superconfig/retiolum/ at 01c31c3b0f10cb8221f15380ef435bf101e8f070 · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / retiolum

2 files

at 01c31c3b0f10cb8221f15380ef435bf101e8f070

lassulus configs.kartei: replace krebs.hosts with kartei directly 14d ago

configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover

2 weeks ago

flake-module.nix

retiolum: keep non-kartei peers in self.retiolum starkstrom stays out of the shared kartei registry but should still be reachable inside the fleet. Its card now lives in retiolum/ in the same nets.<net> layout kartei and krebs.hosts use, rendered by a copy of kartei modules/retiolum/hosts.nix, so the entry can move to kartei/lass unchanged if the rest of krebs should reach it too. Every superconfig machine injects that set into its tinc hosts: the NixOS nodes through nixpkgs services.tinc, barnacle through kartei tincr module (hosts is attrsOf lines, so the entries merge). Previously only starkstrom itself knew its card, so the fleet had no route to it; now all 16 machines do, and peers dial its static address directly instead of relaying. self.retiolum exposes hosts/tincHosts/own, the same interface as kartei, so both sources merge symmetrically. starkstrom krebs.hosts card is composed from it -- addresses, aliases and the ed25519 key have one source now; only the legacy RSA pubkey stockholm insists on stays local.

1 month ago