sini/nix-config

---

sini/nix-config.json

{
  "createdAt": "2024-12-17T23:08:32Z",
  "defaultBranch": "main",
  "description": "NixOS Configuration",
  "fullName": "sini/nix-config",
  "homepage": null,
  "language": "Nix",
  "name": "nix-config",
  "pushedAt": "2026-08-01T18:37:50Z",
  "stargazersCount": 35,
  "topics": [],
  "updatedAt": "2026-08-01T18:37:54Z",
  "url": "https://github.com/sini/nix-config"
}

Fleet Topology

Auto-generated visualizations of the nix-config fleet’s aspect-resolution pipeline, scope tree, and data flow.

Scope Topology

graph TD
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_["host: bitstream"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_["host: blade"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_shuo(["user: shuo"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_will(["user: will"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_["host: cortex"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_shuo(["user: shuo"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_will(["user: will"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig_["host: patch"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig_["host: slab"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_["host: axon-01"]
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_["host: axon-02"]
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_["host: axon-03"]
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_["host: uplink"]
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  cluster_axon_environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_["cluster: axon"]
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_[["environment: dev"]]
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_[["environment: prod"]]
  flake_parts_flake_parts_aarch64_darwin_system_aarch64_darwin["flake-parts: flake-parts-aarch64-darwin"]
  flake_parts_flake_parts_aarch64_linux_system_aarch64_linux["flake-parts: flake-parts-aarch64-linux"]
  flake_parts_flake_parts_x86_64_linux_system_x86_64_linux["flake-parts: flake-parts-x86_64-linux"]
  fleet_fleet_secretsConfig__set_secretsConfig_(["fleet: fleet"])
  system_aarch64_darwin["flake-system: system=aarch64-darwin"]
  system_aarch64_linux["flake-system: system=aarch64-linux"]
  system_x86_64_linux["flake-system: system=x86_64-linux"]

  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_vic
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_shuo
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_vic
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_will
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_shuo
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_vic
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_will
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig__user_sini
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig__user_sini
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_vic
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_vic
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_vic
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ --> accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_vic
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ --> cluster_axon_environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_
  fleet_fleet_secretsConfig__set_secretsConfig_ --> environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_
  fleet_fleet_secretsConfig__set_secretsConfig_ --> environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_
  system_aarch64_darwin --> flake_parts_flake_parts_aarch64_darwin_system_aarch64_darwin
  system_aarch64_linux --> flake_parts_flake_parts_aarch64_linux_system_aarch64_linux
  system_x86_64_linux --> flake_parts_flake_parts_x86_64_linux_system_x86_64_linux

  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_shuo fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_will fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_shuo fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_will fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style cluster_axon_environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ fill:#313244,stroke:#313244,color:#1e1e2e
  style environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ fill:#cba6f7,stroke:#cba6f7,color:#1e1e2e
  style environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ fill:#cba6f7,stroke:#cba6f7,color:#1e1e2e
  style flake_parts_flake_parts_aarch64_darwin_system_aarch64_darwin fill:#313244,stroke:#313244,color:#1e1e2e
  style flake_parts_flake_parts_aarch64_linux_system_aarch64_linux fill:#313244,stroke:#313244,color:#1e1e2e
  style flake_parts_flake_parts_x86_64_linux_system_x86_64_linux fill:#313244,stroke:#313244,color:#1e1e2e
  style fleet_fleet_secretsConfig__set_secretsConfig_ fill:#89b4fa,stroke:#89b4fa,color:#1e1e2e
  style system_aarch64_darwin fill:#94e2d5,stroke:#94e2d5,color:#1e1e2e
  style system_aarch64_linux fill:#94e2d5,stroke:#94e2d5,color:#1e1e2e
  style system_x86_64_linux fill:#94e2d5,stroke:#94e2d5,color:#1e1e2e

Policy Resolution

graph TD
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_["host: bitstream"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_["host: blade"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_shuo(["user: shuo"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_will(["user: will"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_["host: cortex"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_shuo(["user: shuo"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_will(["user: will"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig_["host: patch"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig_["host: slab"]
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_["host: axon-01"]
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_["host: axon-02"]
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_["host: axon-03"]
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_["host: uplink"]
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_dvicory(["user: dvicory"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_pol(["user: pol"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_sini(["user: sini"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_theutz(["user: theutz"])
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_vic(["user: vic"])
  cluster_axon_environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_["cluster: axon"]
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_{{"environment: dev"}}
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_{{"environment: prod"}}
  flake_parts_flake_parts_aarch64_darwin_system_aarch64_darwin["flake-parts: flake-parts-aarch64-darwin"]
  flake_parts_flake_parts_aarch64_linux_system_aarch64_linux["flake-parts: flake-parts-aarch64-linux"]
  flake_parts_flake_parts_x86_64_linux_system_x86_64_linux["flake-parts: flake-parts-x86_64-linux"]
  fleet_fleet_secretsConfig__set_secretsConfig_(["fleet: fleet"])
  system_aarch64_darwin["flake-system: system=aarch64-darwin"]
  system_aarch64_linux["flake-system: system=aarch64-linux"]
  system_x86_64_linux["flake-system: system=x86_64-linux"]

  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_vic
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_shuo
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_vic
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_will
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_shuo
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_vic
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_will
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig__user_sini
  environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig__user_sini
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_vic
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_vic
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_vic
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_dvicory
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_pol
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_sini
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_theutz
  accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ -->|collect-bgp-peers, collect-container-registries, collect-host-addrs, collect-k3s-nodes, collect-ollama-endpoints, collect-prometheus-targets, collect-thunderbolt-mesh-peers, collect-vault-peers, env-users, host-modules-capture, host-to-hm-users, os-to-host, drop-user-to-host-on-droid, host-to-droidHm-users, broadcast-hub-peer| accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_vic
  environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ -->|env-to-hosts, env-to-clusters| cluster_axon_environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_
  fleet_fleet_secretsConfig__set_secretsConfig_ -->|fleet-to-envs| environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_
  fleet_fleet_secretsConfig__set_secretsConfig_ -->|fleet-to-envs| environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_
  system_aarch64_darwin -->|apps-to-flake, checks-to-flake, devShells-to-flake, legacyPackages-to-flake, packages-to-flake, system-to-flake-parts| flake_parts_flake_parts_aarch64_darwin_system_aarch64_darwin
  system_aarch64_linux -->|apps-to-flake, checks-to-flake, devShells-to-flake, legacyPackages-to-flake, packages-to-flake, system-to-flake-parts| flake_parts_flake_parts_aarch64_linux_system_aarch64_linux
  system_x86_64_linux -->|apps-to-flake, checks-to-flake, devShells-to-flake, legacyPackages-to-flake, packages-to-flake, system-to-flake-parts| flake_parts_flake_parts_x86_64_linux_system_x86_64_linux

