ports are open on retiolum only. Replaces telegraf on neoprism, including the borgbackup status file.
6 days ago
virtulus
configs.spora: remove, with mycelium and the spora input
1 week ago
yellow
configs.spora: remove, with mycelium and the spora input
1 week ago