krebs modules: finalize default.nix split

1 files changed, 240 insertions, 0 deletions

diff --git a/krebs/3modules/tv/default.nix b/krebs/3modules/tv/default.nix
new file mode 100644
index 00000000..96ab48e6
--- /dev/null
+++ b/krebs/3modules/tv/default.nix
@@ -0,0 +1,240 @@
+{ lib, ... }:
+
+with import ../../4lib { inherit lib; };
+
+{
+  dns.providers = {
+    de.viljetic = "regfish";
+  };
+  hosts = addNames {
+    cd = rec {
+      cores = 2;
+      dc = "tv"; #dc = "cac";
+      extraZones = {
+        "krebsco.de" = ''
+          mx23          IN A ${elemAt nets.internet.addrs4 0}
+          cd            IN A ${elemAt nets.internet.addrs4 0}
+          krebsco.de.   IN MX 5 mx23'';
+      };
+      nets = rec {
+        internet = {
+          addrs4 = ["162.219.7.216"];
+          aliases = [
+            "cd.internet"
+            "cd.viljetic.de"
+            "cgit.cd.viljetic.de"
+            "cd.krebsco.de"
+          ];
+          ssh.port = 11423;
+        };
+        retiolum = {
+          via = internet;
+          addrs4 = ["10.243.113.222"];
+          addrs6 = ["42:4522:25f8:36bb:8ccb:0150:231a:2af3"];
+          aliases = [
+            "cd.retiolum"
+            "cgit.cd.retiolum"
+          ];
+          tinc.pubkey = ''
+            -----BEGIN RSA PUBLIC KEY-----
+            MIICCgKCAgEAvmCBVNKT/Su4v9nl/Nm3STPo5QxWPg7xEkzIs3Oh39BS8+r6/7UQ
+            rebib7mczb+ebZd+Rg2yFoGrWO8cmM0VcLy5bYRMK7in8XroLEjWecNNM4TRfNR4
+            e53+LhcPdkxo0A3/D+yiut+A2Mkqe+4VXDm/JhAiAYkZTn7jUtj00Atrc7CWW1gN
+            sP3jIgv4+CGftdSYOB4dm699B7OD9XDLci2kOaFqFl4cjDYUok03G0AduUlRx10v
+            CKbKOTIdm8C36A902/3ms+Hyzkruu+VagGIZuPSwqXHJPCu7Ju+jarKQstMmpQi0
+            PubweWDL0o/Dfz2qT3DuL4xDecIvGE6kv3m41hHJYiK+2/azTSehyPFbsVbL7w0V
+            LgKN3usnZNcpTsBWxRGT7nMFSnX2FLDu7d9OfCuaXYxHVFLZaNrpccOq8NF/7Hbk
+            DDW81W7CvLyJDlp0WLnAawSOGTUTPoYv/2wAapJ89i8QGCueGvEc6o2EcnBVMFEW
+            ejWTQzyD816f4RsplnrRqLVlIMbr9Q/n5TvlgjjhX7IMEfMy4+7qLGRQkNbFzgwK
+            jxNG2fFSCjOEQitm0gAtx7QRIyvYr6c7/xiHz4AwxYzBmvQsL/OK57NO4+Krwgj5
+            Vk8TQ2jGO7J4bB38zaxK+Lrtfl8i1AK1171JqFMhOc34JSJ7T4LWDMECAwEAAQ==
+            -----END RSA PUBLIC KEY-----
+          '';
+        };
+      };
+      ssh.privkey.path = <secrets/ssh.id_ed25519>;
+      ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOd/HqZIO9Trn3eycl23GZAz21HQCISaVNfNyaLSQvJ6";
+    };
+    mkdir = rec {
+      cores = 1;
+      dc = "tv"; #dc = "cac";
+      nets = rec {
+        internet = {
+          addrs4 = ["104.233.84.215"];
+          aliases = [
+            "mkdir.internet"
+          ];
+        };
+        retiolum = {
+          via = internet;
+          addrs4 = ["10.243.113.223"];
+          addrs6 = ["42:4522:25f8:36bb:8ccb:0150:231a:2af4"];
+          aliases = [
+            "mkdir.retiolum"
+            "cgit.mkdir.retiolum"
+          ];
+          tinc.pubkey = ''
+            -----BEGIN RSA PUBLIC KEY-----
+            MIIBCgKCAQEAuyfM+3od75zOYXqnqRMAt+yp/4z/vC3vSWdjUvEmCuM23c5BOBw+
+            dKqbWoSPTzOuaQ0szdL7a6YxT+poSUXd/i3pPz59KgCl192rd1pZoJKgvoluITev
