From 2e5167de1560ad0d7b8e294c72e1913f694160c2 Mon Sep 17 00:00:00 2001 From: lassulus Date: Thu, 7 Sep 2023 12:26:31 +0200 Subject: lass: migrate away --- lass/2configs/green-hosts/plain.nix | 87 ------------------------------------- 1 file changed, 87 deletions(-) delete mode 100644 lass/2configs/green-hosts/plain.nix (limited to 'lass/2configs/green-hosts/plain.nix') diff --git a/lass/2configs/green-hosts/plain.nix b/lass/2configs/green-hosts/plain.nix deleted file mode 100644 index 58f54b74..00000000 --- a/lass/2configs/green-hosts/plain.nix +++ /dev/null @@ -1,87 +0,0 @@ -{ config, lib, pkgs, ... }: -with import ; - -let - - cname = "green-plain"; - -in { - imports = [ - - - ]; - - programs.fuse.userAllowOther = true; - - services.syncthing.declarative.folders."/var/lib/containers/${cname}/var/state" = { - devices = [ "icarus" "skynet" "littleT" "shodan" "mors" "morpheus" ]; - ignorePerms = false; - }; - - krebs.permown."/var/lib/containers/${cname}/var/state" = { - file-mode = "u+rw"; - directory-mode = "u+rwx"; - owner = "syncthing"; - keepGoing = true; - }; - - systemd.services."container@${cname}".reloadIfChanged = mkForce false; - containers.${cname} = { - config = { ... }: { - environment.systemPackages = [ - pkgs.git - pkgs.rxvt-unicode-unwrapped.terminfo - ]; - services.openssh.enable = true; - users.users.root.openssh.authorizedKeys.keys = [ - config.krebs.users.lass.pubkey - ]; - system.activationScripts.fuse = { - text = '' - ${pkgs.coreutils}/bin/mknod /dev/fuse c 10 229 - ''; - deps = []; - }; - }; - allowedDevices = [ - { modifier = "rwm"; node = "/dev/fuse"; } - ]; - autoStart = false; - enableTun = true; - privateNetwork = true; - hostAddress = "10.233.2.15"; # TODO find way to automatically calculate IPs - localAddress = "10.233.2.16"; # TODO find way to automatically calculate IPs - }; - - environment.systemPackages = [ - (pkgs.writeDashBin "start-${cname}" '' - set -euf - set -x - - mkdir -p /var/lib/containers/${cname}/var/state - - STATE=$(${pkgs.nixos-container}/bin/nixos-container status ${cname}) - if [ "$STATE" = 'down' ]; then - ${pkgs.nixos-container}/bin/nixos-container start ${cname} - fi - - ${pkgs.nixos-container}/bin/nixos-container run ${cname} -- ${pkgs.writeDash "deploy-${cname}" '' - set -x - - mkdir -p /var/state/var_src - ln -sfTr /var/state/var_src /var/src - touch /etc/NIXOS - ''} - - if [ -h /var/lib/containers/${cname}/var/src/nixos-config ] && (! ping -c1 -q -w5 ${cname}.r); then - ${pkgs.nixos-container}/bin/nixos-container run ${cname} -- nixos-rebuild -I /var/src switch - fi - '') - (pkgs.writeDashBin "stop-${cname}" '' - set -euf - - ${pkgs.nixos-container}/bin/nixos-container stop ${cname} - '') - ]; -} - -- cgit v1.2.3