The orchestrator's flake now builds the machine it shares with the cc-ci CI
server: `nixosConfigurations.cc-ci` composes cc-ci's nixosModules.cc-ci-server
(new flake input, nixpkgs + sops-nix follow ours), this repo's orchestrator
module (nix/modules/cc-ci.nix, exported as cc-ci-orchestrator, `cc-ci` kept
as an alias for notplants-nix) and the new nix/modules/orchestrator-host.nix
— the host contract those units always assumed (loops user, claude/opencode
CLIs, opencode web server + tailnet-only UI on 8443 since traefik owns
80/443, nix-ld, tool set, `ssh cc-ci` → loopback).
nix/hosts/cc-ci/{hardware,networking}.nix are PROVISIONAL copies of the old
server's layout so the flake evaluates; they get replaced by the
nixos-infect output of 195.201.88.249.
README.md is the deploy guide (Hetzner Debian → nixos-infect → this flake →
staging → data restore → cutover). archive/ holds the retired Incus/Hetzner
orchestrator host configs, the old terraform and the migration plans;
references updated. cc-ci-plan/plan-cc-ci-combined-host.md is the working
plan for the move.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz
2.5 KiB
2.5 KiB
archive/ — how cc-ci and its orchestrator were built and moved, before the combined host
Historical record only. Nothing in here is deployed or evaluated. It was moved out of the live
tree on 2026-09-07 when the CI server and the orchestrator were consolidated onto one Hetzner
host (nixosConfigurations.cc-ci in ../flake.nix; deploy guide in ../README.md; the plan
that did it is ../cc-ci-plan/plan-cc-ci-combined-host.md).
| path | what it was |
|---|---|
nix/configuration-incus-vm.nix |
Channel-based NixOS config of the first orchestrator VM on b1 (Incus, 2 GB). Ran the loops as root; hard-coded the dead Incus cc-ci IP. Replaced by the Hetzner host 2026-05-31. |
nix/README.md |
The README for that Incus VM config. |
nix/cc-ci-orchestrator-hetzner/ |
The orchestrator's own Hetzner cpx22 host (168.119.126.100, tailnet cc-ci-orchestrator-1), 2026-05-31 → 2026-09. From 2026-08-20 the live copy of this config was notplants-nix's notplants-orchestrator host (the box became a shared agent host for several projects); this one had drifted and still carried lichen/project-orchestrator units. Superseded by ../nix/hosts/cc-ci + ../nix/modules/orchestrator-host.nix. |
nix/atproto-likes.nix |
A notplants (not cc-ci) service that lived on the shared box; kept by notplants-nix. |
terraform/ |
OpenTofu for the cpx22 orchestrator server (Debian 12 → nixos-infect at nixos-24.11). The combined host was provisioned by hand instead; the README documents that path. Note its user-data.sh would fail on the Debian 13 image (nixos-infect's temp swapfile on a tmpfs /tmp) — see the README's NO_SWAP=true note. |
plans/plan-orchestrator-migration.md |
Pi → Incus VM move of the orchestrator (2026-05). |
plans/plan-orchestrator-hetzner-migration.md |
Incus VM → Hetzner cpx22 move of the orchestrator (2026-05-31). Has the reboot-resilience design (cc-ci-loops.service). |
plans/plan-migrate-cc-ci-to-hetzner.md, plans/plan-cc-ci-hetzner-migration.md, plans/plan-cc-ci-hetzner-terraform.md |
The CI server's own move from the cc-nix-test Incus VM to Hetzner cpx32 (91.98.47.73, 2026-05-31), and the terraform that provisioned it (lives in the cc-ci repo). |
plans/plan-repo-consolidation.md |
The earlier repo layout consolidation. |
The cc-ci server's own history (machine-docs, decisions, the clean-room rebuild that proved
"two repos + one age key + one nixos-rebuild switch") is in the cc-ci repo under
machine-docs/ and docs/.