kiaragrouwstra/infra
0
0
Fork 0
forked from the-distro/infra
Code Pull requests Activity

feat(build-coord): enable first Vault instance on it

Browse source 
Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
This commit is contained in:
raito 2024-12-14 21:47:50 +01:00
parent 2c4e60760f
commit a4d4ff8041
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
hosts/build-coord/default.nix
View file

@ -10,6 +10,13 @@
bagel.services = { bagel.services = {
hydra.enable = true; hydra.enable = true;
hydra.builders = map (i: "builder-${builtins.toString i}") [4 5 10]; hydra.builders = map (i: "builder-${builtins.toString i}") [4 5 10];
# Arguably, the build-coordinator is the most sensitive piece of our own infrastructure.
# Henceforth, it can run as well another sensitive piece of the system: the Vault.
vault = {
enable = true;
domain = "vault.forkos.org";
};
}; };
bagel.monitoring.exporters.hydra.enable = true; bagel.monitoring.exporters.hydra.enable = true;

1
terraform/dnsimple.nix
View file

@ -104,6 +104,7 @@ in
(record "amqp" 300 "CNAME" "bagel-box.infra.p.forkos.org") (record "amqp" 300 "CNAME" "bagel-box.infra.p.forkos.org")
(record "grafana" 300 "CNAME" "meta01.infra.p.forkos.org") (record "grafana" 300 "CNAME" "meta01.infra.p.forkos.org")
(record "hydra" 300 "CNAME" "build-coord.wob01.infra.p.forkos.org") (record "hydra" 300 "CNAME" "build-coord.wob01.infra.p.forkos.org")
(record "vault" 300 "CNAME" "build-coord.wob01.infra.p.forkos.org")
(record "loki" 300 "CNAME" "meta01.infra.p.forkos.org") (record "loki" 300 "CNAME" "meta01.infra.p.forkos.org")
(record "mimir" 300 "CNAME" "meta01.infra.p.forkos.org") (record "mimir" 300 "CNAME" "meta01.infra.p.forkos.org")
(record "pyroscope" 300 "CNAME" "meta01.infra.p.forkos.org") (record "pyroscope" 300 "CNAME" "meta01.infra.p.forkos.org")