From 40ef417a670eacca3c96a2c5b3e2f3d270ff9b72 Mon Sep 17 00:00:00 2001
From: Max <max@privatevoid.net>
Date: Sat, 20 Jul 2024 22:18:01 +0200
Subject: [PATCH] cluster/services/frangiclave: init trivial WIP

---
 cluster/services/frangiclave/default.nix | 14 ++++++++++++++
 cluster/services/frangiclave/server.nix  |  8 ++++++++
 2 files changed, 22 insertions(+)
 create mode 100644 cluster/services/frangiclave/default.nix
 create mode 100644 cluster/services/frangiclave/server.nix

diff --git a/cluster/services/frangiclave/default.nix b/cluster/services/frangiclave/default.nix
new file mode 100644
index 0000000..9f01461
--- /dev/null
+++ b/cluster/services/frangiclave/default.nix
@@ -0,0 +1,14 @@
+{
+  services.frangiclave = {
+    nodes = {
+      server = [ "VEGAS" "grail" "prophet" ]; # 3 reliable nodes
+      agent = []; # all nodes, for vault-agent, secret templates, etc.
+    };
+    nixos = {
+      server = [
+        ./server.nix
+      ];
+      agent = [];
+    };
+  };
+}
diff --git a/cluster/services/frangiclave/server.nix b/cluster/services/frangiclave/server.nix
new file mode 100644
index 0000000..0c83ab1
--- /dev/null
+++ b/cluster/services/frangiclave/server.nix
@@ -0,0 +1,8 @@
+{ depot, ... }:
+
+{
+  services.vault = {
+    enable = true;
+    package = depot.packages.openbao;
+  };
+}