sync-containers3: lass -> krebs
This commit is contained in:
parent
bf4a3fe78e
commit
c7417c8bc1
@ -53,6 +53,7 @@ let
|
|||||||
./sitemap.nix
|
./sitemap.nix
|
||||||
./ssl.nix
|
./ssl.nix
|
||||||
./sync-containers.nix
|
./sync-containers.nix
|
||||||
|
./sync-containers3.nix
|
||||||
./systemd.nix
|
./systemd.nix
|
||||||
./tinc.nix
|
./tinc.nix
|
||||||
./tinc_graphs.nix
|
./tinc_graphs.nix
|
||||||
|
@ -1,8 +1,8 @@
|
|||||||
{ config, lib, pkgs, ... }: let
|
{ config, lib, pkgs, ... }: let
|
||||||
cfg = config.lass.sync-containers3;
|
cfg = config.krebs.sync-containers3;
|
||||||
slib = pkgs.stockholm.lib;
|
slib = pkgs.stockholm.lib;
|
||||||
in {
|
in {
|
||||||
options.lass.sync-containers3 = {
|
options.krebs.sync-containers3 = {
|
||||||
inContainer = {
|
inContainer = {
|
||||||
enable = lib.mkEnableOption "container config for syncing";
|
enable = lib.mkEnableOption "container config for syncing";
|
||||||
pubkey = lib.mkOption {
|
pubkey = lib.mkOption {
|
@ -27,7 +27,7 @@ with import <stockholm/lib>;
|
|||||||
|
|
||||||
krebs.build.host = config.krebs.hosts.green;
|
krebs.build.host = config.krebs.hosts.green;
|
||||||
|
|
||||||
lass.sync-containers3.inContainer = {
|
krebs.sync-containers3.inContainer = {
|
||||||
enable = true;
|
enable = true;
|
||||||
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFlUMf943qEQG64ob81p6dgoHq4jUjq7tSvmSdEOEU2y";
|
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFlUMf943qEQG64ob81p6dgoHq4jUjq7tSvmSdEOEU2y";
|
||||||
};
|
};
|
||||||
|
@ -14,7 +14,7 @@ with import <stockholm/lib>;
|
|||||||
defaults.email = "acme@lassul.us";
|
defaults.email = "acme@lassul.us";
|
||||||
};
|
};
|
||||||
|
|
||||||
lass.sync-containers3.inContainer = {
|
krebs.sync-containers3.inContainer = {
|
||||||
enable = true;
|
enable = true;
|
||||||
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFQWzKuXrwQopBc1mzb2VpljmwAs7Y8bRl9a8hBXLC+l";
|
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFQWzKuXrwQopBc1mzb2VpljmwAs7Y8bRl9a8hBXLC+l";
|
||||||
};
|
};
|
||||||
|
@ -17,7 +17,7 @@ with import <stockholm/lib>;
|
|||||||
defaults.email = "acme@lassul.us";
|
defaults.email = "acme@lassul.us";
|
||||||
};
|
};
|
||||||
|
|
||||||
lass.sync-containers3.inContainer = {
|
krebs.sync-containers3.inContainer = {
|
||||||
enable = true;
|
enable = true;
|
||||||
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOvPKdbVwMEFCDMyNAzR8NdVjTbQL2G+03Xomxn6KKFt";
|
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOvPKdbVwMEFCDMyNAzR8NdVjTbQL2G+03Xomxn6KKFt";
|
||||||
};
|
};
|
||||||
|
@ -9,7 +9,7 @@ with import <stockholm/lib>;
|
|||||||
|
|
||||||
krebs.build.host = config.krebs.hosts.ubik;
|
krebs.build.host = config.krebs.hosts.ubik;
|
||||||
|
|
||||||
lass.sync-containers3.inContainer = {
|
krebs.sync-containers3.inContainer = {
|
||||||
enable = true;
|
enable = true;
|
||||||
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPBFGMjH0+Dco6DVFZbByENMci8CFTLXCL7j53yctPnM";
|
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPBFGMjH0+Dco6DVFZbByENMci8CFTLXCL7j53yctPnM";
|
||||||
};
|
};
|
||||||
|
@ -9,7 +9,7 @@ in {
|
|||||||
|
|
||||||
krebs.build.host = config.krebs.hosts.yellow;
