6b607976ea
Change-Id: Ida21ac7240a532bb6063b362155f2b14b2859aae Reviewed-on: https://cl.tvl.fyi/c/depot/+/9426 Tested-by: BuildkiteCI Reviewed-by: flokli <flokli@flokli.de>
31 lines
721 B
Nix
31 lines
721 B
Nix
# nixery.dev backing host in ru-central1-b
|
|
{ depot, lib, pkgs, ... }: # readTree options
|
|
{ config, ... }: # passed by module system
|
|
|
|
let
|
|
mod = name: depot.path.origSrc + ("/ops/modules/" + name);
|
|
in
|
|
{
|
|
imports = [
|
|
(mod "known-hosts.nix")
|
|
(mod "nixery.nix")
|
|
(mod "tvl-users.nix")
|
|
(mod "www/nixery.dev.nix")
|
|
(mod "yandex-cloud.nix")
|
|
|
|
(depot.third_party.agenix.src + "/modules/age.nix")
|
|
];
|
|
|
|
networking = {
|
|
hostName = "nixery-01";
|
|
domain = "tvl.fyi";
|
|
firewall.allowedTCPPorts = [ 22 80 443 ];
|
|
};
|
|
|
|
security.sudo.extraRules = lib.singleton {
|
|
groups = [ "wheel" ];
|
|
commands = [{ command = "ALL"; options = [ "NOPASSWD" ]; }];
|
|
};
|
|
|
|
services.depot.nixery.enable = true;
|
|
}
|