nixos/machines/skynet.nix

75 lines
1.5 KiB
Nix
Raw Normal View History

2023-07-20 21:05:46 +00:00
/*
Name: https://en.wikipedia.org/wiki/Skynet_(Terminator)
Why: Skynet is eternal
Type: VM
Hardware: -
From: 2023
Role: Webserver and member linux box
Notes:
*/
2023-07-21 20:27:01 +00:00
{ pkgs, lib, nodes, inputs, ... }:
2023-07-20 21:05:46 +00:00
let
# name of the server, sets teh hostname and record for it
name = "skynet";
# DMZ that ITD provided
ip_pub = "193.1.96.165";
ip_priv = "193.1.99.79";
hostname = "${name}.skynet.ie";
2023-07-21 01:03:04 +00:00
hostname_int = "${name}.int.skynet.ie";
2023-07-20 21:05:46 +00:00
in {
2023-07-21 01:03:04 +00:00
imports = [
2023-07-23 02:08:56 +00:00
../applications/skynet.ie.nix
2023-07-21 01:03:04 +00:00
];
2023-07-20 21:05:46 +00:00
deployment = {
2023-07-21 01:03:04 +00:00
targetHost = ip_priv;
2023-07-20 21:05:46 +00:00
targetPort = 22;
targetUser = "root";
2023-07-26 22:53:26 +00:00
tags = [ "active-core" ];
2023-07-20 21:05:46 +00:00
};
# it has two network devices so two
skynet_dns.records = [
2023-07-23 02:08:56 +00:00
#{record=name; r_type="A"; value=ip_pub; server=true;}
{record=name; r_type="A"; value=ip_priv; server=true;}
2023-07-21 01:03:04 +00:00
{record="${name}.int"; r_type="A"; value=ip_priv; server=true;}
2023-07-20 21:05:46 +00:00
{record=ip_priv; r_type="PTR"; value=hostname_int;}
];
services.skynet_backup = {
host = {
ip = ip_pub;
name = name;
};
};
# allow more than admins access
services.skynet_ldap_client = {
groups = [
"skynet-admins-linux"
"skynet-users-linux"
];
};
2023-07-21 01:03:04 +00:00
proxmoxLXC.manageNetwork = true;
networking.hostName = name;
networking.interfaces.eth0.ipv4.addresses = [
{
address = ip_priv;
prefixLength = 26;
}
];
2023-07-23 02:08:56 +00:00
services.skynet = {
host = {
ip = ip_priv;
name = name;
};
2023-07-21 01:03:04 +00:00
};
2023-07-20 21:05:46 +00:00
}