This repository has no description
machines.barnacle: dial neoprism and starkstrom
kartei darwin module only dials eve/eva/ni/prism, krebs hubs that learn about
barnacle when their own registry pins move. A laptop behind NAT needs relays
we control: the same neoprism the NixOS nodes use (dialable once
krebs/kartei#64 lands) plus starkstrom.
author
lassulus
date
(Sep 11, 2026, 2:06 PM CEST)
commit
7b355a05
7b355a054bfd86f2e1326522833b9f4431ae8da7
parent
cea9fd58
cea9fd58132c726c574f86f1e11bad27cf22b7d7
+15
-3
+15
-3
machines/barnacle/retiolum.nix
+15
-3
machines/barnacle/retiolum.nix
···
21
21
22
22
networking.retiolum.ed25519PrivateKeyFile = vars.files."${net}.ed25519_key.priv".path;
23
23
24
-
# Peers that only exist inside superconfig; merged on top of the cards
25
-
# kartei's module installs (hosts is attrsOf lines, so this adds to them).
26
-
services.tincr.networks.${net}.hosts = self.retiolum.tincHosts;
24
+
# Both merge with what kartei's module sets: hosts is attrsOf lines,
25
+
# connectTo is listOf str.
26
+
services.tincr.networks.${net} = {
27
+
# Peers that only exist inside superconfig, on top of the kartei cards.
28
+
hosts = self.retiolum.tincHosts;
29
+
30
+
# kartei's module dials eve/eva/ni/prism -- krebs hubs that only learn
31
+
# about barnacle when their own registry pins move. A laptop behind NAT
32
+
# needs relays we control, so also dial our own public servers; same list
33
+
# the NixOS nodes use in 2configs/retiolum.nix, plus starkstrom.
34
+
connectTo = [
35
+
"neoprism"
36
+
"starkstrom"
37
+
];
38
+
};
27
39
28
40
# Same generator as 2configs/retiolum.nix, minus the RSA half: tincr is
29
41
# SPTPS/Ed25519-only and kartei no longer wants an rsa.key.