Nix based CCCB infra

Folder structure

• ./services holds generic service configuration that is shared between hosts
• ./hosts holds host specific configuration
• ./secrets holds age encrypted secrets using agenix

Admin handbook

Update a container

ssh <container>
cd /etc/nixos
nix run .#apps.nixos-diff   # git pull + build + diff wth running config
nixos-rebuild switch        # Apply changes

Special things

Production:

• Matrix (matrix.berlin.ccc.de)

Testing:

• Hedgedoc (md.berlin.ccc.de)
• Postgres (sql.berlin.ccc.de)
• Grafana/Prometheus (monitoring.berlin.ccc.de)

---

Build with ❤️ and ❄️.