pim/nixos-configs
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity

Remove Jefke

Browse source
This commit is contained in:
Pim Kunis 2025-07-05 18:01:11 +02:00
parent 8ca63e3d70
commit 000f4dc1b8
9 changed files with 3 additions and 3204 deletions
Download patch file Download diff file Expand all files Collapse all files

9
.sops.yaml
View file

@ -7,7 +7,6 @@ keys:
- &warwick_root age1th8rdw4fs3vmgy9gzc0k9xy88tddjj4vasepckfx9h4nlzsg3q3q4cjgwu
- &niels age159whjxeyw94xmkkephmtlur8e85xd9d5vnvkwkcayfv7el0neqfq863yga
- &atlas_root age1unkshctcpucc298kmw9a0qzvtjzgdnjytrxr5p750dv0z95feymqpn68qf
- &jefke_root age1upnqu4rpxppdw9zmqu8x3rnaqq2r6m82y25zvry5cec63vjsd9gqtl9e02
- &lewis_root age108fn93z2c55g9dm9cv5v4w47pykf3khz7e3dmnpv5dhchwnaau0qs20stq
- &roeland_root age15qrzsk9t7uyuuy7m0xt3qzk3cmcsegt5wfe5zew4d8najwjnm30sfjc3pk
@ -48,7 +47,6 @@ creation_rules:
- age:
- *warwick_root
- *atlas_root
- *jefke_root
- *lewis_root
- *roeland_root
- *laptop_pim
@ -64,18 +62,11 @@ creation_rules:
key_groups:
- age:
- *atlas_root
- *jefke_root
- *lewis_root
- *roeland_root
- *laptop_pim
- *laptop_root
- *niels
- path_regex: secrets/jefke/colmena.yaml
key_groups:
- age:
- *laptop_pim
- *laptop_root
- *niels
- path_regex: secrets/lewis/colmena.yaml
key_groups:
- age:

2
README.md
View file

@ -8,9 +8,9 @@ Currently managed systems:
- **gamepc**: My gaming PC running Cosmic
- **warwick**: A Raspberry Pi 4 Model B, which mostly does some monitoring
- **atlas**: A Gigabyte Brix, one of my Kubernetes nodes
- **jefke**: A Gigabyte Brix, one of my Kubernetes nodes
- **lewis**: A Gigabyte Brix, one of my Kubernetes nodes. Additionally, contains
my media collection and does backups.
- **roeland**: A Minisforum UN100P, one of my Kubernetes nodes
## Deployment

7
colmena.nix
View file

@ -43,13 +43,6 @@ inputs @ {
];
};
jefke = {
imports = [
(import ./machines).jefke.nixosModule
./nixos
];
};
lewis = {
imports = [
(import ./machines).lewis.nixosModule

2
machines/atlas/configuration.nix
View file

@ -3,7 +3,7 @@
facter.reportPath = ./facter.json;
system.stateVersion = "23.05";
users.users.root.openssh.authorizedKeys.keys = config.pim.ssh.keys.pim ++ config.pim.ssh.keys.niels;
pim.k3s.serverAddr = "https://jefke.dmz:6443";
pim.k3s.serverAddr = "https://lewis.dmz:6443";
pim.backups.borgBackups = {
freshrss = {

5
machines/default.nix
View file

@ -19,11 +19,6 @@
nixosModule = import ./atlas/configuration.nix;
};
jefke = {
system = "x86_64-linux";
nixosModule = import ./jefke/configuration.nix;
};
lewis = {
system = "x86_64-linux";
nixosModule = import ./lewis/configuration.nix;

14
machines/jefke/configuration.nix
View file

@ -1,14 +0,0 @@
{config, ...}: {
config = {
pim.k3s.clusterInit = true;
facter.reportPath = ./facter.json;
system.stateVersion = "23.05";
users.users.root.openssh.authorizedKeys.keys = config.pim.ssh.keys.pim ++ config.pim.ssh.keys.niels;
deployment = {
targetHost = "jefke";
targetUser = "root";
tags = ["server" "kubernetes"];
};
};
}

