C3D2
/
nix-config
19
5
Fork 2
Code Issues 3 Pull Requests Releases Wiki Activity
configurations of hq services
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
78 Commits
6 Branches
0 Tags
2.0 MiB
 
 
 
 
 
 
Tree: 7e5fa1bdfd
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '7e5fa1bdfd'
${ noResults }
ehmry 7e5fa1bdfd
Partial deduplication of pulsebert config 		2 years ago
ansible start ansible project 3 years ago
hosts Partial deduplication of pulsebert config 2 years ago
lib automatically create authorized_keys 3 years ago
secrets@a481a5feb5 updated secrects 3 years ago
.gitmodules refactor into lib/lxc-container,shared for grafana 3 years ago
README.md README: added --check option 2 years ago
common.nix Add storage-ng 2 years ago
hq.nixops contains/public-access-proxy: add to nixops and fixed proxy warnings 3 years ago
install-host.sh pulsebert: add home-manager home.nix 3 years ago
mpd.nix Add storage-ng 2 years ago
nix-maintenance.sh add nix-maintenance.sh 3 years ago
users.nix Add storage-ng 2 years ago

README.md

Deployment

Beide failen bei Activation des neuen Profils. (TODO)

Mit nixos-switch rebuild

nixos-rebuild switch -I nixos-config=./hosts/containers/$HOST/configuration.nix --target-host "root@$HOST.hq.c3d2.de"

Mit NixOps

nixops create  hq.nixops -d hq
nixops deploy -d hq --check --include=dhcp

Secrets

Add your gpg-id to the .gpg-id file in secrets and let somebody reencrypt it for you. Maybe this works for you, maybe not. I did it somehow: ```PASSWORD_STORE_DIR=pwd tr '\n' ' ' < .gpg-id | xargs -I{} pass init {}````

Your gpg key has to have the Authenticate flag set. If not update it and push it to a keyserver and wait. This is necessary, so you can login to any machine with your gpg key.