sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
nix-community infrastructure [maintainer=@zowoq]
307 commits 1 branch 0 tags 3.4 MiB
Find a file
Jörg Thalheim ddb984bd3e
build01: switch to hetzner network module 
fixup! build01: switch to hetzner network module
2021-03-09 09:45:31 +01:00
.git-crypt Add 1 git-crypt collaborator 2021-01-19 09:15:41 +01:00
.github ci: speed up on no-op 2021-01-18 18:30:11 +01:00
build01 build01: switch to hetzner network module 2021-03-09 09:45:31 +01:00
build02 move things around a bit () 2021-03-07 16:28:44 +00:00
build03 services: move hound to build03 () 2021-03-08 00:22:10 +00:00
nix update nixpkgs 2021-03-06 09:04:24 +01:00
roles fixup! roles/security: allow sudo without password () 2021-03-08 21:05:23 +01:00
secrets declarative hydra users 2021-03-06 20:14:42 +01:00
services move things around a bit () 2021-03-07 16:28:44 +00:00
terraform services: move hound to build03 () 2021-03-08 00:22:10 +00:00
users mic92: replace rsa key with ed25519 2021-03-06 09:03:32 +01:00
.envrc deploy: speed up by using caches 2020-08-08 14:34:52 +02:00
.gitignore improve .gitignore 2020-04-26 18:49:51 +02:00
_config.yml configure GitHub pages 2020-05-03 15:11:06 +02:00
ci.sh ci: speed up on no-op 2021-01-18 18:30:11 +01:00
default.nix move things around a bit () 2021-03-07 16:28:44 +00:00
deploy ci: add basic nix and cachix support () 2020-04-07 13:31:11 +00:00
deployment.nix services: move hound to build03 () 2021-03-08 00:22:10 +00:00
README.md move things around a bit () 2021-03-07 16:28:44 +00:00
secrets.nix secrets: only remove suffix "\n" for the buildkite token () 2020-05-01 16:44:05 +00:00
shell.nix update to nixopsUnstable 2021-03-04 06:53:33 +01:00

README.md

nix-community infrastructure

Welcome to the Nix Community infrastructure project. This project holds all the NixOS and Terraform configuration for this organization.

Support

If you hit any issues, ping us on IRC in the #nix-community channel (see the admin list below) or create an issue here: New Issue.

Administrators

  • @adisbladis
  • @flokli
  • @grahamc
  • @Mic92
  • @nlewo
  • @ryantm
  • @zimbatm

Services

  • BuildKite agent - on build01
  • GitLab agent - on build01
  • hound - on build01
  • https://hydra.nix-community.org - on build01
  • marvin-mk2 - on build01
  • matterbridge - on build01
  • ryantm-updater bot - on build02

Hosts

build01 build01

This machine is perfect for running heavy builds.

  • Provider: Hetzner
  • CPU: AMD Ryzen 7 1700X Eight-Core Processor
  • RAM: 64GB
  • Drives: 2 x 512 GB SATA SSD

build02

This machine currently just runs r-ryantm/nixpkgs-update.

  • Provider: Hetzner
  • CPU: AMD Ryzen 7 3700X Eight-Core Processor
  • RAM: 64GB DDR4 ECC
  • Drives: 2 x 1 TB NVME in RAID 1

build03

This machine is a replacement for build01.

  • Provider: Hetzner
  • CPU: AMD Ryzen 5 3600 6-Core Processor
  • RAM: 64GB DDR4 ECC
  • Drives: 2 x 512 TB NVME in RAID 1

Cache

All the builds on these machines are pushed to https://nix-community.cachix.org/

Thanks to Cachix for sponsoring our binary cache!

File hierarchy

  • ./build\d+ - build machines
  • ./ci.sh - What is executed by CI
  • ./deploy - NixOps deploy script
  • ./nix - pinned Nix dependencies and overlays
  • ./roles - shared NixOS configuration modules
  • ./secrets - git-crypt encrypted secrets
  • ./services - single instances of NixOS services
  • ./terraform - Setup DNS
  • ./users - NixOS configuration of our admins