superconfig/machines/barnacle/ at 00e4abde2f59c0e59317e8bf3c494798f037e2f6 · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / machines / barnacle

3 files

at 00e4abde2f59c0e59317e8bf3c494798f037e2f6

Hermes configs.nix-farm: add nix-grpc-store farm and niks3 cache on neoprism 9d ago

US_INTL.keylayout

machines.barnacle: add US_INTL layout

11 months ago

configuration.nix

configs.nix-farm: add nix-grpc-store farm and niks3 cache on neoprism Single node: nix-grpc-daemon (builder+scheduler, mTLS, retiolum only) publishing to niks3 (local postgres, Backblaze B2), cache.lassul.us proxying the public bucket. barnacle gets the grpc:// plugin and the shared client cert; all NixOS machines substitute from the cache once the signing key exists. The shared nix-farm-ca generator deploys nothing: clan requires a shared generator to be defined identically on every machine, so per-machine generators copy out what each needs with their own owner/mode (nix-farm-server: server cert + ca.crt; nix-farm-client: ca.crt + client cert/key). The daemon reads its TLS files via LoadCredential: gRPC's cert file watcher treats mtime 0 as a stat failure, and clan unpacks /run/secrets with mtime 0, so pointing it at /run/secrets resets every handshake. MemoryMax is raised from upstream's 2G to 8G: `niks3 push` runs in the daemon's cgroup and got OOM-killed on large NARs (kernel modules), taking the daemon down with it.

1 week ago

machines.barnacle: add self.retiolum hosts to /etc/hosts barnacle's hosts block only had kartei.extraHosts, so starkstrom.r and acheron.r did not resolve there. self.retiolum now exposes extraHosts (v4v6/v6only) rendered like kartei's, and barnacle appends it.

2 weeks ago