infrastructure/meta/nodes/nixos.nix

# SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
# SPDX-FileContributor: Julien Malka <julien.malka@dgnum.eu>
# SPDX-FileContributor: Maurice Debray <maurice.debray@dgnum.eu>
# SPDX-FileContributor: Ryan Lahfa <ryan.lahfa@dgnum.eu>
#
# SPDX-License-Identifier: EUPL-1.2

###
# File specifying all the deployement options for the nodes administrated by the dgnum.
#
# Node metadata template is:
#
# NODE_NAME = {
#   adminGroups = []; # List of groups that have root access
#   admins = []; # List of individuals that have root access
#   deployment = {}; # Colmena deployment options
#   nixpkgs = "unstable" or "22.11"; # nixpkgs version
# }

/*
  Liste des différents sites :
  - rat01 -> VM du NPSPI
  - pav01 -> Salle serveur sous le pavillon Pasteur
  - oik01 -> Local DGNum Jourdan
  - hyp01 -> Salle serveur Hypnos 1
  - luj01 -> VM de Luj
*/
{
  bridge01 = {
    site = "hyp01";

    hashedPassword = "$y$j9T$EPJdz70kselouXAVUmAH01$8nYbUBY9NPTMfYigegY0qFSdxJwhqzW8sFacDqEYCP5";

    stateVersion = "24.05";

    adminGroups = [ "fai" ];

    deployment = {
      targetHost = "fd26:baf9:d250:8000::ffff";
      sshOptions = [
        "-J"
        "root@vault01.hyp01.infra.dgnum.eu"
      ];
    };

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };
  };

  compute01 = {
    site = "pav01";

    hashedPassword = "$y$j9T$2nxZHq84G7fWvWMEaGavE/$0ADnmD9qMpXJJ.rWWH9086EakvZ3wAg0mSxZYugOf3C";

    stateVersion = "23.05";
    nix-modules = [ "services/stirling-pdf" ];

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };
  };

  geo01 = {
    site = "oik01";
    deployment.tags = [ "geo" ];

    hashedPassword = "$y$j9T$2XmDpJu.QLhV57yYCh5Lf1$LK.X0HKB02Q0Ujvhj5nIofW2IRrIAL/Uxnvl9AXM1L8";

    stateVersion = "24.05";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };
  };

  geo02 = {
    site = "oik01";
    deployment.tags = [ "geo" ];

    hashedPassword = "$y$j9T$Q4fbMpSm9beWu4DPNAR9t0$dx/1pH4GPY72LpS5ZiECXAZFDdxwmIywztsX.qo2VVA";

    stateVersion = "24.05";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };
  };

  hypervisor01 = {
    site = "pot01";

    hashedPassword = "$y$j9T$Yw.M.epJj/sakb4Gq/9WV0$P85aQPo/FmFM1.ap413UL3vlGk3mavHwmaALKKDd4n.";

    stateVersion = "24.11";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };

    adminGroups = [ "hypervisors" ];

    deployment = {
      targetHost = "hypervisor01.dgnum";
    };
  };

  hypervisor02 = {
    site = "pot01";

    hashedPassword = "$y$j9T$Zu98DVlKq7KP5GmIHOwBy1$Bd7W6LstWDm8zjbZ9JSPLnhMFPmZgmU4e7t7u6EhavA";

    stateVersion = "24.11";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };

    adminGroups = [ "hypervisors" ];

    deployment = {
      targetHost = "hypervisor02.dgnum";
    };
  };

  hypervisor03 = {
    site = "pot01";

    hashedPassword = "$y$j9T$plTv9.UwmkTODagd4docj0$3zd35wPSsamygiYngwfDGICapKbx5UbzyLBhAwOUSfC";

    stateVersion = "24.11";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };

    adminGroups = [ "hypervisors" ];

    deployment = {
      targetHost = "hypervisor03.dgnum";
    };
  };

  rescue01 = {
    site = "luj01";

    deployment.targetHost = "v6.rescue01.luj01.infra.dgnum.eu";

    hashedPassword = "$y$j9T$nqoMMu/axrD0m8AlUFdbs.$UFVmIdPAOHBe2jJv5HJJTcDgINC7LTnSGRQNs9zS1mC";

    stateVersion = "23.11";
    vm-cluster = "Hyperviseur Luj";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };
  };

  storage01 = {
    site = "pav01";

    hashedPassword = "$y$j9T$tvRu1EJ9MwDSvEm0ogwe70$bKSw6nNteN0L3NOy2Yix7KlIvO/oROQmQ.Ynq002Fg8";

    stateVersion = "23.11";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };

    nix-modules = [
      "services/forgejo-nix-runners"
      "services/netbird/server.nix"
    ];
  };

  vault01 = {
    site = "hyp01";
    deployment.targetHost = "vault01.hyp01.infra.dgnum.eu";

    hashedPassword = "$y$j9T$5osXVNxCDxu3jIndcyh7G.$UrjiDRpMu3W59tKHLGNdLWllZh.4p8IM4sBS5SrNrN1";

    stateVersion = "23.11";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };

    adminGroups = [ "fai" ];
  };

  web01 = {
    site = "rat01";

    deployment.tags = [ "web" ];

    hashedPassword = "$y$j9T$9YqXO93VJE/GP3z8Sh4h51$hrBsEPL2O1eP/wBZTrNT8XV906V4JKbQ0g04IWBcyd2";

    stateVersion = "23.05";
    vm-cluster = "Hyperviseur NPS";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };
  };

  web02 = {
    site = "rat01";

    hashedPassword = "$y$j9T$p42UVNy78PykkQOjPwXNJ/$B/zCUOrHXVSFGUY63wnViMiSmU2vCWsiX0y62qqgNQ5";

    stateVersion = "24.05";
    vm-cluster = "Hyperviseur NPS";

    nixpkgs = {
      version = "24.05";
      system = "nixos";
    };
  };

  web03 = {
    site = "rat01";

    hashedPassword = "$y$j9T$Un/tcX5SPKNXG.sy/BcTa.$kyNHELjb1GAOWnauJfcjyVi5tacWcuEBKflZDCUC6x4";

    stateVersion = "24.05";
    vm-cluster = "Hyperviseur NPS";

    nixpkgs = {
      version = "24.11";
      system = "nixos";
    };
  };
}