5753bf9e33
## Summary - Remove the checker NixOS module, including its systemd service, system user/group, SOPS secret declaration, and nginx virtual host. - Remove the checker flake input and its now-unreachable lock-file dependency graph. ## Validation - `tobserver-agent check` — passed all formatting, whitespace, no-build flake, strict NixOS assertion/systemd unit, secret-policy, and Gitleaks checks. - Focused Nix evaluation confirmed the checker service, user, nginx virtual host, and SOPS secret declaration are absent; `flake.lock` no longer contains the checker input. ## Risks and limitations - Deployment will stop exposing the checker service and nginx virtual host, but existing runtime state, a mutable system user, DNS records, ACME data, and the encrypted checker secret may remain until a human removes them if desired. ## Manual follow-up - Review and merge this pull request in Codeberg. - Deploy manually on Tobserver after merge. - After deployment, verify the checker unit and virtual host are absent; optionally clean up checker DNS, runtime state, user, ACME data, and the encrypted secret through the appropriate human-managed process. Reviewed-on: https://codeberg.org/oibot/Tobserver/pulls/9
325 lines
8.4 KiB
JSON
325 lines
8.4 KiB
JSON
{
|
|
"nodes": {
|
|
"bitcoin-pulse": {
|
|
"inputs": {
|
|
"clj-nix": "clj-nix",
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1785235443,
|
|
"narHash": "sha256-cCOO2KS5nRPBdr1f2bL05rkBuuNNNSMBMPeqU8PZNHg=",
|
|
"ref": "refs/heads/main",
|
|
"rev": "168b6ca2c0579f8b0384b56848496f8456f9a4b6",
|
|
"revCount": 26,
|
|
"type": "git",
|
|
"url": "https://codeberg.org/oibot/BitcoinPulseAPI.git"
|
|
},
|
|
"original": {
|
|
"type": "git",
|
|
"url": "https://codeberg.org/oibot/BitcoinPulseAPI.git"
|
|
}
|
|
},
|
|
"clj-nix": {
|
|
"inputs": {
|
|
"devshell": "devshell",
|
|
"nix-fetcher-data": "nix-fetcher-data",
|
|
"nixpkgs": [
|
|
"bitcoin-pulse",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1776760934,
|
|
"narHash": "sha256-WVzvTigFwWcJ0VkAFMzA3jE8kbHGahCJ0FJFqVYhPqM=",
|
|
"owner": "jlesquembre",
|
|
"repo": "clj-nix",
|
|
"rev": "2b1290ee56e9bbd50e9b5874c985d34ad2f1b458",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "jlesquembre",
|
|
"repo": "clj-nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"devshell": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"bitcoin-pulse",
|
|
"clj-nix",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1768818222,
|
|
"narHash": "sha256-460jc0+CZfyaO8+w8JNtlClB2n4ui1RbHfPTLkpwhU8=",
|
|
"owner": "numtide",
|
|
"repo": "devshell",
|
|
"rev": "255a2b1725a20d060f566e4755dbf571bbbb5f76",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "devshell",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-parts": {
|
|
"inputs": {
|
|
"nixpkgs-lib": "nixpkgs-lib"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1719745305,
|
|
"narHash": "sha256-xwgjVUpqSviudEkpQnioeez1Uo2wzrsMaJKJClh+Bls=",
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"rev": "c3c5ecc05edc7dafba779c6c1a61cd08ac6583e9",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-parts_2": {
|
|
"inputs": {
|
|
"nixpkgs-lib": [
|
|
"hermes-agent",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1772408722,
|
|
"narHash": "sha256-rHuJtdcOjK7rAHpHphUb1iCvgkU3GpfvicLMwwnfMT0=",
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"rev": "f20dc5d9b8027381c474144ecabc9034d6a839a3",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"hermes-agent": {
|
|
"inputs": {
|
|
"flake-parts": "flake-parts_2",
|
|
"nixpkgs": "nixpkgs",
|
|
"npm-lockfile-fix": "npm-lockfile-fix",
|
|
"pyproject-build-systems": "pyproject-build-systems",
|
|
"pyproject-nix": "pyproject-nix",
|
|
"uv2nix": "uv2nix"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1785135041,
|
|
"narHash": "sha256-BesiGRVPWppwnJdkSYhfVy0Skq1vNwd3nfVmHJQZhHk=",
|
|
"owner": "NousResearch",
|
|
"repo": "hermes-agent",
|
|
"rev": "825069004a09023452a50c649f79e9a39bef40b5",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "NousResearch",
|
|
"repo": "hermes-agent",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nix-fetcher-data": {
|
|
"inputs": {
|
|
"flake-parts": "flake-parts",
|
|
"nixpkgs": [
|
|
"bitcoin-pulse",
|
|
"clj-nix",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1755022803,
