🔧 aristotle: move to raspberry-pi-nix

also re-deployed form, matter and purpose
2024-09-15 20:35:46 -04:00
parent 8b57a7580a
commit 6d38e964e3
11 changed files with 290 additions and 95 deletions
--- a/nix/hosts.nix
+++ b/nix/hosts.nix
@ -19,19 +19,19 @@
  };
  form = {
    type = "nixos";
-    address = "100.87.220.71";
+    address = "100.104.247.27";
    system = "aarch64-linux";
    sshUser = "root";
  };
  matter = {
    type = "nixos";
-    address = "100.126.255.109";
+    address = "100.95.77.67";
    system = "aarch64-linux";
    sshUser = "root";
  };
  purpose = {
    type = "nixos";
-    address = "100.74.59.80";
+    address = "100.117.49.15";
    system = "aarch64-linux";
    sshUser = "root";
  };
--- a/nix/hosts/aristotle/configuration.nix
+++ b/nix/hosts/aristotle/configuration.nix
@ -1,18 +1,26 @@
-{ pkgs, nixos-hardware, ... }:
+{ pkgs, raspberry-pi-nix, ... }:

 {
  imports = [
    # Include the results of the hardware scan.
    ./hardware-configuration.nix
-    nixos-hardware.nixosModules.raspberry-pi-4
    ../../modules/base/nixos.nix
-
+    raspberry-pi-nix.nixosModules.raspberry-pi
    ../../modules/ipfs/cluster.nix
    ../../modules/sops
  ];

-  hardware = {
-    raspberry-pi."4".poe-hat.enable = true;
+  raspberry-pi-nix.board = "bcm2711";
+  hardware.raspberry-pi.config = {
+    all = {
+      dt-overlays = {
+        rpi-poe = {
+          enable = true;
+          params = { };
+        };
+
+      };
+    };
  };

  time.timeZone = "America/Toronto";
@ -34,4 +42,5 @@
  ];

  environment.systemPackages = with pkgs; [ libraspberrypi raspberrypi-eeprom ];
+  security.sudo.wheelNeedsPassword = false;
 }
--- a/nix/modules/base/common.nix
+++ b/nix/modules/base/common.nix
@ -13,12 +13,12 @@ _:
    settings = {
      substituters = [
        "https://walkah.cachix.org"
-        "https://cache.garnix.io"
+        "https://nix-community.cachix.org"
      ];

      trusted-public-keys = [
        "walkah.cachix.org-1:D8cO78JoJC6UPV1ZMgd1V5znpk3jNUERGIeAKN15hxo="
-        "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
+        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
      ];
    };
  };
--- a/nix/modules/base/nixos.nix
+++ b/nix/modules/base/nixos.nix
@ -1,7 +1,11 @@
-{ config, pkgs, ... }: {
+{ pkgs, ... }: {

  imports = [ ./common.nix ../monitoring ../../users ];

+  documentation = {
+    enable = false;
+  };
+
  environment.systemPackages = with pkgs; [
    htop
    inetutils
@ -32,12 +36,6 @@
  };

  system = {
-    autoUpgrade = {
-      enable = true;
-      flake = "github:walkah/athens#${config.networking.hostName}";
-      dates = "daily";
-      randomizedDelaySec = "5m";
-    };
    stateVersion = "23.05";
  };
 }
--- a/nix/modules/coredns/walkah.lab.zone
+++ b/nix/modules/coredns/walkah.lab.zone
@ -11,9 +11,9 @@ socrates        IN A    100.103.57.96
 plato           IN A    100.111.208.75
 ; aristotle
 agent           IN A    100.95.167.126
-form            IN A    100.87.220.71
-matter          IN A    100.126.255.109
-purpose         IN A    100.74.59.80
+form            IN A    100.104.247.27
+matter          IN A    100.95.77.67
+purpose         IN A    100.117.49.15

 parthenon       IN A    100.106.65.39
 epicurus        IN A    100.66.26.116
--- a/nix/modules/ipfs/gateway.nix
+++ b/nix/modules/ipfs/gateway.nix
@ -7,18 +7,18 @@ let
      Addrs = [ "/ip4/100.95.167.126/tcp/4001" ];
    }
    {
-      ID = "12D3KooWMqSiDukubKNKrK7J4PaF3mfNnZFVAd3Lh7qj3Y3e5bcN";
-      Addrs = [ "/ip4/100.87.220.71/tcp/4001" ];
+      ID = "12D3KooWC5ncgKeJV2G6QBdGMkT2gLbeviaDxpYR7V6NVTsma3C5";
+      Addrs = [ "/ip4/100.104.247.27/tcp/4001" ];

