Infrastructure as Code for our home servers
|
|
||
|---|---|---|
| machines | ||
| modules | ||
| secrets | ||
| .envrc | ||
| .gitignore | ||
| bootstrap.sh | ||
| configuration.nix | ||
| flake.lock | ||
| flake.nix | ||
| nftables.conf | ||
| postgresql_server.crt | ||
| README.md | ||
nixos-servers
Nix definitions to configure our physical servers. Currently, only one physical server (named jefke) is implemented but more are planned!
Prerequisites
- Install the Nix package manager or NixOS (link)
- Enable flake and nix commands (link)
- Install Direnv (link)
- Allow direnv for this repository:
direnv allow
Bootstrapping
We bootstrap our physical server using nixos-anywhere. This reformats the hard disk of the server and installs a fresh NixOS. Additionally, it deploys an age identity, which is later used for decrypting secrets.
⚠️ This will wipe your server completely ⚠️
- Make sure your have a Secret service running (such as Keepassxc) that provides the age identity.
- Ensure you have root SSH access to the server.
- Run nixos-anywhere:
./bootstrap.sh <servername>
Deployment
Deployment can simply be done as follows: deploy