diff options
| author | Vineet Kumar <git@vineetk.net> | 2026-05-03 14:13:53 -0400 |
|---|---|---|
| committer | Vineet Kumar <git@vineetk.net> | 2026-05-03 14:13:53 -0400 |
| commit | 3550a928d8152022c63fa16c19e91aaffceb1e74 (patch) | |
| tree | 8f6530bba0044b46a83cf0808b145de8863ae4c6 /epistemia | |
| parent | f97dcf0a9dbaa806cda37cd15eb02fbc8417cc98 (diff) | |
demiurge: try changing to different airvpn node
Diffstat (limited to 'epistemia')
| -rw-r--r-- | epistemia/secrets/email_13f0.age | bin | 383 -> 383 bytes | |||
| -rw-r--r-- | epistemia/secrets/email_vinbiz.age | bin | 383 -> 383 bytes | |||
| -rw-r--r-- | epistemia/secrets/email_vineetk.age | bin | 383 -> 383 bytes | |||
| -rw-r--r-- | epistemia/secrets/saklas_smtpd_dkim.age | bin | 1997 -> 1997 bytes | |||
| -rw-r--r-- | epistemia/secrets/saklas_smtpd_passwd.age | bin | 861 -> 861 bytes | |||
| -rw-r--r-- | epistemia/secrets/saklas_smtpd_virtuals.age | bin | 778 -> 778 bytes | |||
| -rw-r--r-- | epistemia/secrets/wg0_demiurge.age | 13 | ||||
| -rw-r--r-- | epistemia/secrets/wg0_hastur.age | 13 | ||||
| -rw-r--r-- | epistemia/secrets/wg0psk_demiurge.age | bin | 367 -> 367 bytes | |||
| -rw-r--r-- | epistemia/secrets/wg0psk_hastur.age | bin | 367 -> 367 bytes | |||
| -rw-r--r-- | epistemia/secrets/wg1_demiurge.age | 12 | ||||
| -rw-r--r-- | epistemia/secrets/wg1_hastur.age | bin | 367 -> 367 bytes | |||
| -rw-r--r-- | epistemia/secrets/wg1_saklas.age | 12 | ||||
| -rw-r--r-- | epistemia/secrets/wg2_hastur.age | bin | 367 -> 367 bytes | |||
| -rw-r--r-- | epistemia/secrets/wpa_supplicant.age | bin | 917 -> 917 bytes | |||
| -rw-r--r-- | epistemia/systems/demiurge.scm | 20 |
16 files changed, 34 insertions, 36 deletions
diff --git a/epistemia/secrets/email_13f0.age b/epistemia/secrets/email_13f0.age index 5765c83..4ca92ad 100644 --- a/epistemia/secrets/email_13f0.age +++ b/epistemia/secrets/email_13f0.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/email_vinbiz.age b/epistemia/secrets/email_vinbiz.age index 2fef9d6..46c0c45 100644 --- a/epistemia/secrets/email_vinbiz.age +++ b/epistemia/secrets/email_vinbiz.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/email_vineetk.age b/epistemia/secrets/email_vineetk.age index 4aff283..ab31c97 100644 --- a/epistemia/secrets/email_vineetk.age +++ b/epistemia/secrets/email_vineetk.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/saklas_smtpd_dkim.age b/epistemia/secrets/saklas_smtpd_dkim.age index a5e1417..fe73b71 100644 --- a/epistemia/secrets/saklas_smtpd_dkim.age +++ b/epistemia/secrets/saklas_smtpd_dkim.