Sergei Poljanski
71047d179d
Some checks failed
nixos / asxpio-services (push) Failing after 54s
Renovate now runs from its own repository for every repo, with the shared rules in its preset. Extend that preset here and keep only what is specific to this repo (the Ansible var manager, the Paper JRE, the runner and nix notes); drop the workflow that ran it for iac alone. Assisted-by: Claude:opus-5-5
51 lines
1.1 KiB
Nix
51 lines
1.1 KiB
Nix
{
|
|
description = "asxp.io servers";
|
|
|
|
inputs = {
|
|
nixpkgs.url = "github:NixOS/nixpkgs/nixos-26.05";
|
|
disko = {
|
|
url = "github:nix-community/disko";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
sops-nix = {
|
|
url = "github:Mic92/sops-nix";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
};
|
|
|
|
outputs =
|
|
{
|
|
nixpkgs,
|
|
disko,
|
|
sops-nix,
|
|
...
|
|
}:
|
|
let
|
|
mkHost =
|
|
modules:
|
|
nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
modules = [
|
|
disko.nixosModules.disko
|
|
sops-nix.nixosModules.sops
|
|
./modules/base.nix
|
|
./modules/hetzner.nix
|
|
./modules/docker.nix
|
|
./modules/backup.nix
|
|
]
|
|
++ modules;
|
|
};
|
|
in
|
|
{
|
|
nixosConfigurations = {
|
|
asxpio-services = mkHost [ ./hosts/asxpio-services ];
|
|
|
|
# The same system on a throwaway server: no WireGuard, no private
|
|
# network, dummy secrets. Used to test an install before production.
|
|
rehearsal = mkHost [
|
|
./hosts/asxpio-services
|
|
./hosts/rehearsal.nix
|
|
];
|
|
};
|
|
};
|
|
}
|