ahtlon
8c9b49f5c3
Grafana's secret key (services.grafana.settings.security.secret_key) doesn't have a default value anymore. Please generate your own and use a file-provider on this option! See also https://grafana.com/docs/grafana/latest/setup-grafana/configure-grafana/#secret_key for more information. See https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-database-encryption/#re-encrypt-secrets on how to re-encrypt.
As stated in the NixOS changelog for 26.05, there's no official way to rotate.
Either hard-code the old key ("SW2YcwTIb9zpOOhoPsMm") if your setup doesn't have any secrets in the DB that need special protection or perform a rotation with a 3rd-party tool (d9dc788902).
malobeo infrastructure
this repository contains nixos configurations of the digital malobeo infrastructure. it should be used to setup, test, build and deploy different hosts in a reproducible manner.
deploying configuration
hosts are deployed automatically from master. The hydra build server will build new commits and on success, hosts will periodically pull those changes. Big changes (like updating flake lock) could be commited to the staging branch first. Hydra builds staging seperate, and on success you can merge into master.
deploy fresh host
if you want to deploy a completly new host refer to docs
testing configuration
refer to https://docs.malobeo.org/anleitung/microvm.html#testing-microvms-locally
development
requirements
we use flake based configurations for our hosts. if you want to build configurations on you own machine you have to enable flakes first by adding the following to your configuration.nix or nix.conf
nix.extraOptions = ''
experimental-features = nix-command flakes
'';
More information about flakes can be found here
dev shell
a development shell with the correct environment can be created by running nix develop
If you're using direnv you can add flake support by following those steps: link
build a configuration
to build a configuration run the following command (replace <hostname> with the actual hostname):
nix build .#nixosConfigurations.<hostname>.config.system.build.toplevel
documentation
documentation is automatically build from master and can be found here: docs.malobeo.org
locally you can run documentation using nix run .#docs or nix run .#docsDev