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/saklas_smtpd_passwd.age b/epistemia/secrets/saklas_smtpd_passwd.age index b6a4c51..ddfb076 100644 --- a/epistemia/secrets/saklas_smtpd_passwd.age +++ b/epistemia/secrets/saklas_smtpd_passwd.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/saklas_smtpd_virtuals.age b/epistemia/secrets/saklas_smtpd_virtuals.age index 8cef3ac..8c0f840 100644 --- a/epistemia/secrets/saklas_smtpd_virtuals.age +++ b/epistemia/secrets/saklas_smtpd_virtuals.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/wg0_demiurge.age b/epistemia/secrets/wg0_demiurge.age index 5b930b8..bf82e86 100644 --- a/epistemia/secrets/wg0_demiurge.age +++ b/epistemia/secrets/wg0_demiurge.age | |||
| @@ -1,8 +1,7 @@ | |||
| 1 | age-encryption.org/v1 | 1 | age-encryption.org/v1 |
| 2 | -> ssh-ed25519 947m3A oFvU4kMelxv3/SgI1Ue/Q56uwl8tk7fkJPl/nUWs0H4 | 2 | -> ssh-ed25519 947m3A c2wSW+LkCb6Rr6248vUI3tTX012bVmbBm5fxgwlsqxU |
| 3 | 4IOQxO9x1u5WzqmJC6F+4LV9qywqN1Et8dyYXl2yqik | 3 | P7McuKTni0J4mQWF2JkgUDYFBgZGk16RpuNN0sMGDHo |
| 4 | -> ssh-ed25519 AaF/mQ idj54ncEi+xBqV9d/OjSdV3TPOc0xN35rvk6CgXC3zA | 4 | -> ssh-ed25519 AaF/mQ 4kGKXGo3rWcJzmU2BaLFYMcmon70AZ0E75ER8A6TEQw |
| 5 | 3ROsHgUW5xaeUyoWILWIRGpi1klOVqmu51Ioc1x3/l4 | 5 | o1i7+kxPjy3691E0pt4ozhpn4sO23PH6YhzFgisjLpI |
| 6 | --- Ur1Nj8QjpqZmEtVySYj606FDo+5+IA3On72sbtzhSNI | 6 | --- PGFClajM8dUmSfjE+93iji8sTI2eO/+s1lIZ7/RJNMs |
| 7 | l | 7 | $48Rb/G~HG^8/<i@w;65`#8Wa]riB< \ No newline at end of file |
| 8 | GR&B& $7.kJE%O}w n?14TFe,zr1uh_ \ No newline at end of file | ||
diff --git a/epistemia/secrets/wg0_hastur.age b/epistemia/secrets/wg0_hastur.age index 4106089..b903725 100644 --- a/epistemia/secrets/wg0_hastur.age +++ b/epistemia/secrets/wg0_hastur.age | |||
| @@ -1,8 +1,7 @@ | |||
| 1 | age-encryption.org/v1 | 1 | age-encryption.org/v1 |
| 2 | -> ssh-ed25519 M+PQbg jcDaX+XoDHVI6iS2VOyW/v5BJW++EzhkEVZAZvlZG0s | 2 | -> ssh-ed25519 M+PQbg rT05sKQL+03hJgjguFB6dL+o9ZWGldVpg0vcfIjJPSs |
| 3 | jrHgIMNMsZZsqYa5klnD7Lu+DlXCRkkvwB8nXuZAeuk | 3 | VGWWW+ymT1enI87WWyq1yGQg5kCPTImDnvwiP70A2ns |
| 4 | -> ssh-ed25519 AaF/mQ LMmCF1k76UK8Z9U6Uw7eLS1/0vl4OSMlQRF8vpq17nw | 4 | -> ssh-ed25519 AaF/mQ PdnOO5Y8gtyuX22TtaoNQn532f9Rrvr65afyC6C+6HY |
| 5 | j1l4rvzZWRs7rD/Kl1f1E+udO09Zu/M14MoJlEg1HVU | 5 | aj9kUSl80zoi9VqgtxTu0lGUsPz2pZ+GeAVu3cS4ulQ |
| 6 | --- 9UIQwisvrCNa7xwIsPWnkGS4FspCVPTEFf4oL4AwCpg | 6 | --- ExdDncw0Ynars53UnkJRdveGiXJo2accj2YyeH6SiiE |
| 7 | 7 | >Xrb`ӀkE^H q 9Fv'"rIܿ=LME8@qNDl\ \ No newline at end of file | |
