nix
/
deployments
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Transitioning back to a deployment/ dir

This commit is contained in:
niten 2021-11-29 17:15:48 -08:00
parent c345daa524
commit 6780fa76cd
2 changed files with 44 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
common/deployment.nix Normal file
View File

@ -0,0 +1,31 @@
{ inputs, deployment-hosts, description, enable-rollback ? true, ... }:
with inputs.nixpkgs.lib; let
network-config = {
nixpkgs = inputs.nixpkgs;
network = {
inherit description;
enableRollback = enable-rollback;
};
};
host-configs = genAttrs deployment-hosts
(hostname: fudo-nixos.nixopsHostConfigurations.${hostname});
host-uber-secrets = genAttrs deployment-hosts
(hostname: { config, ... }: let
uber-secrets = config.fudo.secrets.files.host-filesystem-keys;
in {
imports = [
inputs.fudo-secrets.nixosModule
({ config, ... }: {
deployment.keys = mkIf (hasAttr hostname uber-secrets) {
deployment.keys = mapAttrs (secret: secret-file: {
keyFile = secret-file;
user = "root";
permissions = "0400";
}) uber-secrets.${hostname};
};
})
];
});
in network-config // host-configs // host-uber-secrets

43
informis/flake.nix
View File

@ -1,5 +1,5 @@
{
description = "Definition of the Informis NixOps network.";
description = "Informis NixOps network.";
inputs = {
nixpkgs.url = "nixpkgs/nixos-21.05";
@ -17,39 +17,22 @@
};
};
outputs = { self, nixpkgs, fudo-nixos, fudo-entities, fudo-secrets, ... }:
outputs = { self, nixpkgs, fudo-nixos, fudo-entities, fudo-secrets } @ inputs:
with nixpkgs.lib; {
nixopsConfigurations.default = let
domain = "informis.land";
description = "Informis NixOps Network";
deployment-hosts = filterAttrs
(hostname: hostOpts:
hostOpts.domain == domain &&
hostOpts.nixos-system)
fudo-entities.entities.hosts;
deployment-hosts = attrNames
(filterAttrs
(hostname: hostOpts:
hostOpts.domain == domain &&
hostOpts.nixos-system)
fudo-entities.entities.hosts);
network-config = {
inherit nixpkgs;
network = {
description = "Seattle NixOps network";
enableRollback = true;
};
};
uber-secrets = config.fudo.secrets.files.host-filesystem-keys;
host-configs = (mapAttrs (hostname: hostOpts:
fudo-nixos.nixopsHostConfigurations.${hostname})
deployment-hosts);
host-uber-secrets = (mapAttrs (hostname: hostOpts:
if (hasAttr hostname uber-secrets) then
mapAttrs (secret: secret-file: {
keyFile = secret-file;
user = "root";
permissions = "0400";
}) uber-secrets.${hostname}
else {}));
in network-config // host-configs // host-uber-secrets;
deployment-config-generator = import ../common/deployment.nix;
in deployment-config-generator {
inherit inputs deployment-hosts description;
};
};
}