+            voYSP9rFQOUrustfDb9qKW/ZY95cwdCvypo7Vf4ghxwDCnlmyCGz7qXTJMLydNKF
+            2PH9KiY4suv15sCg/zisu+q0ZYQXUc1TcgpoIYBOftDunOJoNdbti+XjwWdjGmJZ
+            Bn4GelsrrpwJFvfDmouHUe8GsD7nTgbZFtiJbKfCEiK16N0Q0d0ZFHhAV2nPjsk2
+            3JhG4n9vxATBkO82f7RLrcrhkx9cbLfN3wIDAQAB
+            -----END RSA PUBLIC KEY-----
+          '';
+        };
+      };
+      ssh.privkey.path = <secrets/ssh.id_ed25519>;
+      ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICuShEqU0Cdm7KCaMD5x1D6mgj+cr7qoqbzFJDKoBbbw";
+    };
+    ire = {
+      nets = {
+        internet = {
+          addrs4 = ["198.147.22.115"];
+          ssh.port = 11423;
+        };
+        retiolum = {
+          addrs4 = ["10.243.231.66"];
+          addrs6 = ["42:b912:0f42:a82d:0d27:8610:e89b:490c"];
+          aliases = [
+            "ire.retiolum"
+          ];
+          tinc.pubkey = ''
+            -----BEGIN RSA PUBLIC KEY-----
+            MIIBCgKCAQEAwofjmP/XBf5pwsJlWklkSzI+Bo0I0B9ONc7/j+zpbmMRkwbWk4X7
+            rVLt1cWvTY15ujg2u8l0o6OgEbIkc6rslkD603fv1sEAd0KOv7iKLgRpE9qfSvAt
+            6YpiSv+mxEMTpH0g36OmBfOJ10uT+iHDB/FfxmgGJx//jdJADzLjjWC6ID+iGkGU
+            1Sf+yHXF7HRmQ29Yak8LYVCJpGC5bQfWIMSL5lujLq4NchY2d+NZDkuvh42Ayr0K
+            LPflnPBQ3XnKHKtSsnFR2vaP6q+d3Opsq/kzBnAkjL26jEuFK1v7P/HhNhJoPzwu
+            nKKWj/W/k448ce374k5ycjvKm0c6baAC/wIDAQAB
+            -----END RSA PUBLIC KEY-----
+          '';
+          ssh.port = 11423;
+        };
+      };
+      ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBaMjBJ/BfYlHjyn5CO0xzFNaQ0LPvMP3W9UlOs1OxGY";
+    };
+    nomic = {
+      cores = 2;
+      dc = "tv"; #dc = "gg23";
+      nets = rec {
+        retiolum = {
+          addrs4 = ["10.243.0.110"];
+          addrs6 = ["42:02d5:733f:d6da:c0f5:2bb7:2b18:09ec"];
+          aliases = [
+            "nomic.retiolum"
+            "cgit.nomic.retiolum"
+          ];
+          tinc.pubkey = ''
+            -----BEGIN RSA PUBLIC KEY-----
+            MIIBCgKCAQEAwb8Yk/YRc17g2J9n960p6j4W/l559OPyuMPdGJ4DmCm3WNQtxoa+
+            qTFUiDiI85BcmfqnSeddLG8zTC2XnSlIvCRMJ9oKzppFM4PX4OTAaJZVE5WyCQhw
+            Kd4tHVdoQgJW5yFepmT9IUmHqkxXJ0R2W93l2eSZNOcnFvFn0ooiAlRi4zAiHClu
+            5Mz80Sc2rvez+n9wtC2D06aYjP23pHYld2xighHR9SUqX1dFzgSXNSoWWCcgNp2a
+            OKcM8LzxLV7MTMZFOJCJndZ77e4LsUvxhQFP6nyKZWg30PC0zufZsuN5o2xsWSlA
+            Wi9sMB1AUR6mZrxgcgTFpUjbjbLQf+36CwIDAQAB
+            -----END RSA PUBLIC KEY-----
+          '';
+        };
+      };
+      secure = true;
+      ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILn7C3LxAs9kUynENdRNgQs4qjrhNDfXzlHTpVJt6e09";
+    };
+    rmdir = rec {
+      cores = 1;
+      dc = "tv"; #dc = "cac";
+      nets = rec {
+        internet = {
+          addrs4 = ["104.233.84.70"];
+          aliases = [
+            "rmdir.internet"
+          ];
+        };
+        retiolum = {
+          via = internet;
+          addrs4 = ["10.243.113.224"];
+          addrs6 = ["42:4522:25f8:36bb:8ccb:0150:231a:2af5"];
+          aliases = [
+            "rmdir.retiolum"
+            "cgit.rmdir.retiolum"
