configuration for everything

Nixos Infrastructure for a hardware and software stack for small communication crews. We aim to build the bare bone on which one can add more.

We identify the minimum as:

1. three machines: a builder (a laptop or alike as the primary building machine aka the cockpit), a connector (reverse proxy, headscale and ldap host - all on a vps) and a worker (runs the services: does the heavy lifting)
2. software minimum: a wireguard mesh network, internal communication (xmpp) and external communication (gts), user and login management (lldap + dex)

hardware general prerequisits

• 3 computer
• a router
• internet connection

orchestrator

Prerequisits

some hardware. a pc a laptop.

installation

• install nixos
• pull nixos-config
• nixos-rebuild switch flake

usage

• create ssh key files
• password manager
• agenix setup

connector

A vps

Prerequisits

installation

1. git clone nixos anywhere example
2. add your pub key to configuration
3. run against your vps root@ip
4. log into server and get host key
5. rekey secrets with host key on local machine
6. push flake on target host

builder

A laptop

worker

a raspberry pi

prerequisits

1. the obivious
2. monitor and keyboard

installation

1. flash ssd with .img with latest sd-card/sd-image-raspberrypi.nix ( there are some options and some github projects that supply images, but it takes some research every other year which thing to flash)

2. boot machine with ssd

3. sudo loadkeys de

4. sudo systemctl start wpa_suplicant.service

5. passwd

6. configure wlan with wpa_cli

7. find ips in local network to ssh into pi nmap -sn 192.168.1.0/24

8. ssh into pi to get ssh_host_ed_ key

9. rekey agenix secrets

10. nixos-rebuild switch --target-host

11. rsync backup

12. restore backup

agenix

1. so much easier than sopsnix