This repository has no description
ubik-host: fix with new facts interface
author
lassulus
date
(May 14, 2024, 1:28 PM CEST)
commit
58dd0ee9
58dd0ee93dade71b51a13440caedbd63f10fc15d
parent
b6a56f26
b6a56f2624e3046b581b75b0d6faab19aecbc301
+12
-9
+12
-9
2configs/ubik-host.nix
+12
-9
2configs/ubik-host.nix
···
2
2
{
3
3
krebs.sync-containers3.containers.ubik = {
4
4
sshKey = "${config.krebs.secret.directory}/ubik.sync.key";
5
+
startCommand = ''
6
+
export PATH=$PATH:${pkgs.git}/bin
7
+
until ${pkgs.dig.host}/bin/host github.com; do sleep 1; done
8
+
${pkgs.nixos-rebuild}/bin/nixos-rebuild --refresh --flake github:lassulus/superconfig#ubik switch --no-write-lock-file
9
+
'';
10
+
};
11
+
clanCore.facts.services.ubik-container = {
12
+
secret."ubik.sync.key" = { };
13
+
generator.script = ":";
14
+
generator.prompt = ''
15
+
copy or reference the secret key from the container into here, so we can actually start/sync the container
16
+
'';
5
17
};
6
18
containers.ubik.bindMounts."/var/lib" = {
7
19
hostPath = "/var/lib/sync-containers3/ubik/state";
···
48
60
proxyWebsockets = true;
49
61
proxyPass = "https://prism.r";
50
62
};
51
-
};
52
-
clanCore.facts.services.ubik-container = {
53
-
secret."ubik.sync.key" = { };
54
-
public."ubik.sync.pub" = { };
55
-
generator.path = with pkgs; [ coreutils openssh ];
56
-
generator.script = ''
57
-
ssh-keygen -t ed25519 -N "" -f "$secrets"/ubik.sync.key
58
-
mv "$secrets"/ubik.sync.key "$facts"/ubik.sync.pub
59
-
'';
60
63
};
61
64
}