diff --git a/flake.nix b/flake.nix index 79531fa9..0ae0f121 100644 --- a/flake.nix +++ b/flake.nix @@ -657,26 +657,6 @@ ]; }; - server6 = nixosSystem' { - modules = [ - ./hosts/server6 - self.nixosModules.cluster-network - self.nixosModules.cluster - skyflake.nixosModules.default - { _module.args = { inherit self; }; } - ]; - }; - - server7 = nixosSystem' { - modules = [ - ./hosts/server7 - self.nixosModules.cluster-network - self.nixosModules.cluster - skyflake.nixosModules.default - { _module.args = { inherit self; }; } - ]; - }; - server8 = nixosSystem' { modules = [ ./hosts/server8 diff --git a/hosts/server6/default.nix b/hosts/server6/default.nix deleted file mode 100644 index 49cb637c..00000000 --- a/hosts/server6/default.nix +++ /dev/null @@ -1,53 +0,0 @@ -_: - -{ - imports = [ - ./hardware-configuration.nix - ]; - - c3d2 = { - baremetal = true; - hq.statistics.enable = true; - }; - - boot = { - initrd = { - availableKernelModules = [ "igb" ]; - network.ssh.enable = true; - }; - loader.systemd-boot.enable = true; - kernelParams = [ - "preempt=none" - # No server/router runs any untrusted user code - "mitigations=off" - ]; - tmp = { - useTmpfs = true; - tmpfsSize = "80%"; - }; - }; - - disko.disks = [ { - device = "/dev/disk/by-id/ata-Samsung_SSD_860_EVO_1TB_S3Z9NB0M203733F"; - name = "ssd0"; - } ]; - - networking = { - hostName = "server6"; - hostId = "8a3ba5a7"; - }; - - simd.arch = "ivybridge"; # E5-2690 v2 - - sops = { - defaultSopsFile = ./secrets.yaml; - secrets."machine-id" = { - mode = "444"; - path = "/etc/machine-id"; - }; - }; - - skyflake.nomad.client.meta."c3d2.cpuSpeed" = "5"; - - system.stateVersion = "22.11"; -} diff --git a/hosts/server6/hardware-configuration.nix b/hosts/server6/hardware-configuration.nix deleted file mode 100644 index eb349193..00000000 --- a/hosts/server6/hardware-configuration.nix +++ /dev/null @@ -1,34 +0,0 @@ -# Do not modify this file! It was generated by ‘nixos-generate-config’ -# and may be overwritten by future invocations. Please make changes -# to /etc/nixos/configuration.nix instead. -{ config, lib, modulesPath, ... }: - -{ - imports = - [ (modulesPath + "/installer/scan/not-detected.nix") - ]; - - boot.initrd.availableKernelModules = [ "ehci_pci" "ahci" "megaraid_sas" "usbhid" "usb_storage" "sd_mod" "sr_mod" ]; - boot.initrd.kernelModules = [ "dm-snapshot" ]; - boot.kernelModules = [ "kvm-intel" ]; - boot.extraModulePackages = [ ]; - - # Enables DHCP on each ethernet and wireless interface. In case of scripted networking - # (the default) this is the recommended approach. When using systemd-networkd it's - # still possible to use this option, but it's recommended to use it in conjunction - # with explicit per-interface declarations with `networking.interfaces..useDHCP`. - networking.useDHCP = lib.mkDefault true; - # motherboard - # networking.interfaces.eno2.useDHCP = lib.mkDefault true; - # networking.interfaces.eno3.useDHCP = lib.mkDefault true; - # networking.interfaces.eno4.useDHCP = lib.mkDefault true; - # networking.interfaces.eno5.useDHCP = lib.mkDefault true; - # ipmi - # networking.interfaces.enp0s29u1u1u5.useDHCP = lib.mkDefault true; - # PCIe expansion card - # networking.interfaces.enp144s0.useDHCP = lib.mkDefault true; - # networking.interfaces.enp144s0d1.useDHCP = lib.mkDefault true; - - nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; - hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; -} diff --git a/hosts/server6/secrets.yaml b/hosts/server6/secrets.yaml deleted file mode 100644 index 23319a44..00000000 --- a/hosts/server6/secrets.yaml +++ /dev/null @@ -1,170 +0,0 @@ -machine-id: ENC[AES256_GCM,data:/SlPKiJFWeVoZwE9YgDXmbCGbPmnnubmydxhSlAk+Cg=,iv:NjrupF/9qiHG+U916pq+3aM3tsQV9I5P9VUTvgcaN0w=,tag:TQAmGWIC9AQlP2qLrKnsCA==,type:str] -#ENC[AES256_GCM,data:xpxp6eIK1DpD/7SQLh7PjAHw9NprLNt4LGoaHTqwvGRi+WQIC8GBfBhXWdWtWv7NrRTv,iv:jZEVmt/p07bEN0pfC2IRX90vw6zjjsJeS4oAy4bLRJ4=,tag:BhFGfU8zg3SUOG3Zw3FATw==,type:comment] -luks: ENC[AES256_GCM,data:zU7Oko/uprzWZtCN8zFG+wGW2rcxCWiOYS02KuSVLJN6F50ss+fCH3j6PE4dTSKBUtTFAQq9yX4mbQHlpE7r/A==,iv:K+ycB4iQJpZP1bFONEWOLW1RSc4kaExpx9DVemvWyQI=,tag:8d9JW/pHQ56SjAcxcKqlGg==,type:str] -root: ENC[AES256_GCM,data:0cmGMmyG+TT/5f5uKqwboSkBx+P0YFTypw8=,iv:z18rZcyTN4Y2PpsCDyiPW3xlfXg4eiKfguEfcaOWn1k=,tag:30BoGWmh4c47jY+XpvMxVg==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age15tyk8zlm2v3fkv9gsdm9g75eeef23358wrddeg3slpu2vjncj96q8lu6x5 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlOGtkaWdTMUk1WkxMcDZG - bC8rYWpCci9aL3VubUlvaWpreWtPY2x1L3pVClVKcnpRU0JrcjhZRWQxUVI3am80 - ZkJEZDFWQ0t5L2VGNHNGQ3Q3TUNHOFkKLS0tIFNVcmNuTkJMTVl0TEczWHh5bjBm - c3p0Z2g4OThDV2czWWNEb09hdFZ1b3MK1DVXNe4Gf8i6xfIRyKGBultSXpyGrvxe - 3pb5GAvcvjh+ypbUyRwFCR00lncVo0n5Eowo1hhI4Dlw3faKE0uIZA== - -----END AGE ENCRYPTED FILE----- - - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhbGpDYWkvMlFnNHUvOUtG - QjBiUWV5SjZDcXFDYm1ZbjRxNzA1VmJCbm1nClFuanh1Z3NFVkxyaHVlUXBjL1ll - QXJ4UHpmMG9uV1pCL3RrcTJaYUJCVzQKLS0tIENDTU1jdDJnNGJoZlRPYXFYY1kw - T1FLajV0UmxmYy9SZW9iNEtSMENMS0kKxr8Ax19L/txc6tPHlSNrLyXkJvytbvq7 - mx4WvdKtA/BG4+s08X9cA/gIxKdMwQi7GOuu8JuAOEiXtsTm2tmIOw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-05-21T20:03:45Z" - mac: ENC[AES256_GCM,data:hByMXpEmbiL54PlZLaF3dxLtq2bFUSIK4O4Ps+rcVjyIojyp+iqe+8hHkOhK43WGpbOO2RiI1M6IkADBzDuakWWVAMlrnDyyfqPNinuwg3x4QWthwEudgS7Yh9WdGOFGZMCAnekj+Y8DfYOACjk2adub60zTwzK3PBFeyTVsPnA=,iv:lOBoUfVPEmh1ryPICrKrtK9wTv3ny45BwRycmhKNe8k=,tag:fB89vtLJt7BjUqJVLoq+Eg==,type:str] - pgp: - - created_at: "2023-08-08T22:43:52Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQIMA6j84+xkv3y7AQ/9FlLJ+BokwaoFG6aC8k8PbRDDcKmhT6a187KKLJSxWZz6 - NIfZhoELsIzUWCNL6zUo0K565RgX2Miy7OYuEZ5DU8MfVmCDm44W8AI6hgtwXRZ2 - dCG9E4YKFMA73cyX2r60hagnkf4Hu8ZPwTALHq5C3hvQpcOxSBQFXiFpSxnebAEZ - /tip5mAcn9T4mY597hmr8rP/DJmgKVQLeQPza21PzlUfc5PAdeXdhLO0P5qpygy2 - o5ufRZ8d4tEjxChOss6I1/ehiP+yuJJwbxexW/hYZqP205r+5ur7gOyJ8Mb2JAkv - +Zr+gHJlHOVttqZAgTi2KZZhLWY6MELxGyBwFWeI5EPhGYO/XDGmv2I2PlnB6oOh - DFUQT4tzkGG3WvY7Zs/hx/P58LkCy0//eLJWZLqoRzZVR3Ix9Z53NYIdCwLARoRP - +OIhykRzQBIoYpzRWn0u8OaVP7QqIMAN30UXD/9xcFQ+iuBuwUlPvs2aln1boHvU - jZUtVW3RlrOfoaRDR8DpWjnBNvQ0B5SQXdbVABnCHtGbB5C0sdSNWNcafJ/Wt120 - E84O5JDJABbpQpfnZLcM7Eri3r/jVJE0zOxgHI8aUs9Sg906k0gSrXq2KrXConfM - 9c5/F8r6WLMZtsVH1ggpYCc6/3M0LrRcsbZwUNzirQvgaBD99kCBJWy9AIX5/evS - XgEndNUT2EWuE/s61+KiLlFtfLKQ362vqRjDVIB0XUhw6n8VbX3SIo4xY+Uggwn3 - EF1aT0zDWteOVZxNAOFAEaDs1cigGXTbouO19Z9URjetmyw6uIuh3t+kwi/Vl6g= - =rn40 - -----END PGP MESSAGE----- - fp: A5EE826D645DBE35F9B0993358512AE87A69900F - - created_at: "2023-08-08T22:43:52Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQEMA45bZkLXmBFpAQf+Iu+51wFCiQS2DGvJ4LTH5AoS2aRSzDtGbTnij7Kk484w - B+gGbDyYXaK7jdn0PDzukFAGLlGEbbWQgZJbJgGKuMvj1TErHOZGRusi6ph8pCa3 - 9Hny/5t53ALr9G0xYZPAblf3bKHiJziJGn18KJQoaSQNcLUCwvrhJ1HrkaLZlx5J - hq6brqo8oDTcMIQuGNuYFxlPckNfsqcFwOlKtDS2M0ypUbfuBnay8CVaauI2IC3B - 9gPCzZ4JxYMovgKi9LtUsbuSN+BazCx9pZV+EhVJFHkHMh4MvqJ8f+enN9Hs3fX0 - VJErIwQdZ3GwZ+JLYZFMEYx8s1H2coGatR9HWC4/JtJeAV8kLpyAz6B/0mmL02EK - SJUAUjjCYBIBwiF0NRqBKQeDNdvBVr13K3cQda0xs7MmjkQmYmQote+8IabgKhs8 - JrS5RdGNljRENmMPbOm8iQSjK8Du7qddRK1ic7fnCA== - =9niZ - -----END PGP MESSAGE----- - fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9 - - created_at: "2023-08-08T22:43:52Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQIMAwMCBBrc/JA6ARAAn3BcCrNXR81OEeclu064r9T/tEDfaZQjJsN/acX9x3DG - Or9o88QciZiojfFG4UEZZhdQmOsDVxEzrC0Mvc7cYKmTtZ/ZPyav754UYznK16d9 - vd/Y51UQh8cwrMbfkJzLeNle6Y+vOgelK7bheQNYmsvMNmvi8yqo7IQFvv7JMmg2 - pJjxPJqkRpfk2v+3pijytlpiVzUivboiDgNjkzT4S+KrsYb2nCr/Vygf2eU4IrEs - BDV/j6ytHmZlaipTl7aXlgkVey4PknZx78PuNtV7KSoFN/6G8rKybk9RAUV3MdEv - M/xCrb84C16IBaVsl0KhXaCijF4XZ//2qaVe0LLZkbbLWVydyCmg/x2NxNoKsAhq - T08z0AejxjT3opeYWlE4vcbdQBLRwQovAm6qvjyrkMuZDtx8tO2/IBU992zvYgI9 - aVJq/LgMGSg00p+bhmTSIPJn/yb4xMPomYffCyYfpPVEcvoQ+8/xvzWgDVRyGhPX - Wn3cvhlL4zczqm/S88P6uMhA7PXCrGvFdZQmmUle1HA1GsSHPPSNqCBMCCraEpRj - 9RS3fa6ZkDQO9SiOYqP7D/QRgF/am+zZAVvvRwCVEqHlhv55BTjbN62J6MnFvJNv - 2FtSjlqHrAt1Tx7MrQTLSExJKokVEYRyQKDwbtFo6CE0lfyVF3CyWBF4vsTzxtnS - kwGPrK1rZ6JvtMOKLMG7IVUoqodCXWG/ZHZMh1RLHdiblQ2wW833L4qa09vXB5Br - KMsjdR0OHoaoN/LYw5wYXrractAJC4xcrDyfRTbSNlR/4G0+IJjTXTKSdLnnXs/J - 1PsMmcfQTwji7ls/nEtgH8kuIC95hpgVS54cwEVnAZEFXTRYgkJdGUGU46YMK50X - eEBvag== - =tUvC - -----END PGP MESSAGE----- - fp: 4F9F44A64CC2E438979329E1F122F05437696FCE - - created_at: "2023-08-08T22:43:52Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQIMA9XEenRNYVGHAQ/+J/ZW26hSBDeuxUz7juS3+AOw1SdeAoEWUIc/v6L2LSZu - lLz+dwTBVN8oN0R2Kipjgem0bX2cR4JXT1fHcsq0wg8vrJdUrT4iC9epa89shv0Z - 6+lDvwyf8eTIlUOHjgaw3XZr+emGQWu292uHrL+sltArm/xhatXPPeoYDF6l0rzr - YCYyo66MNbMauTUM+g3p6CkWKAiuAHF1wpbh+fn/kZRnmW8GUVwWHR+g2vVjwZak - oIjleoigxEYoo7aCIZgGFT56L2wxR3fE4yMNYjYeDJDLg2QkDqnhhKrpDdiRtDEN - KmgHcMaCHld2DWgPMKF1kMWrQOi5++GxBg/kz6rFp7OeiuTFcToJD60uCFJ0RaP0 - 1MB3o3B0CJpk44dqeZW5fyA6O3JhUWSfbizn7x7L+7n4fHagZngJYn5C3BD33P6E - +sc8TolXkJ6aFRgPqB7pznMC/lBX1xlIVQVwTX76K9clQ3weNtoN0y5rVojnZ7H1 - zHgBH4t+7+eFwKcEyvrBrM7j51swX0TE4/vyXpWEAf5Y+K1IGkkq1ZIeAMmRf904 - ptVFnhKhzmXCYHoMyQwRPRVI0qpfd7gbZ6/nVJwMVxtlIARKRO8Z95BNr8MX8tT2 - fY2ORyMUa3uU8PmM5kgSGC8ecgNMG6BOGC48XoaoG0oEsTULL2C6A+hbsK11mijS - XgH0Ts6FJc5lBrsd4YT//JE+alLrTmcWigwj1bzDBjIqK6m2Xs5pGjOOcSGetHFc - 8gn7/7YqBdbCubmcmKTIZ1ymtZIzgMT9b/0WDswqLFIh2XtHg1kLfFlxhbpiQy8= - =y0Z4 - -----END PGP MESSAGE----- - fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA - - created_at: "2023-08-08T22:43:52Z" - enc: |- - -----BEGIN PGP MESSAGE----- - - wcFMA9qJIVK2WMV7AQ//XB/n/VEq1JkAKu4olmYyxRVImp7Hcqql3soZOjBWsQ4b - QEq9oQs4mjK3EW/tp1wcHlv/Qna35Re87JYaoE3+/FsPdWZPy+pHHRvMBa9Y1WUU - 