59d742f4ba
- flake.nix exposes a devShell (openstackclient, opentofu, sops, age) plus
nixosConfigurations.watcher (runtime) and packages.watcher-image (QCOW2
via nixos-generators / openstack format).
- hosts/watcher/default.nix: SSH-only base, tyro user with key auth, root
SSH disabled, trusted-users set so laptop closure pushes work.
- modules/website.nix: Caddy serves tyrolize.ch from sites/tyrolize.ch/;
lize.ch 301-redirects; firewall opens 80/443. Let's Encrypt via HTTP-01.
- terraform/infomaniak/: OpenStack provider, security group (22/80/443),
keypair, compute instance booted from the uploaded image. Auth via OS_*
env vars sourced from terraform/infomaniak/.env by the devShell hook.
- scripts/build-image.sh + scripts/deploy.sh.
- dns/{tyrolize,lize}.ch.zone: full BIND zone files for the advanced view
in Infomaniak DNS Manager; preserves kSuite mail records on lize.ch.
Watcher live at 195.15.203.200 (IPv6 2001:1600:10💯:b4e), NixOS 25.05.
HTTPS confirmed working on both domains.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
24 lines
598 B
HTML
24 lines
598 B
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
<title>tyrolize</title>
|
|
<style>
|
|
:root { color-scheme: light dark; }
|
|
body {
|
|
max-width: 36rem;
|
|
margin: 6rem auto;
|
|
padding: 0 1.25rem;
|
|
font-family: ui-monospace, "SF Mono", Menlo, Consolas, monospace;
|
|
line-height: 1.5;
|
|
}
|
|
a { color: inherit; text-underline-offset: 0.2em; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<h1>tyrolize.ch</h1>
|
|
<p>Hello.</p>
|
|
<p>Mail: <a href="mailto:tyro@lize.ch">tyro@lize.ch</a></p>
|
|
</body>
|
|
</html>
|