wurzel/fruitbasket
9
1
Fork 0
Code Issues 5 Pull requests Packages Projects Releases Wiki Activity
❄️ Infrastructure configuration for FSR-operated machines
386 commits 5 branches 0 tags 8.7 MiB
Nix 87%
CSS 12.6%
Sieve 0.4%
Find a file
Rouven Seifert 348e6b9fb6
allow users to use the server as remote builder
2023-09-17 22:49:28 +02:00
.github/workflows fix cachix ci (#37) 2023-05-25 23:59:56 +02:00
hosts/quitte allow users to use the server as remote builder 2023-09-17 22:49:28 +02:00
keys remove the vm 2023-08-16 14:51:01 +02:00
modules Merge pull request #67 from fsr/domain-refactor 2023-09-17 20:31:03 +02:00
pkgs padlist: filter pads by tag 2023-08-24 19:46:21 +02:00
secrets mail: don't match users by the mail attribute 2023-09-04 08:58:15 +02:00
.gitignore fix .gitignore 2023-01-09 18:47:37 +01:00
.sops.yaml remove the vm 2023-08-16 14:51:01 +02:00
flake.lock nix: flake update 2023-09-14 16:19:53 +02:00
flake.nix refactor: fsr.domain -> networking.domain 2023-09-17 20:10:55 +02:00
README.md reflect garbage collection in README.md 2023-07-19 17:52:07 +02:00

README.md

Infrastructure configuration for FSR-operated machines

This repository contains the NixOS configuration files for FSR machines.

Machines configured by this repository:

  • quitte (new server predestined to run all important services)

Setup

Clone this repository on the target machine to /etc/nixos and build the desired host configuration e.g.

# you may need to copy the generated hardware-configuration.nix to hosts/<hostname>/hardware-configuraion.nix
nixos-rebuild switch --flake .#<hostname>

Tips and Tricks

Resolving merge conflicts in sops files

Required steps

  1. Manually resolve the conflicts in the encrypted file
  2. Open the file using sops --ignore-mac secrets/<hostname>.yml
  3. Change one letter in one of the yml entries to let sops know it has to regenerate the MAC
  4. Close the file. Open it again and revert the change you just did in step 3.