chore: update flake.lock 2026-07-19

flake.lock

@@ -31,11 +31,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1783231291,
+        "lastModified": 1783833875,
-        "narHash": "sha256-iaoW3Enrb51mCT4AIixKXgkb1LdI/ikpCV9sV+zmkYU=",
+        "narHash": "sha256-G+hRtNJ/Nnr6VFMQp2UZdx/ckJDR/RJoK0Fy/yx1/YY=",
         "owner": "nix-community",
         "repo": "buildbot-nix",
-        "rev": "d8a926f66587ed37df1a422205d7aeb1692700f8",
+        "rev": "147af587241e2af85399402da60a4f44fdb1e5d7",
         "type": "github"
       },
       "original": {
@@ -53,11 +53,11 @@
         "stable": "stable"
       },
       "locked": {
-        "lastModified": 1783265280,
+        "lastModified": 1783909498,
-        "narHash": "sha256-n+TVzNkFtsW+ghl7JeFJYwIbXaZ2tn/WgjVMXwlzybI=",
+        "narHash": "sha256-T9OfLPLuh1Bf1xojlpWXwooJ6IXapxvb8GM0p3YNy8g=",
         "owner": "zhaofengli",
         "repo": "colmena",
-        "rev": "e4250e61da7e007e19e8e17d8675b88ad27d6c06",
+        "rev": "76ba0daa542880b730faec81f4e87efcaa63bc57",
         "type": "github"
       },
       "original": {
@@ -95,11 +95,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1783395956,
+        "lastModified": 1784362797,
-        "narHash": "sha256-AAbexQvDoK+6GFJdhY6kqjA+6ECKRkidgWxkn4gMwAA=",
+        "narHash": "sha256-EP9b9b+OXDxHBPefFwMYCIaLq0fn3UkmrbfzbLUT7kQ=",
         "owner": "lnl7",
         "repo": "nix-darwin",
-        "rev": "d5bd9cd77aea4c0a8f49e7fd85545671a208ed15",
+        "rev": "b4cccbd4bc299c1f71ae185b79c3cf99aa82805c",
         "type": "github"
       },
       "original": {
@@ -176,6 +176,27 @@
       }
     },
     "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "hermes",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1772408722,
+        "narHash": "sha256-rHuJtdcOjK7rAHpHphUb1iCvgkU3GpfvicLMwwnfMT0=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "f20dc5d9b8027381c474144ecabc9034d6a839a3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-parts_3": {
       "inputs": {
         "nixpkgs-lib": [
           "nixvimunstable",
@@ -196,7 +217,7 @@
         "type": "github"
       }
     },
-    "flake-parts_3": {
+    "flake-parts_4": {
       "inputs": {
         "nixpkgs-lib": [
           "nurpkgs",
@@ -235,6 +256,31 @@
         "type": "github"
       }
     },
+    "hermes": {
+      "inputs": {
+        "flake-parts": "flake-parts_2",
+        "nixpkgs": [
+          "nixunstable"
+        ],
+        "npm-lockfile-fix": "npm-lockfile-fix",
+        "pyproject-build-systems": "pyproject-build-systems",
+        "pyproject-nix": "pyproject-nix",
+        "uv2nix": "uv2nix"
+      },
+      "locked": {
+        "lastModified": 1784663791,
+        "narHash": "sha256-bPip7Rk/5n5idLvedBXWjzuRw6cc30XGxCRJewlwwUE=",
+        "owner": "nousresearch",
+        "repo": "hermes-agent",
+        "rev": "e2e8823f1d2de2aa95c8147d0abd105539d5daff",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nousresearch",
+        "repo": "hermes-agent",
+        "type": "github"
+      }
+    },
     "hmunstable": {
       "inputs": {
         "nixpkgs": [
@@ -242,11 +288,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1783436070,
+        "lastModified": 1784407317,
-        "narHash": "sha256-F80z1JoiJgZyTT5D+3siLOVzqmCEphLR7t0Ym/I2CLI=",
+        "narHash": "sha256-iZrxHToDJWnvt+5LGAtvuQMTy1NZYlNEKbKaVtBJNcc=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "f09af49406ffad37acb6538d3207189a1a1e0b7e",
+        "rev": "39411a8e12a5526d992e65bc7e3dc9a4414d6713",
         "type": "github"
       },
       "original": {
@@ -284,11 +330,11 @@
         "systems": "systems_3"
       },
       "locked": {
-        "lastModified": 1783397047,
+        "lastModified": 1784344393,
-        "narHash": "sha256-aXPvDeF7F0sKg2MWglAtSz6h1R6a9+V7Y2k24At2Q9o=",
+        "narHash": "sha256-yAo2ZzSIdeBZg7cOKUpQxwflL+DRYN+1DMObZk2lP2Q=",
         "owner": "Infinidoge",
         "repo": "nix-minecraft",
-        "rev": "ed748d3593082a7e02d2c49b7643ecac3a7efde4",
+        "rev": "7297d14c52ec8ef39c6aeff2c1818541fd030473",
         "type": "github"
       },
       "original": {
@@ -303,11 +349,11 @@
         "treefmt-nix": "treefmt-nix_2"
       },
       "locked": {
-        "lastModified": 1783166611,
+        "lastModified": 1784016977,
-        "narHash": "sha256-8xyWfpItjSdMiR2bRdUf+Nj1T1Vdctgn4K7jVUyAaOk=",
+        "narHash": "sha256-TydDba3YD2u15uS0L+PDs7lMqPopnzWggljTKDqOCSw=",
         "owner": "Mic92",
         "repo": "niks3",
-        "rev": "b45810677be67de714cbb4ff53f036bdb2e5f9a0",
+        "rev": "b306808bf381e7e66e33de1e9446a1be0935f4e3",
         "type": "github"
       },
       "original": {
@@ -342,11 +388,11 @@
         "nixpkgs": "nixpkgs_4"
       },
       "locked": {
-        "lastModified": 1783370751,
+        "lastModified": 1784310968,
-        "narHash": "sha256-E+3MIMvKuo9k+K+qLQ9YXzsBzkgHuyVLnsEbN2DFfuc=",
+        "narHash": "sha256-rkSPTePrKqs4dg+i7ZFCq93+HrClac6oSwXX927SVjA=",
         "owner": "nixos",
         "repo": "nixos-hardware",
-        "rev": "662bd6e312d2c8b212e32cb377abaee190749320",
+        "rev": "779c32a00155994c86cde8213a8dd4df139d4355",
         "type": "github"
       },
       "original": {
@@ -357,11 +403,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1782723713,
+        "lastModified": 1783224372,
-        "narHash": "sha256-oPXCU/SSUokcGaJREHibG1CBX3+s/W7orDWQOZDsEeQ=",
+        "narHash": "sha256-8i/87eeoqiGE4yOTjwSA3Eh/ziJRQEmd/unYU+K27sk=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b5aa0fbd538984f6e3d201be0005b4463d8b09f8",
+        "rev": "d407951447dcd00442e97087bf374aad70c04cea",
         "type": "github"
       },
       "original": {
@@ -388,11 +434,11 @@
     },
     "nixpkgs-lib_2": {
       "locked": {
-        "lastModified": 1783217952,
+        "lastModified": 1783821755,
-        "narHash": "sha256-lItVCcSNUiL9NlB0+VoZwhtZk+0jAnfjJjch1g7U0bM=",
+        "narHash": "sha256-eMPX9S6MKPyUnaOgeRfrG7OKUiAlc1AlcRinMbSB0WA=",
         "owner": "nix-community",
         "repo": "nixpkgs.lib",
-        "rev": "830143f1e74a5ce8aa6cdad9c41ae84b73e8b3be",
+        "rev": "228ab8523d81526e57a6ca342e1a919fb6d246a8",
         "type": "github"
       },
       "original": {
@@ -419,11 +465,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1782774429,
+        "lastModified": 1783978241,
-        "narHash": "sha256-1tRFhlVVSBP2UAyJ4fWV3wRxofOZQCIWmbXJS/kQw7U=",
+        "narHash": "sha256-7kK0Y/fIV2NTKArkd/eZGaFg+dEmgP8KDRsGK2vB5M4=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "c3db893991ef9cf1902c661c2d61249bcfb051dc",
+        "rev": "a8b81d3cc8d35af7bc98694696bea61ad4f8fca7",
         "type": "github"
       },
       "original": {
@@ -448,11 +494,11 @@
     },
     "nixpkgs_5": {
       "locked": {
-        "lastModified": 1783279667,
+        "lastModified": 1783915482,
-        "narHash": "sha256-/NAkDSsve+GNM0Bt6tleJdCGfsTlK89nPjkVOzZMo0s=",
+        "narHash": "sha256-FmieJB8/OUvNxbkboi7+IGfIuSXY3nF/hZQm8kD0r50=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "f205b5574fd0cb7da5b702a2da51507b7f4fdd1b",
+        "rev": "6cdc7fc76e8bf7fde9fa43a849fcaaa70e230dee",
         "type": "github"
       },
       "original": {
@@ -464,11 +510,11 @@
     },
     "nixpkgs_6": {
       "locked": {
-        "lastModified": 1783224372,
+        "lastModified": 1784356753,
-        "narHash": "sha256-8i/87eeoqiGE4yOTjwSA3Eh/ziJRQEmd/unYU+K27sk=",
+        "narHash": "sha256-12KrbMiWLcf8m7pCvAtZh1ZrgF85ZXDXvfR/fWTKy84=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "d407951447dcd00442e97087bf374aad70c04cea",
+        "rev": "61b7c44c4073f0b827768aff0049561b5110ea5a",
         "type": "github"
       },
       "original": {
@@ -496,11 +542,11 @@
     },
     "nixunstable": {
       "locked": {
-        "lastModified": 1783224372,
+        "lastModified": 1784356753,
-        "narHash": "sha256-8i/87eeoqiGE4yOTjwSA3Eh/ziJRQEmd/unYU+K27sk=",
+        "narHash": "sha256-12KrbMiWLcf8m7pCvAtZh1ZrgF85ZXDXvfR/fWTKy84=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "d407951447dcd00442e97087bf374aad70c04cea",
+        "rev": "61b7c44c4073f0b827768aff0049561b5110ea5a",
         "type": "github"
       },
       "original": {
@@ -512,16 +558,16 @@
     },
     "nixvimunstable": {
       "inputs": {
-        "flake-parts": "flake-parts_2",
+        "flake-parts": "flake-parts_3",
         "nixpkgs": "nixpkgs_5",
         "systems": "systems_4"
       },
       "locked": {
-        "lastModified": 1783349931,
+        "lastModified": 1784057377,
-        "narHash": "sha256-aYE76ATiGBg7/cQ2dHASRq97WvNum4OOIPgZ8xIK0QI=",
+        "narHash": "sha256-yycNej5//EsRbV10moBoh+/63vXEwZD1ZFEiRm6C9rQ=",
         "owner": "nix-community",
         "repo": "nixvim",
-        "rev": "4fd45857deecb90d2732c87e0315daa48505515e",
+        "rev": "07180a087e4a00720dc0731cbcd8dec796974381",
         "type": "github"
       },
       "original": {
@@ -531,17 +577,38 @@
         "type": "github"
       }
     },
+    "npm-lockfile-fix": {
+      "inputs": {
+        "nixpkgs": [
+          "hermes",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1775903712,
+        "narHash": "sha256-2GV79U6iVH4gKAPWYrxUReB0S41ty/Y3dBLquU8AlaA=",
+        "owner": "jeslie0",
+        "repo": "npm-lockfile-fix",
+        "rev": "c6093acb0c0548e0f9b8b3d82918823721930fe8",
+        "type": "github"
+      },
+      "original": {
+        "owner": "jeslie0",
+        "repo": "npm-lockfile-fix",
+        "type": "github"
+      }
+    },
     "nurpkgs": {
       "inputs": {
-        "flake-parts": "flake-parts_3",
+        "flake-parts": "flake-parts_4",
         "nixpkgs": "nixpkgs_6"
       },
       "locked": {
-        "lastModified": 1783451984,
+        "lastModified": 1784417922,
-        "narHash": "sha256-pOIx6pF9DJCeGuDostAegvtmWhbX0ze0bLCzXYHkt94=",
+        "narHash": "sha256-19XZ56wJXArMKxjY25pKXkNp/FrYHGoo+HuQtW6teSM=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "9d0a05bf73440e7e870c011a6c16e7e8636d98fd",
+        "rev": "2c806d314605495dd7fd75b5950003a062e2b47a",
         "type": "github"
       },
       "original": {
@@ -550,6 +617,56 @@
         "type": "github"
       }
     },
+    "pyproject-build-systems": {
+      "inputs": {
+        "nixpkgs": [
+          "hermes",
+          "nixpkgs"
+        ],
+        "pyproject-nix": [
+          "hermes",
+          "pyproject-nix"
+        ],
+        "uv2nix": [
+          "hermes",
+          "uv2nix"
+        ]
+      },
+      "locked": {
+        "lastModified": 1772555609,
+        "narHash": "sha256-3BA3HnUvJSbHJAlJj6XSy0Jmu7RyP2gyB/0fL7XuEDo=",
+        "owner": "pyproject-nix",
+        "repo": "build-system-pkgs",
+        "rev": "c37f66a953535c394244888598947679af231863",
+        "type": "github"
+      },
+      "original": {
+        "owner": "pyproject-nix",
+        "repo": "build-system-pkgs",
+        "type": "github"
+      }
+    },
+    "pyproject-nix": {
+      "inputs": {
+        "nixpkgs": [
+          "hermes",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1772865871,
+        "narHash": "sha256-/ZTSg97aouL0SlPHaokA4r3iuH9QzHVuWPACD2CUCFY=",
+        "owner": "pyproject-nix",
+        "repo": "pyproject.nix",
+        "rev": "e537db02e72d553cea470976b9733581bcf5b3ed",
+        "type": "github"
+      },
+      "original": {
+        "owner": "pyproject-nix",
+        "repo": "pyproject.nix",
+        "type": "github"
+      }
+    },
     "root": {
       "inputs": {
         "agenix": "agenix",
@@ -557,6 +674,7 @@
         "colmena": "colmena",
         "darwin": "darwin_2",
         "flake-parts": "flake-parts",
+        "hermes": "hermes",
         "hmunstable": "hmunstable",
         "minecraft": "minecraft",
         "niks3": "niks3",
@@ -571,11 +689,11 @@
     },
     "stable": {
       "locked": {
-        "lastModified": 1783021296,
+        "lastModified": 1783625654,
-        "narHash": "sha256-WYOmcI0zSkkU4VpR7xda8o0AWNC9xuqkEM7n4tKjJY8=",
+        "narHash": "sha256-pI1244/PJfTyKhlAr2QYQC55vR6UQdnGA0rJUgtO2IQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "d3474199ff806484bfccd1fdef7afc27fb8d74b5",
+        "rev": "a0230bd8d5cbd13893b2263918d396a2c7dd0407",
         "type": "github"
       },
       "original": {
@@ -688,16 +806,41 @@
         "type": "github"
       }
     },
+    "uv2nix": {
+      "inputs": {
+        "nixpkgs": [
+          "hermes",
+          "nixpkgs"
+        ],
+        "pyproject-nix": [
+          "hermes",
+          "pyproject-nix"
+        ]
+      },
+      "locked": {
+        "lastModified": 1773039484,
+        "narHash": "sha256-+boo33KYkJDw9KItpeEXXv8+65f7hHv/earxpcyzQ0I=",
+        "owner": "pyproject-nix",
+        "repo": "uv2nix",
+        "rev": "b68be7cfeacbed9a3fa38a2b5adc0cfb81d9bb1f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "pyproject-nix",
+        "repo": "uv2nix",
+        "type": "github"
+      }
+    },
     "vsext": {
       "inputs": {
         "nixpkgs": "nixpkgs_7"
       },
       "locked": {
-        "lastModified": 1783396462,
+        "lastModified": 1784343266,
-        "narHash": "sha256-0Q3WQGlhzTb6QAXnmleX55Pqn+La4lcXupW1ElN/gZI=",
+        "narHash": "sha256-EGkegdTz2n6ESyih8s3dUuPyJQWlYfPp7U41J05g8PY=",
         "owner": "nix-community",
         "repo": "nix-vscode-extensions",
-        "rev": "98798c612761584740eed894f3ca1e1a1a856ac0",
+        "rev": "472a3e862c76c64ac3ad75a24d332cb5cdd5f1bb",
         "type": "github"
       },
       "original": {
@@ -714,11 +857,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1783336371,
+        "lastModified": 1784058842,
-        "narHash": "sha256-ZisTtweyb7JUwPP54HAXE9TypT8m89dIxDI36Ak0hAs=",
+        "narHash": "sha256-3u3tvbCIAid3Mv7RrJx13jusIEQC/HeKYhO/SUSxR3A=",
         "owner": "nix-community",
         "repo": "NixOS-WSL",
-        "rev": "a9620cfa43f0c1c30a46c31ae3c6e58cdb124a14",
+        "rev": "24c8dc8e0f2170e1a377be24dfadc7d9d21dc1ad",
         "type": "github"
       },
       "original": {