|
|
"narHash": "sha256-/QtBdVfZlrRJW5enUoWlBE2wrLXJBMJ45X0rZh0jiaU=",
|
|
"owner": "jlesquembre",
|
|
"repo": "nix-fetcher-data",
|
|
"rev": "9da3926b1459d6ff15268072d1c51351b82811b9",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "jlesquembre",
|
|
"repo": "nix-fetcher-data",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nixpkgs": {
|
|
"locked": {
|
|
"lastModified": 1775036866,
|
|
"narHash": "sha256-ZojAnPuCdy657PbTq5V0Y+AHKhZAIwSIT2cb8UgAz/U=",
|
|
"owner": "NixOS",
|
|
"repo": "nixpkgs",
|
|
"rev": "6201e203d09599479a3b3450ed24fa81537ebc4e",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "NixOS",
|
|
"ref": "nixos-unstable",
|
|
"repo": "nixpkgs",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nixpkgs-lib": {
|
|
"locked": {
|
|
"lastModified": 1717284937,
|
|
"narHash": "sha256-lIbdfCsf8LMFloheeE6N31+BMIeixqyQWbSr2vk79EQ=",
|
|
"type": "tarball",
|
|
"url": "https://github.com/NixOS/nixpkgs/archive/eb9ceca17df2ea50a250b6b27f7bf6ab0186f198.tar.gz"
|
|
},
|
|
"original": {
|
|
"type": "tarball",
|
|
"url": "https://github.com/NixOS/nixpkgs/archive/eb9ceca17df2ea50a250b6b27f7bf6ab0186f198.tar.gz"
|
|
}
|
|
},
|
|
"nixpkgs_2": {
|
|
"locked": {
|
|
"lastModified": 1782847189,
|
|
"narHash": "sha256-twXPFqFsrrY5r28Zh7Homgcp2gUMBgQ6WDS98Q/3xFI=",
|
|
"owner": "NixOS",
|
|
"repo": "nixpkgs",
|
|
"rev": "b6018f87da91d19d0ab4cf979885689b469cdd41",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "NixOS",
|
|
"ref": "nixos-25.11",
|
|
"repo": "nixpkgs",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"npm-lockfile-fix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"hermes-agent",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1775903712,
|
|
"narHash": "sha256-2GV79U6iVH4gKAPWYrxUReB0S41ty/Y3dBLquU8AlaA=",
|
|
"owner": "jeslie0",
|
|
"repo": "npm-lockfile-fix",
|
|
"rev": "c6093acb0c0548e0f9b8b3d82918823721930fe8",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "jeslie0",
|
|
"repo": "npm-lockfile-fix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"pyproject-build-systems": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"hermes-agent",
|
|
"nixpkgs"
|
|
],
|
|
"pyproject-nix": [
|
|
"hermes-agent",
|
|
"pyproject-nix"
|
|
],
|
|
"uv2nix": [
|
|
"hermes-agent",
|
|
"uv2nix"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1772555609,
|
|
"narHash": "sha256-3BA3HnUvJSbHJAlJj6XSy0Jmu7RyP2gyB/0fL7XuEDo=",
|
|
"owner": "pyproject-nix",
|
|
"repo": "build-system-pkgs",
|
|
"rev": "c37f66a953535c394244888598947679af231863",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "pyproject-nix",
|
|
"repo": "build-system-pkgs",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"pyproject-nix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"hermes-agent",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1772865871,
|
|
"narHash": "sha256-/ZTSg97aouL0SlPHaokA4r3iuH9QzHVuWPACD2CUCFY=",
|
|
"owner": "pyproject-nix",
|
|
"repo": "pyproject.nix",
|
|
"rev": "e537db02e72d553cea470976b9733581bcf5b3ed",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "pyproject-nix",
|
|
"repo": "pyproject.nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"root": {
|
|
"inputs": {
|
|
"bitcoin-pulse": "bitcoin-pulse",
|
|
"hermes-agent": "hermes-agent",
|
|
"nixpkgs": "nixpkgs_2",
|
|
"sops-nix": "sops-nix"
|
|
}
|
|
},
|
|
"sops-nix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1783174389,
|
|
"narHash": "sha256-aCWC8ngycU7OdJrU2+Je3qf+1a2ykuBvpPhZT/9tXMc=",
|
|
"owner": "Mic92",
|
|
"repo": "sops-nix",
|
|
"rev": "f1406619a3884cd5c47992a70b8b35c9c0fcb4c9",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "Mic92",
|
|
"repo": "sops-nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"uv2nix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"hermes-agent",
|
|
"nixpkgs"
|
|
],
|
|
"pyproject-nix": [
|
|
"hermes-agent",
|
|
"pyproject-nix"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1773039484,
|
|
"narHash": "sha256-+boo33KYkJDw9KItpeEXXv8+65f7hHv/earxpcyzQ0I=",
|
|
"owner": "pyproject-nix",
|
|
"repo": "uv2nix",
|
|
"rev": "b68be7cfeacbed9a3fa38a2b5adc0cfb81d9bb1f",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "pyproject-nix",
|
|
"repo": "uv2nix",
|
|
"type": "github"
|
|
}
|
|
}
|
|
},
|
|
"root": "root",
|
|
"version": 7
|
|
}
|