kartei: init

108 files changed, 1 insertions, 5130 deletions

diff --git a/krebs/3modules/default.nix b/krebs/3modules/default.nix
index 7af6b13d9..70fc05813 100644
--- a/krebs/3modules/default.nix
+++ b/krebs/3modules/default.nix
@@ -6,6 +6,7 @@ let
 
   out = {
     imports = [
+      ../../kartei
       ./acl.nix
       ./airdcpp.nix
       ./announce-activation.nix
@@ -100,17 +101,6 @@ let
   };
 
   imp = lib.mkMerge [
-    { krebs = import ./external { inherit config; }; }
-    { krebs = import ./external/dbalan.nix { inherit config; }; }
-    { krebs = import ./external/kmein.nix { inherit config; }; }
-    { krebs = import ./external/mic92.nix { inherit config; }; }
-    { krebs = import ./external/palo.nix { inherit config; }; }
-    { krebs = import ./external/rtunreal.nix { inherit config; }; }
-    { krebs = import ./jeschli { inherit config; }; }
-    { krebs = import ./krebs  { inherit config; }; }
-    { krebs = import ./lass   { inherit config; }; }
-    { krebs = import ./makefu { inherit config; }; }
-    { krebs = import ./tv     { inherit config; }; }
     {
       krebs.dns.providers = {
         "krebsco.de" = "zones";
diff --git a/krebs/3modules/external/dbalan.nix b/krebs/3modules/external/dbalan.nix
deleted file mode 100644
index 301f010d3..000000000
--- a/krebs/3modules/external/dbalan.nix
+++ /dev/null
@@ -1,50 +0,0 @@
-with import <stockholm/lib>;
-{ config, ... }:
-let
-  hostDefaults = hostName: host: flip recursiveUpdate host ({
-    ci = false;
-    external = true;
-    monitoring = false;
-    owner = config.krebs.users.dbalan;
-  } // optionalAttrs (host.nets?retiolum) {
-    nets.retiolum = {
-      ip6.addr = (krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
-    };
-  } // optionalAttrs (host.nets?wiregrill) {
-    nets.wiregrill = {
-      ip6.addr = (krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
-    };
-  });
-in
-{
-  users = rec {
-    dbalan = {
-      mail = "dbalan@thaum.space";
-      pubkey = "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIAiWF+U3VHNfp1IPU0/TWhMioxJvmoyG1AMZMvnQjy5QAAAABHNzaDo= dj@v60";
-    };
-  };
-  hosts = mapAttrs hostDefaults {
-    v60 = {
-      nets.retiolum = {
-        aliases = [ "v60.dbalan.r" ];
-        ip4.addr = "10.243.42.12";
-        tinc.pubkey = ''
-          -----BEGIN RSA PUBLIC KEY-----
-          MIICCgKCAgEAxVRxcCWfjLu9cNo5ELfXyuwhpJBSfod5f9JkclSpydVHaQBfeVC6
-          RKfdknQVL6RXiCMFsSAvCvmnIohmpUCbiQWu29P/g0jzQZZ7zNx5L7JHy18x9qAr
-          1scu7FRdVErVuWKXXNt0+j45dA+u5HE6RLsjAHGYtQbAr21VLyLF3qq11IWNrFYU
-          uqSnM/ZPbOPPHLS8XtsQRdJ2cOkccSCO4W6xBar92aPFuDImH60VuxMFEKYWY2bz
-          p6q0K0rtRqW1qANTV62SUDeA1wMPlSmvnMFY7qesSLk6tJjJ02HwwiOvK2ov1/Rm
-          bpwcrqrrbUxbCaZC6t7pBBxUOZlGfnO3woZQm63+4TEw/YDHhxD0HbhH88Wc+eHy
-          I73tuL1oc01JxL131bJV6jcHG7LrG7wTsTdDaZpjbH54adJP47QpTMb0ggsx2WkD
-          mpxFFSnTZL7ghZO5NGPvidTBp+wJiSOv5igAjA72CvjR3tOF4d5Lsq4JsQeCStjA
-          OPrIrN0AnJRg2IFDXZEGwTS9AbLWX147O9VrNimLzezOylH4Eihn7GUJ5KLIPjLy
-          AvsgIYljoJuhGbM8QoWlakwqOndMeoqhz52ORZ5CDgfybJJEbyrYF8gYFVNJOzds
-          9gy/F+27TwfjMgcheN2+ogJp+lD754aCF0EJMwaK8ElzQLqAzbBRGAsCAwEAAQ==
-          -----END RSA PUBLIC KEY-----
-        '';
-        tinc.pubkey_ed25519 = "dcPFpCG94cq1KHD4TH9WgOl9fpc1589YvWkmnkEZcSC";
-      };
-    };
-  };
-}
diff --git a/krebs/3modules/external/default.nix b/krebs/3modules/external/default.nix
deleted file mode 100644
index 989961490..000000000
--- a/krebs/3modules/external/default.nix
+++ /dev/null
@@ -1,882 +0,0 @@
