5753bf9e33
## Summary - Remove the checker NixOS module, including its systemd service, system user/group, SOPS secret declaration, and nginx virtual host. - Remove the checker flake input and its now-unreachable lock-file dependency graph. ## Validation - `tobserver-agent check` — passed all formatting, whitespace, no-build flake, strict NixOS assertion/systemd unit, secret-policy, and Gitleaks checks. - Focused Nix evaluation confirmed the checker service, user, nginx virtual host, and SOPS secret declaration are absent; `flake.lock` no longer contains the checker input. ## Risks and limitations - Deployment will stop exposing the checker service and nginx virtual host, but existing runtime state, a mutable system user, DNS records, ACME data, and the encrypted checker secret may remain until a human removes them if desired. ## Manual follow-up - Review and merge this pull request in Codeberg. - Deploy manually on Tobserver after merge. - After deployment, verify the checker unit and virtual host are absent; optionally clean up checker DNS, runtime state, user, ACME data, and the encrypted secret through the appropriate human-managed process. Reviewed-on: https://codeberg.org/oibot/Tobserver/pulls/9
41 lines
1.1 KiB
Nix
41 lines
1.1 KiB
Nix
{
|
|
inputs = {
|
|
nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
|
|
sops-nix.url = "github:Mic92/sops-nix";
|
|
sops-nix.inputs.nixpkgs.follows = "nixpkgs";
|
|
hermes-agent.url = "github:NousResearch/hermes-agent";
|
|
bitcoin-pulse = {
|
|
url = "git+https://codeberg.org/oibot/BitcoinPulseAPI.git";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
};
|
|
|
|
outputs = { self, nixpkgs, sops-nix, hermes-agent, bitcoin-pulse, ... }:
|
|
let
|
|
system = "x86_64-linux";
|
|
in
|
|
{
|
|
nixosConfigurations.tobserver = nixpkgs.lib.nixosSystem {
|
|
inherit system;
|
|
|
|
specialArgs = {
|
|
inherit bitcoin-pulse;
|
|
};
|
|
|
|
modules = [
|
|
sops-nix.nixosModules.sops
|
|
./hardware-configuration.nix
|
|
./configuration.nix
|
|
./modules/bitcoin-pulse.nix
|
|
./modules/bitcoin.nix
|
|
./modules/electrs.nix
|
|
./modules/mempool.nix
|
|
./modules/nextcloud.nix
|
|
./modules/totap.nix
|
|
hermes-agent.nixosModules.default
|
|
./modules/hermes-agent.nix
|
|
./modules/lnd.nix
|
|
];
|
|
};
|
|
};
|
|
}
|