clawdinators/nix
joshp123 280744ce0c infra: slim clawdinators aws footprint
What:
- bound CLAWDINATOR image artifact retention with S3 lifecycle, AMI pruning, and import provenance tags
- reduce the AWS fleet to Babelfish-only and make GitHub credentials opt-in per host
- disable the AMI build, nix-openclaw bump, and release workflows by moving them out of .github/workflows/
- update operator docs for the new explicit build and deploy model

Why:
- stop unbounded S3 and snapshot growth from image builds
- remove unattended resurrection paths and shut down the unused t3.large instances
- keep the remaining Babelfish host running without GitHub App credentials or sync timers

Tests:
- `nix shell nixpkgs#shellcheck nixpkgs#shfmt -c bash scripts/lint-shell.sh` (pass)
- `nix build .#nixosConfigurations.clawdinator-babelfish.config.system.build.toplevel .#nixosConfigurations.clawdinator-1.config.system.build.toplevel .#nixosConfigurations.clawdinator-2.config.system.build.toplevel` (pass)
- `AWS_PROFILE=homelab-admin TF_VAR_aws_region=eu-central-1 TF_VAR_ami_id=ami-0a9abe17feeee0079 TF_VAR_ssh_public_key="$(cat ~/.ssh/id_ed25519.pub)" nix shell nixpkgs#opentofu -c sh -lc 'tofu fmt -check && tofu validate'` (pass)
- live AWS apply: destroyed `clawdinator-1` and `clawdinator-2`, replaced Babelfish, and verified only `Fleet Deploy` remains active in GitHub Actions
2026-04-03 15:38:57 +02:00
..
examples feat: control api invoke creds 2026-02-03 11:10:39 +01:00
hosts infra: slim clawdinators aws footprint 2026-04-03 15:38:57 +02:00
modules infra: slim clawdinators aws footprint 2026-04-03 15:38:57 +02:00
tools Add version introspection tool + build info 2026-02-15 15:45:00 -08:00
vendor tools: bump pi-coding-agent to 0.52.6 2026-02-06 09:59:21 -08:00
instances.json infra: slim clawdinators aws footprint 2026-04-03 15:38:57 +02:00
README.md 🔄 rebrand: moltbot → openclaw, clawdinators 2026-01-30 14:30:46 +01:00

Nix/NixOS

This directory holds Nix modules/flakes to configure CLAWDINATOR hosts.

References (local repos on the same machine):

  • ../nix/ai-stack
  • ../nix/nixos-config
  • ../nix/nix-openclaw

Responsibilities:

  • Install and configure clawbot runtime
  • Set up systemd services
  • Mount /var/lib/clawd (shared memory)
  • Inject secrets (Discord token, Anthropic key, GitHub token)

Module:

  • nix/modules/clawdinator.nix provides services.clawdinator
  • Example host config: nix/examples/clawdinator-host.nix
  • Example flake wiring: nix/examples/flake.nix

Hosts:

  • nix/hosts/clawdinator-1.nix is the first host config (templated; no machine-specific secrets)

Secrets:

  • Explicit token files only: discordTokenFile, anthropicApiKeyFile, and either githubPatFile or githubApp.*.

Updates:

  • Tracks github:openclaw/nix-openclaw (latest upstream)
  • Self-update timer available via services.clawdinator.selfUpdate.*