  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_bitstream_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_shuo fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_blade_secretsConfig__set_secretsConfig__user_will fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_shuo fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_cortex_secretsConfig__set_secretsConfig__user_will fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_patch_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_dev_fleet_fleet_host_slab_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_01_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_02_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_axon_03_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig_ fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_dvicory fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_pol fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_sini fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_theutz fill:#fab387,stroke:#fab387,color:#1e1e2e
  style accessGroups__list_accessGroups__environment_prod_fleet_fleet_host_uplink_secretsConfig__set_secretsConfig__user_vic fill:#fab387,stroke:#fab387,color:#1e1e2e
  style cluster_axon_environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ fill:#313244,stroke:#313244,color:#1e1e2e
  style environment_dev_fleet_fleet_secretsConfig__set_secretsConfig_ fill:#cba6f7,stroke:#cba6f7,color:#1e1e2e
  style environment_prod_fleet_fleet_secretsConfig__set_secretsConfig_ fill:#cba6f7,stroke:#cba6f7,color:#1e1e2e
  style flake_parts_flake_parts_aarch64_darwin_system_aarch64_darwin fill:#313244,stroke:#313244,color:#1e1e2e
  style flake_parts_flake_parts_aarch64_linux_system_aarch64_linux fill:#313244,stroke:#313244,color:#1e1e2e
  style flake_parts_flake_parts_x86_64_linux_system_x86_64_linux fill:#313244,stroke:#313244,color:#1e1e2e
  style fleet_fleet_secretsConfig__set_secretsConfig_ fill:#89b4fa,stroke:#89b4fa,color:#1e1e2e
  style system_aarch64_darwin fill:#94e2d5,stroke:#94e2d5,color:#1e1e2e
  style system_aarch64_linux fill:#94e2d5,stroke:#94e2d5,color:#1e1e2e
  style system_x86_64_linux fill:#94e2d5,stroke:#94e2d5,color:#1e1e2e