    }
    {
-      ID = "12D3KooWGmNRyqP969QbyP8NLVRZNK2i6yCcP6N6N2r2DCG4H34v";
-      Addrs = [ "/ip4/100.126.255.109/tcp/4001" ];
+      ID = "12D3KooW9xeqfnnNWafiDkLXWjC5YdUnBrG5tJDd3tnm86kqVwhA";
+      Addrs = [ "/ip4/100.95.77.67/tcp/4001" ];

    }
    {
-      ID = "12D3KooWFkR8nsG5pzffoAfMzmwBcSakXxnogVa6inRxUbpfN5ua";
-      Addrs = [ "/ip4/100.74.59.80/tcp/4001" ];
+      ID = "12D3KooWLYPckqA4JACJ4vioWc4tYuPjmfLMbgviECnWqazjSgK9";
+      Addrs = [ "/ip4/100.117.49.15/tcp/4001" ];

    }
  ];
--- a/nix/nixos.nix
+++ b/nix/nixos.nix
@ -1,4 +1,4 @@
-{ self, nixpkgs, home-manager, nixos-hardware, sops-nix, ... }:
+{ self, nixpkgs, home-manager, raspberry-pi-nix, sops-nix, ... }:
 let
  mkSystem = hostName: modules:
    let
@ -14,7 +14,7 @@ let
          nixpkgs.config.allowUnfree = true;
        })
      ] ++ modules;
-      specialArgs = { inherit nixos-hardware sops-nix; };
+      specialArgs = { inherit raspberry-pi-nix sops-nix; };
    };
 in
 {
--- a/nix/secrets/secrets.yaml
+++ b/nix/secrets/secrets.yaml
@ -19,68 +19,68 @@ sops:
        - recipient: age16yv7atd8n880ja98pksqqvunu2yw00660lkh4n0sg39j5vt3dujshyu95j
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPZlFKbFY4YjNnN3hhNTNw
-            V1N0ZVh6ZDJrSng4M1pBMWxqZTJmcUJLWUdNCm55K2RpVSs0NHNGK1F4K28xTk9q
-            UHVESitPSEs2eEZCT3RreWpVam80ZmMKLS0tIHJ4Q3pHOFVTOStBUGprR0FvRHhl
-            VzhmT3BzYy8veHhaZUtUSmxCZDh5V1kKsjFBNoqtUD44d8ImP/DcvS+gBkQJi/Vt
-            0NlkRRhWndFGss6gkcf7aIObHw9kAlU6RsspJt5Wte6ZLHj3eATkfA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6M1FuWHpaR2paWW00aFh4
+            UjcxYmxWRUNSYmI5bUFYZkpUN2dRNFFiNG5vCnQzcTRTSHJndWNoR3dqamlGMWNs
+            RU1IM2llN21nOFgxRk5naW8zaktkSWsKLS0tIGVidlRrUi9ZaVBKUUhpTFJYTjFC
+            TXRqc0tVcVlpNnJ3dWo0eGF6UG1TcEkK9I7E1rfAkG0wdh9MIRYZ3awVVFjPBY6c
+            Faf++fAT90TmkYJht7h0GVel23GXyL5FTUzDraI0xKQqrhyFjYiThQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age12m47c7xvqttncps0e79pwamzqa4nmnxekwumtwcv5ju6q74fufaqp9d0xh
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTbVlQY1kzb3RxZG90RWlG
-            eUNBZlZPNUhEZXBqcFFUdTVXWUgyOFllMjB3Cm9lS09tdXZuYmpzUWJDSnI1OTlG
-            NDBlcWFBSDg3UnB2YVlMRUduTXZsaUUKLS0tIFkwTWxRNnVER3g1VVYzbURKM2ha
-            b09tcStFNWlrRVdBSFhZMVRaYkFGSE0KeHfPNNADsP6v0H9PihaKEDXWjun8ORsb
-            uQKLTz8wKTUk8JIFfY1g5iUqNxG+XvOQrSx/8Cepz+h/2sn3sAcaXw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxS3ZvMUw4YllOTmExZlJY
+            SzE5MzI2Rm5WWWM0cmpjWW1KS0p1czNBWnk0Cjd4aFlkOWducnY1b3VJUlhvOWh4
+            N2NrSE9MdERtc3V1K1owc0hqZ3R3MzAKLS0tIGFhajdJSTh6dkNuZ0ZsLzQ2U3By
+            R3ZyN3lFeU14eTF4dVQyUDgraWRqekkKaww2hwqRj86QIJ+NvjHftRRz2kfxOj1C
