clanService yggdrasil add vars yggdrasil/yggdrasil-subnet

inventories/default.nix

@@ -5,7 +5,7 @@
       tags = {
         glom = [ "vega" ];
         b4l = [ "rigel" ];
-        fax-bridge = [ "neptune" ];
+        fax-bridge = [ ];
       };
 
       instances = {

machines/neptune/configuration.nix

@@ -1,22 +0,0 @@
-{ inputs, config, ... }:
-{
-  imports = [
-    (inputs.import-tree ./services)
-  ];
-  nixpkgs.hostPlatform = {
-    system = "x86_64-linux";
-  };
-  boot.loader.grub.devices = [ "/dev/disk/by-id/FIXME" ];
-  fileSystems = {
-    "/".device = "/dev/FIXME";
-  };
-  networking.fqdn = "b4l.co.th";
-  system.stateVersion = "25.11";
-  clan.core.sops.defaultGroups = [ "admins" ];
-
-  security.acme.defaults.email = "admin@b4l.co.th";
-  security.acme.acceptTerms = true;
-  services.nginx.virtualHosts."${config.networking.fqdn}" = {
-    enableACME = true;
-  };
-}

modules/clan/yggdrasil/default.nix

@@ -22,6 +22,7 @@
             yggdrasil-ip = {
               secret = false;
             };
+            yggdrasil-subnet.secret = false;
           };
           runtimeInputs = with pkgs; [
             yggdrasil
@@ -30,6 +31,7 @@
           script = ''
             yggdrasil -genconf -json | jq {PrivateKey} > $out/yggdrasil-secret
             cat $out/yggdrasil-secret | yggdrasil -useconf -address | tr -d "\n" > $out/yggdrasil-ip
+            yggdrasil -useconffile $out/yggdrasil-secret -subnet | tr -d "\n" > $out/yggdrasil-subnet
           '';
         };