flake.nix

@@ -19,6 +19,10 @@
       inputs.nixpkgs.follows = "nixunstable";
     };
     flake-parts.url = "github:hercules-ci/flake-parts";
+    hermes = {
+      url = "github:nousresearch/hermes-agent";
+      inputs.nixpkgs.follows = "nixunstable";
+    };
     hmunstable = {
       url = "github:nix-community/home-manager/master";
       inputs.nixpkgs.follows = "nixunstable";

home/baseline/nushell/functions.nu

@@ -13,41 +13,9 @@ def --env unlock [] {
 }
 
 def nebulaIps [] {
-    open /etc/nixos/network.json | get hosts | items { |h, e| $e.nebulaIp? } | where $it != null | sort
+    open ../../network.json | get hosts | items { |h, e| $e.nebulaIp? } | filter { |e| $e != null } | sort
 }
 
-def genNebulaCert [ --ips: string, --name: string ] {
-    let public = $'~/SynologyDrive/nebula/($name).key.pub' | path expand
-    let private = $'~/SynologyDrive/nebula/($name).key' | path expand
-    let cert = $'/etc/nixos/secrets/nebula/($name).crt'
-    let ca_cert = '~/SynologyDrive/nebula/ca.crt' | path expand
-    let ca_key = '~/SynologyDrive/nebula/ca.key' | path expand
-
-    # Generate public key if there isn't one already
-    if ( not ($public | path exists) ) {
-        nebula-cert keygen -out-key $private -out-pub $public
-    }
-    # Clear old cert if there is one
-    if ( $cert | path exists) {
-        rm $cert
-    }
-
-    # Create and sign certs
-    (nebula-cert sign
-        -ca-crt $ca_cert
-        -ca-key $ca_key
-        -name $name
-        -networks $ips
-        -out-crt $cert
-        -in-pub $public
-    )
-
-    # Agenix update
-    cd /etc/nixos/secrets
-    cat $private | agenix -e $'nebula/($name).key.age'
-}
-
-
 def rebuild [ $target: string = "switch" ] {
     if (uname | get operating-system) == "Darwin" {
         sudo darwin-rebuild $target
@@ -71,8 +39,7 @@ def deploy [ $host: string, $build: string = "" ] {
     if $buildhost == "linode" or $buildhost == "genesis" {
         $buildhost = "isaiah"
     }
-    colmena apply --on $host
+    nixos-rebuild switch --sudo --use-substitutes --target-host $host --build-host $buildhost
-    #nixos-rebuild switch --sudo --use-substitutes --target-host $host --build-host $buildhost
 }
 
 def ff [ $file: string ] {

home/baseline/tools.nix

@@ -8,6 +8,7 @@
   home.packages =
     with pkgs;
     [
+      attic-client
       dig
       jqp
       kubernetes-helm

home/hosts/hermes/default.nix

@@ -0,0 +1 @@
+{...}: {}

home/hosts/icdm-root/default.nix

@@ -0,0 +1,4 @@
+{ ... }:
+
+{
+}

hosts/unstable/exodus/default.nix

@@ -12,6 +12,10 @@
     top.nix-hardware.nixosModules.framework-11th-gen-intel
   ];
 