3126
machines/jefke/facter.json
View file

File diff suppressed because it is too large Load diff

2
machines/lewis/configuration.nix
View file

@ -19,7 +19,7 @@
};
pim = {
k3s.serverAddr = "https://jefke.dmz:6443";
k3s.serverAddr = "https://atlas.dmz:6443";
backups.borgBackups = {
bazarr = {

40
secrets/jefke/colmena.yaml
View file

@ -1,40 +0,0 @@
sops_nix_keys:
root: ENC[AES256_GCM,data:BvaIcGQhrYyq+2OA4r1n8Jg5NS6RZXFarzcOGAlRMpYZSJkP3x4difJgorSGEqufRxKtm2aboLWmyTSso1EXxcICb0B+RRLXIJc=,iv:eLPkpCnS7qr8/nu/xKU1qPx9BIMrWUNtqbeDeeNohJw=,tag:4EljW04w9qM4xx2xHzVzxA==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age189laethzry4ylnd790dmpuc4xjjuwqxruc76caj3ceqhqug4g9qs0upuvw
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIenFvSVdyZ3kxSXMwdnha
MTNyT2RUTTh3OHkrSFpzYkhmSW81aEx6MURJClpoQVNWTXI3d0F0aEgwSjJJZTVK
aEZFSFJ1OXRsUjVvM0dWZFlwcEYyYlEKLS0tIEgyUHU5RkdldUUrNnhZTHFQaG0w
TkFXcGNURFo0d1U1UXZ5a2pwMHRtMmsKODDUjZ+PdbmTMYKfmHNqG2t7FG6ItdRA
A+usHM6Y/fwwN1j4+Uszcy69874XhVMOFXkcODmf/12RRpHNuI2W/g==
-----END AGE ENCRYPTED FILE-----
- recipient: age1w99m9klvc7m5qtmtmu3l0jx8ksdzp5c4p9rkvh5fdullfc6afemqv5py2q
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOSjY1WXMwcHhmY0xFMVFx
WFhiUmN1VGh1NGIyQ0ViRDh1ME1nVStTYVJzCm1wMHhHcWhNdXlENGlNVnJnbmND
MlB4T3NvRDJhRzFTU28wUDdKY3c5NkUKLS0tIHh6VUxqRUxWYlZ4eWtQby9DRVZp
UjdxZGF6dEIzQXR0eGNiQUh4bjZjSVkKZfMdF9BuvVQQbKloZ57WJXYzpUFfwB/5
Hsdr5DySNaObp/gkddAIB6y79ogx/pl8jV58/ptYKEVk4rq+ga5NJg==
-----END AGE ENCRYPTED FILE-----
- recipient: age159whjxeyw94xmkkephmtlur8e85xd9d5vnvkwkcayfv7el0neqfq863yga
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYMHRrejBrcU55bHAvd0tL
ajNkT0N3SmcyaVZEbXB5ZXpRbHk5cVF2Y0N3CitBa2x5N1FRNDg2SzlJKzhjeXBF
SXh3cWxiZnlINmtnY2hrb2lVOG5LSEkKLS0tIGhEREZnWHRnSUF5bjlmNHB1ZDZt
SW1jaG02MEZzTVV6OHQrWDNkcG1Oc3MK63Z6TyYvNus/+25GaSVDCNFajfdKDCtb
zgMKIpx9BsJH1NHfx711MwQVD1r5Vx0Tuwg7j6A6UdGOf2GdIhNiaA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-12-01T14:09:02Z"
mac: ENC[AES256_GCM,data:gO7uviWsVA28EmhJuc7M8/lrRdZPfsXsyCWHJEt6m5EofIk96Il0GAbcI5VNmbIPCjt5Ihlm6MFp7MHo0+6AnOseW53wgZy4jMdQ9JmdgL6Mw8kuqrxublOZD56TqmRDYdMZo5IYxgBZcRFQm7UfjEgAjp4cradcAv/vhbQNN7k=,iv:hcCJLD8zdLPQ2qcvknsJ7eENcjR0RNZbI9iIAqaMFZ0=,tag:AYROyHfhcE0dqfIMVkFM3w==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.9.1