feat(organization): Add external and internal services

iso/configuration.nix

@@ -3,7 +3,7 @@
 let
   dgn-lib = import ../lib { };
 
-  dgn-members = (import ../meta).members.groups.iso;
+  dgn-members = (import ../meta).members.groups.root;
 in
 
 {

meta/options.nix

@@ -67,6 +67,39 @@ in
           Groups of the DGNum organization.
         '';
       };
+
+      external = mkOption {
+        type = attrsOf (listOf str);
+        description = ''
+          External services used by the DGNum organization.
+        '';
+      };
+
+      services = mkOption {
+        type = attrsOf (submodule {
+          options = {
+            admins = mkOption {
+              type = listOf str;
+              default = [ ];
+              description = ''
+                List of administrators of the service.
+              '';
+            };
+
+            adminGroups = mkOption {
+              type = listOf str;
+              default = [ ];
+              description = ''
+                List of administrator groups of the service.
+              '';
+            };
+          };
+        });
+        description = ''
+          Administrator access of the different DGNum services,
+          it is mainly indicative as most services cannot configure this statically.
+        '';
+      };
     };
 
     nodes = mkOption {

meta/organization.nix

@@ -24,6 +24,7 @@
       name = "Jean-Marc Gailis";
       email = "jm@dgnum.eu";
     };
+
     luj = {
       name = "Julien Malka";
       email = "luj@dgnum.eu";
@@ -44,17 +45,41 @@
       "luj"
     ];
 
-    # members of this group will have root access on the installation isos
-    iso = [
+    # members of this group are root on the fai infrastructure
+    fai = [ "catvayor" ];
+  };
+
+  external = {
+    dns = [
       "thubrecht"
-      "mdebray"
       "raito"
-      "luj"
     ];
 
-    # members of this group can access netbox's secret
-    netbox = [ ];
+    email = [ "raito" ];
 
-    bureau = [ "gdd" ];
+    irc = [ "raito" ];
+  };
+
+  services = {
+    # Démarches Normaliennes
+    ds-fr.admins = [
+      "thubrecht"
+      "jemagius"
+    ];
+
+    # Cloud DGNum
+    nextcloud.admins = [
+      "thubrecht"
+      "raito"
+    ];
+
+    # Netbox DGNum
+    netbox.adminGroups = [
+      "root"
+      "fai"
+    ];
+
+    # Videos DGNum
+    peertube.admins = [ "thubrecht" ];
   };
 }