# muscari

NixOS server on Yandex Cloud. k3s single-node cluster.

## specs

- VM: 2 vCPU / 8 GB RAM / 64 GB SSD
- IP: 158.160.166.30
- Network: Legacy BIOS (no EFI)

## quick rebuild

```bash
sudo nixos-rebuild switch --flake .#muscari
```

## imports

- `disk-config.nix` - disko partitioning
- `k3s.nix` - kubernetes cluster setup
- `hosts/common/` - shared nixos settings

## networking

open ports:
- 22 - ssh
- 80 - http (traefik ingress)
- 443 - https (traefik ingress)

6443 is closed - kubectl via ssh tunnel only.

## ssh keys

fetched from `https://git.iscg.dev/mikl.keys` with sha256 pinning.

## TODO

- [ ] k8s aliases (k, kx, kl, kd, etc)
- [ ] add nix-specific aliases (switch, update, cleanup with sudo)