From 8123653a92490f9e90684a7e94ae28c281542400 Mon Sep 17 00:00:00 2001 From: Jake Hillion Date: Tue, 21 May 2024 22:38:26 +0100 Subject: [PATCH] jorah.cx: delete --- hosts/jorah.cx.ts.hillion.co.uk/default.nix | 106 ------------------ .../hardware-configuration.nix | 48 -------- hosts/jorah.cx.ts.hillion.co.uk/system | 1 - modules/dns.nix | 2 - modules/locations.nix | 7 +- modules/ssh/default.nix | 1 - secrets/gitea/actions/jorah.age | 19 ---- secrets/secrets.nix | 5 +- .../tailscale/jorah.cx.ts.hillion.co.uk.age | 23 ---- secrets/version_tracker/ssh.key.age | Bin 1591 -> 1481 bytes 10 files changed, 3 insertions(+), 209 deletions(-) delete mode 100644 hosts/jorah.cx.ts.hillion.co.uk/default.nix delete mode 100644 hosts/jorah.cx.ts.hillion.co.uk/hardware-configuration.nix delete mode 100644 hosts/jorah.cx.ts.hillion.co.uk/system delete mode 100644 secrets/gitea/actions/jorah.age delete mode 100644 secrets/tailscale/jorah.cx.ts.hillion.co.uk.age diff --git a/hosts/jorah.cx.ts.hillion.co.uk/default.nix b/hosts/jorah.cx.ts.hillion.co.uk/default.nix deleted file mode 100644 index 2247be3..0000000 --- a/hosts/jorah.cx.ts.hillion.co.uk/default.nix +++ /dev/null @@ -1,106 +0,0 @@ -{ config, pkgs, lib, ... }: - -{ - imports = [ - ./hardware-configuration.nix - ]; - - config = { - system.stateVersion = "23.05"; - - networking.hostName = "jorah"; - networking.domain = "cx.ts.hillion.co.uk"; - - boot.loader.systemd-boot.enable = true; - boot.loader.efi.canTouchEfiVariables = true; - - custom.defaults = true; - - ## Impermanence - custom.impermanence.enable = true; - - ## Custom Services - custom = { - locations.autoServe = true; - services = { - gitea.actions = { - enable = true; - tokenSecret = ../../secrets/gitea/actions/jorah.age; - }; - }; - }; - - services.nsd.interfaces = [ - "95.217.229.104" - "2a01:4f9:4b:3953::2" - ]; - - services.foldingathome = { - enable = true; - user = "JakeH"; # https://stats.foldingathome.org/donor/id/357021 - daemonNiceLevel = 19; - }; - - ## Enable ZRAM to help with root on tmpfs - zramSwap = { - enable = true; - memoryPercent = 200; - algorithm = "zstd"; - }; - - ## Filesystems - services.btrfs.autoScrub = { - enable = true; - interval = "Tue, 02:00"; - # By default both /data and /nix would be scrubbed. They are the same filesystem so this is wasteful. - fileSystems = [ "/data" ]; - }; - - ## Networking - boot.kernel.sysctl = { - "net.ipv4.ip_forward" = true; - "net.ipv6.conf.all.forwarding" = true; - }; - - networking = { - useDHCP = false; - interfaces = { - enp5s0 = { - name = "eth0"; - useDHCP = true; - ipv6.addresses = [{ - address = "2a01:4f9:4b:3953::2"; - prefixLength = 64; - }]; - }; - }; - defaultGateway6 = { - address = "fe80::1"; - interface = "eth0"; - }; - }; - - networking.firewall = { - trustedInterfaces = [ "tailscale0" ]; - allowedTCPPorts = lib.mkForce [ ]; - allowedUDPPorts = lib.mkForce [ ]; - interfaces = { - eth0 = { - allowedTCPPorts = lib.mkForce [ - 53 # DNS - ]; - allowedUDPPorts = lib.mkForce [ - 53 # DNS - ]; - }; - }; - }; - - ## Tailscale - age.secrets."tailscale/jorah.cx.ts.hillion.co.uk".file = ../../secrets/tailscale/jorah.cx.ts.hillion.co.uk.age; - services.tailscale = { - enable = true; - authKeyFile = config.age.secrets."tailscale/jorah.cx.ts.hillion.co.uk".path; - }; - }; -} diff --git a/hosts/jorah.cx.ts.hillion.co.uk/hardware-configuration.nix b/hosts/jorah.cx.ts.hillion.co.uk/hardware-configuration.nix deleted file mode 100644 index 513e95f..0000000 --- a/hosts/jorah.cx.ts.hillion.co.uk/hardware-configuration.nix +++ /dev/null @@ -1,48 +0,0 @@ -# Do not modify this file! It was generated by ‘nixos-generate-config’ -# and may be overwritten by future invocations. Please make changes -# to /etc/nixos/configuration.nix instead. -{ config, lib, pkgs, modulesPath, ... }: - -{ - imports = - [ - (modulesPath + "/installer/scan/not-detected.nix") - ]; - - boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sr_mod" ]; - boot.initrd.kernelModules = [ ]; - boot.kernelModules = [ "kvm-amd" ]; - boot.extraModulePackages = [ ]; - - fileSystems."/" = - { - device = "tmpfs"; - fsType = "tmpfs"; - options = [ "mode=0755" ]; - }; - - fileSystems."/nix" = - { - device = "/dev/disk/by-id/nvme-KXG60ZNV512G_TOSHIBA_106S10VHT9LM_1-part2"; - fsType = "btrfs"; - options = [ "subvol=nix" ]; - }; - - fileSystems."/data" = - { - device = "/dev/disk/by-id/nvme-KXG60ZNV512G_TOSHIBA_106S10VHT9LM_1-part2"; - fsType = "btrfs"; - options = [ "subvol=data" ]; - }; - - fileSystems."