|
krebs.build.host = config.krebs.hosts.yellow;
|
||||||
|
|
||||||
lass.sync-containers3.inContainer = {
|
krebs.sync-containers3.inContainer = {
|
||||||
enable = true;
|
enable = true;
|
||||||
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN737BAP36KiZO97mPKTIUGJUcr97ps8zjfFag6cUiYL";
|
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN737BAP36KiZO97mPKTIUGJUcr97ps8zjfFag6cUiYL";
|
||||||
};
|
};
|
||||||
|
@ -1,10 +1,6 @@
|
|||||||
{ config, pkgs, ... }:
|
{ config, pkgs, ... }:
|
||||||
{
|
{
|
||||||
imports = [
|
krebs.sync-containers3.containers.green = {
|
||||||
<stockholm/lass/2configs/container-networking.nix>
|
|
||||||
];
|
|
||||||
|
|
||||||
lass.sync-containers3.containers.green = {
|
|
||||||
sshKey = "${toString <secrets>}/green.sync.key";
|
sshKey = "${toString <secrets>}/green.sync.key";
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
{ config, pkgs, ... }:
|
{ config, pkgs, ... }:
|
||||||
{
|
{
|
||||||
lass.sync-containers3.containers.orange = {
|
krebs.sync-containers3.containers.orange = {
|
||||||
sshKey = "${toString <secrets>}/orange.sync.key";
|
sshKey = "${toString <secrets>}/orange.sync.key";
|
||||||
};
|
};
|
||||||
services.nginx.virtualHosts."lassul.us" = {
|
services.nginx.virtualHosts."lassul.us" = {
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
{ config, pkgs, ... }:
|
{ config, pkgs, ... }:
|
||||||
{
|
{
|
||||||
lass.sync-containers3.containers.radio = {
|
krebs.sync-containers3.containers.radio = {
|
||||||
sshKey = "${toString <secrets>}/radio.sync.key";
|
sshKey = "${toString <secrets>}/radio.sync.key";
|
||||||
};
|
};
|
||||||
containers.radio = {
|
containers.radio = {
|
||||||
|
@ -8,7 +8,7 @@ in
|
|||||||
];
|
];
|
||||||
|
|
||||||
|
|
||||||
lass.sync-containers3.containers.red = {
|
krebs.sync-containers3.containers.red = {
|
||||||
sshKey = "${toString <secrets>}/containers/red/sync.key";
|
sshKey = "${toString <secrets>}/containers/red/sync.key";
|
||||||
ephemeral = true;
|
ephemeral = true;
|
||||||
};
|
};
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
{ config, pkgs, ... }:
|
{ config, pkgs, ... }:
|
||||||
{
|
{
|
||||||
lass.sync-containers3.containers.ubik = {
|
krebs.sync-containers3.containers.ubik = {
|
||||||
sshKey = "${toString <secrets>}/ubik.sync.key";
|
sshKey = "${toString <secrets>}/ubik.sync.key";
|
||||||
};
|
};
|
||||||
containers.ubik.bindMounts."/var/lib" = {
|
containers.ubik.bindMounts."/var/lib" = {
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
{ config, pkgs, ... }:
|
{ config, pkgs, ... }:
|
||||||
{
|
{
|
||||||
lass.sync-containers3.containers.yellow = {
|
krebs.sync-containers3.containers.yellow = {
|
||||||
sshKey = "${toString <secrets>}/yellow.sync.key";
|
sshKey = "${toString <secrets>}/yellow.sync.key";
|
||||||
};
|
};
|
||||||
containers.yellow.bindMounts."/var/lib" = {
|
containers.yellow.bindMounts."/var/lib" = {
|
||||||
|
@ -15,6 +15,5 @@ _:
|
|||||||
./xjail.nix
|
./xjail.nix
|
||||||
./autowifi.nix
|
./autowifi.nix
|
||||||
./browsers.nix
|
./browsers.nix
|
||||||
./sync-containers3.nix
|
|
||||||
];
|
];
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user