forked from Fediversity/Fediversity
142 lines
3.4 KiB
Nix
142 lines
3.4 KiB
Nix
{ inputs, self, ... }:
|
|
|
|
let
|
|
vmIdTo03d =
|
|
id:
|
|
let
|
|
sid = toString id;
|
|
in
|
|
if id >= 0 && id <= 9 then
|
|
"00${sid}"
|
|
else if id >= 10 && id <= 99 then
|
|
"0${sid}"
|
|
else
|
|
sid;
|
|
|
|
allVmIds = # 100 -- 255
|
|
let
|
|
allVmIdsFrom = x: if x > 255 then [ ] else [ x ] ++ allVmIdsFrom (x + 1);
|
|
in
|
|
allVmIdsFrom 100;
|
|
|
|
makeInstaller = import ./makeInstaller.nix;
|
|
|
|
in
|
|
{
|
|
flake.nixosConfigurations.provisioning =
|
|
let
|
|
inherit (builtins) map listToAttrs;
|
|
makeProvisioningConfiguration =
|
|
vmid:
|
|
inputs.nixpkgs.lib.nixosSystem {
|
|
modules = [
|
|
{ procolix.vmid = vmid; }
|
|
./procolixVm.nix
|
|
inputs.disko.nixosModules.default
|
|
];
|
|
};
|
|
in
|
|
listToAttrs (
|
|
map (vmid: {
|
|
name = "fedi${vmIdTo03d vmid}";
|
|
value = makeProvisioningConfiguration vmid;
|
|
}) allVmIds
|
|
);
|
|
|
|
flake.isoInstallers.provisioning =
|
|
let
|
|
inherit (builtins) mapAttrs;
|
|
in
|
|
mapAttrs (
|
|
vmname:
|
|
makeInstaller {
|
|
inherit (inputs) nixpkgs;
|
|
hostKeys = {
|
|
rsa = {
|
|
private = ./hostKeys/${vmname}/ssh_host_rsa_key;
|
|
public = ./hostKeys/${vmname}/ssh_host_rsa_key.pub;
|
|
};
|
|
ed25519 = {
|
|
private = ./hostKeys/${vmname}/ssh_host_ed25519_key;
|
|
public = ./hostKeys/${vmname}/ssh_host_ed25519_key.pub;
|
|
};
|
|
};
|
|
}
|
|
) self.nixosConfigurations.provisioning;
|
|
|
|
nixops4Deployments.default =
|
|
{ providers, ... }:
|
|
|
|
let
|
|
inherit (builtins) readFile;
|
|
|
|
makeProcolixVmResource = vmid: vmconfig: {
|
|
type = providers.local.exec;
|
|
imports = [ inputs.nixops4-nixos.modules.nixops4Resource.nixos ];
|
|
ssh.opts = "";
|
|
ssh.host = "95.215.187.${vmIdTo03d vmid}";
|
|
ssh.hostPublicKey = readFile ./hostKeys/fedi${vmIdTo03d vmid}/ssh_host_ed25519_key.pub;
|
|
|
|
nixpkgs = inputs.nixpkgs;
|
|
nixos.module = {
|
|
imports = [
|
|
vmconfig
|
|
{ procolix.vmid = vmid; }
|
|
./procolixVm.nix
|
|
inputs.snf.nixosModules.fediversity
|
|
inputs.disko.nixosModules.default
|
|
];
|
|
};
|
|
};
|
|
|
|
in
|
|
{
|
|
providers.local = inputs.nixops4-nixos.modules.nixops4Provider.local;
|
|
|
|
resources = {
|
|
fedi100 = makeProcolixVmResource 100 { };
|
|
|
|
fedi101 = makeProcolixVmResource 101 {
|
|
fediversity = {
|
|
enable = true;
|
|
domain = "fedi101.abundos.eu";
|
|
pixelfed.enable = true;
|
|
};
|
|
};
|
|
|
|
fedi102 = makeProcolixVmResource 102 {
|
|
fediversity = {
|
|
enable = true;
|
|
domain = "fedi102.abundos.eu";
|
|
mastodon.enable = true;
|
|
|
|
temp.cores = 1; # FIXME: should come from NixOps4 eventually
|
|
};
|
|
};
|
|
|
|
fedi103 = makeProcolixVmResource 103 (
|
|
{ pkgs, ... }:
|
|
{
|
|
fediversity = {
|
|
enable = true;
|
|
domain = "fedi103.abundos.eu";
|
|
peertube.enable = true;
|
|
|
|
temp.peertubeSecretsFile = pkgs.writeText "secret" ''
|
|
574e093907d1157ac0f8e760a6deb1035402003af5763135bae9cbd6abe32b24
|
|
'';
|
|
};
|
|
}
|
|
);
|
|
|
|
fedi120 = makeProcolixVmResource 120 {
|
|
fediversity = {
|
|
enable = true;
|
|
domain = "fedi120.abundos.eu";
|
|
pixelfed.enable = true;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|