this repo has no description
helix: new deployment
+36
-11
+24
-3
hosts/helix/default.nix
+24
-3
hosts/helix/default.nix
···
1
-
{ self, profiles, suites, ... }:
1
+
{ self, profiles, suites, pkgs, ... }:
2
2
{
3
3
imports = [
4
4
./configuration.nix
5
5
../profiles/core
6
6
../profiles/server
7
-
../profiles/metrics
7
+
# ../profiles/metrics
8
8
../profiles/gitea
9
9
../profiles/woodpecker-server
10
10
../profiles/rss-bridge
···
19
19
extraGroups = [ "wheel" ];
20
20
};
21
21
22
+
age.secrets.helix-wg.file = "${self}/secrets/helix-wg.age";
23
+
age.secrets.helix-wg.owner = "anish";
22
24
mossnet.wg = {
23
25
enable = true;
24
26
ips = [ "10.0.69.5/24" ];
25
-
privateKeyFile = "/home/anish/wg/wg-priv";
27
+
privateKeyFile = "/run/agenix/helix-wg";
28
+
};
29
+
30
+
services.postgresql.package = pkgs.postgresql_11;
31
+
services.postgresqlBackup = {
32
+
# TODO needs working wireguard to box
33
+
enable = false;
34
+
databases = [ "gitea" "freshrss" "woodpecker" ];
35
+
location = "/mnt/two/postgres";
26
36
};
27
37
38
+
mossnet.backup = {
39
+
enable = true;
40
+
name = "helix";
41
+
paths = [
42
+
"/var/lib/gitea"
43
+
"/var/lib/freshrss"
44
+
"/var/lib/woodpecker"
45
+
"/var/lib/microbin"
46
+
];
47
+
48
+
};
28
49
}
+12
-8
hosts/helix/hardware-configuration.nix
+12
-8
hosts/helix/hardware-configuration.nix
···
5
5
6
6
{
7
7
imports =
8
-
[
9
-
(modulesPath + "/profiles/qemu-guest.nix")
8
+
[ (modulesPath + "/profiles/qemu-guest.nix")
10
9
];
11
10
12
-
boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk" ];
11
+
boot.initrd.availableKernelModules = [ "ata_piix" "virtio_pci" "floppy" "sr_mod" "virtio_blk" ];
13
12
boot.initrd.kernelModules = [ ];
14
13
boot.kernelModules = [ ];
15
14
boot.extraModulePackages = [ ];
16
15
17
16
fileSystems."/" =
18
-
{
19
-
device = "/dev/disk/by-uuid/3b8b2c4b-835e-4822-8ac8-0effdc8270d6";
20
-
fsType = "btrfs";
17
+
{ device = "/dev/disk/by-uuid/7c560634-d545-41cc-b375-42ce3037fd73";
18
+
fsType = "ext4";
21
19
};
22
20
23
21
swapDevices = [ ];
24
22
25
-
nix.settings.max-jobs = lib.mkDefault 1;
26
-
nixpkgs.hostPlatform = "x86_64-linux";
23
+
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
24
+
# (the default) this is the recommended approach. When using systemd-networkd it's
25
+
# still possible to use this option, but it's recommended to use it in conjunction
26
+
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
27
+
networking.useDHCP = lib.mkDefault true;
28
+
# networking.interfaces.ens3.useDHCP = lib.mkDefault true;
29
+
30
+
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
27
31
}