infra/roles/common.nix

{
  imports = [
    ./auto-upgrade.nix
    ./nix-daemon.nix
    ./security.nix
    ./sops-nix.nix
    ./users.nix
  ];

  zramSwap.enable = true;

  security.acme.defaults.email = "trash@nix-community.org";
  security.acme.acceptTerms = true;

  # Without configuration this unit will fail...
  # Just disable it since we are using telegraf to monitor raid health.
  systemd.services.mdmonitor.enable = false;

  networking.domain = "nix-community.org";
}
Modularise setup, add hardening config 2019-08-11 19:53:02 +01:00			`{`
also deploy telegraf on build02 2021-01-21 16:28:48 +01:00			`imports = [`
roles/common: sort imports 2022-12-03 12:45:45 +10:00			`./auto-upgrade.nix`
move things around a bit (#61) * keep ./services for instances ./profiles is for config-only modules ./services are like profiles, but configure a single instance of a service. Those are fronted by Nginx as the load-balancer and have a DNS entry as well. * ci: build build03 as well * move hydra to services * move matterbridge to services * move marvin-mk2 to services * build01: share the remainder profiles * build02: use the nix-community-cache * fixup kexec * rename profiles to roles * README: sync with reality 2021-03-07 16:28:44 +00:00			`./nix-daemon.nix`
also deploy telegraf on build02 2021-01-21 16:28:48 +01:00			`./security.nix`
roles/common: sort imports 2022-12-03 12:45:45 +10:00			`./sops-nix.nix`
move users configuration to seperate profile 2021-03-04 06:24:57 +01:00			`./users.nix`
misc changes 2019-08-12 11:33:34 +02:00			`];`

roles/common: enabled zramSwap probably okay to have this as a default as none of the machines have any swap configured 2023-01-04 11:59:51 +10:00			`zramSwap.enable = true;`

acme: migrate to new default option schema 2022-01-09 15:57:46 +01:00			`security.acme.defaults.email = "trash@nix-community.org";`
acme: move to common profile 2021-03-04 10:55:37 +01:00			`security.acme.acceptTerms = true;`

fix monitoring software-raids 2021-02-17 23:31:22 +01:00			`# Without configuration this unit will fail...`
			`# Just disable it since we are using telegraf to monitor raid health.`
			`systemd.services.mdmonitor.enable = false;`

implement nixos deploy for all hosts 2022-08-13 11:13:06 +02:00			`networking.domain = "nix-community.org";`
Modularise setup, add hardening config 2019-08-11 19:53:02 +01:00			`}`
No results found.