Hermes
e03f09c247
Bidirectional remote building + rename uconsole-cm5 -> uConsole: - Rename all uconsole-cm5 refs to uConsole (nixosSystem key, paths, module) - Replace single-machine remote-builder module with multi-machine config - Enable remote builder on lazyworkhorse -> uConsole (aarch64) - Enable remote builder on uConsole -> lazyworkhorse (x86_64) - Add builder system user + SSH key via agenix-rekey (secrets/builder_key.age) - Add builder_key + gortium_password age secrets to all hosts - Fix pre-existing bugs: missing modules in lazyworkhorse/cyt-pi, SSH config structure (hostKeys outside settings), cyt-pi inline user - Remove obsolete openclaw-node service + module + age secrets
98 lines
2.5 KiB
Nix
98 lines
2.5 KiB
Nix
{ config, lib, pkgs, paths, self, ... }:
|
|
|
|
{
|
|
# Basic Host Info
|
|
networking.hostName = "cyt-pi";
|
|
time.timeZone = "America/Montreal";
|
|
i18n.defaultLocale = "en_CA.UTF-8";
|
|
|
|
# System State
|
|
system.stateVersion = "25.05";
|
|
|
|
# Boot & Hardware (Pi Zero 2 W is ARM64)
|
|
boot.loader.grub.enable = false;
|
|
boot.loader.generic-extlinux-compatible.enable = true;
|
|
boot.kernelPackages = pkgs.linuxPackages_latest;
|
|
|
|
# Networking
|
|
networking.networkmanager.enable = true;
|
|
services.openssh = {
|
|
enable = true;
|
|
settings.PermitRootLogin = "prohibit-password";
|
|
};
|
|
|
|
# User (defined in users/gortium/gortium.nix)
|
|
|
|
# CYT Project Dependencies (Headless)
|
|
environment.systemPackages = with pkgs; [
|
|
git
|
|
python311
|
|
python311Packages.opencv4
|
|
python311Packages.numpy
|
|
python311Packages.pillow
|
|
autossh # For the reverse tunnel
|
|
kismet # Wi-Fi monitoring
|
|
];
|
|
|
|
# Kismet Service
|
|
systemd.services.kismet = {
|
|
description = "Kismet Wi-Fi Monitor";
|
|
after = [ "network-online.target" ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
serviceConfig = {
|
|
User = "gortium";
|
|
Group = "kismet";
|
|
ExecStart = ''
|
|
${pkgs.kismet}/bin/kismet -c panda --log-prefix=/home/gortium/kismet_logs --no-nc-ui
|
|
'';
|
|
Restart = "always";
|
|
RestartSec = "10s";
|
|
};
|
|
};
|
|
|
|
# Reverse SSH Tunnel Service
|
|
systemd.services.cyt-tunnel = {
|
|
description = "Reverse SSH Tunnel to lazyworkhorse.net";
|
|
after = [ "network-online.target" ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
serviceConfig = {
|
|
User = "gortium";
|
|
ExecStart = ''
|
|
${pkgs.autossh}/bin/autossh -M 0 -N \
|
|
-o "ServerAliveInterval 30" \
|
|
-o "ServerAliveCountMax 3" \
|
|
-R 19999:localhost:22 \
|
|
gortium@lazyworkhorse.net -p 2425 \
|
|
-i /home/gortium/.ssh/cyt_tunnel_key
|
|
'';
|
|
Restart = "always";
|
|
RestartSec = "10s";
|
|
};
|
|
};
|
|
|
|
|
|
# Age secrets
|
|
age.secrets.gortium_password = {
|
|
file = ../../secrets/gortium_password.age;
|
|
};
|
|
|
|
# CYT Application Service
|
|
systemd.services.cyt-app = {
|
|
description = "Chasing Your Tail - Target Detector";
|
|
after = [ "network-online.target" "kismet.service" ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
serviceConfig = {
|
|
User = "gortium";
|
|
WorkingDirectory = "/home/gortium/Chasing-Your-Tail-NG";
|
|
ExecStart = ''
|
|
${pkgs.python311}/bin/python3 target_detector_cli.py --min-ssids 2
|
|
'';
|
|
Restart = "on-failure";
|
|
RestartSec = "60s";
|
|
Environment = [
|
|
"CYT_KISMET_LOGS=/home/gortium/kismet_logs"
|
|
];
|
|
};
|
|
};
|
|
}
|