notplantsandClaude Fable 5.1
31af820079
The orchestrator's flake now builds the machine it shares with the cc-ci CI
server: `nixosConfigurations.cc-ci` composes cc-ci's nixosModules.cc-ci-server
(new flake input, nixpkgs + sops-nix follow ours), this repo's orchestrator
module (nix/modules/cc-ci.nix, exported as cc-ci-orchestrator, `cc-ci` kept
as an alias for notplants-nix) and the new nix/modules/orchestrator-host.nix
— the host contract those units always assumed (loops user, claude/opencode
CLIs, opencode web server + tailnet-only UI on 8443 since traefik owns
80/443, nix-ld, tool set, `ssh cc-ci` → loopback).
nix/hosts/cc-ci/{hardware,networking}.nix are PROVISIONAL copies of the old
server's layout so the flake evaluates; they get replaced by the
nixos-infect output of 195.201.88.249.
README.md is the deploy guide (Hetzner Debian → nixos-infect → this flake →
staging → data restore → cutover). archive/ holds the retired Incus/Hetzner
orchestrator host configs, the old terraform and the migration plans;
references updated. cc-ci-plan/plan-cc-ci-combined-host.md is the working
plan for the move.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz
40 line
1.3 KiB
Terraform
40 line
1.3 KiB
Terraform
variable "location" {
|
|
description = "Hetzner datacenter (nbg1=Nuremberg, fsn1=Falkenstein, hel1=Helsinki)"
|
|
type = string
|
|
default = "nbg1"
|
|
}
|
|
|
|
variable "server_type" {
|
|
description = <<-EOT
|
|
Hetzner server type. Must be x86 — the flake is x86_64-linux; NEVER use cax* (ARM).
|
|
cpx22 = AMD 2 vCPU / 4 GB (default; dedicated vCPU, NVMe — the orchestrator loops runtime).
|
|
cpx32 = AMD 4 vCPU / 8 GB (upgrade if more CPU headroom needed).
|
|
cx23 = Intel 2 vCPU / 4 GB (shared vCPU, cheaper alternative).
|
|
Note: cpx11/cpx21 are retired in nbg1.
|
|
EOT
|
|
type = string
|
|
default = "cpx22"
|
|
|
|
validation {
|
|
condition = !startswith(var.server_type, "cax")
|
|
error_message = "ARM server types (cax*) are not supported — the flake is x86_64-linux only."
|
|
}
|
|
}
|
|
|
|
variable "image" {
|
|
description = "Base OS image. nixos-infect supports debian-12 and ubuntu-24.04. debian-12 preferred."
|
|
type = string
|
|
default = "debian-12"
|
|
}
|
|
|
|
variable "ssh_public_key" {
|
|
description = "SSH public key content (the full line). Registered with Hetzner for root access post-infect. Pass via TF_VAR_ssh_public_key."
|
|
type = string
|
|
}
|
|
|
|
variable "server_name" {
|
|
description = "Hetzner server name and initial NixOS hostname"
|
|
type = string
|
|
default = "cc-ci-orchestrator"
|
|
}
|