2020-03-25 19:52:13 +01:00
|
|
|
{
|
|
|
|
description = "C3D2 NixOS configurations";
|
|
|
|
|
2020-06-11 07:50:42 +02:00
|
|
|
inputs = {
|
2021-06-07 02:30:56 +02:00
|
|
|
nixpkgs.url = "github:nixos/nixpkgs/release-21.05";
|
2021-09-20 22:11:17 +02:00
|
|
|
nixpkgs-mobilizon.url = "github:minijackson/nixpkgs/init-mobilizon";
|
2021-10-02 20:28:30 +02:00
|
|
|
nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
|
2021-10-01 23:54:37 +02:00
|
|
|
secrets.url = "git+ssh://gitea@gitea.c3d2.de/c3d2-admins/secrets.git";
|
2021-10-07 20:19:48 +02:00
|
|
|
nixos-hardware.url = "github:nixos/nixos-hardware";
|
2021-09-07 00:38:16 +02:00
|
|
|
zentralwerk.url = "git+https://gitea.c3d2.de/zentralwerk/network.git";
|
2021-03-06 01:13:27 +01:00
|
|
|
yammat.url = "git+https://gitea.c3d2.de/astro/yammat.git?ref=nix";
|
2021-03-10 01:54:28 +01:00
|
|
|
yammat.inputs.nixpkgs.follows = "nixpkgs";
|
2021-03-06 03:11:43 +01:00
|
|
|
scrapers.url = "git+https://gitea.c3d2.de/astro/scrapers.git";
|
|
|
|
scrapers.flake = false;
|
2021-09-10 00:21:38 +02:00
|
|
|
spacemsg.url = "github:astro/spacemsg";
|
|
|
|
spacemsg.flake = false;
|
2021-03-22 16:22:57 +01:00
|
|
|
tigger.url = "github:astro/tigger";
|
|
|
|
tigger.flake = false;
|
2021-09-08 01:22:40 +02:00
|
|
|
ticker.url = "git+https://gitea.c3d2.de/astro/ticker.git";
|
|
|
|
ticker.flake = false;
|
2020-06-11 07:50:42 +02:00
|
|
|
};
|
2020-04-15 19:00:56 +02:00
|
|
|
|
2021-09-20 22:11:17 +02:00
|
|
|
outputs = inputs@{ self, nixpkgs, secrets, nixos-hardware, zentralwerk, yammat, scrapers, spacemsg, tigger, ticker, ... }:
|
2021-02-22 12:31:58 +01:00
|
|
|
let
|
2021-03-03 16:20:17 +01:00
|
|
|
forAllSystems = nixpkgs.lib.genAttrs [ "aarch64-linux" "x86_64-linux" ];
|
2021-02-24 11:52:19 +01:00
|
|
|
|
2021-09-07 00:38:16 +02:00
|
|
|
inherit (nixpkgs.lib) recursiveUpdate;
|
|
|
|
extractZwHosts = { hosts4, hosts6, ... }:
|
|
|
|
recursiveUpdate (
|
|
|
|
builtins.foldl' (result: name:
|
|
|
|
recursiveUpdate result {
|
|
|
|
"${name}".ip4 = hosts4.${name};
|
|
|
|
}
|
|
|
|
) {} (builtins.attrNames hosts4)
|
|
|
|
) (
|
|
|
|
builtins.foldl' (result: ctx:
|
|
|
|
builtins.foldl' (result: name:
|
|
|
|
recursiveUpdate result {
|
|
|
|
"${name}".ip6 = hosts6.${ctx}.${name};
|
|
|
|
}
|
|
|
|
) result (builtins.attrNames hosts6.${ctx})
|
|
|
|
) {} (builtins.attrNames hosts6)
|
|
|
|
);
|
|
|
|
zwHostRegistry = {
|
|
|
|
hosts =
|
|
|
|
builtins.foldl' (result: net:
|
|
|
|
recursiveUpdate result (extractZwHosts zentralwerk.lib.config.site.net.${net})
|
|
|
|
) {} [ "core" "c3d2" "serv" ];
|
|
|
|
};
|
|
|
|
extraHostRegistry = import ./host-registry.nix;
|
|
|
|
hostRegistry = nixpkgs.lib.recursiveUpdate zwHostRegistry extraHostRegistry;
|
2020-04-14 08:42:13 +02:00
|
|
|
|
2021-09-08 00:46:51 +02:00
|
|
|
flakifiedHosts = nixpkgs.lib.filterAttrs (name: _: self.nixosConfigurations ? ${name}) hostRegistry.hosts;
