qo.is Infrastructure

This repository contains the infrastructure configuration and documentation sources.

Check out the current rendered documentation on the deployed gitlab page.

Structure

nixos-configurations: Main nixos configuration for every host.
defaults: Configuration defaults
modules: Custom modules (e.g. for vpn and routers)

Building

This repository requires nix flakes

nix build
Build all host configurations and docs
nix build .#nixosConfigurations.<hostname>.config.system.build.toplevel
Build a single host configuration with
nix build .#docs
Build the documentation website

Development

nix develop
Development environment
nix flake check
Execute the project's checks
nix fmt
Autofix formatting

Working with the private submodule

On changes:

git add private
nix flake lock --update-input private

Deployment

nix run .#deploy

See Deployment for details.

Secrets

Secret management is done with nix-sops.

Secrets are stored in private/passwords.sops.yaml (sysadmin passwords), private/nixos-configurations/secrets.sops.yaml (shared secrets for all hosts) and private/nixos-configurations/<hostname>/secrets.sops.yaml (host specific secrets).

Usage:

sops
sops-rekey

1.4 KiB Raw Blame History