C3D2
/
nix-config
Watch 14
Star 4
Fork 1
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
configurations of hq services
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
78 Commits
4 Branches
Tree: 7e5fa1bdfd
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '7e5fa1bdfd'
${ noResults }
ehmry 7e5fa1bdfd Partial deduplication of pulsebert config 1 year ago
ansible start ansible project 1 year ago
hosts Partial deduplication of pulsebert config 1 year ago
lib automatically create authorized_keys 1 year ago
secrets @ a481a5feb5 updated secrects 1 year ago
.gitmodules refactor into lib/lxc-container,shared for grafana 1 year ago
README.md README: added --check option 1 year ago
common.nix Add storage-ng 1 year ago
hq.nixops contains/public-access-proxy: add to nixops and fixed proxy warnings 1 year ago
install-host.sh pulsebert: add home-manager home.nix 1 year ago
mpd.nix Add storage-ng 1 year ago
nix-maintenance.sh add nix-maintenance.sh 1 year ago
users.nix Add storage-ng 1 year ago

README.md

Deployment

Beide failen bei Activation des neuen Profils. (TODO)

Mit nixos-switch rebuild

nixos-rebuild switch -I nixos-config=./hosts/containers/$HOST/configuration.nix --target-host "root@$HOST.hq.c3d2.de"

Mit NixOps

nixops create  hq.nixops -d hq
nixops deploy -d hq --check --include=dhcp

Secrets

Add your gpg-id to the .gpg-id file in secrets and let somebody reencrypt it for you. Maybe this works for you, maybe not. I did it somehow: PASSWORD_STORE_DIR=`pwd` tr '\n' ' ' < .gpg-id | xargs -I{} pass init {}`

Your gpg key has to have the Authenticate flag set. If not update it and push it to a keyserver and wait. This is necessary, so you can login to any machine with your gpg key.