diff options
Diffstat (limited to 'deploy.sh')
| -rwxr-xr-x | deploy.sh | 13 |
1 files changed, 11 insertions, 2 deletions
@@ -10,6 +10,8 @@ fi TMP_PATH=/tmp/tmp-deploy-$(date +%s) +YEAR=$(date +%Y) + for NIXHOST in $NIXHOSTLIST; do NIXHOST=${NIXHOST%.*} @@ -23,13 +25,15 @@ for NIXHOST in $NIXHOSTLIST; do echo "Sending NixOS config files" - ssh -F ssh_config $SSH_DEST mkdir -p $TMP_PATH + ssh -F ssh_config $SSH_DEST mkdir -p $TMP_PATH $TMP_PATH/pki cat configuration.nix | ssh -F ssh_config $SSH_DEST tee $TMP_PATH/configuration.nix > /dev/null cat node/$NIXHOST.nix | ssh -F ssh_config $SSH_DEST tee $TMP_PATH/node.nix > /dev/null cat node/$NIXHOST.site.nix | ssh -F ssh_config $SSH_DEST tee $TMP_PATH/site.nix > /dev/null echo "Sending secret files" - test -f secrets/rclone.conf && (cat secrets/rclone.conf | ssh -F ssh_config $SSH_DEST tee $TMP_PATH/rclone.conf > /dev/null) + for SECRET in rclone.conf pki/nomad-ca.crt pki/nomad$YEAR.crt pki/nomad$YEAR.key; do + test -f secrets/$SECRET && (cat secrets/$SECRET | ssh -F ssh_config $SSH_DEST tee $TMP_PATH/$SECRET > /dev/null) + done echo "Rebuilding NixOS" @@ -38,7 +42,12 @@ set -ex cd $TMP_PATH mv configuration.nix node.nix site.nix /etc/nixos + test -f rclone.conf && (mv rclone.conf /root; chmod 600 /root/rclone.conf) + +mkdir -p /var/lib/nomad/pki +test -f pki/nomad-ca.crt && mv -v pki/nomad* /var/lib/nomad/pki + nixos-rebuild switch EOF |