Browse Source

add deployer, update secrets

pull/1/head
Daniel Poelzleithner 1 year ago
parent
commit
f79af77a3e
2 changed files with 67 additions and 1 deletions
  1. 66
    0
      hosts/containers/deployer/configuration.nix
  2. 1
    1
      secrets

+ 66
- 0
hosts/containers/deployer/configuration.nix View File

@@ -0,0 +1,66 @@
1
+# Edit this configuration file to define what should be installed on
2
+# your system.  Help is available in the configuration.nix(5) man page
3
+# and in the NixOS manual (accessible by running ‘nixos-help’).
4
+
5
+{ config, pkgs, lib, ... }:
6
+
7
+{
8
+  imports =
9
+    [ ../../../lib/lxc-container.nix
10
+    ../../../lib/shared.nix
11
+    # ../../../lib/admins.nix
12
+  ];
13
+
14
+  environment.systemPackages = with pkgs; [
15
+    nixops 
16
+    pass
17
+    gnupg
18
+    ansible
19
+    manpages
20
+    man
21
+    zsh
22
+    vim
23
+  ];
24
+
25
+  networking = {
26
+    hostName = "deployer";
27
+    # usePredictableInterfacenames = false;
28
+    interfaces.ens18.ipv4.addresses = [{
29
+        address = "172.20.73.7";
30
+        prefixLength = 26;
31
+    }];
32
+    interfaces.ens18.ipv6.addresses = [{
33
+        address= "2a02:8106:208:5282:8c15:86ff:fe0f:b018";
34
+        prefixLength = 64;
35
+    }];
36
+
37
+    nameservers = [ "172.20.72.6" "9.9.9.9" ];
38
+
39
+    defaultGateway = {
40
+       address = "172.20.73.1";
41
+       interface = "eth0@if23";
42
+    };
43
+    #defaultGateway6 = {
44
+    #  address = "fe80::a800:42ff:fe7a:3246";
45
+    #  interface = "ens18";
46
+    #};
47
+  };
48
+
49
+  services.openssh = {
50
+    enable = true;
51
+    permitRootLogin = "yes";
52
+  };
53
+
54
+  nix.buildCores = 16;
55
+  nix.maxJobs = 16;
56
+
57
+    users.extraUsers.k-ot = {
58
+     isNormalUser = true;
59
+     uid = 1000;
60
+    extraGroups = [ "wheel" ];
61
+  };
62
+
63
+
64
+  system.stateVersion = "19.03"; # Did you read the comment?
65
+
66
+}

+ 1
- 1
secrets

@@ -1 +1 @@
1
-Subproject commit 993ea1f26eee63e153486196f061d0bf10ceae22
1
+Subproject commit 80055e7b3d9953c92cd59fdb4e297ff907a45c36

Loading…
Cancel
Save