+  age.secrets = {
+    compose-attic.file = ../../../secrets/compose/attic.env.age;
+  };
+
   boot = {
     loader = {
       systemd-boot = {

hosts/unstable/genesis/networking.nix

@@ -130,7 +130,7 @@ in
         lib.mapAttrs
           (domain: net: {
             master = true;
-            file = makeZoneFile (lib'.hostsByNet net (metadata.hosts // metadata.external)) domain;
+            file = makeZoneFile (lib'.hostsByNet net metadata.hosts) domain;
           })
           {
             "shire-zebra.ts.net" = "tailscale";

hosts/unstable/hermes/default.nix

@@ -0,0 +1,161 @@
+{
+  config,
+  modulesPath,
+  lib,
+  top,
+  ...
+}:
+{
+  imports = [
+    (modulesPath + "/virtualisation/proxmox-lxc.nix")
+    top.hermes.nixosModules.default
+  ];
+  age.secrets.hermes = {
+    file = ../../../secrets/hermes.age;
+    owner = "hermes";
+  };
+  greg = {
+    nebula = {
+      enable = true;
+      nebulaIp = "10.157.0.8";
+    };
+    nix.cache = false;
+    proxies = lib.genAttrs' [ "thehellings.lan" "nebula.thehellings.com" "shire-zebra.ts.net" ] (
+      name:
+      (lib.nameValuePair "${config.networking.hostName}.${name}" { target = "http://127.0.0.1:9119"; })
+    );
+  };
+  nix.settings = {
+    sandbox = false;
+  };
+  proxmoxLXC = {
+    manageHostName = true;
+    manageNetwork = false;
+    privileged = true;
+  };
+  services = {
+    fstrim.enable = false;
+    hermes-agent = {
+      enable = true;
+      addToSystemPackages = true;
+      environment = {
+        MATRIX_HOMESERVER = "https://thehellings.com";
+      };
+      environmentFiles = [
+        config.age.secrets.hermes.path
+      ];
+      settings = {
+        agent = {
+          reasoning_effort = "medium";
+          reasoning_overrides = {
+            claude-fable = "xhigh";
+            claude-opus = "high";
+          };
+          tool_loop_guardrails = {
+            hard_stop_enabled = true;
+            warnings_enabled = true;
+          };
+          tool_use_enforcement = "auto";
+        };
+        code_execution = {
+          mode = "strict";
+          timeout = 300;
+        };
+        compression = {
+          enabled = true;
+          protect_first_n = 3;
+          protect_last_n = 5;
+          target_ratio = 0.25;
+          threshold = 0.75;
+        };
+        context_file_max_chars = 25000;
+        file_read_max_chars = 100000;
+        goals = {
+          max_turns = 20; # Number of times Hermes tells the model to keep working towards the goal
+        };
+        matrix = {
+          allowed_users = [
+            "@greg:thehellings.com"
+          ];
+          allowed_rooms = [
+            "!agents:thehellings.com"
+          ];
+          free_response_rooms = [
+            "!agents:thehellings.com"
+          ];
+          require_mention = true;
+        };
+        memory = {
+          memory_enabled = true;
+          user_profile_enabled = true;
+          write_approval = true;
+        };
+        model.default = "anthropic/claude-opus-4.8";
+        quick_commands = {
+          disk = {
+            type = "exec";
+            command = "df -h";
+          };
+          free = {
+            type = "exec";
+            command = "free -h";
+          };
+          restart = {
+            type = "alias";
+            target = "/gateway restart";
+          };
+        };
+        skills = {
+          guard_agent_created = true;
+          write_approval = true;
+        };
+        stt = {
+          enabled = true;
+          echo_transcripts = true;
+          provider = "local";
+          local.model = "medium";
+        };
+        terminal = {
+          backend = "local";
+        };
+        tool_output = {
+          max_bytes = 50000;
+          max_lines = 2000;
+          max_line_length = 2000;
+        };
+        toolsets = [ "all" ];
+        worktree = true; # Enable multiple agents in the same repo
+      };
+    };
+    nebula.networks."nebula.thehellings.com" = {
+      tun.disable = true;
+    };
+    openssh = {
+      enable = true;
+      openFirewall = true;
+      settings = {
+        PermitRootLogin = "yes";
+        PasswordAuthentication = true;
+        PermitEmptyPasswords = "yes";
+      };
+    };
+    wyoming.faster-whisper.servers.medium = {
+      enable = true;
+      device = "cpu";
+      initialPrompt = ''
+        The user's name is 'Greg Hellings'. The street he lives on is 'Kardinal Court'
+        in 'Midlothian'. Keep these in mind as they are often misspelled.
+      '';
+      language = "en";
+      model = "medium";
+      uri = "tcp://127.0.0.1:10300";
+      sttLibrary = "faster-whisper";
+    };
+  };
+
+  systemd.suppressedSystemUnits = [
+    "dev-mqueue.mount"
+    "sys-kernel-debug.mount"
+    "sys-fs-fuse-connections.mount"
+  ];
+}

hosts/unstable/icdm-root/boot.nix

@@ -0,0 +1,11 @@
+{ ... }:
+
+{
+  # Bootloader.
+  boot = {
+    loader.grub = {
+      enable = true;
+      device = "/dev/sda";
+    };
+  };
+}

hosts/unstable/icdm-root/default.nix

@@ -0,0 +1,28 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ pkgs, ... }:
+
+{
+  imports = [
+    # Include the results of the hardware scan.
+    ./hardware-configuration.nix
+    ./boot.nix
+    ./filesystem.nix
+    ./location.nix
+    ./networking.nix
+    ./wiki.nix
+  ];
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users.users.greg = {
+    isNormalUser = true;
+    description = "Gregory Hellings";
+    extraGroups = [
+      "networkmanager"
+      "wheel"
+    ];
+    packages = with pkgs; [ ];
+  };
+}

hosts/unstable/icdm-root/filesystem.nix

@@ -0,0 +1,13 @@
+{ ... }:
+
+let
+in
+{
+  fileSystems."serve" = {
+    #device = "10.42.1.4:/volume1/icdm-mysql/";
+    #fsType = "nfs";
+    device = "/dev/sdb1";
+    fsType = "auto";
+    mountPoint = "/srv";
+  };
+}

hosts/unstable/icdm-root/hardware-configuration.nix

@@ -0,0 +1,53 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  modulesPath,
+  ...
+}:
+
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "ehci_pci"
+    "ahci"
+    "usbhid"
+    "usb_storage"
+    "sd_mod"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/dab0d455-e25e-4445-8fa4-5320047d7e7b";
+    fsType = "btrfs";
+    options = [ "subvol=@" ];
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/5aedbb07-5761-423b-909d-2560405eae32";
+    fsType = "ext4";
+  };
+
+  fileSystems."/var" = {
+    device = "/dev/disk/by-uuid/57968536-c29d-417d-997e-85223d1d1f65";
+    fsType = "btrfs";
+  };
+
+  swapDevices = [ { device = "/dev/disk/by-uuid/09691dce-375a-43c6-8d40-4498d20a6d9a"; } ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.eno1.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp2s0.useDHCP = lib.mkDefault true;
+
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/unstable/icdm-root/location.nix

