qenya/nixfiles
1
0
Fork 0
Code Issues 5 Pull requests Actions Activity

treewide: move all deployment keys to flake.nix

Browse source
This commit is contained in:
Katherina Walshe-Grey 2024-09-18 03:06:48 +01:00
parent 32dabca83f
commit 9f6d0fbaf8
7 changed files with 26 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
common/base-server/default.nix
View file

@ -11,7 +11,6 @@ in
time.timeZone = "Etc/UTC"; time.timeZone = "Etc/UTC";
# Allow remote deployment with colmena # Allow remote deployment with colmena
deployment.targetUser = null;
security.sudo.wheelNeedsPassword = false; security.sudo.wheelNeedsPassword = false;
nix.settings.trusted-users = [ "@wheel" ]; nix.settings.trusted-users = [ "@wheel" ];
}; };

26
flake.nix
View file

@ -78,6 +78,32 @@
yevaud.imports = [ ./hosts/yevaud ]; yevaud.imports = [ ./hosts/yevaud ];
orm.imports = [ ./hosts/orm ]; orm.imports = [ ./hosts/orm ];
kalessin.imports = [ ./hosts/kalessin ]; kalessin.imports = [ ./hosts/kalessin ];
kilgharrah.deployment = {
allowLocalDeployment = true;
targetHost = null; # disallow remote deployment
};
tohru.deployment = {
allowLocalDeployment = true;
targetHost = null; # disallow remote deployment
};
yevaud.deployment = {
targetHost = "yevaud.birdsong.network";
targetUser = null;
};
orm.deployment = {
targetHost = "orm.birdsong.network";
targetUser = null;
};
kalessin.deployment = {
targetHost = "kalessin.birdsong.network";
targetUser = null;
buildOnTarget = true;
};
}; };
# TODO: have this work on other systems too # TODO: have this work on other systems too

4
hosts/kalessin/default.nix
View file

@ -6,10 +6,6 @@
]; ];
networking.hostId = "534b538e"; networking.hostId = "534b538e";
deployment = {
targetHost = "kalessin.birdsong.network";
buildOnTarget = true;
};
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;

5
hosts/kilgharrah/default.nix
View file

@ -11,11 +11,6 @@
nixpkgs.hostPlatform = "x86_64-linux"; nixpkgs.hostPlatform = "x86_64-linux";
networking.hostId = "72885bb5"; networking.hostId = "72885bb5";
deployment = {
allowLocalDeployment = true;
targetHost = null; # disallow remote deployment
};
qenya.base-graphical.enable = true; qenya.base-graphical.enable = true;
qenya.base-graphical.desktop = "plasma6"; qenya.base-graphical.desktop = "plasma6";

1
hosts/orm/default.nix
View file

@ -6,7 +6,6 @@
]; ];
networking.hostId = "00000000"; networking.hostId = "00000000";
deployment.targetHost = "orm.birdsong.network";
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;

5
hosts/tohru/default.nix
View file

@ -13,11 +13,6 @@
nixpkgs.hostPlatform = "x86_64-linux"; nixpkgs.hostPlatform = "x86_64-linux";
networking.hostId = "31da19c1"; networking.hostId = "31da19c1";
deployment = {
allowLocalDeployment = true;
targetHost = null; # disallow remote deployment
};
qenya.base-graphical.enable = true; qenya.base-graphical.enable = true;
time.timeZone = "Europe/London"; time.timeZone = "Europe/London";

1
hosts/yevaud/default.nix
View file

@ -6,7 +6,6 @@
]; ];
networking.hostId = "09673d65"; networking.hostId = "09673d65";
deployment.targetHost = "yevaud.birdsong.network";
boot.loader.systemd-boot.enable = true; boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;