❄️ Infrastructure configuration for FSR-operated machines

Find a file

revol-xut e37482ef0a nixpkgs fmt		2023-04-03 23:05:00 +02:00
.github/workflows	removing old command from pipeline	2022-12-17 18:05:19 +01:00
config	Synapse LDAP config, add Portunus search user, update flake	2023-01-18 14:12:03 +01:00
hosts	[quitte] Add video kernel parameter	2023-02-15 16:46:48 +01:00
keys	update fugi pgp key	2023-03-01 11:49:21 +01:00
miscellaneous	added sanddorn config	2022-04-10 13:59:39 +02:00
modules	nixpkgs fmt	2023-04-03 23:05:00 +02:00
pkgs	move matrix-synapse-ldap3.nix to /pkgs	2023-02-02 21:16:55 +01:00
secrets	catting out the password doesn't work	2023-02-15 14:47:14 +01:00
.gitignore	fix .gitignore	2023-01-09 18:47:37 +01:00
.sops.yaml	add secrets/admin.yaml	2022-11-25 17:15:52 +01:00
flake.lock	resoved conflicts	2023-02-15 13:25:45 +01:00
flake.nix	configure ldap for hedgedoc (config adapted from kaki)	2023-02-27 11:08:21 +01:00
README.md	Remove dkim keygen instructions	2023-03-01 15:30:23 +01:00

README.md

Infrastructure configuration for FSR-operated machines

This repository contains the NixOS configuration files for FSR machines.

Machines configures by this repository:

birne (the printer notebook)
tomate (backup endpoint and office computer)
quitte (new server predestined to run all important services)

Setup

Clone this repository on the target machine to /etc/nixos and build the desired host configuration e.g.

# you may need to copy the generated hardware-configuration.nix to hosts/<hostname>/hardware-configuraion.nix
nixos-rebuild switch --flake .#<hostname>

Tips and Tricks

Resolving merge conflicts in sops files

Required steps

Manually resolve the conflicts in the encrypted file
Open the file using sops --ignore-mac secrets/<hostname>.yml
Change one letter in one of the yml entries to let sops know it has to regenerate the MAC
Close the file. Open it again and revert the change you just did in step 3.