98 lines
4.0 KiB
Nix
98 lines
4.0 KiB
Nix
{ pkgs, lib, config, ... }:
|
|
with lib;
|
|
let
|
|
cfg = config.node;
|
|
|
|
mkSANs = host: [
|
|
host.name
|
|
host.address
|
|
"127.0.0.1"
|
|
];
|
|
|
|
configuration = {
|
|
deployment.targetHost = cfg.address;
|
|
|
|
features = {
|
|
os = {
|
|
boot.uefi = true;
|
|
externalInterface = "eth0";
|
|
docker.enable = true;
|
|
adminAuthorizedKeys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKiAS30ZO+wgfAqDE9Y7VhRunn2QszPHA5voUwo+fGOf jonas"
|
|
"ssh-rsa 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 jonas.juselius@juselius.io"
|
|
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCk5EKXxo/KLogjqSxSf/GkQdZ30UxB3wXc5k6Y6RRKQ/5iJ+XyYTbuqYOUp30p54apZzbayU2icahE/upr754lQicQwJtOXW/Iut57VRhSpq4P+mKCIdT58xCUkAZYr8Aja8UjHlYeJgFvp023K/fqmwbapu8R1gh4bzXm7uU1XeJoYfuOb+Cb8NGMn1ICrw2aztA0yVOXZ7tyJd2qyr1+6PuM/Ca2nKN4wLIX2vwyN3vZjR15nkIaHQGlTaJlNk2NEG1YTxsIQ9axDjNtyL80kjUr5M8zxW6s0h3451zr1b21EetP1i+1POIjS9uWXv5iabF+1Qb1GaS4FAYzzpqNY+moLzY7Zqfi05MPsMYkNoZ1Kg5aj0IuZb0OM9i6ZJrFs9nYAGG0uLSUTfrs957f9nokFyILGYg5xY46YN3uQrqfZifvcR0KaEdxEKvnfq0qrNG3uYLR/OYm2yblRcNbWgDoQ1hH7qa9uJM2JrPM07s4sJGkqfAib8Hwz9+l7jMrL6KIGUOA4aX0B1KZaIKKiZa42WlgdbeA17aW3laIqS5mZCkI3pLMYZAxe+A6rQi+V8ZAvDSyOL/Vws3lboXaN5QLu17R8uCY7MkIAvRBiZSpdWNeX3JO5m6zexkxkrFlxyEBf+ott4ATSw+eMYMs8i5xQRqPjgO1cABWkUdGpw== martin.moe.carstens@itpartner.no"
|
|
"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAlHx2RWPvBhYzevQE+llnyDuInSsyhs6PFaoavtEB2VLr2gOFxDZW5VmDXlorAXtCpcPpJdYbnPuRWZd0m5950BatWy5UPgDIK2Qm5XABlq6/tXzHJme9PJHcXwo6WStaB31RiJs9nhdYIhPRjcbeFdx/7Fz3atVikE6YUtb8a7YGeKgZh6ashtYPpG3oSBLn1menjk6CxVRt16de3PoDlYav/J8WPbaGJqcPIU9rjzqJkI4aG1txSyJ8Vt2vawQKnzPZCuQAdWgquE3CbJkJbgoh2TKmHds71WMTg3ZXz2KfVjdN8IXCTxdySlgVVAN6x0usGVnA22XnMYQEgbcb3Q== kai.simen"
|
|
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKGE/a52ulthZD5NE8zaWaHTBUK0x5W5TYWr5k1Ajn72B388opA+iVKpJ7ZOSMFU0YL6bS0eM0igOgg11vJhki5uAy9iiC5lxiN7hiDyIqM/slDJ8gBiJbYTW0dAlgQ8nxTFBw13TXmpLgRO4w3X9YXG1pVrjdLRj/m6oecshznzxTyzt69ZSF/bKVGaOqDSRtmjzNSpQXPuA18CYpWN4E8adlbva5yAsZPZgfSsL319XrHNEK0AhO4W6rXupB556FZWVVuO+Z+BxHDhGrviqR7IR0WWv/X0yJvwb4WsiuRDW9y3rvv+DvWd1bdgFUYGUWO4vRgjZbaaLujh6C/Hwb remi@home-server"
|
|
];
|
|
};
|
|
|
|
k8s = {
|
|
enable = true;
|
|
node.enable = true;
|
|
clusterName = "k2";
|
|
initca = ./ca;
|
|
cidr = "10.100.0.0/16";
|
|
master = {
|
|
name = "k2-0";
|
|
address = "10.1.8.60";
|
|
extraSANs = [ "k2.itpartner.no" ];
|
|
};
|
|
ingressNodes = [
|
|
"k2-0.itpartner.intern"
|
|
"k2-1.itpartner.intern"
|
|
"k2-2.itpartner.intern"
|
|
];
|
|
fileserver = "fs2-0";
|
|
charts = {
|
|
acme_email = "innovasjon@itpartner.no";
|
|
grafana_smtp_user = "utvikling";
|
|
grafana_smtp_password = "S0m3rp0m@de#21!";
|
|
};
|
|
};
|
|
};
|
|
|
|
networking = {
|
|
hostName = cfg.name;
|
|
domain = "itpartner.intern";
|
|
nameservers = [ "8.8.8.8" ];
|
|
search = [ "itpartner.no" ];
|
|
defaultGateway = "10.1.8.1";
|
|
extraHosts = import ../hosts.nix;
|
|
interfaces.eth0 = {
|
|
useDHCP = false;
|
|
ipv4.addresses = [ {
|
|
address = cfg.address;
|
|
prefixLength = 24;
|
|
} ];
|
|
};
|
|
};
|
|
|
|
services.kubernetes.kubelet.extraSANs = mkSANs {
|
|
name = cfg.name;
|
|
address = cfg.address;
|
|
};
|
|
|
|
};
|
|
in {
|
|
options.node = {
|
|
address = mkOption {
|
|
type = types.str;
|
|
default = null;
|
|
};
|
|
|
|
name = mkOption {
|
|
type = types.str;
|
|
default = null;
|
|
};
|
|
|
|
};
|
|
|
|
config = configuration;
|
|
|
|
imports = [
|
|
../../modules
|
|
../../nixos
|
|
];
|
|
}
|
|
|