tv.identity -> krebs.build + extraHosts hack

This commit is contained in:
tv 2015-07-25 00:04:04 +02:00
parent 99527e88ae
commit 6840ea1191
12 changed files with 91 additions and 115 deletions

View File

@ -7,6 +7,8 @@ let
in in
{ {
krebs.build.host = config.krebs.hosts.cd;
imports = [ imports = [
../../2configs/tv/CAC-Developer-2.nix ../../2configs/tv/CAC-Developer-2.nix
../../2configs/tv/CAC-CentOS-7-64bit.nix ../../2configs/tv/CAC-CentOS-7-64bit.nix
@ -32,10 +34,6 @@ in
tv.iptables.input-internet-accept-new-tcp = tv.iptables.input-internet-accept-new-tcp =
singleton config.krebs.github-hosts-sync.port; singleton config.krebs.github-hosts-sync.port;
} }
{
imports = [ ../../2configs/tv/identity.nix ];
tv.identity.self = config.krebs.hosts.cd;
}
{ {
tv.iptables = { tv.iptables = {
enable = true; enable = true;

View File

@ -3,6 +3,8 @@
with lib; with lib;
{ {
krebs.build.host = config.krebs.hosts.mkdir;
imports = [ imports = [
../../2configs/tv/CAC-Developer-1.nix ../../2configs/tv/CAC-Developer-1.nix
../../2configs/tv/CAC-CentOS-7-64bit.nix ../../2configs/tv/CAC-CentOS-7-64bit.nix
@ -10,10 +12,6 @@ with lib;
../../2configs/tv/consul-server.nix ../../2configs/tv/consul-server.nix
../../2configs/tv/exim-smarthost.nix ../../2configs/tv/exim-smarthost.nix
../../2configs/tv/git.nix ../../2configs/tv/git.nix
{
imports = [ ../../2configs/tv/identity.nix ];
tv.identity.self = config.krebs.hosts.mkdir;
}
{ {
tv.iptables = { tv.iptables = {
enable = true; enable = true;

View File

@ -3,16 +3,14 @@
with lib; with lib;
{ {
krebs.build.host = config.krebs.hosts.nomic;
imports = [ imports = [
../../2configs/tv/AO753.nix ../../2configs/tv/AO753.nix
../../2configs/tv/base.nix ../../2configs/tv/base.nix
../../2configs/tv/consul-server.nix ../../2configs/tv/consul-server.nix
../../2configs/tv/exim-retiolum.nix ../../2configs/tv/exim-retiolum.nix
../../2configs/tv/git.nix ../../2configs/tv/git.nix
{
imports = [ ../../2configs/tv/identity.nix ];
tv.identity.self = config.krebs.hosts.nomic;
}
{ {
tv.iptables = { tv.iptables = {
enable = true; enable = true;

View File

@ -3,6 +3,8 @@
with lib; with lib;
{ {
krebs.build.host = config.krebs.hosts.rmdir;
imports = [ imports = [
../../2configs/tv/CAC-Developer-1.nix ../../2configs/tv/CAC-Developer-1.nix
../../2configs/tv/CAC-CentOS-7-64bit.nix ../../2configs/tv/CAC-CentOS-7-64bit.nix
@ -10,10 +12,6 @@ with lib;
../../2configs/tv/consul-server.nix ../../2configs/tv/consul-server.nix
../../2configs/tv/exim-smarthost.nix ../../2configs/tv/exim-smarthost.nix
../../2configs/tv/git.nix ../../2configs/tv/git.nix
{
imports = [ ../../2configs/tv/identity.nix ];
tv.identity.self = config.krebs.hosts.rmdir;
}
{ {
tv.iptables = { tv.iptables = {
enable = true; enable = true;

View File

@ -7,6 +7,8 @@ let
in in
{ {
krebs.build.host = config.krebs.hosts.wu;
imports = [ imports = [
../../2configs/tv/w110er.nix ../../2configs/tv/w110er.nix
../../2configs/tv/base.nix ../../2configs/tv/base.nix
@ -16,10 +18,6 @@ in
../../2configs/tv/mail-client.nix ../../2configs/tv/mail-client.nix
../../2configs/tv/xserver.nix ../../2configs/tv/xserver.nix
../../2configs/tv/synaptics.nix # TODO w110er if xserver is enabled ../../2configs/tv/synaptics.nix # TODO w110er if xserver is enabled
{
imports = [ ../../2configs/tv/identity.nix ];
tv.identity.self = config.krebs.hosts.wu;
}
{ {
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [

