nixos/machines/skynet.nix

/*

  Name:     https://en.wikipedia.org/wiki/Skynet_(Terminator)
  Why:      Skynet is eternal
  Type:     VM
  Hardware: -
  From:     2023
  Role:     Webserver and member linux box
  Notes:

*/

{ pkgs, lib, nodes, inputs,  ... }:
let
  # name of the server, sets teh hostname and record for it
  name      = "skynet";
  # DMZ that ITD provided
  ip_pub    = "193.1.96.165";
  ip_priv   = "193.1.99.79";
  hostname  = "${name}.skynet.ie";
  hostname_int  = "${name}.int.skynet.ie";

in {
  imports = [
    ../applications/skynet.ie.nix
  ];

  deployment = {
    targetHost = ip_priv;
    targetPort = 22;
    targetUser = "root";

    tags = [ "active-core" ];
  };

  # it has two network devices so two
  skynet_dns.records = [
    #{record=name;          r_type="A"; value=ip_pub;  server=true;}
    {record=name;  r_type="A"; value=ip_priv; server=true; }
    {record="ext"; r_type="A"; value=ip_pub;  server=false;}

    {record="${name}.int"; r_type="A"; value=ip_priv; server=true;}
    {record=ip_priv; r_type="PTR"; value=hostname_int;}
  ];

  services.skynet_backup = {
    host = {
      ip = ip_priv;
      name = name;
    };
  };

  # allow more than admins access
  services.skynet_ldap_client = {
    groups = [
      "skynet-admins-linux"
      "skynet-users-linux"
    ];
  };

  proxmoxLXC.manageNetwork = true;
  networking.hostName = name;
  networking.interfaces = {
    eth0.ipv4.addresses = [
      {
        address = ip_priv;
        prefixLength = 26;
      }
    ];
    eth1.ipv4.addresses = [
      {
        address = ip_pub;
        prefixLength = 28;
      }
    ];
  };

  services.skynet = {
    host = {
      ip = ip_priv;
      name = name;
    };
  };
}