add colmena

flake.nix

@@ -25,7 +25,8 @@
 
   outputs =
     inputs:
-    inputs.snowfall-lib.mkFlake {
+    let
+      flake = inputs.snowfall-lib.mkFlake {
         inherit inputs;
         src = ./.;
         snowfall = {
@@ -41,4 +42,24 @@
           allowUnfree = true;
         };
       };
+      inv = import ./inventory.nix;
+      mkNode = name: node: {
+        imports = [ (./systems/x86_64-linux + "/${name}") ];
+        deployment.targetHost = node.zerotierIp;
+      };
+      colmenaNodes = builtins.mapAttrs mkNode inv.nodes;
+      colmenaHive = inputs.colmena.lib.makeHive (
+        {
+          meta = {
+            nixpkgs = import inputs.nixpkgs {
+              system = "x86_64-linux";
+              config.allowUnfree = true;
+            };
+            specialArgs = { inherit inputs; };
+          };
+        }
+        // colmenaNodes
+      );
+    in
+    flake // { colmenaHive = colmenaHive; };
 }

homes/aarch64-darwin/yadunut@yadunut-mbp/default.nix

@@ -22,6 +22,7 @@
       pkgs.claude-code
       pkgs.codex
       pkgs.amp-cli
+      inputs.colmena.packages.aarch64-darwin.colmena
     ];
 
     home.sessionVariables = {

inventory.nix

@@ -16,7 +16,6 @@
   # User SSH public keys (named) for authorization and agenix recipients.
   userKeys = {
     yadunut = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJXOpmWsAnl2RtOuJJMRUx+iJTwf2RWJ1iS3FqXJFzFG yadunut";
-    "penguin-yadunut" =
+    penguin-yadunut = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEg5wsPLOZvU6lT8cMUsStQqalh/Hw5u104QhOYPS8E yadunut@penguin";
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEg5wsPLOZvU6lT8cMUsStQqalh/Hw5u104QhOYPS8E yadunut@penguin";
   };
 }

secrets/k3s.age

@@ -1,12 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 Gc/MTQ 1VXVmIQH+4s2AkBbf8BdOp65oDDlxfMYYE184LUggFo
+-> ssh-ed25519 mOIk4w b5tjwFCxGwOsQSRQTuyW45PM4UUIePIYfZ1TxtN/uXY
-xpUXhXkFiUa3FcWBazPt7l0bPYrurOsn2+MZVxHp0XE
+9JBcEmgtq7IbvQ4aSNntlWq756MCOhyPeyYxdSpZXac
--> ssh-ed25519 mOIk4w jdEZYWfNwjmsVhKWo/ucReyRLVgeRICAGP5n6mvJOQg
+-> ssh-ed25519 Gc/MTQ ilPM4uAYGwFNJRUPdyU4TEQFI6wSR6e53X5Vl8sFqXk
-YuyZTijB3BNxTPKebLmEsfJkRh7/8JETG5eOqgU+fOY
+ejbXYpUcfyZ0ALMEdmXCl0ELdI3wyH+4gje0ljSLzO4
--> ssh-ed25519 l9wOAw /OGUnqDH738Yk51Snn7VC1JPBTMU497vBSaKD0qWbAs
+-> ssh-ed25519 cPJ/Ew IXILaJ9gLqpuNme7Q9TKmfh0z4OsZWWd2exrnC7pX1U
-+sgfXtvA9g3X5YPr5YcoWo7Ljkxrs3O++aNA6GphU/4
+VTkE9sX8UVvaQwsuOFzimdn4yjYNSDZ4xofzCWPfe1I
--> ssh-ed25519 cPJ/Ew otg3F8Xt7vYkvjFv3/4OtSG8Q/8/z2IOF9h9q6wiuSc
+-> ssh-ed25519 l9wOAw DuSvKg4h9Ht8YY4WKfyJuS72MAmXOIxUmDvzCOyMoXU
-EI4BL10EGys4Vd1+DiU1u69CB8feEqNw9saqqclvgG4
+WobjJwvGz0GxVoyn12kKC4FTIRkQiTH9NOK7pmuWLvE
---- rqGI3Z4Pd3PDtH7RHfx5FRDu4AZudXZ1Cfv8Cvz/IAw
+--- 2sPIIJsPAciSrEjOO/ZKxdIByFiFvoVZ3gSs3TvRFQ4
-<EFBFBD><EFBFBD><1A><><EFBFBD><EFBFBD>}Av<41>!<21>@<40>h*<2A><><EFBFBD>8H?<3F>h<19><><EFBFBD>
+<EFBFBD><EFBFBD>̊<EFBFBD>+?]<5D><>P<EFBFBD><50>Z@E`<60><><EFBFBD><EFBFBD><14>h<EFBFBD><68>6<EFBFBD><36>֧_jXx<58>_X<5F>}^{%<25>f|<7C><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>h<EFBFBD><68>p<EFBFBD><70><EFBFBD><EFBFBD>འ<7F>-D<1C><><EFBFBD><EFBFBD><@$<24>w<EFBFBD>x<>1<02><><EFBFBD><EFBFBD><EFBFBD>x<EFBFBD>}N<>مgj<67><6A>J<EFBFBD><4A><EFBFBD><19><><EFBFBD><EFBFBD><EFBFBD>;<3B><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>2O
-mr8<EFBFBD><EFBFBD>7M4>8<><38>쬲<EFBFBD>B<EFBFBD><42>6<EFBFBD><36>w