From 4aa646c0f3dfff6383488eb60c42d9103abb4d0c Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Wed, 10 Dec 2025 03:38:46 -0500
Subject: [PATCH] add sao.grapheneos.org server

---
 etc/systemd/network/sao.grapheneos.org.link   |  5 +++
 .../network/sao.grapheneos.org.network        |  8 +++++
 hosts.sh                                      | 12 +++++--
 packages/sao.grapheneos.org                   | 35 +++++++++++++++++++
 4 files changed, 57 insertions(+), 3 deletions(-)
 create mode 100644 etc/systemd/network/sao.grapheneos.org.link
 create mode 100644 etc/systemd/network/sao.grapheneos.org.network
 create mode 100644 packages/sao.grapheneos.org

diff --git a/etc/systemd/network/sao.grapheneos.org.link b/etc/systemd/network/sao.grapheneos.org.link
new file mode 100644
index 0000000..7a5a1c3
--- /dev/null
+++ b/etc/systemd/network/sao.grapheneos.org.link
@@ -0,0 +1,5 @@
+[Match]
+MACAddress=56:00:05:d0:8e:a7
+
+[Link]
+Name=public
diff --git a/etc/systemd/network/sao.grapheneos.org.network b/etc/systemd/network/sao.grapheneos.org.network
new file mode 100644
index 0000000..240317e
--- /dev/null
+++ b/etc/systemd/network/sao.grapheneos.org.network
@@ -0,0 +1,8 @@
+[Match]
+Name=public
+
+[Network]
+DHCP=ipv4
+
+[DHCP]
+UseMTU=true
diff --git a/hosts.sh b/hosts.sh
index 0d986ef..94c545e 100644
--- a/hosts.sh
+++ b/hosts.sh
@@ -21,6 +21,7 @@ declare -Ar hosts_hostname=(
     [las.grapheneos.org]=grapheneos-las
     [mia.grapheneos.org]=grapheneos-mia
     [nyc.grapheneos.org]=grapheneos-nyc
+    [sao.grapheneos.org]=grapheneos-sao
     [sea.grapheneos.org]=grapheneos-sea
     [sin.grapheneos.org]=grapheneos-sin
     [syd.grapheneos.org]=grapheneos-syd
@@ -76,6 +77,7 @@ declare -Ar hosts_authorized_keys=(
     [brn.grapheneos.org]=authorized_keys-replica-grapheneos
     [las.grapheneos.org]=authorized_keys-replica-grapheneos
     [mia.grapheneos.org]=authorized_keys-replica-grapheneos
+    [sao.grapheneos.org]=authorized_keys-replica-grapheneos
     [sea.grapheneos.org]=authorized_keys-replica-grapheneos
     [sin.grapheneos.org]=authorized_keys-replica-grapheneos
     [syd.grapheneos.org]=authorized_keys-replica-grapheneos
@@ -107,6 +109,7 @@ declare -Ar hosts_firewall=(
     [las.grapheneos.org]=network
     [mia.grapheneos.org]=network
     [nyc.grapheneos.org]=network
+    [sao.grapheneos.org]=network
     [sea.grapheneos.org]=network
     [sin.grapheneos.org]=network
     [syd.grapheneos.org]=network
@@ -142,6 +145,7 @@ declare -Ar hosts_reserved_ports=(
     [las.grapheneos.org]=7275
     [mia.grapheneos.org]=7275
     [nyc.grapheneos.org]=7275
+    [sao.grapheneos.org]=7275
     [sea.grapheneos.org]=7275
     [sin.grapheneos.org]=7275
     [syd.grapheneos.org]=7275
@@ -233,6 +237,7 @@ declare -Ar hosts_ipv4_address=(
     [las.grapheneos.org]=209.141.37.35
     [mia.grapheneos.org]=45.61.186.223
     [nyc.grapheneos.org]=198.98.62.94
+    [sao.grapheneos.org]=216.238.116.202
     [sea.grapheneos.org]=45.32.230.4
     [sin.grapheneos.org]=66.42.50.166
     [syd.grapheneos.org]=107.191.57.135
@@ -269,6 +274,7 @@ declare -Ar hosts_ipv6_address=(
     [las.grapheneos.org]=2605:6400:20:387:72d4:dab9:a369:f351
     [mia.grapheneos.org]=2605:6400:40:ffb4:40e3:e5c8:9b96:614b
     [nyc.grapheneos.org]=2605:6400:10:50:20a1:d9ea:5c10:a895
+    [sao.grapheneos.org]=2001:19f0:b800:1f13:5400:05ff:fed0:8ea7
     [sea.grapheneos.org]=2001:19f0:8000:3454:5400:05ff:fec8:4139
     [sin.grapheneos.org]=2001:19f0:4400:2c24:5400:05ff:fec7:4cdc
     [syd.grapheneos.org]=2401:c080:1800:1c40:5400:05ff:fec7:c902
@@ -326,7 +332,7 @@ readonly hosts_primary=(
 readonly hosts_secondary=(
     {bom,fra,lax,lon,mia,sao,sea,sin,syd,tyo}.ns1.grapheneos.org
     {brn,las,mia}.ns2.grapheneos.org
-    {brn,las,mia,nyc,sea,sin,syd}.grapheneos.org
+    {brn,las,mia,nyc,sao,sea,sin,syd}.grapheneos.org
     {lax,lon}.releases.grapheneos.org
 )
 
@@ -340,7 +346,7 @@ readonly hosts_backup=(
 )
 
 readonly hosts_grapheneos=(
-    {brn,las,nyc,mia,sea,sin,syd}.grapheneos.org
+    {brn,las,nyc,mia,sao,sea,sin,syd}.grapheneos.org
 )
 
 readonly hosts_grapheneos_all=(
@@ -374,7 +380,7 @@ readonly hosts_all=(
 
 readonly hosts_vultr=(
     {bom,fra,lax,lon,mia,nyc,sao,sea,sin,syd,tyo}.ns1.grapheneos.org
-    {sea,sin,syd}.grapheneos.org
+    {sao,sea,sin,syd}.grapheneos.org
 )
 
 readonly hosts_buyvm=(
diff --git a/packages/sao.grapheneos.org b/packages/sao.grapheneos.org
new file mode 100644
index 0000000..b3b7bbf
--- /dev/null
+++ b/packages/sao.grapheneos.org
@@ -0,0 +1,35 @@
+base
+chrony
+cloud-guest-utils
+conntrack-tools
+ethtool
+fish
+grub
+htop
+ioping
+iperf
+linux-lts
+logrotate
+man-db
+moreutils
+mtr
+neovim
+nftables
+nginx
+nginx-mod-brotli
+nginx-mod-stream
+nmap
+openssh
+pacman-contrib
+pacutils
+plocate
+pv
+rsync
+strace
+stress
+syslog-ng
+sysstat
+tinyxxd
+tree
+unbound
+xfsprogs