hosts/marisa: remove hashistack
Signed-off-by: natto1784 <natto@weirdnatto.in>
This commit is contained in:
23
hosts/marisa/services/default.nix
Normal file
23
hosts/marisa/services/default.nix
Normal file
@@ -0,0 +1,23 @@
|
||||
{ config, ... }:
|
||||
{
|
||||
|
||||
imports = [
|
||||
# ./hashicorp.nix
|
||||
];
|
||||
|
||||
# Add secrets to nomad, consul and vault
|
||||
virtualisation.docker = {
|
||||
enable = true;
|
||||
daemon.settings = {
|
||||
# default-cgroupns-mode = "host";
|
||||
};
|
||||
};
|
||||
systemd.tmpfiles.rules = [ "d /run/vault - vault vault 1h" ];
|
||||
services = {
|
||||
openssh = {
|
||||
enable = true;
|
||||
permitRootLogin = "yes";
|
||||
};
|
||||
};
|
||||
}
|
||||
|
||||
30
hosts/marisa/services/hashicorp.nix
Normal file
30
hosts/marisa/services/hashicorp.nix
Normal file
@@ -0,0 +1,30 @@
|
||||
{ config, pkgs, ... }:
|
||||
{
|
||||
|
||||
services = {
|
||||
nomad = {
|
||||
enable = true;
|
||||
enableDocker = true;
|
||||
dropPrivileges = false;
|
||||
extraPackages = with pkgs; [ consul cni-plugins ];
|
||||
extraSettingsPaths = [ "/run/nomad/nomad.json" ];
|
||||
};
|
||||
vault = {
|
||||
package = pkgs.vault-bin;
|
||||
enable = true;
|
||||
tlsCertFile = "/var/rootcert/cert.pem";
|
||||
tlsKeyFile = "/var/rootcert/key.pem";
|
||||
address = "0.0.0.0:8800";
|
||||
# storageBackend = "file";
|
||||
# storagePath = "/var/lib/vault";
|
||||
extraSettingsPaths = [ "/run/vault/vault.json" ];
|
||||
};
|
||||
|
||||
consul = {
|
||||
enable = true;
|
||||
package = pkgs.consul;
|
||||
extraConfigFiles = [ "/run/consul/consul.json" ];
|
||||
};
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user