dotfiles/nixos-config
1
0
Fork 0
mirror of https://github.com/srid/nixos-config.git synced 2026-07-16 22:01:33 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

tadata

Browse source
This commit is contained in:
Sridhar Ratnakumar 2026-06-06 10:33:47 -04:00
parent 43521a183f
commit 7fc1735c34
6 changed files with 33 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/home/services/drishti/default.nix
View file

@ -1,4 +1,4 @@
{ flake, config, pkgs, ... }:
{ flake, pkgs, ... }:
let
inherit (flake) inputs;
@ -8,10 +8,12 @@ in
inputs.drishti.homeManagerModules.default
];
# Generic enabler. The host list is machine-specific (zest watches the
# tailnet boxes; pureintent watches its pu-managed CI fleet), so each
# consuming config sets `services.drishti.hosts`.
services.drishti = {
enable = true;
package = inputs.drishti.packages.${pkgs.stdenv.hostPlatform.system}.default;
port = 7720;
hosts = [ "localhost" "sincereintent" "pureintent" "vanjaram.tail12b27.ts.net" "nix-infra@rasam.tail12b27.ts.net" ];
};
}

16
modules/home/services/drishti/kolu-ci.nix
View file

@ -1,16 +0,0 @@
{ lib, ... }:
let
# kolu-ci-1 .. kolu-ci-8
ciHosts = map (n: "kolu-ci-${toString n}") (lib.range 1 8);
in
{
# The CI hosts are reachable only *through* pureintent, so hop via ProxyJump.
# `ssh kolu-ci-N` then works transparently — and so does drishti's agent
# spawn / nix-system probe / `nix copy`, which are all just `ssh <host>`.
# See drishti's "Hosts behind a bastion (SSH hops)" docs (PR #50).
# NOTE: drishti forces BatchMode=yes, so pureintent must be key-based
# (non-interactive) from wherever this runs — which it already is.
programs.ssh.matchBlocks = lib.genAttrs ciHosts (_name: {
proxyJump = "pureintent";
});
}