Mic92
/
stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

flake: init

This commit is contained in:
lassulus 2023-06-10 12:50:53 +02:00 committed by tv
parent d59586939d
commit e174ef53ca
108 changed files with 652 additions and 547 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
flake.lock Normal file
View File

@ -0,0 +1,44 @@
{
"nodes": {
"nix-writers": {
"flake": false,
"locked": {
"lastModified": 1677612737,
"narHash": "sha256-UaCKZ4PbMZU6UZH7XNFcjRtd5jheswl66rjZDBfQgp8=",
"ref": "refs/heads/master",
"rev": "66a1f6833464bbb121b6d94247ad769f277351f8",
"revCount": 39,
"type": "git",
"url": "https://cgit.krebsco.de/nix-writers"
},
"original": {
"type": "git",
"url": "https://cgit.krebsco.de/nix-writers"
}
},
"nixpkgs": {
"locked": {
"lastModified": 1686135559,
"narHash": "sha256-pY8waAV8K/sbHBdLn5diPFnQKpNg0YS9w03MrD2lUGE=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "381e92a35e2d196fdd6077680dca0cd0197e75cb",
"type": "github"
},
"original": {
"owner": "NixOS",
"ref": "nixos-unstable",
"repo": "nixpkgs",
"type": "github"
}
},
"root": {
"inputs": {
"nix-writers": "nix-writers",
"nixpkgs": "nixpkgs"
}
}
},
"root": "root",
"version": 7
}

30
flake.nix Normal file
View File

@ -0,0 +1,30 @@
{
inputs = {
nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
nix-writers = {
url = "git+https://cgit.krebsco.de/nix-writers";
flake = false;
};
# disko.url = "github:nix-community/disko";
# disko.inputs.nixpkgs.follows = "nixpkgs";
};
description = "stockholm";
outputs = { self, nixpkgs, nix-writers }: {
nixosConfigurations.hotdog = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
specialArgs.stockholm = self;
specialArgs.nix-writers = nix-writers;
specialArgs.secrets = toString ./krebs/0tests/data/secrets;
modules = [
./krebs/1systems/hotdog/config.nix
];
};
kartei = {
hosts = self.nixosConfigurations.hotdog.config.krebs.hosts;
users = self.nixosConfigurations.hotdog.config.krebs.users;
};
lib = import (self.outPath + "/lib/pure.nix") { lib = nixpkgs.lib; };
};
}

7
kartei/0x4A6F/default.nix
View File

@ -1,12 +1,13 @@
with import ../../lib;
{ config, ... }: let
{ config, lib, ... }: let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: flip recursiveUpdate host ({
ci = false;
external = true;
monitoring = false;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum.ip6.addr =
(krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
});
in {
users = {

6
kartei/dave/default.nix
View File

@ -1,5 +1,5 @@
{ config, ... }: let
lib = import ../../lib;
{ config, lib, ... }: let
slib = import ../../lib/pure.nix { inherit lib; };
in {
users.dave = {
mail = "hsngrmpf@gmail.com";
@ -8,7 +8,7 @@ in {
owner = config.krebs.users.dave;
nets.retiolum = {
aliases = [ "dave.r" ];
ip6.addr = (lib.krebs.genipv6 "retiolum" "dave" { hostName = "dave"; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "dave" { hostName = "dave"; }).address;
ip4.addr = "10.243.0.6";
tinc.pubkey = ''
-----BEGIN RSA PUBLIC KEY-----

9
kartei/dbalan/default.nix
View File

@ -1,6 +1,7 @@
with import ../../lib;
{ config, ... }:
{ config, lib, ... }:
let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: flip recursiveUpdate host ({
ci = false;
external = true;
@ -8,11 +9,11 @@ let
owner = config.krebs.users.dbalan;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum = {
ip6.addr = (krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
};
} // optionalAttrs (host.nets?wiregrill) {
nets.wiregrill = {
ip6.addr = (krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
ip6.addr = (slib.krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
};
});
in

2
kartei/default.nix
View File

@ -9,7 +9,7 @@ in {
(name: _type: let
path = ./. + "/${name}";
in {
krebs = import path { inherit config; };
krebs = import path { inherit config lib; };
})
(removeTemplate
(lib.filterAttrs

9
kartei/feliks/default.nix
View File

@ -1,5 +1,6 @@
with import ../../lib;
{ config, ... }: let
{ config, lib, ... }: let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: flip recursiveUpdate host ({
owner = config.krebs.users.feliks;
ci = false;
@ -7,10 +8,10 @@ with import ../../lib;
monitoring = false;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum.ip6.addr =
(krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
} // optionalAttrs (host.nets?wiregrill) {
nets.wiregrill.ip6.addr =
(krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
(slib.krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
});
in {
users.feliks = {

6
kartei/jan/default.nix
View File

@ -1,5 +1,5 @@
{ config, ... }: let
lib = import ../../lib;
{ config, lib, ... }: let
slib = import ../../lib/pure.nix { inherit lib; };
in {
users.jan = {
@ -67,7 +67,7 @@ in {
nets.retiolum = {
aliases = [ "grill.r" ];
ip4.addr = "10.243.217.217";
ip6.addr = (lib.krebs.genipv6 "retiolum" "jan" { hostName = "grill"; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "jan" { hostName = "grill"; }).address;
tinc.pubkey = ''
-----BEGIN RSA PUBLIC KEY-----
MIICCgKCAgEAs4P6CfRcwFGCqkfv1tyTbbk2eHh08kEqxPNQ655sMKWxMhgRnRII

8
kartei/jeschli/default.nix
View File

@ -1,12 +1,12 @@
with import ../../lib;
{ config, ... }: let
{ config, lib, ... }: let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: flip recursiveUpdate host ({
ci = true;
owner = config.krebs.users.jeschli;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum.ip6.addr =
(krebs.genipv6 "retiolum" "jeschli" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "jeschli" { inherit hostName; }).address;
});
in {

9
kartei/kmein/default.nix
View File

@ -1,6 +1,7 @@
with import ../../lib;
{ config, ... }:
{ config, lib, ... }:
let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
maybeEmpty = attrset: key: if (attrset?key) then attrset.${key} else [];
hostDefaults = hostName: host: flip recursiveUpdate host ({
ci = false;
@ -9,11 +10,11 @@ let
owner = config.krebs.users.kmein;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum = {
ip6.addr = (krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
};
} // optionalAttrs (host.nets?wiregrill) {
nets.wiregrill = {
ip6.addr = (krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
ip6.addr = (slib.krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
};
});
ssh-for = name: builtins.readFile (./ssh + "/${name}.pub");

