Compare commits

...

3 commits

9 changed files with 41 additions and 31 deletions

View file

@ -1,6 +1,11 @@
{ depot, ... }: { depot, ... }:
{ {
services.fbi = {
nodes.host = [ "VEGAS" ];
nixos.host = ./host.nix;
};
dns.records = let dns.records = let
fbiAddr = [ depot.hours.VEGAS.interfaces.primary.addrPublic ]; fbiAddr = [ depot.hours.VEGAS.interfaces.primary.addrPublic ];
in { in {

View file

@ -1,5 +1,10 @@
{ depot, ... }: { depot, ... }:
{ {
services.reflex = {
nodes.host = [ "VEGAS" ];
nixos.host = ./host.nix;
};
dns.records.reflex.target = [ depot.hours.VEGAS.interfaces.primary.addrPublic ]; dns.records.reflex.target = [ depot.hours.VEGAS.interfaces.primary.addrPublic ];
} }

View file

@ -1,6 +1,11 @@
{ depot, ... }: { depot, ... }:
{ {
services.soda = {
nodes.host = [ "VEGAS" ];
nixos.host = ./host.nix;
};
monitoring.blackbox.targets.soda-machine = { monitoring.blackbox.targets.soda-machine = {
address = "soda.int.${depot.lib.meta.domain}:22"; address = "soda.int.${depot.lib.meta.domain}:22";
module = "sshConnect"; module = "sshConnect";

View file

@ -0,0 +1,26 @@
{ depot, ... }:
{
containers.soda = {
path = depot.nixosConfigurations.soda.config.system.build.toplevel;
privateNetwork = true;
hostBridge = "vmdefault";
localAddress = "${depot.hours.soda.interfaces.primary.addr}/24";
autoStart = true;
bindMounts.sodaDir = {
hostPath = "/srv/storage/www/soda";
mountPoint = "/soda";
isReadOnly = false;
};
};
systemd.services."container@soda".after = [ "libvirtd.service" "sys-devices-virtual-net-vmdefault.device" ];
networking.nat.forwardPorts = [
{
sourcePort = 52222;
destination = "${depot.hours.soda.interfaces.primary.addr}:22";
proto = "tcp";
}
];
}

View file

@ -3,10 +3,6 @@ let
inherit (config.reflection) interfaces; inherit (config.reflection) interfaces;
in in
{ {
imports = [
./port-forward.nix
];
networking.nat = { networking.nat = {
enable = true; enable = true;
externalInterface = interfaces.primary.link; externalInterface = interfaces.primary.link;

View file

@ -1,11 +0,0 @@
{ depot, ... }:
{
networking.nat.forwardPorts = [
{
sourcePort = 52222;
destination = "${depot.hours.soda.interfaces.primary.addr}:22";
proto = "tcp";
}
];
}

View file

@ -18,12 +18,10 @@
./services/backbone-routing ./services/backbone-routing
./services/bitwarden ./services/bitwarden
./services/cdn-shield ./services/cdn-shield
./services/fbi
./services/gitlab ./services/gitlab
./services/jokes ./services/jokes
./services/mail ./services/mail
./services/minecraft ./services/minecraft
./services/reflex
./services/sso ./services/sso
./services/websites ./services/websites
./services/wireguard-server ./services/wireguard-server
@ -90,18 +88,4 @@
system.stateVersion = "21.05"; system.stateVersion = "21.05";
services.openssh.settings.PasswordAuthentication = false; services.openssh.settings.PasswordAuthentication = false;
containers.soda = {
path = depot.nixosConfigurations.soda.config.system.build.toplevel;
privateNetwork = true;
hostBridge = "vmdefault";
localAddress = "${depot.hours.soda.interfaces.primary.addr}/24";
autoStart = true;
bindMounts.sodaDir = {
hostPath = "/srv/storage/www/soda";
mountPoint = "/soda";
isReadOnly = false;
};
};
systemd.services."container@soda".after = [ "libvirtd.service" "sys-devices-virtual-net-vmdefault.device" ];
} }