fic/server
Archived
1
0
Fork 0
Code Issues Pull requests 10 Releases Wiki Activity

nixos: backend server

Browse source
This commit is contained in:
Antoine Thouvenin 2022-08-06 22:31:18 +02:00 • committed by Pierre-Olivier Mercier
commit 643ecb1e14
24 changed files with 542 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

39
nixos/backend/fic-synchro.nix Normal file
View file

@ -0,0 +1,39 @@
{ config, inputs, pkgs, ... }:
{
config.virtualisation.oci-containers.containers.fic-synchro =
{
image = "fic-synchro:latest";
imageFile = pkgs.dockerTools.buildImage {
name = "fic-synchro";
tag = "latest";
created = "now";
copyToRoot = pkgs.buildEnv {
name = "packagelist";
paths = [ pkgs.coreutils pkgs.openssh pkgs.rsync ];
};
config = {
Cmd = [ "${inputs.ficpkgs.packages.x86_64-linux.fic-synchro}/bin/synchro" ];
};
runAsRoot = ''
#!${pkgs.runtimeShell}
${pkgs.dockerTools.shadowSetup}
mkdir -p /tmp/
chmod a+rwx /tmp/
'';
};
autoStart = true;
extraOptions = [ "--network=phobos-lan" "--ip=172.18.0.43" ];
volumes = [
"/etc/hosts:/etc/hosts:ro"
"/var/lib/fic/ssh:/etc/ssh:ro"
"${config.sops.secrets.phobos_ssh.path}:/root/.ssh/id_ed25519:ro"
"/var/lib/fic/files:/srv/FILES:ro"
#"/var/lib/fic/pki/ca.key:/srv/PKI/ca.key:ro"
"/var/lib/fic/pki/shared:/srv/PKI/shared:ro"
"/var/lib/fic/settingsdist:/srv/SETTINGSDIST:ro"
"/var/lib/fic/submissions:/srv/submissions"
"/var/lib/fic/teams:/srv/TEAMS:ro"
"/var/log/frontend:/var/log/frontend"
];
};
}