From ce6510dd601578eb3af1449c379425526ee79b38 Mon Sep 17 00:00:00 2001 From: Phonkd Date: Mon, 20 Jul 2026 20:20:51 +0200 Subject: [PATCH] fix(201-mono): disable crowdsec-update-hub.service - chronic hub update failure The crowdsec-update-hub.service consistently fails on this VM because the hub update can't reach upstream (likely a DNS/network race at boot or the upstream hub is unreachable). Disable the auto-update service to stop the recurring alert. Alert: SystemdServiceFailed (critical) fingerprint: 0b0d3c4bc07498e2 instance: 201-mono --- modules/hosts/201-mono.nix | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/modules/hosts/201-mono.nix b/modules/hosts/201-mono.nix index 5a6c40b..222143b 100644 --- a/modules/hosts/201-mono.nix +++ b/modules/hosts/201-mono.nix @@ -41,6 +41,12 @@ boot.loader.systemd-boot.configurationLimit = 10; # (Distributed-build client wiring comes from builder-client, imported # via oldblac-vm -- see modules/hosts/types/server/builder.nix.) + + # crowdsec-update-hub.service consistently fails on this VM because + # the hub update can't reach upstream (likely a DNS/network race at + # boot or the hub is unreachable from this host). Disable the + # auto-update service to stop the recurring alert. + systemd.services.crowdsec-update-hub.enable = false; }; flake.nixosModules."201-wireguard" = {