39 lines
721 B
Markdown
39 lines
721 B
Markdown
# muscari
|
|
|
|
NixOS server on Yandex Cloud. k3s single-node cluster.
|
|
|
|
## specs
|
|
|
|
- VM: 2 vCPU / 8 GB RAM / 64 GB SSD
|
|
- IP: 158.160.166.30
|
|
- Network: Legacy BIOS (no EFI)
|
|
|
|
## quick rebuild
|
|
|
|
```bash
|
|
sudo nixos-rebuild switch --flake .#muscari
|
|
```
|
|
|
|
## imports
|
|
|
|
- `disk-config.nix` - disko partitioning
|
|
- `k3s.nix` - kubernetes cluster setup
|
|
- `hosts/common/` - shared nixos settings
|
|
|
|
## networking
|
|
|
|
open ports:
|
|
- 22 - ssh
|
|
- 80 - http (traefik ingress)
|
|
- 443 - https (traefik ingress)
|
|
|
|
6443 is closed - kubectl via ssh tunnel only.
|
|
|
|
## ssh keys
|
|
|
|
fetched from `https://git.iscg.dev/mikl.keys` with sha256 pinning.
|
|
|
|
## TODO
|
|
|
|
- [ ] k8s aliases (k, kx, kl, kd, etc)
|
|
- [ ] add nix-specific aliases (switch, update, cleanup with sudo)
|