aboutsummaryrefslogtreecommitdiffstats
path: root/system/impermanence
diff options
context:
space:
mode:
authorBenedikt Peetz <benedikt.peetz@b-peetz.de>2024-12-24 16:09:20 +0100
committerBenedikt Peetz <benedikt.peetz@b-peetz.de>2024-12-24 16:09:20 +0100
commitb5fc07416652a445f15946ce7e5fc48766cf6722 (patch)
treede37587f0673e4aea12bc0532ee1b3879ab1e31c /system/impermanence
parentfix(modules/back): Set now needed source code URL environment variable (diff)
downloadnixos-server-b5fc07416652a445f15946ce7e5fc48766cf6722.zip
refactor(modules/impermanence): Migrate to by-name while distributing mods
Diffstat (limited to 'system/impermanence')
-rw-r--r--system/impermanence/default.nix28
-rw-r--r--system/impermanence/mods/acme.nix5
-rw-r--r--system/impermanence/mods/fail2ban.nix10
-rw-r--r--system/impermanence/mods/mail.nix46
-rw-r--r--system/impermanence/mods/mastodon.nix10
-rw-r--r--system/impermanence/mods/matrix.nix19
-rw-r--r--system/impermanence/mods/minecraft.nix10
-rw-r--r--system/impermanence/mods/murmur.nix10
-rw-r--r--system/impermanence/mods/nix-sync.nix10
-rw-r--r--system/impermanence/mods/openssh.nix21
-rw-r--r--system/impermanence/mods/postgresql.nix5
-rw-r--r--system/impermanence/mods/taskserver.nix5
-rw-r--r--system/impermanence/mods/users.nix34
13 files changed, 0 insertions, 213 deletions
diff --git a/system/impermanence/default.nix b/system/impermanence/default.nix
deleted file mode 100644
index b2f0778..0000000
--- a/system/impermanence/default.nix
+++ /dev/null
@@ -1,28 +0,0 @@
-{...}: {
- # TODO: Only activate them if their module is also active
- imports = [
- ./mods/acme.nix
- ./mods/mail.nix
- ./mods/mastodon.nix
- ./mods/matrix.nix
- ./mods/minecraft.nix
- ./mods/murmur.nix
- ./mods/nix-sync.nix
- ./mods/openssh.nix
- ./mods/postgresql.nix
- ./mods/taskserver.nix
- ./mods/users.nix
- ];
-
- environment.persistence."/srv" = {
- hideMounts = true;
- directories = [
- "/etc/nixos"
- "/var/log"
- "/var/lib/nixos"
- ];
- files = [
- "/etc/machine-id"
- ];
- };
-}
diff --git a/system/impermanence/mods/acme.nix b/system/impermanence/mods/acme.nix
deleted file mode 100644
index b16171e..0000000
--- a/system/impermanence/mods/acme.nix
+++ /dev/null
@@ -1,5 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- "/var/lib/acme"
- ];
-}
diff --git a/system/impermanence/mods/fail2ban.nix b/system/impermanence/mods/fail2ban.nix
deleted file mode 100644
index a817876..0000000
--- a/system/impermanence/mods/fail2ban.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- {
- directory = "/var/lib/fail2ban";
- user = "fail2ban";
- group = "fail2ban";
- mode = "0700";
- }
- ];
-}
diff --git a/system/impermanence/mods/mail.nix b/system/impermanence/mods/mail.nix
deleted file mode 100644
index a306ccf..0000000
--- a/system/impermanence/mods/mail.nix
+++ /dev/null
@@ -1,46 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- {
- directory = "/var/lib/mail/backup";
- user = "virtualMail";
- group = "virtualMail";
- mode = "0700";
- }
- {
- directory = "/var/lib/mail/sieve";
- user = "virtualMail";
- group = "virtualMail";
- mode = "0700";
- }
- {
- directory = "/var/lib/mail/vmail";
- user = "virtualMail";
- group = "virtualMail";
- mode = "0700";
- }
- {
- directory = "/var/lib/mail/dkim";
- user = "opendkim";
- group = "opendkim";
- mode = "0700";
- }
- {
- directory = "/var/lib/postfix/data";
- user = "postfix";
- group = "postfix";
- mode = "0700";
- }
- {
- directory = "/var/lib/postfix/queue";
- user = "postfix";
- group = "postfix";
- mode = "0700";
- }
- {
- directory = "/var/lib/rspamd";
- user = "rspamd";
- group = "rspamd";
- mode = "0700";
- }
- ];
-}
diff --git a/system/impermanence/mods/mastodon.nix b/system/impermanence/mods/mastodon.nix
deleted file mode 100644
index a5bdbfd..0000000
--- a/system/impermanence/mods/mastodon.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- {
- directory = "/var/lib/mastodon";
- user = "mastodon";
- group = "mastodon";
- mode = "0700";
- }
- ];
-}