15
kartei/krebs/default.nix
View File

@ -1,11 +1,12 @@
with import ../../lib;
{ config, ... }: let
{ config, lib, ... }: let
inherit (lib) flip genAttrs mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: flip recursiveUpdate host ({
owner = config.krebs.users.krebs;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum.ip6.addr =
(krebs.genipv6 "retiolum" "krebs" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "krebs" { inherit hostName; }).address;
});
testHosts = genAttrs [
@ -66,7 +67,6 @@ in {
tinc.pubkey_ed25519 = "D5TYSZW9OAkdnvQ/NL98UgheRC2Zg4SMNZ8M4/KwdeL";
};
};
ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKRpjW68lSlTL8jBQcXKOTdGa+olQw5ghaU5df2yAE64";
};
hotdog = {
@ -100,7 +100,6 @@ in {
tinc.pubkey_ed25519 = "ugy/sGReVro3YzjDuroV/5hdeBdqD18no9dMhTy9DYL";
};
};
ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICxFkBln23wUxt4RhIHE3GvdKeBpJbjn++6maupHqUHp";
};
news = {
@ -133,7 +132,6 @@ in {
'';
};
};
ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHl5cDF9QheXyMlNYIX17ILbgd94K50fZy7w0fDLvZlo ";
};
onebutton = {
@ -161,7 +159,6 @@ in {
'';
};
};
ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAcZg+iLaPZ0SpLM+nANxIjZC/RIsansjyutK0+gPhIe ";
};
ponte = {
@ -208,7 +205,6 @@ in {
};
};
};
ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJEw9fo8Qtb/DTLacdrJP7Ti7c4UXTm6wUUX+iRFweEo ";
};
puyak = {
@ -234,7 +230,6 @@ in {
'';
};
};
ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPpVwKv9mQGfcn5oFwuitq+b6Dz4jBG9sGhVoCYFw5RY";
syncthing.id = "DK5CEE2-PNUXYCE-Q42H2HP-623GART-B7KS4VK-HU2RBGQ-EK6QPUP-HUL3PAR";
};
@ -259,7 +254,6 @@ in {
'';
};
};
ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOu6EVN3928qWiWszqBUzOjeQJRvFozTBl4xAhBP/Ymc";
};
wolf = {
@ -296,7 +290,6 @@ in {
'';
};
};
ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKYMXMWZIK0jjnZDM9INiYAKcwjXs2241vew54K8veCR";
};
} // testHosts);

15
kartei/lass/default.nix
View File

@ -1,8 +1,8 @@
with import ../../lib;
{ config, ... }: let
{ config, lib, ... }: let
slib = import ../../lib/pure.nix { inherit lib; };
r6 = ip: (krebs.genipv6 "retiolum" "lass" ip).address;
w6 = ip: (krebs.genipv6 "wiregrill" "lass" ip).address;
r6 = ip: (slib.krebs.genipv6 "retiolum" "lass" ip).address;
w6 = ip: (slib.krebs.genipv6 "wiregrill" "lass" ip).address;
hostFiles =
builtins.map (lib.removeSuffix ".nix") (
builtins.filter
@ -14,14 +14,17 @@ in {
dns.providers = {
"lassul.us" = "zones";
};
hosts = mapAttrs (_: recursiveUpdate {
hosts = lib.mapAttrs (_: lib.recursiveUpdate {
owner = config.krebs.users.lass;
consul = true;
ci = true;
monitoring = true;
ssh.privkey.path = <secrets/ssh.id_ed25519>;
}) (
lib.genAttrs hostFiles (host: import (./. + "/${host}.nix") { inherit config krebs lib r6 w6; })
lib.genAttrs hostFiles (host: import (./. + "/${host}.nix") {
inherit config lib r6 w6;
inherit (slib) krebs;
})
);
users = rec {
lass = lass-yubikey;

16
kartei/makefu/default.nix
View File

@ -2,8 +2,10 @@
# tinc generate-keys
# ssh-keygen -f ssh.id_ed25519 -t ed25519 -C host
with import ../../lib;
{ config, ... }: let
{ config, lib, ... }: let
inherit (builtins) foldl' mapAttrs pathExists readFile;
inherit (lib) optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: foldl' recursiveUpdate {} [
{
@ -19,7 +21,7 @@ with import ../../lib;
"${hostName}.r"
];
ip6.addr =
(krebs.genipv6 "retiolum" "makefu" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "makefu" { inherit hostName; }).address;
};
})
# Retiolum ed25519 keys
@ -37,7 +39,7 @@ with import ../../lib;
"${hostName}.w"
];
ip6.addr =
(krebs.genipv6 "wiregrill" "makefu" { inherit hostName; }).address;
(slib.krebs.genipv6 "wiregrill" "makefu" { inherit hostName; }).address;
wireguard.pubkey = readFile pubkey-path;
};
})
@ -54,7 +56,7 @@ with import ../../lib;
];
pub-for = name: builtins.readFile (./ssh + "/${name}.pub");
w6 = ip: (krebs.genipv6 "wiregrill" "makefu" ip).address;
w6 = ip: (slib.krebs.genipv6 "wiregrill" "makefu" ip).address;
in {
hosts = mapAttrs hostDefaults {
cake = rec {
@ -149,7 +151,7 @@ in {
# pixel3a
telex.nets.wiregrill = {
aliases = ["telex.w"];
ip6.addr = (krebs.genipv6 "wiregrill" "makefu" { hostName = "telex"; }).address;
ip6.addr = (slib.krebs.genipv6 "wiregrill" "makefu" { hostName = "telex"; }).address;
ip4.addr = "10.244.245.4";
};
@ -255,7 +257,7 @@ in {
ip6.addr = w6 "1";
wireguard.port = 51821;
wireguard.subnets = [
(krebs.genipv6 "wiregrill" "makefu" 0).subnetCIDR
(slib.krebs.genipv6 "wiregrill" "makefu" 0).subnetCIDR
"10.244.245.0/24" # required for routing directly to gum via rockit
];
};

7
kartei/mic92/default.nix
View File

@ -1,12 +1,13 @@
with import ../../lib;
{ config, ... }: let
{ config, lib, ... }: let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: flip recursiveUpdate host ({
ci = false;
external = true;
monitoring = false;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum.ip6.addr =
(krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
});
in {
hosts = mapAttrs hostDefaults {

9
kartei/others/default.nix
View File

@ -1,5 +1,6 @@
with import ../../lib;
{ config, ... }: let
{ config, lib, ... }: let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: flip recursiveUpdate host ({
ci = false;
@ -7,10 +8,10 @@ with import ../../lib;
monitoring = false;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum.ip6.addr =
(krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
} // optionalAttrs (host.nets?wiregrill) {
nets.wiregrill.ip6.addr =
(krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
(slib.krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
});
ssh-for = name: builtins.readFile (./ssh + "/${name}.pub");
tinc-for = name: builtins.readFile (./tinc + "/${name}.pub");

8
kartei/oxzi/default.nix
View File

@ -1,5 +1,5 @@
{ config, ... }: let
lib = import ../../lib;
{ config, lib, ... }: let
slib = import ../../lib/pure.nix { inherit lib; };
in {
users.oxzi = {
mail = "post@0x21.biz";
@ -13,7 +13,7 @@ in {
"gosh.r"
];
ip4.addr = "10.243.32.1";
ip6.addr = (lib.krebs.genipv6 "retiolum" "oxzi" { hostName = "ancha"; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "oxzi" { hostName = "ancha"; }).address;
tinc.pubkey = ''
-----BEGIN RSA PUBLIC KEY-----
MIICCgKCAgEA5RSP7nWZ1c04kvQBxoHqcdRKpJuRDzD3f0Nl2KhS7QsAqHJGdK7T
@ -39,7 +39,7 @@ in {
"marohu.oxzi.r"
];
ip4.addr = "10.243.32.2";
ip6.addr = (lib.krebs.genipv6 "retiolum" "oxzi" { hostName = "marohu"; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "oxzi" { hostName = "marohu"; }).address;
tinc.pubkey = ''
-----BEGIN RSA PUBLIC KEY-----
MIICCgKCAgEAxHLkvuH9JMXay/fEmoWTEqLHg9A50EzkxPVBn4nyezgp5vxsUqJz

