san/nixos-mononoke
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
NixOS configuration for Mononoke NAS (flake-based)
263 commits 1 branch 0 tags 7.3 MiB
  • Nix 95.3%
  • Python 3.5%
  • Shell 0.9%
  • Makefile 0.3%
Find a file
Exact
San 803f8b2769 mononoke: remove leftover clients.wt0/sshServer blocks (t_6c85d8a0 followup) 
services.netbird.enable = false alone wasn't enough — the NixOS module
gates its hardened-clients block on clients != {} not on cfg.enable.
The clients.wt0 block (and the now-redundant sshServer block) had to
be REMOVED entirely so that hardenedClients == {} and the systemd
services generation skips netbird-wt0.service. Without this, gen 601
kept emitting /etc/systemd/system/netbird-wt0.service even after
enable = false.

Verified by gen 602: no netbird* units, rule 110 gone, table 7120
flushed, wt0/nb-wt0 interfaces absent. Outpost Traefik -> Mononoke
Tailscale routes 200 again.
2026-07-19 21:13:57 -04:00
.kilo/plans Remove agenix: plain .env files and raw key files for secrets 2026-05-02 15:57:26 -04:00
data/index.bleve mononoke-lcd: 6-screen rotation, Tailscale IP, row1 recovery 2026-05-12 22:37:16 -04:00
nix mononoke: remove leftover clients.wt0/sshServer blocks (t_6c85d8a0 followup) 2026-07-19 21:13:57 -04:00
scripts mononoke: phase1a-v6 C1 nixosTest files + C3 preflight script [CLASS 3] 2026-07-02 11:27:18 -04:00
secrets mononoke: phase1c per-wolf ACL activation [CLASS 3] 2026-07-04 00:45:23 -04:00
tests mononoke: phase1a-v6 C1 nixosTest files + C3 preflight script [CLASS 3] 2026-07-02 11:27:18 -04:00
.gitignore 6.0.0: Wolfpack Megapack + Karakeep OIDC (app-side) + Mailserver rollup 2026-06-21 21:29:48 -04:00
AGENTS.md mononoke: consolidate VPN modules (Tailscale + NetBird + SSH) [2026-06-13] 2026-06-13 10:46:35 -04:00
CHANGELOG.md [6.5.2] J7 feedback round 2: PDF Glimpse + reader view + recrawl 2026-07-17 13:05:47 -04:00
configuration.nix mononoke: rm dead traefik-dynamic files + repair configuration.nix corruption [CLASS 3] 2026-07-13 17:11:43 -04:00
flake.lock mononoke: remove killed hermes-workspace flake input + NixOS module + Traefik routes 2026-07-14 06:22:31 -04:00
flake.nix mononoke: remove killed hermes-workspace flake input + NixOS module + Traefik routes 2026-07-14 06:22:31 -04:00
hardware-configuration.nix Migration: Hermes to Mononoke - remove duplicate configs, plaintext secrets, switch to podman 2026-04-03 17:17:20 -04:00
README.md docs: add README, update changelog for v0.1.0 release 2026-04-17 02:32:07 +00:00

README.md

MononokeNAS NixOS Configuration

This repository contains the declarative NixOS configuration for the Mononoke NAS system.

Structure

  • flake.nix — Flake entry point
  • configuration.nix — Main system config
  • CHANGELOG.md — Release history
  • secrets/ — Age-encrypted secrets (gitignored)
  • nix/hosts/ — Host-specific configs
  • nix/modules/ — Reusable NixOS modules
  • nix/services/ — Service definitions

Quick Commands

sudo nixos-rebuild switch --flake .#mononoke
systemctl status hermes-agent

Agents

  • Mononoke: Primary NAS agent (podman container)
  • Ashitaka: TUI agent for NixOS ops
  • Yoseba: VPS bastion