feat(nasp): add ntpd; telegraf ok

hosts/g3/secrets.yaml

@@ -0,0 +1,32 @@
+telegraf: ENC[AES256_GCM,data:i5XK79gyjKgHvyeBooB7i7pQoMdyVGfNiDbLuvwREwpjJTO9PXarqZIUleFcNMHhTREJiQOqVJvUYMfypi0i9QiUrLFi4fp0aJsR5uU1ruz5srKgHXyCpCLif1FPm6otFoy1voLTLa3QXHN6v3uFDUMXdutDEEe3r9ThCML2rC3IqmwqjnzU+eTHR7QeTR64,iv:Q3w5E/UtK0hzX6c+UxT9dZAs9lY3B1d1fbKIgCDCULQ=,tag:WS151o9WtHibPrvbE0+bag==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1gfyfc6tqphyw64ygg4w8sj73pqzycfsc4ptwyhau0sk4q3ffqprqwxexsy
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxaThIdmFiZExTeTRYSEEv
+            dVFNaWlIYWpUN3RUNExsN0d3VFY0KzRzMTJvCkhnaCtBRU5RdVBJSC9UaGZad28r
+            anRRQnhrWndETm5KWVU0SDJ1ZUVKZTgKLS0tIDBPbDRKMzJybUpsQ0tKdy9aYVhK
+            cnpJcWhBTThYTVZkWUpYYytlSWUwYkUKr5D6gseygCm4JSNy9lp45d24PcM6FbDG
+            RJD1grIkl8nZ70xj8jmDwgr56zV23/zMkWWVDDb8+I5lDuVlFWv4jg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-06-14T09:17:04Z"
+    mac: ENC[AES256_GCM,data:sb+sgsVqb5pBThMvx7LXeyxU1tYmjnzWMUNlHv78z9NZETSKvY6HIIhT2OnpB22GkKqZ4Jpn8qSOWF9nsNhQf749tnkACEK092pWfKNPQ/xscaTJoxeRSns6CZ2yacU7AzG/IS9UKc09cJUwq0Hujz4czNnTrzK7dTawLzHZFFc=,iv:tLpoA40B0pk6n/D9qnsKs8j6Ql0ZSqs30h8nhh+VXOc=,tag:a2ttdFElb0jTzi9XPWiUhw==,type:str]
+    pgp:
+        - created_at: "2024-06-14T09:16:33Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hF4DLBF4i730Eg8SAQdAjoLG8XJ49iBHSr3bCcS7H2TLBIIcL6hr8YNHGBWJ0wkw
+            lWVWJ7+JwD/CiXBnuMaGY39ARzLlOYSVI75yuEETX6FpkU88Qt3BVXOY+W5RJcUs
+            0l4BmvKrx8rVIFawWzijNdvhw1wh4LanLTgEe15m/yoRsD2umSifrriY78Mw/Vkd
+            LS8zH6TA6EyCwYSpR80UXlxxTcUOfXEK/ip4084hQoW+aq14rlI2nE+LXhhJX9Tc
+            =EB0p
+            -----END PGP MESSAGE-----
+          fp: 3E241558655D7FE06C6711A5A5D6250D1806CAA8
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1

hosts/modules/nasp.nix

@@ -248,7 +248,7 @@ in
     ## mkdir -p ~/.config/sops/age
     ## nix-shell -p ssh-to-age --run "ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key > ~/.config/sops/age/keys.txt"
     (lib.mkIf sopsCfg.enable {
-      sops.defaultSopsFile = ../${mainCfg.hostName}/secrets.yaml;
+      sops.defaultSopsFile = ../${config.networking.hostName}/secrets.yaml;
       sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
     })
     # telegraf
@@ -267,7 +267,7 @@ in
             flush_interval = "30s";
             flush_jitter = "3s";
             precision = "0s";
-            hostname = assert (mainCfg.netName != ""); mainCfg.netName;
+            hostname = assert (config.networking.hostName != ""); config.networking.hostName;
             omit_hostname = false;
           };
           outputs.influxdb_v2 = {
@@ -291,6 +291,10 @@ in
             fieldpass = [ "used" "total" "bucket"];
             interval = "30s";
           };
+          inputs.temp = {
+            name_override = "temperture";
+            tags = { bucket = "device"; };
+          };
         };
       };
     })
@@ -392,6 +396,10 @@ in
           tags = { bucket = "device"; };
         };
       };
+      services.ntp = {
+        enable = true;
+        servers = [ "192.168.16.118" ];
+      };
     }))
   ]);
 }