c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity
73 Commits 6 Branches 0 Tags 8.9 MiB
Nix 94.6%
HTML 2.2%
Ruby 1.6%
Rust 1.2%
Nim 0.4%
Go to file
Markus Schmidl 8842e84b0f
contains/public-access-proxy: fixed forwarding 		2019-06-22 15:05:13 +02:00
ansible start ansible project 2019-04-16 13:17:19 +02:00
hosts contains/public-access-proxy: fixed forwarding 2019-06-22 15:05:13 +02:00
lib automatically create authorized_keys 2019-05-01 00:39:48 +02:00
secrets@a481a5feb5 updated secrects 2019-05-12 15:56:07 +02:00
.gitmodules refactor into lib/lxc-container,shared for grafana 2019-04-01 01:24:54 +02:00
README.md updated README.md 2019-05-01 00:57:23 +02:00
hq.nixops contains/public-access-proxy: add to nixops and fixed proxy warnings 2019-05-10 16:54:46 +02:00
install-host.sh pulsebert: add home-manager home.nix 2019-02-19 23:30:27 +01:00
nix-maintenance.sh add nix-maintenance.sh 2019-02-18 19:56:44 +01:00

README.md

Deployment

Beide failen bei Activation des neuen Profils. (TODO)

Mit nixos-switch rebuild

nixos-rebuild switch -I nixos-config=./hosts/containers/$HOST/configuration.nix --target-host "root@$HOST.hq.c3d2.de"

Mit NixOps

nixops create  hq.nixops -d hq
nixops deploy -d hq --debug --include=dhcp --force-reboot
nixops deploy -d hq --include=grafana -I nixpkgs=https://github.com/NixOS/nixpkgs-channels/archive/nixos-18.09.tar.gz --force-reboot

Secrets

Add your gpg-id to the .gpg-id file in secrets and let somebody reencrypt it for you. Maybe this works for you, maybe not. I did it somehow: ```PASSWORD_STORE_DIR=pwd tr '\n' ' ' < .gpg-id | xargs -I{} pass init {}````

Your gpg key has to have the Authenticate flag set. If not update it and push it to a keyserver and wait. This is necessary, so you can login to any machine with your gpg key.