summaryrefslogtreecommitdiffstats
path: root/kartei/lass/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'kartei/lass/default.nix')
-rw-r--r--kartei/lass/default.nix35
1 files changed, 35 insertions, 0 deletions
diff --git a/kartei/lass/default.nix b/kartei/lass/default.nix
new file mode 100644
index 00000000..fe372580
--- /dev/null
+++ b/kartei/lass/default.nix
@@ -0,0 +1,35 @@
+{ config, lib, ... }: let
+ slib = import ../../lib/pure.nix { inherit lib; };
+
+ r6 = ip: (slib.krebs.genipv6 "retiolum" "lass" ip).address;
+ w6 = ip: (slib.krebs.genipv6 "wiregrill" "lass" ip).address;
+ hostFiles =
+ builtins.map (lib.removeSuffix ".nix") (
+ builtins.filter
+ (x: lib.hasSuffix ".nix" x && x != "default.nix")
+ (lib.attrNames (builtins.readDir ./.))
+ );
+
+in {
+ dns.providers = {
+ "lassul.us" = "zones";
+ };
+ hosts = lib.mapAttrs (_: lib.recursiveUpdate {
+ owner = config.krebs.users.lass;
+ consul = true;
+ ci = false;
+ monitoring = true;
+ }) (
+ lib.genAttrs hostFiles (host: import (./. + "/${host}.nix") {
+ inherit config lib r6 w6;
+ inherit (slib) krebs;
+ })
+ );
+ users = {
+ lass = {
+ mail = "lass@green.r";
+ pubkey = builtins.readFile ./ssh/yubikey.rsa;
+ pgp.pubkeys.default = builtins.readFile ./pgp/yubikey.pgp;
+ };
+ };
+}