dev/nisse
2
1 Fork 0
Code Issues 23 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Agent host: the VM is now nisse, not nisse-host
CI / checks (push) Skipped
CI / checks (pull_request) Canceled after 0s
Details
CI / e2e (pull_request) Canceled after 0s
Details

Browse Source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk
This commit is contained in:
dongarandClaude Opus 5.5 committed 2026-10-19 13:08:06 +00:00
1 parent eafe1b9f4a
commit e7a0c0f1db
5 files changed
+10 -10
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

deploy/agent-host/README.md
+2 -2
View File
@@ -1,7 +1,7 @@
# The agent host # The agent host
`nisse-host.garrett-hall.com`, made by infra/tofu#77 (architecture X1). For now `nisse.garrett-hall.com`, made by infra/tofu#77 as `nisse-host` and since
it holds the knowledge vault and SilverBullet, the operator's view of it (L10, renamed (architecture X1). For now it holds the knowledge vault and SilverBullet, the operator's view of it (L10,
M5.4). The agents' containers come later (M6.1). M5.4). The agents' containers come later (M6.1).
## What's here ## What's here
deploy/agent-host/caddy/vault.dongar.net.caddy
+1 -1
View File
@@ -6,5 +6,5 @@ vault.dongar.net {
@outside not remote_ip private_ranges @outside not remote_ip private_ranges
respond @outside 403 respond @outside 403
reverse_proxy nisse-host.garrett-hall.com:3000 reverse_proxy nisse.garrett-hall.com:3000
} }
docs/Development-Plan.md
+4 -4
View File
@@ -553,10 +553,10 @@ SilverBullet so far (M5.4). Until M6.2, the build VMs stay made by hand, with
`vm ready` for a rebuilt one's host key. `vm ready` for a rebuilt one's host key.
**M6.1 The agent host.** *Needs discussion.* Containers, volumes, snapshots, **M6.1 The agent host.** *Needs discussion.* Containers, volumes, snapshots,
per-agent networks (X1, X2, X4). The host exists: `nisse-host` (infra/tofu#77, per-agent networks (X1, X2, X4). The host exists: `nisse` (infra/tofu#77,
2026-10-18; 2 cores, 4 GB, 100 GB, on VLAN 1, nightly Proxmox backups), requested 2026-10-18, as `nisse-host`; 2 cores, 4 GB, 100 GB, on VLAN 1, nightly Proxmox
through nisse-dev's own quota to test that path; the operator may move it out of backups), requested through nisse-dev's own quota to test that path; the operator
the quota. It holds only the vault and SilverBullet so far (M5.4). has since renamed it and moved it out of the quota. It holds only the vault and SilverBullet so far (M5.4).
**M6.2 Build VMs by Terraform.** *Needs discussion.* The template, VLAN and egress **M6.2 Build VMs by Terraform.** *Needs discussion.* The template, VLAN and egress
(D7, X2), collection when idle. (D7, X2), collection when idle.
scripts/agent-host.sh
+2 -2
View File
@@ -7,9 +7,9 @@
# Trusts only the host keys bot-ansible posted (~/bin/tofu-wait.sh saved them). # Trusts only the host keys bot-ansible posted (~/bin/tofu-wait.sh saved them).
set -euo pipefail set -euo pipefail
host=${AGENT_HOST:-nisse-host.garrett-hall.com} host=${AGENT_HOST:-nisse.garrett-hall.com}
key=${AGENT_HOST_KEY:-/root/nisse-e2e/ssh/id_ed25519} key=${AGENT_HOST_KEY:-/root/nisse-e2e/ssh/id_ed25519}
known=${AGENT_HOST_KNOWN:-/root/nisse-e2e/nisse-host.known_hosts} known=${AGENT_HOST_KNOWN:-/root/nisse-e2e/nisse.known_hosts}
repo=$(cd "$(dirname "$0")/.." && pwd) repo=$(cd "$(dirname "$0")/.." && pwd)
on_host() { on_host() {
tests/deploy/test_agent_host.py
+1 -1
View File
@@ -71,7 +71,7 @@ def test_its_port_caddys_and_the_firewalls_agree() -> None:
port = setting("SB_PORT") port = setting("SB_PORT")
assert silverbullet()["ports"] == [f"0.0.0.0:{port}:3000"] # IPv4 only assert silverbullet()["ports"] == [f"0.0.0.0:{port}:3000"] # IPv4 only
caddy = (HOST / "caddy" / "vault.dongar.net.caddy").read_text() caddy = (HOST / "caddy" / "vault.dongar.net.caddy").read_text()
assert f"reverse_proxy nisse-host.garrett-hall.com:{port}" in caddy assert f"reverse_proxy nisse.garrett-hall.com:{port}" in caddy
assert "@outside not remote_ip private_ranges" in caddy # the LAN only assert "@outside not remote_ip private_ranges" in caddy # the LAN only