7yOEUfQVrBUjUNWqLvwgcB8IPFW1IXCMHCu8eQUJ210ntT5yFqYUoCFmSir3nrAM - sStltN8FoG84/078heQSB1KaH8CBMa/1X6vuOO5lnAaRTgxcHuFQuKnuFlepHtRB - tFsshcqWlbzy7DFI9GaQAOqDBHYP2SOFPT99U0CHm/UezFIpWZjfxEUDG4HraHUU - 2jaujISckTOjkSsCqOAo1rhaMxbw1Mr59FRz5ZUIEmCKI83XK8nRvlMr4yS6hnvF - ToJB3jNuLghDfcLJSbCzZ5+8LAdv27MXyCKL9QwHpnl7JrPGFtO68y5wWxwvjpmh - xxJz32uBXi7qnWbd17Z+WiuYQRNvGXQb4zeTcFcHuk1QeT8GoGxfclJTEZUA0/B6 - kuDEMOEAmVYhUBz6aiYRKMonjXbntEtLvqpbd67lvDTJE0p6wfj+sQ3retLSO0rM - hvf7nLw3O1+oxC/DDhOpAK+UXloLT55EGC4zwkXzOLt2CjbfdVhkg11u1yWTbbRt - pwtdAgOHx6UG3bRCrBdl5mI91pLCSlbUpyFjiAny4ck3gdOHpa2GVwDHb3N/u+rS - UQGtfSNTfwf7bxMK4KuJjvdEE6blkrvxCOuvisCjuEoicawfZaej+KpbgGddYG0t - IlWmPCGiZyZGEOCZG6sMvL/wpay+dCRNM4/q42ELDTxUZA== - =XoHL - -----END PGP MESSAGE----- - fp: 53B26AEDC08246715E15504B236B6291555E8401 - - created_at: "2023-08-08T22:43:52Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQIMA/YLzOYaRIJJARAAjkRI/d86aIExznJwsrvdzUvVuyHEkQmNpcn4qgFZcMpM - D4qNIUg2rCpRGoO5ZHb1hKKseYcGPbcOcE3kbjTnbscNJ79n8Ug1t6TTJtE2qOOZ - l/XZ2np2IDxQS/mLyCvikMZalB4ZPrh9dhb+Eg6qrt1GBQn5mgFnZJwwf7bmOfyM - MlKrv/h+Eg8ZF4rKdLJmMLfvpoReVBx/8QHw0Kosa3A8g0ikUJmixFTuG51f12kG - 90WprOzNF8roPFZzwcLDsKUmNWe6yNCLOftMLbFnsxhcnvJQFiwKvWg0N0GpGBFa - ZSRj/xv3pAvsaRuyudkGA9HwhyAH6DfctUji7opSwrVrlQUZV/cveeyL+5izrlnX - vEd3t8LnMYiO7HAVfgIuvJCKfEC1a7kye7feHdiy7YrWMhr/TENkQfP+OaozHuEs - HUl0arkIuivxCMVT3WG2WsdAhGxR7CTg1tN5964zPk3c1ajnFa+FcvjMOwlo64Mx - +0mup0fhjhtZwW/Ryp1Jzk7q6/UkcAnpUQt1dbd8kHwbgoeG0gN1b/Oonsi44Bhb - 12DlJWqkGOnAUbRszGMOAGlXtHYnMWktqjYuHIcu1acz61o9OvCULOAwFTZC0wEA - KsT2UdcnaLSsHISksKZUFZMuIa2FTxcA1Bc81YmtEsFN7lq8/8KcHzEXrckfhnfS - XgH7Cz4aKmGnXkrScz1RahUDNeI3qOfOIUUOHihAxpMCDSh0gvC7Nq73DqUmng7N - BbPuZ+i0lmFlYhrGrDJ4XiAe2UzCmYINprjSQuFlnQxQskpWBr4TMKRhTfiMUPs= - =oZLY - -----END PGP MESSAGE----- - fp: 91EBE87016391323642A6803B966009D57E69CC6 - - created_at: "2023-08-08T22:43:52Z" - enc: |- - -----BEGIN PGP MESSAGE----- - - wcFMA7zUOKwzpAE7AQ//RxKG8AXT55V2s9nZLYRRaUY5JRYTCqQWi+2SusktGe+f - YSmnsDgVCbymvxJdDFsDHo5Tu+WVZVXEcMSxM8RhI1zWE51LgDZiDZxBWas2R0mn - qtFHppxLvbcsUqVxxvK9tGG9LcilCSyFv5X21gMKXVIJhvweNQ7HOk9lPrF7vs/w - g0MkOOrRpnhJGdOm+yGK6QjHYIB+26c0TzTZrryDPr4Yy5WW61Il4lPpFtZ94w5Q - 7XUgGG5gfQ8GztIVHEQbNz4APvHwPGQE5mzkLmCP1jXI/y//jqdl2RRC4x8bNpT9 - p6/Mo0WcVQcagKvV1rYqGiMlv3OJKba+B/os6QSP5952fpMBo2s4Aln8HuKqbWBP - 46FlP/zOXJIkcQh1OHfAwJNdYT444H7kSkCKmggo+Ikwwlq2aSIz28IDtalZW+qa - bVstFP5+U4CLbA1yjHH1ViIySj9+KytfRvFUHL/wX72U6wYz92xBJrKnVO7H7xxW - m/TzTNtAGouUTRJlz47cktGLqG1Q691bAsUnSpCp3r3Z7dvTevmeEGkq9TrHt1v8 - z1foRwTl/Yg0+XXbDfAeZ0PTZp3pH/HNFbco/5Kr69qOl4xFdoJCFJQsEuFeWTLV - Fw+y8b/VSK5w0oNf1R3Wa//F8yTZAPooB2FaMu5MXmxHVzLWgggZOg09O25qHyzS - UQH3wwuGqL/HpLNlUNCYzHANjRS9pTzriuIxBdW4UN5bBvz3R5wRAfHdB1jTK57M - +VdpG8YKS7uTHw5zteYLWDHT3+vuSLrccMCjBYzZ4RhvRw== - =V59G - -----END PGP MESSAGE----- - fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C - unencrypted_suffix: _unencrypted - version: 3.7.3 diff --git a/hosts/server7/default.nix b/hosts/server7/default.nix deleted file mode 100644 index 5c10a7ef..00000000 --- a/hosts/server7/default.nix +++ /dev/null @@ -1,74 +0,0 @@ -{ config, lib, pkgs, ... }: - -{ - imports = [ - ./hardware-configuration.nix - ]; - - c3d2 = { - baremetal = true; - # deployment.microvmBaseZfsDataset = "tank/storage"; - hq.statistics.enable = true; - }; - - boot = { - initrd = { - availableKernelModules = [ "igb" ]; - network.ssh.enable = true; - }; - loader.systemd-boot.enable = true; - kernelParams = [ - "preempt=none" - # No server/router runs any untrusted user code - "mitigations=off" - ]; - tmp = { - useTmpfs = true; - tmpfsSize = "80%"; - }; - }; - - networking = { - hostName = "server7"; - hostId = "07070707"; - }; - - services.ceph = { - mds.package = pkgs.ceph_17_2; - mgr.package = pkgs.ceph_17_2; - mon.package = pkgs.ceph_17_2; - osd.package = pkgs.ceph_17_2; - rgw.package = pkgs.ceph_17_2; - }; - - simd.arch = "ivybridge"; # E5-2690 v2 - - sops = { - defaultSopsFile = ./secrets.yaml; - secrets = { - "machine-id" = { - mode = "444"; - path = "/etc/machine-id"; - }; - "ceph/osd.5/keyfile" = {}; - "ceph/osd.6/keyfile" = {}; - }; - }; - - skyflake.nomad.client.meta."c3d2.cpuSpeed" = "5"; - skyflake.storage.ceph.osds = [ { - id = 5; - fsid = "036260b7-6bff-4e90-a635-a18640223fe0"; - path = "/dev/server7_nvme0/ceph"; - keyfile = config.sops.secrets."ceph/osd.5/keyfile".path; - deviceClass = "ssd"; - } { - id = 6; - fsid = "e4dbb8be-da42-4a85-85c9-da207b17386c"; - path = "/dev/server7_ssd0/ceph"; - keyfile = config.sops.secrets."ceph/osd.6/keyfile".path; - deviceClass = "ssd"; - } ]; - - system.stateVersion = "22.11"; -} diff --git a/hosts/server7/hardware-configuration.nix b/hosts/server7/hardware-configuration.nix deleted file mode 100644 index 7939ad3b..00000000 --- a/hosts/server7/hardware-configuration.nix +++ /dev/null @@ -1,70 +0,0 @@ -# Do not modify this file! It was generated by ‘nixos-generate-config’ -# and may be overwritten by future invocations. Please make changes -# to /etc/nixos/configuration.nix instead. -{ config, lib, modulesPath, ... }: - -{ - imports = - [ (modulesPath + "/installer/scan/not-detected.nix") - ]; - - boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "megaraid_sas" "nvme" "usb_storage" "usbhid" "sd_mod" "sr_mod" ]; - boot.initrd.kernelModules = [ ]; - boot.kernelModules = [ "kvm-intel" ]; - boot.extraModulePackages = [ ]; - boot.supportedFilesystems = [ "zfs" ]; - - boot.initrd.luks.devices.server7_nvme0 = { - device = "/dev/disk/by-uuid/ea5b5339-be79-4237-9383-4649e336fae6"; - preLVM = true; - }; - boot.initrd.luks.devices.server7_ssd0 = { - device = "/dev/disk/by-uuid/7a6035c1-9ab7-416e-b94a-bedc0f1af72b"; - preLVM = true; - }; - - fileSystems."/" = - { device = "server7-nvme/nixos"; - fsType = "zfs"; - options = [ "zfsutil" ]; - }; - - fileSystems."/nix" = - { device = "server7-nvme/nixos/nix"; - fsType = "zfs"; - options = [ "zfsutil" ]; - }; - - fileSystems."/nix/store" = - { device = "server7-nvme/nixos/nix/store"; - fsType = "zfs"; - options = [ "zfsutil" ]; - }; - - fileSystems."/nix/var" = - { device = "server7-nvme/nixos/nix/var"; - fsType = "zfs"; - options = [ "zfsutil" ]; - }; - - fileSystems."