Users
Leyla
primary maintainer of the repository
Eve
user of the repository
Fleet
Archipelago
primary fleet managed by this repository
Host map
| Hostname | Device Description | Primary User | Role | Fleet | Provisioned | Using Nix |
|---|---|---|---|---|---|---|
twilight |
Desktop Computer | leyla |
Desktop | archipelago |
✅ | ✅ |
horizon |
13 inch Framework Laptop | leyla |
Laptop | archipelago |
✅ | ✅ |
ceder |
A5 Tablet | leyla |
Tablet | archipelago |
✅ | ❌ |
skate |
A6 Tablet | leyla |
Tablet | archipelago |
❌ | ❌ |
coven |
Pixel 10 | leyla |
Android | archipelago |
✅ | ❌ |
beacon |
Public VPS (blog) | leyla |
Server | archipelago |
✅ | ✅ |
defiant |
NAS Server | leyla |
Server | archipelago |
✅ | ✅ |
wolfram |
Steam Deck | house |
Handheld | archipelago |
✅ | ❌ |
hesperium |
Mac | house |
Mac | archipelago |
❌ | ❌ |
emergent |
Desktop Computer | eve |
Desktop | archipelago |
✅ | ✅ |
threshold |
Laptop | eve |
Laptop | archipelago |
❌ | ❌ |
shale |
A6 Tablet | eve |
Tablet | archipelago |
✅ | ❌ |
Notes
beacon
Beacon is a very small VPS intended to be used as a network gateway. It provides outbound proxies to any publicly accessible services as well as acts as a coordinator for a VPN able to connect other devices together behind a secure proxy. It also hosts a few static services as well as provides public use proxies for privacy preservation tools to help the public get fair access to freedom to access information via tor (and soon i2p).
SSH answers on port 22222 instead of the standard 22 so that 22 can be bound to a proxy to defiant so that there is no need to set a port when accessing the git server’s content.
beacon holds a tls certificate for each of the public names.defiant holds a wildcard certificate is a key for every name under the zone so that domains only reachable from inside the lan or the vpn don’t have their domains exposed.
Beacon serves the dns zone that certificate challenges are answered from
(_acme-challenge.jan-leila.com), and lets defiant write its proof of identify into over the
vpn when it renews the wildcard. This would let beacon answer challenges on its own so the wildcard so the public zone is told who may be issued; see the certificates section of
administration
.
Also provides a ntfy server, but this should probably be moved to defiant and simply proxied through this device.
A critical part of the design of this application is that all data that is on it is considered to be somewhat accessible by rogue actors. This means that no information in this device can be private, it must at most be secret. Any information on this device that is allowed to be secret should be interchangeable with any other word of information, whose exact makeup is not relevant, as long as it represents a valid state.
defiant
The server backbone of the household. Provides services used for things all around the house such as tools, storage, compute, and other various services.