❄️ Infrastructure configuration for FSR-operated machines
Find a file
2024-02-25 22:16:37 +01:00
.github/workflows fix cachix ci (#37) 2023-05-25 23:59:56 +02:00
hosts quitte: enable memory resource control 2024-02-25 21:52:36 +01:00
keys sops: add jonasga pgp key 2023-12-26 17:17:42 +01:00
modules decisions: fix secret 2024-02-22 12:20:21 +01:00
overlays use new bacula fixes 2023-12-14 15:51:52 +01:00
secrets decisions: add dex openid connect client 2024-02-05 22:01:11 +01:00
.gitignore fix .gitignore 2023-01-09 18:47:37 +01:00
.sops.yaml sops: rotate again and add jonasga 2023-12-26 18:18:53 +01:00
flake.lock nix: update flake 2024-02-22 20:10:36 +01:00
flake.nix strukturbot: move to quitte 2024-02-03 20:48:34 +01:00
README.md reflect garbage collection in README.md 2023-07-19 17:52:07 +02:00

Infrastructure configuration for FSR-operated machines

This repository contains the NixOS configuration files for FSR machines.

Machines configured by this repository:

  • quitte (new server predestined to run all important services)

Setup

Clone this repository on the target machine to /etc/nixos and build the desired host configuration e.g.

# you may need to copy the generated hardware-configuration.nix to hosts/<hostname>/hardware-configuraion.nix
nixos-rebuild switch --flake .#<hostname>

Tips and Tricks

Resolving merge conflicts in sops files

Required steps

  1. Manually resolve the conflicts in the encrypted file
  2. Open the file using sops --ignore-mac secrets/<hostname>.yml
  3. Change one letter in one of the yml entries to let sops know it has to regenerate the MAC
  4. Close the file. Open it again and revert the change you just did in step 3.