705ee22b51
The hw/ module used to build a bootable Alpine USB for a fresh storage node — all the bats tests, build scripts, package.json, RUNBOOK, and tunnel-setup docs were tooling for that flow. The host (rack) is now provisioned and live; the only thing the module needs to express is the hardware manifest. Trim hw/ down to README + config.yaml describing the actual hardware (Pop!_OS 24.04, Ryzen 9 3950X, 125 GiB RAM, drive serials) plus pointers to where each runtime concern actually lives (compose.yml for services, infra/traefik for the proxy, etc.). Also drop logs/dbt.log — stale build log that should never have been tracked. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
64 lines
2.5 KiB
YAML
64 lines
2.5 KiB
YAML
# Storage host — rack
|
|
# This machine is the storage node.
|
|
|
|
host:
|
|
name: rack
|
|
os: Pop!_OS 24.04 LTS
|
|
kernel: Linux 6.17.9-76061709-generic
|
|
vendor: ASUSTeK
|
|
board: ROG CROSSHAIR VIII HERO
|
|
cpu: AMD Ryzen 9 3950X (16C/32T)
|
|
memory_gib: 125
|
|
|
|
ssh:
|
|
port: 22
|
|
permit_root: false
|
|
password_auth: false
|
|
authorized_keys:
|
|
# YubiKey 1 (ECDSA-SK FIDO2)
|
|
- sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBK8W6v3/ZzVu7jfZvNW+fbs7tHB2YbZVNrhI0qtzX40D1QFwAGi1BD1quiz4tNgTWJYN76Sj/kn4HhGw1K/hrbAAAAAEc3NoOg==
|
|
# YubiKey 2 (Ed25519-SK FIDO2)
|
|
- sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIA3YeQ1/H4U+VaYpI+1BH3xOvwCrF/swxHcXDNyynJP+AAAABHNzaDo= yubikey-2-storagenode
|
|
# Fallback keys (non-FIDO2)
|
|
- ssh-rsa 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 kert@notebook
|
|
- ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOhs9dzoN/4zNOzpVng2dAPVk7RDF4RmCbmZYA12pzaz kert@homelab
|
|
|
|
drives:
|
|
# Boot/system NVMe (online)
|
|
nvme_boot:
|
|
- serial: "20120820001696"
|
|
model: "PCIe SSD"
|
|
size: "1.8TB"
|
|
device: /dev/nvme0n1
|
|
encryption: LUKS2 (cryptdata → LVM data-root)
|
|
mount: /
|
|
|
|
# Pending SATA drives — currently connected via USB adapter, will be
|
|
# moved to onboard SATA6G_1..6 ports. Serials stay fixed across ports.
|
|
sata:
|
|
- serial: "21044J801864"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21030X801599"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21030X801577"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21044J801753"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21044J800938"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
- serial: "21044J800830"
|
|
model: "WDC WDS200T2B0B-00YS70"
|
|
size: "2TB"
|
|
|
|
# Spinning disk for nightly backups
|
|
hdd:
|
|
- serial: "69HEN2NNSW47"
|
|
model: "TOSHIBA DT01ABA100V"
|
|
revision: "ASA AB10"
|
|
size: "1TB"
|