9
kartei/palo/default.nix
View File

@ -1,6 +1,7 @@
with import ../../lib;
{ config, ... }:
{ config, lib, ... }:
let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: flip recursiveUpdate host ({
ci = false;
@ -8,10 +9,10 @@ let
monitoring = false;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum.ip6.addr =
(krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
} // optionalAttrs (host.nets?wiregrill) {
nets.wiregrill.ip6.addr =
(krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
(slib.krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
});
in

10
kartei/rtunreal/default.nix
View File

@ -1,6 +1,8 @@
with import ../../lib;
{ config, ... }:
{ config, lib, ... }:
let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: flip recursiveUpdate host ({
ci = false;
external = true;
@ -8,11 +10,11 @@ let
owner = config.krebs.users.rtunreal;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum = {
ip6.addr = (krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
};
} // optionalAttrs (host.nets?wiregrill) {
nets.wiregrill = {
ip6.addr = (krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
ip6.addr = (slib.krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
};
});
ssh-for = name: builtins.readFile (./ssh + "/${name}.pub");

7
kartei/srounce/default.nix
View File

@ -1,13 +1,12 @@
{ config, ... }: let
lib = import ../../lib;
{ config, lib, ... }: let
slib = import ../../lib/pure.nix { inherit lib; };
hostDefaults = hostName: host: lib.flip lib.recursiveUpdate host ({
ci = false;
external = true;
monitoring = false;
} // lib.optionalAttrs (host.nets?retiolum) {
nets.retiolum.ip6.addr =
(lib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
});
in {

6
kartei/template/default.nix
View File

@ -1,5 +1,5 @@
{ config, ... }: let
lib = import ../../lib;
{ config, lib, ... }: let
slib = import ../../lib/pure.nix { inherit lib; };
in {
users.DUMMYUSER = {
mail = "DUMMYUSER@example.ork";
@ -8,7 +8,7 @@ in {
owner = config.krebs.users.DUMMYUSER;
nets.retiolum = {
aliases = [ "DUMMYHOST.DUMMYUSER.r" ];
ip6.addr = (lib.krebs.genipv6 "retiolum" "DUMMYUSER" { hostName = "DUMMYHOST"; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "DUMMYUSER" { hostName = "DUMMYHOST"; }).address;
tinc.pubkey = ''
-----BEGIN RSA PUBLIC KEY-----
DUMMYTINCPUBKEYRSA

20
kartei/tv/default.nix
View File

@ -1,5 +1,11 @@
with import ../../lib;
{ config, ... }: {
{ config, lib, ... }@attrs: let
inherit (builtins)
getAttr head mapAttrs match pathExists readDir readFile typeOf;
inherit (lib)
const hasAttrByPath mapAttrs' mkDefault mkIf optionalAttrs removeSuffix
toList;
slib = import ../../lib/pure.nix { inherit lib; };
in {
dns.providers = {
"viljetic.de" = "regfish";
};
@ -8,10 +14,10 @@ with import ../../lib;
(hostName: hostFile: let
hostSource = import hostFile;
hostConfig = getAttr (typeOf hostSource) {
lambda = hostSource { inherit config lib; };
lambda = hostSource attrs;
set = hostSource;
};
in evalSubmodule types.host [
in slib.evalSubmodule slib.types.host [
hostConfig
{
name = hostName;
@ -20,7 +26,7 @@ with import ../../lib;
(optionalAttrs (hasAttrByPath ["nets" "retiolum"] hostConfig) {
nets.retiolum = {
ip6.addr =
(krebs.genipv6 "retiolum" "tv" { inherit hostName; }).address;
(slib.krebs.genipv6 "retiolum" "tv" { inherit hostName; }).address;
};
})
(let
@ -31,14 +37,14 @@ with import ../../lib;
"${hostName}.w"
];
ip6.addr =
(krebs.genipv6 "wiregrill" "tv" { inherit hostName; }).address;
(slib.krebs.genipv6 "wiregrill" "tv" { inherit hostName; }).address;
wireguard.pubkey = readFile pubkey-path;
};
})
(host: mkIf (host.config.ssh.pubkey != null) {
ssh.privkey = mapAttrs (const mkDefault) {
path = config.krebs.secret.file "ssh.id_${host.config.ssh.privkey.type}";
type = head (toList (match "ssh-([^ ]+) .*" host.config.ssh.pubkey));
type = head (toList (builtins.match "ssh-([^ ]+) .*" host.config.ssh.pubkey));
};
})
])

6
kartei/tv/hosts/ni.nix
View File

@ -1,4 +1,6 @@
{ config, lib, ... }: {
{ config, lib, ... }: let
slib = import ../../../lib/pure.nix { inherit lib; };
in {
extraZones = {
"krebsco.de" = ''
ni 60 IN A ${config.krebs.hosts.ni.nets.internet.ip4.addr}
@ -60,7 +62,7 @@
via = config.krebs.hosts.ni.nets.internet;
ip4.addr = "10.244.3.1";
wireguard.subnets = [
(lib.krebs.genipv6 "wiregrill" "tv" 0).subnetCIDR
(slib.krebs.genipv6 "wiregrill" "tv" 0).subnetCIDR
];
};
};

9
kartei/xkey/default.nix
View File

@ -1,6 +1,7 @@
with import ../../lib;
{ config, ... }:
{ config, lib, ... }:
let
inherit (lib) flip mapAttrs optionalAttrs recursiveUpdate;
slib = import ../../lib/pure.nix { inherit lib; };
maybeEmpty = attrset: key: if (attrset?key) then attrset.${key} else [];
hostDefaults = hostName: host: flip recursiveUpdate host ({
ci = false;
@ -9,11 +10,11 @@ let
owner = config.krebs.users.xkey;
} // optionalAttrs (host.nets?retiolum) {
nets.retiolum = {
ip6.addr = (krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
};
} // optionalAttrs (host.nets?wiregrill) {
nets.wiregrill = {
ip6.addr = (krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
ip6.addr = (slib.krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
};
});
ssh-for = name: builtins.readFile (./ssh + "/${name}.pub");

6
kartei/ynnel/default.nix
View File

@ -1,6 +1,6 @@
{ config, ... }:
{ config, lib, ... }:
let
lib = import ../../lib;
slib = import ../../lib/pure.nix { inherit lib; };
in
{
users.ynnel = {
@ -10,7 +10,7 @@ in
owner = config.krebs.users.ynnel;
nets.retiolum = {
aliases = [ "mokemoke.ynnel.r" ];
ip6.addr = (lib.krebs.genipv6 "retiolum" "ynnel" { hostName = "mokemoke"; }).address;
ip6.addr = (slib.krebs.genipv6 "retiolum" "ynnel" { hostName = "mokemoke"; }).address;
tinc.pubkey = ''
-----BEGIN RSA PUBLIC KEY-----
MIICCgKCAgEA7rS560SZEPcSekW30dRF6ZTHOnb8WvuVgt3BFLRWhTgV5DqLqFa8

