Commit Graph

  • 0a460f3374 Attempted to fix initrd-network niten 2021-10-18 09:07:49 -07:00
  • b1b5e69a1c instance.site -> instance.local-site niten 2021-10-18 08:46:38 -07:00
  • 3d5d7e389e Working mounted encrypted file system! Neat. niten 2021-10-18 08:40:35 -07:00
  • eef580d596 Create groups for encrypted filesystems niten 2021-10-18 07:19:13 -07:00
  • cbf87fe8cf Ensure mountpoints exist niten 2021-10-18 07:03:01 -07:00
  • 0a6f6b794d Various fixes to sea-store niten 2021-10-17 23:33:07 -07:00
  • 41951b56ea fs.filesystem, not filesystem niten 2021-10-17 23:17:43 -07:00
  • 44fcc8e262 Oops, mounts shouldn't be a list, should be attrs. niten 2021-10-17 23:16:46 -07:00
  • 56cea847f4 Try to get sea-store working niten 2021-10-17 23:12:49 -07:00
  • c9815b4caf Ooof, to -> To niten 2021-10-17 22:36:01 -07:00
  • 5fb426f365 Corrected typo niten 2021-10-17 22:34:22 -07:00
  • b9067e7f13 Add initial support for encrypted filesystems. niten 2021-10-17 22:10:26 -07:00
  • db108dde93 Give sea-camera a break, it's hitting too hard niten 2021-10-17 14:03:28 -07:00
  • 90dafdf8e1 Ensure proper perms for /var/hom niten 2021-10-17 14:00:42 -07:00
  • 8a260cf13b state should be noexec niten 2021-10-16 18:08:51 -07:00
  • 1be71b13ab Merged with upstream niten 2021-10-15 23:25:01 -07:00
  • a53807f888 Make sure backplane client homedir exists niten 2021-10-15 23:23:00 -07:00
  • 455bdf4942 Give socrates root 12G to work with. niten 2021-10-15 17:39:24 -07:00
  • 7cf751b013 Enable initrd ssh on limina niten 2021-10-15 15:37:04 -07:00
  • bd03f8c4f5 Include openssh as a dep niten 2021-10-15 15:23:41 -07:00
  • 18618c9c2a Apparently writeText doesn't exist in pkgs? niten 2021-10-15 15:22:21 -07:00
  • 210a19d12c writeTextFile -> writeText niten 2021-10-15 15:20:43 -07:00
  • 7ea906162e writeTextFile -> builtins.writeTextFile niten 2021-10-15 15:18:50 -07:00
  • 3bf763c124 This shit is so weird niten 2021-10-15 15:17:45 -07:00
  • a0fd17c9ca Fuckin FORCE it niten 2021-10-15 14:29:02 -07:00
  • c4fa73c8e7 Force empty secrets niten 2021-10-15 14:27:33 -07:00
  • 23d2a4de70 Just fuckin remove the whole thing niten 2021-10-15 14:25:22 -07:00
  • 437203721b Ugh, extra n niten 2021-10-15 14:21:30 -07:00
  • 8a78f2d830 Ugh, (submodule ...) niten 2021-10-15 14:20:04 -07:00
  • 0c3fd5b522 Okay, let's make sure private-key-file is a string niten 2021-10-15 14:14:38 -07:00
  • bab995346e Make sure it's really a list of lists niten 2021-10-15 14:00:44 -07:00
  • 174abdf990 Corrected sshfp records. niten 2021-10-15 13:49:11 -07:00
  • 51546ec7fd Fiiiine, I'll just use a local fuckin file. niten 2021-10-15 12:57:48 -07:00
  • 0330f6ae78 Ahh fuck this wtf niten 2021-10-15 10:58:47 -07:00
  • 095876e12d Try again niten 2021-10-15 10:57:04 -07:00
  • c3fc069f34 Let's just verify... niten 2021-10-15 10:54:09 -07:00
  • ea8d7c9007 What if I hardcode the path? niten 2021-10-15 10:49:01 -07:00
  • 9b3333616d Was that just totally irrelevant? niten 2021-10-15 10:42:32 -07:00
  • b3258ad8a2 Try dumping the path...why is it refering to store niten 2021-10-15 10:40:10 -07:00
  • e6252d551a Fuck a secret then niten 2021-10-15 10:38:07 -07:00
  • 054ff9758c Sigh...try a fixed path again. niten 2021-10-15 10:36:16 -07:00
  • 870c90b679 These initrd secrets are annoying... niten 2021-10-15 10:30:43 -07:00
  • 4e62739086 Oops, didn't escape the attr name. niten 2021-10-15 10:11:26 -07:00
  • 11f1560410 Ugh...it was a function. niten 2021-10-15 10:03:14 -07:00
  • b22b7083e7 Correct typo? niten 2021-10-15 09:33:25 -07:00
  • 7264d98dd8 Move initrd host ssh key to host. niten 2021-10-15 08:52:44 -07:00
  • 22999a8fa4 Maybe this will work? niten 2021-10-14 18:13:40 -07:00
  • f3bc3c2013 Let's try this again just to verify niten 2021-10-14 16:48:35 -07:00
  • 8a928d9e25 Move secrets to the right place niten 2021-10-14 16:39:43 -07:00
  • e4d4f6d7af toPath -> builtins.toPath niten 2021-10-14 16:37:45 -07:00
