Skip to content

gensokyo-zone/infrastructure

Repository files navigation

gensokyo.zone's Infrastructure

docs-badge

Welcome to the Palace of the Earth Spirits!

Contribution Guidelines

Nix

  • Please use alejandra as your source formatter.
  • Please check for dead code paths with deadnix.
  • Please use statix as your linter.

Terraform

  • Please use terraform fmt to format your Terraform work.
  • Please use tflint as your linter.
  • Please do not merge into files by category (e.g. variables, outputs, locals).

Build and Deploy

The -s disables flake checks.

# without trace
deploy -s .#<hostname>
# with trace
deploy -s .#<hostname> -- --show-trace
# deploy a fresh container
deploy -s .#<hostname> --hostname ct.local

Editing Secrets

sops nixos/systems/tewi/secrets.yaml

Adding Hosts

nf-sops-keyscan <hostname>
# or on a fresh container...
nf-sops-keyscan ct.local
vim .sops.yaml
for nfsecret in access nix; do sops updatekeys nixos/secrets/$nfsecret.yaml; done

Updating

Terraform

nf-tf init -upgrade

Proxmox

Template

nf-tarball ct