mlaga97/mlaga97-nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Initial redoubt in-situ fixes

Browse source
This commit is contained in:
Lauren Lagarde 2025-08-10 13:18:25 -05:00
parent 915cd1a8cb
commit 1c52bd6f99
7 changed files with 91 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

10
systems/redoubt/configuration.nix
View file

@ -1,4 +1,4 @@
{ ... }: {
{ lib, ... }: {
imports = [
# Core Features
../../nixos/features/base.nix
@ -31,6 +31,8 @@
##############################################################################
# Services
services.smartd.enable = lib.mkForce false;
virtualisation.oci-containers.backend = "docker";
virtualisation.oci-containers.containers = {
dozzle = {
@ -53,8 +55,8 @@
##############################################################################
# Tinc
sops.secrets."dotspace/fortress/keys/tinc/rsa_key.priv" = { sopsFile = ./secrets.yaml; };
sops.secrets."dotspace/fortress/keys/tinc/ed25519_key.priv" = { sopsFile = ./secrets.yaml; };
sops.secrets."dotspace/redoubt/keys/tinc/rsa_key.priv" = { sopsFile = ./secrets.yaml; };
sops.secrets."dotspace/redoubt/keys/tinc/ed25519_key.priv" = { sopsFile = ./secrets.yaml; };
systemd.network.networks."90-tinc" = {
matchConfig.Name = "tinc.dotspace";
@ -64,7 +66,7 @@
services.tinc.networks.dotspace = {
name = "fortress";
ed25519PrivateKeyFile = "/run/secrets/dotspace/fortress/keys/tinc/ed25519_key.priv";
ed25519PrivateKeyFile = "/run/secrets/dotspace/redoubt/keys/tinc/ed25519_key.priv";
chroot = false;
settings.ConnectTo = [ "stronghold" ];