Pipe Flow

graph LR
  subgraph env_dev["dev"]
    bitstream(["bitstream (core/nix/nixpkgs→nixpkgs-overlays, core/systemd→cache, core/system/firmware→persist, core/security→persist, core/system/linux-kernel→nixpkgs-overlays, applications/shell/zsh→persistHome, core/security/openssh→persist, core/network/hostsfile→host-addrs, core/network/tailscale→age-secrets, core/network/tailscale→persist, secrets/agenix→persist, services/security/acme→age-secrets, services/security/acme→persist, services/security/tang→firewall, services/security/tang→persist, core/boot/network-initrd→age-secrets, core/boot/network-initrd→persist, roles/nix-builder→nix-builders, services/nix/remote-build-server→age-secrets, services/nix/remote-build-server→firewall, hardware/cpu/amd→nixpkgs-overlays)"])
    blade(["blade (core/nix/nixpkgs→nixpkgs-overlays, core/systemd→cache, core/system/firmware→persist, core/security→persist, core/system/linux-kernel→nixpkgs-overlays, applications/shell/zsh→persistHome, core/security/openssh→persist, core/network/hostsfile→host-addrs, core/network/tailscale→age-secrets, core/network/tailscale→persist, secrets/agenix→persist, hardware/audio→persistHome, hardware/bluetooth→persist, desktop/style/stylix→homeManagerModules, desktop/style/stylix→persist, virtualization/libvirt→persist, desktop/gnome→persist, applications/browsers/firefox→cacheHome, applications/browsers/firefox→persistHome, applications/browsers/firefox→stylix-hm, applications/browsers/chromium→cacheHome, applications/browsers/chromium→homebrew-cask, applications/browsers/chromium→persistHome, applications/mail/protonmail→homebrew-cask, applications/productivity/obs-studio→homebrew-cask, applications/gaming/steam→cacheHome, applications/gaming/steam→nixpkgs-overlays, applications/gaming/sunshine→persistHome, applications/dev/ai/claude→cacheHome, applications/dev/ai/claude→persistHome, applications/dev/ai/claude→replicateHome, applications/shell/nix-index→homeManagerModules, applications/dev/editor/nvf→homeManagerModules, applications/dev/security/ssh-agent-mux→nixpkgs-overlays, applications/dev/lang/go→codium-extensions, applications/dev/lang/rust→nixpkgs-overlays, applications/dev/lang/python→codium-extensions, applications/dev/lang/python→codium-settings, applications/dev/lang/nix→codium-extensions, applications/dev/lang/nix→codium-settings, applications/dev/editor/codium/antigravity→persistHome, applications/dev/editor/codium/vscode→persistHome, applications/dev/editor/codium/core→codium-extensions, applications/dev/editor/codium/core→codium-settings, applications/dev/editor/codium/core→nixpkgs-overlays, applications/dev/lang/c→codium-extensions, applications/dev/lang/lua→codium-extensions, applications/dev/lang/lua→codium-settings, applications/dev/lang/markdown→codium-extensions, applications/dev/lang/markdown→codium-settings, applications/dev/lang/shell→codium-extensions, applications/dev/lang/shell→codium-settings, roles/dev-gui/<anon>:11→homebrew-cask, applications/messaging/discord→homeManagerModules, applications/messaging/element→persistHome, applications/messaging/kdeconnect→persistHome, applications/messaging/messenger→persistHome, applications/media/spicetify→firewall, applications/media/spicetify→homeManagerModules, hardware/laptop→persist, hardware/razer→persistHome, core/boot/wireless-initrd→age-secrets, core/boot/network-initrd→age-secrets, core/boot/network-initrd→persist, core/network/manager→cache)"])
    cortex(["cortex (core/nix/nixpkgs→nixpkgs-overlays, core/systemd→cache, core/system/firmware→persist, core/security→persist, core/system/linux-kernel→nixpkgs-overlays, applications/shell/zsh→persistHome, core/security/openssh→persist, core/network/hostsfile→host-addrs, core/network/tailscale→age-secrets, core/network/tailscale→persist, secrets/agenix→persist, hardware/audio→persistHome, hardware/bluetooth→persist, desktop/style/stylix→homeManagerModules, desktop/style/stylix→persist, virtualization/libvirt→persist, desktop/gnome→persist, applications/browsers/firefox→cacheHome, applications/browsers/firefox→persistHome, applications/browsers/firefox→stylix-hm, applications/browsers/chromium→cacheHome, applications/browsers/chromium→homebrew-cask, applications/browsers/chromium→persistHome, applications/mail/protonmail→homebrew-cask, applications/productivity/obs-studio→homebrew-cask, applications/gaming/steam→cacheHome, applications/gaming/steam→nixpkgs-overlays, applications/gaming/sunshine→persistHome, applications/dev/ai/claude→cacheHome, applications/dev/ai/claude→persistHome, applications/dev/ai/claude→replicateHome, applications/shell/nix-index→homeManagerModules, applications/dev/editor/nvf→homeManagerModules, applications/dev/security/ssh-agent-mux→nixpkgs-overlays, applications/dev/lang/go→codium-extensions, applications/dev/lang/rust→nixpkgs-overlays, applications/dev/lang/python→codium-extensions, applications/dev/lang/python→codium-settings, applications/dev/lang/nix→codium-extensions, applications/dev/lang/nix→codium-settings, applications/dev/editor/codium/antigravity→persistHome, applications/dev/editor/codium/vscode→persistHome, applications/dev/editor/codium/core→codium-extensions, applications/dev/editor/codium/core→codium-settings, applications/dev/editor/codium/core→nixpkgs-overlays, applications/dev/lang/c→codium-extensions, applications/dev/lang/lua→codium-extensions, applications/dev/lang/lua→codium-settings, applications/dev/lang/markdown→codium-extensions, applications/dev/lang/markdown→codium-settings, applications/dev/lang/shell→codium-extensions, applications/dev/lang/shell→codium-settings, roles/dev-gui/<anon>:11→homebrew-cask, applications/media/spicetify→firewall, applications/media/spicetify→homeManagerModules, services/ai/ollama→cache, services/ai/ollama→ollama-endpoints, applications/messaging/discord→homeManagerModules, applications/messaging/element→persistHome, applications/messaging/kdeconnect→persistHome, applications/messaging/messenger→persistHome, roles/nix-builder→nix-builders, services/nix/remote-build-server→age-secrets, services/nix/remote-build-server→firewall, hardware/cpu/amd→nixpkgs-overlays, hardware/vr-amd→homeManagerModules, core/boot/network-initrd→age-secrets, core/boot/network-initrd→persist, virtualization/microvm-host→firewall, virtualization/microvm-host→gpu-claims, virtualization/microvm-host→microvm-guests, virtualization/microvm-host→persist, virtualization/windows-vfio→gpu-claims, virtualization/podman→cache, virtualization/podman→cacheHome, virtualization/containers→age-secrets, applications/media/easyeffects→persistHome)"])
    patch(["patch (core/nix/nixpkgs→nixpkgs-overlays, core/systemd→cache, core/system/firmware→persist, core/security→persist, core/system/linux-kernel→nixpkgs-overlays, applications/shell/zsh→persistHome, core/security/openssh→persist, core/network/hostsfile→host-addrs, core/network/tailscale→age-secrets, core/network/tailscale→persist, secrets/agenix→persist, applications/dev/ai/claude→cacheHome, applications/dev/ai/claude→persistHome, applications/dev/ai/claude→replicateHome, applications/shell/nix-index→homeManagerModules, applications/dev/editor/nvf→homeManagerModules, applications/dev/security/ssh-agent-mux→nixpkgs-overlays, applications/dev/lang/go→codium-extensions, applications/dev/lang/rust→nixpkgs-overlays, applications/dev/lang/python→codium-extensions, applications/dev/lang/python→codium-settings, applications/dev/lang/nix→codium-extensions, applications/dev/lang/nix→codium-settings, desktop/style/stylix→homeManagerModules, desktop/style/stylix→persist, macos/applications/karabiner→homebrew-cask, macos/applications/raycast→homebrew-cask, applications/browsers/firefox→cacheHome, applications/browsers/firefox→persistHome, applications/browsers/firefox→stylix-hm, applications/browsers/chromium→cacheHome, applications/browsers/chromium→homebrew-cask, applications/browsers/chromium→persistHome, applications/dev/editor/codium/vscode→persistHome, applications/dev/editor/codium/core→codium-extensions, applications/dev/editor/codium/core→codium-settings, applications/dev/editor/codium/core→nixpkgs-overlays, applications/dev/lang/c→codium-extensions, applications/dev/lang/lua→codium-extensions, applications/dev/lang/lua→codium-settings, applications/dev/lang/markdown→codium-extensions, applications/dev/lang/markdown→codium-settings, applications/dev/lang/shell→codium-extensions, applications/dev/lang/shell→codium-settings, applications/dev/git/gitkraken/{gitkraken@user=sini}→homeManagerModules, applications/dev/git/gitkraken/{gitkraken@user=sini}→homebrew-cask, applications/dev/git/gitkraken/{gitkraken@user=sini}→persistHome, roles/darwin-workstation/<anon>:31→homebrew-cask, applications/productivity/obs-studio→homebrew-cask, applications/mail/protonmail→homebrew-cask)"])
    slab(["slab (applications/dev/ai/claude→cacheHome, applications/dev/ai/claude→persistHome, applications/dev/ai/claude→replicateHome, applications/shell/nix-index→homeManagerModules, applications/dev/editor/nvf→homeManagerModules, applications/dev/security/ssh-agent-mux→nixpkgs-overlays, applications/dev/lang/go→codium-extensions, applications/dev/lang/rust→nixpkgs-overlays, applications/dev/lang/python→codium-extensions, applications/dev/lang/python→codium-settings, applications/dev/lang/nix→codium-extensions, applications/dev/lang/nix→codium-settings, applications/shell/zsh→persistHome)"])
  end
  subgraph env_prod["prod"]
    axon_01(["axon-01 (core/nix/nixpkgs→nixpkgs-overlays, core/systemd→cache, core/system/firmware→persist, core/security→persist, core/system/linux-kernel→nixpkgs-overlays, applications/shell/zsh→persistHome, core/security/openssh→persist, core/network/hostsfile→host-addrs, core/network/tailscale→age-secrets, core/network/tailscale→persist, secrets/agenix→persist, core/boot/network-initrd→age-secrets, core/boot/network-initrd→persist, services/security/acme→age-secrets, services/security/acme→persist, services/security/tang→firewall, services/security/tang→persist, roles/nix-builder→nix-builders, services/nix/remote-build-server→age-secrets, services/nix/remote-build-server→firewall, services/bgp→bgp-peers, services/bgp→firewall, services/k3s→age-secrets, services/k3s→k3s-nodes, services/k3s→persist, services/k3s/containerd→persist, services/storage/media-scratch→cache, services/storage/media-scratch→media-scratch-exports, hardware/cpu/amd→nixpkgs-overlays, services/networking/thunderbolt-mesh-of→thunderbolt-mesh-peers)"])
    axon_02(["axon-02 (core/nix/nixpkgs→nixpkgs-overlays, core/systemd→cache, core/system/firmware→persist, core/security→persist, core/system/linux-kernel→nixpkgs-overlays, applications/shell/zsh→persistHome, core/security/openssh→persist, core/network/hostsfile→host-addrs, core/network/tailscale→age-secrets, core/network/tailscale→persist, secrets/agenix→persist, core/boot/network-initrd→age-secrets, core/boot/network-initrd→persist, services/security/acme→age-secrets, services/security/acme→persist, services/security/tang→firewall, services/security/tang→persist, roles/nix-builder→nix-builders, services/nix/remote-build-server→age-secrets, services/nix/remote-build-server→firewall, services/bgp→bgp-peers, services/bgp→firewall, services/k3s→age-secrets, services/k3s→k3s-nodes, services/k3s→persist, services/k3s/containerd→persist, hardware/cpu/amd→nixpkgs-overlays, services/networking/thunderbolt-mesh-of→thunderbolt-mesh-peers)"])
    axon_03(["axon-03 (core/nix/nixpkgs→nixpkgs-overlays, core/systemd→cache, core/system/firmware→persist, core/security→persist, core/system/linux-kernel→nixpkgs-overlays, applications/shell/zsh→persistHome, core/security/openssh→persist, core/network/hostsfile→host-addrs, core/network/tailscale→age-secrets, core/network/tailscale→persist, secrets/agenix→persist, core/boot/network-initrd→age-secrets, core/boot/network-initrd→persist, services/security/acme→age-secrets, services/security/acme→persist, services/security/tang→firewall, services/security/tang→persist, roles/nix-builder→nix-builders, services/nix/remote-build-server→age-secrets, services/nix/remote-build-server→firewall, services/bgp→bgp-peers, services/bgp→firewall, services/k3s→age-secrets, services/k3s→k3s-nodes, services/k3s→persist, services/k3s/containerd→persist, hardware/cpu/amd→nixpkgs-overlays, services/networking/thunderbolt-mesh-of→thunderbolt-mesh-peers)"])
    uplink(["uplink (core/nix/nixpkgs→nixpkgs-overlays, core/systemd→cache, core/system/firmware→persist, core/security→persist, core/system/linux-kernel→nixpkgs-overlays, applications/shell/zsh→persistHome, core/security/openssh→persist, core/network/hostsfile→host-addrs, core/network/tailscale→age-secrets, core/network/tailscale→persist, secrets/agenix→persist, core/boot/network-initrd→age-secrets, core/boot/network-initrd→persist, services/security/acme→age-secrets, services/security/acme→persist, services/security/tang→firewall, services/security/tang→persist, roles/nix-builder→nix-builders, services/nix/remote-build-server→age-secrets, services/nix/remote-build-server→firewall, services/monitoring/prometheus→firewall, services/monitoring/prometheus→persist, services/monitoring/prometheus→prometheus-targets, services/monitoring/prometheus→service-domains, services/monitoring/loki→firewall, services/monitoring/loki→persist, services/monitoring/loki→service-domains, services/monitoring/grafana→age-secrets, services/monitoring/grafana→persist, services/monitoring/grafana→service-domains, services/bgp→bgp-peers, services/bgp→firewall, services/networking/headscale→age-secrets, services/networking/headscale→firewall, services/networking/headscale→persist, services/networking/headscale→prometheus-targets, services/networking/headscale→service-domains, services/networking/nginx→firewall, services/networking/nginx→persist, services/networking/nginx→prometheus-targets, services/security/kanidm→age-secrets, services/security/kanidm→firewall, services/security/kanidm→persist, services/security/kanidm→service-domains, services/networking/haproxy→firewall, services/media/jellyfin→firewall, services/media/jellyfin→persist, services/media/jellyfin→service-domains, services/web/homepage→service-domains, services/security/oauth2-proxy→age-secrets, services/security/oauth2-proxy→service-domains, services/ai/ollama→cache, services/ai/ollama→ollama-endpoints, services/ai/open-webui→age-secrets, services/ai/open-webui→persist, services/ai/open-webui→service-domains, services/nix/attic→age-secrets, services/nix/attic→cache, services/nix/attic→service-domains, core/network/syncthing/hub→persist, core/network/syncthing/hub→syncthing-peers, services/web/den-docs-mirror→persist, services/web/den-docs-mirror→service-domains, services/web/container-registry→age-secrets, services/web/container-registry→container-registries, services/web/container-registry→persist, virtualization/podman→cache, virtualization/podman→cacheHome, virtualization/containers→age-secrets, hardware/cpu/amd→nixpkgs-overlays)"])
  end

