Servers Configs#

Running#

Dependencies#

• nix with Flakes enabled
• ssh

Infrastructure#

Managed via Terraform

nix run .#tf -- -chdir=infra apply

TODO#

• Store Terraform plan in Terraform Cloud or other centralised solution with backup support
• Migrate from HCL files to Terranix to keep everything nicely managed by Nix
• Manage OVH firewall rules via Terraform (requires feature addition to OVH provider)
• Add Backblaze management

Server deployment#

Deploy using deploy-rs

nix run .

TODO#

• Configure automated backups to Backblaze

Secrets management#

First you need to define the public keys needed for decryption in secrets.nix and then do:

nix run .#agenix -- -e secrets/file.age

Description#

Services#

• heimdall - OVH VPS; running services:
  • IRC Bouncer (Soju)
  • RSS Reader (MiniFlux)
  • Chat Bridge (Matterbridge) - currently disabled
    • 4programmers: IRC <-> Discord
  • Email service (Stalwart)
  • Node monitoring (Netdata)
  • Pastebin (ubin)

Domains#

• hauleth.dev
• srebrna.space

TODO#

• Add niemier.pl here as well