HX Net Lab

Network-as-code for building OpenWrt firmware for the homelab router.

Stack

YAML       non-secret model
SOPS       encrypted runtime secrets
Gomplate   final OpenWrt file rendering
Bash       pipeline glue only
Just       local command runner
ImageBuilder firmware build
Nix        dev shell only

Workflow

Enter the tool shell:

nix develop

Validate with encrypted secrets:

just validate

Render real SOPS-backed config into build/files:

just render

Build firmware into build/artifacts:

just build

Deploy the built sysupgrade image to the configured router:

just deploy

Clean generated state:

just clean

Layout

config/router.yaml          non-secret source model
config/secrets.sops.yaml    encrypted runtime secrets
templates/                  one template per rendered OpenWrt file
scripts/                    thin render/validate/build glue
build/                      ignored generated output

Generated OpenWrt files are written only under build/files/. There is no tracked static firmware overlay.