  cortex -->|ollama-endpoints| bitstream
  cortex -->|ollama-endpoints| blade
  cortex -->|ollama-endpoints| patch
  cortex -->|ollama-endpoints| slab
  uplink -->|ollama-endpoints| axon_01
  uplink -->|ollama-endpoints| axon_02
  uplink -->|ollama-endpoints| axon_03
  axon_02 -->|bgp-peers| axon_01
  axon_03 -->|bgp-peers| axon_01
  uplink -->|bgp-peers| axon_01
  axon_01 -->|bgp-peers| axon_02
  axon_03 -->|bgp-peers| axon_02
  uplink -->|bgp-peers| axon_02
  axon_01 -->|bgp-peers| axon_03
  axon_02 -->|bgp-peers| axon_03
  uplink -->|bgp-peers| axon_03
  axon_01 -->|bgp-peers| uplink
  axon_02 -->|bgp-peers| uplink
  axon_03 -->|bgp-peers| uplink
  uplink -->|container-registries| axon_01
  uplink -->|container-registries| axon_02
  uplink -->|container-registries| axon_03
  axon_01 -->|k3s-nodes| uplink
  axon_02 -->|k3s-nodes| uplink
  axon_03 -->|k3s-nodes| uplink
  uplink -->|prometheus-targets| axon_01
  uplink -->|prometheus-targets| axon_02
  uplink -->|prometheus-targets| axon_03
  axon_01 -->|thunderbolt-mesh-peers| uplink
  axon_02 -->|thunderbolt-mesh-peers| uplink
  axon_03 -->|thunderbolt-mesh-peers| uplink

