leon/nix-config
leon
/
nix-config
forked from c3d2/nix-config
1
0
Fork 0
Code Pull Requests Activity

server6: enable cluster modules, add secrets

This commit is contained in:
Sandro - 2023-05-21 22:04:13 +02:00
parent ffe2ed7dd6
commit c839c23baa
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
3 changed files with 15 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
flake.nix
View File

@ -666,10 +666,9 @@
server6 = nixosSystem' {
modules = [
./hosts/server6
# TODO
# self.nixosModules.cluster-network
# self.nixosModules.cluster
# skyflake.nixosModules.default
self.nixosModules.cluster-network
self.nixosModules.cluster
skyflake.nixosModules.default
{ _module.args = { inherit self; }; }
];
};

16
hosts/server6/default.nix
View File

@ -37,15 +37,15 @@ _:
simd.arch = "ivybridge"; # E5-2690 v2
# sops = {
# defaultSopsFile = ./secrets.yaml;
# secrets."machine-id" = {
# mode = "444";
# path = "/etc/machine-id";
# };
# };
sops = {
defaultSopsFile = ./secrets.yaml;
secrets."machine-id" = {
mode = "444";
path = "/etc/machine-id";
};
};
# skyflake.nomad.client.meta."c3d2.cpuSpeed" = "5";
skyflake.nomad.client.meta."c3d2.cpuSpeed" = "5";
system.stateVersion = "22.11";
}

7
hosts/server6/secrets.yaml
View File

@ -1,6 +1,7 @@
root: ENC[AES256_GCM,data:0cmGMmyG+TT/5f5uKqwboSkBx+P0YFTypw8=,iv:z18rZcyTN4Y2PpsCDyiPW3xlfXg4eiKfguEfcaOWn1k=,tag:30BoGWmh4c47jY+XpvMxVg==,type:str]
machine-id: ENC[AES256_GCM,data:/SlPKiJFWeVoZwE9YgDXmbCGbPmnnubmydxhSlAk+Cg=,iv:NjrupF/9qiHG+U916pq+3aM3tsQV9I5P9VUTvgcaN0w=,tag:TQAmGWIC9AQlP2qLrKnsCA==,type:str]
#ENC[AES256_GCM,data:xpxp6eIK1DpD/7SQLh7PjAHw9NprLNt4LGoaHTqwvGRi+WQIC8GBfBhXWdWtWv7NrRTv,iv:jZEVmt/p07bEN0pfC2IRX90vw6zjjsJeS4oAy4bLRJ4=,tag:BhFGfU8zg3SUOG3Zw3FATw==,type:comment]
luks: ENC[AES256_GCM,data:zU7Oko/uprzWZtCN8zFG+wGW2rcxCWiOYS02KuSVLJN6F50ss+fCH3j6PE4dTSKBUtTFAQq9yX4mbQHlpE7r/A==,iv:K+ycB4iQJpZP1bFONEWOLW1RSc4kaExpx9DVemvWyQI=,tag:8d9JW/pHQ56SjAcxcKqlGg==,type:str]
root: ENC[AES256_GCM,data:0cmGMmyG+TT/5f5uKqwboSkBx+P0YFTypw8=,iv:z18rZcyTN4Y2PpsCDyiPW3xlfXg4eiKfguEfcaOWn1k=,tag:30BoGWmh4c47jY+XpvMxVg==,type:str]
sops:
kms: []
gcp_kms: []
@ -25,8 +26,8 @@ sops:
VWxmV2FKNVFNZ0hjbTFsakI4dXUySU0KoP19hoQuxR9jnr+XwJqvRvAkED9rvdzg
ocHJzgiQW2EdiZ8NTwrv5ML9YlNfj6X/BCD29oPOWyfQCf4TQTQoDg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-05-21T20:02:34Z"
mac: ENC[AES256_GCM,data:c8WGzgSjnPfsXpXzcaMH0stRp7j/79DK47B61srivQozRmTEo3JtEbioHyFQhmjvDU6Py4yLAPvY4tkocGCb03Z/UN/nL/DifPzycR7pNetLk4OddvAeWXbq9pKGemW17USZj+bJOPXNPNmeJrZoUA7w9Yir/irGORab5XMphiM=,iv:Do4VKS8csPPXFQiaz5LRYa9qo0dFu5CH3NeRffr1r40=,tag:uWJ7BH4lIUaYkrYcFNfbNg==,type:str]
lastmodified: "2023-05-21T20:03:45Z"
mac: ENC[AES256_GCM,data:hByMXpEmbiL54PlZLaF3dxLtq2bFUSIK4O4Ps+rcVjyIojyp+iqe+8hHkOhK43WGpbOO2RiI1M6IkADBzDuakWWVAMlrnDyyfqPNinuwg3x4QWthwEudgS7Yh9WdGOFGZMCAnekj+Y8DfYOACjk2adub60zTwzK3PBFeyTVsPnA=,iv:lOBoUfVPEmh1ryPICrKrtK9wTv3ny45BwRycmhKNe8k=,tag:fB89vtLJt7BjUqJVLoq+Eg==,type:str]
pgp:
- created_at: "2023-05-21T20:01:55Z"
enc: |