nix infra
dc91b774a4
Flake lock file updates:
• Updated input 'nixos-hardware':
'github:nixos/nixos-hardware/e1cc1f6483393634aee94514186d21a4871e78d7' (2024-11-06)
→ 'github:nixos/nixos-hardware/184687ae1a3139faa4746168baf071f60d0310c8' (2024-11-11)
• Updated input 'nixvim':
'github:nix-community/nixvim/57068f532d5d42601fd74e2b531204fe1cd3a8f2' (2024-11-10)
→ 'github:nix-community/nixvim/c892aa20732f982d4cc2b3ef2e2276a2a9a4d45b' (2024-11-11)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/f1675e3b0e1e663a4af49be67ecbc9e749f85eb7' (2024-11-10)
→ 'github:Mic92/sops-nix/4c91d52db103e757fc25b58998b0576ae702d659' (2024-11-11)
|
||
|---|---|---|
| config | ||
| lib/shinyflakes | ||
| modules | ||
| pkgs | ||
| secrets | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| fly.toml | ||
| README.md | ||
emilys Nix Infra
First deployment
remote hosts
$ nix run github:nix-community/nixos-anywhere -- --flake ".#<configuration>" root@<target-host>
desktops
$ nix --extra-experimental-features nix-command run github:nix-community/nixos-anywhere -- --flake "git+https://woof.rip/emily/nixfiles.git#<configuration>" --no-reboot --build-on-target root@127.0.0.1
$ nixos-enter
$ passwd <local-user>
reboot
$ git clone https://woof.rip/emily/nixfiles.git
$ colmena apply-local --sudo --node <node>
Todo
- tomate (router dus)
- kartoffel
- most services
- brokkoli2 (router ams)
- alucard
- merge hetzner hosts
Structure
nixfiles
├── config # NixOS configuration
│ ├── common # configuration applyed to all hosts (some settings might be influenced by machine-type)
│ │ └── users # user configuration
│ ├── hosts # configuration for specific hosts
│ ├── profiles # configuariotn for specific machine types
│ └── services # common service configuration
├── lib # helper functions
├── modules # NixOS modules
└── pkgs # nixpkgs overlays