dev/nixfiles

Fork 0

Files

T

jackos1998 5171a10079

CI / Check, build and cache nixfiles (push) Failing after 59m32s

Details

Update docs / update (push) Failing after 1m12s

Details

nixpkgs: Refresh channels and inputs

Rebase the fork branches and refresh nixpkgs, home-manager, and the
approved ancillary inputs. Update kernel and release metadata, adapt
removed package and Home Assistant options, and keep Determinate Nix
on its tested nixpkgs revision to avoid duplicate Boost patches.

Retire Sharry and its public endpoint because copyparty replaces it.
Document the GitHub mirror gate and require real devshell and system
builds in the upgrade validation workflow.

2026-08-24 00:10:18 +01:00

2.3 KiB

Raw Blame History

object

Object storage and the Nix binary cache, plus HedgeDoc and wastebin.

Source: shill/containers/object.nix
Host: NixOS container on shill (bind-mounts /mnt/minio and /mnt/nix-cache read-write)
nixpkgs: mine

Role

Service	Port	Purpose
MinIO	`9000` (S3) / `9001` (console)	S3-compatible object storage, `s3.nul.ie` + `*.s3.nul.ie` (virtual-host style via `MINIO_DOMAIN`), console at `minio.nul.ie`; region `eu-central-1`; data on the `/mnt/minio` XFS volume
Harmonia	`5000`	Nix binary cache at `nix-cache.nul.ie` — `harmonia-dev` cache serves `shill`'s `/nix/store` out of a dedicated store view rooted at `/var/lib/harmonia` (bind-mounted from `/mnt/nix-cache`), signed with the `nix-cache.key` secret; a `harmonia` user with authorized keys exists for cache pushes
HedgeDoc	`3000`	collaborative markdown notes at `md.nul.ie`; Postgres on colony-psql; anonymous edits but no anonymous notes, email login, no open email registration
wastebin	`8088`	pastebin at `pb.nul.ie`
atticd	`8069`	currently disabled (`services.atticd.enable = false`) — an alternative Nix cache that would store locally and sit behind `nix-cache.nul.ie`; config (including the `object/atticd.env` secret) is kept around

Everything public is fronted by middleman (see its vhost table). The minio-client is installed and the user's ~/.mc/config.json points at an age-secret config. minio-2025-10-15T17-29-55Z is allowlisted via permittedInsecurePackages (flagged as a TODO).

Network assignments

See the consolidated network assignments table (this box: object).

Backing services

colony-psql — HedgeDoc's database (atticd too, when enabled).
MinIO buckets back other boxes' services: Gitea LFS/packages (with the middleman MIME hack for Docker manifests), Mastodon's mastodon bucket and the Bluesky PDS pds bucket on toot.

Notable config files

nixos/boxes/colony/vms/shill/containers/object.nix — container definition and all services

2.3 KiB Raw Blame History