Skynet/nixos
6
1
Fork 0
Code Issues 43 Pull requests 1 Projects Releases Packages Wiki Activity Actions

feat: lets see if this works for secrets

Browse source
This commit is contained in:
silver 2023-01-15 19:48:54 +00:00
parent f5453ac2b6
commit 75bcac40e5
3 changed files with 15 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
flake.nix
View file

@ -12,13 +12,13 @@
}; };
outputs = { self, nixpkgs, ... }: { outputs = { self, nixpkgs, agenix, ... }: {
# https://github.com/zhaofengli/colmena # https://github.com/zhaofengli/colmena
colmena = { colmena = {
meta = { meta = {
nixpkgs = import nixpkgs { nixpkgs = import nixpkgs {
system = "x86_64-linux"; system = "x86_64-linux";
overlays = []; overlays = [ agenix.overlay ];
}; };
}; };
@ -26,9 +26,9 @@
defaults = import ./machines/_base.nix; defaults = import ./machines/_base.nix;
# firewall machiene # firewall machiene
#agentjones = import ./machines/agentjones.nix; agentjones = import ./machines/agentjones.nix;
test02 = import ./machines/test02.nix; #test02 = import ./machines/test02.nix;
}; };
}; };

2
machines/_base.nix
View file

@ -28,6 +28,8 @@
environment.systemPackages = [ environment.systemPackages = [
# for flakes # for flakes
pkgs.git pkgs.git
# for secrets
pkgs.agenix
# useful tools # useful tools
pkgs.ncdu_2 pkgs.ncdu_2
pkgs.htop pkgs.htop

13
machines/agentjones.nix
View file

@ -7,7 +7,8 @@
deployment = { deployment = {
#targetHost = "agentjones.skynet.ie"; #targetHost = "agentjones.skynet.ie";
# wont have dns to start with # wont have dns to start with
targetHost = "193.1.99.72"; #targetHost = "193.1.99.72";
targetHost = "192.168.1.157";
targetPort = 22; targetPort = 22;
targetUser = "root"; targetUser = "root";
}; };
@ -15,12 +16,16 @@
# this server is teh firewall # this server is teh firewall
skynet_firewall = { skynet_firewall = {
# always good to know oneself # always good to know oneself
own_ip = "193.1.99.72"; #own_ip = "193.1.99.72";
own_ip = "192.168.1.157";
# 443 is an ssh port now (heh)
own_ports = [ own_ports = [
# ssh
22 22
443 # dns
53
# wireguard
51820
]; ];
enable = true; enable = true;