- feat/attic-off-tunnel 53a00386 infra ananjiani

53a00386

By: Ammar Nanjiani <ammar.nanjiani@gmail.com>

feat(attic): take Attic off Cloudflare, give denethor NixCI

Anyone on the internet could read the middle-earth cache through the
Cloudflare tunnel, including whole host systems.

- Drop the attic tunnel ingress and public DNS record
- erebor pulls/pushes Attic over Tailscale (100.64.0.3:8080); Gatus too
- denethor substitutes from cache.nix-ci.com via hand-placed
  /etc/nix/nix-ci-netrc instead of public Attic
- Attic skips paths signed by nix-ci, so it stops duplicating NixCI
- Remove wsl-work dead public Attic substituter

Agent Instructions

This page shows the dependency graph between runs in the suite.

This page is also available in machine-friendly formats. Request one with the Accept header:

curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:ananjiani:infra/feat%2Fattic-off-tunnel/53a0038637359369d4023acf21b0b7ff26100773/dependencies
curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:ananjiani:infra/feat%2Fattic-off-tunnel/53a0038637359369d4023acf21b0b7ff26100773/dependencies

For more instructions, fetch https://nix-ci.com/instructions .