/boot" = - { - device = "/dev/disk/by-uuid/4D7E-8DE8"; - fsType = "vfat"; - }; - - swapDevices = [ ]; - - nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; - hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; -} diff --git a/hosts/jorah.cx.ts.hillion.co.uk/system b/hosts/jorah.cx.ts.hillion.co.uk/system deleted file mode 100644 index 9bdfd5f..0000000 --- a/hosts/jorah.cx.ts.hillion.co.uk/system +++ /dev/null @@ -1 +0,0 @@ -x86_64-linux \ No newline at end of file diff --git a/modules/dns.nix b/modules/dns.nix index 9a886b0..83d2a6f 100644 --- a/modules/dns.nix +++ b/modules/dns.nix @@ -40,7 +40,6 @@ in ts = { cx = { boron = "100.113.188.46"; - jorah = "100.96.143.138"; }; home = { microserver = "100.105.131.47"; @@ -65,7 +64,6 @@ in ts = { cx = { boron = "fd7a:115c:a1e0::2a01:bc2f"; - jorah = "fd7a:115c:a1e0:ab12:4843:cd96:6260:8f8a"; }; home = { microserver = "fd7a:115c:a1e0:ab12:4843:cd96:6269:832f"; diff --git a/modules/locations.nix b/modules/locations.nix index 71dee1e..e8f3927 100644 --- a/modules/locations.nix +++ b/modules/locations.nix @@ -19,10 +19,7 @@ in { custom.locations.locations = { services = { - authoritative_dns = [ - "boron.cx.ts.hillion.co.uk" - "jorah.cx.ts.hillion.co.uk" - ]; + authoritative_dns = [ "boron.cx.ts.hillion.co.uk" ]; downloads = "tywin.storage.ts.hillion.co.uk"; gitea = "boron.cx.ts.hillion.co.uk"; homeassistant = "microserver.home.ts.hillion.co.uk"; @@ -33,7 +30,7 @@ in "microserver.home.ts.hillion.co.uk" ]; unifi = "boron.cx.ts.hillion.co.uk"; - version_tracker = [ "boron.cx.ts.hillion.co.uk" "jorah.cx.ts.hillion.co.uk" ]; + version_tracker = [ "boron.cx.ts.hillion.co.uk" ]; }; }; } diff --git a/modules/ssh/default.nix b/modules/ssh/default.nix index 96f5bda..672370e 100644 --- a/modules/ssh/default.nix +++ b/modules/ssh/default.nix @@ -43,7 +43,6 @@ in "dancefloor.dancefloor.ts.hillion.co.uk".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEXkGueVYKr2wp/VHo2QLis0kmKtc/Upg3pGoHr6RkzY"; "gendry.jakehillion.terminals.ts.hillion.co.uk".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPXM5aDvNv4MTITXAvJWSS2yvr/mbxJE31tgwJtcl38c"; "homeassistant.homeassistant.ts.hillion.co.uk".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPM2ytacl/zYXhgvosvhudsl0zW5eQRHXm9aMqG9adux"; - "jorah.cx.ts.hillion.co.uk".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILA9Hp37ljgVRZwjXnTh+XqRuQWk23alOqe7ptwSr2A5"; "li.pop.ts.hillion.co.uk".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHQWgcDFL9UZBDKHPiEGepT1Qsc4gz3Pee0/XVHJ6V6u"; "microserver.home.ts.hillion.co.uk".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPPOCPqXm5a+vGB6PsJFvjKNgjLhM5MxrwCy6iHGRjXw"; "router.home.ts.hillion.co.uk".