feat(foreign-port): add WiFi-only laptop as clan machine

Mirrors the distant-shore pattern: clan-managed (no standalone
flake-module), wired into zerotier/data-mesher/dm-pull-deploy with the
generated vars. WiFi via NetworkManager (PSK from /etc/secrets/nm.env);
locally-signed boot chain (shim chain-loads sbsign-signed systemd-boot
+ kernel, refreshed every nixos-rebuild). targetHost is the LAN IP for
the first push, switch to ZT IPv6 once on the mesh. buildHost =
sunken-ship to avoid self-SSH on the closure copy.
This commit is contained in:
DannyDannyDanny 2026-06-07 21:43:28 +02:00
parent 610454f0d2
commit e2cf93e7d6
23 changed files with 310 additions and 0 deletions

View file

@ -0,0 +1 @@
../../../users/danny