| 8 | ظwzW AMb6qPĭRi Y8>*a]T/dX" \ No newline at end of file | ||
diff --git a/epistemia/secrets/wg0psk_demiurge.age b/epistemia/secrets/wg0psk_demiurge.age index 260a12d..7da5002 100644 --- a/epistemia/secrets/wg0psk_demiurge.age +++ b/epistemia/secrets/wg0psk_demiurge.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/wg0psk_hastur.age b/epistemia/secrets/wg0psk_hastur.age index 4d04866..9937767 100644 --- a/epistemia/secrets/wg0psk_hastur.age +++ b/epistemia/secrets/wg0psk_hastur.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/wg1_demiurge.age b/epistemia/secrets/wg1_demiurge.age index 153052d..1f98774 100644 --- a/epistemia/secrets/wg1_demiurge.age +++ b/epistemia/secrets/wg1_demiurge.age | |||
| @@ -1,7 +1,7 @@ | |||
| 1 | age-encryption.org/v1 | 1 | age-encryption.org/v1 |
| 2 | -> ssh-ed25519 947m3A XeQVp+qvHY/AdBfeRPZFm+PMw1zqARFE2nM0MHLBeV0 | 2 | -> ssh-ed25519 947m3A ZtCv5rqrvDV06sGW+HcFki0OXtngqxKxBo17cIBNXCg |
| 3 | 1XUz1PU/AmieRcKKgczPv8Uw/Rk7rdG1hbc8iTtf3/s | 3 | Ry8DA7rTG+HQRsv5vHQzrfqyArvJY6S3AemwOByj0EY |
| 4 | -> ssh-ed25519 AaF/mQ oLsTCKN7OfqAWJ6vf7UL6hUXleoiPMPyRgipANUuYU0 | 4 | -> ssh-ed25519 AaF/mQ cQFZcqxGCweqkTlfMnIiNHDN2hG7NFvMeIp15oEehHA |
| 5 | 8AZkb3sMwdDf6yIdXGwz6pczraf3/lzih/LG/4hUsLM | 5 | fBcQOTRd7533Jm2Vtrp8msYvgOFPMDOqStTBjrh8I24 |
| 6 | --- tpy8xoo5+UO15V13cclmO3PKEBNtZnvnKDwB6KUnglU | 6 | --- lYu9ZeUXfi+WgEYFc4+vxZFEfahVYqWB4+fMGexSsOI |
| 7 | n^J}U&QOPDV&aH2Y8_CUe6"Oھ&7DK((E/qAh \ No newline at end of file | 7 | r~*,h\ r߀E^ΡhrN A E-1</jipje/` \ No newline at end of file |
diff --git a/epistemia/secrets/wg1_hastur.age b/epistemia/secrets/wg1_hastur.age index 38cb976..657bc22 100644 --- a/epistemia/secrets/wg1_hastur.age +++ b/epistemia/secrets/wg1_hastur.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/wg1_saklas.age b/epistemia/secrets/wg1_saklas.age index be7391e..5741b05 100644 --- a/epistemia/secrets/wg1_saklas.age +++ b/epistemia/secrets/wg1_saklas.age | |||
| @@ -1,7 +1,7 @@ | |||
| 1 | age-encryption.org/v1 | 1 | age-encryption.org/v1 |
| 2 | -> ssh-ed25519 KXd7pg DLEjWyAjUyBfMXQh0JuYyGivV02Enxgn88oUYuUUuEE | 2 | -> ssh-ed25519 KXd7pg UcFYiL7gmP0RuOck2D4zuX5fOlq8kyed2mOdO4iE1CU |
| 3 | x5EEu323RkqKVv/rD2SXCxXoZKJ/H1lestiYqNWoUq4 | 3 | Bn8DDFzowuw13932vVhxngI/EMTAs2r/FYkS3xOal9M |
| 4 | -> ssh-ed25519 AaF/mQ /dH5zME9oz7O9sbQlkWTTeFJ7OOCAObjUYoZc/yZ31c | 4 | -> ssh-ed25519 AaF/mQ CYXDHhLE0KKJXibe9EvvzUJxknmGJqBsYL0GfeblRH0 |
| 5 | SUhrEqqplZafv1Vgh1tEAFrQ7Azxxco+pa6X73HzDU0 | 5 | DhOcGr8IFgwprwz1sCIsdc0FzQ057l9en4jSpZyWzb8 |