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAlCj/i2xprN6h0Ik2tthOJQy6Qwq3Ony73+yfbHYTFu"; diff --git a/secrets/gitea/actions/jorah.age b/secrets/gitea/actions/jorah.age deleted file mode 100644 index 2e5ff2d..0000000 --- a/secrets/gitea/actions/jorah.age +++ /dev/null @@ -1,19 +0,0 @@ -age-encryption.org/v1 --> ssh-rsa GxPFJQ -IULcxHpUsH6OI4cfixNPM89VJNcVkK+Z8IpgjzRspSyKc5N7jox6DYSbcuPsjGs7 -aS2JYOKOx4hYW9aL3B+tef2I24+NzMDTCT31g9gvuLA0wSMWBoFwVodPbfj1ekHy -wDUK5XrgyJtFrwTrvuklGYpb/qIEG//k7M/342C9QqfNesv9nULQ6P7+r7jJvxIW -sOo6qWHFqD/wIiwtLYiX3pOWC6m91L1QNGVh+9/t58YU8RLsgLm2+2vyg13mKya1 -UktTKZbhgRXyUJb7h+vVgDKjAnwqnIDL8asCSDuoSRDBcCxwgSpTDOxAEn9X2oJx -6S3JLQDhWLlIYrqmVT1aGg --> ssh-rsa K9mW1w -hbVlu640hhzR9rJi4b+1c+/V+EilbmwWaNzV7/0+a9BQusTf413hffhk8QXvuze8 -04LuVctZW5L5B1eOCIeziHc6F5CyAjTsaEDM8SeKGmFjKccjdcSUdbsql87KR5Id -/drK41oNA6NlmWrLz3YaSz7A9F+B5lgsJDWgXhMFK3Hru8+gnBQPXkwT/IuQLWI1 -sXhJN/dHrBsQ5Cc+fRO7/r6u3jiQ1DOS85qQHStsYYXqea0pfiu5wpPdGZVuECwa -/R3+ov1JOTK4T3W8TIqOU9ODJxWT697Nv64c8dV3Hq5ymEKkvmZpp1C1/QoCW2EY -Nk7PF5zM95SM/IdECQjJGQ --> ssh-ed25519 Qo6/7A 3gQq8TrBY/7Evlu+q6awqBFjG9m5b7ED+dolo8CJCE4 -JdbLYPo875DQyocjOaVmWQPdgWssuz/T6DJNqgFF020 ---- 0si8/IY1PiYgcmtTFDqu0cj7dW6DFqvgirY0tiSZfdA -A(]7qp05c$$W|%`/uXɈ\~!ledDg .i])l>E \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index e012e62..534594d 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -14,7 +14,6 @@ let ts = { cx = { boron = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDtcJ7HY/vjtheMV8EN2wlTw1hU53CJebGIeRJcSkzt5 root@boron"; - jorah = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILA9Hp37ljgVRZwjXnTh+XqRuQWk23alOqe7ptwSr2A5 root@jorah"; }; home = { microserver = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPPOCPqXm5a+vGB6PsJFvjKNgjLhM5MxrwCy6iHGRjXw root@microserver"; @@ -48,7 +47,6 @@ in "tailscale/be.lt.ts.hillion.co.uk.age".publicKeys = jake_users ++ [ ts.lt.be ]; "tailscale/boron.cx.ts.hillion.co.uk.age".publicKeys = jake_users ++ [ ts.cx.boron ]; "tailscale/gendry.jakehillion-terminals.ts.hillion.co.uk.age".publicKeys = jake_users ++ [ ts.terminals.jakehillion.gendry ]; - "tailscale/jorah.cx.ts.hillion.co.uk.age".publicKeys = jake_users ++ [ ts.cx.jorah ]; "tailscale/microserver.home.ts.hillion.co.uk.age".publicKeys = jake_users ++ [ ts.home.microserver ]; "tailscale/li.pop.ts.hillion.co.uk.age".publicKeys = jake_users ++ [ ts.pop.li ]; "tailscale/router.home.ts.hillion.co.uk.age".publicKeys = jake_users ++ [ ts.home.router ]; @@ -97,7 +95,7 @@ in "storj/auth.age".publicKeys = jake_users ++ [ ts.storage.tywin ]; # Version tracker secrets - "version_tracker/ssh.key.age".publicKeys = jake_users ++ [ ts.cx.boron ts.cx.jorah ]; + "version_tracker/ssh.key.age".publicKeys = jake_users ++ [ ts.cx.boron ]; # Home Automation secrets "mqtt/zigbee2mqtt.age".publicKeys = jake_users ++ [ ts.home.router ]; @@ -117,7 +115,6 @@ in "gitea/security_internal_token.age".publicKeys = jake_users ++ [ ts.cx.boron ]; "gitea/actions/boron.age".publicKeys = jake_users ++ [ ts.cx.boron ]; - "gitea/actions/jorah.age".publicKeys = jake_users ++ [ ts.cx.jorah ]; # HomeAssistant Secrets "homeassistant/secrets.yaml.age".publicKeys = jake_users ++ [ ts.home.microserver ]; diff --git a/secrets/tailscale/jorah.cx.ts.hillion.co.uk.age b/secrets/tailscale/jorah.cx.ts.hillion.co.uk.age deleted file mode 100644 index 21852a5..0000000 --- a/secrets/tailscale/jorah.cx.ts.hillion.co.uk.age +++ /dev/null @@ -1,23 +0,0 @@ -age-encryption.org/v1 --> ssh-rsa GxPFJQ -kqQ9ovZi1Wqf7hz75QB+v8oLr5oRT4Uce7juM+R04CrOOGn1O6DkQtVeFa4Q7Ho0 -DTYeaP3jTR8zo7poTI323q8FbQ/dLG4jxBFafDZJZlXGEThVLnhNYqZZSjiCJHma -hUn8nSC0y6AdA+lMn8tvZcaivaYpPtT+bALXtvxZ6rTo+mTbJrVRxPY5FZdmdmCC -Z1h3UFZoyuAO9VWQKtPO3o0Ijh+L7e+TFdRl1YowGB+hvZdJ08AkPXrwIEUMnnMA -+e/FA5HxHgvi6ud8RTcAkaecYt0l/vKDgBON9ESfHIMuS+vNk5GKT7a+ImKmfb4/ -o2cSmR8y/+J5z4MEBcj/Vg --> ssh-rsa K9mW1w -veHh0OpoW3Hnvy9k7NwANMae2StqGcohTI9hfeHNi7mR6wHly1HqOD9U7eijVYIC -qvKJsk7sEO8NyAVqLWqrvdq9bLkgTgsNWQsXbulY8VHhwZMIko9YYIZeJv8Um9Bz -q4QiwJW1KoLItqJNR9c1ZLRfwHaLZwKTThAKMjgt5KFiN5NJYb9CLbAZi4eG1hi0 -PsIP/S/dsUKAeN6Bz2JZ4HB0jsvyPiQLr2p4q5nfEKybJEmjOfc9Z7TjwZTNlC0Y -0MKVarhwFqsMIP63gTYZisacAhmsG7DoLFA5eHf0VPa1KjqFait0dG+zuojehMfj -uifZFGahsWaAMg+oq+/Cvg --> ssh-ed25519 Qo6/7A sLXu4pSLH2lnzLYVzisN9Zl/EW1jL21Km6kPZO0/Zjk -chDyf7Sb5GtSVi3TmfYpwwFbI3PhoOnxS5lRcqQGwyY --> Y1-grease ,Lz| "Uil>z36 -K -xfFD+uEZIkGkysF3HdMkMbhsPnu+Cnu6o8tT0lq8rdSOn26V6Fj5CZi1muuD7d2c -BLtH1vyQx4M71Hb6PmKu7+s5V9xsJqKxtDqx/6iAc9uZnbmeU27nsA ---- YXh9Kl4PGetzx8qsLJa5gTO3W7UNtio1tXs/HXS271U -ak+J+/Kb|$M{N]=7@(h.ql2 X}],'N C!;W -D \ No newline at end of file diff --git a/secrets/version_tracker/ssh.key.age b/secrets/version_tracker/ssh.key.age index e97f0a73d4255c50ba562ca1fad21df9fbda33e0..6dc0ba9dbacd3e4deaf2cd55369324914f87bb5a 100644 GIT binary patch literal 1481 zcmYk)`)?Bk0Kjoj9Y!W~m_F%f^_R=x1f~uMVR6?