zfsunlock: use IP addresses + zfsunlock

This commit is contained in:
Motiejus Jakštys 2023-08-22 14:09:41 +03:00
parent 5fde5a9449
commit 407024dfa9
3 changed files with 16 additions and 8 deletions

View File

@ -83,10 +83,12 @@
zfsunlock = { zfsunlock = {
enable = true; enable = true;
targets."vno1-oh2.servers.jakst" = { targets."vno1-oh2.servers.jakst" = let
sshEndpoint = myData.hosts."vno1-oh2.servers.jakst".publicIP; host = myData.hosts."vno1-oh2.servers.jakst";
pingEndpoint = "vno1-oh2.servers.jakst"; in {
remotePubkey = myData.hosts."vno1-oh2.servers.jakst".initrdPubKey; sshEndpoint = host.publicIP;
pingEndpoint = host.jakstIP;
remotePubkey = host.initrdPubKey;
pwFile = config.age.secrets.zfs-passphrase-vno1-oh2.path; pwFile = config.age.secrets.zfs-passphrase-vno1-oh2.path;
startAt = "*-*-* *:00/5:00"; startAt = "*-*-* *:00/5:00";
}; };

View File

@ -114,10 +114,12 @@
zfsunlock = { zfsunlock = {
enable = true; enable = true;
targets."hel1-a.servers.jakst" = { targets."hel1-a.servers.jakst" = let
sshEndpoint = myData.hosts."hel1-a.servers.jakst".publicIP; host = myData.hosts."hel1-a.servers.jakst";
pingEndpoint = "hel1-a.servers.jakst"; in {
remotePubkey = myData.hosts."hel1-a.servers.jakst".initrdPubKey; sshEndpoint = host.publicIP;
pingEndpoint = host.jakstIP;
remotePubkey = host.initrdPubKey;
pwFile = config.age.secrets.zfs-passphrase-hel1-a.path; pwFile = config.age.secrets.zfs-passphrase-hel1-a.path;
startAt = "*-*-* *:00/5:00"; startAt = "*-*-* *:00/5:00";
}; };

View File

@ -79,5 +79,9 @@ in {
} }
) )
config.mj.services.zfsunlock.targets; config.mj.services.zfsunlock.targets;
mj.base.unitstatus.units =
map (name: "zfsunlock-${name}")
(builtins.attrNames config.mj.services.zfsunlock.targets);
}; };
} }