mirror of
https://github.com/Swarsel/.dotfiles.git
synced 2025-12-06 09:07:21 +01:00
feat: add packer env wars for work
This commit is contained in:
parent
82e6ec9d64
commit
8c58ff78fe
5 changed files with 77 additions and 0 deletions
|
|
@ -1807,6 +1807,7 @@ My work machine. Built for more security, this is the gold standard of my config
|
||||||
{ command = "nm-applet"; }
|
{ command = "nm-applet"; }
|
||||||
{ command = "teams-for-linux"; }
|
{ command = "teams-for-linux"; }
|
||||||
{ command = "1password"; }
|
{ command = "1password"; }
|
||||||
|
{ command = "feishin"; }
|
||||||
];
|
];
|
||||||
sharescreen = "eDP-2";
|
sharescreen = "eDP-2";
|
||||||
monitors = {
|
monitors = {
|
||||||
|
|
@ -6731,6 +6732,8 @@ Options that I need specifically at work. There are more options at [[#h:f0b2ea9
|
||||||
export DCAD="$(cat ${config.sops.secrets.dcad.path})"
|
export DCAD="$(cat ${config.sops.secrets.dcad.path})"
|
||||||
export WSAD="$(cat ${config.sops.secrets.wsad.path})"
|
export WSAD="$(cat ${config.sops.secrets.wsad.path})"
|
||||||
export IMBAD="$(cat ${config.sops.secrets.imbad.path})"
|
export IMBAD="$(cat ${config.sops.secrets.imbad.path})"
|
||||||
|
export DCUSER="dc_adm_schwarzaeugl@IMP.UNIVIE.AC.AT"
|
||||||
|
export PACKER_SSH_EXTRA_ARGS='"--scp-extra-args"',"\"'-O'\""
|
||||||
'';
|
'';
|
||||||
|
|
||||||
browserpass.enable = true;
|
browserpass.enable = true;
|
||||||
|
|
@ -9258,6 +9261,20 @@ The rest of the settings is at [[#h:bbf2ecb6-c8ff-4462-b5d5-d45b28604ddf][work]]
|
||||||
programs = {
|
programs = {
|
||||||
git.userEmail = "leon.schwarzaeugl@imba.oeaw.ac.at";
|
git.userEmail = "leon.schwarzaeugl@imba.oeaw.ac.at";
|
||||||
|
|
||||||
|
zsh = {
|
||||||
|
cdpath = [
|
||||||
|
"~/Documents/Work"
|
||||||
|
];
|
||||||
|
dirHashes = {
|
||||||
|
d = "$HOME/.dotfiles";
|
||||||
|
w = "$HOME/Documents/Work";
|
||||||
|
s = "$HOME/.dotfiles/secrets";
|
||||||
|
pr = "$HOME/Documents/Private";
|
||||||
|
ac = "$HOME/.ansible/collections/ansible_collections/vbc/linux/roles";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
|
||||||
ssh = {
|
ssh = {
|
||||||
matchBlocks = {
|
matchBlocks = {
|
||||||
"uc" = {
|
"uc" = {
|
||||||
|
|
|
||||||
|
|
@ -94,6 +94,7 @@
|
||||||
{ command = "nm-applet"; }
|
{ command = "nm-applet"; }
|
||||||
{ command = "teams-for-linux"; }
|
{ command = "teams-for-linux"; }
|
||||||
{ command = "1password"; }
|
{ command = "1password"; }
|
||||||
|
{ command = "feishin"; }
|
||||||
];
|
];
|
||||||
sharescreen = "eDP-2";
|
sharescreen = "eDP-2";
|
||||||
monitors = {
|
monitors = {
|
||||||
|
|
|
||||||
|
|
@ -12,6 +12,20 @@
|
||||||
programs = {
|
programs = {
|
||||||
git.userEmail = "leon.schwarzaeugl@imba.oeaw.ac.at";
|
git.userEmail = "leon.schwarzaeugl@imba.oeaw.ac.at";
|
||||||
|
|
||||||
|
zsh = {
|
||||||
|
cdpath = [
|
||||||
|
"~/Documents/Work"
|
||||||
|
];
|
||||||
|
dirHashes = {
|
||||||
|
d = "$HOME/.dotfiles";
|
||||||
|
w = "$HOME/Documents/Work";
|
||||||
|
s = "$HOME/.dotfiles/secrets";
|
||||||
|
pr = "$HOME/Documents/Private";
|
||||||
|
ac = "$HOME/.ansible/collections/ansible_collections/vbc/linux/roles";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
|
||||||
ssh = {
|
ssh = {
|
||||||
matchBlocks = {
|
matchBlocks = {
|
||||||
"uc" = {
|
"uc" = {
|
||||||
|
|
|
||||||
|
|
@ -28,6 +28,8 @@
|
||||||
export DCAD="$(cat ${config.sops.secrets.dcad.path})"
|
export DCAD="$(cat ${config.sops.secrets.dcad.path})"
|
||||||
export WSAD="$(cat ${config.sops.secrets.wsad.path})"
|
export WSAD="$(cat ${config.sops.secrets.wsad.path})"
|
||||||
export IMBAD="$(cat ${config.sops.secrets.imbad.path})"
|
export IMBAD="$(cat ${config.sops.secrets.imbad.path})"
|
||||||
|
export DCUSER="dc_adm_schwarzaeugl@IMP.UNIVIE.AC.AT"
|
||||||
|
export PACKER_SSH_EXTRA_ARGS='"--scp-extra-args"',"\"'-O'\""
|
||||||
'';
|
'';
|
||||||
|
|
||||||
browserpass.enable = true;
|
browserpass.enable = true;
|
||||||
|
|
|
||||||
43
profiles/server/common/monitoring.nix
Normal file
43
profiles/server/common/monitoring.nix
Normal file
|
|
@ -0,0 +1,43 @@
|
||||||
|
{ pkgs, lib, config, ... }:
|
||||||
|
{
|
||||||
|
config = lib.mkIf config.swarselsystems.server.monitoring {
|
||||||
|
|
||||||
|
sops.secrets = {
|
||||||
|
grafanaadminpass = {
|
||||||
|
owner = "grafana";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
users.users.grafana = {
|
||||||
|
extraGroups = [ "users" ];
|
||||||
|
};
|
||||||
|
|
||||||
|
services.grafana = {
|
||||||
|
enable = true;
|
||||||
|
dataDir = "/Vault/data/grafana";
|
||||||
|
admin_password = "$__file{/run/secrets/grafanaadminpass}";
|
||||||
|
settings = {
|
||||||
|
http_port = 3000;
|
||||||
|
http_addr = "127.0.0.1";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
services.nginx = {
|
||||||
|
virtualHosts = {
|
||||||
|
"status.swarsel.win" = {
|
||||||
|
enableACME = true;
|
||||||
|
forceSSL = true;
|
||||||
|
acmeRoot = null;
|
||||||
|
locations = {
|
||||||
|
"/" = {
|
||||||
|
proxyPass = "http://localhost:3000/";
|
||||||
|
extraConfig = ''
|
||||||
|
client_max_body_size 0;
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
}
|
||||||
Loading…
Add table
Add a link
Reference in a new issue