View File

@ -123,7 +123,7 @@ let
#loadmodule "extensions/ip_cloaking.so"; #loadmodule "extensions/ip_cloaking.so";
serverinfo { serverinfo {
name = ${toJSON (head config.tv.identity.self.nets.retiolum.aliases)}; name = ${toJSON (head config.krebs.build.host.nets.retiolum.aliases)};
sid = "4z3"; sid = "4z3";
description = "miep!"; description = "miep!";
network_name = "irc.retiolum"; network_name = "irc.retiolum";
@ -133,9 +133,9 @@ let
/* On multi-homed hosts you may need the following. These define /* On multi-homed hosts you may need the following. These define
* the addresses we connect from to other servers. */ * the addresses we connect from to other servers. */
/* for IPv4 */ /* for IPv4 */
vhost = ${concatMapStringsSep ", " toJSON config.tv.identity.self.nets.retiolum.addrs4}; vhost = ${concatMapStringsSep ", " toJSON config.krebs.build.host.nets.retiolum.addrs4};
/* for IPv6 */ /* for IPv6 */
vhost6 = ${concatMapStringsSep ", " toJSON config.tv.identity.self.nets.retiolum.addrs6}; vhost6 = ${concatMapStringsSep ", " toJSON config.krebs.build.host.nets.retiolum.addrs6};
/* ssl_private_key: our ssl private key */ /* ssl_private_key: our ssl private key */
ssl_private_key = "/tmp/ssl.key"; ssl_private_key = "/tmp/ssl.key";
@ -240,7 +240,7 @@ let
*/ */
# XXX This is stupid because only one host is allowed[?] # XXX This is stupid because only one host is allowed[?]
#host = ''${concatMapStringsSep ", " toJSON ( #host = ''${concatMapStringsSep ", " toJSON (
# config.tv.identity.self.nets.retiolum.addrs # config.krebs.build.host.nets.retiolum.addrs
#)}; #)};
port = 6667; port = 6667;
sslport = 6697; sslport = 6697;

View File

@ -4,7 +4,7 @@
tv.consul = rec { tv.consul = rec {
enable = true; enable = true;
inherit (config.tv.identity) self; self = config.krebs.build.host;
inherit (self) dc; inherit (self) dc;
server = true; server = true;

View File

@ -6,7 +6,7 @@ let
out = { out = {
krebs.git = { krebs.git = {
enable = true; enable = true;
root-title = "public repositories at ${config.tv.identity.self.name}"; root-title = "public repositories at ${config.krebs.build.host.name}";
root-desc = "keep calm and engage"; root-desc = "keep calm and engage";
inherit repos rules; inherit repos rules;
}; };
@ -14,7 +14,7 @@ let
repos = mapAttrs (_: s: removeAttrs s ["collaborators"]) ( repos = mapAttrs (_: s: removeAttrs s ["collaborators"]) (
public-repos // public-repos //
optionalAttrs config.tv.identity.self.secure restricted-repos optionalAttrs config.krebs.build.host.secure restricted-repos
); );
rules = concatMap make-rules (attrValues repos); rules = concatMap make-rules (attrValues repos);
@ -55,8 +55,8 @@ let
public = true; public = true;
hooks = { hooks = {
post-receive = git.irc-announce { post-receive = git.irc-announce {
# TODO make nick = config.tv.identity.self.name the default # TODO make nick = config.krebs.build.host.name the default
nick = config.tv.identity.self.name; nick = config.krebs.build.host.name;
channel = "#retiolum"; channel = "#retiolum";
server = "cd.retiolum"; server = "cd.retiolum";
}; };

View File

@ -1,8 +0,0 @@
{ config, ... }:
{
tv.identity = {
enable = true;
search = "retiolum";
};
}

