What: - bound CLAWDINATOR image artifact retention with S3 lifecycle, AMI pruning, and import provenance tags - reduce the AWS fleet to Babelfish-only and make GitHub credentials opt-in per host - disable the AMI build, nix-openclaw bump, and release workflows by moving them out of .github/workflows/ - update operator docs for the new explicit build and deploy model Why: - stop unbounded S3 and snapshot growth from image builds - remove unattended resurrection paths and shut down the unused t3.large instances - keep the remaining Babelfish host running without GitHub App credentials or sync timers Tests: - `nix shell nixpkgs#shellcheck nixpkgs#shfmt -c bash scripts/lint-shell.sh` (pass) - `nix build .#nixosConfigurations.clawdinator-babelfish.config.system.build.toplevel .#nixosConfigurations.clawdinator-1.config.system.build.toplevel .#nixosConfigurations.clawdinator-2.config.system.build.toplevel` (pass) - `AWS_PROFILE=homelab-admin TF_VAR_aws_region=eu-central-1 TF_VAR_ami_id=ami-0a9abe17feeee0079 TF_VAR_ssh_public_key="$(cat ~/.ssh/id_ed25519.pub)" nix shell nixpkgs#opentofu -c sh -lc 'tofu fmt -check && tofu validate'` (pass) - live AWS apply: destroyed `clawdinator-1` and `clawdinator-2`, replaced Babelfish, and verified only `Fleet Deploy` remains active in GitHub Actions |
||
|---|---|---|
| .. | ||
| examples | ||
| hosts | ||
| modules | ||
| tools | ||
| vendor | ||
| instances.json | ||
| README.md | ||
Nix/NixOS
This directory holds Nix modules/flakes to configure CLAWDINATOR hosts.
References (local repos on the same machine):
../nix/ai-stack../nix/nixos-config../nix/nix-openclaw
Responsibilities:
- Install and configure clawbot runtime
- Set up systemd services
- Mount /var/lib/clawd (shared memory)
- Inject secrets (Discord token, Anthropic key, GitHub token)
Module:
nix/modules/clawdinator.nixprovidesservices.clawdinator- Example host config:
nix/examples/clawdinator-host.nix - Example flake wiring:
nix/examples/flake.nix
Hosts:
nix/hosts/clawdinator-1.nixis the first host config (templated; no machine-specific secrets)
Secrets:
- Explicit token files only:
discordTokenFile,anthropicApiKeyFile, and eithergithubPatFileorgithubApp.*.
Updates:
- Tracks
github:openclaw/nix-openclaw(latest upstream) - Self-update timer available via
services.clawdinator.selfUpdate.*