nix-config/docs/muscari.md

muscari

NixOS server on Yandex Cloud. k3s single-node cluster.

specs

• VM: 2 vCPU / 8 GB RAM / 64 GB SSD
• IP: 158.160.166.30
• Network: Legacy BIOS (no EFI)

quick rebuild

sudo nixos-rebuild switch --flake .#muscari

imports

• disk-config.nix - disko partitioning
• k3s.nix - kubernetes cluster setup
• hosts/common/ - shared nixos settings

networking

open ports:

• 22 - ssh
• 80 - http (traefik ingress)
• 443 - https (traefik ingress)

6443 is closed - kubectl via ssh tunnel only.

ssh keys

fetched from https://git.iscg.dev/mikl.keys with sha256 pinning.

TODO

• k8s aliases (k, kx, kl, kd, etc)
• add nix-specific aliases (switch, update, cleanup with sudo)
• Anki sync server — self-hosted (https://docs.ankiweb.net/sync-server.html)
  • альтернатива AnkiWeb (без лимита 100MB)
  • docker-compose с ankicommunity/anki-sync-server
  • на muscari (k3s) или отдельный контейнер
  • клиент: Settings → Sync → Custom server sync URL