nixos-server/system/services, branch v0.3.0nixos-config for vhack.eu servers https://vhack.euhttp://git.foss-syndicate.org/vhack.eu/nixos-server/atom?h=v0.3.02023-07-08T14:58:23+00:00Fix(system/secrets): Ensure that ssh host key is available in stage 22023-07-08T14:58:23+00:00Soisphasoispha@vhack.eu2023-07-08T14:58:23+00:00urn:sha1:5bb8cb35c5d084a34cbf80f76502a567c55175ec
The `/var/lib/sshd` directory is only mounted _after_ the stage 2 init,
thus also after the system activation. Agenix, which runs in the system
activation needs the hostkey however to decrypt the secrets needed for
some units (as of right now only keycloak).
Alas the only way I see to achieve that is to store the ssh hostkey
directly on /srv, which is mounted before (it's marked as 'neededForBoot'
after all) the stage 2 init.
It should be possible to achieve this with impermanence however,
as `/var/log` is mounted in the stage 1 init; The problem is that I
have no idea _why_ only this is the only directory mounted and nothing else.
Fix(system/services/keycloak): Use agenix to store passwd2023-07-08T14:01:58+00:00Soisphasoispha@vhack.eu2023-07-08T13:36:32+00:00urn:sha1:265eb9d228935f7b3b5c8ba6a583489b9f74f8b2Fix(system/services/nix-sync): Nix build needs access to /proc/stat2023-07-08T14:01:56+00:00Soisphasoispha@vhack.eu2023-07-08T12:30:01+00:00urn:sha1:123a8d92e6ba702434af3002bf95afc2c3ea0ac3Fix(treewide): Move all persistent dirs to impermanence to set permissions2023-07-08T11:53:11+00:00Soisphasoispha@vhack.eu2023-07-08T11:53:11+00:00urn:sha1:7815ef2a22e3ae684852f1f28cedae6354263034Fix(system/services/nix-sync): Guard deletion of `repo.path`2023-07-05T19:21:44+00:00Soisphasoispha@vhack.eu2023-07-05T19:21:44+00:00urn:sha1:16da0f2fc8e02e9363d2f6a6ddf9dd8a715f3901Fix(system/services/nix-sync): Pull before rebuilding2023-07-05T19:18:46+00:00Soisphasoispha@vhack.eu2023-07-05T19:18:46+00:00urn:sha1:3df8d67f6be90fe4561133602052fff719883be7Fix(system/services/nix-sync): Generate the needed repo paths2023-07-05T19:09:56+00:00Soisphasoispha@vhack.eu2023-07-05T19:09:56+00:00urn:sha1:5bed7c8ee0c95526f08b046b1a0b6832ea21606bFix(system/services/nix-sync): Rebuild website on gc2023-07-05T19:09:19+00:00Soisphasoispha@vhack.eu2023-07-05T19:09:19+00:00urn:sha1:393f0e672e16fe9b8c28e3a1e68478cdc186d480Fix(system/services/nix-sync): Really remove last reference to git-sync2023-07-05T18:40:16+00:00Soisphasoispha@vhack.eu2023-07-05T18:40:16+00:00urn:sha1:0b36dbde8a3a656a19ee9bbf114e78e9acd57e07Fix(system/services/nix-sync): Small typos in ExecStart2023-07-05T18:39:07+00:00Soisphasoispha@vhack.eu2023-07-05T18:39:07+00:00urn:sha1:0ac98855c3b70430197155fcc8737e4ad39dfb20