feat(machines): Init web02
All checks were successful
build configuration / build_vault01 (push) Successful in 53s
build configuration / build_storage01 (push) Successful in 56s
build configuration / build_web01 (push) Successful in 1m12s
build configuration / build_compute01 (push) Successful in 1m24s
build configuration / build_web02 (push) Successful in 55s
All checks were successful
build configuration / build_vault01 (push) Successful in 53s
build configuration / build_storage01 (push) Successful in 56s
build configuration / build_web01 (push) Successful in 1m12s
build configuration / build_compute01 (push) Successful in 1m24s
build configuration / build_web02 (push) Successful in 55s
This commit is contained in:
parent
ca90901e0c
commit
fc0f4a603a
|
@ -48,3 +48,13 @@ jobs:
|
|||
run: |
|
||||
# Enter the shell
|
||||
nix-shell --run 'colmena build --on web01'
|
||||
|
||||
build_web02:
|
||||
runs-on: nix
|
||||
steps:
|
||||
- uses: actions/checkout@v3
|
||||
|
||||
- name: Build web02
|
||||
run: |
|
||||
# Enter the shell
|
||||
nix-shell --run 'colmena build --on web02'
|
||||
|
|
21
machines/web02/_configuration.nix
Normal file
21
machines/web02/_configuration.nix
Normal file
|
@ -0,0 +1,21 @@
|
|||
{ lib, ... }:
|
||||
|
||||
lib.extra.mkConfig {
|
||||
enabledModules = [
|
||||
# List of modules to enable
|
||||
"dgn-fail2ban"
|
||||
];
|
||||
|
||||
enabledServices = [
|
||||
# List of services to enable
|
||||
];
|
||||
|
||||
extraConfig = {
|
||||
dgn-fail2ban.jails =
|
||||
lib.extra.enableAttrs' "enabled" [ "sshd-bruteforce" "sshd-timeout" ];
|
||||
|
||||
services.netbird.enable = true;
|
||||
};
|
||||
|
||||
root = ./.;
|
||||
}
|
35
machines/web02/_hardware-configuration.nix
Normal file
35
machines/web02/_hardware-configuration.nix
Normal file
|
@ -0,0 +1,35 @@
|
|||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
|
||||
|
||||
boot = {
|
||||
initrd = {
|
||||
availableKernelModules =
|
||||
[ "ata_piix" "uhci_hcd" "ehci_pci" "virtio_pci" "sr_mod" "virtio_blk" ];
|
||||
kernelModules = [ ];
|
||||
};
|
||||
|
||||
kernelModules = [ "kvm-intel" ];
|
||||
extraModulePackages = [ ];
|
||||
kernelPackages = pkgs.linuxKernel.packages.linux_6_7;
|
||||
};
|
||||
|
||||
fileSystems = {
|
||||
"/" = {
|
||||
device = "/dev/disk/by-uuid/8725c242-144d-495b-8ce4-6f0cef7c8ee3";
|
||||
fsType = "btrfs";
|
||||
};
|
||||
|
||||
"/boot" = {
|
||||
device = "/dev/disk/by-uuid/84F6-E7A3";
|
||||
fsType = "vfat";
|
||||
};
|
||||
};
|
||||
|
||||
swapDevices =
|
||||
[{ device = "/dev/disk/by-uuid/d64ae21e-693c-4c77-b62c-97d5e2a960cb"; }];
|
||||
}
|
6
machines/web02/secrets/secrets.nix
Normal file
6
machines/web02/secrets/secrets.nix
Normal file
|
@ -0,0 +1,6 @@
|
|||
let
|
||||
lib = import ../../../lib { };
|
||||
publicKeys = lib.getNodeKeys "web02";
|
||||
|
||||
in lib.setDefault { inherit publicKeys; } [
|
||||
]
|
|
@ -15,5 +15,6 @@
|
|||
# VMs du SPI/NPS/Whatever
|
||||
dmi01 = [
|
||||
"web01"
|
||||
"web02"
|
||||
];
|
||||
}
|
||||
|
|
|
@ -85,4 +85,16 @@ builtins.mapAttrs mkNet {
|
|||
|
||||
hostId = "050df79e";
|
||||
};
|
||||
|
||||
web02 = {
|
||||
interfaces = {
|
||||
ens3 = {
|
||||
ipv4 = [{ address = "129.199.129.235"; prefixLength = 24; }];
|
||||
|
||||
gateways = [ "129.199.129.1" ];
|
||||
};
|
||||
};
|
||||
|
||||
hostId = "b431ca10";
|
||||
};
|
||||
}
|
||||
|
|
|
@ -42,4 +42,9 @@ builtins.mapAttrs mkNode {
|
|||
stateVersion = "23.11";
|
||||
nixpkgs = "unstable";
|
||||
};
|
||||
|
||||
web02 = {
|
||||
stateVersion = "24.05";
|
||||
nixpkgs = "unstable";
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue