guixsd-config

GuixSD configs for my systems
Log | Files | Refs
commit 3550a928d8152022c63fa16c19e91aaffceb1e74
parent f97dcf0a9dbaa806cda37cd15eb02fbc8417cc98
Author: Vineet Kumar <git@vineetk.net>
Date:   Sun,  3 May 2026 14:13:53 -0400

demiurge: try changing to different airvpn node

Diffstat:

Mepistemia/secrets/email_13f0.age | 0


Mepistemia/secrets/email_vinbiz.age | 0


Mepistemia/secrets/email_vineetk.age | 0


Mepistemia/secrets/saklas_smtpd_dkim.age | 0


Mepistemia/secrets/saklas_smtpd_passwd.age | 0


Mepistemia/secrets/saklas_smtpd_virtuals.age | 0


Mepistemia/secrets/wg0_demiurge.age | 15+++++++--------


Mepistemia/secrets/wg0_hastur.age | 15+++++++--------


Mepistemia/secrets/wg0psk_demiurge.age | 0


Mepistemia/secrets/wg0psk_hastur.age | 0


Mepistemia/secrets/wg1_demiurge.age | 14+++++++-------


Mepistemia/secrets/wg1_hastur.age | 0


Mepistemia/secrets/wg1_saklas.age | 14+++++++-------


Mepistemia/secrets/wg2_hastur.age | 0


Mepistemia/secrets/wpa_supplicant.age | 0


Mepistemia/systems/demiurge.scm | 20++++++++++----------


16 files changed, 38 insertions(+), 40 deletions(-)

