Skip to content
Snippets Groups Projects
Select Git revision
  • dont-use-etc-hosts
  • sec
  • simplify-grafana
  • simple-docs-build
  • local-test-grid
  • develop default protected
  • no-morph-on-nodes
  • stuff
  • arion
9 results

make-testing.nix

Blame
  • Forked from PrivateStorage / PrivateStorageio
    1444 commits behind the upstream repository.
    make-testing.nix 1.04 KiB
    { publicIPv4, hardware, publicStoragePort, ristrettoSigningKeyPath, passValue, sshUsers, stateVersion, ... }: rec {
    
      deployment = {
        targetHost = publicIPv4;
    
        secrets = {
          "ristretto-signing-key" = {
            source = ristrettoSigningKeyPath;
            destination = "/run/keys/ristretto.signing-key";
            owner.user = "root";
            owner.group = "root";
            permissions = "0400";
            # Service name here matches the name defined by our tahoe-lafs nixos
            # module.  It would be nice to not have to hard-code it here.  Can we
            # extract it from the tahoe-lafs nixos module somehow?
            action = ["sudo" "systemctl" "restart" "tahoe.storage.service"];
          };
        };
      };
    
      imports = [
        hardware
        ../../nixos/modules/private-storage.nix
      ];
    
      services.private-storage =
      { enable = true;
        inherit publicIPv4;
        inherit publicStoragePort;
        ristrettoSigningKeyPath = deployment.secrets.ristretto-signing-key.destination;
        inherit passValue;
        inherit sshUsers;
      };
    
      system.stateVersion = stateVersion;
    }