|
2021-09-08 00:33:57 +02:00
|
|
|
|
|
|
|
getHostAddr = name:
|
|
|
|
let
|
|
|
|
hostConf = hostRegistry.hosts.${name};
|
|
|
|
in
|
|
|
|
if hostConf ? ip4
|
|
|
|
then hostConf.ip4
|
|
|
|
else if hostConf ? ip6
|
|
|
|
then hostConf.ip6
|
2021-10-18 22:24:08 +02:00
|
|
|
else throw "Host ${name} has no ip4 or ip6 address";
|
2021-09-08 00:33:57 +02:00
|
|
|
in {
|
2021-02-26 20:22:15 +01:00
|
|
|
overlay = import ./overlay;
|
|
|
|
|
2021-10-02 20:28:30 +02:00
|
|
|
legacyPackages = forAllSystems (system: nixpkgs.legacyPackages.${system}.extend self.overlay);
|
2020-04-21 13:44:42 +02:00
|
|
|
|
2021-02-22 12:31:58 +01:00
|
|
|
packages = forAllSystems (system:
|
|
|
|
let
|
|
|
|
pkgs = self.legacyPackages.${system};
|
|
|
|
in {
|
2021-09-22 20:33:41 +02:00
|
|
|
inherit (pkgs) bmxd openwebrx;
|
2021-02-26 20:22:15 +01:00
|
|
|
|
2021-09-08 00:34:38 +02:00
|
|
|
list-upgradable = pkgs.writeScriptBin "list-upgradable" ''
|
|
|
|
#! ${pkgs.runtimeShell}
|
|
|
|
|
|
|
|
NORMAL="\033[0m"
|
|
|
|
RED="\033[0;31m"
|
|
|
|
YELLOW="\033[0;33m"
|
|
|
|
GREEN="\033[0;32m"
|
|
|
|
|
|
|
|
${pkgs.lib.concatMapStringsSep "\n" (name:
|
|
|
|
let
|
|
|
|
addr = getHostAddr name;
|
|
|
|
in nixpkgs.lib.optionalString (addr != null) ''
|
|
|
|
echo -n -e "${name}: $RED"
|
|
|
|
RUNNING=$(ssh -o PreferredAuthentications=publickey -o StrictHostKeyChecking=accept-new root@"${addr}" "readlink /run/current-system")
|
2021-09-08 01:36:26 +02:00
|
|
|
if [ $? = 0 ] && [ -n "$RUNNING" ]; then
|
2021-09-08 00:34:38 +02:00
|
|
|
CURRENT=$(nix eval --raw ".#nixosConfigurations.${name}.config.system.build.toplevel" 2>/dev/null)
|
2021-09-08 01:36:26 +02:00
|
|
|
RUNNING_VER=$(basename $RUNNING|rev|cut -d - -f 1|rev)
|
|
|
|
CURRENT_VER=$(basename $CURRENT|rev|cut -d - -f 1|rev)
|
2021-09-08 00:34:38 +02:00
|
|
|
|
|
|
|
if [ "$RUNNING" = "$CURRENT" ]; then
|
2021-09-08 01:36:26 +02:00
|
|
|
echo -e "$GREEN"current"$NORMAL $RUNNING_VER"
|
|
|
|
elif [ "$RUNNING_VER" = "$CURRENT_VER" ]; then
|
|
|
|
echo -e "$GREEN"modified"$NORMAL $RUNNING_VER"
|
2021-09-08 00:34:38 +02:00
|
|
|
else
|
2021-09-08 01:36:26 +02:00
|
|
|
echo -e "$YELLOW"outdated"$NORMAL $RUNNING_VER < $CURRENT_VER"
|
2021-09-08 00:34:38 +02:00
|
|
|
fi
|
|
|
|
fi
|
|
|
|
echo -n -e "$NORMAL"
|
|
|
|
'') (builtins.attrNames flakifiedHosts)}
|
|
|
|
'';
|
2021-10-18 22:26:38 +02:00
|
|
|
|
|
|
|
prebuild-all = pkgs.runCommandNoCC "prebuild-all" {
|
|
|
|
preferLocalBuild = true;
|
|
|
|
} ''
|
|
|
|
mkdir $out
|
|
|
|
|
|
|
|
${pkgs.lib.concatMapStrings (name: ''
|
|
|
|
ln -s ${self.nixosConfigurations.${name}.config.system.build.toplevel} name
|
|
|
|
'') (builtins.attrNames flakifiedHosts)}
|
|
|
|
'';
|
|
|
|
|
2021-09-08 00:33:57 +02:00
|
|
|
} //
|
2021-05-26 18:50:48 +02:00
|
|
|
|
2021-09-08 00:33:57 +02:00
|
|
|
builtins.foldl' (result: host: result // {
|
2021-09-29 23:26:05 +02:00
|
|
|
