main
nix 56 lines 1.25 KB
Raw
1 { inputs, ... }:
2 {
3 imports = [
4 inputs.srvos.nixosModules.hardware-hetzner-cloud-arm
5 ../../modules/ofborg/builder.nix
6 ../../modules/hydra/builder.nix
7 # ../../modules/ofborg/evaluator.nix
8 ./hardware.nix
9 ];
10
11 # Bootloader.
12 boot.loader.systemd-boot.enable = true;
13
14 networking = {
15 hostName = "ofborg-eval04";
16 domain = "ofborg.org";
17 hostId = "007f0204";
18 };
19
20 disko.devices = import ./disko.nix;
21
22 systemd.network.networks."10-uplink" = {
23 matchConfig.MACAddress = "96:00:03:f4:25:eb";
24 address = [
25 "95.217.18.12/32"
26 "2a01:4f9:c012:273b::1/64"
27 ];
28 routes = [
29 { Gateway = "fe80::1"; }
30 {
31 Gateway = "172.31.1.1";
32 GatewayOnLink = true;
33 }
34 ];
35 linkConfig.RequiredForOnline = "routable";
36 };
37
38 zramSwap = {
39 enable = true;
40 memoryPercent = 100;
41 };
42
43 system.stateVersion = "24.11"; # Did you read the comment?
44
45 sops.secrets = {
46 "ofborg/builder-rabbitmq-password" = {
47 owner = "ofborg-builder";
48 restartUnits = [ "ofborg-builder.service" ];
49 sopsFile = ../../secrets/ofborg.eval04.ofborg.org.yml;
50 };
51 "harmonia/secret" = {
52 restartUnits = [ "harmonia.service" ];
53 sopsFile = ../../secrets/ofborg.eval04.ofborg.org.yml;
54 };
55 };
56 }