This repository has no description
1.3 kB
39 lines
1{ config, lib, ... }:
2{
3 imports = [
4 ../../2configs
5 ../../2configs/retiolum.nix
6 ../../2configs/ssh-redirect.nix
7 ../../2configs/autoupdate.nix
8 ./ipfs.nix
9 ./ipfs-endpoint.nix
10 ];
11
12 # starkstrom is not (yet) in the shared kartei registry, so its retiolum
13 # identity is declared here. Migrate this block into kartei/lass to give the
14 # rest of the fleet starkstrom's keys (full mesh); until then only starkstrom
15 # knows the peers it ConnectTo's.
16 # Pubkeys are read from this machine's clan vars, so they always match the
17 # private keys deployed to the host.
18 krebs.hosts.starkstrom = {
19 owner = config.krebs.users.lass;
20 monitoring = true;
21 nets.retiolum = {
22 ip4.addr = "10.243.0.100";
23 ip6.addr = "42:0:ce16::100";
24 aliases = [ "starkstrom.r" ];
25 tinc.pubkey = config.clan.core.vars.generators.retiolum.files."retiolum.rsa_key.pub".value;
26 # tincr writes the pub as `Ed25519PublicKey = <key>`; keep only the key.
27 tinc.pubkey_ed25519 = lib.last (
28 lib.splitString " " (
29 lib.removeSuffix "\n"
30 config.clan.core.vars.generators.retiolum.files."retiolum.ed25519_key.pub".value
31 )
32 );
33 };
34 };
35
36 krebs.build.host = config.krebs.hosts.starkstrom;
37
38 system.stateVersion = "25.11";
39}