View File

@ -19,6 +19,21 @@ let
api = { api = {
enable = mkEnableOption "krebs"; enable = mkEnableOption "krebs";
build = mkOption {
type = types.submodule {
options = {
host = mkOption {
type = types.host;
};
user = mkOption {
type = types.user;
};
};
};
# Define defaul value, so unset values of the submodule get reported.
default = {};
};
hosts = mkOption { hosts = mkOption {
type = with types; attrsOf host; type = with types; attrsOf host;
}; };
@ -26,12 +41,69 @@ let
users = mkOption { users = mkOption {
type = with types; attrsOf user; type = with types; attrsOf user;
}; };
# XXX is there a better place to define search-domain?
# TODO search-domains :: listOf hostname
search-domain = mkOption {
type = types.hostname;
default = "";
example = "retiolum";
};
}; };
imp = mkMerge [ imp = mkMerge [
{ krebs = lass-imp; } { krebs = lass-imp; }
{ krebs = makefu-imp; } { krebs = makefu-imp; }
{ krebs = tv-imp; } { krebs = tv-imp; }
{
# XXX This overlaps with krebs.retiolum
networking.extraHosts =
let
# TODO move domain name providers to a dedicated module
# providers : tree label providername
providers = {
internet = "hosts";
retiolum = "hosts";
de.viljetic = "regfish";
de.krebsco = "ovh";
};
# splitByProvider : [alias] -> set providername [alias]
splitByProvider = foldl (acc: alias: insert (providerOf alias) alias acc) {};
# providerOf : alias -> providername
providerOf = alias:
tree-get (splitString "." alias) providers;
# insert : k -> v -> set k [v] -> set k [v]
insert = name: value: set:
set // { ${name} = set.${name} or [] ++ [value]; };
# tree k v = set k (either v (tree k v))
# tree-get : [k] -> tree k v -> v
tree-get = path: x:
let
y = x.${last path};
in
if typeOf y != "set"
then y
else tree-get (init path) y;
in
concatStringsSep "\n" (flatten (
# TODO deepMap ["hosts" "nets"] (hostname: host: netname: net:
mapAttrsToList (hostname: host:
mapAttrsToList (netname: net:
let
aliases = toString (unique (longs ++ shorts));
longs = (splitByProvider net.aliases).hosts;
shorts = map (removeSuffix ".${cfg.search-domain}") longs;
in
map (addr: "${addr} ${aliases}") net.addrs
) host.nets
) config.krebs.hosts
));
}
]; ];
lass-imp = { lass-imp = {

View File

@ -4,7 +4,6 @@ _:
imports = [ imports = [
./consul.nix ./consul.nix
./ejabberd.nix ./ejabberd.nix
./identity.nix
./iptables.nix ./iptables.nix
]; ];
} }

View File

@ -1,77 +0,0 @@
{ config, lib, pkgs, ... }:
with import ../../4lib/tv { inherit lib pkgs; };
let
cfg = config.tv.identity;
out = {
options.tv.identity = api;
config = mkIf cfg.enable imp;
};
api = {
enable = mkEnableOption "tv.identity";
self = mkOption {
type = types.host;
};
#others = mkOption {
# type = types.host;
# default = filterAttrs (name: _host: name != cfg.self.name) cfg.hosts;
#};
search = mkOption {
type = types.hostname;
};
};
imp = {
networking.extraHosts =
concatStringsSep "\n" (flatten (
# TODO deepMap ["hosts" "nets"] (hostname: host: netname: net:
mapAttrsToList (hostname: host:
mapAttrsToList (netname: net:
let
aliases = toString (unique (longs ++ shorts));
longs = (splitByProvider net.aliases).hosts;
shorts = map (removeSuffix ".${cfg.search}") longs;
in
map (addr: "${addr} ${aliases}") net.addrs
) host.nets
) config.krebs.hosts
));
};
# TODO move domain name providers to a dedicated module
# providers : tree label providername
providers = {
internet = "hosts";
retiolum = "hosts";
de.viljetic = "regfish";
de.krebsco = "ovh";
};
# splitByProvider : [alias] -> set providername [alias]
splitByProvider = foldl (acc: alias: insert (providerOf alias) alias acc) {};
# providerOf : alias -> providername
providerOf = alias:
tree-get (splitString "." alias) providers;
# insert : k -> v -> set k [v] -> set k [v]
insert = name: value: set:
set // { ${name} = set.${name} or [] ++ [value]; };
# tree k v = set k (either v (tree k v))
# tree-get : [k] -> tree k v -> v
tree-get = path: x:
let
y = x.${last path};
in
if typeOf y != "set"
then y
else tree-get (init path) y;
in
out