+            5i9+ArHXL02flDmfcpSMsmp7yiS5z+imWdrp8x1LoHDggfCIdca6zg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1vc8svd5277rjkgzg7frf04uaa45w3crhfvg628rqyrqmxul3q9nsjz6yxk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuWFYzS1B1NVZBZDFNTXRv
-            TS9EOUd5Umw2c2pmUmhzb0ViUUsrZTBNQ0JnClZvajN4ODNYME11aXFiSmxZUlV3
-            eDlhTWFxSkF1UWlGVS9jZkk2SmlsKzQKLS0tIGE0TmNucGNiV2VJV1FnZmw4TEJy
-            aHpTLzdFeGZ6MVkzTmRjZit0U1I0Zk0Kd6DJlpqsqwwlAXC8Tl0AhijCQ8gHtFwX
-            VeTC0PsUdMxEoTq3mg4aM0M5AML4txDKRpFH4XkH9G6lgU9hNebXUA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrMGQvWFUzbWpvQ3ZqVkpH
+            eWlRbjVoT2IvajBGalc2c0pkazNmTFRDTjB3ClpHMGo4VitGZlpaVktGaVpEdVR4
+            SGZxS0YxTlpGQmZGQk9PdGFvZnk5TEEKLS0tIElIeFJDQUM1eHZ6OXVhc0piOUE4
+            SVJWYkhUa2dlWHc4ZDlDWTBYY0xCckUKG+4qRNI0YkJugyB+CDZ2Jq3dmOTBBYax
+            SM4vUNWT8VC8IIFMjlPz8dx905KYHm2N+l3d+o6ZpwpFMySiiWET8w==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1ulmzprdmcd8r0w47a0nrrlg8melkjk6evl2rc54yh6lxkcfas36q6wrsv9
+        - recipient: age1mnrl9u8vpdjncge33pg7quakl0qdf5dlfgch87jhrs0wrvup4s0s5xh7ly
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyS21pT3U4R3pjU255QVdV
-            NXgrTDhVT3IvVVQ4N051TkdFT3NJMWozRFhvCnloNmRROTdMZHpkSDB6L25vVWlX
-            RWNTM2czYmNKcUI5NTVZdmwvRWhmQ00KLS0tIElJTmI4aC9xVHk4dHF4cWtEQ0RQ
-            VTJzUUtIaklZVVVNS3JLOWZSbXJYWDgKHcnC1EQ9qSfCgnoNPUa1/fTWJd8zhSAA
-            +5aMUt6Ff4FF3I3e+CIbbTHZdpjgLoO3BgAYFMwn7iImjGDYTuSHQA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGRFJuRWJNTVJWRWlmTDhr
+            Z212S1ZoMUVhOHo0ajViaXU5aWJrbjFHK1ZJCjRnVVlEb2xLTk1Vdjk0dGtTL0s4
+            NzBmRDNOSktRdnRLbkZjY1lsdE9NdTAKLS0tIHlGbHNIa052VHUxQ2Nwd0Jwc1FX
+            VGZUWlduOUNlYkd5eXlQSm5iL0FiZWMKUUUNLHUk/5QuRYeV6TKdLAQ9hgZhVi0q
+            u6j+PwxaQbtuPw4wZxWsbz1xVjSvMH0IgCR7FFWC+MtTA5ilYKM1HQ==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1lfjkch3pqaq3uwmjxyucpm2tws6llxqqjglj4yn49jkwkf50xvmqrl974e
+        - recipient: age1tt0gwcm03zmpelerpph49knn8f6t8z7aq9una2qys76kf4rwxpnquxkvz3
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiR1JnZzhpQzdYTll5cFhQ
-            em83Zjh0TjhIZmhRd3hHTVkwendPNzFNMUZJClNqb08vQjVTdjgvblN2YTJsOGZM
-            VU1udXh1NmFOS284ZFJQanNQN1JGbUkKLS0tICtla1RRdHo0TE54bm1YUGJ0R3Jw
-            WTdQMXdFMFJidTFyY3o3a080MUU0c3MKtG/7ruQyF9g++O3YHAhJO8MzflCtjYw3
-            HgzCF68X14ow/47/oKOPjlM19L8lO4a/sDtQ5RevDWn/+RQLY8mUlQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmSHBWQ05wd0c0czFuc25H
+            dm1JWjdhRVFyTGxKZXZ3TWZheXR4cHpQdmpnClo5ZGNjWHMvbXpNRzMzUHZURVAr
+            RkZZdXZhYytWQmY3N2Z1cDFzY1cvNzgKLS0tIHRzVk83TEprQzRxWm13MFEvUW1X
