Skip to content
Snippets Groups Projects
Select Git revision
  • e7cd122296760ef04026ad30ddde008ecd714277
  • develop default protected
  • production protected
  • nixpkgs-upgrade-2025-06-16
  • nixpkgs-upgrade-2024-12-23
  • 190-our-regular-updates-fill-up-the-servers-boot-partitions
  • nixpkgs-upgrade-2024-10-14
  • hro-cloud protected
  • 162.flexible-grafana-module
  • nixpkgs-upgrade-2024-05-13
  • nixpkgs-upgrade-2024-04-22
  • nixpkgs-upgrade-2024-03-25
  • nixpkgs-upgrade-2024-03-18
  • nixpkgs-upgrade-2024-03-11
  • nixpkgs-upgrade-2024-03-04
  • 163.jp-to-ben-for-prod
  • nixpkgs-upgrade-2024-02-26
  • 164.grafana-alert-rules
  • 157.authorize-new-hro-key
  • nixpkgs-upgrade-2024-02-19
  • nixpkgs-upgrade-2024-02-12
21 results

issuer-aws.nix

Blame
  • issuer-aws.nix 775 B
    { name, lib, ... }: {
      imports = [ <nixpkgs/nixos/modules/virtualisation/amazon-image.nix> ];
    
      # amazon-image.nix isn't quite aware of nvme-attached storage so give it a
      # little help configuring grub.
      boot.loader.grub.device = lib.mkForce "/dev/nvme0n1";
    
      ec2.hvm = true;
      boot.kernel.sysctl = { "vm.swappiness" = 0; };
      swapDevices = [ {
        device = "/var/swapfile";
        size = 4096; # megabytes
        randomEncryption = true;
      } ];
    
      # Break the tie between AWS and morph for the hostname by forcing the
      # morph-supplied name.  See also
      # <https://github.com/DBCDK/morph/issues/146>.
      networking.hostName = name;
    
      # Clean up packages after a while
      nix.gc = {
        automatic = true;
        dates = "weekly";
        options = "--delete-older-than 30d";
      };
    }