🏡 my personal home lab
wip: systemd in beszel
+35
-2
+35
-2
modules/beszel-agent.nix
+35
-2
modules/beszel-agent.nix
···
1
-
{ config, name, ... }:
1
+
{
2
+
config,
3
+
name,
4
+
pkgs,
5
+
...
6
+
}:
2
7
{
3
8
services.beszel.agent = {
4
9
enable = true;
···
6
11
environmentFile = config.sops.templates."beszel-agent.env".path;
7
12
};
8
13
14
+
# until https://github.com/NixOS/nixpkgs/pull/461327 is merged
15
+
services.dbus.packages = [
16
+
(pkgs.writeTextDir "share/dbus-1/system.d/beszel-agent.conf" ''
17
+
<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
18
+
19
+
<!DOCTYPE busconfig PUBLIC
20
+
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
21
+
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
22
+
23
+
<busconfig>
24
+
<policy user="beszel-agent">
25
+
<allow
26
+
send_destination="org.freedesktop.systemd1"
27
+
send_type="method_call"
28
+
send_path="/org/freedesktop/systemd1"
29
+
send_interface="org.freedesktop.systemd1.Manager"
30
+
send_member="ListUnits"
31
+
/>
32
+
</policy>
33
+
</busconfig>
34
+
'')
35
+
];
36
+
users.groups.beszel-agent = { };
37
+
users.users.beszel-agent = {
38
+
isSystemUser = true;
39
+
group = "beszel-agent";
40
+
};
41
+
9
42
sops.secrets."beszel-token-${name}" = { };
10
43
sops.templates."beszel-agent.env" = {
11
44
content = ''
12
45
KEY="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKXHE/75uA6Qk08PDCcxBiXcbvmx4RNEpMtqNiO3LkN3"
13
46
TOKEN="${config.sops.placeholder."beszel-token-${name}"}"
14
47
HUB_URL="10.0.0.11"
15
-
SKIP_SYSTEMD=false
48
+
SKIP_GPU=true
16
49
'';
17
50
};
18
51
}