xavier/nixos-infra
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Removed useless artifact (create-lxc.sh and some folders). Removed references to nix-sops.

Browse Source
This commit is contained in:
Xavier Lagraula
2026-05-06 18:18:13 +02:00
parent 2adbe4751d
commit 7fd43cf252
2 changed files with 18 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+18 -18
View File
@@ -15,14 +15,14 @@
### **Objectives** ### **Objectives**
| Objective | Description | Priority | | Objective | Description | Priority |
| --------------------------------| --------------------------------------------------------------------------------------| ----------| | ---------------------------| ------------------------------------------------------------------| ----------|
| Centralize configurations | A single Git repository for all machines. | ⭐⭐⭐ | | Centralize configurations | A single Git repository for all machines. | ⭐⭐⭐ |
| Modularity | Reusable modules for services, machine types, and user profiles. | ⭐⭐⭐ | | Modularity | Reusable modules for services, machine types, and user profiles. | ⭐⭐⭐ |
| Automation | Scripts to deploy configurations to machines and containers. | ⭐⭐⭐ | | Automation | Scripts to deploy configurations to machines and containers. | ⭐⭐⭐ |
| Security | Secret management with `sops-nix` or `agenix`. | ⭐⭐ | | Security | Secret management with `sops-nix` or `agenix`. | ⭐⭐ |
| Portability | Autonomous modules via `callPackage`. | ⭐⭐ | | Portability | Autonomous modules via `callPackage`. | ⭐⭐ |
| Maintenance | Clear documentation and simplified update processes. | ⭐ | | Maintenance | Clear documentation and simplified update processes. | ⭐ |
--- ---
@@ -245,7 +245,7 @@ nixos-infra/
## **🔐 Secret Management** ## **🔐 Secret Management**
- **Tool** : `agenix` (recommended) or `sops-nix`. - **Tool** : `agenix`.
- **Process** : - **Process** :
1. Encrypt secrets with `age` : 1. Encrypt secrets with `age` :
```bash ```bash
@@ -267,15 +267,15 @@ nixos-infra/
## **📅 Roadmap** ## **📅 Roadmap**
| Step | Description | Status | Priority | | Step | Description | Status | Priority |
| ------------------------------- | ------------------------------------------------- | ------ | -------- | | --------------------------------| -----------------------------------------------| --------| ----------|
| Test the NixOS LXC template | Verify that the template works under Proxmox. | ⬜ | ⭐⭐⭐ | | Test the NixOS LXC template | Verify that the template works under Proxmox. | ⬜ | ⭐⭐⭐ |
| Finalize `create-lxc-nixos.sh` | Test the creation of an LXC container. | ⬜ | ⭐⭐⭐ | | Finalize `create-lxc-nixos.sh` | Test the creation of an LXC container. | ⬜ | ⭐⭐⭐ |
| Write the DNS module | Module for the DNS service (Bind). | ⬜ | ⭐⭐⭐ | | Write the DNS module | Module for the DNS service (Bind). | ⬜ | ⭐⭐⭐ |
| Configure `agenix` | Encrypt the first secrets. | ⬜ | ⭐⭐ | | Configure `agenix` | Encrypt the first secrets. | ⬜ | ⭐⭐ |
| Document the process | `README.md` to explain deployment. | ⬜ | ⭐⭐ | | Document the process | `README.md` to explain deployment. | ⬜ | ⭐⭐ |
| Automate with Ansible | Playbook to create multiple containers. | ⬜ | ⭐ | | Automate with Ansible | Playbook to create multiple containers. | ⬜ | ⭐ |
| Integrate CI/CD | Test configurations before deployment. | ⬜ | ⭐ | | Integrate CI/CD | Test configurations before deployment. | ⬜ | ⭐ |
--- ---
scripts/create-lxc.sh
-53
View File
@@ -1,53 +0,0 @@
#!/bin/bash
# Usage: create-lxc.sh --proxmox-server SERVER --user= --identity FIEL [--config-file LXC_CONFIG_FILE]
# Parse command line arguments using docopts
# Connect to Proxmox VE server using provided credentials
# Create LXC container with provided configuration
# Configuration can be provided via stdin or a file
# Fail if both stdin and file are provided
# Example usage:
# cat lxc-config.conf | ./create-lxc.sh --proxmox-server=192.168.1.1 --username=admin --password=password
# or
# ./create-lxc.sh --proxmox-server=192.168.1.1 --username=admin --password=password --config-file=lxc-config.conf
# Example lxc-config.conf:
# lxc.network.type: veth
# lxc.network.link: eth0
# lxc.network.flags: up
# lxc.network.hwaddr: 00:16:3e:xx:xx:xx
# lxc.network.ipv4: 192.168.1.100/24
# lxc.network.ipv4.gateway: 192.168.1.1
# lxc.network.ipv6: 2001:db8::100/64
# lxc.network.ipv6.gateway: 2001:db8::1
# Parse command line arguments using docopts
# Connect to Proxmox VE server using provided credentials
# Create LXC container with provided configuration
# Configuration can be provided via stdin or a file
# Fail if both stdin and file are provided
# Example usage:
# cat lxc-config.conf | ./create-lxc.sh --proxmox-server=192.168.1.1 --username=admin --password=password
# or
# ./create-lxc.sh --proxmox-server=192.168.1.1 --username=admin --password=password --config-file=lxc-config.conf
# Example lxc-config.conf:
# lxc.network.type: veth
# lxc.network.link: eth0
# lxc.network.flags: up
# lxc.network.hwaddr: 00:16:3e:xx:xx:xx
# lxc.network.ipv4: 192.168.1.100/24
# lxc.network.ipv4.gateway: 192.168.1.1
# lxc.network.ipv6: 2001:db8::100/64
# lxc.network.ipv6.gateway: 2001:db8::1