44 lines
1 KiB
Markdown
44 lines
1 KiB
Markdown
# muscari
|
||
|
||
NixOS server on Yandex Cloud. k3s single-node cluster.
|
||
|
||
## specs
|
||
|
||
- VM: 2 vCPU / 8 GB RAM / 64 GB SSD
|
||
- IP: 158.160.166.30
|
||
- Network: Legacy BIOS (no EFI)
|
||
|
||
## quick rebuild
|
||
|
||
```bash
|
||
sudo nixos-rebuild switch --flake .#muscari
|
||
```
|
||
|
||
## imports
|
||
|
||
- `disk-config.nix` - disko partitioning
|
||
- `k3s.nix` - kubernetes cluster setup
|
||
- `hosts/common/` - shared nixos settings
|
||
|
||
## networking
|
||
|
||
open ports:
|
||
- 22 - ssh
|
||
- 80 - http (traefik ingress)
|
||
- 443 - https (traefik ingress)
|
||
|
||
6443 is closed - kubectl via ssh tunnel only.
|
||
|
||
## ssh keys
|
||
|
||
fetched from `https://git.iscg.dev/mikl.keys` with sha256 pinning.
|
||
|
||
## TODO
|
||
|
||
- [ ] k8s aliases (k, kx, kl, kd, etc)
|
||
- [ ] add nix-specific aliases (switch, update, cleanup with sudo)
|
||
- [ ] Anki sync server — self-hosted (https://docs.ankiweb.net/sync-server.html)
|
||
- альтернатива AnkiWeb (без лимита 100MB)
|
||
- docker-compose с `ankicommunity/anki-sync-server`
|
||
- на muscari (k3s) или отдельный контейнер
|
||
- клиент: Settings → Sync → Custom server sync URL
|