0
krebs/0tests/data/secrets/radicale.id_ed25519 Normal file
View File

14
krebs/1systems/arcadeomat/config.nix
View File

@ -9,15 +9,15 @@ in
{
imports = [
./hw.nix
<stockholm/krebs>
<stockholm/krebs/2configs>
../../../krebs
../../../krebs/2configs
#<stockholm/krebs/2configs/binary-cache/nixos.nix>
#<stockholm/krebs/2configs/binary-cache/prism.nix>
#../../../krebs/2configs/binary-cache/nixos.nix
#../../../krebs/2configs/binary-cache/prism.nix
<stockholm/krebs/2configs/shack/ssh-keys.nix>
<stockholm/krebs/2configs/save-diskspace.nix>
<stockholm/krebs/2configs/shack/prometheus/node.nix>
../../../krebs/2configs/shack/ssh-keys.nix
../../../krebs/2configs/save-diskspace.nix
../../../krebs/2configs/shack/prometheus/node.nix
];
# use your own binary cache, fallback use cache.nixos.org (which is used by

20
krebs/1systems/filebitch/config.nix
View File

@ -5,16 +5,16 @@ in
{
imports = [
./hardware-configuration.nix
<stockholm/krebs>
<stockholm/krebs/2configs>
# <stockholm/krebs/2configs/secret-passwords.nix>
../../../krebs
../../../krebs/2configs
# ../../../krebs/2configs/secret-passwords.nix
# <stockholm/krebs/2configs/binary-cache/nixos.nix>
# <stockholm/krebs/2configs/binary-cache/prism.nix>
<stockholm/krebs/2configs/shack/ssh-keys.nix>
<stockholm/krebs/2configs/shack/prometheus/node.nix>
# ../../../krebs/2configs/binary-cache/nixos.nix
# ../../../krebs/2configs/binary-cache/prism.nix
../../../krebs/2configs/shack/ssh-keys.nix
../../../krebs/2configs/shack/prometheus/node.nix
# provides access to /home/share for smbuser via smb
<stockholm/krebs/2configs/shack/share.nix>
../../../krebs/2configs/shack/share.nix
{
fileSystems."/home/share" =
{ device = "/serve";
@ -23,8 +23,8 @@ in
}
## Collect local statistics via collectd and send to collectd
# <stockholm/krebs/2configs/stats/shack-client.nix>
# <stockholm/krebs/2configs/stats/shack-debugging.nix>
# ../../../krebs/2configs/stats/shack-client.nix
# ../../../krebs/2configs/stats/shack-debugging.nix
];
krebs.build.host = config.krebs.hosts.filebitch;

28
krebs/1systems/hotdog/config.nix
View File

@ -2,23 +2,23 @@
{
imports = [
<stockholm/krebs>
<stockholm/krebs/2configs>
../../../krebs
../../../krebs/2configs
<stockholm/krebs/2configs/buildbot-stockholm.nix>
<stockholm/krebs/2configs/binary-cache/nixos.nix>
<stockholm/krebs/2configs/ircd.nix>
<stockholm/krebs/2configs/reaktor2.nix>
<stockholm/krebs/2configs/wiki.nix>
<stockholm/krebs/2configs/acme.nix>
<stockholm/krebs/2configs/mud.nix>
<stockholm/krebs/2configs/repo-sync.nix>
../../../krebs/2configs/buildbot-stockholm.nix
../../../krebs/2configs/binary-cache/nixos.nix
../../../krebs/2configs/ircd.nix
../../../krebs/2configs/reaktor2.nix
../../../krebs/2configs/wiki.nix
../../../krebs/2configs/acme.nix
../../../krebs/2configs/mud.nix
../../../krebs/2configs/repo-sync.nix
<stockholm/krebs/2configs/cal.nix>
<stockholm/krebs/2configs/mastodon.nix>
../../../krebs/2configs/cal.nix
../../../krebs/2configs/mastodon.nix
## shackie irc bot
<stockholm/krebs/2configs/shack/reaktor.nix>
## (shackie irc bot
../../../krebs/2configs/shack/reaktor.nix
];
krebs.build.host = config.krebs.hosts.hotdog;

12
krebs/1systems/news/config.nix
View File

@ -2,15 +2,15 @@
{
imports = [
<stockholm/krebs>
<stockholm/krebs/2configs>
../../../krebs
../../../krebs/2configs
<stockholm/krebs/2configs/ircd.nix>
<stockholm/krebs/2configs/go.nix>
../../../krebs/2configs/ircd.nix
../../../krebs/2configs/go.nix
#### NEWS ####
<stockholm/krebs/2configs/ircd.nix>
<stockholm/krebs/2configs/news.nix>
../../../krebs/2configs/ircd.nix
../../../krebs/2configs/news.nix
];
krebs.build.host = config.krebs.hosts.news;

2
krebs/2configs/backup.nix
View File

@ -1,5 +1,5 @@
{ config, lib, ... }:
with import <stockholm/lib>;
with lib;
{
krebs.backup.plans = {
} // mapAttrs (_: recursiveUpdate {

4
krebs/2configs/buildbot-stockholm.nix
View File

@ -1,5 +1,5 @@
{ config, ... }: with import <stockholm/lib>;
{ config, lib, ... }:
with import ../../lib/pure.nix { inherit lib; };
{
networking.firewall.allowedTCPPorts = [ 80 ];
services.nginx = {

7
krebs/2configs/cal.nix
View File

@ -1,4 +1,5 @@
{ config, lib, pkgs, ... }: let
slib = import ../../lib/pure.nix { inherit lib; };
setupGit = ''
export PATH=${lib.makeBinPath [
@ -23,13 +24,13 @@
git add .gitignore
'';
pushCal = pkgs.writeDash "push_cal" ''
pushCal = pkgs.writers.writeDash "push_cal" ''
${setupGit}
git fetch origin
git merge --ff-only origin/master || :
'';
pushCgit = pkgs.writeDash "push_cgit" ''
pushCgit = pkgs.writers.writeDash "push_cgit" ''
${setupGit}
git push origin master
'';
@ -73,7 +74,7 @@ in {
cgit.settings = {
root-title = "krebs repos";
};
rules = with pkgs.stockholm.lib.git; [
rules = with slib.git; [
{
user = [
{

2
krebs/2configs/default.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
{
imports = [
./backup.nix

5
krebs/2configs/exim-smarthost.nix
View File

@ -1,5 +1,6 @@
with import <stockholm/lib>;
{ config, ... }: let
{ config, lib, ... }:
with import ../../lib/pure.nix { inherit lib; };
let
format = from: to: {
inherit from;

1
krebs/2configs/go.nix
View File

@ -1,6 +1,5 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
{
krebs.go = {
enable = true;

1
krebs/2configs/hw/x220.nix
View File

@ -1,6 +1,5 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
{
networking.wireless.enable = lib.mkDefault true;

