1e2e2bdd35
grep -- '- &' .sops.yaml | cut -d'&' -f2 | grep _host | sed 's/_host//' | xargs -n2 clan secrets machines add
for i in secrets/*.yaml; do host=$(basename $i .yaml); clan secrets import-sops $i --machine $host --user makefu --prefix ${host}-;done
for i in secrets/*.yaml; do host=$(basename $i .yaml) ;clan secrets groups add-machine common "$host";done
50 lines
1.3 KiB
Nix
50 lines
1.3 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
with pkgs.stockholm.lib;
|
|
let
|
|
disk = "/dev/sda";
|
|
in {
|
|
imports = [
|
|
<stockholm/makefu>
|
|
<nixpkgs/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix>
|
|
<nixpkgs/nixos/modules/installer/cd-dvd/channel.nix>
|
|
<stockholm/makefu/2configs/tools/core.nix>
|
|
];
|
|
# TODO: NIX_PATH and nix.nixPath are being set by default.nix right now
|
|
# cd ~/stockholm ; nix-build -A config.system.build.isoImage -I nixos-config=makefu/1systems/iso.nix -I secrets=/home/makefu/secrets/iso /var/src/nixpkgs/nixos
|
|
krebs.build.host = config.krebs.hosts.iso;
|
|
krebs.hidden-ssh.enable = true;
|
|
|
|
environment.extraInit = ''
|
|
EDITOR=vim
|
|
'';
|
|
# iso-specific
|
|
boot.kernelParams = [ "copytoram" ];
|
|
|
|
|
|
environment.systemPackages = [
|
|
pkgs.parted
|
|
( pkgs.writeScriptBin "shack-install" ''
|
|
#! /bin/sh
|
|
echo "go ahead and try NIX_PATH=/root/.nix-defexpr/channels/ nixos-install"
|
|
'')
|
|
];
|
|
|
|
systemd.services.wpa_supplicant.wantedBy = lib.mkForce [ "multi-user.target" ];
|
|
|
|
networking.wireless = {
|
|
enable = true;
|
|
networks.shack.psk = "welcome2shack";
|
|
};
|
|
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
hostKeys = [
|
|
{ bits = 8192; type = "ed25519"; path = "/etc/ssh/ssh_host_ed25519_key"; }
|
|
];
|
|
};
|
|
# enable ssh in the iso boot process
|
|
systemd.services.sshd.wantedBy = lib.mkForce [ "multi-user.target" ];
|
|
}
|