@@ -0,0 +1,15 @@
+{ ... }:
+
+{
+  # Set your time zone.
+  time.timeZone = "America/Chicago";
+
+  # Select internationalisation properties.
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  # Configure keymap in X11
+  services.xserver.xkb = {
+    layout = "us";
+    variant = "";
+  };
+}

hosts/unstable/icdm-root/networking.nix

@@ -0,0 +1,63 @@
+{ ... }:
+let
+  dnsHosts = builtins.concatStringsSep "\n" [ "wiki.icdm.lan 10.42.101.1" ];
+in
+{
+  # If we have to do proxying in Bayonnais, we can start to work on that here
+  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+  networking = {
+    hostName = "icdm-root";
+    useDHCP = false;
+    defaultGateway = "10.42.1.1";
+    nameservers = [
+      "100.100.100.100"
+      "10.42.1.2"
+    ];
+    enableIPv6 = false;
+
+    interfaces = {
+      eno1.ipv4.addresses = [
+        {
+          address = "10.42.101.1";
+          prefixLength = 16;
+        }
+        {
+          address = "10.77.1.2";
+          prefixLength = 16;
+        }
+      ];
+    };
+    # Allow traffic through
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [ 53 ];
+      allowedUDPPorts = [
+        53
+        67
+      ];
+    };
+
+    extraHosts = "${dnsHosts}";
+  };
+
+  services.dnsmasq = {
+    enable = true;
+    settings = {
+      domain = "icdm.lan";
+      dhcp-range = [ "eno1,10.77.1.10,10.77.1.255,255.255.0.0,12h" ];
+      dhcp-option = [
+        "eno1,option:router,10.77.1.1"
+        "eno1,option:dns-server,10.77.1.2,1.1.1.1"
+        "eno1,option:domain-search,icdm.lan"
+      ];
+      expand-hosts = true;
+      log-dhcp = true;
+      log-queries = true;
+      # Upstream servers
+      server = [
+        "1.1.1.1"
+        "8.8.4.4"
+      ];
+    };
+  };
+}

hosts/unstable/icdm-root/wiki.nix

@@ -0,0 +1,17 @@
+{ pkgs, ... }:
+let
+  wikiHost = "wiki.icdm.lan";
+  kiwixport = 8080;
+in
+{
+  services.kiwix-serve = {
+    enable = true;
+    port = kiwixport;
+    library = {
+      inherit (pkgs) zim;
+    };
+  };
+
+  greg.proxies."${wikiHost}".target = "http://localhost:${toString kiwixport}";
+  networking.firewall.allowedTCPPorts = [ 80 ];
+}

hosts/unstable/jeremiah/default.nix

@@ -88,7 +88,6 @@ in
       priority = 254;
     };
     nebula.enable = true;
-    proxies."buildbot.nebula.thehellings.com".target = "http://buildbot.nebula.thehellings.com:8010/";
     tailscale = {
       enable = true;
       tags = [ "home" ];
@@ -143,12 +142,12 @@ in
             updateOutputs = false;
           };
         };
-        domain = "buildbot.nebula.thehellings.com:8010";
+        domain = "${config.networking.hostName}.shire-zebra.ts.net:8010";
         evalMaxMemorySize = 8192;
         evalWorkerCount = 4;
         gitea = {
           enable = true;
-          instanceUrl = "https://src.thehellings.com";
+          instanceUrl = "https://gitea.shire-zebra.ts.net";
           oauthId = "7ec9107d-379b-47c8-870f-1191956d0500";
           oauthSecretFile = config.age.secrets.gitea-oauthSecret.path;
           tokenFile = config.age.secrets.gitea-oauthToken.path;
@@ -156,7 +155,7 @@ in
           webhookSecretFile = config.age.secrets.gitea-webhookSecret.path;
         };
         showTrace = true;
-        #webhookBaseUrl = "http://${config.networking.hostName}.nebula.thehellings.com:8010";
+        #webhookBaseUrl = "http://${config.networking.hostName}.shire-zebra.ts.net:8010";
         workersFile = config.age.secrets.gitea-buildbotWorkersFile.path;
       };
       worker = {

modules/nixos/kubernetes.nix

@@ -15,8 +15,6 @@ let
     sha256 = "sha256-Qs1qJmgZm8q9xZsORjT/N/wzpbWVVODXtzDpjnAYMuQ=";
   };
   keepaliveIp = "10.42.5.1";
-  nebulaName = "k3s.nebula.thehellings.com";
-  nebulaIp = "10.157.100.1";
 in
 {
   options.greg = {
@@ -46,13 +44,6 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    assertions = [
-      {
-        assertion = config.greg.nebula.enable;
-        message = "Configure Nebula for this host, first";
-      }
-    ];
-
     age.secrets = {
       bw_secret.file = ../../secrets/kubernetes/bw_secret.age;
       dendrite_key.file = ../../secrets/dendrite_key.age;
@@ -106,8 +97,6 @@ in
           "--tls-san ${config.networking.hostName}.thehellings.lan"
           "--tls-san ${config.networking.hostName}.shire-zebra.ts.net"
           "--tls-san ${keepaliveIp}"
-          "--tls-san ${nebulaName}"
-          "--tls-san ${nebulaIp}"
         ];
         manifests = {
           cert-manager.source = cert-manager;
@@ -123,8 +112,7 @@ in
       keepalived = {
         enable = true;
         openFirewall = true;
-        vrrpInstances = {
+        vrrpInstances.kubernetes = {
-          kubernetes = {
           interface = cfg.vipInterface;
           priority = cfg.priority;
           state = if (config.networking.hostName == "isaiah") then "MASTER" else "BACKUP";
@@ -139,22 +127,6 @@ in
             advert_int 1
           '';
         };
-          k3s-nebula = {
-            interface = "nebula0";
-            priority = 1;
-            state = if (config.networking.hostName == "isaiah") then "MASTER" else "BACKUP";
-            virtualIps = [
-              {
-                addr = "${nebulaIp}/16";
-                dev = "nebula0";
-              }
-            ];
-            virtualRouterId = 78;
-            extraConfig = ''
-              advert_int 1
-            '';
-          };
-        };
       };
       openiscsi = {
         enable = true;