44
krebs/2configs/reaktor2.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, pkgs, ... }:
{ config, lib, pkgs, ... }:
with import ../../lib/pure.nix { inherit lib; };
let
#for shared state directory
@ -22,7 +22,7 @@ let
# TODO; get state as argument
state_file = "${stateDir}/ledger";
};
filename = pkgs.writeDash "bedger-add" ''
filename = pkgs.writers.writeDash "bedger-add" ''
set -x
tonick=$1
amt=$2
@ -42,7 +42,7 @@ let
env = {
state_file = "${stateDir}/ledger";
};
filename = pkgs.writeDash "bedger-balance" ''
filename = pkgs.writers.writeDash "bedger-balance" ''
${pkgs.hledger}/bin/hledger -f $state_file bal -N -O csv \
| ${pkgs.coreutils}/bin/tail +2 \
| ${pkgs.miller}/bin/mlr --icsv --opprint cat \
@ -57,7 +57,7 @@ let
arguments = [1];
timeoutSec = 1337;
command = {
filename = pkgs.writeDash "bing" ''
filename = pkgs.writers.writeDash "bing" ''
set -efu
report_error() {
printf '%s' "$*" |
@ -97,7 +97,7 @@ let
arguments = [1];
timeoutSec = 1337;
command = {
filename = pkgs.writeDash "bing-img" ''
filename = pkgs.writers.writeDash "bing-img" ''
set -efu
report_error() {
printf '%s' "$*" |
@ -142,7 +142,7 @@ let
activate = "match";
arguments = [1];
command = {
filename = pkgs.writeDash "confuse" ''
filename = pkgs.writers.writeDash "confuse" ''
set -efux
export PATH=${makeBinPath [
@ -164,7 +164,7 @@ let
activate = "match";
arguments = [1];
command = {
filename = pkgs.writeDash "interrogate" ''
filename = pkgs.writers.writeDash "interrogate" ''
set -efux
export PATH=${makeBinPath [
@ -181,7 +181,7 @@ let
activate = "match";
arguments = [1];
command = {
filename = pkgs.writeDash "confuse" ''
filename = pkgs.writers.writeDash "confuse" ''
set -efu
export PATH=${makeBinPath [
pkgs.coreutils
@ -204,7 +204,7 @@ let
activate = "match";
arguments = [1];
command = {
filename = pkgs.writeDash "say" ''
filename = pkgs.writers.writeDash "say" ''
set -efu
export PATH=${makeBinPath [
@ -234,20 +234,20 @@ let
arguments = [2];
env.TASKDATA = "${stateDir}/${name}";
commands = rec {
add.filename = pkgs.writeDash "${name}-task-add" ''
add.filename = pkgs.writers.writeDash "${name}-task-add" ''
${pkgs.taskwarrior}/bin/task rc:${taskRcFile} add "$1"
'';
list.filename = pkgs.writeDash "${name}-task-list" ''
list.filename = pkgs.writers.writeDash "${name}-task-list" ''
${pkgs.taskwarrior}/bin/task rc:${taskRcFile} export \
| ${pkgs.jq}/bin/jq -r '
.[] | select(.id != 0) | "\(.id) \(.description)"
'
'';
delete.filename = pkgs.writeDash "${name}-task-delete" ''
delete.filename = pkgs.writers.writeDash "${name}-task-delete" ''
${pkgs.taskwarrior}/bin/task rc:${taskRcFile} delete "$1"
'';
del = delete;
done.filename = pkgs.writeDash "${name}-task-done" ''
done.filename = pkgs.writers.writeDash "${name}-task-done" ''
${pkgs.taskwarrior}/bin/task rc:${taskRcFile} done "$1"
'';
};
@ -293,8 +293,7 @@ let
{
activate = "always";
command = {
filename =
<stockholm/krebs/5pkgs/simple/Reaktor/scripts/tell-on_join.sh>;
filename = ../5pkgs/simple/Reaktor/scripts/tell-on_join.sh;
env = {
PATH = makeBinPath [
pkgs.coreutils # XXX env, touch
@ -311,7 +310,7 @@ let
pattern = "^list-locations";
activate = "match";
command = {
filename = pkgs.writeDash "list-locations" ''
filename = pkgs.writers.writeDash "list-locations" ''
export PATH=${makeBinPath [
pkgs.curl
pkgs.jq
@ -328,7 +327,7 @@ let
activate = "match";
arguments = [1 2 3];
command = {
filename = pkgs.writeDash "add-location" ''
filename = pkgs.writers.writeDash "add-location" ''
export PATH=${makeBinPath [
pkgs.curl
pkgs.jq
@ -345,7 +344,7 @@ let
activate = "match";
arguments = [1];
command = {
filename = pkgs.writeDash "add-location" ''
filename = pkgs.writers.writeDash "add-location" ''
export PATH=${makeBinPath [
pkgs.curl
pkgs.jq
@ -374,7 +373,7 @@ let
sha256 = "sha256-J7jGWZeAULDA1EkO50qx+hjl+5IsUj389pUUMreKeNE=";
};
osm-restaurants = pkgs.callPackage "${osm-restaurants-src}/osm-restaurants" {};
in pkgs.writeDash "krebsfood" ''
in pkgs.writers.writeDash "krebsfood" ''
set -efu
export PATH=${makeBinPath [
osm-restaurants
@ -417,8 +416,7 @@ let
(generators.command_hook {
inherit (commands) dance random-emoji nixos-version;
tell = {
filename =
<stockholm/krebs/5pkgs/simple/Reaktor/scripts/tell-on_privmsg.sh>;
filename = ../5pkgs/simple/Reaktor/scripts/tell-on_privmsg.sh;
env = {
PATH = makeBinPath [
pkgs.coreutils # XXX date, env
@ -452,7 +450,7 @@ in {
name = "reaktor2";
home = stateDir;
};
script = ''. ${pkgs.writeDash "agenda" ''
script = ''. ${pkgs.writers.writeDash "agenda" ''
echo "$Method $Request_URI" >&2
case "$Method" in
"GET")

3
krebs/2configs/repo-sync.nix
View File

@ -1,6 +1,5 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
konsens-user = {

3
krebs/2configs/secret-passwords.nix
View File

@ -1,4 +1,5 @@
{ ... }: with import <stockholm/lib>;
{ lib, ... }:
with lib;
{
users.extraUsers =
mapAttrs (_: h: { hashedPassword = h; })

4
krebs/2configs/shack/drivedroid.nix
View File

@ -1,5 +1,5 @@
{ config, pkgs, ... }:
with import <stockholm/lib>;
{ config, lib, pkgs, ... }:
with import ../../../lib/pure.nix { inherit lib; };
let
root = "/var/srv/drivedroid";
in

2
krebs/2configs/shack/mqtt_sub.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../../lib/pure.nix { inherit lib; };
let
pkg = pkgs.stdenv.mkDerivation {
name = "mqtt2graphite-2017-05-29";

2
krebs/2configs/shack/muell_caller.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../../lib/pure.nix { inherit lib; };
let
pkg = pkgs.stdenv.mkDerivation {
name = "muell_caller-2017-06-01";

2
krebs/2configs/shack/nix-cacher.nix
View File

@ -1,5 +1,5 @@
{ config, pkgs, ... }:
with import <stockholm/lib>;
with import ../../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.apt-cacher-ng;
in

2
krebs/2configs/shack/radioactive.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../../lib/pure.nix { inherit lib; };
let
pkg = pkgs.stdenv.mkDerivation {
name = "radioactive-2017-06-01";

2
krebs/2configs/shack/worlddomination.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../../lib/pure.nix { inherit lib; };
let
pkg = pkgs.stdenv.mkDerivation {
name = "worlddomination-2020-12-01";

2
krebs/2configs/stats/shack-debugging.nix
View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
# TODO: krebs.collectd.plugins
with import <stockholm/lib>;
with import ../../../lib/pure.nix { inherit lib; };
let
connect-time-cfg = with pkgs; writeText "collectd-connect-time.conf" ''
LoadPlugin python

