Add Kubernetes, remove nginx

2021-10-06 11:03:30 +02:00
parent a0e109077f
commit 9bf1722b03
5 changed files with 228 additions and 106 deletions
--- a/clusters/stokes/users.nix
+++ b/clusters/stokes/users.nix
@@ -17,6 +17,7 @@
    michael = { gid = 1012; };
    yugaos = { gid = 1013; };
    ata = { gid = 1014; };
+    kvile ={ gid = 1015; };
    # @grp@

    sif = {
@@ -61,8 +62,8 @@
        "wheel"
        "root"
        "adm"
+        "admin"
        "cdrom"
-        "docker"
        "fuse"
        "wireshark"
        "libvirtd"
@@ -72,7 +73,7 @@
      ];
      uid = 1000;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      useDefaultShell = false;
      shell = pkgs.fish;
      openssh.authorizedKeys.keys = [
@@ -87,11 +88,10 @@
      group = "olean";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1001;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      openssh.authorizedKeys.keys = [
        "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAlfc2r3mNkvmdta+H/5zfdFe6317zmCdhhPYbipaGVFPUZO2cCTgSso28oDvOpCDldo/wl3jUxYNDlwH8LYMqKT3aGaOZr8JbxYzd+L+5GM2KTD+4YRmPtpYS/LWcc3j+fiFXSgX6Mrrgf6ineCRuBxSooDVE+pBakM1U7d5NE25apaAvclzFTmZBg0Sf9e5sgHkR99r9DUeGEQWGNZVUGwti39dFVp+aC9dsA+1/OtNB/HMF5G1MMk9dqvN7n7i9o9Plef2DParn4QU1GhmUKeEiBe4OAmSP+WwD4YvK6iXSKZG6tuTEspw+mR3rK5gBHrEiaNlCtp7O9BnAw4Wjhw== rsa-key-20201218"
      ];
@@ -103,11 +103,10 @@
      group = "frankgaa";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1002;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      openssh.authorizedKeys.keys = [
        "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTq/IAtLkvHaPKTsp5U9YnhBj7PLFflS9vWpm5e/bFXQkSShkqUOktff1GITIN+RTpUS8zF9UkJA8fj5K382DhIn4jVb9HvQzmHNBTxU5ClpOuKhfibrts5IKMLAiN1enwZYu0iUIVfDKTYmqgAnjN8B6OyzIAB8bsBUMdN29PEwJT4cCVRRySLRfoWiXiZKow71FzXIACgxMwGhj2fpslKQoat2LGny03XR7EZrv36u1OktT28Gxf4ZrGpT9+3SAyf7aW20xHALU/dHXVsfsuqnoqw1InZ5VhvIVtoIj+5Vc5dkTXkychL0Hb+WxiH5O/3T18YUqes08UPZX5G9kB fga@akvaplan.niva.no"
      ];
@@ -119,11 +118,10 @@
      group = "hdj002";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1003;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      openssh.authorizedKeys.keys = [
        "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAvXTQTRfcpVkaJ+HO6wpgMKO9bdoTvQunbexn1N4jOuJOB5uAKZrZsimucw4DpvzaLZAftLI6RQlmiklxWItZA2UCfhlIZus8wy0cSTic2PkxLUXzBa1wl7nr8anYSK/HReQfTkgSi6LGTsGhejBxe//XC24ygW9eFYZTwOkpD8klNBNFHUA6sXgnzcjT/j3rwUjYI4GVJ82kP3GA0GBDSMwZ45/8ZYBk/Dbja0RJlvTHLSIgAmKzOuor1ORXk4zGdVpsTgNRv7QxeXZT09KJFp9hexMB/fT/OwZopKrHdGrOIIi2vhO6AGh4U+qjnjWY8yn5qHSOAIDDiJQ/iLeCCw== rsa-key-20201217"
      ];
@@ -135,11 +133,10 @@
      group = "hes";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1004;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      openssh.authorizedKeys.keys = [
        "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDH/05mXyrYgxlWazFDtTJBCCB4YzQQiPcAkeeolztt320CPQ+pRyLgCzyAVGT5AlisXanHyWFSsPXrfM5MRNbm2U87s8DoZLZS5CYMk+ieGKdbac8jUgaw16EKyW05NHfHhDGYL+DyTQ76WAe/btzgDpvkal5B824a6abqc/oYz7D5rnAqoIpt56m1BG3tJrSz8K3nbOGpnMKt3vlVSLqZ6WNtSfXT+hHjOTfacQYH9XGQn/nYIuUzgDUswiboJ8nox5eduJxFrUHY6GGFiFeX6+hxIZUOZZm4hff01+sBxWy4y727tzCTbZIw2ERKcxu94BOC/EJsIyQDkaHwzaIwP7bB8V5yqpz7Fjgt5Bu+pMxUV8uwZmA5S5r3UuXlKHaspaqDR7RVjCUWcwCSgMYioxLtcnZr2DdKuezXbOU8O/FRsxuqFEzZTeCrckAi8gFzTanIZYmkwujjRg1hidOMc5qcn2yH/5NyBlQ+Y4XjD0XTMjSLpONczuyG3t6SJpE= haavaes@nzinga"
      ];
@@ -151,11 +148,10 @@
      group = "mad";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1005;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      openssh.authorizedKeys.keys = [
        "ssh-rsa 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 pckey"
      ];
@@ -167,11 +163,10 @@
      group = "peyghamg";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1006;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      openssh.authorizedKeys.keys = [];
    };

