nixos/machines/skynet.nix

100 lines
2 KiB
Nix
Raw Normal View History

2023-07-20 21:05:46 +00:00
/*
Name: https://en.wikipedia.org/wiki/Skynet_(Terminator)
Why: Skynet is eternal
Type: VM
Hardware: -
From: 2023
Role: Webserver and member linux box
Notes:
*/
2023-07-21 20:27:01 +00:00
{ pkgs, lib, nodes, inputs, ... }:
2023-07-20 21:05:46 +00:00
let
# name of the server, sets teh hostname and record for it
name = "skynet";
# DMZ that ITD provided
ip_pub = "193.1.96.165";
ip_priv = "193.1.99.79";
hostname = "${name}.skynet.ie";
2023-07-21 01:03:04 +00:00
hostname_int = "${name}.int.skynet.ie";
2023-07-20 21:05:46 +00:00
in {
2023-07-21 01:03:04 +00:00
imports = [
2023-07-23 02:08:56 +00:00
../applications/skynet.ie.nix
2023-07-21 01:03:04 +00:00
];
2023-07-20 21:05:46 +00:00
deployment = {
2023-07-21 01:03:04 +00:00
targetHost = ip_priv;
2023-07-20 21:05:46 +00:00
targetPort = 22;
targetUser = "root";
2023-07-26 22:53:26 +00:00
tags = [ "active-core" ];
2023-07-20 21:05:46 +00:00
};
# it has two network devices so two
skynet_dns.records = [
{record=name; r_type="A"; value=ip_pub; server=true;}
{record="${name}.int"; r_type="A"; value=ip_priv; server=true;}
{record=ip_pub; r_type="PTR"; value=hostname;}
{record=ip_priv; r_type="PTR"; value=hostname_int;}
2023-07-20 21:05:46 +00:00
];
services.skynet_backup = {
host = {
ip = ip_priv;
2023-07-20 21:05:46 +00:00
name = name;
};
};
# allow more than admins access
services.skynet_ldap_client = {
groups = [
"skynet-admins-linux"
"skynet-users-linux"
];
};
2023-07-21 01:03:04 +00:00
proxmoxLXC.manageNetwork = true;
networking = {
hostName = name;
# needed to use the dmz first
# defaultGateway = lib.mkForce "193.1.96.161";
interfaces = {
eth0.ipv4 = {
addresses = [
{
address = ip_priv;
prefixLength = 26;
}
];
# routes = [
# {
# address = "193.1.99.64";
# prefixLength = 26;
# via = "193.1.99.65";
# }
# ];
};
# primary ip for logging in
eth1.ipv4.addresses = [
{
address = ip_pub;
prefixLength = 28;
}
];
};
};
2023-07-21 01:03:04 +00:00
2023-07-23 02:08:56 +00:00
services.skynet = {
host = {
# website is still hosted on the internal IP
2023-07-23 02:08:56 +00:00
ip = ip_priv;
name = name;
};
2023-07-21 01:03:04 +00:00
};
2023-07-20 21:05:46 +00:00
}