# TODO: check if the ethernet address is reachable and if not,
|
|
|
|
# execute wol on a machine in HQ.
|
|
|
|
"${host}-wake" = pkgs.writeScriptBin "${host}-wake" ''
|
|
|
|
#!${pkgs.runtimeShell}
|
|
|
|
exec ${pkgs.wol}/bin/wol ${hostRegistry.hosts.${host}.ether}
|
|
|
|
'';
|
2021-09-08 00:33:57 +02:00
|
|
|
}) {} (builtins.attrNames (nixpkgs.lib.filterAttrs (_: { wol ? false, ... }: wol) hostRegistry.hosts)) //
|
2021-05-26 18:50:48 +02:00
|
|
|
|
2021-09-29 23:26:05 +02:00
|
|
|
builtins.foldl' (result: name:
|
|
|
|
let
|
2021-09-08 00:33:57 +02:00
|
|
|
host = getHostAddr name;
|
2021-09-29 23:26:05 +02:00
|
|
|
target = ''root@"${host}"'';
|
|
|
|
rebuildArg = "--flake ${self}#${name}";
|
|
|
|
profile = self.nixosConfigurations.${name}.config.system.build.toplevel;
|
|
|
|
in result // {
|
|
|
|
# Generate a small script for copying this flake to the
|
|
|
|
# remote machine and bulding and switching there.
|
|
|
|
# Can be run with `nix run c3d2#…-nixos-rebuild switch`
|
|
|
|
"${name}-nixos-rebuild" = pkgs.writeScriptBin "${name}-nixos-rebuild" ''
|
2021-09-08 22:48:13 +02:00
|
|
|
#!${pkgs.runtimeShell} -e
|
2021-10-27 21:25:00 +02:00
|
|
|
[[ $(ssh ${target} cat /etc/hostname) == ${name} ]]
|
2021-10-19 01:27:22 +02:00
|
|
|
nix copy --to ssh://${target} ${secrets}
|
|
|
|
nix copy --to ssh://${target} ${self}
|
2021-10-27 21:25:00 +02:00
|
|
|
ssh ${target} nixos-rebuild ${rebuildArg} "$@"
|
2021-09-08 22:48:13 +02:00
|
|
|
'';
|
2021-09-29 23:26:05 +02:00
|
|
|
|
2021-09-30 20:54:02 +02:00
|
|
|
"${name}-nixos-rebuild-local" = pkgs.writeScriptBin "${name}-nixos-rebuild" ''
|
2021-10-27 21:25:00 +02:00
|
|
|
#!${pkgs.runtimeShell} -e
|
|
|
|
[[ $(ssh ${target} cat /etc/hostname) == ${name} ]]
|
|
|
|
nix copy --to ssh://${target} ${profile}
|
|
|
|
ssh ${target} "${profile}/bin/switch-to-configuration $*"
|
|
|
|
'';
|
2021-09-29 23:26:05 +02:00
|
|
|
|
2021-09-30 20:54:02 +02:00
|
|
|
"${name}-cleanup" = pkgs.writeScriptBin "${name}-cleanup" ''
|
2021-10-27 21:25:00 +02:00
|
|
|
#!${pkgs.runtimeShell} -e
|
|
|
|
ssh ${target} "time nix-collect-garbage -d && time nix-store --optimise"
|
|
|
|
'';
|
2021-09-30 20:54:02 +02:00
|
|
|
}) {} (builtins.attrNames flakifiedHosts) //
|
2021-09-23 19:34:09 +02:00
|
|
|
|
|
|
|
builtins.foldl' (result: host: result // {
|
|
|
|
"${host}-sdImage" = self.nixosConfigurations.${host}.config.system.build.sdImage;
|
|
|
|
}) {} (builtins.attrNames (nixpkgs.lib.filterAttrs (host: nixosConfiguration:
|
|
|
|
nixosConfiguration.config.system.build ? sdImage
|
|
|
|
) self.nixosConfigurations))
|
2021-09-08 00:33:57 +02:00
|
|
|
);
|
2020-08-04 17:15:07 +02:00
|
|
|
|
2021-02-22 12:31:58 +01:00
|
|
|
nixosConfigurations = let
|
|
|
|
nixosSystem' =
|
|
|
|
# Our custom NixOS builder
|
2021-09-20 22:11:17 +02:00
|
|
|
{ nixpkgs ? inputs.nixpkgs, extraArgs ? {}, ... }@args:
|
|
|
|
