Working flake-based nixops config
This commit is contained in:
@@ -22,19 +22,19 @@ in {
|
||||
};
|
||||
};
|
||||
|
||||
fudo.secrets = {
|
||||
host-secrets.lambda = {
|
||||
host-keytab = {
|
||||
source-file = /state/secrets/kerberos/lambda.keytab;
|
||||
target-file = "/etc/krb5.keytab";
|
||||
user = "root";
|
||||
};
|
||||
};
|
||||
# fudo.secrets = {
|
||||
# host-secrets.lambda = {
|
||||
# host-keytab = {
|
||||
# source-file = /state/secrets/kerberos/lambda.keytab;
|
||||
# target-file = "/etc/krb5.keytab";
|
||||
# user = "root";
|
||||
# };
|
||||
# };
|
||||
|
||||
secret-group = "fudo-secrets";
|
||||
secret-users = [ "niten" ];
|
||||
secret-paths = [ "/state/secrets" ];
|
||||
};
|
||||
# secret-group = "fudo-secrets";
|
||||
# secret-users = [ "niten" ];
|
||||
# secret-paths = [ "/state/secrets" ];
|
||||
# };
|
||||
|
||||
fudo.games.valheim = {
|
||||
enable = true;
|
||||
|
||||
@@ -63,20 +63,6 @@ in {
|
||||
network-definition = config.fudo.networks.${domain-name};
|
||||
};
|
||||
|
||||
secrets.host-secrets.limina = {
|
||||
backplane-client-passwd = {
|
||||
source-file = /state/secrets/backplane-client/limina.passwd;
|
||||
target-file = "/srv/backplane/dns/client.passwd";
|
||||
user = config.fudo.client.dns.user;
|
||||
};
|
||||
|
||||
host-keytab = {
|
||||
source-file = /state/secrets/kerberos/limina.keytab;
|
||||
target-file = "/etc/krb5.keytab";
|
||||
user = "root";
|
||||
};
|
||||
};
|
||||
|
||||
client.dns = {
|
||||
enable = true;
|
||||
ipv4 = true;
|
||||
|
||||
+3
-3
@@ -2,8 +2,8 @@
|
||||
|
||||
{
|
||||
config.fudo.networks = {
|
||||
"rus.selby.ca" = import ./networks/rus.selby.ca.nix { inherit config lib; };
|
||||
"sea.fudo.org" = import ./networks/sea.fudo.org.nix { inherit config lib; };
|
||||
"informis.land" = import ./networks/informis.land.nix { inherit config lib; };
|
||||
"rus.selby.ca" = import ./networks/rus.selby.ca.nix;
|
||||
"sea.fudo.org" = import ./networks/sea.fudo.org.nix;
|
||||
"informis.land" = import ./networks/informis.land.nix;
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user