superconfig/machines/ at 82d916e051f550e62ae6b0a2948cf369fbfd42fe · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / machines

18 folders

at 82d916e051f550e62ae6b0a2948cf369fbfd42fe

lassulus services.matrix: self-host Cinny with thread drawer on matrix.lassul.us 4mo ago

remove exim from all machines and clean up references

7 months ago

machines.barnacle: add radicle-node

5 months ago

remove exim from all machines and clean up references

7 months ago

machines.daedalus.physical: add missing /boot fsType

6 months ago

green: remove mail services (migrated to neoprism)

7 months ago

refactor: move common configuration to 2configs/default.nix - Move clan and stockholm configuration from flake.nix to 2configs/default.nix - Simplify flake.nix machines definition to only import physical.nix - Add explicit import of ../../2configs to each machine's config.nix - This allows for more selective configuration imports per machine

1 year ago

remove exim from all machines and clean up references

7 months ago

ignavia: cap GRUB generations to fit the 1 GiB ESP /boot is only 1 GiB (disk.nix). Without configurationLimit, GRUB retains every generation's kernel+initrd until the ESP fills, at which point the bootloader install fails ("No space left on device") and deploys can't finish. Keep the 10 most recent; older kernels get pruned automatically. Assisted-by: Claude Code (claude-fable-5)

4 months ago

remove exim from all machines and clean up references

7 months ago

services.matrix: self-host Cinny with thread drawer on matrix.lassul.us Cinny has no thread overview UI, which makes the Zulip bridge's stream rooms (one Matrix thread per Zulip topic) hard to navigate. Carry smokku's "threads-ui" thread drawer/browser (PR cinnyapp/cinny#2787, closed only because Cinny froze PRs during their SDK rewrite) as a patch over the packaged v4.12.2 release and serve it at the matrix.lassul.us root. The patch is the squashed feature diff resolved against v4.12.2; the only conflict was RoomViewHeader.tsx (additive, alongside the call button). The lockfile is unchanged so nixpkgs' npmDepsHash still applies. Re-resolve the patch against the new tag on each cinny bump. Assisted-by: Claude Code (claude-opus-4-8[1m])

4 months ago

*: migrate facts to vars

10 months ago

machines.{prism,neoprism}: migrate realwallpaper, lassul.us website, bgt-bot Move realwallpaper service and lassul.us website from prism to neoprism. DNS for lassul.us already points at neoprism. bgt-bot is commented out on neoprism for now; can be enabled later if it goes down on prism (which currently isn't deploying anyway). Drop the now-redundant lassul.us -> orange.r proxy in orange-host.nix and the lassul.us acme fallback on prism.

5 months ago

*: migrate facts to vars

10 months ago

machines.shodan: disable hdapsd for now

9 months ago

machines/styx: add n8n

6 months ago

fix extra-container eval: add dummy nixos-init option extra-container uses a minimal NixOS module set for fast evaluation. nixpkgs unstable added nixos-init.nix and systemd.nix now references config.system.nixos-init.package, but extra-container's module set doesn't include it. Add a dummy nixos-init.package option to the outer container config, matching extra-container's existing pattern for missing options. Also fixes services.mingetty -> services.getty rename in virtulus.

8 months ago

2configs.default: add tools.s to all machines

6 months ago

yellow: resolve AirVPN endpoint in main netns for transmission tunnel Recent wireguard-tools resolve the peer Endpoint in the namespace where `wg syncconf` runs. The transmission netns has no route until the tunnel is up, so resolving europe.vpn.airdns.org from inside it always fails; wg burns ~70s of DNS-retry backoff per attempt before erroring. During a nixos switch that restarts transmission-netns this stalled the whole deploy for >2min and left the service (and the download stack) failed. Resolve the endpoint in the main netns (which has connectivity, and is already gated on the `host` check above) and hand wg a numeric Endpoint, so the tunnel comes up instantly. Also fix the bare `sleep` in the DNS wait loop, which errored under `set -e` instead of retrying. Assisted-by: Claude Code (claude-opus-4-8)

4 months ago