brianmcgee
3e5a6799fe
Dirk's standard rules service only approves a generic `OnSign` request for a voluntary exit when the request's source IP is listed in `server.rules.admin-ips`. We add the `wg0` address for each machine with the admin role. Dirk reads the peer address off the socket via Go's `net.IP.String()` and matches `admin-ips` with exact string equality so we use `wg.canonAddrOf` to produce the same RFC 5952 form using Nix.
457 lines
12 KiB
JSON
457 lines
12 KiB
JSON
{
|
|
"nodes": {
|
|
"blueprint": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"ethereum-nix",
|
|
"nixpkgs"
|
|
],
|
|
"systems": "systems_2"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1776249299,
|
|
"narHash": "sha256-Dt9t1TGRmJFc0xVYhttNBD6QsAgHOHCArqGa0AyjrJY=",
|
|
"owner": "numtide",
|
|
"repo": "blueprint",
|
|
"rev": "56131e8628f173d24a27f6d27c0215eff57e40dd",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "blueprint",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"blueprint_2": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nvim",
|
|
"nixpkgs"
|
|
],
|
|
"systems": "systems_3"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1776249299,
|
|
"narHash": "sha256-Dt9t1TGRmJFc0xVYhttNBD6QsAgHOHCArqGa0AyjrJY=",
|
|
"owner": "numtide",
|
|
"repo": "blueprint",
|
|
"rev": "56131e8628f173d24a27f6d27c0215eff57e40dd",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "blueprint",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"clan-core": {
|
|
"inputs": {
|
|
"data-mesher": "data-mesher",
|
|
"disko": "disko",
|
|
"flake-parts": "flake-parts",
|
|
"nix-darwin": "nix-darwin",
|
|
"nix-select": "nix-select",
|
|
"nixpkgs": "nixpkgs",
|
|
"sops-nix": "sops-nix",
|
|
"systems": "systems",
|
|
"treefmt-nix": "treefmt-nix"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1776330204,
|
|
"narHash": "sha256-BT3mdOtV7qjl+xuD7FpjjwMkRZR746FxWX3geKWg8aI=",
|
|
"ref": "refs/heads/main",
|
|
"rev": "47a04bd45e756b93b5c5afd4a41ce69c2d1b09fb",
|
|
"revCount": 14122,
|
|
"type": "git",
|
|
"url": "https://git.clan.lol/clan/clan-core"
|
|
},
|
|
"original": {
|
|
"type": "git",
|
|
"url": "https://git.clan.lol/clan/clan-core"
|
|
}
|
|
},
|
|
"data-mesher": {
|
|
"inputs": {
|
|
"flake-parts": [
|
|
"clan-core",
|
|
"flake-parts"
|
|
],
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
],
|
|
"treefmt-nix": [
|
|
"clan-core",
|
|
"treefmt-nix"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1776283625,
|
|
"narHash": "sha256-MvUsO/PDnCxo8ueyhf0ne4NCZoslTDXIMQ31FILMhe4=",
|
|
"rev": "acb202e9fc05a5a35f3d5604c5b9c2cffabc92fe",
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/acb202e9fc05a5a35f3d5604c5b9c2cffabc92fe.tar.gz"
|
|
},
|
|
"original": {
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/clan/data-mesher/archive/main.tar.gz"
|
|
}
|
|
},
|
|
"disko": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1773889306,
|
|
"narHash": "sha256-PAqwnsBSI9SVC2QugvQ3xeYCB0otOwCacB1ueQj2tgw=",
|
|
"owner": "nix-community",
|
|
"repo": "disko",
|
|
"rev": "5ad85c82cc52264f4beddc934ba57f3789f28347",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "disko",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"ethereum-nix": {
|
|
"inputs": {
|
|
"blueprint": "blueprint",
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
],
|
|
"treefmt-nix": [
|
|
"clan-core",
|
|
"treefmt-nix"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1776315856,
|
|
"narHash": "sha256-1Pmrp4MieWQ19BZemgswgvPPwwujHBK08qPMLzg1XtA=",
|
|
"owner": "nix-community",
|
|
"repo": "ethereum.nix",
|
|
"rev": "61f83fa77f233bd034650a46402ccec722ac29be",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "ethereum.nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-parts": {
|
|
"inputs": {
|
|
"nixpkgs-lib": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1775087534,
|
|
"narHash": "sha256-91qqW8lhL7TLwgQWijoGBbiD4t7/q75KTi8NxjVmSmA=",
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"rev": "3107b77cd68437b9a76194f0f7f9c55f2329ca5b",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-parts_2": {
|
|
"inputs": {
|
|
"nixpkgs-lib": [
|
|
"nvim",
|
|
"nixvim",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1777932387,
|
|
"narHash": "sha256-nUYVPiqrzr36ThiQOAr5MKeGHDBSDM3OFWkz0uDjOvc=",
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"rev": "71a3a77326609675e9f8b51084cf23d5d1945899",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nix-darwin": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1775037210,
|
|
"narHash": "sha256-KM2WYj6EA7M/FVZVCl3rqWY+TFV5QzSyyGE2gQxeODU=",
|
|
"owner": "nix-darwin",
|
|
"repo": "nix-darwin",
|
|
"rev": "06648f4902343228ce2de79f291dd5a58ee12146",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-darwin",
|
|
"repo": "nix-darwin",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nix-github-actions": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nix-unit",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1737420293,
