capsule
A Raspberry Pi 5 on NVMe that is one of the three lab DNS and time anchors, and runs NetBox.
| vendor | Raspberry Pi |
|---|---|
| model | Raspberry Pi 5 Model B Rev 1.1 (8 GB) |
| serial | d9c81ac9b4823886 |
| revision | d04171 |
| cpu | BCM2712, Cortex-A76 (4c) |
| ram | 8 GB LPDDR4X-4267 |
| gpu | Broadcom VideoCore VII |
| storage | 256 GB Patriot P300 NVMe |
| os | NixOS 26.05 (Yarara) |
capsule is a Raspberry Pi 5 on the Anchor network, folly's network for lab hosts. With spore and forge, it serves Lab DNS and time. nix/hosts/capsule.nix configures it.
What it runs#
- CoreDNS from
nix/services/coredns-sinkhole.nixand chrony fromnix/services/ntp-server.nix, both throughnix/profiles/anchor.nix - A node of folly's Garage cluster, with data in
/var/lib/garage(nix/services/garage.nix) - NetBox, with its PostgreSQL and Redis, on the tailnet only (
nix/services/netbox.nix)
clusters/folly/monitoring/capsule.yaml declares the alerts CapsuleCoreDnsDown, CapsuleChronyDown, and those of NetBox.
Reach#
Reach it at capsule.lolwtf.ca or capsule.<tailnet>.
Rowbutt's sandboxes on offsite reach the Anchor network hosts with capsule as their ssh jump host. offsite's Kubernetes ranges reach the Anchor network only on capsule's ports 22 and 8080. See Routing and firewall.
Quirks#
nix/hosts/capsule.nixforces the file system labelsNIXOS_DNSandFW_DNS, which the NVMe carries. If they change, the host does not find its root and firmware partitions at boot.
Linked from 7
- Smiirl counterA Go service on the folly Kubernetes cluster that replaces Smiirl's cloud, so the owner sets what the Smiirl counter shows from a web page.
- HostsEvery host in the homelab, with its role, site, hardware, OS and status, and how to reach it.
- BackupsHow Garage, Velero, CloudNativePG and etcd snapshots back up the lab's databases, volumes and etcd, and how each site copies them to GCS.
- NetBoxThe record of every machine in the lab, on capsule, reachable only over the tailnet.
- NetworkThe two sites, their UniFi gateways and networks, and the tunnel, routes, ingress and tailnet that connect them.
- Ingress and DNSThe Gateways, DNS records, certificates, tunnels and lab resolvers that give cluster services a name and a path from the LAN, tailnet or internet.
- Operate the Smiirl counterCheck the Smiirl counter, calibrate its drums, repair it when it does not show the value set on its page, and return it to Smiirl's cloud.