  linkStyle 0 stroke:#f38ba8,stroke-width:2px
  linkStyle 1 stroke:#f38ba8,stroke-width:2px
  linkStyle 2 stroke:#f38ba8,stroke-width:2px
  linkStyle 3 stroke:#f38ba8,stroke-width:2px
  linkStyle 4 stroke:#f38ba8,stroke-width:2px
  linkStyle 5 stroke:#f38ba8,stroke-width:2px
  linkStyle 6 stroke:#f38ba8,stroke-width:2px
  linkStyle 7 stroke:#a6e3a1,stroke-width:2px
  linkStyle 8 stroke:#a6e3a1,stroke-width:2px
  linkStyle 9 stroke:#a6e3a1,stroke-width:2px
  linkStyle 10 stroke:#a6e3a1,stroke-width:2px
  linkStyle 11 stroke:#a6e3a1,stroke-width:2px
  linkStyle 12 stroke:#a6e3a1,stroke-width:2px
  linkStyle 13 stroke:#a6e3a1,stroke-width:2px
  linkStyle 14 stroke:#a6e3a1,stroke-width:2px
  linkStyle 15 stroke:#a6e3a1,stroke-width:2px
  linkStyle 16 stroke:#a6e3a1,stroke-width:2px
  linkStyle 17 stroke:#a6e3a1,stroke-width:2px
  linkStyle 18 stroke:#a6e3a1,stroke-width:2px
  linkStyle 19 stroke:#cba6f7,stroke-width:2px
  linkStyle 20 stroke:#cba6f7,stroke-width:2px
  linkStyle 21 stroke:#cba6f7,stroke-width:2px
  linkStyle 22 stroke:#fab387,stroke-width:2px
  linkStyle 23 stroke:#fab387,stroke-width:2px
  linkStyle 24 stroke:#fab387,stroke-width:2px
  linkStyle 25 stroke:#94e2d5,stroke-width:2px
  linkStyle 26 stroke:#94e2d5,stroke-width:2px
  linkStyle 27 stroke:#94e2d5,stroke-width:2px
  linkStyle 28 stroke:#f2cdcd,stroke-width:2px
  linkStyle 29 stroke:#f2cdcd,stroke-width:2px
  linkStyle 30 stroke:#f2cdcd,stroke-width:2px

  style bitstream fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style blade fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style cortex fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style patch fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style slab fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style axon_01 fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style axon_02 fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style axon_03 fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style uplink fill:#a6e3a1,stroke:#a6e3a1,color:#1e1e2e
  style env_dev fill:transparent,stroke:#6c7086,stroke-width:1px
  style env_prod fill:transparent,stroke:#6c7086,stroke-width:1px

Pipe Sequence

sequenceDiagram
    box dev
    participant bitstream as bitstream
    participant blade as blade
    participant cortex as cortex
    participant patch as patch
    participant slab as slab
    end
    box prod
    participant axon_01 as axon-01
    participant axon_02 as axon-02
    participant axon_03 as axon-03
    participant uplink as uplink
    end

    Note over axon_01: core/nix/nixpkgs, core/system/linux-kernel, hardware/cpu/amd → nixpkgs-overlays
    Note over axon_02: core/nix/nixpkgs, core/system/linux-kernel, hardware/cpu/amd → nixpkgs-overlays
    Note over axon_03: core/nix/nixpkgs, core/system/linux-kernel, hardware/cpu/amd → nixpkgs-overlays
    Note over bitstream: core/nix/nixpkgs, core/system/linux-kernel, hardware/cpu/amd → nixpkgs-overlays
    Note over blade: core/nix/nixpkgs, core/system/linux-kernel, applications/gaming/steam, applications/dev/security/ssh-agent-mux, applications/dev/lang/rust, applications/dev/editor/codium/core → nixpkgs-overlays
    Note over cortex: core/nix/nixpkgs, core/system/linux-kernel, applications/gaming/steam, applications/dev/security/ssh-agent-mux, applications/dev/lang/rust, applications/dev/editor/codium/core, hardware/cpu/amd → nixpkgs-overlays
    Note over patch: core/nix/nixpkgs, core/system/linux-kernel, applications/dev/security/ssh-agent-mux, applications/dev/lang/rust, applications/dev/editor/codium/core → nixpkgs-overlays
    Note over slab: applications/dev/security/ssh-agent-mux, applications/dev/lang/rust → nixpkgs-overlays
    Note over uplink: core/nix/nixpkgs, core/system/linux-kernel, hardware/cpu/amd → nixpkgs-overlays

    Note over axon_01: core/systemd, services/storage/media-scratch → cache
    Note over axon_02: core/systemd → cache
    Note over axon_03: core/systemd → cache
    Note over bitstream: core/systemd → cache
    Note over blade: core/systemd, core/network/manager → cache
    Note over cortex: core/systemd, services/ai/ollama, virtualization/podman → cache
    Note over patch: core/systemd → cache
    Note over uplink: core/systemd, services/ai/ollama, services/nix/attic, virtualization/podman → cache

    Note over axon_01: core/system/firmware, core/security, core/security/openssh, core/network/tailscale, secrets/agenix, core/boot/network-initrd, services/security/acme, services/security/tang, services/k3s, services/k3s/containerd → persist
    Note over axon_02: core/system/firmware, core/security, core/security/openssh, core/network/tailscale, secrets/agenix, core/boot/network-initrd, services/security/acme, services/security/tang, services/k3s, services/k3s/containerd → persist
    Note over axon_03: core/system/firmware, core/security, core/security/openssh, core/network/tailscale, secrets/agenix, core/boot/network-initrd, services/security/acme, services/security/tang, services/k3s, services/k3s/containerd → persist
    Note over bitstream: core/system/firmware, core/security, core/security/openssh, core/network/tailscale, secrets/agenix, services/security/acme, services/security/tang, core/boot/network-initrd → persist
    Note over blade: core/system/firmware, core/security, core/security/openssh, core/network/tailscale, secrets/agenix, hardware/bluetooth, desktop/style/stylix, virtualization/libvirt, desktop/gnome, hardware/laptop, core/boot/network-initrd → persist
    Note over cortex: core/system/firmware, core/security, core/security/openssh, core/network/tailscale, secrets/agenix, hardware/bluetooth, desktop/style/stylix, virtualization/libvirt, desktop/gnome, core/boot/network-initrd, virtualization/microvm-host → persist
    Note over patch: core/system/firmware, core/security, core/security/openssh, core/network/tailscale, secrets/agenix, desktop/style/stylix → persist
    Note over uplink: core/system/firmware, core/security, core/security/openssh, core/network/tailscale, secrets/agenix, core/boot/network-initrd, services/security/acme, services/security/tang, services/monitoring/prometheus, services/monitoring/loki, services/monitoring/grafana, services/networking/headscale, services/networking/nginx, services/security/kanidm, services/media/jellyfin, services/ai/open-webui, core/network/syncthing/hub, services/web/den-docs-mirror, services/web/container-registry → persist