| 6 | --- xCpUlsUg9amRlwNGJyKbjFU4yoIewP+NmSwEpt7F/4M | 6 | --- CK6x1eTFcpohL9vPYL+7i6OEvODBYwLFWDNisSVzLNA |
| 7 | N㇒=ܙFG o+vv|!]cɒ$Kx<TN2sfhCR2%:[" \ No newline at end of file | 7 | ">X(MbQ[y `-sw/[??rBv`nT2u$IB`- \ No newline at end of file |
diff --git a/epistemia/secrets/wg2_hastur.age b/epistemia/secrets/wg2_hastur.age index 1929871..d368edd 100644 --- a/epistemia/secrets/wg2_hastur.age +++ b/epistemia/secrets/wg2_hastur.age | |||
| Binary files differ | |||
diff --git a/epistemia/secrets/wpa_supplicant.age b/epistemia/secrets/wpa_supplicant.age index 91d7803..f1122da 100644 --- a/epistemia/secrets/wpa_supplicant.age +++ b/epistemia/secrets/wpa_supplicant.age | |||
| Binary files differ | |||
diff --git a/epistemia/systems/demiurge.scm b/epistemia/systems/demiurge.scm index dc3fd79..457c393 100644 --- a/epistemia/systems/demiurge.scm +++ b/epistemia/systems/demiurge.scm | |||
| @@ -175,12 +175,12 @@ | |||
| 175 | (service wireguard-service-type | 175 | (service wireguard-service-type |
| 176 | (wireguard-configuration | 176 | (wireguard-configuration |
| 177 | (interface "wg0") | 177 | (interface "wg0") |
| 178 | (addresses '("10.185.39.56/32" "fd7d:76ee:e68f:a993:a29b:21bb:332:cbac/128")) | 178 | (addresses '("10.179.194.21/32" "fd7d:76ee:e68f:a993:cee4:5b6c:bce1:9350/128")) |
| 179 | (port 51821) | 179 | (port 51821) |
| 180 | (bootstrap-private-key? #f) | 180 | (bootstrap-private-key? #f) |
| 181 | (private-key "/run/secrets/wg0_demiurge") | 181 | (private-key "/run/secrets/wg0_demiurge") |
| 182 | (pre-up '("while [ ! -f /run/secrets/wg0_demiurge ]; do sleep 1; done" | 182 | (pre-up '("while [ ! -f /run/secrets/wg0_demiurge ]; do sleep 1; done" |
| 183 | "ip route replace 184.75.208.244 via 192.168.1.1 dev eth0")) | 183 | "ip route replace 184.75.221.173 via 192.168.1.1 dev eth0")) |
| 184 | (post-up | 184 | (post-up |
| 185 | (list "ip rule add fwmark 0x1 table 100 priority 100" | 185 | (list "ip rule add fwmark 0x1 table 100 priority 100" |
| 186 | "ip rule add fwmark 51820 table 100 priority 100" | 186 | "ip rule add fwmark 51820 table 100 priority 100" |
| @@ -189,7 +189,7 @@ | |||
| 189 | #~(string-append #$(file-append iptables "/sbin/iptables") " -t mangle -A PREROUTING -i eth0 -j CONNMARK --restore-mark") | 189 | #~(string-append #$(file-append iptables "/sbin/iptables") " -t mangle -A PREROUTING -i eth0 -j CONNMARK --restore-mark") |
