albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

test

Browse source
This commit is contained in:
albert 2024-03-25 12:41:07 +09:00
parent 91bda7ab1c
commit faa4f9a41e
No known key found for this signature in database
GPG key ID: 64F6C4EB46C4543A
3 changed files with 17 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
nixos/containers/default.nix
View file

@ -8,17 +8,18 @@
../common/services/promtail.nix
../common/services/telegraf.nix
../common/services/tailscale.nix
../common/services/openssh.nix
];
# Generic Tailscale configs are in /nixos/common/services/tailscale.nix
# Set up the secrets file:
# sops.secrets."tailscale_key" = {
# owner = "root";
# sopsFile = ../../secrets/containers/${hostname}.yaml;
# restartUnits = [
# "tailscaled.service"
# "tailscaled-autoconnect.service"
# ];
# };
# services.tailscale.authKeyFile = "/run/secrets/tailscale_key";
sops.secrets."tailscale_key" = {
owner = "root";
sopsFile = ../../secrets/containers/${hostname}.yaml;
restartUnits = [
"tailscaled.service"
"tailscaled-autoconnect.service"
];
};
services.tailscale.authKeyFile = "/run/secrets/tailscale_key";
networking.hostName = "${hostname}";
}

2
nixos/containers/mounts.nix
View file

@ -1,7 +1,7 @@
{
"/etc/ssh" = {
hostPath = "/etc/ssh";
mountPath = "/etc/ssh";
mountPoint = "/etc/ssh";
isReadOnly = true;
};
}

2
nixos/containers/rdesktop/mounts.nix
View file

@ -1,5 +1,7 @@
{
"/etc/nixos/git" = {
hostPath = "/etc/nixos/git";
mountPoint = "/etc/nixos/git";
isReadOnly = false;
};
}