nix-config

mikl/nix-config

Fork 0

Commit graph

Author	SHA1	Message	Date
mikl	79260cec6f	heather: switch to make-disk-image (qcow2 for YC), drop disko - Rename muscari -> heather (YC VM). rosemary reserved for future EU server. - Add hosts/heather/image.nix: YC guest profile + qcow2 build target based on nixos/lib/make-disk-image.nix (the nixpkgs-standard cloud image builder). partitionTableType=legacy (MBR + single ext4 root, label nixos), GRUB in MBR on /dev/vda, virtio drivers, console=ttyS0, cloud-init (Ec2 datasource) so poppy ssh key auto-lands from YC metadata, growPartition. - Drop disko flake input + disk-config.nix (was only for nixos-anywhere runtime install; replaced by make-disk-image build-time approach, no kexec). - Add home/server.nix: minimal headless home for NixOS hosts (no ollama/ texliveFull/kitty/syncthing/pass). flake mkNixos uses it instead of full ./home. - k3s.nix: drop dead firewall block (firewall off in image.nix -> trustedInterfaces was a no-op). Cilium manages pod networking via BPF. - image.baseName=heather, configurationLimit=1, remove virtio dups (qemu-guest profile already provides most). - Fix sha256 pin on forgejo mikl.keys (was stale, would break fetchurl). - home/zsh.nix: source yandex-cloud yc completion.	2026-07-11 21:13:38 +03:00
mikl	1f960a53a5	muscari: add NixOS host config adapted from nix-config-legacy Migrated muscari from nix-config-legacy (preserved for reference per garden.md) to new multi-host flake structure. Includes: - hosts/muscari/default.nix: hostname, GRUB (BIOS), firewall (22/80/443), SSH keys via forgejo .keys endpoint with sha256 pinning, stateVersion 25.11 - hosts/muscari/disk-config.nix: disko config — 512M ESP + ext4 root, device = /dev/vda (YC standard-v3 single virtio disk) - hosts/muscari/k3s.nix: k3s single-node with --flannel-backend=none (Cilium to be installed separately via Helm) Architecture decisions (unchanged from legacy): - Bootloader: GRUB (VM is in Legacy BIOS mode — see PREREQUISITES.md check 5+11 in projects/servers/muscari/) - Filesystem: ext4 root + vfat ESP (ESP unused in BIOS but ready if ever switched to UEFI) - Build deps: nixpkgs/nixos-25.11 Verification (after commit): - nix flake show: nixosConfigurations.{muscari,rosemary} OK - muscari.networking.hostName = "muscari" - muscari.boot.loader.grub.enable = true - muscari.boot.loader.systemd-boot.enable = false - muscari.services.k3s.enable = true - fileSystems derived correctly from disko - poppy (darwin) and rosemary (NixOS) configs untouched Session: verify plan	2026-06-27 03:14:16 +03:00

Author

SHA1

Message

Date

mikl

79260cec6f

heather: switch to make-disk-image (qcow2 for YC), drop disko

- Rename muscari -> heather (YC VM). rosemary reserved for future EU server.
- Add hosts/heather/image.nix: YC guest profile + qcow2 build target based on
  nixos/lib/make-disk-image.nix (the nixpkgs-standard cloud image builder).
  partitionTableType=legacy (MBR + single ext4 root, label nixos), GRUB in MBR
  on /dev/vda, virtio drivers, console=ttyS0, cloud-init (Ec2 datasource) so
  poppy ssh key auto-lands from YC metadata, growPartition.
- Drop disko flake input + disk-config.nix (was only for nixos-anywhere runtime
  install; replaced by make-disk-image build-time approach, no kexec).
- Add home/server.nix: minimal headless home for NixOS hosts (no ollama/
  texliveFull/kitty/syncthing/pass). flake mkNixos uses it instead of full ./home.
- k3s.nix: drop dead firewall block (firewall off in image.nix -> trustedInterfaces
  was a no-op). Cilium manages pod networking via BPF.
- image.baseName=heather, configurationLimit=1, remove virtio dups (qemu-guest
  profile already provides most).
- Fix sha256 pin on forgejo mikl.keys (was stale, would break fetchurl).
- home/zsh.nix: source yandex-cloud yc completion.

2026-07-11 21:13:38 +03:00

mikl

1f960a53a5

muscari: add NixOS host config adapted from nix-config-legacy

Migrated muscari from nix-config-legacy (preserved for reference per
garden.md) to new multi-host flake structure.

Includes:
- hosts/muscari/default.nix: hostname, GRUB (BIOS), firewall
  (22/80/443), SSH keys via forgejo .keys endpoint with sha256 pinning,
  stateVersion 25.11
- hosts/muscari/disk-config.nix: disko config — 512M ESP + ext4 root,
  device = /dev/vda (YC standard-v3 single virtio disk)
- hosts/muscari/k3s.nix: k3s single-node with --flannel-backend=none
  (Cilium to be installed separately via Helm)

Architecture decisions (unchanged from legacy):
- Bootloader: GRUB (VM is in Legacy BIOS mode — see PREREQUISITES.md
  check 5+11 in projects/servers/muscari/)
- Filesystem: ext4 root + vfat ESP (ESP unused in BIOS but ready if
  ever switched to UEFI)
- Build deps: nixpkgs/nixos-25.11

Verification (after commit):
- nix flake show: nixosConfigurations.{muscari,rosemary} OK
- muscari.networking.hostName = "muscari"
- muscari.boot.loader.grub.enable = true
- muscari.boot.loader.systemd-boot.enable = false
- muscari.services.k3s.enable = true
- fileSystems derived correctly from disko
- poppy (darwin) and rosemary (NixOS) configs untouched

Session: verify plan

2026-06-27 03:14:16 +03:00

2 commits