+1 -2

AGENTS.md

View file Reviewed

··· 59 59 60 60 # Access machines via SSH (as root, see below) 61 61 ssh root@<machine-name>.r # via retiolum 62 62 - ssh root@<machine-name>.s # via spora 63 62 torify ssh root@$(pass show machines/<machine-name>/tor-hostname) # via tor 64 63 ``` 65 64 ··· 84 83 ## Machine Facts and Secrets via vars 85 84 86 85 - SSH public keys 87 87 - - Network identities (retiolum, mycelium, zerotier) 86 86 + - Network identities (retiolum, zerotier) 88 87 - Syncthing IDs 89 88 - DKIM keys (for mail servers) 90 89

-21

flake.lock

View file Reviewed

··· 687 687 "nixpkgs-triage": "nixpkgs-triage", 688 688 "nixvim": "nixvim", 689 689 "sigexec": "sigexec", 690 690 - "spora": "spora", 691 690 "tincr": "tincr", 692 691 "treefmt-nix": "treefmt-nix_4", 693 692 "wrappers": "wrappers" ··· 748 747 "original": { 749 748 "owner": "Mic92", 750 749 "repo": "sops-nix", 751 751 - "type": "github" 752 752 - } 753 753 - }, 754 754 - "spora": { 755 755 - "inputs": { 756 756 - "nixpkgs": [ 757 757 - "nixpkgs" 758 758 - ] 759 759 - }, 760 760 - "locked": { 761 761 - "lastModified": 1712264007, 762 762 - "narHash": "sha256-E1G8CeBMBJe5k8caBYtJiAS65AQqgE4Lx6XvUnAi+YM=", 763 763 - "owner": "krebs", 764 764 - "repo": "spora", 765 765 - "rev": "93cb4d17a6d3c224027c4f4538ce1fb3d805b76e", 766 766 - "type": "github" 767 767 - }, 768 768 - "original": { 769 769 - "owner": "krebs", 770 770 - "repo": "spora", 771 750 "type": "github" 772 751 } 773 752 },

-4

flake.nix

View file Reviewed

··· 49 49 50 50 nixos-hardware.url = "github:nixos/nixos-hardware"; 51 51 52 52 - spora.url = "github:krebs/spora"; 53 53 - # spora.url = "git+file:/home/lass/src/spora"; 54 54 - spora.inputs.nixpkgs.follows = "nixpkgs"; 55 55 - 56 52 nix-rosetta-builder.url = "github:cpick/nix-rosetta-builder"; 57 53 nix-rosetta-builder.inputs.nixpkgs.follows = "nixpkgs"; 58 54

+1 -1

configs/gg23.nix

View file Reviewed

··· 69 69 }; 70 70 } 71 71 { 72 72 - # styx (et0), ex-router: mycelium peer 72 72 + # styx (et0), ex-router 73 73 dhcpServerStaticLeaseConfig = { 74 74 Address = "10.42.0.3"; 75 75 MACAddress = "3c:7c:3f:7e:e2:39";

-37

configs/spora.nix

Reviewed

··· 1 1 - { 2 2 - self, 3 3 - config, 4 4 - pkgs, 5 5 - ... 6 6 - }: 7 7 - { 8 8 - imports = [ 9 9 - self.inputs.spora.nixosModules.spora 10 10 - ]; 11 11 - services.mycelium = { 12 12 - enable = true; 13 13 - keyFile = config.clan.core.vars.generators.mycelium.files.mycelium_key.path; 14 14 - extraArgs = [ 15 15 - "--silent" 16 16 - ]; 17 17 - peers = [ 18 18 - "quic://10.42.0.3:9651" 19 19 - "tcp://10.42.0.3:9651" 20 20 - ]; 21 21 - }; 22 22 - clan.core.vars.generators.mycelium = { 23 23 - files."mycelium_key" = { }; 24 24 - files."mycelium_ip".secret = false; 25 25 - files."mycelium_pubkey".secret = false; 26 26 - runtimeInputs = [ 27 27 - pkgs.mycelium 28 28 - pkgs.coreutils 29 29 - pkgs.jq 30 30 - ]; 31 31 - script = '' 32 32 - timeout 5 mycelium --key-file "$secrets"/mycelium_key || : 33 33 - mycelium inspect --key-file "$secrets"/mycelium_key --json | jq -r .publicKey > "$facts"/mycelium_pubkey 34 34 - mycelium inspect --key-file "$secrets"/mycelium_key --json | jq -r .address > "$facts"/mycelium_ip 35 35 - ''; 36 36 - }; 37 37 - }

-1

machines/ignavia/config.nix

View file Reviewed

··· 79 79 pkgs.gh 80 80 self.packages.${pkgs.system}.bank 81 81 pkgs.ddcutil 82 82 - pkgs.mycelium 83 82 pkgs.rbw 84 83 ]; 85 84

