From 3bcd28ab5d1c06a6cc06cdd188150c6f8ea293f8 Mon Sep 17 00:00:00 2001 From: James Eversole Date: Mon, 26 Jun 2023 13:49:58 -0500 Subject: [PATCH] Enable minio server --- flake.lock | 129 +++++++++++++++++++++++++++++++++++++++++ flake.nix | 8 +++ secrets.nix | 3 + secrets/minio_root.age | Bin 0 -> 525 bytes 4 files changed, 140 insertions(+) create mode 100644 secrets/minio_root.age diff --git a/flake.lock b/flake.lock index 5f0c66a..8adbe27 100644 --- a/flake.lock +++ b/flake.lock @@ -22,6 +22,91 @@ "type": "github" } }, + "attic": { + "inputs": { + "crane": "crane", + "flake-compat": "flake-compat", + "flake-utils": "flake-utils", + "nixpkgs": [ + "nixpkgs" + ], + "nixpkgs-stable": "nixpkgs-stable" + }, + "locked": { + "lastModified": 1686620679, + "narHash": "sha256-Ck/r3f+W9mOn3cHn5ii/fogBiJtosFnDaOQveaJ0zVU=", + "owner": "zhaofengli", + "repo": "attic", + "rev": "4fedffe6a1020edfcfa7bef18d21321d4983b3a7", + "type": "github" + }, + "original": { + "owner": "zhaofengli", + "repo": "attic", + "type": "github" + } + }, + "crane": { + "inputs": { + "flake-compat": [ + "attic", + "flake-compat" + ], + "flake-utils": [ + "attic", + "flake-utils" + ], + "nixpkgs": [ + "attic", + "nixpkgs" + ], + "rust-overlay": "rust-overlay" + }, + "locked": { + "lastModified": 1677892403, + "narHash": "sha256-/Wi0L1spSWLFj+UQxN3j0mPYMoc7ZoAujpUF/juFVII=", + "owner": "ipetkov", + "repo": "crane", + "rev": "105e27adb70a9890986b6d543a67761cbc1964a2", + "type": "github" + }, + "original": { + "owner": "ipetkov", + "repo": "crane", + "type": "github" + } + }, + "flake-compat": { + "flake": false, + "locked": { + "lastModified": 1673956053, + "narHash": "sha256-4gtG9iQuiKITOjNQQeQIpoIB6b16fm+504Ch3sNKLd8=", + "owner": "edolstra", + "repo": "flake-compat", + "rev": "35bb57c0c8d8b62bbfd284272c928ceb64ddbde9", + "type": "github" + }, + "original": { + "owner": "edolstra", + "repo": "flake-compat", + "type": "github" + } + }, + "flake-utils": { + "locked": { + "lastModified": 1667395993, + "narHash": "sha256-nuEHfE/LcWyuSWnS8t12N1wc105Qtau+/OdUAjtQ0rA=", + "owner": "numtide", + "repo": "flake-utils", + "rev": "5aed5285a952e0b949eb3ba02c12fa4fcfef535f", + "type": "github" + }, + "original": { + "owner": "numtide", + "repo": "flake-utils", + "type": "github" + } + }, "home-manager": { "inputs": { "nixpkgs": [ @@ -58,11 +143,55 @@ "type": "indirect" } }, + "nixpkgs-stable": { + "locked": { + "lastModified": 1685004253, + "narHash": "sha256-AbVL1nN/TDicUQ5wXZ8xdLERxz/eJr7+o8lqkIOVuaE=", + "owner": "NixOS", + "repo": "nixpkgs", + "rev": "3e01645c40b92d29f3ae76344a6d654986a91a91", + "type": "github" + }, + "original": { + "owner": "NixOS", + "ref": "nixos-23.05", + "repo": "nixpkgs", + "type": "github" + } + }, "root": { "inputs": { "agenix": "agenix", + "attic": "attic", "nixpkgs": "nixpkgs" } + }, + "rust-overlay": { + "inputs": { + "flake-utils": [ + "attic", + "crane", + "flake-utils" + ], + "nixpkgs": [ + "attic", + "crane", + "nixpkgs" + ] + }, + "locked": { + "lastModified": 1675391458, + "narHash": "sha256-ukDKZw922BnK5ohL9LhwtaDAdCsJL7L6ScNEyF1lO9w=", + "owner": "oxalica", + "repo": "rust-overlay", + "rev": "383a4acfd11d778d5c2efcf28376cbd845eeaedf", + "type": "github" + }, + "original": { + "owner": "oxalica", + "repo": "rust-overlay", + "type": "github" + } } }, "root": "root", diff --git a/flake.nix b/flake.nix index 648a79b..e8f83db 100644 --- a/flake.nix +++ b/flake.nix @@ -107,6 +107,13 @@ notificationSender = "hydra@matri.cx"; buildMachinesFiles = [ ]; }; + + minio = { + enable = true; + listenAddress = ":9000"; + rootCredentialsFile = + self.nixosConfigurations.eve-psr-nix0.config.age.secrets.minio_root.path; + }; }; virtualisation = { @@ -139,6 +146,7 @@ secrets = { attic_token.file = ./secrets/attic_token.age; keys.file = ./secrets/keys.age; + minio_root.file = ./secrets/minio_root.age; sezycei.file = ./secrets/sezycei.age; }; }; diff --git a/secrets.nix b/secrets.nix index 6374f72..fb2ed5b 100644 --- a/secrets.nix +++ b/secrets.nix @@ -10,6 +10,9 @@ in "secrets/keys.age" = { publicKeys = all; }; + "secrets/minio_root.age" = { + publicKeys = all; + }; "secrets/sezycei.age" = { publicKeys = all; }; diff --git a/secrets/minio_root.age b/secrets/minio_root.age new file mode 100644 index 0000000000000000000000000000000000000000..9d3d9ee2228f2e620847eb09399e6434f675b948 GIT binary patch literal 525 zcmZ9_JB!l*003Y&y=*?<)^H$#B{oT$CRNZjcX>8xlWUuoASBH@y`)W=Lv(oavtd9<{~amA~-nc;?3gVV|D-FGd%}#;#pcPRzVWqN>Z;`AOLh1%rYNxY!t(g zE@;a*OqXDu@U0q!J$cGTdzr7pWl^xa<&Yg_CC|csh1<$D&X2i}0{EdhCy+%nW|S`D zjv8o$38mFUj27%oVpY)-ifP2{-$H-k$Y#sgiL6zzscEpgp%SH#qo%!(>0Z<1(X zmu4hs>6IoWP&K~pHynk5*Wu4c=~2^LkLi1T5rrtrV5&T6aI z6Cf{j%*+A9DY@F`K{o=I5+LtzzOSxo6!CXitE26pvlI>uIwBi9QH@v`H?h#tQgV>X zlCW?8g;fqWG^$fe8WA=DNuu4*?^C8z&W8?P2HRw3FwW_?V|MrSf<}!wml0%@NVV-v zk+LrX5Cnm#;O4oJMOw8`brs1xpHKRN#fnPcIs+^ZBu`XZ2`=k(R_m!qw#?>0xr<&Bf4#P=6J4xgQDz3w6F+n