mirror of
https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git
synced 2024-12-04 03:20:07 +01:00
Felix Albrigtsen
55e8f01d1d
This PR is made while moving Ildkule from PVE on joshua, to Openstack on stack.it.ntnu.no. - The main monitoring dashboard is moved from https://ildkule.pvv.ntnu.no to https://grafana.pvv.ntnu.no. - A new service is added: uptime-kuma on https://uptime.pvv.ntnu.no. - The (hardware) configuration for ildkule is updated to fit the new virtualization environment, boot loader, network interfaces, etc. - Metrics exporters on other hosts should be updated to allow connections from the new host As this is the first proper server running on openstack, and therefore outside our main IP range, we might discover challenges in our network structure. For example, the database servers usually only allow connections from this range, so Ildkule can no longer access it. This should be explored, documented and/or fixed as we move more services. Reviewed-on: https://git.pvv.ntnu.no/Drift/pvv-nixos-config/pulls/36 Co-authored-by: Felix Albrigtsen <felix@albrigtsen.it> Co-committed-by: Felix Albrigtsen <felix@albrigtsen.it>
63 lines
1.5 KiB
YAML
63 lines
1.5 KiB
YAML
keys:
|
|
# Users
|
|
- &user_danio age17tagmpwqjk3mdy45rfesrfey6h863x8wfq38wh33tkrlrywxducs0k6tpq
|
|
- &user_felixalb age1mrnldl334l2nszuta6ywvewng0fswv2dz9l5g4qcwe3nj4yxf92qjskdx6
|
|
- &user_oysteikt F7D37890228A907440E1FD4846B9228E814A2AAC
|
|
- &user_eirikwit age1ju7rd26llahz3g8tz7cy5ld52swj8gsmg0flrmrxngc0nj0avq3ssh0sn5
|
|
|
|
# Hosts
|
|
- &host_jokum age1gp8ye4g2mmw3may5xg0zsy7mm04glfz3788mmdx9cvcsdxs9hg0s0cc9kt
|
|
- &host_ildkule age1x28hmzvuv6f2n66c0jtqcca3h9rput8d7j5uek6jcpx8n9egd52sqpejq0
|
|
- &host_bekkalokk age12nj59tguy9wg882updc2vjdusx5srnxmjyfaqve4zx6jnnsaw3qsyjq6zd
|
|
- &host_bicep age1sl43gc9cw939z5tgha2lpwf0xxxgcnlw7w4xem4sqgmt2pt264vq0dmwx2
|
|
|
|
creation_rules:
|
|
# Global secrets
|
|
- path_regex: secrets/[^/]+\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *host_jokum
|
|
- *user_danio
|
|
- *user_felixalb
|
|
- *user_eirikwit
|
|
pgp:
|
|
- *user_oysteikt
|
|
|
|
# Host specific secrets
|
|
|
|
- path_regex: secrets/bekkalokk/[^/]+\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *host_bekkalokk
|
|
- *user_danio
|
|
- *user_felixalb
|
|
pgp:
|
|
- *user_oysteikt
|
|
|
|
- path_regex: secrets/jokum/[^/]+\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *host_jokum
|
|
- *user_danio
|
|
- *user_felixalb
|
|
pgp:
|
|
- *user_oysteikt
|
|
|
|
- path_regex: secrets/ildkule/[^/]+\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *host_ildkule
|
|
- *user_danio
|
|
- *user_felixalb
|
|
pgp:
|
|
- *user_oysteikt
|
|
|
|
- path_regex: secrets/bicep/[^/]+\.yaml$
|
|
key_groups:
|
|
- age:
|
|
- *host_bicep
|
|
- *user_danio
|
|
- *user_felixalb
|
|
pgp:
|
|
- *user_oysteikt
|