From b636b1d775de012fd5af866464680e30b6a5f072 Mon Sep 17 00:00:00 2001 From: Kumar Damani Date: Tue, 15 Sep 2026 13:32:35 -0400 Subject: monitoring config --- nix/README.md | 23 ++++++++++++++++++++--- 1 file changed, 20 insertions(+), 3 deletions(-) (limited to 'nix/README.md') diff --git a/nix/README.md b/nix/README.md index ab3a339..95cd4ac 100644 --- a/nix/README.md +++ b/nix/README.md @@ -38,15 +38,27 @@ tofu apply tfplan ## Add Host -Copy `per-host/` to `per-host/`. +Scaffold a new host (host keys, `.sops.yaml`, `flake.nix`, `per-host/`, secrets, TF VM if absent, `~/.ssh/config`, Hosts section) and print the exact cmds to create the VM and deploy: +```sh +./add.sh # interactive for cpu/mem/disk/vlan +./add.sh --cpu 1 --mem 1024 --disk 10G --vlan 30 +``` -Modify the `per-host//configuration.nix` accordingly. +Defaults for cpu/mem/disk/vlan are taken from `monitoring-2`. If the VM already exists in TF it is left alone. -Generate host-keys, and `age` key for the host. +The manual equivalent, if needed: ```sh ./generate-keys.sh + +cat ./host-keys//ssh_host_ed25519_key.pub | ssh-to-age ``` +Copy the `age` key to the `.sops.yaml` config. + +Copy `per-host/` to `per-host/`. + +Modify the `per-host//configuration.nix` accordingly. + ## Secrets w/ `sops` Edit the `.sops.yaml` to include the host's age key. @@ -171,3 +183,8 @@ sudo garage bucket create sudo garage bucket website --allow sudo garage key create site-uploader ``` + +### monitoring-2 + +For monitoring. + -- cgit v1.2.3