superconfig/machines/ at 314ab4305bb7090e9cfce1ad2c445b902eb2a538 · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / machines

18 folders

at 314ab4305bb7090e9cfce1ad2c445b902eb2a538

lassulus neoprism: add covibe co-vibing dashboard (covibe.lassul.us) 2mo ago

remove exim from all machines and clean up references

7 months ago

machines.barnacle: add radicle-node

5 months ago

machines.coaxmetal: sway kiosk so nested gamescope keeps its wayland backend Replace the greetd gamescope-session (which required STROM_NO_GAMESCOPE and rendered games directly in the session compositor) with greetd launching sway. A game's nested gamescope prefers its wayland backend, which needs wlroots protocols that cage (and, differently, an outer gamescope session) do not give it. Under those it fell back to gamescope's SDL backend, whose Vulkan swapchain remake loops and aborts on this RADV RENOIR iGPU (rendervulkan.cpp vulkan_remake_swapchain) - crashing e.g. Baba Is You a couple seconds in. sway exposes those protocols, so gamescope inits its wayland backend and never hits the crashing SDL path. Every game keeps its own gamescope (render resolution, in-game exit chord, bare-tty portability); no per-game workaround needed. Also resolve STROM_FLAKE to the /home/strom/strom checkout when present (github fallback) so changes can be tested on the box before pushing upstream.

2 months ago

machines.daedalus.physical: add missing /boot fsType

6 months ago

green: remove mail services (migrated to neoprism)

7 months ago

refactor: move common configuration to 2configs/default.nix - Move clan and stockholm configuration from flake.nix to 2configs/default.nix - Simplify flake.nix machines definition to only import physical.nix - Add explicit import of ../../2configs to each machine's config.nix - This allows for more selective configuration imports per machine

1 year ago

remove exim from all machines and clean up references

7 months ago

machines.ignavia: add rbw

2 months ago

remove exim from all machines and clean up references

7 months ago

neoprism: add covibe co-vibing dashboard (covibe.lassul.us)

2 months ago

orange: drop cgit/git service orange's autoswitch was failing activation: the git service's mkdir /var/lib/git hit a symlink loop (a stale dangling `state/git -> ../../var/state/git` link that loops because the container bind-mounts both /var/lib and /var/state to the same state dir). cgit is being retired, so remove the services/git import entirely. This also unblocks orange's autoswitch (it no longer touches /var/lib/git). Assisted-by: Claude Code (claude-opus-4-8[1m])

4 months ago

machines.{prism,neoprism}: migrate realwallpaper, lassul.us website, bgt-bot Move realwallpaper service and lassul.us website from prism to neoprism. DNS for lassul.us already points at neoprism. bgt-bot is commented out on neoprism for now; can be enabled later if it goes down on prism (which currently isn't deploying anyway). Drop the now-redundant lassul.us -> orange.r proxy in orange-host.nix and the lassul.us acme fallback on prism.

5 months ago

*: migrate facts to vars

10 months ago

machines.shodan: disable hdapsd for now

9 months ago

machines/styx: add n8n

6 months ago

fix extra-container eval: add dummy nixos-init option extra-container uses a minimal NixOS module set for fast evaluation. nixpkgs unstable added nixos-init.nix and systemd.nix now references config.system.nixos-init.package, but extra-container's module set doesn't include it. Add a dummy nixos-init.package option to the outer container config, matching extra-container's existing pattern for missing options. Also fixes services.mingetty -> services.getty rename in virtulus.

8 months ago

machines.xerxes: secureify electron_39 for bitwarden-desktop bitwarden-desktop pulls electron_39, which nixpkgs now marks insecure (EOL), failing `nix flake check` (eval-xerxes). secureify it via overlay rather than nixpkgs.config.permittedInsecurePackages, matching the existing olm fix in mautrix-telegram (lib/secureify.nix). Assisted-by: Claude Code (claude-opus-4-8[1m])

4 months ago

yellow: resolve AirVPN endpoint in main netns for transmission tunnel Recent wireguard-tools resolve the peer Endpoint in the namespace where `wg syncconf` runs. The transmission netns has no route until the tunnel is up, so resolving europe.vpn.airdns.org from inside it always fails; wg burns ~70s of DNS-retry backoff per attempt before erroring. During a nixos switch that restarts transmission-netns this stalled the whole deploy for >2min and left the service (and the download stack) failed. Resolve the endpoint in the main netns (which has connectivity, and is already gated on the `host` check above) and hand wg a numeric Endpoint, so the tunnel comes up instantly. Also fix the bare `sleep` in the DNS wait loop, which errored under `set -e` instead of retrying. Assisted-by: Claude Code (claude-opus-4-8)

4 months ago