sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
nix-community infrastructure [maintainer=@zowoq]
303 commits 1 branch 0 tags 3.4 MiB
Nix 58.3%
Python 29.1%
HCL 9.2%
Shell 2.9%
sed 0.5%
Find a file
Jonas Chevalier 37e48b712e
move things around a bit () 
* keep ./services for instances

./profiles is for config-only modules

./services are like profiles, but configure a single instance of a
service. Those are fronted by Nginx as the load-balancer and have a DNS
entry as well.

* ci: build build03 as well

* move hydra to services

* move matterbridge to services

* move marvin-mk2 to services

* build01: share the remainder profiles

* build02: use the nix-community-cache

* fixup kexec

* rename profiles to roles

* README: sync with reality
2021-03-07 16:28:44 +00:00
.git-crypt Add 1 git-crypt collaborator 2021-01-19 09:15:41 +01:00
.github ci: speed up on no-op 2021-01-18 18:30:11 +01:00
build01 move things around a bit () 2021-03-07 16:28:44 +00:00
build02 move things around a bit () 2021-03-07 16:28:44 +00:00
build03 move things around a bit () 2021-03-07 16:28:44 +00:00
nix update nixpkgs 2021-03-06 09:04:24 +01:00
roles move things around a bit () 2021-03-07 16:28:44 +00:00
secrets declarative hydra users 2021-03-06 20:14:42 +01:00
services move things around a bit () 2021-03-07 16:28:44 +00:00
terraform terraform: add build03.nix-community.org 2021-03-06 09:03:33 +01:00
users mic92: replace rsa key with ed25519 2021-03-06 09:03:32 +01:00
.envrc deploy: speed up by using caches 2020-08-08 14:34:52 +02:00
.gitignore improve .gitignore 2020-04-26 18:49:51 +02:00
_config.yml configure GitHub pages 2020-05-03 15:11:06 +02:00
ci.sh ci: speed up on no-op 2021-01-18 18:30:11 +01:00
default.nix move things around a bit () 2021-03-07 16:28:44 +00:00
deploy ci: add basic nix and cachix support () 2020-04-07 13:31:11 +00:00
deployment.nix declarative hydra users 2021-03-06 20:14:42 +01:00
README.md move things around a bit () 2021-03-07 16:28:44 +00:00
secrets.nix secrets: only remove suffix "\n" for the buildkite token () 2020-05-01 16:44:05 +00:00
shell.nix update to nixopsUnstable 2021-03-04 06:53:33 +01:00

README.md

nix-community infrastructure

Welcome to the Nix Community infrastructure project. This project holds all the NixOS and Terraform configuration for this organization.

Support

If you hit any issues, ping us on IRC in the #nix-community channel (see the admin list below) or create an issue here: New Issue.

Administrators

  • @adisbladis
  • @flokli
  • @grahamc
  • @Mic92
  • @nlewo
  • @ryantm
  • @zimbatm

Services

  • BuildKite agent - on build01
  • GitLab agent - on build01
  • hound - on build01
  • https://hydra.nix-community.org - on build01
  • marvin-mk2 - on build01
  • matterbridge - on build01
  • ryantm-updater bot - on build02

Hosts

build01 build01

This machine is perfect for running heavy builds.

  • Provider: Hetzner
  • CPU: AMD Ryzen 7 1700X Eight-Core Processor
  • RAM: 64GB
  • Drives: 2 x 512 GB SATA SSD

build02

This machine currently just runs r-ryantm/nixpkgs-update.

  • Provider: Hetzner
  • CPU: AMD Ryzen 7 3700X Eight-Core Processor
  • RAM: 64GB DDR4 ECC
  • Drives: 2 x 1 TB NVME in RAID 1

build03

This machine is a replacement for build01.

  • Provider: Hetzner
  • CPU: AMD Ryzen 5 3600 6-Core Processor
  • RAM: 64GB DDR4 ECC
  • Drives: 2 x 512 TB NVME in RAID 1

Cache

All the builds on these machines are pushed to https://nix-community.cachix.org/

Thanks to Cachix for sponsoring our binary cache!

File hierarchy

  • ./build\d+ - build machines
  • ./ci.sh - What is executed by CI
  • ./deploy - NixOps deploy script
  • ./nix - pinned Nix dependencies and overlays
  • ./roles - shared NixOS configuration modules
  • ./secrets - git-crypt encrypted secrets
  • ./services - single instances of NixOS services
  • ./terraform - Setup DNS
  • ./users - NixOS configuration of our admins