Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

nixify komunix OS #16

Open
8 of 13 tasks
faultables opened this issue Nov 3, 2024 · 9 comments · May be fixed by #17
Open
8 of 13 tasks

nixify komunix OS #16

faultables opened this issue Nov 3, 2024 · 9 comments · May be fixed by #17
Assignees
@r17x
Labels
❄️ nixify

Comments

@faultables
Copy link
Member

faultables commented Nov 3, 2024 •
edited by r17x
Loading

phase 1

  • directory home (not sure gimana caranya)

  • cron (root)

    • * * * * * /home/komunix/cachex/gen.sh --> klo bisa dibuat via syntax nix better
    • * * * * * /home/komunix/npmx/gen.sh --> klo bisa dibuat via syntax nix better

  • verifikasi: saat cek crontab (e.g via cat /etc/crontab) disitu terlihat bahwa file tersebut di manage oleh nix

phase 2

  • systemd services (/etc/systemd/system/)
    • caddy-cachex.service
    • caddy-isp.service
    • caddy-komunix.service
    • caddy-npmx.service
    • traefik.service
  • ufw (uncomplicated firewall, sudo ufw status): (btw ini harusnya temporary since sekarang raspi udah ga carry traffic ke/dari wan lagi)
To                         Action      From
--                         ------      ----
22                         ALLOW       100.64.0.0/10             
41641                      ALLOW       Anywhere                  
80/tcp                     ALLOW       Anywhere                  
22/tcp                     ALLOW       192.168.18.0/24           
67/udp                     ALLOW       Anywhere                  
68/udp                     ALLOW       Anywhere                  
22/tcp                     ALLOW       192.168.31.0/24           
41641 (v6)                 ALLOW       Anywhere (v6)             
80/tcp (v6)                ALLOW       Anywhere (v6)             
67/udp (v6)                ALLOW       Anywhere (v6)             
68/udp (v6)                ALLOW       Anywhere (v6)
  • verifikasi: saat cek /etc/systemd/system/*.service, disitu terlihat bahwa beberapa file tersebut di manage/generate oleh nix, not sure klo bagian ufw

phase 3

TBD
@faultables
Copy link
Member Author

ada yg kurang clear ga broski? @r17x

@r17x
Copy link
Member

r17x commented Nov 5, 2024 •
edited
Loading

@faultables directory home isinya apa aja (selain dari crontab)?

@faultables
Copy link
Member Author

bisa cek manual di ssh raspi ls ~ pak kwwkwkwk

@r17x
Copy link
Member

r17x commented Nov 5, 2024

@faultables disini ada banyak

Desktop  Documents  Downloads  Music  Pictures  Public  README  Templates  Videos  cachex  duckdns  komunix.org  nfs  nice  npmx  snap

@faultables
Copy link
Member Author

coba yang cachex/ dan npmx/ dulu pak sisanya harusnya ga begitu penting

@r17x
Copy link
Member

r17x commented Nov 5, 2024

@faultables yang serve 2 file itu pakai service apa? nginx atau caddy?

@faultables
Copy link
Member Author

caddy bro

@r17x
Copy link
Member

r17x commented Nov 5, 2024

@faultables berarti gw coba mulai dengan membuat cachex dan npmx pakai caddy + crontab?

@faultables
Copy link
Member Author

yesss. yang gw tahu si nix kan bisa bikin kyk "ga perlu musingin nyimpen script/binary dimana" nah better klo kita bisa pakai pendekatan itu juga, kita pakai. jadi flow (contoh, untuk cache.komunix.org) itu seperti ini:

1. caddy serve static file /home/komunix/cachex/index.html

dan berikut config nya nya:

[Unit]
Description=caddy
ConditionFileIsExecutable=/usr/local/bin/caddy
After=syslog.target network-online.target

[Service]
StartLimitInterval=5
StartLimitBurst=10
ExecStart=/usr/local/bin/caddy file-server --root /home/komunix/cachex --listen 127.0.0.1:2022
StandardOutput=null
StandardError=journal

Restart=always
RestartSec=10

[Install]
WantedBy=multi-user.target

file tersebut ga harus di /home/komunix, yang penting file nya ada (di step 2). take note bagian --root di ExecStart di atas

