diff options
author | lassulus <lass@aidsballs.de> | 2015-07-28 21:49:48 +0200 |
---|---|---|
committer | lassulus <lass@aidsballs.de> | 2015-07-28 21:49:48 +0200 |
commit | ce2b97767e201d11ed4d34d8de770eb74da17125 (patch) | |
tree | df2dae28296dfc29ac3a98ad0952cd27f7d382a3 /tv/1systems/rmdir.nix | |
parent | 12644fe303a6045d6d8ae75916cb601f95596f25 (diff) | |
parent | 3228890813535514dfdfe9d049486a9e6054e479 (diff) |
Merge remote-tracking branch 'cd/user-toplevel' into newmaster
Diffstat (limited to 'tv/1systems/rmdir.nix')
-rw-r--r-- | tv/1systems/rmdir.nix | 84 |
1 files changed, 84 insertions, 0 deletions
diff --git a/tv/1systems/rmdir.nix b/tv/1systems/rmdir.nix new file mode 100644 index 00000000..c8ac43e4 --- /dev/null +++ b/tv/1systems/rmdir.nix @@ -0,0 +1,84 @@ +{ config, lib, pkgs, ... }: + +with lib; + +{ + krebs.build.host = config.krebs.hosts.rmdir; + krebs.build.user = config.krebs.users.tv; + + krebs.build.target = "root@rmdir.internet"; + + krebs.build.deps = { + nixpkgs = { + url = https://github.com/NixOS/nixpkgs; + rev = "4c01e6d91993b6de128795f4fbdd25f6227fb870"; + }; + secrets = { + url = "/home/tv/secrets/${config.krebs.build.host.name}"; + }; + stockholm = { + url = toString ../..; + }; + }; + + imports = [ + ../2configs/CAC-Developer-1.nix + ../2configs/CAC-CentOS-7-64bit.nix + ../2configs/base.nix + ../2configs/consul-server.nix + ../2configs/exim-smarthost.nix + ../2configs/git.nix + { + tv.iptables = { + enable = true; + input-internet-accept-new-tcp = [ + "ssh" + "tinc" + "smtp" + ]; + input-retiolum-accept-new-tcp = [ + "http" + ]; + }; + } + { + krebs.retiolum = { + enable = true; + connectTo = [ + "cd" + "mkdir" + "fastpoke" + "pigstarter" + "ire" + ]; + }; + } + ]; + + networking.interfaces.enp2s1.ip4 = [ + { + address = "167.88.44.94"; + prefixLength = 24; + } + ]; + networking.defaultGateway = "167.88.44.1"; + networking.nameservers = [ + "8.8.8.8" + ]; + + environment.systemPackages = with pkgs; [ + git # required for ./deploy, clone_or_update + htop + iftop + iotop + iptables + nethogs + rxvt_unicode.terminfo + tcpdump + ]; + + services.journald.extraConfig = '' + SystemMaxUse=1G + RuntimeMaxUse=128M + ''; +} |