-1

machines/virtulus/config.nix

View file Reviewed

··· 3 3 system.stateVersion = lib.mkForce "25.05"; 4 4 imports = [ 5 5 ../../configs 6 6 - ../../configs/spora.nix 7 6 (modulesPath + "/image/images.nix") 8 7 ]; 9 8

-6

machines/yellow/config.nix

View file Reviewed

··· 18 18 ../../configs/services/archiver-bot.nix 19 19 ]; 20 20 21 21 - # we need to configure another port for the mycelium admin interface, because it conflicts with sonarr. 22 22 - services.mycelium.extraArgs = [ 23 23 - "--api-addr" 24 24 - "127.0.0.1:9898" 25 25 - ]; 26 26 - 27 21 services.transmission.settings.peer-port = torrentport; 28 22 29 23 lass.sync-containers3.inContainer = {

-1

vars/per-machine/aergia/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 548:8e27:8593:277f:8867:f6c9:45ab:b4ea

-1

vars/per-machine/aergia/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - 27def081795e441f50e37acbe989451ec2afbd7edca3f199bbbb95cfa8440306

-1

vars/per-machine/coaxmetal/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 578:75d6:1e06:eb48:1063:15d:4b8a:3188

-1

vars/per-machine/coaxmetal/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - ab5ed63e1ab7f182012fd00674af0af9d48f540fbf05e26fe62c8461b8da0648

-1

vars/per-machine/daedalus/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 55c:e4e:1dc0:503f:69c1:d37f:4681:ef4c

-1

vars/per-machine/daedalus/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - 7a851152c8623c358dff87bf1c8a4c43982a9c1b9d99409482c4665ba645bd54

-1

vars/per-machine/green/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 455:25b:888d:6e69:3216:a2d5:8fca:9d28

-1

vars/per-machine/green/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - b7c11ff176779a5357813305e8ecdb9e3b0260cb7c646296c67aad93a3784601

-1

vars/per-machine/hilum/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 490:65ba:4d22:345d:1f4c:9db0:71d:7594

-1

vars/per-machine/hilum/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - eed81cc7879762e32ba3a91dd540da10a5db000e7960b8cf1630506dca16a107

-1

vars/per-machine/icarus/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 410:9142:d6:a7cc:d2cf:1e80:3e45:5d13

-1

vars/per-machine/icarus/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - bebe99c4875dc28998c1edfcdacd0458853e10055c3ad1c0c7729ccabc009360

-1

vars/per-machine/ignavia/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 441:5522:8034:a6a3:32b2:fc9f:cd36:72fb

-1

vars/per-machine/ignavia/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - 9d02349f77c294509f5bce444cfe3bbee3db2a47b061029a5976cfb459d6e07f

-1

vars/per-machine/mors/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 464:d486:875f:c13f:65f1:173d:71c8:b900

-1

vars/per-machine/mors/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - 4e95fe8651229c8be88ec504b92e0d58bb8b04be373b4d91656f8e805a2cd70e

-1

vars/per-machine/neoprism/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 56c:6fd4:125b:f135:b833:2f2d:7950:ad35

-1

vars/per-machine/neoprism/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - 5e12ea2f5c5002e5118dbe6c7c66c272c2939e1914b94e17bde982e1ad49c641

-1

vars/per-machine/orange/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 59b:941e:6976:cefe:3321:bcf7:6138:f84b

-1

vars/per-machine/orange/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - 39a0ae5ea37af9d4ef6a47bd2c5b0f6a4cf9017324a9759ddea43cfe3c634f7d

-1

vars/per-machine/radio/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 48e:b6eb:fd1c:ae8d:ad8d:c5cd:e52f:97d0

-1

vars/per-machine/radio/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - efc6d56f2bcf4f218aef3df271a3bc017e4c28c219f912238b319f6646e0cc1f

-1

vars/per-machine/shodan/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 550:c94d:468a:57ff:52c:41ca:2fd7:12d

-1

vars/per-machine/shodan/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - af6348fcce4549fabdd186aa5f01b682c560b98f752845b13dd7c0fd30643b28

-1

vars/per-machine/styx/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 47b:c62f:f289:4c92:54ff:c478:2bab:1cb8

-1

vars/per-machine/styx/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - 95743b32665f3cc2883b594ef9171464aa854a8fbf914efec9f61f89c1875143

-1

vars/per-machine/virtulus/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 50b:1b58:6343:217:a9cc:6688:f745:dff6

-1

vars/per-machine/virtulus/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - 46b2be8f8beec838af1b50218b486ff83438a889849c7ccd5387b3bde33fda7c

-1

vars/per-machine/yellow/mycelium/mycelium_ip/value

Reviewed

··· 1 1 - 500:d063:e73c:d47e:1c9e:c349:8e23:ff52

-1

vars/per-machine/yellow/mycelium/mycelium_pubkey/value

Reviewed

··· 1 1 - 26c379b97acb3f56e1c27ceb890f4437b9c8663cd1458c616d94f557a54eaa53