    Note over axon_01: applications/shell/zsh → persistHome
    Note over axon_02: applications/shell/zsh → persistHome
    Note over axon_03: applications/shell/zsh → persistHome
    Note over bitstream: applications/shell/zsh → persistHome
    Note over blade: applications/shell/zsh, hardware/audio, applications/browsers/firefox, applications/browsers/chromium, applications/gaming/sunshine, applications/dev/ai/claude, applications/dev/editor/codium/antigravity, applications/dev/editor/codium/vscode, applications/messaging/element, applications/messaging/kdeconnect, applications/messaging/messenger, hardware/razer → persistHome
    Note over cortex: applications/shell/zsh, hardware/audio, applications/browsers/firefox, applications/browsers/chromium, applications/gaming/sunshine, applications/dev/ai/claude, applications/dev/editor/codium/antigravity, applications/dev/editor/codium/vscode, applications/messaging/element, applications/messaging/kdeconnect, applications/messaging/messenger, applications/media/easyeffects → persistHome
    Note over patch: applications/shell/zsh, applications/dev/ai/claude, applications/browsers/firefox, applications/browsers/chromium, applications/dev/editor/codium/vscode, applications/dev/git/gitkraken/{gitkraken@user=sini} → persistHome
    Note over slab: applications/dev/ai/claude, applications/shell/zsh → persistHome
    Note over uplink: applications/shell/zsh → persistHome

    Note over axon_01: core/network/hostsfile → host-addrs
    Note over axon_02: core/network/hostsfile → host-addrs
    Note over axon_03: core/network/hostsfile → host-addrs
    Note over bitstream: core/network/hostsfile → host-addrs
    Note over blade: core/network/hostsfile → host-addrs
    Note over cortex: core/network/hostsfile → host-addrs
    Note over patch: core/network/hostsfile → host-addrs
    Note over uplink: core/network/hostsfile → host-addrs

    Note over axon_01: core/network/tailscale, core/boot/network-initrd, services/security/acme, services/nix/remote-build-server, services/k3s → age-secrets
    Note over axon_02: core/network/tailscale, core/boot/network-initrd, services/security/acme, services/nix/remote-build-server, services/k3s → age-secrets
    Note over axon_03: core/network/tailscale, core/boot/network-initrd, services/security/acme, services/nix/remote-build-server, services/k3s → age-secrets
    Note over bitstream: core/network/tailscale, services/security/acme, core/boot/network-initrd, services/nix/remote-build-server → age-secrets
    Note over blade: core/network/tailscale, core/boot/wireless-initrd, core/boot/network-initrd → age-secrets
    Note over cortex: core/network/tailscale, services/nix/remote-build-server, core/boot/network-initrd, virtualization/containers → age-secrets
    Note over patch: core/network/tailscale → age-secrets
    Note over uplink: core/network/tailscale, core/boot/network-initrd, services/security/acme, services/nix/remote-build-server, services/monitoring/grafana, services/networking/headscale, services/security/kanidm, services/security/oauth2-proxy, services/ai/open-webui, services/nix/attic, services/web/container-registry, virtualization/containers → age-secrets

    Note over blade: applications/browsers/firefox, applications/browsers/chromium, applications/gaming/steam, applications/dev/ai/claude → cacheHome
    Note over cortex: applications/browsers/firefox, applications/browsers/chromium, applications/gaming/steam, applications/dev/ai/claude, virtualization/podman → cacheHome
    Note over patch: applications/dev/ai/claude, applications/browsers/firefox, applications/browsers/chromium → cacheHome
    Note over slab: applications/dev/ai/claude → cacheHome
    Note over uplink: virtualization/podman → cacheHome

    Note over blade: applications/dev/ai/claude → replicateHome
    Note over cortex: applications/dev/ai/claude → replicateHome
    Note over patch: applications/dev/ai/claude → replicateHome
    Note over slab: applications/dev/ai/claude → replicateHome

    Note over axon_01: agenix-identity/dvicory@axon-01, agenix-identity/pol@axon-01, agenix-identity/sini@axon-01, agenix-identity/theutz@axon-01, agenix-identity/vic@axon-01 → homeManagerModules
    Note over axon_02: agenix-identity/dvicory@axon-02, agenix-identity/pol@axon-02, agenix-identity/sini@axon-02, agenix-identity/theutz@axon-02, agenix-identity/vic@axon-02 → homeManagerModules
    Note over axon_03: agenix-identity/dvicory@axon-03, agenix-identity/pol@axon-03, agenix-identity/sini@axon-03, agenix-identity/theutz@axon-03, agenix-identity/vic@axon-03 → homeManagerModules
    Note over bitstream: agenix-identity/dvicory@bitstream, agenix-identity/pol@bitstream, agenix-identity/sini@bitstream, agenix-identity/theutz@bitstream, agenix-identity/vic@bitstream → homeManagerModules
    Note over blade: desktop/style/stylix, applications/shell/nix-index, applications/dev/editor/nvf, applications/messaging/discord, applications/media/spicetify, agenix-identity/shuo@blade, agenix-identity/sini@blade, agenix-identity/vic@blade, agenix-identity/will@blade → homeManagerModules
    Note over cortex: desktop/style/stylix, applications/shell/nix-index, applications/dev/editor/nvf, applications/media/spicetify, applications/messaging/discord, hardware/vr-amd, agenix-identity/shuo@cortex, agenix-identity/sini@cortex, agenix-identity/vic@cortex, agenix-identity/will@cortex → homeManagerModules
    Note over patch: applications/shell/nix-index, applications/dev/editor/nvf, desktop/style/stylix, applications/dev/git/gitkraken/{gitkraken@user=sini}, agenix-identity/sini@patch → homeManagerModules
    Note over slab: applications/shell/nix-index, applications/dev/editor/nvf, agenix-identity/sini@slab → homeManagerModules
    Note over uplink: agenix-identity/dvicory@uplink, agenix-identity/pol@uplink, agenix-identity/sini@uplink, agenix-identity/theutz@uplink, agenix-identity/vic@uplink → homeManagerModules

    Note over blade: applications/dev/lang/go, applications/dev/lang/python, applications/dev/lang/nix, applications/dev/editor/codium/core, applications/dev/lang/c, applications/dev/lang/lua, applications/dev/lang/markdown, applications/dev/lang/shell → codium-extensions
    Note over cortex: applications/dev/lang/go, applications/dev/lang/python, applications/dev/lang/nix, applications/dev/editor/codium/core, applications/dev/lang/c, applications/dev/lang/lua, applications/dev/lang/markdown, applications/dev/lang/shell → codium-extensions
    Note over patch: applications/dev/lang/go, applications/dev/lang/python, applications/dev/lang/nix, applications/dev/editor/codium/core, applications/dev/lang/c, applications/dev/lang/lua, applications/dev/lang/markdown, applications/dev/lang/shell → codium-extensions
    Note over slab: applications/dev/lang/go, applications/dev/lang/python, applications/dev/lang/nix → codium-extensions