{1uYhrT z(c(309@c_%*!Y5>3jS7=4eQmgB?~&^K#?YkKF(yu3c+%zgb+2COJi7jI)nfxr^O~HJ{aPHd>rtZ%bG42 z;X+Hq?QShdgdrEnqF}b`v{WmCx?AJINv4{I6$28JCV=#4t#Z=rqP#?ulz>PfipPbV zq_KG#iOA`KIVDF4#l|Fns>J$8Um})@X(dI=I%KaP!=^;uaCqJ678ue{iDNmH?67fe z4yT}e)SqRIN|kEWNI`?WN{Ql`l3exrNZuDV#14NTfk7rhcEoFDv)>Ky5UOHg&Qn4P z(EqhbkC?DkO?pSUmgIdX&sb|ADu|GvfF#V$j22Retf6NC+LPBaEQrNJgi~Ni56A#G zNoWaBNR7SE0*TswsIM@7@R-kf?*DZ0VQJ> zOGHsMvOXtgu4T2n-Q)&iQ6|Er%}KAvqvnw^7Ip@N|Fn6|?sC~Y4Y@=PWuXSf0y)Jr zsubN~F&D!eL;@mPC>awa4}$>zZkuYcFo8fifj}lSR>^sMbTCvwi-tc7N?NQ+v4WPZ zxHCpf4iRNWCS01+U6M_Wjg1Wy9>~C0EKJ#>)kFtGl|>QzbA}n?&6)Mz_qO}rY zT~WVjhH$HEVb>57j85Bef;@YNIJ`Zway!403R+;jU-*9>XuV}HE$6+G?J zDchPF=$=)pdT$)RXr1!d;d1>`i>pswP1?V>aN_Y5)xPWZ_#Wx1zwpK2;JZ!7(U(W> zz5Gne%|qlCAd1zbWES_ACB(j zE)8!P+_Z4U_DRO{*N(3H?iKmqYVPfNs{Q!xe9nFlj~pSd?NCO=bF<#u^3C=5F4vJ~ zUw>isn6d2PI>&<|v+3jKI?w+a{-xgN(t*~~C;Gl`p3`mI-ucm)>fC|h!Ts{Y6=Ki) zF<{L-18at?^G_{0*#Gm;nf1zgxqI1x>F7&;ZoF)*`~GRfxnu9e<|Q{;W1Szgs~2uX z)?RctTiPDd4m9lB4;-~dUH||9 literal 1591 zcmZ9}`;!v~0l@K_4r*Q7DKbSoD0o#%Y15GRX4l@p?PhnAO|nTg$-aV4Zmb-tEN6wmfl`li##SnGrO?W>6hvEW;imeFGmd}3 zcjogI70EB@wT|2FYKFen=qQ0+2=K2PvMkl#vBaTdzd)pEAZ28+AWWw#L;|5&T{01+ z`Hol?@@@m~ONl7kvEw+dRCGnHIc%+vOy(LnmJricL^Fe|2T)R}Ov1S)gqTfVuM`BO zpj_hMwCRJGVwcOfy&A7}ida&&5ZoxWq>v|>K?gzIzKs#82hd*8w7f75RT3>YV43-1 z(k6`v8xGRtB{Qas6eAbrWvc02?cpGRRHu-CFL?9nS;x*a4=Gh ziB8@p#o9uXkM#7CE(aQPC|xh1D%(qO6@`zK%00Cg?6cuyS`FoZGy|E9F387ytq2Y_ zL%71Zn)AQf8MwuT9Du01d9>f=k*1hQ%C;d2s-7sP`o5@Kqr6;SwMsc9o(M2WH!EnO zlg#A#YD*_!!j5}dj0URlL@Fa^y*yrw^qLSTM59_hP5baNg=%r6r#V!=#}sP>QU)_3 ztk%3VzJ3skxGQAc5-|;!)a*<*WnhPO%?>)5Dk~8=6gXs zQR#J>0_Y3WV;s-REEF?eKJDTi&0!wksntCfD7lOYz;R4Eje6KoT+vz&-R zI-^l#2WX@1Vn^?TB@=@iLJ>i=lFGIvH$w*!S+t1T0Sx-jcSaT%!0-1D#XDmR!Zx$E z>ve@zE}$SGvZQz!h7Cl`IH+J&Jsl=xql(hNqOIS5dE41n=Ee^#(<-yOwVQYT^+WXP zmSxK7z|Zf0VC~BE;Dop4(r)&bor4?rJ((~5U4Hiy52NOD>*n4MDI-rE-*|oIqi^5( z!<(<&-xx8LFaCOG`kNb9toT4sU;HBfsvdbl2Xgw=(zq>{pYoy}j!9e>!>c!7C44 zcvg~kuwS9)Z#lXC(ENs7$IiaGdrtk*rzUTVm)8vZc6#yG9!r1WiQMfM-@tqi-*#Ln z>^nK&z1_NL&#(W{+;&O2wf%>I{-NJ&52jxJ;0o=3WXXNuYVGI&dSz<=^xVMMt|bG~ zXBPeQ#`y29pMEF3R3Vm*@0o_rFS<^hIqVf?F8%cM;M&)QkDK3_Jv#OJ>gQ)y+;y<< zmyep!;rZo1p2@xN!YAM9R}aJ{x4gRJ^m+rme9HxdAAI_~bC+kBf8BG6nS93FD@Pyw z(H8vnkGnJUQE=y8IX9q`Aw=_C=LR?;&eeb?q`yO9@jQ-o1 zk-eHRx;ee#-HV&ro8G*4;PGn{-}1+%p8ovS!D)Kp!1Nv8JMrSkn#a!Tv(RC1{i%h! zx9<19|C5E`&8xeskG%fo!KXGY%)Bx+ftve=zwDiV=*d$@rXCre*}ibcF!P{r8Cb;K Ppq}pxpDS0lZQl295@u@_