This repository has no description
1.2 kB
42 lines
1{
2 self,
3 config,
4 ...
5}:
6let
7 # acheron replaces styx as the gg23 router. Like starkstrom it has no card in
8 # the shared kartei registry; its retiolum identity lives in retiolum/
9 # (self.retiolum), which every superconfig machine injects into its tinc
10 # host set. Move that entry into kartei/lass if the rest of krebs should be
11 # able to reach it too.
12 net = self.retiolum.hosts.acheron.nets.retiolum;
13in
14{
15 imports = [
16 ../../2configs
17 ../../2configs/retiolum.nix
18 ../../2configs/gg23.nix
19 ];
20
21 # krebs.build.host and the monitoring/dns bits still read this card, so build
22 # it from the same data rather than repeating the addresses and keys.
23 # stockholm's host type additionally insists on the legacy RSA pubkey, which
24 # tincr ignores.
25 krebs.hosts.acheron = {
26 owner = config.krebs.users.lass;
27 monitoring = true;
28 nets.retiolum = {
29 inherit (net) ip4 ip6 aliases;
30 tinc = {
31 pubkey = config.clan.core.vars.generators.retiolum.files."retiolum.rsa_key.pub".value;
32 inherit (net.tinc) pubkey_ed25519;
33 };
34 };
35 };
36
37 krebs.build.host = config.krebs.hosts.acheron;
38
39 services.earlyoom.enable = true;
40
41 system.stateVersion = "25.11";
42}