capsule

type host vendor Raspberry Pi model Raspberry Pi 5 Model B Rev 1.1 (8 GB) year ~2023 serial d9c81ac9b4823886 revision d04171 cpu BCM2712, Cortex-A76 (4c) ram 8 GB LPDDR4X-4267 gpu Broadcom VideoCore VII storage 256 GB Patriot P300 NVMe os NixOS 26.05 (Yarara)

LAN CoreDNS sinkhole, rooted on the NVMe through the retained NIXOS_DNS/FW_DNS filesystem layout. It shares nix/services/coredns-sinkhole.nix with Fleet/spore. Config: nix/hosts/capsule.nix.
Redundant LAN NTP server paired with Fleet/spore (nix/services/ntp-server.nix). Chrony uses authenticated NTS upstreams (time.nrc.ca, time.chu.nrc.ca), polls Spore, and serves UDP/123 to routed 10.0.0.0/8 clients. If all upstream time disappears, orphan mode elects one Pi to preserve a common timebase at stratum 10.
Verify with chronyc tracking, chronyc sources -v, and chronyc authdata.
Reached as capsule.lolwtf.ca. dns.lolwtf.ca publishes capsule and spore as the resolver pair; time.lolwtf.ca publishes the same hosts as the redundant NTP pair.

Linked references 3

Fleet/spore

Redundant LAN NTP server paired with Fleet/capsule (nix/services/ntp-server.nix) and published with it as time.lolwtf.ca. Chrony uses authenticated NTS upstreams (time.nrc.ca, time.chu.nrc.ca), polls Capsule, and serves UDP/123 to routed 10.0.0.0/8 clients. Orphan fallback reports stratum 10; neither Pi is stratum 1 without a hardware reference clock.

Fleet/spore

CoreDNS sinkhole using the shared nix/services/coredns-sinkhole.nix policy. dns.lolwtf.ca publishes spore with Fleet/capsule as the resolver pair.

Fleet

Host	Purpose	Hardware
Fleet/spore	NFS, PXE, signed native-boot, DNS and NTP	Pi 5 8 GB, NVMe
Fleet/capsule	DNS sinkhole and NTP	Pi 5 8 GB, NVMe
Fleet/forge	arm64 build host, harmonia cache, OCI builder	Pi 5 8 GB, NVMe
Fleet/homepi4	kiosk	Pi 4B 8 GB, 7" touch display
Fleet/weatherpi4	weather kiosk	Pi 4B 8 GB
Fleet/cloudpi4	utility and CoreDNS canary	Pi 4B 4 GB
Fleet/radiopi0	radio	Pi Zero W
Fleet/blinkypi0	LED display	Pi Zero W

Edit this page on GitHub