feat: prepare for Lix machines #126

Merged

raito merged 5 commits from prepare-lix into main

2024-10-06 08:10:49 +00:00

raito commented

2024-10-05 18:27:22 +00:00

Owner

These are preparations in the same vibes as the ACL PR for introducing Lix machines in the infrastructure.

This is basically just introducing a multi-tenancy model following our general server ACLs, we can probably introduce some simplification at some point but I'm doing it slowly.

These are preparations in the same vibes as the ACL PR for introducing Lix machines in the infrastructure. This is basically just introducing a multi-tenancy model following our general server ACLs, we can probably introduce some simplification at some point but I'm doing it slowly.

raito added 5 commits

2024-10-05 18:27:27 +00:00

docs(README.md): explain how to deploy things 8395494d49

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>

feat: add more admins tools from lix infra 7ed5771812

We had this in our equivalent file.

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>

feat: introduce resource control over all machines e7a99c6c84

We were using over all our machines in the Lix infrastructure.
It still makes sense for all our machines.

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>

feat: introduce Oracle VMs and Hetzner VMs as hardware types f5ad18dbb5

This includes aarch64-linux variants for these hosters.

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>

feat: multi-tenant secrets cdc030dacc

Lix may have its own secrets and we want to maintain a certain
generalization level on the NixOS modules, so we can decorrelate which
secret we select dynamically by having a simple tenancy hierarchy
system.

This unfortunately requires to rewrite all call sites with a floral
prefix until we migrate them to the simple internal secret module which
is aware of this.

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>