4
krebs/2configs/syncthing.nix
View File

@ -1,4 +1,6 @@
{ options, config, pkgs, ... }: with import <stockholm/lib>; let
{ config, lib, options, pkgs, ... }:
with import ../../lib/pure.nix { inherit lib; };
let
mk_peers = mapAttrs (n: v: { id = v.syncthing.id; });
all_peers = filterAttrs (n: v: v.syncthing.id != null) config.krebs.hosts;

8
krebs/2configs/wiki.nix
View File

@ -1,5 +1,5 @@
{ config, pkgs, ... }:
with import <stockholm/lib>;
{ config, lib, pkgs, ... }:
with import ../../lib/pure.nix { inherit lib; };
let
setupGit = ''
@ -14,13 +14,13 @@ let
fi
'';
pushGollum = pkgs.writeDash "push_gollum" ''
pushGollum = pkgs.writers.writeDash "push_gollum" ''
${setupGit}
git fetch origin
git merge --ff-only origin/master
'';
pushCgit = pkgs.writeDash "push_cgit" ''
pushCgit = pkgs.writers.writeDash "push_cgit" ''
${setupGit}
git push origin master
'';

7
krebs/3modules/airdcpp.nix
View File

@ -1,6 +1,7 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>; #genid
with lib;
let
slib = import ../../lib/pure.nix { inherit lib; };
cfg = config.krebs.airdcpp;
out = {
@ -265,14 +266,14 @@ let
};
users = lib.mkIf (cfg.user == "airdcpp") {
users.airdcpp = {
uid = genid "airdcpp";
uid = slib.genid "airdcpp";
home = cfg.stateDir;
createHome = true;
isSystemUser = true;
group = "airdcpp";
inherit (cfg) extraGroups;
};
groups.airdcpp.gid = genid "airdcpp";
groups.airdcpp.gid = slib.genid "airdcpp";
};
};
in

47
krebs/3modules/announce-activation.nix
View File

@ -1,20 +1,21 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: let
{ config, pkgs, lib, ... }:
let
slib = import ../../lib/pure.nix { inherit lib; };
cfg = config.krebs.announce-activation;
announce-activation = pkgs.writeDash "announce-activation" ''
set -efu
message=$(${cfg.get-message})
exec ${pkgs.irc-announce}/bin/irc-announce \
${shell.escape cfg.irc.server} \
${shell.escape (toString cfg.irc.port)} \
${shell.escape cfg.irc.nick} \
${shell.escape cfg.irc.channel} \
${escapeShellArg cfg.irc.tls} \
${slib.shell.escape cfg.irc.server} \
${slib.shell.escape (toString cfg.irc.port)} \
${slib.shell.escape cfg.irc.nick} \
${slib.shell.escape cfg.irc.channel} \
${lib.escapeShellArg cfg.irc.tls} \
"$message"
'';
default-get-message = pkgs.writeDash "announce-activation-get-message" ''
set -efu
PATH=${makeBinPath [
PATH=${lib.makeBinPath [
pkgs.coreutils
pkgs.gawk
pkgs.gnused
@ -28,37 +29,37 @@ with import <stockholm/lib>;
'';
in {
options.krebs.announce-activation = {
enable = mkEnableOption "announce-activation";
get-message = mkOption {
enable = lib.mkEnableOption "announce-activation";
get-message = lib.mkOption {
default = default-get-message;
type = types.package;
type = lib.types.package;
};
irc = {
# TODO rename channel to target?
channel = mkOption {
channel = lib.mkOption {
default = "#xxx";
type = types.str; # TODO types.irc-channel
type = lib.types.str; # TODO types.irc-channel
};
nick = mkOption {
nick = lib.mkOption {
default = config.krebs.build.host.name;
type = types.label;
type = slib.types.label;
};
port = mkOption {
port = lib.mkOption {
default = 6667;
type = types.int;
type = lib.types.int;
};
server = mkOption {
server = lib.mkOption {
default = "irc.r";
type = types.hostname;
type = slib.types.hostname;
};
tls = mkOption {
tls = lib.mkOption {
default = false;
type = types.bool;
type = lib.types.bool;
};
};
};
config = mkIf cfg.enable {
system.activationScripts.announce-activation = stringAfter [ "etc" ] ''
config = lib.mkIf cfg.enable {
system.activationScripts.announce-activation = lib.stringAfter [ "etc" ] ''
${announce-activation}
'';
};

2
krebs/3modules/apt-cacher-ng.nix
View File

@ -1,6 +1,6 @@
{ config, pkgs, lib, ... }:
with import <stockholm/lib>;
with lib;
let
acng-config = pkgs.writeTextFile {
name = "acng-configuration";

2
krebs/3modules/backup.nix
View File

@ -1,5 +1,5 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
out = {
options.krebs.backup = api;

2
krebs/3modules/bepasty-server.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with lib;
let
gunicorn = pkgs.python3Packages.gunicorn;
bepasty = pkgs.bepasty;

4
krebs/3modules/bindfs.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, pkgs, ... }:
{ config, pkgs, lib, ... }:
with lib;
let
cfg = config.krebs.bindfs;
in {

7
krebs/3modules/brockman.nix
View File

@ -1,6 +1,7 @@
{ pkgs, config, ... }:
with import <stockholm/lib>;
{ pkgs, config, lib, ... }:
with lib;
let
slib = import ../../lib/pure.nix { inherit lib; };
cfg = config.krebs.brockman;
in {
options.krebs.brockman = {
@ -14,7 +15,7 @@ in {
group = "brockman";
createHome = true;
isSystemUser = true;
uid = genid_uint31 "brockman";
uid = slib.genid_uint31 "brockman";
};
users.groups.brockman = {};

4
krebs/3modules/build.nix
View File

@ -1,6 +1,6 @@
{ config, ... }:
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
{
options.krebs.build = {

7
krebs/3modules/ci/default.nix
View File

@ -1,6 +1,5 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.ci;
@ -25,7 +24,7 @@ let
};
hostname = config.networking.hostName;
getJobs = pkgs.writeDash "get_jobs" ''
getJobs = pkgs.writers.writeDash "get_jobs" ''
set -efu
${pkgs.nix}/bin/nix-build --no-out-link --quiet --show-trace -Q ./ci.nix >&2
json="$(${pkgs.nix}/bin/nix-instantiate --quiet -Q --eval --strict --json ./ci.nix)"
@ -116,7 +115,7 @@ let
build_script = stages[stage],
),
timeout = 3600,
command="${pkgs.writeDash "build.sh" ''
command="${pkgs.writers.writeDash "build.sh" ''
set -xefu
profile=${shell.escape profileRoot}/$build_name
result=$("$build_script")

2
krebs/3modules/current.nix
View File

@ -1,6 +1,6 @@
{ config, pkgs, lib, ... }:
with import <stockholm/lib>;
with lib;
let
cfg = config.krebs.current;

3
krebs/3modules/default.nix
View File

@ -1,13 +1,12 @@
{ config, lib, ... }:
with import <stockholm/lib>;
with lib;
let
cfg = config.krebs;
out = {
imports = [
../../kartei
../../submodules/disko/module.nix
./acl.nix
./airdcpp.nix
./announce-activation.nix

