introduce lego-router

Signed-off-by: iosmanthus <[email protected]>
iosmanthus · May 7, 2024 · 1d9f746 · 1d9f746
1 parent af724bb
commit 1d9f746
Show file tree

Hide file tree

Showing 71 changed files with 1,104 additions and 471 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -199,22 +199,10 @@
             self.nixosModules.atuin
             self.nixosModules.cloud.aws-lightsail
             self.nixosModules.cloud.sing-box
+            self.nixosModules.gemini-openai-proxy
             self.nixosModules.o11y
             self.nixosModules.subgen
 
-            home-manager.nixosModules.home-manager
-            ({ config, ... }: {
-              home-manager = {
-                users.nixbuild = { ... }: {
-                  imports = [
-                    ./nixos/aws-lightsail-0/home
-                  ];
-                };
-                useGlobalPkgs = true;
-                verbose = true;
-              };
-            })
-
             {
               nixpkgs.overlays = [
                 self.overlays.default
@@ -268,6 +256,28 @@
             }
           ];
         };
+
+        lego-router = nixpkgs.lib.nixosSystem {
+          system = "x86_64-linux";
+          specialArgs = {
+            inherit self;
+          };
+          modules = [
+            ./nixos/lego-router
+            ./secrets/lego-router
+
+            sops-nix.nixosModules.sops
+            self.nixosModules.cloud.base
+            self.nixosModules.nixbuild
+            self.nixosModules.sing-box
+
+            {
+              nixpkgs.overlays = [
+                self.overlays.default
+              ];
+            }
+          ];
+        };
       };
     } // flake-utils.lib.eachSystem
       [ "x86_64-linux" ]
@@ -283,7 +293,7 @@
           buildInputs = with pkgs; [
             fd
             gnumake
-            go_1_20
+            go_1_21
             google-cloud-sdk
             gotools
             nix-output-monitor

diff --git a/infra/aws-lightsail/.gitignore b/infra/aws-lightsail/.gitignore
@@ -1,3 +1,2 @@
 /.terraform
-*.tfstate
-*.tfstate.*
+*.tfstate.backup
diff --git a/infra/aws-lightsail/.sops.yaml b/infra/aws-lightsail/.sops.yaml
@@ -0,0 +1,6 @@
+keys:
+  - &iosmanthus age12409ktkdynl48p38wz45pu2s25kmffsw4p9d9vgt3xmmwl8f7q7sjlxyrs
+creation_rules:
+  - key_groups:
+      - age:
+          - *iosmanthus
diff --git a/infra/aws-lightsail/apply.sh b/infra/aws-lightsail/apply.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+function recover {
+    sops -e -i terraform.tfvars.json
+    sops -e -i terraform.tfstate
+}
+
+sops -d -i terraform.tfvars.json
+sops -d -i terraform.tfstate
+trap recover EXIT
+terraform apply -auto-approve $@