This commit is contained in:
Raphaël Billet
2025-11-27 21:33:31 +01:00
parent 15587d3532
commit 170efa1907
+11 -11
View File
@@ -192,16 +192,16 @@ files_generation() {
export PARITY_DISK_2="$(openssl rand -base64 32 | tr -d '\=+/ ')"
export PARITY_DISK_3="$(openssl rand -base64 32 | tr -d '\=+/ ')"
sudo mkdir -p /run/secrets/disks/
echo $DATA_DISK_1 > /run/secrets/disks/data-disk-1
echo $DATA_DISK_2 > /run/secrets/disks/data-disk-2
echo $DATA_DISK_3 > /run/secrets/disks/data-disk-3
echo $DATA_DISK_4 > /run/secrets/disks/data-disk-4
echo $DATA_DISK_5 > /run/secrets/disks/data-disk-5
echo $DATA_DISK_6 > /run/secrets/disks/data-disk-6
echo $PARITY_DISK_1 > /run/secrets/disks/parity-disk-1
echo $PARITY_DISK_2 > /run/secrets/disks/parity-disk-2
echo $PARITY_DISK_3 > /run/secrets/disks/parity-disk-3
# echo "$REMOTE_PASS" | ssh_to_host "sudo -S mkdir -p extra-files/run/secrets/disks/"
echo "$REMOTE_PASS" | ssh_to_host "echo -n $DATA_DISK_1 | sudo -S tee /run/secrets/disks/data-disk-1"
echo "$REMOTE_PASS" | ssh_to_host "echo -n $DATA_DISK_2 | sudo -S tee /run/secrets/disks/data-disk-2"
echo "$REMOTE_PASS" | ssh_to_host "echo -n $DATA_DISK_3 | sudo -S tee /run/secrets/disks/data-disk-3"
echo "$REMOTE_PASS" | ssh_to_host "echo -n $DATA_DISK_4 | sudo -S tee /run/secrets/disks/data-disk-4"
echo "$REMOTE_PASS" | ssh_to_host "echo -n $DATA_DISK_5 | sudo -S tee /run/secrets/disks/data-disk-5"
echo "$REMOTE_PASS" | ssh_to_host "echo -n $DATA_DISK_6 | sudo -S tee /run/secrets/disks/data-disk-6"
echo "$REMOTE_PASS" | ssh_to_host "echo -n $PARITY_DISK_1 | sudo -S tee /run/secrets/disks/parity-disk-1"
echo "$REMOTE_PASS" | ssh_to_host "echo -n $PARITY_DISK_2 | sudo -S tee /run/secrets/disks/parity-disk-2"
echo "$REMOTE_PASS" | ssh_to_host "echo -n $PARITY_DISK_3 | sudo -S tee /run/secrets/disks/parity-disk-3"
echo -e "\n ✅ Encrypting secrets in the correct file..."
envsubst < "config-files/sops-nix/secrets.yaml" | sops encrypt --filename-override secrets.yaml \
@@ -463,7 +463,7 @@ deploy() {
nix run github:nix-community/nixos-anywhere -- \
--generate-hardware-config nixos-generate-config ./hardware-configuration.nix \
--flake .#numbus-server \
--extra-files "extra-files/" \
--extra-files extra-files \
--chown "/home/numbus-admin/" 1000:1000 \
--target-host nixos@$TARGET_HOST