replace host/istal with host/amstel

This commit is contained in:
Dmitriy Pleshevskiy 2025-03-26 21:37:39 +03:00
parent 98efe1a2c9
commit 38b0a0daa6
Signed by: pleshevskiy
GPG key ID: 17041163DA10A9A2
42 changed files with 12 additions and 27 deletions

Binary file not shown.

View file

@ -18,7 +18,7 @@ MACHINES := \
macbook-pro macbook-pro
VPS := \ VPS := \
istal \ amstel \
tatos tatos
.PHONY: help .PHONY: help

View file

@ -6,7 +6,7 @@
./services ./services
]; ];
networking.hostName = "istal"; networking.hostName = "amstel";
networking.domain = "local"; networking.domain = "local";
users.users.root.openssh.authorizedKeys.keys = globalData.publicKeys.users.janistal; users.users.root.openssh.authorizedKeys.keys = globalData.publicKeys.users.janistal;

Binary file not shown.

View file

@ -5,7 +5,6 @@ let
in in
{ {
age.secrets.forgejo-runner-token-istal-docker.file = ./forgejo-runner-token-istal-docker.age; age.secrets.forgejo-runner-token-istal-docker.file = ./forgejo-runner-token-istal-docker.age;
age.secrets.forgejo-runner-token-codeberg-docker.file = ./forgejo-runner-token-codeberg-docker.age;
virtualisation.docker.enable = true; virtualisation.docker.enable = true;
systemd.services.docker.serviceConfig = { systemd.services.docker.serviceConfig = {
@ -15,9 +14,9 @@ in
services.gitea-actions-runner = { services.gitea-actions-runner = {
package = pkgs.unstable.forgejo-runner; package = pkgs.unstable.forgejo-runner;
instances = { instances = {
istal-docker = { amstel-docker = {
enable = true; enable = true;
name = "istal-docker"; name = "amstel-docker";
url = "https://git.pleshevski.ru"; url = "https://git.pleshevski.ru";
labels = [ labels = [
"docker:docker://node:20-bullseye" "docker:docker://node:20-bullseye"
@ -28,20 +27,6 @@ in
runner = { runner = {
envs = { inherit NODE_OPTIONS; }; envs = { inherit NODE_OPTIONS; };
timeout = "1h";
};
};
};
codeberg-docker = {
enable = true;
name = "codeberg-docker";
url = "https://codeberg.org";
labels = [ ];
tokenFile = config.age.secrets.forgejo-runner-token-codeberg-docker.path;
settings = {
runner = {
envs = { inherit NODE_OPTIONS; };
timeout = "1h"; timeout = "1h";
}; };
}; };

Binary file not shown.

Binary file not shown.

View file

@ -2,8 +2,8 @@
let let
tatosData = import (hostsPath + "/tatos/data.secret.nix"); tatosData = import (hostsPath + "/tatos/data.secret.nix");
istalData = import (hostsPath + "/istal/data.secret.nix"); amstelData = import (hostsPath + "/amstel/data.secret.nix");
inherit (istalData.wireguard) port; inherit (amstelData.wireguard) port;
in in
{ {
boot.kernel.sysctl."net.ipv4.ip_forward" = 1; boot.kernel.sysctl."net.ipv4.ip_forward" = 1;

View file

@ -33,14 +33,14 @@ in
]; ];
}; };
istal = { amstel = {
system = x86_64-linux; system = x86_64-linux;
extraModules = [ extraModules = [
../modules/vps.nix ../modules/vps.nix
]; ];
targetHost = (import ./istal/data.secret.nix).addr; targetHost = (import ./amstel/data.secret.nix).addr;
}; };
tatos = { tatos = {

Binary file not shown.

Binary file not shown.

View file

@ -34,7 +34,7 @@ in
{ {
targets = [ targets = [
"tatos:${toString nodeExporterPort}" "tatos:${toString nodeExporterPort}"
"istal:${toString nodeExporterPort}" "amstel:${toString nodeExporterPort}"
]; ];
} }
]; ];

View file

@ -3,7 +3,7 @@
# Source: https://habr.com/ru/companies/xakep/articles/699000/ # Source: https://habr.com/ru/companies/xakep/articles/699000/
let let
istalData = import (hostsPath + "/istal/data.secret.nix"); amstelData = import (hostsPath + "/amstel/data.secret.nix");
tatosData = import (hostsPath + "/tatos/data.secret.nix"); tatosData = import (hostsPath + "/tatos/data.secret.nix");
port = tatosData.wireguard.port; port = tatosData.wireguard.port;
@ -67,9 +67,9 @@ in
privateKeyFile = config.age.secrets.wireguard-tatos-private.path; privateKeyFile = config.age.secrets.wireguard-tatos-private.path;
peers = [ peers = [
# Istal # Amstel
{ {
publicKey = istalData.wireguard.publicKey; publicKey = amstelData.wireguard.publicKey;
allowedIPs = [ "10.20.30.2/32" "0.0.0.0/0" ]; allowedIPs = [ "10.20.30.2/32" "0.0.0.0/0" ];
} }
# Home # Home

Binary file not shown.

Binary file not shown.

Binary file not shown.

Binary file not shown.