@@ -181,11 +176,10 @@
      group = "qin";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1007;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      openssh.authorizedKeys.keys = [
        "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAhrMpKwIKQoANoB0I7X9IXGVpfPVvjFjeuT7RGKO+XghSm88B0RTeBeiEcwp1fADUTdzbd00YhrWLIBSl3z/fyhG/k/EyOadNYn0BFenJ9IBxBFo/Nyhbfg1jKAO/OLN7S6WFWPvJzE/G6UP/wN1QBeJmM1iEIuorwwTifMGD0nM1DaQA9R9Ji56yn6Kzl2wym0z0WKyqrn+vTBh3YXJljEFboeuWlBL/a7R7W6XxJHPo0wZzKxE7mdEQqqGXioTUTPgyBLK1duS0YjWuMS/pfkMIji0kD50QtlA72h2p++43ZS1NpFK9d8q7C2ZxE/RlxAFGwUcKGhEIUdk3JRhfcQ== rsa-key-20210429"
      ];
@@ -197,11 +191,10 @@
      group = "eli";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1008;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      openssh.authorizedKeys.keys = [
        "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEA8cclW3+wlmFl4fNEIqudlrtKVsZCXdzLgXNaGnqZPbqUCVXqw6rigFXSPYnRnE47yi8heC+06ga+4l8LkAuFCPhoZN6xxq6M7qmlNRHtpNn6PrXuDaTkgNig9TD2BCbHGwkqIByPhea4qQbM0mLKRk+a4H0ZGHsJnZI+nm185sSo6jQJ1gCHLk6ZZOoRDGYjoZIs3En3fTSTJBfbluf5A/gVXf2pbvIQ+R5QEOszRcln6nFfTd2Lwu2t63jA1pHN3KQoKcJ9RtBrRC0ZgZrOlEU1bpGLwuHwpj5xoxlsoI49QMgqJL4PE06mNGLYuxl6N/Sj6l90fuPFrEQpf45S0w== rsa-key-20201217"
        "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvn2P+ID0J4SEIZF22Ewx4YqrUxgM78eUPZPtEngvQhi+s+lROpmkPPG7JQ2AO4tsATIOWHhXXerIciWuP5W8LikUmr4xXdQD7S1lbmH1sKvgyquPqyfjucQlP/efcoYXGQMp7tFs/1Z1RXPmq4oG3IZIy/wZOgiT8/wP/nCVOAahtAE1VxRldber286ruoF4e3GFjSxYafjyifaYwSvHySiKKqjVCaHw1oVv6bJn2H1sjuU19LSvDTZk+zMlWuxe1HW2dLtrGQGptd1JSURzmuc+stmrDBeiSGQ5QZza4+6TZKnSMNZ0RrjvTLlT+qW6OYMSPkiSDlEjkB47kIGQKQ== eli@AKVA9163"
@@ -214,11 +207,10 @@
      group = "ovanov";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1009;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      openssh.authorizedKeys.keys = [];
    };

@@ -228,13 +220,12 @@
      group = "bast";
      extraGroups = [
        "users"
-        "docker"
        "wheel"
        "root"
      ];
      uid = 1010;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      useDefaultShell = false;
      shell = pkgs.fish;
      openssh.authorizedKeys.keys = [
@@ -250,11 +241,10 @@
      group = "marius";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1011;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      useDefaultShell = false;
      shell = pkgs.fish;
      openssh.authorizedKeys.keys = [
@@ -268,11 +258,10 @@
      group = "michael";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1012;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      useDefaultShell = false;
      shell = pkgs.fish;
      openssh.authorizedKeys.keys = [
@@ -286,11 +275,10 @@
      group = "yugaos";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1013;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      useDefaultShell = true;
      # shell = pkgs.fish;
      openssh.authorizedKeys.keys = [
@@ -304,11 +292,10 @@
      group = "ata";
      extraGroups = [
        "users"
-        "docker"
      ];
      uid = 1014;
      isNormalUser = true;
-      createHome = true;
+      createHome = false;
      useDefaultShell = true;
      # shell = pkgs.fish;
      openssh.authorizedKeys.keys = [
@@ -316,6 +303,22 @@
      ];
    };

+    kvile = {
+      description = "Kristina Øie Kvile";
+      home = "/home/kvile";
+      group = "kvile";
+      extraGroups = [
+        "users"
+      ];
+      uid = 1015;
+      isNormalUser = true;
+      createHome = false;
+      useDefaultShell = true;
+      # shell = pkgs.fish;
+      openssh.authorizedKeys.keys = [
+        "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtB+HWtE4iXJiRVi1MUKaE3R3FAcHzCgiF84ho6GXKxx5H2iY8sgfxWo/lFSonhZKTo/+dHOYNKs42Q85ytG1rpcEYYVOK53mx8f7Z3THmw348a/+geM8Bukvo5pLc7KmXIvq6UQIjZmI/wnbA7B8MzLyrod71SaT1ujMEV1Jg0b3KnjS5kJnUHDICw3CdvuenNIgYl/zbTeEJ1iUu6T1TY+cNGG/7HOsaR1leCArDutHIKowcIFQFZoLEikM2DX5MSp9UBizAVogHugEqE2Bqh+C7NyTzJfQzR8s4drnt9IaptJQmCo6z9f+dQALjhftJXBDdkR6coMyOujV3Yyc5 rsa-key-20210928"
+      ];
+    };
    # @usr@
  };