nixpkgs.lib.nixosSystem (nixpkgs.lib.filterAttrs (n: _: n != "nixpkgs") args // {
|
2021-03-06 03:11:43 +01:00
|
|
|
extraArgs = extraArgs // {
|
2021-09-23 19:34:09 +02:00
|
|
|
inherit hostRegistry inputs;
|
2021-03-06 03:11:43 +01:00
|
|
|
};
|
2021-02-22 12:31:58 +01:00
|
|
|
extraModules = [
|
|
|
|
self.nixosModules.c3d2
|
|
|
|
({ pkgs, ... }: {
|
2021-02-26 20:22:15 +01:00
|
|
|
nixpkgs.overlays = [ self.overlay ];
|
2021-02-22 12:31:58 +01:00
|
|
|
})
|
|
|
|
];
|
|
|
|
});
|
|
|
|
in {
|
2020-08-04 17:15:07 +02:00
|
|
|
|
2021-02-26 20:22:15 +01:00
|
|
|
freifunk = nixosSystem' {
|
2021-03-05 01:16:57 +01:00
|
|
|
modules = [
|
|
|
|
./hosts/containers/freifunk
|
|
|
|
({ ... }: {
|
|
|
|
nixpkgs.overlays = with secrets.overlays; [
|
|
|
|
freifunk ospf
|
|
|
|
];
|
|
|
|
})
|
|
|
|
];
|
2021-02-26 20:22:15 +01:00
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-10-02 20:28:30 +02:00
|
|
|
gitea = nixosSystem' {
|
|
|
|
nixpkgs = inputs.nixpkgs-unstable;
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/gitea
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-02-22 13:21:31 +01:00
|
|
|
glotzbert = nixosSystem' {
|
2021-02-22 14:16:25 +01:00
|
|
|
modules = [
|
|
|
|
./hosts/glotzbert
|
|
|
|
nixos-hardware.nixosModules.common-cpu-intel
|
|
|
|
nixos-hardware.nixosModules.common-pc-ssd
|
2021-03-12 17:06:37 +01:00
|
|
|
secrets.nixosModules.admins
|
2021-02-22 14:16:25 +01:00
|
|
|
];
|
2021-02-22 13:21:31 +01:00
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
|
|
|
pulsebert = nixosSystem' {
|
2021-09-23 19:34:09 +02:00
|
|
|
modules = [
|
|
|
|
"${inputs.nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
|
|
|
|
./hosts/pulsebert
|
|
|
|
];
|
2021-02-22 13:21:31 +01:00
|
|
|
system = "aarch64-linux";
|
|
|
|
};
|
2020-08-04 17:15:07 +02:00
|
|
|
|
2021-09-23 03:32:17 +02:00
|
|
|
radiobert = nixosSystem' {
|
|
|
|
modules = [
|
2021-09-23 19:34:09 +02:00
|
|
|
"${inputs.nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
|
2021-09-23 03:32:17 +02:00
|
|
|
./hosts/radiobert
|
|
|
|
];
|
2021-09-22 21:21:13 +02:00
|
|
|
system = "aarch64-linux";
|
|
|
|
};
|
|
|
|
|
2021-09-27 22:19:24 +02:00
|
|
|
dacbert = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
"${inputs.nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
|
2021-10-07 20:19:48 +02:00
|
|
|
nixos-hardware.nixosModules.raspberry-pi-4
|
2021-09-27 22:19:24 +02:00
|
|
|
./hosts/dacbert
|
|
|
|
];
|
|
|
|
system = "aarch64-linux";
|
|
|
|
};
|
|
|
|
|
2021-10-09 02:40:53 +02:00
|
|
|
schalter = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
"${inputs.nixpkgs}/nixos/modules/installer/sd-card/sd-image-raspberrypi.nix"
|
|
|
|
({ lib, ... }: {
|
|
|
|
networking.hostName = "schalter";
|
|
|
|
hardware.enableRedistributableFirmware = true;
|
|
|
|
#networking.wireless.enable = true;
|
|
|
|
powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
|
|
|
|
|
|
|
|
boot = {
|
|
|
|
loader = {
|