6
krebs/3modules/dns.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, ... }: {
{ config, lib, pkgs, ... }:
with import ../../lib/pure.nix { inherit lib; }; {
options = {
krebs.dns.providers = mkOption {
type = types.attrsOf types.str;
@ -8,7 +8,7 @@ with import <stockholm/lib>;
type = types.nullOr types.hostname;
};
};
config = mkIf config.krebs.enable {
config = lib.mkIf config.krebs.enable {
krebs.dns.providers = {
"krebsco.de" = "zones";
shack = "hosts";

4
krebs/3modules/exim-retiolum.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, pkgs, lib, ... }: let
{ config, pkgs, lib, ... }:
with import ../../lib/pure.nix { inherit lib; }; let
cfg = config.krebs.exim-retiolum;
# Due to improvements to the JSON notation, braces around top-level objects

2
krebs/3modules/exim-smarthost.nix
View File

@ -1,6 +1,6 @@
{ config, pkgs, lib, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.exim-smarthost;

2
krebs/3modules/exim.nix
View File

@ -1,4 +1,4 @@
{ config, lib, pkgs, ... }: with import <stockholm/lib>; let
{ config, lib, pkgs, ... }: with import ../../lib/pure.nix { inherit lib; }; let
cfg = config.krebs.exim;
in {
options.krebs.exim = {

2
krebs/3modules/fetchWallpaper.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.fetchWallpaper;

8
krebs/3modules/git.nix
View File

@ -6,14 +6,14 @@
# TODO when authorized_keys changes, then restart ssh
# (or kill already connected users somehow)
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.git;
out = {
options.krebs.git = api;
config = with lib; mkIf cfg.enable (mkMerge [
(mkIf cfg.cgit.enable cgit-imp)
config = with lib; lib.mkIf cfg.enable (mkMerge [
(lib.mkIf cfg.cgit.enable cgit-imp)
git-imp
]);
};
@ -446,7 +446,7 @@ let
];
locations."/".extraConfig = ''
include ${pkgs.nginx}/conf/fastcgi_params;
fastcgi_param SCRIPT_FILENAME ${pkgs.writeDash "cgit-wrapper" ''
fastcgi_param SCRIPT_FILENAME ${pkgs.writers.writeDash "cgit-wrapper" ''
set -efu
exec 3>&1
${pkgs.cgit}/cgit/cgit.cgi "$@" 2>&1 >&3 3>&- \

2
krebs/3modules/github/hosts-sync.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with lib;
let
cfg = config.krebs.github-hosts-sync;

2
krebs/3modules/go.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with lib;
let
cfg = config.krebs.go;

2
krebs/3modules/hidden-ssh.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with lib;
let
cfg = config.krebs.hidden-ssh;

14
krebs/3modules/hosts.nix
View File

@ -1,17 +1,19 @@
with import <stockholm/lib>;
{ config, ... }: let
{ config, lib, pkgs, ... }:
with lib; let
check = hostname: any (domain: hasSuffix ".${domain}" hostname) domains;
domains = attrNames (filterAttrs (_: eq "hosts") config.krebs.dns.providers);
domains = attrNames (filterAttrs (_: slib.eq "hosts") config.krebs.dns.providers);
# we need this import because we have infinite recursion otherwise
slib = import ../../lib/pure.nix { inherit lib; };
in {
options = {
krebs.hosts = mkOption {
default = {};
type = types.attrsOf types.host;
type = types.attrsOf slib.types.host;
};
};
config = mkIf config.krebs.enable {
config = lib.mkIf config.krebs.enable {
networking.hosts =
filterAttrs
(_name: value: value != [])
@ -91,7 +93,7 @@ in {
(concatLists (attrValues netAliases));
}
//
genAttrs' (attrNames netAliases) (netname: rec {
slib.genAttrs' (attrNames netAliases) (netname: rec {
name = "krebs-hosts-${netname}";
value = writeHosts name netAliases.${netname};
});

2
krebs/3modules/htgen.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
optionalAttr = name: value:
if name != null then

4
krebs/3modules/iana-etc.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: {
{ config, pkgs, lib, ... }:
with lib; {
options.krebs.iana-etc.services = mkOption {
default = {};

2
krebs/3modules/iptables.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with lib;
let
inherit (pkgs) writeText;

2
krebs/3modules/kapacitor.nix
View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
with builtins;
with import <stockholm/lib>;
with lib;
let
cfg = config.krebs.kapacitor;

5
krebs/3modules/konsens.nix
View File

@ -1,6 +1,5 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.konsens;
@ -68,7 +67,7 @@ let
serviceConfig = {
Type = "simple";
PermissionsStartOnly = true;
ExecStart = pkgs.writeDash "konsens-${name}" ''
ExecStart = pkgs.writers.writeDash "konsens-${name}" ''
set -efu
git config --global --replace-all safe.directory *
if ! test -e ${name}; then

5
krebs/3modules/krebs-pages.nix
View File

@ -1,6 +1,5 @@
{ config, modulesPath, pkgs, ... }: let
{ config, modulesPath, pkgs, lib, ... }: let
cfg = config.krebs.pages;
lib = import ../../lib;
extraTypes.nginx-vhost = lib.types.submodule (
lib.recursiveUpdate
(import (modulesPath + "/services/web-servers/nginx/vhost-options.nix")
@ -11,7 +10,7 @@ in {
options.krebs.pages = {
enable = lib.mkEnableOption "krebs-pages";
domain = lib.mkOption {
type = lib.types.hostname;
type = pkgs.stockholm.lib.types.hostname;
default = "krebsco.de";
};
nginx = lib.mkOption {

2
krebs/3modules/monit.nix
View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }:
with builtins;
with import <stockholm/lib>;
with lib;
let
cfg = config.krebs.monit;

2
krebs/3modules/nixpkgs.nix
View File

@ -1,5 +1,5 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with lib;
let
cfg = config.krebs.nixpkgs;

2
krebs/3modules/on-failure.nix
View File

@ -1,4 +1,4 @@
{ config, lib, pkgs, ... }: with import <stockholm/lib>; let
{ config, lib, pkgs, ... }: with import ../../lib/pure.nix { inherit lib; }; let
out = {
options.krebs.on-failure = api;
config = lib.mkIf cfg.enable imp;

6
krebs/3modules/os-release.nix
View File

@ -1,5 +1,5 @@
{ config, ... }:
with import <stockholm/lib>;
{ config, lib, ... }:
with lib;
let
nixos-version-id = if (hasAttr "nixos" config.system) then
"${config.system.nixos.version}" else "${config.system.nixosVersion}";
@ -9,7 +9,7 @@ let
nixos-pretty-name = "NixOS ${nixos-version}";
stockholm-version-id = let
eval = tryEval (removeSuffix "\n" (readFile <stockholm-version>));
eval = builtins.tryEval (removeSuffix "\n" (readFile <stockholm-version>));
in
if eval.success then eval.value else "unknown";

4
krebs/3modules/per-user.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: let
{ config, pkgs, lib, ... }:
with lib; let
cfg = config.krebs.per-user;
in {
options.krebs.per-user = mkOption {

4
krebs/3modules/permown.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: {
{ config, pkgs, lib, ... }:
with lib; {
options.krebs.permown = mkOption {
default = {};

4
krebs/3modules/reaktor2.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: {
{ config, pkgs, lib, ... }:
with import ../../lib/pure.nix { inherit lib; }; {
options.krebs.reaktor2 = mkOption {
default = {};

