This repository has no description
radicle: run a public allow-all seed on neoprism (radicle.lassul.us, 80G quota)
Extend 2configs/radicle.nix into a public seed: allow-all seeding (scope=all),
listen 0.0.0.0:8776 + externalAddresses radicle.lassul.us:8776, radicle-httpd
behind an nginx vhost (radicle.lassul.us, ACME). Drop the tor proxy + onion
preferred seeds. Move the config off xerxes onto neoprism, and put the node
state on tank at /var/lib/radicle with an 80G ZFS quota (radicle has no built-in
byte quota; the dataset bounds it).
author
lassulus
date
(Jul 25, 2026, 11:28 PM CEST)
commit
66605dd8
66605dd827c84cae4bc3a18b4da0e4105923d479
parent
2a51b8eb
2a51b8eb20566a25fd72220911ed543dffdbd30d
+28
-7
+13
-6
2configs/radicle.nix
+13
-6
2configs/radicle.nix
···
22
22
23
23
node.openFirewall = true;
24
24
25
+
httpd = {
26
+
enable = true;
27
+
nginx = {
28
+
serverName = "radicle.lassul.us";
29
+
enableACME = true;
30
+
forceSSL = true;
31
+
};
32
+
};
33
+
25
34
settings = {
26
35
publicExplorer = "https://app.radicle.xyz/nodes/$host/$rid$path";
27
36
preferredSeeds = [
28
37
"z6MkrLMMsiPWUcNPHcRajuMi9mDfYckSoJyPwwnknocNYPm7@seed.radicle.xyz:8776"
29
-
"z6MkrLMMsiPWUcNPHcRajuMi9mDfYckSoJyPwwnknocNYPm7@irisradizskwweumpydlj4oammoshkxxjur3ztcmo7cou5emc6s5lfid.onion:8776"
30
38
"z6Mkmqogy2qEM2ummccUthFEaaHvyYmYBYh3dbe9W4ebScxo@seed.radicle.garden:8776"
31
-
"z6Mkmqogy2qEM2ummccUthFEaaHvyYmYBYh3dbe9W4ebScxo@rosarad5bxgdlgjnzzjygnsxrwxmoaj4vn7xinlstwglxvyt64jlnhyd.onion:8776"
32
39
];
33
40
web.pinned.repositories = [ ];
34
41
cli.hints = true;
35
42
node = {
36
43
alias = config.networking.hostName;
37
-
listen = [ ];
44
+
listen = [ "0.0.0.0:8776" ];
38
45
peers.type = "dynamic";
39
46
connect = [ ];
40
-
externalAddresses = [ ];
47
+
externalAddresses = [ "radicle.lassul.us:8776" ];
41
48
network = "main";
42
49
log = "INFO";
43
50
relay = "auto";
···
65
72
};
66
73
workers = 8;
67
74
seedingPolicy = {
68
-
default = "block";
75
+
default = "allow";
76
+
scope = "all";
69
77
};
70
-
proxy = "127.0.0.1:9050";
71
78
};
72
79
};
73
80
};
+3
machines/neoprism/config.nix
+3
machines/neoprism/config.nix
+12
machines/neoprism/disk.nix
+12
machines/neoprism/disk.nix
···
123
123
canmount = "noauto";
124
124
};
125
125
};
126
+
# Radicle seed storage on the tank pool, hard-capped at 80G (allow-all
127
+
# seeding has no built-in byte quota; the ZFS quota bounds it). Create
128
+
# on an existing host with:
129
+
# zfs create -o mountpoint=/var/lib/radicle -o quota=80G tank/radicle
130
+
radicle = {
131
+
type = "zfs_fs";
132
+
mountpoint = "/var/lib/radicle";
133
+
options = {
134
+
canmount = "noauto";
135
+
quota = "80G";
136
+
};
137
+
};
126
138
# encrypted = {
127
139
# type = "zfs_fs";
128
140
# options = {