From ca6157a4f0eda64ec1e56950f178c6dc7eb33574 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kmein@posteo.de>
Date: Tue, 17 Feb 2026 21:39:11 +0100
Subject: [PATCH] remove dead modules/retiolum.nix
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This was an old copy of the krebs retiolum module with NIX_PATH lookups
(<retiolum/hosts>, <system-secrets/...>). It was never imported — the
upstream retiolum.nixosModules.retiolum from the flake input is used
instead (in profiles.default), with configs/retiolum.nix overriding
the key paths to agenix secrets.
---
 modules/retiolum.nix | 73 --------------------------------------------
 1 file changed, 73 deletions(-)
 delete mode 100644 modules/retiolum.nix

diff --git a/modules/retiolum.nix b/modules/retiolum.nix
deleted file mode 100644
index 184d3e0..0000000
--- a/modules/retiolum.nix
+++ /dev/null
@@ -1,73 +0,0 @@
-{
-  config,
-  pkgs,
-  lib,
-  ...
-}:
-with lib;
-let
-  netname = "retiolum";
-  cfg = config.networking.retiolum;
-in
-{
-  options = {
-    networking.retiolum.ipv4 = mkOption {
-      type = types.str;
-      description = ''
-        own ipv4 address
-      '';
-    };
-    networking.retiolum.ipv6 = mkOption {
-      type = types.str;
-      description = ''
-        own ipv6 address
-      '';
-    };
-    networking.retiolum.nodename = mkOption {
-      type = types.str;
-      default = config.networking.hostName;
-      description = ''
-        tinc network name
-      '';
-    };
-  };
-
-  config = {
-    services.tinc.networks.${netname} = {
-      name = cfg.nodename;
-      hosts = builtins.mapAttrs (name: _: builtins.readFile "${<retiolum/hosts>}/${name}") (
-        builtins.readDir <retiolum/hosts>
-      );
-      rsaPrivateKeyFile = toString <system-secrets/retiolum.key>;
-      ed25519PrivateKeyFile = toString <system-secrets/retiolum.ed25519>;
-      extraConfig = ''
-        LocalDiscovery = yes
-        AutoConnect = yes
-      '';
-    };
-
-    networking.extraHosts = builtins.readFile (toString <retiolum/etc.hosts>);
-
-    environment.systemPackages = [ config.services.tinc.networks.${netname}.package ];
-
-    networking.firewall = {
-      allowedTCPPorts = [ 655 ];
-      allowedUDPPorts = [ 655 ];
-    };
-    #services.netdata.portcheck.checks.tinc.port = 655;
-
-    systemd.network = {
-      enable = true;
-      networks = {
-        "${netname}".extraConfig = ''
-          [Match]
-          Name = tinc.${netname}
-
-          [Network]
-          Address=${cfg.ipv4}/12
-          Address=${cfg.ipv6}/16
-        '';
-      };
-    };
-  };
-}