summaryrefslogtreecommitdiff
path: root/hosts/atlas/default.nix
diff options
context:
space:
mode:
authorseth <[email protected]>2023-05-05 02:44:22 -0400
committerseth <[email protected]>2023-05-05 02:44:22 -0400
commit3051d75c5ebe4284a6d50f1ea2b3a2f39e01a38d (patch)
tree913db0783129b37a76a538cf9743afc2365dbee8 /hosts/atlas/default.nix
parent4f1cc719a12ed27b23f2830489db3845c36c88ed (diff)
flake: restructure a lot
Diffstat (limited to 'hosts/atlas/default.nix')
-rw-r--r--hosts/atlas/default.nix46
1 files changed, 8 insertions, 38 deletions
diff --git a/hosts/atlas/default.nix b/hosts/atlas/default.nix
index 69390a5..d8e4077 100644
--- a/hosts/atlas/default.nix
+++ b/hosts/atlas/default.nix
@@ -1,15 +1,19 @@
{
config,
- hercules-ci-agent,
pkgs,
...
}: {
imports = [
./hardware-configuration.nix
- hercules-ci-agent.nixosModules.agent-service
];
- getchoo.server.enable = true;
+ _module.args.nixinate = {
+ host = "164.152.17.183";
+ sshUser = "root";
+ buildOn = "remote";
+ substituteOnTarget = true;
+ hermetic = false;
+ };
boot = {
cleanTmpDir = true;
@@ -17,41 +21,7 @@
loader.efi.canTouchEfiVariables = true;
};
- environment.systemPackages = [
- hercules-ci-agent.packages.aarch64-linux.hercules-ci-cli
- ];
-
networking.hostName = "atlas";
- nix = {
- settings = {
- trusted-users = ["atlas" "nix-ssh"];
- trusted-substituters = [
- "https://getchoo.cachix.org"
- "https://nix-community.cachix.org"
- "https://hercules-ci.cachix.org"
- "https://wurzelpfropf.cachix.org"
- ];
-
- trusted-public-keys = [
- "getchoo.cachix.org-1:ftdbAUJVNaFonM0obRGgR5+nUmdLMM+AOvDOSx0z5tE="
- "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
- "hercules-ci.cachix.org-1:ZZeDl9Va+xe9j+KqdzoBZMFJHVQ42Uu/c/1/KMC5Lw0="
- "wurzelpfropf.cachix.org-1:ilZwK5a6wJqVr7Fyrzp4blIEkGK+LJT0QrpWr1qBNq0="
- ];
- };
- };
-
- services = {
- hercules-ci-agent = {
- enable = true;
- settings = {
- binaryCachesPath = config.age.secrets.binaryCache.path;
- clusterJoinTokenPath = config.age.secrets.clusterToken.path;
- secretsJsonPath = config.age.secrets.secretsJson.path;
- };
- };
- };
-
system.stateVersion = "22.11";
users.users = let
@@ -64,7 +34,7 @@
extraGroups = ["wheel"];
isNormalUser = true;
shell = pkgs.bash;
- passwordFile = config.age.secrets.atlasPassword.path;
+ passwordFile = config.age.secrets.userPassword.path;
inherit openssh;
};
};