|
2 | 2 |
|
3 | 3 | # computer |
4 | 4 |
|
5 | | -A Nix-built OCI image to bootstrap [exe.dev](https://exe.dev) machine. |
6 | | - |
7 | | -## Components |
8 | | - |
9 | | -- **exe.dev image** — s6-supervised: the Hermes agent (behind a caddy proxy), |
10 | | - tailscaled (persistent tailnet node with Tailscale SSH), restic backups to B2 |
11 | | - with restore-on-boot, and a nix daemon for runtime installs. |
12 | | -- **Public ingress** — a root caddy binds the public port (8080, `share |
13 | | - set-public`) and path-routes `/hermes/*` and `/nikita/*` to per-user |
14 | | - self-serve caddies; each user edits their own `~/.caddy/Caddyfile` and `caddy |
15 | | - reload`s. The Hermes dashboard is on 9999, gated behind exe.dev auth. |
16 | | -- **Users** — `nikita` (login user, fish shell, home-manager env, sudo) and |
17 | | - `hermes` (the agent: own package set, no sudo, not nix-trusted). |
18 | | -- **Mac** — nix-darwin + home-manager consuming the same `home/` modules; |
19 | | - remaining homebrew (casks, mas apps) declared in `hosts/macbook/homebrew.nix`. |
| 5 | +nix files for: |
| 6 | +- my mac |
| 7 | +- remove [exe.dev](https://exe.dev) machine |
20 | 8 |
|
21 | 9 | ## After creating a machine |
22 | 10 |
|
@@ -66,7 +54,7 @@ We have to store it outside of the machine to be able to restore everything else |
66 | 54 |
|
67 | 55 | | Variable | Description | |
68 | 56 | | --- | --- | |
69 | | -| `RESTIC_REPOSITORY` | B2 restic repo, e.g. `b2:my-bucket:hermes` | |
| 57 | +| `RESTIC_REPOSITORY` | B2 restic repo, e.g. `b2:backups:exedev` | |
70 | 58 | | `RESTIC_PASSWORD` | restic repo encryption password | |
71 | 59 | | `B2_ACCOUNT_ID` | B2 key id | |
72 | 60 | | `B2_ACCOUNT_KEY` | B2 application key (scope to the bucket) | |
0 commit comments