alpha
Login
or
Join now
lass.pds.lassul.us
/
superconfig
Star
0
Fork
1
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
This repository has no description
Star
0
Fork
1
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
Overview
Issues
Pulls
1
Pipelines
superconfig
/
machines
19 folders
at
429627210fe8dd86387bad21b347daa67a6d61be
lassulus
configs.spora: remove, with mycelium and the spora input
7d ago
258f152f
acheron
configs.gg23.audio: low-latency ROC/AirPlay hub on acheron with room selection acheron gets a minimal system-wide pipewire with a virtual "hub" sink. Any LAN machine sends into it via ROC while `gg23-audio` from tools/gg23-audio runs (ROC sink loaded into pipewire-pulse, removed again on Ctrl-C), barnacle via AirPlay 1 (shairport-sync, "gg23", pipewire backend, mDNS on int0 only). The hub monitor is linked to ROC sinks for shodan and icarus (room.nix), chosen with `audio-room shodan|icarus|both|off` or from Home Assistant via MQTT discovery (select + buttons). Retained MQTT commands restore the choice after pipewire restarts. The rooms have no stable LAN address, so the hub sends to their retiolum IPs and they accept the ROC ports only from acheron on retiolum.
1 week ago
aergia
configs: remove dunst
1 week ago
atlas
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
barnacle
machines.xerxes: remove
1 week ago
coaxmetal
configs.opencrow: remove, drop the opencrow input
1 week ago
daedalus
configs: replace krebs.iptables with the nftables firewall Every machine now uses networking.firewall on networking.nftables with the same defaults krebs.iptables had: input and forward drop, all ICMP accepted, no reverse path filter. Open ports and trusted interfaces are unchanged on all machines. - interface port rules become firewall.interfaces.<if>.allowed*Ports, interface-wide accepts trustedInterfaces - forwarding goes through extraForwardRules; yellow keeps forward unfiltered for the transmission namespace - NAT rules become per-module networking.nftables.tables - ssh-redirect: 45621 redirects to 22, new connections to 22 are reset unless they come from lo, retiolum or wiregrill - xerxes: the JOOL xtables target is added by jool-iptables through ip6tables-nft, with XTABLES_LIBDIR pointing at jool's extension - flushRuleset = false so libvirt/podman/jool tables survive reloads; extraDeletions drops the iptables-nft tables krebs.iptables left Rules that were silently ignored while networking.firewall was disabled, such as clan's yggdrasil filter, now take effect.
1 week ago
green
machines.green: disable eternal-terminal eternal-terminal 7.0.0 fails to build in the current nixpkgs (cmake_pch.hxx.gch), which failed green's toplevel in the CI farm.
1 week ago
hilum
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
icarus
configs.gg23.audio: low-latency ROC/AirPlay hub on acheron with room selection acheron gets a minimal system-wide pipewire with a virtual "hub" sink. Any LAN machine sends into it via ROC while `gg23-audio` from tools/gg23-audio runs (ROC sink loaded into pipewire-pulse, removed again on Ctrl-C), barnacle via AirPlay 1 (shairport-sync, "gg23", pipewire backend, mDNS on int0 only). The hub monitor is linked to ROC sinks for shodan and icarus (room.nix), chosen with `audio-room shodan|icarus|both|off` or from Home Assistant via MQTT discovery (select + buttons). Retained MQTT commands restore the choice after pipewire restarts. The rooms have no stable LAN address, so the hub sends to their retiolum IPs and they accept the ROC ports only from acheron on retiolum.
1 week ago
ignavia
configs.spora: remove, with mycelium and the spora input
1 week ago
mors
machines.mors: remove transgui
1 week ago
neoprism
configs.rogue-talk: remove, drop the rogue-talk input
1 week ago
orange
modules.sync-containers3: move options to lass.sync-containers3
1 week ago
radio
modules.sync-containers3: move options to lass.sync-containers3
1 week ago
shodan
configs.gg23.audio: low-latency ROC/AirPlay hub on acheron with room selection acheron gets a minimal system-wide pipewire with a virtual "hub" sink. Any LAN machine sends into it via ROC while `gg23-audio` from tools/gg23-audio runs (ROC sink loaded into pipewire-pulse, removed again on Ctrl-C), barnacle via AirPlay 1 (shairport-sync, "gg23", pipewire backend, mDNS on int0 only). The hub monitor is linked to ROC sinks for shodan and icarus (room.nix), chosen with `audio-room shodan|icarus|both|off` or from Home Assistant via MQTT discovery (select + buttons). Retained MQTT commands restore the choice after pipewire restarts. The rooms have no stable LAN address, so the hub sends to their retiolum IPs and they accept the ROC ports only from acheron on retiolum.
1 week ago
starkstrom
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
styx
configs.snapserver: move from styx to acheron
1 week ago
virtulus
configs.spora: remove, with mycelium and the spora input
1 week ago
yellow
configs.spora: remove, with mycelium and the spora input
1 week ago