remove op5p
This commit is contained in:
@@ -1,43 +0,0 @@
|
||||
{...}: {
|
||||
imports = [
|
||||
../../modules
|
||||
../../shared/platform/orangepi5plus.nix
|
||||
];
|
||||
|
||||
mj = {
|
||||
stateVersion = "23.11";
|
||||
timeZone = "UTC";
|
||||
username = "nixos";
|
||||
|
||||
base.users = {
|
||||
enable = true;
|
||||
user.initialHashedPassword = "";
|
||||
root.initialHashedPassword = "";
|
||||
};
|
||||
};
|
||||
|
||||
services = {
|
||||
pcscd.enable = true;
|
||||
};
|
||||
|
||||
boot.supportedFilesystems = ["btrfs" "bcachefs"];
|
||||
|
||||
fileSystems = {
|
||||
"/" = {
|
||||
device = "/dev/disk/by-label/nixos";
|
||||
fsType = "ext4";
|
||||
options = ["noatime"];
|
||||
};
|
||||
};
|
||||
|
||||
security.sudo = {
|
||||
enable = true;
|
||||
wheelNeedsPassword = false;
|
||||
};
|
||||
|
||||
networking = {
|
||||
hostName = "op5p";
|
||||
domain = "jakstys.lt";
|
||||
firewall.allowedTCPPorts = [22];
|
||||
};
|
||||
}
|
||||
@@ -214,10 +214,6 @@
|
||||
derivationTarget = ".#mtworx";
|
||||
pingTarget = myData.hosts."mtworx.motiejus.jakst".jakstIP;
|
||||
}
|
||||
{
|
||||
derivationTarget = ".#vno1-op5p";
|
||||
pingTarget = myData.hosts."vno1-op5p.servers.jakst".jakstIP;
|
||||
}
|
||||
{
|
||||
derivationTarget = ".#vno3-rp3b";
|
||||
pingTarget = myData.hosts."vno3-rp3b.servers.jakst".jakstIP;
|
||||
@@ -499,10 +495,6 @@
|
||||
job_name = "vno3-rp3b.servers.jakst";
|
||||
static_configs = [{targets = ["${myData.hosts."vno3-rp3b.servers.jakst".jakstIP}:${port}"];}];
|
||||
}
|
||||
{
|
||||
job_name = "vno1-op5p.servers.jakst";
|
||||
static_configs = [{targets = ["${myData.hosts."vno1-op5p.servers.jakst".jakstIP}:${port}"];}];
|
||||
}
|
||||
{
|
||||
job_name = "fwminex.motiejus.jakst";
|
||||
static_configs = [{targets = ["${myData.hosts."fwminex.motiejus.jakst".jakstIP}:${port}"];}];
|
||||
|
||||
@@ -1,92 +0,0 @@
|
||||
{
|
||||
config,
|
||||
myData,
|
||||
...
|
||||
}: let
|
||||
#nvme = "/dev/disk/by-id/nvme-WDC_PC_SN730_SDBQNTY-256G-1001_19494D801165";
|
||||
nvme = "/dev/nvme0n1";
|
||||
in {
|
||||
imports = [
|
||||
../../modules
|
||||
|
||||
../../modules/profiles/btrfs
|
||||
|
||||
../../shared/platform/orangepi5plus.nix
|
||||
];
|
||||
|
||||
boot = {
|
||||
initrd = {
|
||||
kernelModules = ["usb_storage"];
|
||||
luks.devices = {
|
||||
luksroot = {
|
||||
#device = "${nvme}-part3";
|
||||
device = "${nvme}p3";
|
||||
allowDiscards = true;
|
||||
keyFileOffset = 9728;
|
||||
keyFileSize = 512;
|
||||
keyFile = "/dev/sda";
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
swapDevices = [
|
||||
{
|
||||
device = "${nvme}p2";
|
||||
randomEncryption.enable = true;
|
||||
}
|
||||
];
|
||||
|
||||
fileSystems = {
|
||||
"/" = {
|
||||
device = "/dev/mapper/luksroot";
|
||||
fsType = "btrfs";
|
||||
options = ["noatime" "compress=zstd"];
|
||||
};
|
||||
"/boot" = {
|
||||
device = "${nvme}1";
|
||||
fsType = "ext4";
|
||||
};
|
||||
};
|
||||
|
||||
mj = {
|
||||
stateVersion = "23.11";
|
||||
timeZone = "Europe/Vilnius";
|
||||
username = "motiejus";
|
||||
|
||||
base.users = {
|
||||
enable = true;
|
||||
root.hashedPasswordFile = config.age.secrets.root-passwd-hash.path;
|
||||
user.hashedPasswordFile = config.age.secrets.motiejus-passwd-hash.path;
|
||||
};
|
||||
|
||||
services = {
|
||||
tailscale.enable = true;
|
||||
node_exporter.enable = true;
|
||||
sshguard.enable = true;
|
||||
|
||||
postfix = {
|
||||
enable = true;
|
||||
saslPasswdPath = config.age.secrets.sasl-passwd.path;
|
||||
};
|
||||
|
||||
deployerbot = {
|
||||
follower = {
|
||||
inherit (myData.hosts."vno1-oh2.servers.jakst") publicKey;
|
||||
|
||||
enable = true;
|
||||
sshAllowSubnets = [myData.subnets.tailscale.sshPattern];
|
||||
uidgid = myData.uidgid.updaterbot-deployee;
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
services.pcscd.enable = true;
|
||||
|
||||
networking = {
|
||||
hostName = "vno1-op5p";
|
||||
domain = "jakstys.lt";
|
||||
firewall.allowedTCPPorts = [22];
|
||||
};
|
||||
}
|
||||
Reference in New Issue
Block a user