diff --git a/epistemia/secrets/email_13f0.age b/epistemia/secrets/email_13f0.age
Binary files differ.
diff --git a/epistemia/secrets/email_vinbiz.age b/epistemia/secrets/email_vinbiz.age
Binary files differ.
diff --git a/epistemia/secrets/email_vineetk.age b/epistemia/secrets/email_vineetk.age
Binary files differ.
diff --git a/epistemia/secrets/saklas_smtpd_dkim.age b/epistemia/secrets/saklas_smtpd_dkim.age
Binary files differ.
diff --git a/epistemia/secrets/saklas_smtpd_passwd.age b/epistemia/secrets/saklas_smtpd_passwd.age
Binary files differ.
diff --git a/epistemia/secrets/saklas_smtpd_virtuals.age b/epistemia/secrets/saklas_smtpd_virtuals.age
Binary files differ.
diff --git a/epistemia/secrets/wg0_demiurge.age b/epistemia/secrets/wg0_demiurge.age
@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 947m3A oFvU4kMelxv3/SgI1Ue/Q56uwl8tk7fkJPl/nUWs0H4
-4IOQxO9x1u5WzqmJC6F+4LV9qywqN1Et8dyYXl2yqik
--> ssh-ed25519 AaF/mQ idj54ncEi+xBqV9d/OjSdV3TPOc0xN35rvk6CgXC3zA
-3ROsHgUW5xaeUyoWILWIRGpi1klOVqmu51Ioc1x3/l4
---- Ur1Nj8QjpqZmEtVySYj606FDo+5+IA3On72sbtzhSNI
-l
-GR&B& $7.kJE%O}w n?14TFe,zr1uh_
-\ No newline at end of file
+-> ssh-ed25519 947m3A c2wSW+LkCb6Rr6248vUI3tTX012bVmbBm5fxgwlsqxU
+P7McuKTni0J4mQWF2JkgUDYFBgZGk16RpuNN0sMGDHo
+-> ssh-ed25519 AaF/mQ 4kGKXGo3rWcJzmU2BaLFYMcmon70AZ0E75ER8A6TEQw
+o1i7+kxPjy3691E0pt4ozhpn4sO23PH6YhzFgisjLpI
+--- PGFClajM8dUmSfjE+93iji8sTI2eO/+s1lIZ7/RJNMs
+$48Rb/G~HG^8/<i@w;65`#8Wa]riB<
+\ No newline at end of file
diff --git a/epistemia/secrets/wg0_hastur.age b/epistemia/secrets/wg0_hastur.age
@@ -1,8 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 M+PQbg jcDaX+XoDHVI6iS2VOyW/v5BJW++EzhkEVZAZvlZG0s
-jrHgIMNMsZZsqYa5klnD7Lu+DlXCRkkvwB8nXuZAeuk
--> ssh-ed25519 AaF/mQ LMmCF1k76UK8Z9U6Uw7eLS1/0vl4OSMlQRF8vpq17nw
-j1l4rvzZWRs7rD/Kl1f1E+udO09Zu/M14MoJlEg1HVU
---- 9UIQwisvrCNa7xwIsPWnkGS4FspCVPTEFf4oL4AwCpg
-
-ظwzW	AMb6qPĭRiY8>*a]T/dX"
-\ No newline at end of file
+-> ssh-ed25519 M+PQbg rT05sKQL+03hJgjguFB6dL+o9ZWGldVpg0vcfIjJPSs
+VGWWW+ymT1enI87WWyq1yGQg5kCPTImDnvwiP70A2ns
+-> ssh-ed25519 AaF/mQ PdnOO5Y8gtyuX22TtaoNQn532f9Rrvr65afyC6C+6HY
+aj9kUSl80zoi9VqgtxTu0lGUsPz2pZ+GeAVu3cS4ulQ
+--- ExdDncw0Ynars53UnkJRdveGiXJo2accj2YyeH6SiiE
+>Xrb`ӀkE^Hq 9Fv'"rIܿ=LME8@qNDl\
+\ No newline at end of file
diff --git a/epistemia/secrets/wg0psk_demiurge.age b/epistemia/secrets/wg0psk_demiurge.age
Binary files differ.
diff --git a/epistemia/secrets/wg0psk_hastur.age b/epistemia/secrets/wg0psk_hastur.age
Binary files differ.
diff --git a/epistemia/secrets/wg1_demiurge.age b/epistemia/secrets/wg1_demiurge.age
@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 947m3A XeQVp+qvHY/AdBfeRPZFm+PMw1zqARFE2nM0MHLBeV0
-1XUz1PU/AmieRcKKgczPv8Uw/Rk7rdG1hbc8iTtf3/s
--> ssh-ed25519 AaF/mQ oLsTCKN7OfqAWJ6vf7UL6hUXleoiPMPyRgipANUuYU0
-8AZkb3sMwdDf6yIdXGwz6pczraf3/lzih/LG/4hUsLM
---- tpy8xoo5+UO15V13cclmO3PKEBNtZnvnKDwB6KUnglU
-n^Jϝ}U&QOPDV&aH2Y8_CUe6"Oھ&7DK((E/qAh
-\ No newline at end of file
+-> ssh-ed25519 947m3A ZtCv5rqrvDV06sGW+HcFki0OXtngqxKxBo17cIBNXCg
+Ry8DA7rTG+HQRsv5vHQzrfqyArvJY6S3AemwOByj0EY
+-> ssh-ed25519 AaF/mQ cQFZcqxGCweqkTlfMnIiNHDN2hG7NFvMeIp15oEehHA
+fBcQOTRd7533Jm2Vtrp8msYvgOFPMDOqStTBjrh8I24
+--- lYu9ZeUXfi+WgEYFc4+vxZFEfahVYqWB4+fMGexSsOI
+	r~*,h\r߀E^ΡhrN A E-1</jipje/`
+\ No newline at end of file
diff --git a/epistemia/secrets/wg1_hastur.age b/epistemia/secrets/wg1_hastur.age
Binary files differ.
diff --git a/epistemia/secrets/wg1_saklas.age b/epistemia/secrets/wg1_saklas.age
@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 KXd7pg DLEjWyAjUyBfMXQh0JuYyGivV02Enxgn88oUYuUUuEE
