gensokyo.zone's Infrastructure

Welcome to the Palace of the Earth Spirits!

Contribution Guidelines

Nix

• Please use alejandra as your source formatter.
• Please check for dead code paths with deadnix.
• Please use statix as your linter.

Terraform

• Please use terraform fmt to format your Terraform work.
• Please use tflint as your linter.
• Please do not merge into files by category (e.g. variables, outputs, locals).

Build and Deploy

The -s disables flake checks.

# without trace
deploy -s .#<hostname>
# with trace
deploy -s .#<hostname> -- --show-trace
# deploy a fresh container
deploy -s .#<hostname> --hostname ct.local

Editing Secrets

sops nixos/systems/tewi/secrets.yaml

Adding Hosts

nf-sops-keyscan <hostname>
# or on a fresh container...
nf-sops-keyscan ct.local
vim .sops.yaml
for nfsecret in access nix; do sops updatekeys nixos/secrets/$nfsecret.yaml; done

Updating

Terraform

nf-tf init -upgrade

Proxmox

Template

nf-tarball ct