| 190 | #~(string-append #$(file-append iptables "/sbin/iptables") " -t mangle -A OUTPUT -m conntrack --ctstate ESTABLISHED,RELATED -j CONNMARK --restore-mark"))) | 190 | #~(string-append #$(file-append iptables "/sbin/iptables") " -t mangle -A OUTPUT -m conntrack --ctstate ESTABLISHED,RELATED -j CONNMARK --restore-mark"))) |
| 191 | (post-down | 191 | (post-down |
| 192 | (list "ip route del 184.75.208.244 via 192.168.1.1 dev eth0" | 192 | (list "ip route del 184.75.221.173 via 192.168.1.1 dev eth0" |
| 193 | "ip rule del fwmark 0x1 table 100" | 193 | "ip rule del fwmark 0x1 table 100" |
| 194 | "ip rule del fwmark 51820 table 100" | 194 | "ip rule del fwmark 51820 table 100" |
| 195 | "ip route flush table 100" | 195 | "ip route flush table 100" |
| @@ -203,7 +203,7 @@ | |||
| 203 | (public-key "PyLCXAQT8KkM4T+dUsOQfn+Ub3pGxfGlxkIApuig+hk=") | 203 | (public-key "PyLCXAQT8KkM4T+dUsOQfn+Ub3pGxfGlxkIApuig+hk=") |
| 204 | (preshared-key "/run/secrets/wg0psk_demiurge") | 204 | (preshared-key "/run/secrets/wg0psk_demiurge") |
| 205 | (allowed-ips '("0.0.0.0/0" "::0/0")) | 205 | (allowed-ips '("0.0.0.0/0" "::0/0")) |
| 206 | (endpoint "184.75.208.244:1637")))))) | 206 | (endpoint "184.75.221.173:1637")))))) |
| 207 | (service wireguard-service-type | 207 | (service wireguard-service-type |
| 208 | (wireguard-configuration | 208 | (wireguard-configuration |
| 209 | (interface "wg1") | 209 | (interface "wg1") |
| @@ -287,12 +287,12 @@ | |||
| 287 | (nginx-reverse-proxy "navidrome.demiurge.epistemia" 4533) | 287 | (nginx-reverse-proxy "navidrome.demiurge.epistemia" 4533) |
| 288 | (nginx-reverse-proxy "sdui.demiurge.epistemia" 5000) | 288 | (nginx-reverse-proxy "sdui.demiurge.epistemia" 5000) |
| 289 | (nginx-reverse-proxy "home.demiurge.epistemia" 8123))))) | 289 | (nginx-reverse-proxy "home.demiurge.epistemia" 8123))))) |
| 290 | (service llama-swap-service-type | 290 | ;; (service llama-swap-service-type |
| 291 | (llama-swap-configuration | 291 | ;; (llama-swap-configuration |
| 292 | (llama-cpp llama-cpp-rocm) | 292 | ;; (llama-cpp llama-cpp-rocm) |
| 293 | (config "/data/models/config.yaml") | 293 | ;; (config "/data/models/config.yaml") |
| 294 | (listen "127.0.0.1:8080") | 294 | ;; (listen "127.0.0.1:8080") |
| 295 | (watch-config? #t))) | 295 | ;; (watch-config? #t))) |
| 296 | (service pam-limits-service-type | 296 | (service pam-limits-service-type |
| 297 | (list (pam-limits-entry "@audio" 'both 'rtprio 99) | 297 | (list (pam-limits-entry "@audio" 'both 'rtprio 99) |
| 298 | (pam-limits-entry "@audio" 'both 'memlock 'unlimited))) | 298 | (pam-limits-entry "@audio" 'both 'memlock 'unlimited))) |
