Nix Infra Config

Using colmena

Hosts

• bloodletting: Main server
• ritual: NixOS laptop

Manual setup on blank system/migrations

Bloodletting:

• colmena apply - deploy config
• passwd - set user passwords
• rsync state:
  • /var/lib:
    • acme/.lego
    • bin_rs
    • fail2ban
    • grafana
    • homepage
    • mastodon
      • dump and import Postgres and Redis DBs
    • matterbridge
    • mc-e2e
    • mc-enigmatica-8
    • mstdn-ebooks
    • nyandroid
    • prometheus2
  • /home/ftp

Ritual:

• colmena apply[-local] - deploy config
• mkdir -p ~/.gnupg - create directory for gnupg
• copy ~/.ssh/id_ed25519
• manual configuration/login:
  • Firefox
    • Copy extension data
  • Element
  • Telegram Desktop
  • Geary
  • Obsidian
  • Spicetify
    • Copy plugins/themes/patches

Rsyncd Modules

Modded minecraft instance rsync modules can be accessed through mc-[modpack]@bloodletting::mc-[modpack] with --rsh=ssh

Updating mastodon

eval "$(nix build --impure --expr 'let pkgs = import <nixpkgs> { }; in pkgs.callPackage ./update.nix {}' --no-link --print-out-paths)/bin/update.sh --ver <commit hash>"

Reference configs used

• https://github.com/Xe/nixos-configs
• https://git.nora.codes/nora/nixconfig