02/02: hydra: bayfront: Add ns1.gnu.org as a remote.

[Ludovic Courtès]

civodul pushed a commit to branch master
in repository maintenance.

commit eb4b98eb0bab3dd36f70b25a2dd3edda83210870
Author: Ludovic Courtès <address@hidden>
Date:   Tue Apr 30 18:02:22 2019 +0200

    hydra: bayfront: Add ns1.gnu.org as a remote.
    
    * hydra/bayfront.scm (gnu-ns1-ip4): New variable.
    (services) <knot-configuration>: Add 'remotes' and 'includes' fields.
---
 hydra/bayfront.scm | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 32d4956..15370a3 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -70,6 +70,10 @@ Best practices:
 
 Happy hacking!\n"))
 
+(define gnu-ns1-ip4
+  ;; IPv4 address of "ns1.gnu.org".
+  "209.51.188.164")
+
 (operating-system
   (host-name "bayfront")
   (timezone "Europe/Paris")
@@ -138,7 +142,17 @@ Happy hacking!\n"))
                               (acls (list (knot-acl-configuration
                                             (id "transfer-allow")
                                             (address (list berlin-ip4))
-                                            (action '(transfer)))))))
+                                            (action '(transfer)))))
+
+                              ;; The 'secrets.conf' file is stored
+                              ;; out-of-band.  It contains the definition of
+                              ;; the "gnu-update-key" key.
+                              (includes '("/etc/knot/secrets.conf"))
+
+                              (remotes (list (knot-remote-configuration
+                                              (id "gnu-master")
+                                              (address (list gnu-ns1-ip4))
+                                              (key "gnu-update-key"))))))
 
                    (frontend-services %sysadmins
                                       #:nar-ttl (* 45 24 3600)