/boot" = - { device = "/dev/disk/by-uuid/8E67-EF31"; - fsType = "vfat"; - }; - - swapDevices = [ ]; - - # Enables DHCP on each ethernet and wireless interface. In case of scripted networking - # (the default) this is the recommended approach. When using systemd-networkd it's - # still possible to use this option, but it's recommended to use it in conjunction - # with explicit per-interface declarations with `networking.interfaces..useDHCP`. - networking.useDHCP = lib.mkDefault true; - # networking.interfaces.enp5s0f0.useDHCP = lib.mkDefault true; - # networking.interfaces.enp5s0f1.useDHCP = lib.mkDefault true; - # networking.interfaces.enp5s0f2.useDHCP = lib.mkDefault true; - # networking.interfaces.enp5s0f3.useDHCP = lib.mkDefault true; - # networking.interfaces.enp8s0f0.useDHCP = lib.mkDefault true; - # networking.interfaces.enp8s0f1.useDHCP = lib.mkDefault true; - - hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; -} diff --git a/hosts/server7/secrets.yaml b/hosts/server7/secrets.yaml deleted file mode 100644 index 22a019e5..00000000 --- a/hosts/server7/secrets.yaml +++ /dev/null @@ -1,172 +0,0 @@ -machine-id: ENC[AES256_GCM,data:gRS873o2rp2azYNUI6w3tTE7BRSruG7g2aSLIQ/o95E=,iv:gprNCW01J9KALxIioWPjMJ6EoHPSteP0odhUR69HRxk=,tag:5pTN4BRGE65SQejkJYJuJw==,type:str] -ceph: - osd.5: - keyfile: ENC[AES256_GCM,data:A1/uIUU3c7HJE+cs5w0qZuVsba9JhWuwwxN9Ekxwh73tWem4Yit/Dg==,iv:f5D/KObrVHfWyaBZpEqUiGTIiV9aFd/EKWlqjqmj+SE=,tag:mplFDSwFQdY4f5XzPLRoAg==,type:str] - osd.6: - keyfile: ENC[AES256_GCM,data:CncIAmpn1iXZ7AX7feFp/dyhUF3yywGhWFgkR1ueNRd284uu10cjXA==,iv:Ckz9K6hcjOyYdJDb7oaxrCfpIvkC7DrlpxPoOL8b2R0=,tag:JUaWqjqpfIYoF/GO/4CqcA==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1xd8x0m27zhvvsm7rq2amtu3a4nvpfnlcdgp9tqt3g47hfzchsa9svgmemz - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlNUxGRFIwdzh4cktZa2lG - TjdNT3daMzQzV1pORVpTZ0dqQVRWKytUUzFBClVqbHEwdkpXbXFPNGsvajg0U2lD - aWVUbkcwQ041eHVqZWN2VnV1d3Jna28KLS0tIGJCMElXaVpUQk4xNkxhSVNCZU14 - cWJKcXhrdEhib3VxY2hzQm1JUnhsekUK5rN4ELFPFLCA+PzwMTgnoCTE8oQk0AVb - JtM5AYHRBHl/hvhiuom5jhPovsGloMiL7MyGxB6u/kIsrUECVC/uNA== - -----END AGE ENCRYPTED FILE----- - - recipient: age12aukzah0pt2rck52hwn08kezyxueqz2f49ld7hpyuzmu847vavdqkunn5c - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWNmQ3T2oreWw5SGRtRWtj - STg0VVdUaVpySldubjJFTnJrZ1NRZjZ2Z2lVCjBDWFRJa3lmSERIZ0xxWi9tWmRo - SDFqQUpQM25xSHFhV09qSWNPYjErSVkKLS0tIHlHbFVjdFJ5L2xsQmhydThOS09O - QnBvMG5ZOTBUNEdxT3VBekhTS0xhekkKvQQh2gROuUDYT+uqKvJw10njrbgMKQXi - WDU6/jTicrw8ZJLf7K2cnPUx60SwlwUYyxT/Lby92UbnraGQCKgTyA== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-03-06T23:08:42Z" - mac: ENC[AES256_GCM,data:F+LdRwCq5JWxpMCx9V9+TVUqSYaosEnwJfWNWX4Uh9UItJg6MK4hoGJVJqgK+D2XyfKkLx+wjVIGRfTlJ+s9a4T9z/EMCxoMzLH72cFwsIoJ4t28zEK1LV7GpcDo0L877pd8Toze6UV/F64Zu4uGnPzKVcoNIyXLlfeIJa0hAAM=,iv:6bf6BLz7GwcJFG6oRlsPF9acni4Xh6rpuDMJuaSxsM0=,tag:MQvSs5j315dnBsKqpLWKUw==,type:str] - pgp: - - created_at: "2023-08-08T22:43:53Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQIMA6j84+xkv3y7ARAAkJB4GNBmP55JjS3ZvjmMs0WFh1Yb78QFzaSg5thrqUUT - 0gDAAw15D8u6AU7bGq1g35B1Q01VufY03vgrGmCNkEQ7oG9n5K+3Mobdjw/HMrre - yqnXeFGIJBSGul/81VxHwKaajtOuO/Ah7wDu0Dg9FNG+mi02m7kF+sIOcc4NBXaO - GwWRAK1/2+Q5BM0lYXKYN327A/RYvC+PEiVt4AFwM6RGFiaM61GX1d5lANe20eVb - bipZjCOgRBrBHh9lrmtfEFinBV4eSufurUO4S1QIWLy6ZHz+HSh3isVQPJZM0kBh - yz/bOwIvQ1b5F9ZkMVuoUpjvGcZx09bLmo9v+kQemrhfBupG7rncQOYRYwcKPw8E - GdhJ4UEe1L0a1h2A9jB5y2X0bxxFPSrbgm667GNl2gyasz7Nif+D0nS8YUqOQvdX - kmOf6DErJE/hiMIvAvDLxZAFmgrFJSevVx+tDIVYpjofmtirwzXTGs66fVgbUk16 - KcbG1rYR2duMEPU+HUwSCdj3bdYqk8txIpyoOu+gqaMB9IN/6UrT2sCKDDrAK7za - TN9fQ/Mh2AsUdjCmXBrIvderfMQa2BN5PJ5W2sQ+u5VYfeA8qrggy1FajAEpNb9i - UaesFzwTYQ7Hl4FNQgvuzLTx2ZGEjE9d4ev/8wNHYitlXm978AJOboI79JziXDLS - XgEQPPIJE83WEFXHVhHjy1QwOxytR8kSnfvbStlS0fBSsv3nAzraUBQ4MHvQ3cD2 - NBWSGe4gRTXAMQFJts9858hSyO12dX/vwSRjQrlFX3s2H01rdHAxZlC+UTPhRUA= - =Tje+ - -----END PGP MESSAGE----- - fp: A5EE826D645DBE35F9B0993358512AE87A69900F - - created_at: "2023-08-08T22:43:53Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQEMA45bZkLXmBFpAQf+JekASGIcpbXfj4kgQrwMFpnKP/azjl3Q6mrmGJ/PMjM9 - PNRqKPrRGjZKFAgtgiXPJzAYot+FgD8OZ2N2LSt9XKpW7Jw/7yqh0uDRfsjQrz7P - DtxVPwgpc7kxiKjtzgIoXtekYyhuvTubSvRkB8gd34R2AssHELcAx/g3iWoE/vbL - JyN9mmudJ0QocjJqRAavzCPvmbHzdjnZ35d3FTbnV3PY9UNE+Haa+O7ZUJFL8PPf - yQvnzXpR+Wc7fkHXJIbrFAMgRN4UqYkQWGRALAoWgbBcadHIMOpUZPbKFPwzyf+c - eM16BA+CTkY2fJvvtEB3h6/nyhJG4dptGrf3fEWosNJeAY7CenZgYXnkJo62AVnu - 6U5olKZJlMOw6+JtIMTu6HhlKef6+4HbYmBKclP0Z8bkcPLAliUKpypvq90MxaL2 - SDHAv9k+D/ahYt6iSB1ezaBf7+mhmyjNAQpsb2BQTw== - =ejGQ - -----END PGP MESSAGE----- - fp: A4B0F5A80C2E2448A97BEC25BB829C4DECA6CCB9 - - created_at: "2023-08-08T22:43:53Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQIMAwMCBBrc/JA6ARAAp/1F7yseoVzG/u1B68b9sG8KgrGsMauPVjFiMCCjA3SU - xPsgRytK9nhReZmO8Hp4MjykMWGJzEam44RK5YoX2xLSZKkp61kaVIFiVfC7Zn/Q - AdDGVxcBDlyW0WB0sIwhDolDDoodzLDaH1AMNTW/wiyBDc8eko+R7LFDc2OU86U5 - Yvx1f3G2n7iveoV1L5f7wIy6T8Owqd3yFwgS+oL9ipvy2plelLm5ftGYAWXpgk+s - n01s/HfWyH3QbEeLi9w/cAAWKJcpeSld6mL6jHazOR20oIoAvtUekGK5fKWIPdCM - 9Acyj3O1OzYD2Jgr5ZX3TgYbyoBOX9IywEsVAw8jDy6+9pFhv0LFCSEbLd1Ic0vP - 4l0/olA5sVyTcX3Wo8zy6Ws+wrSQcmslxn2q2yOzFLS7nV+2u7OIRQfP5EeQcckK - QhnXkn2KNdMe2I4WLWMmXdBB+JG1YB2ZBSa9FCG64fEGQmqC9pKLTsispbTjcYGY - EVWYkWhe+eK5rGuX/P9hyJux47XwI1mFeBrbSb9lrJfmR4VTLlPR0gtixtHxNi/p - hWyY5SAVvHX1V0ixc8FUXqD//FLj7d0dPSx+yJnXAdIvzG02ii6/rYjh/1TFfxYa - Pwr1SrGUhNDHE1AfB51fsodZYXCBPqyJjjtfwKzokRtvXmawLYJhUZteGQb+87DS - lAH1YgGktujunXn29C+batU4JETfwFQbcKaExuWkVNsr1iNpukuTlj36hueFLZjt - 6vNAkPBHp/z4Rzo/rmop6xrdz82F1A2kUoZOS/+fP1YZKQlSP2LJYV+PWl176MHk - oL9F4KNeOTkNuZW9aDJcdhKbJfhTo7LEORN6hANVzzQeuRDKIZeG3IXB4rCl6ymP - SYu1ZGs= - =eRxk - -----END PGP MESSAGE----- - fp: 4F9F44A64CC2E438979329E1F122F05437696FCE - - created_at: "2023-08-08T22:43:53Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQIMA9XEenRNYVGHAQ/+OZxXk9ST9yeSpF7/dEQAxAu34SbXM7aV4yJN2m/Uvm0t - gWANJ4xboHpv0s4+iS5roHmD8fBi0GZf7sxCqX5ii4znUHcNwo42bt5fkkex8Z53 - 4SSR6K6i8454PKNA/oucNxw+iEZgdqCa/sUYwzAdQ65ZMeXUkLFr3rt8o6I1mDts - Lgret6ZNil/0sTxp2E3NEwVYAgv+yhT4Cd7OGU6HpE4MEAEsjGj/kwAsBfqM1JpB - USisbNRvbWk7KrX/FuUmzxgsB1dKjWmQK7YTyBbpMOYsQW3pBLRKjlxDkW/usnk2 - AYfjLAxynq21r1JdzNL4SF9Y+gUwev8nEir+VoX/oktFECd+5c3182IrkR2h+GmK - 0w8/xo5hpj/I7ImQlV4iHmwcdUnC0yA2KlAq0DSZwi0V0LRrOhTvaVEyudd9Zb+j - rw+1RdyjWxhgM+CLKICP0LHeqwwfz4AhyxHBaH4+ISOorCmbZUgt6tzfwuOr+7A2 - t/DmgDOSzFJKGAUt6pVowZZgvJjzVH4T1wDVXOEnU4bMS0IJE0VuKYbXbFrmtCOS - 8KXZiuZL+EgqGG61ML5h2wytaCCRO+OvOjv6o2W0gz0/RTMQLgXI3PHGRPbBNbuR - iXI6LQKbZb8r3XE0C6gBPSUYDkh0PDBXWQJnC6zoARuwRer66c0nHgmnFoL37J/S - XgGpPxXbHBPyP6kjhVmP3YfOdoJgRJfdw9by7JvNn1tA76L7HGaFedfEiLsVAkkE - XZOkuBOgPAQIvkcBEh5BsQ8NAvYZlThfPnxVYSclOoG8NeFSP14tCG9PpQzyTRU= - =V5CC - -----END PGP MESSAGE----- - fp: 4B12EFA69166CA8C23FC47E49CD3A46248B660CA - - created_at: "2023-08-08T22:43:53Z" - enc: |- - -----BEGIN PGP MESSAGE----- - - wcFMA9qJIVK2WMV7AQ//YwViASv0Cr62Do0SsjLxZT2ZbyE/hRSbrIBR5Pf6Qkkn - fq6mDXaoCfDtrQ9pStARdW8xvwONvxJVFGX1jDKUky7zFNpkJ99NyGS6i2leJH5Z - aZMMxzrx01k2+fJfupjWbcalg7TaJQujh6NIA91EWeWjDTlT9k6/eBKdDLUl7vYR - SIu2oUckulXT4oqSQxeckem/8pxw8gHXKLt0vxnGJ0Ul6V1JUHmPAh1Nvof1GyAk - /ULDE7bGZEIeqd82/t/RKSswdcS/R1T5jJIWW51r4+/cg6xkU/mocyYkUf7dUtuo - W328ahbLt/t/IQsD208GDZUEWzFm4jtBDQHdgBqleZdxJLQqqHtjbt+gRV+DlslD - 6hOXpPY/Py4YsCmoFdzhVdAIosEVJueaj4/6QsyEgCfnzm3g4aTPmLo5KSBW5RFr - qcWo2sBKF4PBXbnsChQVugXfI+OKD+fGZb3XhHH/FegGerSjTf5iBnN5sOr26F7y - fZZUCZfiYTuSlaXAZE1W5Y1MSjAvlm+NkiYyBjWkfG2opM7yAtaNDNk/hELNKa0U - bHjcQgqgEDv6lJR9m/ETZEEZmStLFIClsSNfSs3gPn8gtFTz40SWZX5mJ/2y0cjC - HnVfQYp0SsGg1guE284wlDR51SpO7Y7tzzrqOGuJz+/qUFbafOQ85PY8MELC2APS - UQFzZPjZCy58WYFJ9c58or5VgrdCdd4D5kHWgVvR4WKfANbltLh7eMje5v7/062E - hMoTSw0wRbvraPysaHZhil3G9mZ1WmrLGyBaft4LRdluEQ== - =pdRr - -----END PGP MESSAGE----- - fp: 53B26AEDC08246715E15504B236B6291555E8401 - - created_at: "2023-08-08T22:43:53Z" - enc: | - -----BEGIN PGP MESSAGE----- - - hQIMA/YLzOYaRIJJAQ/+MllD5vcOVqPyPvvmIsDA9TkpEiUUgJDT+8IQZ6yEhEir - chxgVApGTXogV/aaPvu8e1jgCpcr4E5WxOI819dO+O+8zBpi7wEmZJx8ppppbYO9 - sTE9PZwpPAm47Dt+MtEM210at+13RHJ62gjwqfbJJhilGEZ72nTeXSfp3llSy8W1 - J8AA8yjdpSaCMnfxZKs6+m1LdtdbsWoBUah3GnCe6zQS1v6LBLhfHkmxG3eGlUGa - Qrn0T3Tjz3JHciiLFTw69cGekLx35bXA4mu7J1hKoZL0QqWwsMzIZnQXALmiqZ4D - U/7PlopObjK3fEs4Ig/XvGSo9WQnPQ/ErcbfSizl+b/KWnQvbZgaEf4x9OGU7noh - T2lDdJeuy7w5e0EBc2Rre9xT/+oS/khwLW7lv7vjw1JOP5fXZZDore6siX+zn5Zd - xtnYT9pzGIR/KXq48ZNi4p7Z9a7oZVjzNb7bB4WrKghrmrMcy9ZhJBHN3rreXTXS - pCSahPJgK2aY7eQjBLgjsBAoiDURlHPCmcSL99HCN6MILQyvYXAL4BMH50R3ow1b - eGD2owmHOe+kXb6i9xNk2gGL5sLFrxQsWQvN3kFE/rUokXIoT5G49oZKpjCKrvG2 - lGDUFsjtupdTk7mbS3I/5jNxID4GHhhctRSIRFwVowva/6l+IKe6enQ0DuXvF7jS - XgEPRtpWvnwlaQLBHCR5xI+1ADxgVwli3syOsECOTKA7pWavmiCXJus8qQcOpICn - GYtFI6s5XGUQW/W6tlRF5SLKX9tOtQ1XzBaw5rVX7AUGslHRiMWHsHxSoJMaNLI= - =HI+M - -----END PGP MESSAGE----- - fp: 91EBE87016391323642A6803B966009D57E69CC6 - - created_at: "2023-08-08T22:43:53Z" - enc: |- - -----BEGIN PGP MESSAGE----- - - wcFMA7zUOKwzpAE7ARAAh9l/sSOK63+KSxFaMFQxOVnSIBnxXiCGCh9FhUmhTi3L - GHVysPWC34s8fGEtzIpBf+mz86uxE3zeRHuhGJNFSFXleHawxrsvdStDfB1BEPpt - JEZU7n7lGjTdx1s8//SFyLJEjXA0noPj3P0MZjyrfDOTfDGvC/ufbdV1gOmXgi7I - RAnxhGlBafFxHi4AD144Lgcv5ySm87A2N1cVU3ga/d1MngoL3X54c4jg6NBT4yNK - bO48KxY1r5XDUmC9rzub6ONkXWwTluPrL0BT0vGBUp55frdawIuchOhtaggr6tX/ - Eo140WfH53wedKmqEH2tIXECkwzHSOGb7qGTqfhoIhuSuG/uTLiJJVysDnRHjVie - 9ton1tkPJNIP5trQLvVbdz053pToltRovOvQgO/9WVkslxQ3S01g4nfwOkSvblTy - flg8RxKWofJLA1hlodUHtNVtV0bQx+nImhQwyq+EEVvCi3wpCkjO/m2YZkCmAerN - 2rsrbw8EZNo5arnpeGCFjxVy5gROwM3Spi2JEDamingf6UX9+sxnt27SmbCUEHxI - oa8GV5NqhchzV4/iPkTqss4qgsMtwueZnak3mIZYVITkAKSt37Nt4YpTnvuEsqRf - uwpIAcbCyFVfsmCITaNqSgwLUak8EJcKyFCMfognJlMQEouK5HhBYfe82MU8twzS - UQGONyI4GbSgo244qRcT3A4rBQ8Q93eryLJWUDo9sstbMICRSCU9tdW8pTzu/7YM - +5tNMj7ZwcT3RTEKX3U7WGN42jdW2e6o5ooXfGxA0XaecQ== - =JM3G - -----END PGP MESSAGE----- - fp: DD0998E6CDF294537FC604F991FA5E5BF9AA901C - unencrypted_suffix: _unencrypted - version: 3.7.3