path: root/deploy_nixos

#!/usr/bin/env ./sshtool

copy nix/configuration.nix /etc/nixos/configuration.nix
copy nix/deuxfleurs.nix /etc/nixos/deuxfleurs.nix
copy nix/remote-unlock.nix /etc/nixos/remote-unlock.nix
copy cluster/$CLUSTER/cluster.nix /etc/nixos/cluster.nix
copy cluster/$CLUSTER/node/$NIXHOST.nix /etc/nixos/node.nix
copy cluster/$CLUSTER/node/$NIXHOST.site.nix /etc/nixos/site.nix

copy nix/wgautomesh.nix /etc/nixos/wgautomesh.nix
cmd mkdir -p /var/lib/deuxfleurs
write_pass deuxfleurs/cluster/$CLUSTER/wgautomesh_gossip_secret /var/lib/deuxfleurs/wgautomesh_gossip_secret

if [ "$CLUSTER" = "staging" ]; then
	copy nix/nomad-driver-nix2.nix /etc/nixos/nomad-driver-nix2.nix
fi

if [ "$CLUSTER" = "prod" ]; then
	cmd nixos-rebuild boot
	message "-------------------------------------------------------------------------------------"
	message "NIXOS CHANGES THAT WOULD BE APPLIED UPON SWITCH OR REBOOT:"
	cmd nixos-rebuild dry-activate
	message "-------------------------------------------------------------------------------------"
	message "New NixOS configuration hasn't been applied, to avoid disturbing production services."
	message "Please apply the following procedure to node '$NIXHOST':"
	message "1. Drain node in Nomad so that all jobs are relocated elsewhere"
	message "2. Reboot node manually. You can also take the opportunity to upgrade with:"
	message "         REBOOT_NODES=yes ./upgrade_nixos prod $NIXHOST"
	message "3. Mark node as eligible again in Nomad"
	message "-------------------------------------------------------------------------------------"
else
	cmd nixos-rebuild switch
fi