    Note over blade: applications/dev/lang/python, applications/dev/lang/nix, applications/dev/editor/codium/core, applications/dev/lang/lua, applications/dev/lang/markdown, applications/dev/lang/shell → codium-settings
    Note over cortex: applications/dev/lang/python, applications/dev/lang/nix, applications/dev/editor/codium/core, applications/dev/lang/lua, applications/dev/lang/markdown, applications/dev/lang/shell → codium-settings
    Note over patch: applications/dev/lang/python, applications/dev/lang/nix, applications/dev/editor/codium/core, applications/dev/lang/lua, applications/dev/lang/markdown, applications/dev/lang/shell → codium-settings
    Note over slab: applications/dev/lang/python, applications/dev/lang/nix → codium-settings

    Note over blade: applications/browsers/chromium, applications/mail/protonmail, applications/productivity/obs-studio, roles/dev-gui/<anon>:11 → homebrew-cask
    Note over cortex: applications/browsers/chromium, applications/mail/protonmail, applications/productivity/obs-studio, roles/dev-gui/<anon>:11 → homebrew-cask
    Note over patch: macos/applications/karabiner, macos/applications/raycast, applications/browsers/chromium, applications/dev/git/gitkraken/{gitkraken@user=sini}, roles/darwin-workstation/<anon>:31, applications/productivity/obs-studio, applications/mail/protonmail → homebrew-cask

    Note over blade: applications/browsers/firefox → stylix-hm
    Note over cortex: applications/browsers/firefox → stylix-hm
    Note over patch: applications/browsers/firefox → stylix-hm

    Note over axon_01: core/users/resolved-user-emitter → resolved-users
    Note over axon_02: core/users/resolved-user-emitter → resolved-users
    Note over axon_03: core/users/resolved-user-emitter → resolved-users
    Note over bitstream: core/users/resolved-user-emitter → resolved-users
    Note over blade: core/users/resolved-user-emitter → resolved-users
    Note over cortex: core/users/resolved-user-emitter → resolved-users
    Note over patch: core/users/resolved-user-emitter → resolved-users
    Note over slab: core/users/resolved-user-emitter → resolved-users
    Note over uplink: core/users/resolved-user-emitter → resolved-users

    Note over axon_01: core/network/syncthing/peer → syncthing-peers
    Note over axon_02: core/network/syncthing/peer → syncthing-peers
    Note over axon_03: core/network/syncthing/peer → syncthing-peers
    Note over bitstream: core/network/syncthing/peer → syncthing-peers
    Note over blade: core/network/syncthing/peer → syncthing-peers
    Note over cortex: core/network/syncthing/peer → syncthing-peers
    Note over patch: core/network/syncthing/peer → syncthing-peers
    Note over slab: core/network/syncthing/peer → syncthing-peers
    Note over uplink: core/network/syncthing/hub, core/network/syncthing/peer → syncthing-peers

    Note over axon_01: services/security/tang, services/nix/remote-build-server, services/bgp → firewall
    Note over axon_02: services/security/tang, services/nix/remote-build-server, services/bgp → firewall
    Note over axon_03: services/security/tang, services/nix/remote-build-server, services/bgp → firewall
    Note over bitstream: services/security/tang, services/nix/remote-build-server → firewall
    Note over blade: applications/media/spicetify → firewall
    Note over cortex: applications/media/spicetify, services/nix/remote-build-server, virtualization/microvm-host → firewall
    Note over uplink: services/security/tang, services/nix/remote-build-server, services/monitoring/prometheus, services/monitoring/loki, services/bgp, services/networking/headscale, services/networking/nginx, services/security/kanidm, services/networking/haproxy, services/media/jellyfin → firewall

    Note over axon_01: roles/nix-builder → nix-builders
    Note over axon_02: roles/nix-builder → nix-builders
    Note over axon_03: roles/nix-builder → nix-builders
    Note over bitstream: roles/nix-builder → nix-builders
    Note over cortex: roles/nix-builder → nix-builders
    Note over uplink: roles/nix-builder → nix-builders

    Note over cortex: services/ai/ollama → ollama-endpoints
    Note over uplink: services/ai/ollama → ollama-endpoints
    cortex -->> bitstream: ollama-endpoints
    cortex -->> blade: ollama-endpoints
    cortex -->> patch: ollama-endpoints
    cortex -->> slab: ollama-endpoints
    uplink -->> axon_01: ollama-endpoints
    uplink -->> axon_02: ollama-endpoints
    uplink -->> axon_03: ollama-endpoints

    Note over cortex: virtualization/microvm-host, virtualization/windows-vfio → gpu-claims

    Note over cortex: virtualization/microvm-host → microvm-guests

    Note over uplink: services/monitoring/prometheus, services/monitoring/loki, services/monitoring/grafana, services/networking/headscale, services/security/kanidm, services/media/jellyfin, services/web/homepage, services/security/oauth2-proxy, services/ai/open-webui, services/nix/attic, services/web/den-docs-mirror → service-domains

    Note over axon_01: services/bgp → bgp-peers
    Note over axon_02: services/bgp → bgp-peers
    Note over axon_03: services/bgp → bgp-peers
    Note over uplink: services/bgp → bgp-peers
    axon_02 -->> axon_01: bgp-peers
    axon_03 -->> axon_01: bgp-peers
    uplink -->> axon_01: bgp-peers
    axon_01 -->> axon_02: bgp-peers
    axon_03 -->> axon_02: bgp-peers
    uplink -->> axon_02: bgp-peers
    axon_01 -->> axon_03: bgp-peers
    axon_02 -->> axon_03: bgp-peers
    uplink -->> axon_03: bgp-peers
    axon_01 -->> uplink: bgp-peers
    axon_02 -->> uplink: bgp-peers
    axon_03 -->> uplink: bgp-peers

    Note over axon_01: services/k3s → k3s-nodes
    Note over axon_02: services/k3s → k3s-nodes
    Note over axon_03: services/k3s → k3s-nodes
    axon_01 -->> uplink: k3s-nodes
    axon_02 -->> uplink: k3s-nodes
    axon_03 -->> uplink: k3s-nodes

    Note over axon_01: services/storage/media-scratch → media-scratch-exports

    Note over axon_01: services/networking/thunderbolt-mesh-of → thunderbolt-mesh-peers
    Note over axon_02: services/networking/thunderbolt-mesh-of → thunderbolt-mesh-peers
    Note over axon_03: services/networking/thunderbolt-mesh-of → thunderbolt-mesh-peers
    axon_01 -->> uplink: thunderbolt-mesh-peers
    axon_02 -->> uplink: thunderbolt-mesh-peers
    axon_03 -->> uplink: thunderbolt-mesh-peers