-with import <stockholm/lib>;
-{ config, ... }: let
-
-  hostDefaults = hostName: host: flip recursiveUpdate host ({
-    ci = false;
-    external = true;
-    monitoring = false;
-  } // optionalAttrs (host.nets?retiolum) {
-    nets.retiolum.ip6.addr =
-      (krebs.genipv6 "retiolum" "external" { inherit hostName; }).address;
-  } // optionalAttrs (host.nets?wiregrill) {
-    nets.wiregrill.ip6.addr =
-      (krebs.genipv6 "wiregrill" "external" { inherit hostName; }).address;
-  });
-  ssh-for = name: builtins.readFile (./ssh + "/${name}.pub");
-  tinc-for = name: builtins.readFile (./tinc + "/${name}.pub");
-
-in {
-  hosts = mapAttrs hostDefaults {
-    helsinki = {
-      owner = config.krebs.users.ajs124;
-      nets = {
-        retiolum = {
-          ip4.addr = "10.243.10.1";
-          aliases = [ "helsinki.r" ];
-          tinc.pubkey = ''
-            -----BEGIN RSA PUBLIC KEY-----
-            MIICCgKCAgEA5MnCmT9xVEtv3hoZsjmgF4pVnPgzaWWVrZVguMfXcbTiusgWqBIM
-            Ms/Ue676J3kQIJT1QSMA2RWDUU++dUcfhHF87vFpnyCnaKjfz6LyAwlSfKluttyY
-            aFNgcUWlZRl4wkqys/oYhLD1q26mO/ekCA2eohzbB1TCaPY97VM5nl0MkXStMN76
-            B+Ipw/gQcZXuWYct8Nj69sETPLnbf6ZBKs+T213as+NUSHVUdmBmV8QtmHDI3e7B
-            4wAK1JkFCQgVu9gm/6BvqWroOMcmtxzSceyrY+0MWnAnM+wrLcYYaT2xw1OJyWmM
-            riOHHMw9iLVxqyQ+3eDucJRQcJzO7I4j8zQaoYxPE1ZSl4wTsaypkMuNOyhYv2C9
-            RNPJgTBlr911NnY7TcKauz/lO1Qcl5kHBMrIfwsbsQK+zfN2XX+s21/SPeSJ7k1N
-            OqXeyX0mz2l7bhBDwTTDtINSz8sB3BL59mVbWY5z5b90oeKPrfygmp7V0CSKgHBr
-            b5ZIhMRfgcK+HjolcEqdL9INpJZVFYt3vWPNhDpbX5sEOjjR+ODceriL8zdlTBRx
-            PyB9OiK6tN+L63QFM7H1NFN9fPeOd2WbHvfoeX255kx8FHSALKL5rVSz9Ejwc97k
-            rG0FItgHXajPazulBfUV0N9ck7SwLTmStKxtQ8NKCoIJLpv2ip4C+t0CAwEAAQ==
-            -----END RSA PUBLIC KEY-----
-          '';
-          tinc.pubkey_ed25519 = "47fX1g6qynVprA+PtniBLEonFp1B70nMrJ8SBCWNJnL";
-        };
-      };
-    };
-    horisa = {
-      cores = 2;
-      owner = config.krebs.users.ulrich; # main laptop
-      nets = {
-        retiolum = {
-          ip4.addr = "10.243.226.213";
-          ip6.addr = "42:0:e644:9099:4f8:b9aa:3856:4e85";
-          aliases = [
-            "horisa.r"
-          ];
-          tinc.pubkey = tinc-for "horisa";
-        };
-      };
-    };
-    hasegateway = {
-      cores = 1;
-      owner = config.krebs.users.hase;
-      nets = {
-        #internet = {
-        #  ip.addr = "37.24.200.174";
-        #  aliases = [ "hasegateway.i" ];
-        #};
-        retiolum = {
-          ip4.addr = "10.243.226.216";
-          ip6.addr = "42:0:e644:9099:4f8:b9aa:3856:4e86";
-          aliases = [
-            "hasegateway.r"
-          ];
-          tinc.pubkey = tinc-for "hasegateway";
-        };
-      };
-    };
-    jongepad = {
-      owner = config.krebs.users.jonge;
-      nets = {
-        retiolum = {
-          ip4.addr = "10.243.5.6";
-          aliases = [
-            "jongepad.r"
-          ];
-          tinc.pubkey = ''
-            -----BEGIN RSA PUBLIC KEY-----
-            MIICCgKCAgEAtJsF5jL/M72PCptLFC5iIEt0qAL544H/VLijvZEG9gnoqbs94aNJ
-            MM5Sr3yMB01WkcT1Lph3r4dxV0/QECu3Ca4xxuUntu42tFXhkikQGcZLuo2h4zr4
-            +wReudCCc7VqMcJDxriyyoW3i7smZnQGzo36gpKHbZfil8dJo0QE8mnujqkQCA0G
-            hjR7xdG+/usDgRUarfpNgoHKyZfLcomQLUuR8I3aHsdaCLgMJ8v5DjGymp2bIswT
-            puPx3IEZSXH8y6MZoISvLn+hwcWat34Bj1PF7vfgldivqHaDFpifpXvjbCmxcel9
-            WVZRSEvLSVT4FnpaJ7JkAaUpG+GOHVlPWARq9t9AZXKR1Zex9MIkHzWi/TIIkawj
-            wJNvUwvBYJ1UCu