network.json

@@ -13,6 +13,13 @@
       "ip": "10.42.1.17",
       "system": "x86_64-linux"
     },
+    "chronicles": {
+      "ip": "10.42.1.4",
+      "pubkey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEBecZUva9OnZuXLaBun6/1ITo5f9p0YMLPD+q0egLRS",
+      "external": true,
+      "ts": "100.119.228.115",
+      "aliases": ["s3"]
+    },
     "exodus": {
       "ip": null,
       "pubkey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFxmnCj2E9DxcnefPW+n4yCuLShxqr0p024riogdeXA3",
@@ -28,6 +35,15 @@
       "tags": ["router", "server"],
       "nebulaIp": "10.157.0.2"
     },
+    "hermes": {
+      "external": true,
+      "ip": "10.42.1.18",
+      "mac": "BC:24:11:E4:72:AB",
+      "nebulaIp": "10.157.0.8",
+      "pubkey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILFYyzz/9i5rXprCQj9IL1ulrbQ6E9BOSeOcvf4D/b0G",
+      "system": "x86_64-linux",
+      "tags": ["server"]
+    },
     "hosea": {
       "ip": "10.42.1.7",
       "pubkey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKLIwkTTXA56sUlUjEulXXZRvZy5H4a5ZwgKWLlpkQDz",
@@ -36,6 +52,10 @@
       "tags": ["server"],
       "nebulaIp": "10.157.0.3"
     },
+    "icdm-root": {
+      "external": true,
+      "system": "x86_64-linux"
+    },
     "isaiah": {
       "builder": true,
       "ip": "10.42.1.6",
@@ -56,7 +76,6 @@
       "user": "gregory.hellings"
     },
     "jeremiah": {
-      "aliases": [ "buildbot" ],
       "builder": true,
       "ip": "10.42.1.8",
       "pubkey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOjQjXq9WYU2Ki27BR9WwJ4ZruS/lJXbjC1b0Q42Adi0",
@@ -66,6 +85,11 @@
       "tags": ["builder", "kube", "server"],
       "nebulaIp": "10.157.0.5"
     },
+    "joel": {
+      "external": true,
+      "ip": "10.42.0.4",
+      "ts": null
+    },
     "gregs-MacBook-Pro-16-inch-Nov-2024": {
       "external": true,
       "system": "aarch64-darwin"
@@ -94,10 +118,58 @@
       "external": true,
       "system": "aarch64-darwin"
     },
+    "nas1": {
+      "aliases": [ "*.nas1" ],
+      "external": true,
+      "ip": "10.42.1.14",
+      "ts": "100.114.187.61"
+    },
     "nixos": {
       "external": true,
       "system": "x86_64-linux"
     },
+    "printer": {
+      "external": true,
+      "ip": "10.42.1.3"
+    },
+    "proxmoxtemplate": {
+      "external": true,
+      "system": "x86_64-linux"
+    },
+    "pve2": {
+      "external": true,
+      "ip": "10.42.1.15",
+      "system": "x86_64-linux"
+    },
+    "pve2bmc": {
+      "derp": "10.42.2.129",
+      "external": true,
+      "mac": "00:25:90:4b:34:e8",
+      "ip": "10.42.6.2",
+      "system": "ipmi"
+    },
+    "pve3": {
+      "external": true,
+      "ip": "10.42.1.16",
+      "system": "x86_64-linux"
+    },
+    "pve3bmc": {
+      "derp": "10.42.2.181",
+      "external": true,
+      "ip": "10.42.6.3",
+      "mac": "00:25:90:4a:dc:2e",
+      "system": "ipmi"
+    },
+    "pve4": {
+      "external": true,
+      "ip": "10.42.1.17",
+      "system": "x86_64-linux"
+    },
+    "pve4bmc": {
+      "external": true,
+      "ip": "10.42.6.4",
+      "system": "ipmi"
+    },
     "wsl": {
       "external": true,
       "system": "aarch64-linux"
@@ -112,56 +184,5 @@
       "tags": ["builder", "kube", "server"],
       "nebulaIp": "10.157.0.6"
     }
-  },
-  "external": {
-    "chronicles": {
-      "ip": "10.42.1.4",
-      "pubkey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEBecZUva9OnZuXLaBun6/1ITo5f9p0YMLPD+q0egLRS",
-      "ts": "100.119.228.115",
-      "aliases": ["s3"]
-    },
-    "hermes": {
-      "ip": "10.42.1.18",
-      "mac": "BC:24:11:E4:72:AB",
-      "nebulaIp": "10.157.0.8",
-      "pubkey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILFYyzz/9i5rXprCQj9IL1ulrbQ6E9BOSeOcvf4D/b0G",
-      "tags": ["server"]
-    },
-    "joel": {
-      "ip": "10.42.0.4"
-    },
-    "k3s": {
-      "aliases": [ "*.k3s" ],
-      "ip": "10.42.5.1",
-      "nebulaIp": "10.157.100.1"
-    },
-    "nas1": {
-      "aliases": [ "*.nas1" ],
-      "ip": "10.42.1.14",
-      "ts": "100.114.187.61"
-    },
-    "printer": {
-      "ip": "10.42.1.3"
-    },
-    "pve2": {
-      "ip": "10.42.1.15"
-    },
-    "pve2bmc": {
-      "ip": "10.42.6.2",
-      "mac": "00:25:90:4b:34:e8"
-    },
-    "pve3": {
-      "ip": "10.42.1.16"
-    },
-    "pve3bmc": {
-      "ip": "10.42.6.3",
-      "mac": "00:25:90:4a:dc:2e"
-    },
-    "pve4": {
-      "ip": "10.42.1.17"
-    },
-    "pve4bmc": {
-      "ip": "10.42.6.4"
-    }
   }
 }

