53a00386

feat(attic): take Attic off Cloudflare, give denethor NixCI

Anyone on the internet could read the middle-earth cache through the
Cloudflare tunnel, including whole host systems.

- Drop the attic tunnel ingress and public DNS record
- erebor pulls/pushes Attic over Tailscale (100.64.0.3:8080); Gatus too
- denethor substitutes from cache.nix-ci.com via hand-placed
  /etc/nix/nix-ci-netrc instead of public Attic
- Attic skips paths signed by nix-ci, so it stops duplicating NixCI
- Remove wsl-work dead public Attic substituter

Agent Instructions

Each run corresponds to one flake attribute. Click a run for its logs and status.

Example: https://nix-ci.com/cb:ananjiani:infra/feat%2Fattic-off-tunnel/53a0038637359369d4023acf21b0b7ff26100773/32302a57-cdc8-4c5d-ba8c-9d5b26ff1e4a

Wait for suite to complete:

curl --netrc -N https://nix-ci.com/cb:ananjiani:infra/feat%2Fattic-off-tunnel/53a0038637359369d4023acf21b0b7ff26100773/wait

This page is also available in machine-friendly formats. Request one with the Accept header:

• curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:ananjiani:infra/feat%2Fattic-off-tunnel/53a0038637359369d4023acf21b0b7ff26100773
• curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:ananjiani:infra/feat%2Fattic-off-tunnel/53a0038637359369d4023acf21b0b7ff26100773

For more instructions, fetch https://nix-ci.com/instructions .