chef: delete
Graham Christensen committed
Mar 25, 2020 at 01:01 UTC
27fa1910b1b1547a2af828462c8e7810564fa46a
4 files changed
+1
-91
delft/chef.nix
deleted
-68
@@ -1,68 +0,0 @@
1
-{ config, lib, pkgs, ...}:
2
-
3
-{
4
- imports =
5
- [ ./common.nix
6
- ./datadog.nix
7
- ./fstrim.nix
8
- ];
9
-
10
- deployment.targetEnv = "hetzner";
11
- deployment.hetzner.mainIPv4 = "46.4.67.10";
12
-
13
- services.postgresql = {
14
- enable = true;
15
- package = pkgs.postgresql95;
16
- extraConfig = ''
17
- listen_addresses = '10.254.1.2'
18
-
19
- log_min_duration_statement = 5000
20
- log_duration = off
21
- log_statement = 'none'
22
- max_connections = 250
23
- work_mem = 16MB
24
-
25
- # 25% of memory
26
- shared_buffers = 8GB
27
-
28
- # Checkpoint every 1GB. (default)
29
- # increased after seeing many warninsg about frequent checkpoints
30
- min_wal_size = 128MB
31
- max_wal_size = 1GB
32
-
33
- # We can risk losing some transactions.
34
- synchronous_commit = off
35
-
36
- effective_cache_size = 16GB
37
- '';
38
- # FIXME: don't use 'trust'.
39
- authentication = ''
40
- host hydra all 10.254.1.3/32 trust
41
- host hydra all 10.254.1.9/32 trust
42
- local all root peer map=prometheus
43
- '';
44
-
45
- identMap = ''
46
- prometheus root root
47
- prometheus postgres-exporter root
48
- '';
49
- };
50
-
51
- networking = {
52
- firewall.interfaces.wg0.allowedTCPPorts = [ 5432 ];
53
- firewall.allowPing = true;
54
- firewall.logRefusedConnections = true;
55
- };
56
-
57
- services.prometheus.exporters.postgres = {
58
- enable = true;
59
- dataSourceName = "user=root database=hydra host=/run/postgresql sslmode=disable";
60
- firewallFilter = "-i wg0 -p tcp -m tcp --dport 9187";
61
- openFirewall = true;
62
- };
63
-
64
- fileSystems."/data" =
65
- { device = "/dev/disk/by-label/data";
66
- fsType = "ext4";
67
- };
68
-}
delft/eris.nix
-13
@@ -18,7 +18,6 @@ in {
18
19
networking.extraHosts = ''
20
10.254.1.1 bastion
21
- 10.254.1.2 chef
21
10.254.1.3 ceres
22
23
10.254.1.5 ike
@@ -173,7 +172,6 @@ in {
172
}
173
{
174
targets = [
176
- "chef:9100"
175
"haumea:9100"
176
];
177
labels.role = "database";
@@ -285,17 +283,6 @@ in {
283
}
284
];
285
}
288
- {
289
- job_name = "postgresql";
290
- metrics_path = "/metrics";
291
- static_configs = [
292
- {
293
- targets = [
294
- "10.254.1.2:9187" # chef but stupidly named
295
- ];
296
- }
297
- ];
298
- }
286
{
287
job_name = "haumea-postgresql";
288
metrics_path = "/metrics";
delft/network.nix
-4
@@ -48,10 +48,6 @@ in {
48
wendy = { deployment.targetHost = "wendy.ewi.tudelft.nl"; imports = [ ./wendy.nix ]; };
49
ike = { deployment.targetHost = "ike.ewi.tudelft.nl"; imports = [ ./build-machines-dell-r815.nix ]; };
50
51
- chef = {
52
- imports = [./chef.nix ];
53
- };
54
-
51
eris = import ./eris.nix;
52
53
ceres = {
modules/wireguard.nix
+1
-6
@@ -13,12 +13,7 @@ let
13
publicKey = "nG7I9gegJIynKOZ6tzpvmLdCZ/xScTgRZeFvYLFyil4=";
14
};
15
16
- chef = {
17
- ip = "10.254.1.2";
18
-# endpoint = "hydra.nixos.org";
19
-# port = 51820;
20
- publicKey = "Y/RHgJ7Znh9vyWlXd2g8p9Zz1YEE50TYgqDduluhjmU=";
21
- };
16
+ # tombstone: 10.254.1.2 chef
17
18
ceres = {
19
ip = "10.254.1.3";