No description
  • Nix 86.3%
  • Shell 3.9%
  • HCL 3.6%
  • JavaScript 3.4%
  • Python 1.5%
  • Other 1.3%
Find a file
2026-10-06 22:30:43 +02:00
.github/workflows yolo 2025-08-03 00:33:53 +02:00
nix update 2026-10-06 22:30:43 +02:00
secrets-git-crypt more renames 2026-07-27 21:26:15 +02:00
tf-infra/aws no more contabo terraform 2024-08-02 18:21:18 +02:00
.envrc nix 2023-11-19 12:42:34 +01:00
.gitattributes move 2025-08-03 00:41:37 +02:00
.gitignore update 2026-10-06 21:29:15 +02:00
README.md move 2025-08-03 00:41:37 +02:00
shell.nix cook 2025-08-07 19:54:43 +02:00

new infra

New infra based on more servers and more shit.

All servers have their hostname as their name here and are reachable via $hostname.infra.noratrieb.dev. They will have different firewall configurations depending on their roles.

DNS

Two knot-dns nameservers (dns1, dns2). All records are fully static, generated in the NixOS config.

HTTP(S)

stuff.

provisioning

NixOS is provisioned by running nixos-infect over a default image.

Contabo sets the hostname to something like vmi######.contaboserver.net, Nixos only allows RFC 1035 compliant hostnames (see here). Run hostname something_without_dots before running the script. If you run the script before changing the hostname - remove the /etc/nixos/configuration.nix so it's regenerated with the new hostname.

hostname tmp
curl -LO https://raw.githubusercontent.com/elitak/nixos-infect/master/nixos-infect
bash nixos-infect