remove op5p

This commit is contained in:
2024-06-26 22:45:14 +03:00
parent 7b3b356bf5
commit aa4f741840
9 changed files with 1 additions and 15296 deletions

View File

@@ -1,43 +0,0 @@
{...}: {
imports = [
../../modules
../../shared/platform/orangepi5plus.nix
];
mj = {
stateVersion = "23.11";
timeZone = "UTC";
username = "nixos";
base.users = {
enable = true;
user.initialHashedPassword = "";
root.initialHashedPassword = "";
};
};
services = {
pcscd.enable = true;
};
boot.supportedFilesystems = ["btrfs" "bcachefs"];
fileSystems = {
"/" = {
device = "/dev/disk/by-label/nixos";
fsType = "ext4";
options = ["noatime"];
};
};
security.sudo = {
enable = true;
wheelNeedsPassword = false;
};
networking = {
hostName = "op5p";
domain = "jakstys.lt";
firewall.allowedTCPPorts = [22];
};
}

View File

@@ -214,10 +214,6 @@
derivationTarget = ".#mtworx";
pingTarget = myData.hosts."mtworx.motiejus.jakst".jakstIP;
}
{
derivationTarget = ".#vno1-op5p";
pingTarget = myData.hosts."vno1-op5p.servers.jakst".jakstIP;
}
{
derivationTarget = ".#vno3-rp3b";
pingTarget = myData.hosts."vno3-rp3b.servers.jakst".jakstIP;
@@ -499,10 +495,6 @@
job_name = "vno3-rp3b.servers.jakst";
static_configs = [{targets = ["${myData.hosts."vno3-rp3b.servers.jakst".jakstIP}:${port}"];}];
}
{
job_name = "vno1-op5p.servers.jakst";
static_configs = [{targets = ["${myData.hosts."vno1-op5p.servers.jakst".jakstIP}:${port}"];}];
}
{
job_name = "fwminex.motiejus.jakst";
static_configs = [{targets = ["${myData.hosts."fwminex.motiejus.jakst".jakstIP}:${port}"];}];

View File

@@ -1,92 +0,0 @@
{
config,
myData,
...
}: let
#nvme = "/dev/disk/by-id/nvme-WDC_PC_SN730_SDBQNTY-256G-1001_19494D801165";
nvme = "/dev/nvme0n1";
in {
imports = [
../../modules
../../modules/profiles/btrfs
../../shared/platform/orangepi5plus.nix
];
boot = {
initrd = {
kernelModules = ["usb_storage"];
luks.devices = {
luksroot = {
#device = "${nvme}-part3";
device = "${nvme}p3";
allowDiscards = true;
keyFileOffset = 9728;
keyFileSize = 512;
keyFile = "/dev/sda";
};
};
};
};
swapDevices = [
{
device = "${nvme}p2";
randomEncryption.enable = true;
}
];
fileSystems = {
"/" = {
device = "/dev/mapper/luksroot";
fsType = "btrfs";
options = ["noatime" "compress=zstd"];
};
"/boot" = {
device = "${nvme}1";
fsType = "ext4";
};
};
mj = {
stateVersion = "23.11";
timeZone = "Europe/Vilnius";
username = "motiejus";
base.users = {
enable = true;
root.hashedPasswordFile = config.age.secrets.root-passwd-hash.path;
user.hashedPasswordFile = config.age.secrets.motiejus-passwd-hash.path;
};
services = {
tailscale.enable = true;
node_exporter.enable = true;
sshguard.enable = true;
postfix = {
enable = true;
saslPasswdPath = config.age.secrets.sasl-passwd.path;
};
deployerbot = {
follower = {
inherit (myData.hosts."vno1-oh2.servers.jakst") publicKey;
enable = true;
sshAllowSubnets = [myData.subnets.tailscale.sshPattern];
uidgid = myData.uidgid.updaterbot-deployee;
};
};
};
};
services.pcscd.enable = true;
networking = {
hostName = "vno1-op5p";
domain = "jakstys.lt";
firewall.allowedTCPPorts = [22];
};
}