From 90a572eabb2a8c2d095ccb16b77d9b446a54f86e Mon Sep 17 00:00:00 2001 From: Kyle Isom Date: Tue, 22 Sep 2026 19:42:40 -0700 Subject: [PATCH] rift: drop MCP config (containers already stopped) Remove mcp.nix/mcpkg.nix, MCP firewall ports, MCNS nameserver, and ~mcp.metacircular.net. Leave LUKS FIDO2. Do not delete /srv/mcp. --- hw/rift/default.nix | 13 ------------- 1 file changed, 13 deletions(-) diff --git a/hw/rift/default.nix b/hw/rift/default.nix index f4fef7e..43c451d 100644 --- a/hw/rift/default.nix +++ b/hw/rift/default.nix @@ -4,8 +4,6 @@ imports = [ ./hardware-configuration.nix ./disk-config.nix - ../../configs/mcpkg.nix - ../../configs/mcp.nix ]; config = { @@ -14,16 +12,5 @@ "fido2-device=auto" "token-timeout=10" ]; - - # Allow rootless containers (Podman) to bind port 53 for CoreDNS (MCNS precursor). - boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53; - - # Open ports: DNS (53), mc-proxy (443, 8443, 9443), exod (8080, 9090). - networking.firewall.allowedTCPPorts = [ 53 443 8443 9443 8080 9090 ]; - networking.firewall.allowedUDPPorts = [ 53 ]; - - # DNS: MCNS for internal zones, public resolvers as fallback. - networking.nameservers = [ "192.168.88.181" "1.1.1.1" "8.8.8.8" ]; - services.resolved.settings.Resolve.Domains = [ "~mcp.metacircular.net" ]; }; }