    Note over uplink: services/monitoring/prometheus, services/networking/headscale, services/networking/nginx → prometheus-targets
    uplink -->> axon_01: prometheus-targets
    uplink -->> axon_02: prometheus-targets
    uplink -->> axon_03: prometheus-targets

    Note over uplink: services/web/container-registry → container-registries
    uplink -->> axon_01: container-registries
    uplink -->> axon_02: container-registries
    uplink -->> axon_03: container-registries

Fleet Summary

Fleet Summary

Topology

• 2 environments, 9 hosts, 35 users
• Scope chain: flake → fleet → cluster → user → host → environment → flake-system → flake-parts
• Trace entries: 3500

Environments

Environment	Hosts	Host Count	Users
dev	bitstream, blade, cortex, patch, slab	5	15
prod	axon-01, axon-02, axon-03, uplink	4	20

Aspects by Host

Host	Aspect Count	Aspects
bitstream	4	agenix/bitstream, bitstream, insecure-predicate/os, unfree-predicate/os
blade	5	agenix/blade, blade, host/resolve(dev-gui), insecure-predicate/os, unfree-predicate/os
cortex	5	agenix/cortex, cortex, host/resolve(dev-gui), insecure-predicate/os, unfree-predicate/os
patch	1	host/resolve(darwin-workstation)
slab	0
axon-01	4	agenix/axon-01, axon-01, insecure-predicate/os, unfree-predicate/os
axon-02	4	agenix/axon-02, axon-02, insecure-predicate/os, unfree-predicate/os
axon-03	4	agenix/axon-03, axon-03, insecure-predicate/os, unfree-predicate/os
uplink	4	agenix/uplink, insecure-predicate/os, unfree-predicate/os, uplink

Pipes

Pipe	Scope Boundary	Producers	Collectors
age-secrets	environment: dev	bitstream, blade, cortex, patch
age-secrets	environment: prod	axon-01, axon-02, axon-03, uplink
cache	environment: dev	bitstream, blade, cortex, patch
cache	environment: prod	axon-01, axon-02, axon-03, uplink
firewall	environment: dev	bitstream, blade, cortex
firewall	environment: prod	axon-01, axon-02, axon-03, uplink
homeLinux	environment: dev	bitstream, blade, cortex, patch, slab
homeLinux	environment: prod	axon-01, axon-02, axon-03, uplink
host-addrs	environment: dev	bitstream, blade, cortex, patch
host-addrs	environment: prod	axon-01, axon-02, axon-03, uplink
nix-builders	environment: dev	bitstream, cortex
nix-builders	environment: prod	axon-01, axon-02, axon-03, uplink
nixpkgs-overlays	environment: dev	bitstream, blade, cortex, patch, slab
nixpkgs-overlays	environment: prod	axon-01, axon-02, axon-03, uplink
os	environment: dev	bitstream, blade, cortex, patch, slab
os	environment: prod	axon-01, axon-02, axon-03, uplink
persist	environment: dev	bitstream, blade, cortex, patch
persist	environment: prod	axon-01, axon-02, axon-03, uplink
persistHome	environment: dev	bitstream, blade, cortex, patch, slab
persistHome	environment: prod	axon-01, axon-02, axon-03, uplink
bgp-peers	environment: dev		bitstream, blade, cortex, patch, slab
bgp-peers	environment: prod	axon-01, axon-02, axon-03, uplink	axon-01, axon-02, axon-03, uplink
container-registries	environment: dev		bitstream, blade, cortex, patch, slab
container-registries	environment: prod	uplink	axon-01, axon-02, axon-03
k3s-nodes	environment: dev		bitstream, blade, cortex, patch, slab
k3s-nodes	environment: prod	axon-01, axon-02, axon-03	uplink
ollama-endpoints	environment: dev	cortex	bitstream, blade, patch, slab
ollama-endpoints	environment: prod	uplink	axon-01, axon-02, axon-03
prometheus-targets	environment: dev		bitstream, blade, cortex, patch, slab
prometheus-targets	environment: prod	uplink	axon-01, axon-02, axon-03
thunderbolt-mesh-peers	environment: dev		bitstream, blade, cortex, patch, slab
thunderbolt-mesh-peers	environment: prod	axon-01, axon-02, axon-03	uplink
vault-peers	environment: dev		bitstream, blade, cortex, patch, slab
vault-peers	environment: prod		axon-01, axon-02, axon-03, uplink
cacheHome	environment: dev	blade, cortex, patch, slab
cacheHome	environment: prod	uplink
codium-extensions	environment: dev	blade, cortex, patch, slab
codium-settings	environment: dev	blade, cortex, patch, slab
homeDarwin	environment: dev	blade, cortex, patch, slab
homeManagerModules	environment: dev	blade, cortex, patch, slab
homebrew-cask	environment: dev	blade, cortex, patch
replicateHome	environment: dev	blade, cortex, patch, slab
stylix-hm	environment: dev	blade, cortex, patch
gpu-claims	environment: dev	cortex
microvm-guests	environment: dev	cortex
droid	environment: dev	slab
media-scratch-exports	environment: prod	axon-01
service-domains	environment: prod	uplink
syncthing-peers	environment: prod	uplink

Policies

Policy	Fires at
flake-to-systems	flake
to-fleet	flake
apps-to-flake	flake-system
checks-to-flake	flake-system
devShells-to-flake	flake-system
legacyPackages-to-flake	flake-system
packages-to-flake	flake-system
system-to-flake-parts	flake-system
devshell-to-flake-parts	flake-parts
fleet-to-envs	fleet
env-to-hosts	environment
collect-bgp-peers	host
collect-container-registries	host
collect-host-addrs	host
collect-k3s-nodes	host
collect-ollama-endpoints	host
collect-prometheus-targets	host
collect-thunderbolt-mesh-peers	host
collect-vault-peers	host
env-users	host
host-modules-capture	host
host-to-hm-users	host
os-to-host	host
broadcast-syncthing-hub-shares	user
broadcast-syncthing-peers	user
broadcast-syncthing-peers-to-hub	user
expose-resolved-users	user
hm-user-detect	user
homeAarch64-to-hm	user
homeDarwin-to-hm	user
host-aspects-project	user
primary-user-for-owner	user
user-to-host	user
drop-user-to-host-on-droid	host
host-to-droidHm-users	host
droidHm-user-detect	user
homeLinux-to-hm	user
user-aspect-auto-include	user
env-to-clusters	environment
cluster-aspect	cluster
cluster-collect-container-registries	cluster
cluster-collect-k3s-nodes	cluster
cluster-collect-media-scratch-exports	cluster
cluster-to-nixidy	cluster
broadcast-hub-peer	host