diff --git a/system/impermanence/mods/matrix.nix b/system/impermanence/mods/matrix.nix
deleted file mode 100644
index 3af6530..0000000
--- a/system/impermanence/mods/matrix.nix
+++ /dev/null
@@ -1,19 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- {
- directory = "/var/lib/matrix";
- user = "matrix-synapse";
- group = "matrix-synapse";
- mode = "0700";
- }
- {
- directory = "/var/lib/mautrix-whatsapp";
- user = "mautrix-whatsapp";
- group = "matrix-synapse";
- mode = "0750";
- }
- ];
- systemd.tmpfiles.rules = [
- "d /etc/matrix 0755 matrix-synapse matrix-synapse"
- ];
-}
diff --git a/system/impermanence/mods/minecraft.nix b/system/impermanence/mods/minecraft.nix
deleted file mode 100644
index 2a02626..0000000
--- a/system/impermanence/mods/minecraft.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- {
- directory = "/var/lib/minecraft";
- user = "minecraft";
- group = "minecraft";
- mode = "0700";
- }
- ];
-}
diff --git a/system/impermanence/mods/murmur.nix b/system/impermanence/mods/murmur.nix
deleted file mode 100644
index 48912e1..0000000
--- a/system/impermanence/mods/murmur.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- {
- directory = "/var/lib/murmur";
- user = "murmur";
- group = "murmur";
- mode = "0700";
- }
- ];
-}
diff --git a/system/impermanence/mods/nix-sync.nix b/system/impermanence/mods/nix-sync.nix
deleted file mode 100644
index 11449ea..0000000
--- a/system/impermanence/mods/nix-sync.nix
+++ /dev/null
@@ -1,10 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- {
- directory = "/var/lib/nix-sync";
- user = "nix-sync";
- group = "nix-sync";
- mode = "0700";
- }
- ];
-}
diff --git a/system/impermanence/mods/openssh.nix b/system/impermanence/mods/openssh.nix
deleted file mode 100644
index 0373a83..0000000
--- a/system/impermanence/mods/openssh.nix
+++ /dev/null
@@ -1,21 +0,0 @@
-{...}: {
- /*
- FIXME:
- This results in a boot error, as the `/var/lib/sshd` directory is only mounted _after_ the stage 2 init and with it the system activation.
- Agenix needs the sshd hostkey however to decrypt the secrets and such we have to ensure that this directory is mounted _before_ the system activation.
- Alas the only way I see to achieve that is to store the ssh hostkey directly on /srv, which is mounted before (it's marked as 'neededForBoot' after all).
-
- It should be possible to achieve this with impermanence however, as `/var/log` is mounted in the stage 1 init; The problem is that I have no idea _why_ only
- this is mounted and nothing else.
-
-
- environment.persistence."/srv".directories = [
- {
- directory = "/var/lib/sshd";
- user = "root";
- group = "root";
- mode = "0755";
- }
- ];
- */
-}
diff --git a/system/impermanence/mods/postgresql.nix b/system/impermanence/mods/postgresql.nix
deleted file mode 100644
index 63b02f5..0000000
--- a/system/impermanence/mods/postgresql.nix
+++ /dev/null
@@ -1,5 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- "/var/lib/postgresql"
- ];
-}
diff --git a/system/impermanence/mods/taskserver.nix b/system/impermanence/mods/taskserver.nix
deleted file mode 100644
index 9208aa4..0000000
--- a/system/impermanence/mods/taskserver.nix
+++ /dev/null
@@ -1,5 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- "/var/lib/taskserver"
- ];
-}
diff --git a/system/impermanence/mods/users.nix b/system/impermanence/mods/users.nix
deleted file mode 100644
index 897d4f7..0000000
--- a/system/impermanence/mods/users.nix
+++ /dev/null
@@ -1,34 +0,0 @@
-{...}: {
- environment.persistence."/srv".directories = [
- {
- directory = "/home";
- user = "root";
- group = "root";
- mode = "0755";
- }
- {
- directory = "/home/sils";
- user = "sils";
- group = "sils";
- mode = "0700";
- }
- {
- directory = "/home/soispha";
- user = "soispha";
- group = "soispha";
- mode = "0700";
- }
- {
- directory = "/home/nightingale";
- user = "nightingale";
- group = "nightingale";
- mode = "0700";
- }
- {
- directory = "/root/.ssh";
- user = "root";
- group = "root";
- mode = "0700";
- }
- ];
-}