diff options
author | Aspen Smith <grfn@gws.fyi> | 2024-02-12T03·00-0500 |
---|---|---|
committer | clbot <clbot@tvl.fyi> | 2024-02-14T19·37+0000 |
commit | 82ecd61f5c699cf3af6c4eadf47a1c52b1d696c6 (patch) | |
tree | 429c5e078528000591742ec3211bc768ae913a78 /users/grfn/bbbg/tf.nix | |
parent | 0ba476a4266015f278f18d74094299de74a5a111 (diff) |
chore(users): grfn -> aspen r/7511
Change-Id: I6c6847fac56f0a9a1a2209792e00a3aec5e672b9 Reviewed-on: https://cl.tvl.fyi/c/depot/+/10809 Autosubmit: aspen <root@gws.fyi> Reviewed-by: sterni <sternenseemann@systemli.org> Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi>
Diffstat (limited to 'users/grfn/bbbg/tf.nix')
-rw-r--r-- | users/grfn/bbbg/tf.nix | 96 |
1 files changed, 0 insertions, 96 deletions
diff --git a/users/grfn/bbbg/tf.nix b/users/grfn/bbbg/tf.nix deleted file mode 100644 index d5b19d9ebc88..000000000000 --- a/users/grfn/bbbg/tf.nix +++ /dev/null @@ -1,96 +0,0 @@ -{ depot, ... }: - -let - inherit (depot.users.grfn) - terraform - ; - -in -terraform.workspace "bbbg" -{ - plugins = (p: with p; [ - aws - cloudflare - ]); -} -{ - machine = terraform.nixosMachine { - name = "bbbg"; - instanceType = "t3a.small"; - rootVolumeSizeGb = 250; - extraIngressPorts = [ 80 443 ]; - configuration = { pkgs, lib, config, depot, ... }: { - imports = [ - ./module.nix - "${depot.third_party.agenix.src}/modules/age.nix" - ]; - - services.openssh.enable = true; - - services.nginx = { - enable = true; - recommendedTlsSettings = true; - recommendedOptimisation = true; - recommendedGzipSettings = true; - recommendedProxySettings = true; - }; - - networking.firewall.enable = false; - - programs.zsh.enable = true; - - users.users.grfn = { - isNormalUser = true; - initialPassword = "password"; - extraGroups = [ - "wheel" - "networkmanager" - "audio" - "docker" - ]; - shell = pkgs.zsh; - openssh.authorizedKeys.keys = [ - depot.users.grfn.keys.main - ]; - }; - - security.sudo.extraRules = [{ - groups = [ "wheel" ]; - commands = [{ command = "ALL"; options = [ "NOPASSWD" ]; }]; - }]; - - nix.gc = { - automatic = true; - dates = "weekly"; - options = "--delete-older-than 30d"; - }; - - age.secrets = { - bbbg.file = - depot.users.grfn.secrets."bbbg.age"; - }; - - services.bbbg.enable = true; - services.bbbg.database.enable = true; - services.bbbg.proxy.enable = true; - services.bbbg.domain = "bbbg.gws.fyi"; - - security.acme.defaults.email = "root@gws.fyi"; - security.acme.acceptTerms = true; - }; - }; - - dns = { - data.cloudflare_zone.gws-fyi = { - name = "gws.fyi"; - }; - - resource.cloudflare_record.bbbg = { - zone_id = "\${data.cloudflare_zone.gws-fyi.id}"; - name = "bbbg"; - type = "A"; - value = "\${aws_instance.bbbg_machine.public_ip}"; - proxied = false; - }; - }; -} |