|
|
|
grub.enable = false;
|
|
|
|
raspberryPi = {
|
|
|
|
enable = true;
|
|
|
|
version = 1;
|
|
|
|
uboot.enable = true;
|
|
|
|
};
|
|
|
|
};
|
|
|
|
# supportedFilesystems = lib.mkForce [ "vfat" "ext4" ];
|
|
|
|
|
|
|
|
tmpOnTmpfs = true;
|
|
|
|
};
|
|
|
|
sdImage = {
|
|
|
|
compressImage = false;
|
|
|
|
imageBaseName = "schalter";
|
|
|
|
firmwareSize = 512;
|
|
|
|
};
|
|
|
|
|
|
|
|
})
|
|
|
|
];
|
|
|
|
system = "armv6l-linux";
|
|
|
|
};
|
|
|
|
|
2021-03-03 16:20:17 +01:00
|
|
|
yggdrasil = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./hosts/containers/yggdrasil
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./lib/users/emery.nix
|
2021-03-04 01:45:29 +01:00
|
|
|
({ ... }: {
|
|
|
|
nixpkgs.overlays = [ secrets.overlays.ospf ];
|
|
|
|
})
|
2021-03-03 16:20:17 +01:00
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-03-06 01:13:27 +01:00
|
|
|
matemat = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/matemat
|
2021-03-10 01:54:28 +01:00
|
|
|
yammat.nixosModule
|
2021-03-06 16:57:47 +01:00
|
|
|
secrets.nixosModules.admins
|
2021-03-06 02:28:46 +01:00
|
|
|
({ ... }: {
|
|
|
|
nixpkgs.overlays = [ secrets.overlays.matemat ];
|
|
|
|
})
|
2021-03-06 01:13:27 +01:00
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-03-06 02:57:35 +01:00
|
|
|
scrape = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/scrape
|
|
|
|
({ ... }: {
|
|
|
|
nixpkgs.overlays = [ secrets.overlays.scrape ];
|
|
|
|
})
|
|
|
|
];
|
2021-03-06 03:11:43 +01:00
|
|
|
extraArgs = { inherit scrapers; };
|
2021-03-06 02:57:35 +01:00
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-03-11 15:59:00 +01:00
|
|
|
dn42 = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/dn42
|
|
|
|
({ ... }: {
|
|
|
|
nixpkgs.overlays = [ secrets.overlays.dn42 ];
|
|
|
|
})
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-03-11 16:40:39 +01:00
|
|
|
grafana = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/grafana
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-03-12 21:45:12 +01:00
|
|
|
hydra = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/hydra
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-03-22 16:22:57 +01:00
|
|
|
mucbot = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
"${tigger}/module.nix"
|
|
|
|
{ nixpkgs.overlays = [ secrets.overlays.mucbot ]; }
|
|
|
|
./hosts/containers/mucbot
|
|
|
|
];
|
|
|
|
extraArgs = { inherit tigger; };
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-05-10 00:28:27 +02:00
|
|
|
kibana = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/kibana
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-06-23 21:59:10 +02:00
|
|
|
public-access-proxy = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/public-access-proxy
|
|
|
|
];
|
2021-10-06 21:55:43 +02:00
|
|
|
extraArgs = {
|
|
|
|
inherit (self) nixosConfigurations;
|
|
|
|
};
|
2021-06-23 21:59:10 +02:00
