v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Actions Packages Projects Releases Activity

most of colmena done
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Vivian 2022-07-30 17:15:58 +02:00
parent ee9a017c46
commit 5f5cfcb8d1
1 changed files with 25 additions and 34 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

59
flake.nix
View file

@ -28,38 +28,32 @@
inherit (builtins) filter mapAttrs; inherit (builtins) filter mapAttrs;
system = "x86_64-linux"; system = "x86_64-linux";
hosts = import ./hosts.nix; hosts = import ./hosts.nix;
specialArgs = { inherit hosts inputs; };
# Filter all nixos host definitions that are actual nix machines
nixHosts = filter ({ nix ? true, ... }: nix) hosts;
resolveImports = { hostname, profile ? hostname, lxc ? true, ... }: [
vault-secrets.nixosModules.vault-secrets
./nixos/common
"${./.}/nixos/hosts/${profile}/configuration.nix"
] ++ (if lxc then [
"${nixpkgs}/nixos/modules/virtualisation/lxc-container.nix"
./nixos/common/generic-lxc.nix
]
else [ ./nixos/common/generic-vm.nix ]);
# TODO: consolidate with mkColmenaHost
# Create a nixosConfiguration based on a foldername (nixname) and if the host is an LXC container or a VM. # Create a nixosConfiguration based on a foldername (nixname) and if the host is an LXC container or a VM.
mkConfig = { hostname, profile ? hostname, lxc ? true, ... }: { mkConfig = { hostname, profile ? hostname, lxc ? true, ... }@host: {
"${profile}" = lib.nixosSystem { "${profile}" = lib.nixosSystem {
inherit system; inherit system;
modules = [ inherit specialArgs;
./nixos/common modules = resolveImports host;
"${./.}/nixos/hosts/${profile}/configuration.nix"
] ++ (if lxc then [
"${nixpkgs}/nixos/modules/virtualisation/lxc-container.nix"
./nixos/common/generic-lxc.nix
] else
[ ./nixos/common/generic-vm.nix ]);
specialArgs = { inherit hosts inputs; };
}; };
}; };
# Import all nixos host definitions that are actual nix machines mkColmenaHost = { ip, hostname, profile ? hostname, lxc ? true, ... }@host: {
nixHosts = filter ({ nix ? true, ... }: nix) hosts;
mkColmenaHost = { ip, hostname, profile ? hostname, lxc ? true, ... }: {
"${hostname}" = { "${hostname}" = {
imports = [ imports = resolveImports host;
vault-secrets.nixosModules.vault-secrets
./nixos/common
"${./.}/nixos/hosts/${profile}/configuration.nix"
] ++ (if lxc then [
"${nixpkgs}/nixos/modules/virtualisation/lxc-container.nix"
./nixos/common/generic-lxc.nix
] else [ ./nixos/common/generic-vm.nix ]);
deployment = { deployment = {
targetHost = ip; targetHost = ip;
targetUser = null; # Defaults to $USER targetUser = null; # Defaults to $USER
@ -67,8 +61,7 @@
}; };
}; };
pkgs = serokell-nix.lib.pkgsWith nixpkgs.legacyPackages.${system} [ vault-secrets.overlay ]; legacyPackages = serokell-nix.lib.pkgsWith nixpkgs.legacyPackages.${system} [ vault-secrets.overlay ];
in in
{ {
# Make the config and deploy sets # Make the config and deploy sets
@ -78,16 +71,14 @@
{ {
meta = { meta = {
nixpkgs = import nixpkgs { nixpkgs = import nixpkgs {
system = "x86_64-linux"; inherit system;
overlays = [ overlays = [
(import ./nixos/pkgs) (import ./nixos/pkgs)
vault-secrets.overlay vault-secrets.overlay
minecraft-servers.overlays.default minecraft-servers.overlays.default
]; ];
}; };
specialArgs = { inherit specialArgs;
inherit hosts;
};
}; };
} }
nixHosts; nixHosts;
@ -95,21 +86,21 @@
apps.${system} = rec { apps.${system} = rec {
vault-push-approles = { vault-push-approles = {
type = "app"; type = "app";
program = "${pkgs.vault-push-approles self}/bin/vault-push-approles"; program = "${legacyPackages.vault-push-approles self}/bin/vault-push-approles";
}; };
vault-push-approle-envs = { vault-push-approle-envs = {
type = "app"; type = "app";
program = program =
"${pkgs.vault-push-approle-envs self}/bin/vault-push-approle-envs"; "${legacyPackages.vault-push-approle-envs self}/bin/vault-push-approle-envs";
}; };
}; };
# Use by running `nix develop` # Use by running `nix develop`
devShells.${system}.default = pkgs.mkShell { devShells.${system}.default = legacyPackages.mkShell {
VAULT_ADDR = "http://vault.olympus:8200/"; VAULT_ADDR = "http://vault.olympus:8200/";
# This only support bash so just execute zsh in bash as a workaround :/ # This only support bash so just execute zsh in bash as a workaround :/
shellHook = "zsh; exit $?"; shellHook = "zsh; exit $?";
buildInputs = with pkgs; [ buildInputs = with legacyPackages; [
colmena colmena
fluxcd fluxcd
k9s k9s