feat(nixosConfigurations): add turn-infra-holochain-org

holochain · Mar 15, 2024 · 5d9d7d6 · 5d9d7d6
1 parent dfc7f32
commit 5d9d7d6
Show file tree

Hide file tree

Showing 4 changed files with 111 additions and 0 deletions.
diff --git a/modules/flake-parts/nixosConfigurations.dweb-reverse-tls-proxy/configuration.nix b/modules/flake-parts/nixosConfigurations.dweb-reverse-tls-proxy/configuration.nix
@@ -152,6 +152,7 @@ in {
 
   ### BIND and ACME
 
+  # FIXME: changes to the bind zone require a manual `systemctl restart bind`
   system.activationScripts.bind-zones.text = ''
     mkdir -p /etc/bind/zones
     chown named:named /etc/bind/zones
@@ -186,6 +187,8 @@ in {
       amsterdam2023.events.${fqdn2domain}.     A       10.1.3.187
 
       sj-bm-hostkey0.dev.${fqdn2domain}.       A       185.130.224.33
+
+      turn.${fqdn2domain}.                     A       ${self.nixosConfigurations.turn-infra-holochain-org.config.hostName}
     '';
   };
 

diff --git a/modules/flake-parts/nixosConfigurations.turn-infra-holochain-org/README.md b/modules/flake-parts/nixosConfigurations.turn-infra-holochain-org/README.md
@@ -0,0 +1,5 @@
+# Installation
+
+```
+nix run github:numtide/nixos-anywhere -- --flake .\#nixosConfigurations.turn-infra-holochain-org [email protected]
+```
diff --git a/modules/flake-parts/nixosConfigurations.turn-infra-holochain-org/configuration.nix b/modules/flake-parts/nixosConfigurations.turn-infra-holochain-org/configuration.nix
@@ -0,0 +1,90 @@
+{
+  config,
+  lib,
+  inputs,
+  self,
+  pkgs,
+  ...
+}: let
+  ipv4 = "37.27.24.128";
+  ipv6Prefix = "2a01:4f9:c012:b61f";
+  ipv6PrefixLength = "64";
+  fqdn2domain = "infra.holochain.org";
+in {
+  imports = [
+    inputs.disko.nixosModules.disko
+    inputs.srvos.nixosModules.server
+    inputs.srvos.nixosModules.mixins-terminfo
+    inputs.srvos.nixosModules.hardware-hetzner-cloud
+
+    inputs.sops-nix.nixosModules.sops
+
+    self.nixosModules.holo-users
+    ../../nixos/shared.nix
+    ../../nixos/shared-nix-settings.nix
+  ];
+
+  networking.hostName = "turn-infra-holochain-org"; # Define your hostname.
+
+  hostName = ipv4;
+
+  nix.settings.max-jobs = 8;
+
+  nix.settings.substituters = [
+    "https://holochain-ci.cachix.org"
+  ];
+
+  nix.settings.trusted-public-keys = [
+    "holochain-ci.cachix.org-1:5IUSkZc0aoRS53rfkvH9Kid40NpyjwCMCzwRTXy+QN8="
+  ];
+
+  boot.loader.grub = {
+    efiSupport = false;
+    device = "/dev/sda";
+  };
+  # boot.loader.systemd-boot.enable = true;
+  # boot.loader.efi.canTouchEfiVariables = true;
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+
+  systemd.network.networks."10-uplink".networkConfig.Address = "${ipv6Prefix}::1/${ipv6PrefixLength}";
+
+  disko.devices.disk.sda = {
+    device = "/dev/sda";
+    type = "disk";
+    content = {
+      type = "table";
+      format = "gpt";
+      partitions = [
+        {
+          name = "boot";
+          start = "0";
+          end = "1M";
+          part-type = "primary";
+          flags = ["bios_grub"];
+        }
+        {
+          name = "root";
+          start = "1M";
+          end = "100%";
+          part-type = "primary";
+          bootable = true;
+          content = {
+            type = "btrfs";
+            extraArgs = ["-f"]; # Override existing partition
+            subvolumes = {
+              # Subvolume name is different from mountpoint
+              "/rootfs" = {
+                mountpoint = "/";
+              };
+              "/nix" = {
+                mountOptions = ["noatime"];
+              };
+            };
+          };
+        }
+      ];
+    };
+  };
+
+  system.stateVersion = "23.05";
+}
diff --git a/modules/flake-parts/nixosConfigurations.turn-infra-holochain-org/default.nix b/modules/flake-parts/nixosConfigurations.turn-infra-holochain-org/default.nix
@@ -0,0 +1,13 @@
+{
+  config,
+  self,
+  lib,
+  inputs,
+  ...
+}: {
+  flake.nixosConfigurations.turn-infra-holochain-org = inputs.nixpkgs.lib.nixosSystem {
+    modules = [./configuration.nix];
+    system = "x86_64-linux";
+    specialArgs = self.specialArgs;
+  };
+}