+            dUQxMkZzcHRuVFZBRTFlOUg3Q2Eyd2MK+th7D9b4pQ08yiM3y0sYfSZNZ0Xlrk3f
+            fOoiUnWS/5be4LDoyUq90liULdKMi2QueymhIikoxNY8wRRbPoOm2Q==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1jnf94uq5ap96vk7nfk3qkr38ylhletc6pskj0ypc470d7gmt0qeqskdy5z
+        - recipient: age1px55dk5n3whfdyshzyxqmyjvqdmv9au6myx6w67jw3cqp9sdx9rsa6xep9
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPKzB6a0pyUTRWeExLaUFu
-            NzlsaEFDNFdkUFZQbmFiTDRObFIrZjBmd1dnCnBqa2l5N01CZ3Voay9vTTgyRmtk
-            V0JYM3NwVVlBVWwxS2o1QVpKSE9SRk0KLS0tIGNaWGxoczh0UG4wOGY1azlnWEtm
-            VGh2SVVSMDh5VnBoOWc1Mi92R1hPLzAKaCkUGHbc1rR6vMZX97cqH4OLhyM+MmMc
-            jPJ2pbrmdZwjHmBVhZUHb+Ow8x8lyERW6Z1mbr1F6eEd5of6dVJ23w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwSHlnUk52bWJPUDVZNHhO
+            RTJjNHV1dHV1UkE3YmFXYUhOYkQ5RE0zWHo4CjdLSlZSd1EvdjNid1hMK0hpY1d1
+            bCt2Tk5uc0c0QUNCR0FNeGJsR2FiZDgKLS0tIDU1bXpTcUxYeWVQQTNTdUxhNXN4
+            UjIwdzZzc2RZS3M0VmhBb1lFUndDK2cK/bkEC3QvBdIuI4fEznatzrXpUES+PHyJ
+            njWmB18AW6VhJnVHP11ejV3zTT8cYPrEwp6ZJjhIW2UoSbkrC2FYAg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age12wakcnv487c5rkgv7z6umzywrqwcy6dgguq0dug6lxp64scjsq6sspkmgz
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4UzQ0OFBPZ1BFY0VGSHNF
-            V0tpTFZIdkVtbHE2RkVSZ2lqYi95eGwzbW5jCm9BS0tLZDhwRGhIRExNTjVvVDNy
-            RzUwWmdBMEUyMUpQSWhKK21ZWUNPeEUKLS0tIG9KdlpXaDFLckVhVlBQaWJxeVJm
-            dFZacUhiZDFxK0xZMDJJeCtQUmtuSGcKVz2TOsyw5F4mpFgbZnkWPjQPB7nSKkzd
-            96r8RHs8CrlSpBUP6TG6Q+Tz77G1XIgcZrN9EVyYCQB7zOukIdZ5zw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtbFoybE5OMzlsbHlaL1NT
+            TFpjRndsRHhldXJRQmcvZmpmYVMyN01maHdZCjZNVHZjRmU4WS9lRkNkYkxpWXZ5
+            VlEwSDB0bzRwM3hienBvTUE3UVlDUjgKLS0tIFY2blRpRlhTMWhoZ0JSS0VMc0pX
+            Y0FJMjh3NGtlanIvNHZRMjZUeTQ0UFkKrsGGcBSvc8N6ZzBBD+45pQQXcdcq4qeg
+            NqmipWnKmwSYXo7pCalEUn9Re0Lh2fIYjXLRIf5tseS3SNurn0Eegw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-08-25T17:15:30Z"
-    mac: ENC[AES256_GCM,data:ZvvD8D4Lv3vbz4Le5/aUjlRbKA3Iqr7f6hSPBRg7t4+3ohBkOn1HMV8UjXUt8ixnUBTAw4/FfT0nzGKB9p2dzRGif8mPB85y//ZPUfQ6DDfUp7gZkMlo5Dnr2rvNQDoFH3bb+L99UDqh9UYUp3SkGnR0VXF1TfUOoCfu0hfzzDo=,iv:onc7AXgH9K6Qxjur6MBRdCdtJcrP6TGtTNdZll9grrQ=,tag:7PjPlc4W4Xrk3M1WckXoqg==,type:str]
+    lastmodified: "2024-09-15T21:21:18Z"
+    mac: ENC[AES256_GCM,data:d9w1fqaPnPyObVNUlSEdCFsBf+oOgM9HNnjhFuEp7Jy0xTKxLqHKieecw5phnCUOYj9H87/oSB8q8QAkg5CGMf0yV2T/V1SHYb2cS53sTvG4l2Ladg1W6r4GpI7fJ7hO/NRbzuY5YR/51AZ3y1z2VO8UqVQSxb5WbrhVQyqgpME=,iv:QY4Grz4LKQ0IucxLEL3D9BwgVo2vmDNl/VIJITqg+EM=,tag:PfnKXp15Q5iB/ImtARgtCw==,type:str]
    pgp: []
    unencrypted_suffix: _unencrypted
    version: 3.9.0