about summary refs log tree commit diff
path: root/users/flokli/archivist/default.nix
diff options
context:
space:
mode:
authorFlorian Klink <flokli@flokli.de>2023-11-23T19·10+0200
committerflokli <flokli@flokli.de>2023-11-25T16·17+0000
commit5161c3c072616fb6b634f30fa8d9490b260d8da1 (patch)
tree4292e2387fae5c5f04382091b73cfdb474305d50 /users/flokli/archivist/default.nix
parente65fa82d74ff2aa86e30cec94f577114d2879dab (diff)
feat(users/flokli/archivist): init r/7066
This introduces a new structure, as activities are moved to a separate
AWS Account for reasons (tm).

Change-Id: Ic310eca2dc0d4ee81bae8944238b26910067336a
Reviewed-on: https://cl.tvl.fyi/c/depot/+/10124
Tested-by: BuildkiteCI
Reviewed-by: flokli <flokli@flokli.de>
Diffstat (limited to 'users/flokli/archivist/default.nix')
-rw-r--r--users/flokli/archivist/default.nix28
1 files changed, 28 insertions, 0 deletions
diff --git a/users/flokli/archivist/default.nix b/users/flokli/archivist/default.nix
new file mode 100644
index 000000000000..ef49c46db2f6
--- /dev/null
+++ b/users/flokli/archivist/default.nix
@@ -0,0 +1,28 @@
+{ depot
+, pkgs
+, ...
+}:
+depot.nix.readTree.drvTargets {
+  shell = pkgs.mkShell {
+    name = "archivist-shell";
+    packages = with pkgs; [ awscli2 ];
+
+    AWS_PROFILE = "archivist";
+    AWS_CONFIG_FILE = pkgs.writeText "aws-config" ''
+      [sso-session nixos]
+      sso_region = eu-north-1
+      sso_start_url = https://nixos.awsapps.com/start
+      sso_registration_scopes = sso:account:access
+
+      [profile "archivist"]
+      sso_session = nixos
+      sso_account_id = 286553126452
+      sso_role_name = AWSAdministratorAccess
+
+      [profile "archeologist"]
+      sso_session = nixos
+      sso_account_id = 080433136561
+      sso_role_name = archeologist
+    '';
+  };
+}