give nix access to UTxO-Scalability where needed

input-output-hk · Apr 12, 2024 · a6a9b39 · a6a9b39
1 parent 86096b8
commit a6a9b39
Show file tree

Hide file tree

Showing 3 changed files with 36 additions and 5 deletions.
diff --git a/flake/colmena.nix b/flake/colmena.nix
@@ -74,7 +74,7 @@ in {
     perf-class = mkClass "perf";
     perf-ssd-class = mkClass "perf-ssd";
 
-    inherit (nixosModules) common nomad-client nomad-server deployer nomad-ssd;
+    inherit (nixosModules) common nomad-client nomad-server deployer nomad-ssd nix-private;
   in
     {
       meta.nixpkgs = import inputs.nixpkgs {system = "x86_64-linux";};
@@ -84,11 +84,11 @@ in {
     # // (mkNodes 1 "client-ssd-eu-%02d" "10.200.21.%d" [(type "r5.4xlarge") nomad-client nomad-ssd perf-ssd-class (ebs 128) eu-central-1b])
     # // (mkNodes 1 "client-ssd-us-%02d" "10.200.22.%d" [(type "r5d.4xlarge") nomad-client nomad-ssd perf-ssd-class (ebs 128) eu-central-1b])
     // (mkNode "leader" "10.200.0.1" [eu-central-1c (type "r5.xlarge") nomad-server (ebs 40)])
-    // (mkNode "deployer" "10.200.0.2" [eu-central-1b (type "c5.9xlarge") deployer (ebs 2000)])
+    // (mkNode "deployer" "10.200.0.2" [eu-central-1b (type "c5.9xlarge") deployer nix-private (ebs 2000)])
     // (mkNode "explorer" "10.200.1.19" [eu-central-1b (type "m5.4xlarge") nomad-client (ebs 40)])
-    // (mkNodes 19 "client-ssd-eu-%02d" "10.200.21.%d" [(type "r5d.4xlarge") nomad-client nomad-ssd perf-ssd-class (ebs 40) eu-central-1b])
-    // (mkNodes 17 "client-ssd-ap-%02d" "10.200.22.%d" [(type "r5d.4xlarge") nomad-client nomad-ssd perf-ssd-class (ebs 40) ap-southeast-2b])
-    // (mkNodes 17 "client-ssd-us-%02d" "10.200.23.%d" [(type "r5d.4xlarge") nomad-client nomad-ssd perf-ssd-class (ebs 40) us-east-1d])
+    // (mkNodes 19 "client-ssd-eu-%02d" "10.200.21.%d" [(type "r5d.4xlarge") nix-private nomad-client nomad-ssd perf-ssd-class (ebs 40) eu-central-1b])
+    // (mkNodes 17 "client-ssd-ap-%02d" "10.200.22.%d" [(type "r5d.4xlarge") nix-private nomad-client nomad-ssd perf-ssd-class (ebs 40) ap-southeast-2b])
+    // (mkNodes 17 "client-ssd-us-%02d" "10.200.23.%d" [(type "r5d.4xlarge") nix-private nomad-client nomad-ssd perf-ssd-class (ebs 40) us-east-1d])
     // (mkNodes 18 "client-eu-%02d" "10.200.1.%d" [(type "c5.2xlarge") nomad-client perf-class (ebs 40) eu-central-1b])
     // (mkNodes 17 "client-ap-%02d" "10.200.2.%d" [(type "c5.2xlarge") nomad-client perf-class (ebs 40) ap-southeast-2b])
     // (mkNodes 17 "client-us-%02d" "10.200.3.%d" [(type "c5.2xlarge") nomad-client perf-class (ebs 40) us-east-1d]);

diff --git a/flake/nixosModules/nix-private.nix b/flake/nixosModules/nix-private.nix
@@ -0,0 +1,9 @@
+{self, ...}: {
+  flake.nixosModules.nix-private = {config, ...}: {
+    sops.secrets.nix-access-tokens.sopsFile = "${self}/secrets/nix-access-tokens.enc";
+
+    nix.extraOptions = ''
+      !include ${config.sops.secrets.nix-access-tokens.path}
+    '';
+  };
+}
diff --git a/secrets/nix-access-tokens.enc b/secrets/nix-access-tokens.enc
@@ -0,0 +1,22 @@
+{
+	"data": "ENC[AES256_GCM,data:84G8lAtWxpnA1rNCaSM5aa8NCMLP3QVKF4A+erbheNOjNDzPP9zy4Z3M7qUXQKWk5mo33vZrlF7GSGgyhhVmbMfKXTEBfEt6EvuFxyC7GJda74nYjE9U80TdrRbn2/w1L3Dd6kh2aW98BLQGJpOQST7A3F/snYOc6I7dzkrFCvm+Sx+Nc6XDLOZm7Jcj+qHcCBkOT5W5CfZVgTn8btrUvw0A6c2T479q9J+bMNrHSA8iHKkJYB46WlA+PZ472DQhW7Purt9SdcUZ8UBVfDZbpVbvLLk7XKp31BeGk3yWfmMXn++WZnvsgBOSlxwvmZT633V4YR3SkQ==,iv:h6C5V9dv0Ay3A0R+q4K3CD0g9DgSo8RKScNUaHJLMtM=,tag:LxHLt8eAQgG74o3PtDvNKg==,type:str]",
+	"sops": {
+		"kms": [
+			{
+				"arn": "arn:aws:kms:eu-central-1:634968354090:alias/kmsKey",
+				"created_at": "2023-08-02T06:47:58Z",
+				"enc": "AQICAHjERJSkkd02ChDwvtPUUy9LjCMyl4XTwUygBtpfDd/1pAEYG5gKBzTfIlUBBMgP1vHcAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM3Js4vcd6SHp/m3w0AgEQgDslkcFLgWkWOIEtmgDqaPT75lbOiIHjAs2jbRi+uQ8MbDEAh5hkDqLFSgLy08vFRaZyP8M+4YTJxeMbQg==",
+				"aws_profile": ""
+			}
+		],
+		"gcp_kms": null,
+		"azure_kv": null,
+		"hc_vault": null,
+		"age": null,
+		"lastmodified": "2024-04-12T13:43:15Z",
+		"mac": "ENC[AES256_GCM,data:DbwbuGcpaDk452thNY4ApPx5cD/BsP9dTc0rxOVpiqUQr+4WhZeGRGvCGxTGlSMr56fD0YOEaQT++lsyq2ezcN68KAEz68uJO6B6ZEGwhq0LYAo0um8fwJEndsqFJc2VMidhJrVxmsGaRYwa5s7DgIiw1jEXIlkGsUNCwwM76UA=,iv:kRbppptRIzgI2VqmWeFs2Wh+u+9CuNfal3FvOVR1hio=,tag:RIFY5C+HN0HPuflg7qgD7A==,type:str]",
+		"pgp": null,
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.8.1"
+	}
+}