  • 2f42079265 Try again at using secrets niten 2021-10-14 16:36:30 -07:00
  • 36413c80cd Ugh, apparently not allowed... niten 2021-10-13 23:04:21 -07:00
  • 08bb0e339a Ehh, fuckin key is hard niten 2021-10-13 22:58:35 -07:00
  • 5f79252dd6 Secrets don't seem to work? niten 2021-10-13 22:04:49 -07:00
  • eb3ff0bfe0 Fixed variable name niten 2021-10-13 21:05:52 -07:00
  • 6a9ce2e118 Forgot semicolon niten 2021-10-13 21:03:43 -07:00
  • 24dc18ee81 Make all hosts' initrd network-accessible niten 2021-10-13 17:23:47 -07:00
  • c310aeb414 Got a rogue interface on zbox, disable DHCP niten 2021-10-13 11:08:44 -07:00
  • 793c3c1363 Try removing 'noexec' flag on socrates fs. niten 2021-10-13 10:28:38 -07:00
  • 6ada43a205 Frick...flatMap -> concatMap niten 2021-10-13 10:02:21 -07:00
  • eae9e15c15 Oops, made the wrong map a concatMap. niten 2021-10-13 10:01:14 -07:00
  • 46469b739f File contains multi sshfp, not one. niten 2021-10-13 09:58:17 -07:00
  • 674c91354b Well that didn't work. niten 2021-10-13 09:16:52 -07:00
  • d27bb84cf0 Try using host dns from docker. niten 2021-10-13 09:05:14 -07:00
  • 35d172b279 Oops, missing semicolon niten 2021-10-13 08:41:46 -07:00
  • 248df221d8 No reason to put the HTTPS proxy on a public port niten 2021-10-13 08:34:48 -07:00
  • 76c0d49053 /nix must NOT be noexec niten 2021-10-13 00:23:14 -07:00
  • 72665ef874 limina-root -> limina-data niten 2021-10-13 00:06:54 -07:00
  • 283afec419 Changes for the new limina niten 2021-10-12 23:54:43 -07:00
  • 9c024fd9ee Need to specify a secret group and user niten 2021-10-12 17:34:23 -07:00
  • 7c08e0173e Need to use nixopsUnstable for flakes niten 2021-10-12 16:50:54 -07:00
  • 00ac387dfb Don't set the backplane passwd in limina.nix. niten 2021-10-12 14:43:14 -07:00
  • ac2e38040c Nonexistent variable: backplane-passwd -> backplane-passwd-source niten 2021-10-12 14:40:12 -07:00
  • b0c5b2bf6c Fix typo: password -> passwd niten 2021-10-12 14:38:23 -07:00
  • 478f502784 Version doesn't exist, I guess? niten 2021-10-12 14:08:05 -07:00
  • 4d4a274448 Include installed package list in /etc niten 2021-10-12 14:06:34 -07:00
  • cd50ed9580 Okay, include the fonts niten 2021-10-12 12:03:25 -07:00
  • 392fca4884 Double-definition niten 2021-10-11 15:23:04 -07:00
  • ce3bc96f87 As it turns out, don't need config lib pkgs niten 2021-10-11 15:19:10 -07:00
  • 8736fba4ec Merged with unhead changes niten 2021-10-11 15:04:51 -07:00
  • fbede93934 Trying to get this to build... niten 2021-10-11 15:04:06 -07:00
  • a323dbdd9c Working flake-based nixops config niten 2021-10-08 15:26:19 -07:00
  • 5a48c78b48 There's no reason for networks to be functions niten 2021-10-07 19:20:43 -07:00
  • 30c37b0798 Tweak to initialize.nix niten 2021-10-06 07:12:50 -07:00
  • f0be146512 By default, hosts should have no site. niten 2021-10-05 22:16:59 -07:00
  • 70b19b8c85 Tweaks to try to get this building... niten 2021-10-05 10:18:54 -07:00
  • 2ea4f6be5a Extract host type to host.nix niten 2021-10-04 13:23:40 -07:00
  • 2551908093 Added lib overlay niten 2021-10-04 12:23:46 -07:00
  • 3597d82f64 Checkin to see if lib gets fudo niten 2021-10-04 10:20:53 -07:00
  • 643f8d6df4 Move user types to a common file niten 2021-10-01 16:05:56 -07:00
  • 1450256a76 Add system stuff to config.instance niten 2021-10-01 12:52:57 -07:00
  • 6170ffc0af Trying to get home manager working niten 2021-09-30 17:14:20 -07:00
  • 82325ddaf9 Added master keys niten 2021-09-30 11:30:32 -07:00
  • b690935dea Working flake check niten 2021-09-30 08:40:47 -07:00
  • 4df4d2e7db Various minor fixes niten 2021-09-29 18:44:33 -07:00
  • 3dc5986134 Initial, broken niten 2021-09-29 17:55:13 -07:00
  • b072fed747 Don't set system niten 2021-09-24 11:47:35 -07:00
  • c02318ca00 Add arch to hosts, share host config with flake. niten 2021-09-24 11:31:56 -07:00
  • aaf5391557 keytab-directory -> keytab-path niten 2021-09-23 12:58:59 -07:00
  • 9b4b68935b Secrets on procul root 2021-09-22 22:30:32 -07:00