NixOS configuration

Go to file

tv fe7f9a1f31 tv.consul: init		2015-07-10 20:58:55 +02:00
bin	tv.consul: init	2015-07-10 20:58:55 +02:00
certs	initial commit	2015-05-19 23:10:57 +02:00
infest.d	rewrite infest-cac-CentOS-7-64bit	2015-06-24 15:01:23 +02:00
lib	lib git: s/cd/$host/	2015-06-19 18:34:50 +02:00
modules	tv.consul: init	2015-07-10 20:58:55 +02:00
pubkeys	pubkeys: add makefu	2015-06-22 22:18:41 +02:00
.gitignore	deploy: merge next	2015-05-21 23:52:06 +02:00
cac	cac: push* take rsync-target as second arg	2015-06-24 19:10:41 +02:00
default.nix	deploy: refactor to use modified/*/paths.nix	2015-07-07 05:55:28 +02:00
deploy	deploy: refactor to use modified/*/paths.nix	2015-07-07 05:55:28 +02:00
infest-cac-CentOS-7-64bit.sh	fetchgit -> prefetch	2015-06-30 00:15:03 +02:00
Makefile	make deploy: init	2015-07-10 00:02:06 +02:00
README.md	rewrite infest-cac-CentOS-7-64bit	2015-06-24 15:01:23 +02:00

Turn a Cloud at Cost CentOS-7-64bit server into NixOS

Configure the system ($systemname) you'd like to install (see Configuration below).
Create new server instance (either Custom or cloudpro) using "CentOS-7-64bit". Note the servername (something like c731445864-cloudpro-388922936).
cac_login=xxx cac_key=yyy ./infest-cac-CentOS-7-64bit.sh servername:$servername $systename
Enjoy. (ssh root@$systename)

Configuration

Configure your system in modules/$systemname See modules/cd/default.nix as an example.

Notice that modules/$systemname/networking will be autogenerated (but not committed).

secrets/$systemname/nix/foo can be accessed as <secrets/foo> from within the configuration.

You might want secrets/$systemname/rsync/etc/tinc/retiolum/rsa_key.priv.

You might want secrets/$systemname/nix/hashedPasswords.nix, which looks like

_: { users.extraUsers.root.hashedPassword = "XXX"; }

XXX can be generated with e.g.

mkpasswd -m sha-512 -S $(openssl rand -base64 16 | tr -d '+=' | head -c 16)