2
krebs/3modules/realwallpaper.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.realwallpaper;

2
krebs/3modules/repo-sync.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.repo-sync;

4
krebs/3modules/retiolum-bootstrap.nix
View File

@ -1,5 +1,5 @@
{ config, pkgs, ... }:
with import <stockholm/lib>;
{ config, pkgs, lib, ... }:
with lib;
let
cfg = config.krebs.retiolum-bootstrap;
in

6
krebs/3modules/secret.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, lib, pkgs, ... }: let
{ config, lib, pkgs, ... }:
with import ../../lib/pure.nix { inherit lib; }; let
cfg = config.krebs.secret;
in {
options.krebs.secret = {
@ -12,7 +12,7 @@ in {
readOnly = true;
};
files = mkOption {
type = with types; attrsOf secret-file;
type = with pkgs.stockholm.lib.types; attrsOf secret-file;
default = {};
};
};

5
krebs/3modules/setuid.nix
View File

@ -1,5 +1,6 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: let
{ config, pkgs, lib, ... }:
with import ../../lib/pure.nix { inherit lib; };
let
out = {
options.krebs.setuid = api;

7
krebs/3modules/shadow.nix
View File

@ -1,5 +1,6 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: let
{ config, pkgs, lib, ... }:
with lib;
let
cfg = config.krebs.shadow;
@ -47,7 +48,7 @@ in {
default = cfg.overridesFile != null;
};
overridesFile = mkOption {
apply = x: if typeOf x == "path" then toString x else x;
apply = x: if builtins.typeOf x == "path" then toString x else x;
default = null;
description = ''
Path to a file containing additional shadow entries, used for adding

5
krebs/3modules/sitemap.nix
View File

@ -1,6 +1,5 @@
let
lib = import ../../lib;
in {
{ lib, ... }:
{
options.krebs.sitemap = lib.mkOption {
type = with lib.types; attrsOf sitemap.entry;
default = {};

5
krebs/3modules/sync-containers.nix
View File

@ -1,5 +1,6 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: let
{ config, pkgs, lib, ... }:
with lib;
let
cfg = config.krebs.sync-containers;
paths = cname: {
plain = "/var/lib/containers/${cname}/var/state";

2
krebs/3modules/sync-containers3.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }: let
cfg = config.krebs.sync-containers3;
slib = pkgs.stockholm.lib;
slib = import ../../lib/pure.nix { inherit lib; };
in {
options.krebs.sync-containers3 = {
inContainer = {

15
krebs/3modules/systemd.nix
View File

@ -1,5 +1,6 @@
{ config, pkgs, ... }: let {
lib = import ../../lib;
{ config, pkgs, lib, ... }: let {
slib = import ../../lib/pure.nix { inherit lib; };
body.options.krebs.systemd.services = lib.mkOption {
default = {};
@ -13,14 +14,14 @@
lib.sort
lib.lessThan
(lib.filter
lib.types.absolute-pathname.check
slib.types.absolute-pathname.check
(map
(lib.compose [ lib.maybeHead (lib.match "[^:]*:(.*)") ])
(slib.compose [ slib.maybeHead (builtins.match "[^:]*:(.*)") ])
(lib.toList cfg.serviceConfig.LoadCredential)));
readOnly = true;
};
credentialUnitName = lib.mkOption {
default = "trigger-${lib.systemd.encodeName serviceName}";
default = "trigger-${slib.systemd.encodeName serviceName}";
readOnly = true;
};
restartIfCredentialsChange = lib.mkOption {
@ -54,7 +55,7 @@
pkgs.systemd
]}
cache=/var/lib/credentials/${lib.shell.escape serviceName}.sha1sum
cache=/var/lib/credentials/${slib.shell.escape serviceName}.sha1sum
tmpfile=$(mktemp -t "$(basename "$cache")".XXXXXXXX)
trap 'rm -f "$tmpfile"' EXIT
@ -64,7 +65,7 @@
fi
mv "$tmpfile" "$cache"
systemctl restart ${lib.shell.escape serviceName}
systemctl restart ${slib.shell.escape serviceName}
'';
};
};

4
krebs/3modules/tinc.nix
View File

@ -1,5 +1,5 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: {
{ config, pkgs, lib, ... }:
with import ../../lib/pure.nix { inherit lib; }; {
options.krebs.tinc = mkOption {
default = {};
description = ''

2
krebs/3modules/tinc_graphs.nix
View File

@ -1,6 +1,6 @@
{ config, lib, pkgs, ... }:
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.tinc_graphs;
internal_dir = "${cfg.workingDir}/internal";

5
krebs/3modules/upstream/default.nix
View File

@ -1,4 +1,5 @@
with import <stockholm/lib>;
{ pkgs, lib, ... }:
with lib;
{
imports =
@ -6,5 +7,5 @@ with import <stockholm/lib>;
(name: ./. + "/${name}")
(filter
(name: name != "default.nix" && !hasPrefix "." name)
(attrNames (readDir ./.)));
(attrNames (builtins.readDir ./.)));
}

5
krebs/3modules/upstream/desktop-managers/coma.nix
View File

@ -1,5 +1,6 @@
with import <stockholm/lib>;
{ config, pkgs, ... }: {
{ config, pkgs, lib, ... }:
with lib;
{
options = {
services.xserver.desktopManager.coma = {
enable = mkEnableOption "sleep as a desktop manager";

6
krebs/3modules/upstream/desktop-managers/none.nix
View File

@ -1,9 +1,9 @@
{ lib, ... }:
# Replace upstream none desktop-manager by a real none, that doesn't pull in
# any dependencies.
with import <stockholm/lib>;
{
disabledModules = singleton "services/x11/desktop-managers/none.nix";
config.services.xserver.desktopManager.session = singleton {
disabledModules = lib.singleton "services/x11/desktop-managers/none.nix";
config.services.xserver.desktopManager.session = lib.singleton {
name = "none";
bgSupport = true;
start = "";

4
krebs/3modules/upstream/window-managers/default.nix
View File

@ -13,8 +13,8 @@
imports = [ ./xmonad.nix ];
nixpkgs.overlays = [(self: super: {
writers = super.writers // {
writeHaskellBin = name: spec: with import <stockholm/lib>;
super.writers.writeHaskellBin name (removeAttrs spec ["ghcArgs"]);
writeHaskellBin = name: spec:
super.writers.writeHaskellBin name (builtins.removeAttrs spec ["ghcArgs"]);
};
})];
}

2
krebs/3modules/urlwatch.nix
View File

@ -4,7 +4,7 @@
# TODO inform about unused caches
# cache = url: "${cfg.dataDir}/.urlwatch/cache/${hashString "sha1" url}"
with import <stockholm/lib>;
with import ../../lib/pure.nix { inherit lib; };
let
cfg = config.krebs.urlwatch;

6
krebs/3modules/users.nix
View File

@ -1,8 +1,8 @@
{ config, ... }: let
lib = import ../../lib;
{ config, lib, pkgs, ... }: let
slib = import ../../lib/pure.nix { inherit lib; };
in {
options.krebs.users = lib.mkOption {
type = with lib.types; attrsOf user;
type = lib.types.attrsOf slib.types.user;
};
config = lib.mkIf config.krebs.enable {
krebs.users = {

Some files were not shown because too many files have changed in this diff Show More