2. index.html tersebut di-generate oleh script gen.sh

script nya sederhana, untuk cache.komunix.org konten nya seperti ini (di /home/komunix/cache/gen.sh):

export timestamp=$(date +%s)
export usage=$(df -h /home/komunix/nfs/nix-cache | tail -n1)
export total_cache=$(find /home/komunix/nfs/nix-cache -type f | wc -l)
export nice=$(du -sh /home/komunix/nfs/nix-cache)

envsubst < /home/komunix/cachex/index.html.tpl > /home/komunix/cachex/index.html

disini yang penting adalah file template nya (yg technically cuma teks biasa), yang untuk cache.komunix.org, kontennya seperti berikut (di /home/komunix/cache/index.html.tpl):

<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta http-equiv="X-UA-Compatible" content="ie=edge">
    <title>cache.komunix.org (di raspi) - UP</title>
  </head>
  <body>
<pre>













								    __                  __
								   /\ \                /\ \                                          __
						___     __      ___\ \ \___      __    \ \ \/'\     ___     ___ ___   __  __    ___ /\_\   __  _       ___   _ __    __
						/'___\ /'__`\   /'___\ \  _ `\  /'__`\   \ \ , <    / __`\ /' __` __`\/\ \/\ \ /' _ `\/\ \ /\ \/'\     / __`\/\`'__\/'_ `\
						/\ \__//\ \L\.\_/\ \__/\ \ \ \ \/\  __/  __\ \ \\`\ /\ \L\ \/\ \/\ \/\ \ \ \_\ \/\ \/\ \ \ \\/>   /  __/\ \L\ \ \ \//\ \L\ \
						\ \____\ \__/.\_\ \____\\ \_\ \_\ \____\/\_\\ \_\ \_\ \____/\ \_\ \_\ \_\ \____/\ \_\ \_\ \_\/\_/\_\/\_\ \____/\ \_\\ \____ \
						\/____/\/__/\/_/\/____/ \/_/\/_/\/____/\/_/ \/_/\/_/\/___/  \/_/\/_/\/_/\/___/  \/_/\/_/\/_/\//\/_/\/_/\/___/  \/_/ \/___L\ \
																				     /\____/
																				     \_/__/

											<b>/nix/store milik bersama</b> | <b>[email protected]</b>





		> NixOS

		# /etc/nixos/configuration.nix

		{ nix.settings.substituters = [ https://cache.komunix.org/ ]; }

		> GNU/Linux

		# /etc/nix/nix.conf

		fallback = true
		binary-caches = https://cache.komunix.org/ https://cache.nixos.org/
		
		# OR
		
		fallback = true
		substituters = https://cache.komunix.org
		

		> Mac OS

		# $HOME/.nixpkgs/darwin-configuration.nix

		nix.settings.substituters = pkgs.lib.mkBefore [ "https://cache.komunix.org/" ];

		> Flake
		
		nix.settings.experimental-features = [ "nix-command" "flakes" ];
		nix.settings.trusted-substituters = [ "https://cache.komunix.org" ];

		# Recomendation
		nix.settings.fallback = true;


		enjoy :^)

		---

		# stats for nerds

		$> find /home/komunix/nfs/nix-cache -type f | wc -l

		$total_cache

		$> du -sh /home/komunix/nfs/nix-cache; echo; df -h /home/komunix/nfs/nix-cache; echo; date +%s

		$nice

                Filesystem                      Size  Used Avail Use% Mounted on
		$usage

		$timestamp
</pre>
  </body>
</html>

3. script gen.sh tersebut dijalankan setiap menit melalui cron

untuk crontab nya seperti ini:

* * * * * /home/komunix/cachex/gen.sh

and that's it

kesimpulan

intinya adalah gimana caranya menghindari sebisa mungkin file-file yang di manage secara manual. seperti, yang sekarang, si caddy serve static server di /home/komunix/cache karena kita secara eksplisit ngasih tau letak file nya dimana, karena kita yang manage file tersebut. ga masalah klo misalnya nanti menjadi --root /nix/store/caddy-cachex-1-1-0/etdryftugyihojpk/ selama possible

entry di crontab pun kasusnya sama, setiap menit menajalankan /home/komunix/cachex/gen.sh karena kita secara eksplisit ngatur (nyimpen) file tersebut disana. ga masalah klo misalnya nanti menjadi * * * * * /nix/store/komunix-gen-1-1-0/dfghg5342qfds/cachex.sh selama possible

mental model gw untuk kasus ini kyk pakai home-manager yg ga perlu musingin manajemen dotfiles. i think misi nix untuk membuat konfigurasi komputer tanpa musingin manajemen file konfigurasinya, menjadi possible

@r17x r17x linked a pull request Nov 10, 2024 that will close this issue
Draft
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@r17x r17x

Labels
❄️ nixify
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

refactor: cache.komunix.org web evilfactorylabs/area13
2 participants
@faultables @r17x