secrets/nebula/isaiah.crt

@@ -1,6 +1,6 @@
 -----BEGIN NEBULA CERTIFICATE V2-----
-MIGsoEaABmlzYWlhaKEOBAUKnQAEEAQFCp1kARCFBGplFeuGBGuuvKWHIIOJTGBg
+MIGloD+ABmlzYWlhaKEHBAUKnQAEEIUEac2MaYYEa668pYcgg4lMYGB2VakRFO6b
-dlWpERTumyvbx0i842abqoQVUOzEXjsFB0CsgiDoVBJV1aKswyKPq1E4ZH9H21tx
+K9vHSLzjZpuqhBVQ7MReOwUHQKyCIBv+1Lr/E3Q6d99laLGdXRTss2SIL4OGBp8z
-2IB0pKfEqNVdOLVedYNAjZSaY/IreMGnplY6txmSNuqSpFe1UTEDu4MOGSeZTKsO
+qqfEsAMpg0CyDSEYuL8GaHQq708GbCxhxFifCZaRTB+ReGBScmhT9XhIwSLHRRZJ
-71y33z4AWsexnDD2ItFLT2rA5EgbApacaYF0AxtSCQ==
+1TmoY4QvrdPOS3NAWvlawk/JUqN7SWQL
 -----END NEBULA CERTIFICATE V2-----

secrets/nebula/jeremiah.crt

@@ -1,6 +1,6 @@
 -----BEGIN NEBULA CERTIFICATE V2-----
-MIGuoEiACGplcmVtaWFooQ4EBQqdAAUQBAUKnWQBEIUEamUYxYYEa668pYcgg4lM
+MIGnoEGACGplcmVtaWFooQcEBQqdAAUQhQRpzYxphgRrrrylhyCDiUxgYHZVqREU
-YGB2VakRFO6bK9vHSLzjZpuqhBVQ7MReOwUHQKyCIBHK000U9B0TVjuoTaMhQZFi
+7psr28dIvONmm6qEFVDsxF47BQdArIIgHXr6BLGmqfF92GXiN6MBj3ac0p/EtNYf
-8cKytw8is2cqUW4XAENBg0CLM+fuJcMVMbk6VHmRhko4KUTaQzWG2dggEwskTWCf
+xR3/EdI5GnGDQIFxfV5fVwi26+IRk9QIFxyyFBtmsZyPbdxL8ca1WUPm3lCNA4BT
-IPXiTY2L/hInHSGFynIIe+Ux9hSRJ1W1KF4J8jq5LBwN
+Knd9Y3Zlp6L35L4/dzSqAVoXu2nlHF6SOAA=
 -----END NEBULA CERTIFICATE V2-----

secrets/nebula/zeke.crt

@@ -1,6 +1,6 @@
 -----BEGIN NEBULA CERTIFICATE V2-----
-MIGqoESABHpla2WhDgQFCp0ABhAEBQqdZAEQhQRqZRi1hgRrrrylhyCDiUxgYHZV
+MIGjoD2ABHpla2WhBwQFCp0ABhCFBGnNjGmGBGuuvKWHIIOJTGBgdlWpERTumyvb
-qREU7psr28dIvONmm6qEFVDsxF47BQdArIIg+FmKGTcvIvUcFdcguETRybn3jh58
+x0i842abqoQVUOzEXjsFB0CsgiCirKKbej7yAALn41C+MYmertD9LOv09gZ61ODF
-jJL6X5BHcmrxOWODQCfB4+92Zs/315a6I60PXsUaw3Jk0MQPLUuHykTO19imWsYa
+wEcnB4NAfix/r3q+XLYe3egKUoqJUW2i11x0ST0hxqhJUd8LjHKirRyHsvUraMbG
-DyKFlk26ePhczGlhO2svq9J8p0zce0w+TPveOw8=
+c8x+CXsCPLgheGt548PpmrObQWtrBA==
 -----END NEBULA CERTIFICATE V2-----

