Files

T

jackos1998 a7ea91f529 docs: Document the boxes

Add a top-level `README.md` mapping the boxes and per-machine docs under
`docs/boxes/` (grouped `colony/`, `home/`, `misc/`), one file per host, VM and
container documenting role, services and networking with source pointers.

Also point `AGENTS.md` at the new docs.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-14 22:45:20 +01:00

1.6 KiB

Raw Blame History

git

The Gitea VM — source hosting and CI for the boxes (git.nul.ie).

Source: nixos/boxes/colony/vms/git/ (default.nix, gitea.nix, gitea-actions.nix)
nixpkgs: mine
Host: VM on colony

Role

Gitea (gitea.nix) — the Git forge (git.nul.ie). PostgreSQL-backed (the shared colony-psql), LFS enabled, with object storage backed by MinIO on object (a MinIO secret is spliced into app.ini at startup).
Gitea Actions runner (gitea-actions.nix) — a Docker-mode runner (main-docker) using podman. Labels provide Debian/node-24 (Trixie) and Ubuntu 26.04 images; runner config comes from the upstream module's settings option. The Actions cache lives on a dedicated disk (/var/cache/gitea-runner). Runs as a fixed gitea-runner user (not DynamicUser) so it can read its token.
nginx — terminates TLS for git.nul.ie and proxies to Gitea on :3000. ACME certs for nul.ie / *.nul.ie via the Cloudflare DNS challenge.
podman — also hosts the OCI registry/build images; /var/lib/containers is an XFS data disk.

Networking

vms interface with routing / internal assignments.
HTTP/HTTPS forwarded in from estuary; podman default subnet 10.88.0.0/16 is allowed to forward.

CI

This runner is what executes the repo's own .gitea/workflows/ci.yaml, building each .#ci.x86_64-linux attribute and pushing to the Harmonia binary cache. See AGENTS.md.

1.6 KiB Raw Blame History

git

Role

Networking

CI

1.6 KiB

Raw Blame History