nix infra
b5a95ac91e
Flake lock file updates:
• Updated input 'attic':
'github:zhaofengli/attic/717cc95983cdc357bc347d70be20ced21f935843' (2024-06-01)
→ 'github:zhaofengli/attic/6139576a3ce6bb992e0f6c3022528ec233e45f00' (2024-07-09)
• Updated input 'nixos-hardware':
'github:nixos/nixos-hardware/72d3c007024ce47d838bb38693c8773812f54bf2' (2024-07-08)
→ 'github:nixos/nixos-hardware/a111ce6b537df12a39874aa9672caa87f8677eda' (2024-07-09)
• Updated input 'nixvim':
'github:nix-community/nixvim/1a644b8c2b89b4a804c40a02ed1f954d5008ad1c' (2024-07-08)
→ 'github:nix-community/nixvim/a5e9dbdef1530a76056db12387d489a68eea6f80' (2024-07-09)
|
||
|---|---|---|
| config | ||
| lib/shinyflakes | ||
| modules | ||
| pkgs | ||
| secrets/services | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| README.md | ||
emilys Nix Infra
First deployment
remote hosts
$ nix run github:nix-community/nixos-anywhere -- --flake ".#<configuration>" root@<target-host>
desktops
$ nix --extra-experimental-features nix-command run github:nix-community/nixos-anywhere -- --flake "git+https://woof.rip/emily/nixfiles.git#<configuration>" --no-reboot --build-on-target root@127.0.0.1
$ nixos-enter
$ passwd <local-user>
reboot
$ git clone https://woof.rip/emily/nixfiles.git
$ colmena apply-local --sudo --node <node>
Todo
- tomate (router dus)
- kartoffel
- most services
- brokkoli2 (router ams)
- alucard
- merge hetzner hosts
Structure
nixfiles
├── config # NixOS configuration
│ ├── common # configuration applyed to all hosts (some settings might be influenced by machine-type)
│ │ └── users # user configuration
│ ├── hosts # configuration for specific hosts
│ ├── profiles # configuariotn for specific machine types
│ └── services # common service configuration
├── lib # helper functions
├── modules # NixOS modules
└── pkgs # nixpkgs overlays