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-09-08 01:22:40 +02:00
|
|
|
ticker = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
"${ticker}/nixos-module.nix"
|
|
|
|
./hosts/containers/ticker
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-09-10 00:21:38 +02:00
|
|
|
spaceapi = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
"${spacemsg}/spaceapi/module.nix"
|
|
|
|
./hosts/containers/spaceapi
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-09-10 22:59:40 +02:00
|
|
|
stream = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/stream
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-09-20 22:11:17 +02:00
|
|
|
mobilizon = nixosSystem' {
|
|
|
|
# TODO: pending https://github.com/NixOS/nixpkgs/pull/119132
|
|
|
|
nixpkgs = inputs.nixpkgs-mobilizon;
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/mobilizon
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-10-02 00:46:59 +02:00
|
|
|
mail = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/mail
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-10-05 00:12:02 +02:00
|
|
|
logging = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/logging
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-10-05 12:53:16 +02:00
|
|
|
keycloak = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
2021-10-15 23:11:54 +02:00
|
|
|
({ ... }: {
|
|
|
|
nixpkgs.overlays = with secrets.overlays; [
|
|
|
|
keycloak
|
|
|
|
];
|
|
|
|
})
|
2021-10-05 12:53:16 +02:00
|
|
|
./hosts/containers/keycloak
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-10-06 02:55:30 +02:00
|
|
|
c3d2-web = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/c3d2-web
|
|
|
|
({ ... }: {
|
|
|
|
nixpkgs.overlays = [ secrets.overlays.c3d2-web ];
|
|
|
|
})
|
|
|
|
];
|
|
|
|
extraArgs = {
|
|
|
|
inherit nixpkgs;
|
|
|
|
};
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-10-07 23:00:50 +02:00
|
|
|
sdrweb = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/sdrweb
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-10-15 02:07:50 +02:00
|
|
|
bind = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
({ ... }: {
|
|
|
|
nixpkgs.overlays = with secrets.overlays; [
|
2021-10-15 19:14:17 +02:00
|
|
|
bind
|
2021-10-15 02:07:50 +02:00
|
|
|
];
|
|
|
|
})
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/bind
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2021-10-18 03:46:25 +02:00
|
|
|
jabber = nixosSystem' {
|
|
|
|
modules = [
|
|
|
|
({ ... }: {
|
|
|
|
nixpkgs.overlays = with secrets.overlays; [
|
|
|
|
jabber
|
|
|
|
];
|
|
|
|
})
|
|
|
|
./lib/lxc-container.nix
|
|
|
|
./hosts/containers/jabber
|
|
|
|
];
|
|
|
|
system = "x86_64-linux";
|
|
|
|
};
|
|
|
|
|
2020-08-04 17:15:07 +02:00
|
|
|
};
|
|
|
|
|
2021-09-25 11:11:15 +02:00
|
|
|
nixosModule = import ./lib;
|
|
|
|
nixosModules.c3d2 = self.nixosModule;
|
2021-02-22 12:31:58 +01:00
|
|
|
};
|
2020-03-25 19:52:13 +01:00
|
|
|
}
|