alpha
Login
or
Join now
lass.pds.lassul.us
/
superconfig
Star
0
Fork
1
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
This repository has no description
Star
0
Fork
1
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
Overview
Issues
Pulls
1
Pipelines
superconfig
/
machines
18 folders
at
ea5b35ddbb0e4ef4db4bea547c7a3c580123cd53
Hermes
machines.orange: remove, move mumble-reminder to neoprism
5d ago
ea5b35dd
acheron
retiolum: drop self.retiolum, acheron and starkstrom are in kartei now kartei carries both cards (krebs/kartei#92), so the superconfig-only host set is empty; read hosts, own addresses and tinc host files from kartei alone.
5 days ago
aergia
configs.yellow-mounts: remove
6 days ago
atlas
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
barnacle
retiolum: drop self.retiolum, acheron and starkstrom are in kartei now kartei carries both cards (krebs/kartei#92), so the superconfig-only host set is empty; read hosts, own addresses and tinc host files from kartei alone.
5 days ago
coaxmetal
configs.yellow-mounts: remove
6 days ago
daedalus
configs: replace krebs.iptables with the nftables firewall Every machine now uses networking.firewall on networking.nftables with the same defaults krebs.iptables had: input and forward drop, all ICMP accepted, no reverse path filter. Open ports and trusted interfaces are unchanged on all machines. - interface port rules become firewall.interfaces.<if>.allowed*Ports, interface-wide accepts trustedInterfaces - forwarding goes through extraForwardRules; yellow keeps forward unfiltered for the transmission namespace - NAT rules become per-module networking.nftables.tables - ssh-redirect: 45621 redirects to 22, new connections to 22 are reset unless they come from lo, retiolum or wiregrill - xerxes: the JOOL xtables target is added by jool-iptables through ip6tables-nft, with XTABLES_LIBDIR pointing at jool's extension - flushRuleset = false so libvirt/podman/jool tables survive reloads; extraDeletions drops the iptables-nft tables krebs.iptables left Rules that were silently ignored while networking.firewall was disabled, such as clan's yggdrasil filter, now take effect.
1 week ago
green
machines.green: disable eternal-terminal eternal-terminal 7.0.0 fails to build in the current nixpkgs (cmake_pch.hxx.gch), which failed green's toplevel in the CI farm.
1 week ago
hilum
configs.kartei: replace krebs.hosts with kartei directly Render /etc/hosts, ssh known_hosts and ssh ports from kartei (plus the superconfig-only cards in retiolum/) instead of stockholm's krebs.hosts, and drop krebs.build.host everywhere: readers now use kartei.hosts or networking.hostName, which comes from the clan machine name. - remove stockholm users/hosts/build/dns/ssh imports; declare krebs.users locally - drop the acheron/starkstrom krebs.hosts cards; both now appear in every machine's /etc/hosts - neoprism: stop serving /hosts and /retiolum.hosts - ignavia: move the styx tinc Address override onto the kartei-built host file; the krebs.hosts one had no effect since the kartei cutover
2 weeks ago
icarus
configs.consul: remove
6 days ago
ignavia
configs.yellow-mounts: remove
6 days ago
mors
tools.realwallpaper: rewrite as a live lens-projection world map Replaces pkgs.realwallpaper (xplanet, dead NASA NEO sources) with a Python renderer: oblique cylindrical map centred on home with a zoom lens (or plain/mercator), multi-resolution WMS imagery (Sentinel-2 cloudless, Blue Marble, Black Marble lights), live EUMETSAT clouds with synthesised detail, VIIRS snow/fire/chlorophyll, sea ice and the sky. The krebs.realwallpaper module, its nginx config and the mors fetchWallpaper config are dropped; the tool runs standalone for now.
6 days ago
neoprism
machines.orange: remove, move mumble-reminder to neoprism
5 days ago
radio
modules.sync-containers3: move options to lass.sync-containers3
1 week ago
shodan
configs.consul: remove
6 days ago
starkstrom
retiolum: drop self.retiolum, acheron and starkstrom are in kartei now kartei carries both cards (krebs/kartei#92), so the superconfig-only host set is empty; read hosts, own addresses and tinc host files from kartei alone.
5 days ago
styx
configs.consul: remove
6 days ago
virtulus
configs.spora: remove, with mycelium and the spora input
1 week ago
yellow
configs.spora: remove, with mycelium and the spora input
1 week ago