prescientmoon/satellite
1
Fork 0
Code Activity

Auto manage zfs pools

Browse source
This commit is contained in:
Matei Adriel 2024-02-12 14:57:13 +01:00
parent a5e34b52d7
commit 0ed5de744c
No known key found for this signature in database
5 changed files with 45 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
hosts/nixos/common/global/default.nix
View file

@ -10,13 +10,6 @@ let
inputs.nur.nixosModules.nur inputs.nur.nixosModules.nur
inputs.slambda.nixosModule inputs.slambda.nixosModule
inputs.sops-nix.nixosModules.sops inputs.sops-nix.nixosModules.sops
# {{{ self management
# NOTE: using `pkgs.system` before `module.options` is evaluated
# leads to infinite recursion!
inputs.smos.nixosModules.x86_64-linux.default
inputs.tickler.nixosModules.x86_64-linux.default
# }}}
# }}} # }}}
# {{{ global configuration # {{{ global configuration
./cli/fish.nix ./cli/fish.nix

1
hosts/nixos/lapetus/default.nix
View file

@ -9,6 +9,7 @@
./services/pounce.nix ./services/pounce.nix
./services/intray.nix ./services/intray.nix
./services/vaultwarden.nix ./services/vaultwarden.nix
./services/zfs.nix
./filesystems ./filesystems
./hardware ./hardware
]; ];

5
hosts/nixos/lapetus/secrets.yaml
View file

@ -1,4 +1,5 @@
tilde_irc_pass: ENC[AES256_GCM,data:+pw/g0pffo1zF++1H/+iFXQDCDw=,iv:zTBvaUCwt78dgv1jF9EmrTuHMnM2S+GUGpQZWY828tA=,tag:umqaQOWqy8aMOxWR0CNGHQ==,type:str] tilde_irc_pass: ENC[AES256_GCM,data:+pw/g0pffo1zF++1H/+iFXQDCDw=,iv:zTBvaUCwt78dgv1jF9EmrTuHMnM2S+GUGpQZWY828tA=,tag:umqaQOWqy8aMOxWR0CNGHQ==,type:str]
zed_smtp_pass: ENC[AES256_GCM,data:Y6pPbs5amgZIvoIJZUM=,iv:vbvA9u8Snv4tCzguabrWg1osy/LOr8PmO/02f9ZajOY=,tag:8tlrMCZBqtjGfiuqSOOplw==,type:str]
vaultwarden_env: ENC[AES256_GCM,data:39gY2J+AFTwIRar7tbF6D9WadTzw1xiqPE9T204Z,iv:k9m6wQIPh1qScCjgLnULjVxVmDxxmotd/xzVuH6ju/w=,tag:+xIkwguOwYryO4rgsyMOsQ==,type:str] vaultwarden_env: ENC[AES256_GCM,data:39gY2J+AFTwIRar7tbF6D9WadTzw1xiqPE9T204Z,iv:k9m6wQIPh1qScCjgLnULjVxVmDxxmotd/xzVuH6ju/w=,tag:+xIkwguOwYryO4rgsyMOsQ==,type:str]
sops: sops:
kms: [] kms: []
@ -24,8 +25,8 @@ sops:
RHZ6alYrUU5BZ2xlMkdGR1dWRG5aeGMKJdsdtVZ6Mk9Vo3a+tS+rzAgaF2wpH+8U RHZ6alYrUU5BZ2xlMkdGR1dWRG5aeGMKJdsdtVZ6Mk9Vo3a+tS+rzAgaF2wpH+8U
lWhA+c0Kbe8EJT8hm7Vr8PqBmElz4V9AnXSCTp7D+Cu4pfWsHopLUQ== lWhA+c0Kbe8EJT8hm7Vr8PqBmElz4V9AnXSCTp7D+Cu4pfWsHopLUQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-02-10T04:02:57Z" lastmodified: "2024-02-12T13:56:45Z"
mac: ENC[AES256_GCM,data:N91XMd/cNYVEgOffhjJkFspV/QudWCRX0BVfRJ1oVzyqzcOfEutlw9UXl2ARMPGqZLWQx4QIS7b11bviJ95tRqLxt8EHy6xl/HJUEqeRqClE4c68dUoBpZGrMousOtHG40jdf5eciDATNGO+PDecyUjB5s3wZNN7dm2ozHSaBB0=,iv:7YmHsjX0JYI6FQ0RhDdjxTezE+jlfhHkem3EJ7bHDDg=,tag:eQjUA4Mcg+9JKsO7FFvvsw==,type:str] mac: ENC[AES256_GCM,data:Rz6m7xNjfFAz6zkyMb1hqPHNxQ0I5bo9jN/AO24TaepI2dJMTmRUDT9ezsiQHfjitTrfX1EVRccPRGFDUVCaxSKu11CY3oMw6IZgeJclJRs5skp7382S5cu+LGyg5EsVSJM4tFl3XboxvHX2/8sqBqmkuTVxjVHW1hWNU0ok/T4=,iv:j7Hc4KpeXcMc5QqkDpmwJLJxkjMHiTrX+zL4EtzLFPg=,tag:hB6ek9hnpNqgWamK0MwhPQ==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.1 version: 3.8.1

14
hosts/nixos/lapetus/services/msmtp.nix Normal file
View file

@ -0,0 +1,14 @@
{
programs.msmtp = {
enable = true;
setSendmail = true;
accounts = {
defaults = {
auth = true;
tls = true;
host = "smtp.migadu.com";
port = 465;
};
};
};
}

27
hosts/nixos/lapetus/services/zfs.nix Normal file
View file

@ -0,0 +1,27 @@
{ config, ... }: {
imports = [ ./msmtp.nix ];
# {{{ Zfs config
services.zfs = {
trim.enable = true;
autoScrub.enable = true;
autoSnapshot = {
enable = true;
# -k -p is the default, and --utc is there to prevent timezone-related issues
autoSnapshot.flags = "-k -p --utc";
};
# zed.enableMail = true;
};
# }}}
# {{{ Zed email config
sops.secrets.zed_smtp_pass.sopsFile = ../secrets.yaml;
programs.msmtp.accounts.zed = {
from = "zed@orbit.moonythm.dev";
user = "zed@orbit.moonythm.dev";
passwordeval = "cat ${config.sops.secrets.zed_smtp_pass.path}";
};
# }}}
}