+          ];
+          tinc.pubkey = ''
+            -----BEGIN RSA PUBLIC KEY-----
+            MIIBCgKCAQEA+twy4obSbJdmZLfBoe9YYeyoDnXkO/WPa2D6Eh6jXrWk5fbhBjRf
+            i3EAQfLiXXFJX3E8V8YvJyazXklI19jJtCLDiu/F5kgJJfyAkWHH+a/hcg7qllDM
+            Xx2CvS/nCbs+p48/VLO6zLC7b1oHu3K/ob5M5bwPK6j9NEDIL5qYiM5PQzV6zryz
+            hS9E/+l8Z+UUpYcfS3bRovXJAerB4txc/gD3Xmptq1zk53yn1kJFYfVlwyyz+NEF
+            59JZj2PDrvWoG0kx/QjiNurs6XfdnyHe/gP3rmSTrihKFVuA3cZM62sDR4FcaeWH
+            SnKSp02pqjBOjC/dOK97nXpKLJgNH046owIDAQAB
+            -----END RSA PUBLIC KEY-----
+          '';
+        };
+      };
+      ssh.privkey.path = <secrets/ssh.id_ed25519>;
+      ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICLuhLRmt8M5s2Edwwl9XY0KAAivzmPCEweesH5/KhR4";
+    };
+    wu = {
+      cores = 4;
+      # TODO wu is mobile, so dc means "home data center"
+      dc = "tv"; #dc = "gg23";
+      nets = {
+        retiolum = {
+          addrs4 = ["10.243.13.37"];
+          addrs6 = ["42:0:0:0:0:0:0:1337"];
+          aliases = [
+            "wu.retiolum"
+          ];
+          tinc.pubkey = ''
+            -----BEGIN RSA PUBLIC KEY-----
+            MIIBCgKCAQEArDvU0cuBsVqTjCX2TlWL4XHSy4qSjUhjrDvUPZSKTVN7x6OENCUn
+            M27g9H7j4/Jw/8IHoJLiKnXHavOoc9UJM+P9Fla/4TTVADr69UDSnLgH+wGiHcEg
+            GxPkb2jt0Z8zcpD6Fusj1ATs3sssaLHTHvg1D0LylEWA3cI4WPP13v23PkyUENQT
+            KpSWfR+obqDl38Q7LuFi6dH9ruyvqK+4syddrBwjPXrcNxcGL9QbDn7+foRNiWw4
+            4CE5z25oGG2iWMShI7fe3ji/fMUAl7DSOOrHVVG9eMtpzy+uI8veOHrdTax4oKik
+            AFGCrMIov3F0GIeu3nDlrTIZPZDTodbFKQIDAQAB
+            -----END RSA PUBLIC KEY-----
+          '';
+        };
+      };
+      secure = true;
+      ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcJvu8JDVzObLUtlAQg9qVugthKSfitwCljuJ5liyHa";
+    };
+    xu = {
+      cores = 4;
+      # TODO xu is mobile, so dc means "home data center"
+      dc = "tv"; #dc = "gg23";
+      nets = {
+        retiolum = {
+          addrs4 = ["10.243.13.38"];
+          addrs6 = ["42:0:0:0:0:0:0:1338"];
+          aliases = [
+            "xu.retiolum"
+          ];
+          tinc.pubkey = ''
+            -----BEGIN RSA PUBLIC KEY-----
+            MIIBCgKCAQEAl3l7IWbfbkVgaJFM3s9g2UCh2rmqoTba16Of7NNWMj05L/hIkUsQ
+            uc43/QzidWh/4gEaq5MQ7JpLyzVBQYRJkNlPRF/Z07KdLBskAZCjDYdYue9BrziX
+            8s2Irs2+FNbCK2LqtrPhbcXQJvixsk6vjl2OBpWTDUcDEsk+D1YQilxdtyUzCUkw
+            mmRo/mzNsLZsYlSgZ6El/ZLkRdtexAzGxJ0DrukpDR0uqXXkp7jUaxRCZ+Cwanvj
+            4I1Hu5aHzWB7KJ1SIvpX3a4f+mun1gh3TPqWP5PUqJok1PSuScz6P2UGaLZZyH63
+            4o+9nGJPuzb9bpMVRaVGtKXd39jwY7mbqwIDAQAB
+            -----END RSA PUBLIC KEY-----
+          '';
+        };
+      };
+      secure = true;
+      ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID554niVFWomJjuSuQoiCdMUYrCFPpPzQuaoXXYYDxlw";
+    };
+  };
+  users = addNames {
+    mv = {
+      mail = "mv@cd.retiolum";
+      pubkey = readFile ../../Zpubkeys/mv_vod.ssh.pub;
+    };
+    tv = {
+      mail = "tv@wu.retiolum";
+      pubkey = readFile ../../Zpubkeys/tv_wu.ssh.pub;
+    };
+  };
+}