alpha
Login
or
Join now
lass.pds.lassul.us
/
superconfig
Star
0
Fork
1
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
This repository has no description
Star
0
Fork
1
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
Overview
Issues
Pulls
1
Pipelines
superconfig
/
machines
19 folders
at
19f499bc2d55663f63f4067e5cd93bf31050233e
Hermes
configs.yellow-mounts: remove
6d ago
19f499bc
acheron
configs.gg23.audio: low-latency ROC/AirPlay hub on acheron with room selection acheron gets a minimal system-wide pipewire with a virtual "hub" sink. Any LAN machine sends into it via ROC while `gg23-audio` from tools/gg23-audio runs (ROC sink loaded into pipewire-pulse, removed again on Ctrl-C), barnacle via AirPlay 1 (shairport-sync, "gg23", pipewire backend, mDNS on int0 only). The hub monitor is linked to ROC sinks for shodan and icarus (room.nix), chosen with `audio-room shodan|icarus|both|off` or from Home Assistant via MQTT discovery (select + buttons). Retained MQTT commands restore the choice after pipewire restarts. The rooms have no stable LAN address, so the hub sends to their retiolum IPs and they accept the ROC ports only from acheron on retiolum.
1 week ago
aergia
configs.yellow-mounts: remove
6 days ago
atlas
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
barnacle
machines.xerxes: remove
1 week ago
coaxmetal
configs.yellow-mounts: remove
6 days ago
daedalus
configs: replace krebs.iptables with the nftables firewall Every machine now uses networking.firewall on networking.nftables with the same defaults krebs.iptables had: input and forward drop, all ICMP accepted, no reverse path filter. Open ports and trusted interfaces are unchanged on all machines. - interface port rules become firewall.interfaces.<if>.allowed*Ports, interface-wide accepts trustedInterfaces - forwarding goes through extraForwardRules; yellow keeps forward unfiltered for the transmission namespace - NAT rules become per-module networking.nftables.tables - ssh-redirect: 45621 redirects to 22, new connections to 22 are reset unless they come from lo, retiolum or wiregrill - xerxes: the JOOL xtables target is added by jool-iptables through ip6tables-nft, with XTABLES_LIBDIR pointing at jool's extension - flushRuleset = false so libvirt/podman/jool tables survive reloads; extraDeletions drops the iptables-nft tables krebs.iptables left Rules that were silently ignored while networking.firewall was disabled, such as clan's yggdrasil filter, now take effect.
1 week ago
green
machines.green: disable eternal-terminal eternal-terminal 7.0.0 fails to build in the current nixpkgs (cmake_pch.hxx.gch), which failed green's toplevel in the CI farm.
1 week ago
hilum
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
icarus
configs.gg23.audio: low-latency ROC/AirPlay hub on acheron with room selection acheron gets a minimal system-wide pipewire with a virtual "hub" sink. Any LAN machine sends into it via ROC while `gg23-audio` from tools/gg23-audio runs (ROC sink loaded into pipewire-pulse, removed again on Ctrl-C), barnacle via AirPlay 1 (shairport-sync, "gg23", pipewire backend, mDNS on int0 only). The hub monitor is linked to ROC sinks for shodan and icarus (room.nix), chosen with `audio-room shodan|icarus|both|off` or from Home Assistant via MQTT discovery (select + buttons). Retained MQTT commands restore the choice after pipewire restarts. The rooms have no stable LAN address, so the hub sends to their retiolum IPs and they accept the ROC ports only from acheron on retiolum.
1 week ago
ignavia
configs.yellow-mounts: remove
6 days ago
mors
configs.yellow-mounts: remove
6 days ago
neoprism
configs.monitoring: vector agents, victoria* + alertmanager stack on styx/coaxmetal Every NixOS machine runs Vector (host metrics, internal metrics, journal) and writes to VictoriaMetrics/VictoriaLogs on both styx and coaxmetal, each sink with a 512 MiB disk buffer. Both servers run vmalert (metrics and LogsQL instances), a two-node Alertmanager cluster posting to Matrix via matrix-alertmanager-receiver, Gatus (results scraped into VictoriaMetrics, alerted on by vmalert) and Grafana with provisioned datasources and dashboards. All ports are open on retiolum only. Replaces telegraf on neoprism, including the borgbackup status file.
6 days ago
orange
modules.sync-containers3: move options to lass.sync-containers3
1 week ago
radio
modules.sync-containers3: move options to lass.sync-containers3
1 week ago
shodan
configs.yellow-mounts: remove
6 days ago
starkstrom
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
styx
configs.yellow-mounts: remove
6 days ago
virtulus
configs.spora: remove, with mycelium and the spora input
6 days ago
yellow
configs.spora: remove, with mycelium and the spora input
6 days ago