secrets/nebula/zeke.key.age

@@ -1,35 +1,41 @@
 age-encryption.org/v1
--> ssh-ed25519 8UnW5Q E8Ki3oFCl3dLp9gxZ7/Ene8NMM26OVJ4PMJQQYQnBm0
+-> ssh-ed25519 87huqg 59/Hfejnlp8Qk6VTcVpsaB2su+p/LjxnXCI3+uoxeXs
-3rC3LMfdPCvSsiwaVnAb7VHwyw7KjZKcASdWm0lDg5E
+DW3LJMJ7nK3ySrDVrZTUhOCiDBujWh2ycGjpfMkddJw
--> ssh-ed25519 UFfTmg 6q8nJbCIQe2IV/W/31OpuI6sZI833IbU+weSTU05Mng
+-> ssh-ed25519 8UnW5Q 2ESBP1XYX71s9tlf1YC9lL+UmJPYjf5qiNNGUsEtnWU
-EgiGZwIN0oRjw9pAaHjypWtswBA1c5PCkNeN9K4YlT8
+jWRnunZ2ub0QAvQaRznVGTIPIxHrzw8B620zFeZUx3Y
--> ssh-ed25519 xNtnoA cyxa8uxevJ9VEaYLg2g9rewcAMhsZRAPEkzqd9k6ngE
+-> ssh-ed25519 UFfTmg Vs0zDRmw2scS8exINo2lBO1x2UqVXEElWFtCnGwrzWI
-SedkkmBd4foxqB1MlCAkfIqO6ft5xnmLBa2cShzw/GI
+SQM1l0GhHyDqzvykuyvR62XCeQPl/JaEttZJXFdvSFo
--> ssh-ed25519 aY2AXA biY7lFtfvr6vBv/XBhZ6Uh7Hpj+Du0NuEjo2RMp6USI
+-> ssh-ed25519 KbVVUw WVNEfBAAEGP0O7vtL04/IaM9nCR57UJkTcT+96ZtaHQ
-5DgzmbEw5f6h4lHm7FlRZHXn4C9vCJ6IguXk7jZXxqM
+3m/lb1USu6Vng2+4IEfXsdNwF4NMuVjZ5H/1+QUX4Q8
--> ssh-ed25519 AQhf1g e3g+IdnzmuJZj3H4LWdbZ8yaj5GM21zz3HCgkzFG5Cg
+-> ssh-ed25519 xNtnoA cWYQoTMQmxpFPDCsj8AGOqxx4ErhHnsMiOgJJvhjBCI
-oyzAIsqnL9ypSOCHINMu/+VM9TJeqgY9jLumhmAFIu8
+6GU/IeVZB1ECMAGYiL8tLPqgCuC2ujNcdSgzhOof7hI
--> ssh-ed25519 mOmPfg o4pCs9ferfC6+OawWXsM5Wa/5q+4EN+lEg/diMrjVhQ
+-> ssh-ed25519 aY2AXA n1f3kFHxIvt5CbiBq6Vs32zoZEeYC5aBAZz5lCUEuxI
-H1gSB90UuJaivo2MhinPQGCV+rmSX1ZWazfhOxIDcaM
+OuFwQTJAdv2oMxzFbce6iqUa7SAu3aHMYU+D3L0gNbo
--> ssh-ed25519 YJiRbw o33TjJkI7rc1DxXRMdgwoHfCqzU3sGd7BZo7Uw0I8iA
+-> ssh-ed25519 AQhf1g hjjixHEYRom6XjHsIf2pMZvcMNxfeBw79+ApOheQezc
-/PiNDHyAl54HYszKkRzsjuoAZ53Ly1Oizf6NUIDB+I4
+/HvBy+L5eaz9NAShIeNfagE8LzamzxolD5ZIdapiyPA
--> ssh-ed25519 Nl/5yA FUycbaA303kvgINg9eNM53lN6aUXQPBxWz9liuhZ6Vo
+-> ssh-ed25519 mOmPfg JJQYaT1ch0i4xeMrCVCgzq25dy7GhqNCHGXTd3syHCI
-nNMPiq0w06WWfe73fpj/9ixunwgzZUCEi6pIKWuNWvQ
+4F+EQY7WbDJ8DwukaMelfYi9Q3LjYBpfhgCJVyXUtWI
--> ssh-ed25519 GdLgCQ sD2xKKzEyD7GsnFJCrDi40sJX0yBIXLr3pLx1R6RT1g
+-> ssh-ed25519 YJiRbw eFi1X3pmVVmkCDl8Jr+lIv2LeuSbMg6WqrpezABmOR8
-ThDfA6T5/9cgAFKZPQtxGhKHdYOZx4sSQnoxzJMsLwc
+2arsXH0pdYxINujCFonHrqwEDVr4qR5ugXix8uu+cOk
--> ssh-ed25519 tOH/HQ YeQfSV5UxsYAMEIOq1FNpkNcM4LEA8zvcbOceZ/26ws
+-> ssh-ed25519 Nl/5yA ScYVPC1pyYkgweGi+hxQaXJ8UEnKta2VqbyHgSPTKCY
-KMeeyObeOBmqxS6hqhVbDgvoB5jUJr8k21igT3rqoww
+CLiTEjJ6ylD3SlzrFHaz8yHaqc5KbCs3x3ij8Mgdnks
--> ssh-ed25519 FpzvfQ GbT7exaVbqJNP7LdV/wyye89yXuN6FI20j7ckx5r5nI
+-> ssh-ed25519 GdLgCQ TQHucvsozqInbmCsh1GHZ2JF5pbUteT/W3XieSIfmj4
-bNMqf7oY6NWVTPvVLOy+UpJKT0C9m6WunfdvMXCUZzk
+Owq1wb9MdMD9pVJj24QCTvmkyh57Q2cKqfMRxj3ZFq4
--> ssh-ed25519 2UotMw Zpco9IYJXyl9wIZo22g/kp/OjfClOtUP2in+N0hYX3o
+-> ssh-ed25519 tOH/HQ KVKjt9GYmfcNOO7LTA1bypmtoYTYHgKWgD2dpD4zxUA
-e68dEYPiNdlrSFaMTzvrhCz9/5V5zFAvrTnPtNSyI4c
+VjlWDbSZp0NHC9VfRONz8UH2JtvIQWzqc7V/gJef/5A
--> ssh-ed25519 kdPvzQ 2j64L6rV5b5+sbKbNAGf9+7uKLgdBpKNv9umHtSW4wY
+-> ssh-ed25519 FpzvfQ gAlbAOE0Zz2A0391SyUKfLQDBt0+9HYPn54rG5HY/hM
-3y74VGUzKb9uhh3DvlkvZ5Jxtgfku7s1kDKrGDWUUvk
+4t/wJ7L7yJvnFkdonsKTBFza+C7gXr8AI1PMEH58sO8
--> ssh-ed25519 onmXpg 8GDMsteOopCnaaVkXAoRMbGuXeKoSqpyZhLvbnEWBQU
+-> ssh-ed25519 2UotMw rrb5P6bPLUibtQ8Pkz533mQe65XA4DZOyw7B3GV6oHg
-X0HsZbpT4Wc/KO0TBwVSyjK6Zcbz1A34VCozNrMH4Lw
+Xs9cK2GZ3k2FgrHjIeB4DTe3gdahFFvS892siiAyEvI
--> ssh-ed25519 CnhD0g uHIeQtUwcDRXdJpFglJ12ptOPP64yMP6WKPz00sAQ0c
+-> ssh-ed25519 kdPvzQ JTPJpaE97otqsADN017u6dw2h9DWlD2NkwIyT5+b8yo
-yIKZNODIQSkNr4UilEHZzOBxeRA4G/sAbkppyOdUjkQ
+QroD7owHZ4ThrVDBTJO3/wn6PK8wfrOwypjbjTxGkSM
--> ssh-ed25519 4ep2UA k+cteVM7cMWQk7xDcCZgWlZxgA4ZBmUlbZHQFmMoi0Q
+-> ssh-ed25519 onmXpg QuQjNKosTocZ4y2KRvqMISezBbSll9ERKBTtKEVMIRs
-YC2fptyb258arEdeOcPhCc3+z/vIgEElbqn2Ik3r2Lo
+R0mgBtM2iZ6lcBzGC5hDz5G06G5O8FM2C1Vll2NW/Ag
---- NJ2uO0A/UbPrw+IgObiiXTwV75xgsWTjYvLpTwznDXM
+-> ssh-ed25519 CnhD0g tSMysXdWjfmoBkVXD/wCIUEikjH7jiuEFlmrbfjIkmE
-³B Ð-ø�`8nß=m5/s”zǼmÚÝØ
ˆ‚Sþ”ÖÍÆ œ¿Âõ&_¤WÛRpõß²“�=iG’FyÃEíІ¹¥èIñq:ö|-~$ò>ûÄbv~l­eè/ñd•V Ùˆq”ªÐ¾±¶
˜Â€ƒ•‰5¯ÝýŠÏ‚é|¸‘JÅí␍´£_£°l¯¬ñZ2°rìPÞ—p½‚.
+xrkP8nl1nE+LvHA0vb1rOnQKNR/SB+KaqYBvJHDa3fs
+-> ssh-ed25519 4ep2UA o1Vut8uttNV4+3DuZ67gURlGdnRittoON/xPE05i838
+03mFKfz89r0EKnY4tRL1zd9jKarZFW9TdX9nvvgAOTU
+--- At7cFNjOg5E5WlaySJtqRZoK2/Gu+sXMI/cITd1SOKA
+〹Ýäöß6v’z³ªâ0{ŸÝšj& �úöw®ÂmÝeªEþ�ÒæÔ,|
+_ŽaÍDóº#qó]Lõã"íW ê(Ѷʹw¾µ¦˜ÕmÂÖ]O#
+T ô†•kÉ—gÜòrá]Þf¡T©_·‚Æö'¿•wÜ;Àƒ!N\¹¤¿g!TcØbê…7ëæïXmãLxã®þ‘ð