min
/
infra
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
infra/nixos/hosts
History
minish 9bd1f0cfa1
Initial deployment of Kubernetes control plane 		2024-11-02 02:56:58 -04:00
..
eidola htop -> btop 2024-11-02 01:50:53 -04:00
silver Initial deployment of Kubernetes control plane 2024-11-02 02:56:58 -04:00
README.md Doc revision 2024-10-13 16:28:40 -04:00
default.nix Prepare for refactors 2024-10-17 18:32:14 -04:00

README.md

NixOS Hosts

This directory contains configs for all NixOS hosts.

Installing a new machine

✩ = on target machine, everything else is on your own device

  1. ✩ If SB is desired, set a UEFI password and set Secure Boot to "Setup Mode". (This may be done by clearing Secure Boot keys on some boards)
  2. ✩ Boot the NixOS remote deploy image
  3. Copy an appropriate config as a base
  4. mkdir tempkeys
../scripts/make_base_keys.sh
cd ..
  5. Create a secrets/NAME_OF_HOST.yaml file.
  6. Add the AGE key from make_base_keys.sh into .sops.yaml. Add necessary keys to secrets/NAME_OF_HOST.yaml. Make sure that the host's secrets.nix uses the proper YAML secrets file.
  7. Ensure disk partitioning is correct. Make sure to change the target disk in disk-config.nix.
  8. Generate secure passwords, find their hashes with mkpasswd -m sha-512, and put them into the root-pw and user-pw properties, again ensuring there's no EOLs
  9. Customize the config however you want
  10. ./scripts/install.sh -c NAME_OF_HOST -k tempkeys root@IP_OF_HOST
  11. Delete the tempkeys folder if you're done with it
  12. That is about it

Deploying changes remotely

  1. Make your changes
  2. nix flake check
  3. deploy, or if you're making breaking network changes where it's necessary, deploy --magic-rollback false
  4. Commit to Git if everything works