-x5EEu323RkqKVv/rD2SXCxXoZKJ/H1lestiYqNWoUq4
--> ssh-ed25519 AaF/mQ /dH5zME9oz7O9sbQlkWTTeFJ7OOCAObjUYoZc/yZ31c
-SUhrEqqplZafv1Vgh1tEAFrQ7Azxxco+pa6X73HzDU0
---- xCpUlsUg9amRlwNGJyKbjFU4yoIewP+NmSwEpt7F/4M
-N㇒=ܙFG oÓ+vv|!]cɒ$Kx<TN2sfhCR2%:["
-\ No newline at end of file
+-> ssh-ed25519 KXd7pg UcFYiL7gmP0RuOck2D4zuX5fOlq8kyed2mOdO4iE1CU
+Bn8DDFzowuw13932vVhxngI/EMTAs2r/FYkS3xOal9M
+-> ssh-ed25519 AaF/mQ CYXDHhLE0KKJXibe9EvvzUJxknmGJqBsYL0GfeblRH0
+DhOcGr8IFgwprwz1sCIsdc0FzQ057l9en4jSpZyWzb8
+--- CK6x1eTFcpohL9vPYL+7i6OEvODBYwLFWDNisSVzLNA
+">X(АMbQ[y`-sw/[??rBv`nT2u$IB`-
+\ No newline at end of file
diff --git a/epistemia/secrets/wg2_hastur.age b/epistemia/secrets/wg2_hastur.age
Binary files differ.
diff --git a/epistemia/secrets/wpa_supplicant.age b/epistemia/secrets/wpa_supplicant.age
Binary files differ.
diff --git a/epistemia/systems/demiurge.scm b/epistemia/systems/demiurge.scm
@@ -175,12 +175,12 @@
 					  (service wireguard-service-type
 						   (wireguard-configuration
 						    (interface "wg0")
-						    (addresses '("10.185.39.56/32" "fd7d:76ee:e68f:a993:a29b:21bb:332:cbac/128"))
+						    (addresses '("10.179.194.21/32" "fd7d:76ee:e68f:a993:cee4:5b6c:bce1:9350/128"))
 						    (port 51821)
 						    (bootstrap-private-key? #f)
 						    (private-key "/run/secrets/wg0_demiurge")
 						    (pre-up '("while [ ! -f /run/secrets/wg0_demiurge ]; do sleep 1; done"
-							      "ip route replace 184.75.208.244 via 192.168.1.1 dev eth0"))
+							      "ip route replace 184.75.221.173 via 192.168.1.1 dev eth0"))
 						    (post-up
 						     (list "ip rule add fwmark 0x1 table 100 priority 100"
 							   "ip rule add fwmark 51820 table 100 priority 100"
@@ -189,7 +189,7 @@
 							   #~(string-append #$(file-append iptables "/sbin/iptables") " -t mangle -A PREROUTING -i eth0 -j CONNMARK --restore-mark")
 							   #~(string-append #$(file-append iptables "/sbin/iptables") " -t mangle -A OUTPUT -m conntrack --ctstate ESTABLISHED,RELATED -j CONNMARK --restore-mark")))
 						    (post-down
-						     (list "ip route del 184.75.208.244 via 192.168.1.1 dev eth0"
+						     (list "ip route del 184.75.221.173 via 192.168.1.1 dev eth0"
 							   "ip rule del fwmark 0x1 table 100"
 							   "ip rule del fwmark 51820 table 100"
 							   "ip route flush table 100"
@@ -203,7 +203,7 @@
 						       (public-key "PyLCXAQT8KkM4T+dUsOQfn+Ub3pGxfGlxkIApuig+hk=")
 						       (preshared-key "/run/secrets/wg0psk_demiurge")
 						       (allowed-ips '("0.0.0.0/0" "::0/0"))
-						       (endpoint "184.75.208.244:1637"))))))
+						       (endpoint "184.75.221.173:1637"))))))
 					  (service wireguard-service-type
 						   (wireguard-configuration
 						    (interface "wg1")
@@ -287,12 +287,12 @@
 						      (nginx-reverse-proxy "navidrome.demiurge.epistemia" 4533)
 						      (nginx-reverse-proxy "sdui.demiurge.epistemia" 5000)
 						      (nginx-reverse-proxy "home.demiurge.epistemia" 8123)))))
-					  (service llama-swap-service-type
-						   (llama-swap-configuration
-						    (llama-cpp llama-cpp-rocm)
-						    (config "/data/models/config.yaml")
-						    (listen "127.0.0.1:8080")
-						    (watch-config? #t)))
+					  ;; (service llama-swap-service-type
+					  ;; 	   (llama-swap-configuration
+					  ;; 	    (llama-cpp llama-cpp-rocm)
+					  ;; 	    (config "/data/models/config.yaml")
+					  ;; 	    (listen "127.0.0.1:8080")
+					  ;; 	    (watch-config? #t)))
 					  (service pam-limits-service-type
 						   (list (pam-limits-entry "@audio" 'both 'rtprio 99)
 							 (pam-limits-entry "@audio" 'both 'memlock 'unlimited)))