|
|
"narHash": "sha256-F1G5ifvqTpJq7fdkT34e/Jy9VCyzd5XfJ9TO8fHhJWE=",
|
|
"owner": "nix-community",
|
|
"repo": "nix-github-actions",
|
|
"rev": "f4158fa080ef4503c8f4c820967d946c2af31ec9",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "nix-github-actions",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nix-select": {
|
|
"locked": {
|
|
"lastModified": 1763303120,
|
|
"narHash": "sha256-yxcNOha7Cfv2nhVpz9ZXSNKk0R7wt4AiBklJ8D24rVg=",
|
|
"rev": "3d1e3860bef36857a01a2ddecba7cdb0a14c35a9",
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/api/v1/repos/clan/nix-select/archive/3d1e3860bef36857a01a2ddecba7cdb0a14c35a9.tar.gz"
|
|
},
|
|
"original": {
|
|
"type": "tarball",
|
|
"url": "https://git.clan.lol/clan/nix-select/archive/main.tar.gz"
|
|
}
|
|
},
|
|
"nix-unit": {
|
|
"inputs": {
|
|
"nix-github-actions": "nix-github-actions",
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
],
|
|
"treefmt-nix": [
|
|
"treefmt-nix"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1779338171,
|
|
"narHash": "sha256-affUbv/bwE8SLGhuWKniDr7SVO+Lo1XEPjCZdyU5kgQ=",
|
|
"owner": "nix-community",
|
|
"repo": "nix-unit",
|
|
"rev": "6ab1f232562a01d18b40d5ed6a58718c4f3a74bc",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "nix-unit",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nixpkgs": {
|
|
"locked": {
|
|
"lastModified": 1775888245,
|
|
"narHash": "sha256-qTVvODr6edFBLD2lncXPF8yTQeCafZUuKVtpV3Xb3yM=",
|
|
"rev": "13043924aaa7375ce482ebe2494338e058282925",
|
|
"type": "tarball",
|
|
"url": "https://releases.nixos.org/nixpkgs/nixpkgs-26.05pre978638.13043924aaa7/nixexprs.tar.xz"
|
|
},
|
|
"original": {
|
|
"type": "tarball",
|
|
"url": "https://nixos.org/channels/nixpkgs-unstable/nixexprs.tar.xz"
|
|
}
|
|
},
|
|
"nixvim": {
|
|
"inputs": {
|
|
"flake-parts": "flake-parts_2",
|
|
"nixpkgs": [
|
|
"nvim",
|
|
"nixpkgs"
|
|
],
|
|
"systems": "systems_4"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1777991353,
|
|
"narHash": "sha256-DFwjggMV+nzCZpwK6Obxj9F+P59rbLVowGqHETfctBk=",
|
|
"owner": "nix-community",
|
|
"repo": "nixvim",
|
|
"rev": "7986a276960b4dfaed9bb2c3c438b5ba71ae08f1",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "nixvim",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nvim": {
|
|
"inputs": {
|
|
"blueprint": "blueprint_2",
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
],
|
|
"nixvim": "nixvim",
|
|
"treefmt-nix": [
|
|
"treefmt-nix"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1778166063,
|
|
"narHash": "sha256-8inzOHNzb8l8vs6isPIYj836BvwI3gbpRm3ae25Ecis=",
|
|
"owner": "brianmcgee",
|
|
"repo": "neovim.nix",
|
|
"rev": "569b9861f3301776256adbbd3c0b4793b6e803a7",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "brianmcgee",
|
|
"repo": "neovim.nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"root": {
|
|
"inputs": {
|
|
"clan-core": "clan-core",
|
|
"ethereum-nix": "ethereum-nix",
|
|
"flake-parts": [
|
|
"clan-core",
|
|
"flake-parts"
|
|
],
|
|
"nix-unit": "nix-unit",
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
],
|
|
"nvim": "nvim",
|
|
"treefmt-nix": [
|
|
"clan-core",
|
|
"treefmt-nix"
|
|
]
|
|
}
|
|
},
|
|
"sops-nix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1776119890,
|
|
"narHash": "sha256-Zm6bxLNnEOYuS/SzrAGsYuXSwk3cbkRQZY0fJnk8a5M=",
|
|
"owner": "Mic92",
|
|
"repo": "sops-nix",
|
|
"rev": "d4971dd58c6627bfee52a1ad4237637c0a2fb0cd",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "Mic92",
|
|
"repo": "sops-nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"systems": {
|
|
"locked": {
|
|
"lastModified": 1774449309,
|
|
"narHash": "sha256-brhZ8DmuGtzkCYHJg4HEd602amKm89Y9ytsFZ5uWD1w=",
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"rev": "c29398b59d2048c4ab79345812849c9bd15e9150",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-systems",
|
|
"ref": "future-26.11",
|
|
"repo": "default",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"systems_2": {
|
|
"locked": {
|
|
"lastModified": 1681028828,
|
|
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"systems_3": {
|
|
"locked": {
|
|
"lastModified": 1681028828,
|
|
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"systems_4": {
|
|
"locked": {
|
|
"lastModified": 1681028828,
|
|
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"treefmt-nix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"clan-core",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1775636079,
|
|
"narHash": "sha256-pc20NRoMdiar8oPQceQT47UUZMBTiMdUuWrYu2obUP0=",
|
|
"owner": "numtide",
|
|
"repo": "treefmt-nix",
|
|
"rev": "790751ff7fd3801feeaf96d7dc416a8d581265ba",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "treefmt-nix",
|
|
"type": "github"
|
|
}
|
|
}
|
|
},
|
|
"root": "root",
|
|
"version": 7
|
|
}
|