eternal terminal

profiles/anywhere/cloud.nix

@@ -23,6 +23,7 @@ in
       8080 8081 8082 8083 # Pangolin / Apps
       5432                # PostgreSQL
       3000 3002 3008
+      2022 # Eternal Terminal
     ];
   };
 

secrets/anywhere.yml

@@ -10,6 +10,7 @@ chhoto_env: ENC[AES256_GCM,data:v8J24PT3H6WMNogx25gNkp/WQTCBONeCSDum4wv8fwC9xnCb
 zitadel_db_password: ENC[AES256_GCM,data:6ZjHdmloPUhnraows80TP8tXfjxqfBVUEXWX+A==,iv:DSzvQ9gBXp+GOOS1wq9h/Rm3KFZ4FpdLAk6VBVzCxYY=,tag:d42c7BUVcE4yaqyaQwPMrA==,type:str]
 zitadel_admin_password: ENC[AES256_GCM,data:1ItexD5+r0sov0HA5rCEsG/N9nqrGKVrpwfIpeXPhg==,iv:YbPABopLAxszDbYdqqvgFoqeijANEC48D8dNPLThHlQ=,tag:QX84GyN0h1+otMDGpnjqXQ==,type:str]
 zitadel_master_key: ENC[AES256_GCM,data:WkseypyW/QbohI5Kee6uFhlcQVRwgV37NyyXuRVzD7s=,iv:mmwIub3YEykQ+Hv8eSyUx1kzTUAt7Fzd1BAqF8/hhCI=,tag:vnCPcXabSwlZYWFeoUXiTQ==,type:str]
+zitadel_steps: ENC[AES256_GCM,data:UQ==,iv:KGjPqN5y6XKWEkjP6e6cIrLspY6UFPsCcGV3d5vppOw=,tag:Re+SqAQYgAdu1chah08jHA==,type:int]
 wireguard:
     vps_private_key: ENC[AES256_GCM,data:HxDP6mQbUJ2FmScJB6Mm6YMzI6QNR3GBJ7Xpubt6KMInj66hy0MxuVU9JTo=,iv:KPPSGaIELxfhsbLwYLeKWvXgiXctrR0+udN7Zig54F0=,tag:IOuEPVbxcJIHFFEnyLQEhQ==,type:str]
 oxicloud_env: ENC[AES256_GCM,data:sfbfxfEfRSNfKj8pJ6GFi522nwi2zAReZS0fiFkHsi7rQ7rjPiA+ZjFFE9n5zF0YjOqFf57Kr+YRld/lhnikl9w7oYmSG3JOUrxMJEQD6zfCeSokjeDsklLLSbPylBSRd8n82R/pteuhL1iPrv1Vt/KWUf3bPx92MH+wk21krJ4u7/UebaxCwbeImv018k6OE9lhEnXnT66wlDlpww==,iv:cJh137Qa0ma05sbplo9hXEDqpr3sjxzteae4alVSk+w=,tag:Yg+F81iuCYI2yHSsYZKhBQ==,type:str]
@@ -53,7 +54,7 @@ sops:
             0ia0DbiriLVDSyTrDc4BwsW1TvR2Vn0o+erjEfU4PaCF8MLH4SJxJw==
             -----END AGE ENCRYPTED FILE-----
           recipient: age189v3q8quejkaz4r8u0g2aechsfk4sk3465khx35erd320rea5scq98v7er
-    lastmodified: "2026-07-28T20:53:49Z"
-    mac: ENC[AES256_GCM,data:/feMLT0NWgPfrsB2edafdGcJjaex9kCsxlUo8CXoNkap6fAsT+lCDqSw1Zc7t+uqaAlkmt+U0Gq40nJ7JqX3uzXbQGcWL7ZNw/H0cbTYA6KVYJXmtfgWoGnIQxYfU9O6AKWnPoR7txQ3PxDQuhnXPUrz4qEP3vlpLoApkHQIeO8=,iv:0v0KLJuTpMhid1T1WsczqTWfGxnxngASpWOr9CriGKo=,tag:uwM89kajBasXe6uIn8O7zQ==,type:str]
+    lastmodified: "2026-09-21T02:31:30Z"
+    mac: ENC[AES256_GCM,data:8EAU1ozzidQaGbFz3SLRzSh+pacTRH5lagk7jr6LjfSyMJGYaajp5WdevKRBxxU+oTTaVpjQ5vyqHOUs+a/Bcgbk4npolvm8d9ovIDi4zLo9DeveEihMQKoYmznaMzGALiWE9uCyx5/l9rNJXaD8Qk55RK+EkXPLx0eh/jDQv/M=,iv:rTD8sYa9D2Uqs9VxPgoe6CVfWX2vdorxPiuPf/jI8BA=,tag:VjYPN6CHwAgziq4UlXL43w==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.3

services/eternal-terminal/default.nix

@@ -18,4 +18,14 @@
 
   # TRÈS IMPORTANT : Ouvrir le port dans le pare-feu pour pouvoir s'y connecter
   networking.firewall.allowedTCPPorts = [config.services.eternal-terminal.port];
+
+  # Désactive la télémétrie (crash reports envoyés à un tiers)
+  environment.variables.ET_NO_TELEMETRY = "1";
+  systemd.services.eternal-terminal.environment.ET_NO_TELEMETRY = "1";
+
+  # Port ouvert uniquement sur le tailnet Headscale
+  networking.firewall.interfaces."tailscale0".allowedTCPPorts = [
+    config.services.eternal-terminal.port
+  ];
+}
 }