0 Fork 0

mirror of https://github.com/ryan4yin/nix-config.git synced 2026-11-13 12:13:46 +01:00

Files

T

History

Ryan Yin 7e0e4aa566 feat(youko): replace MinIO with RustFS S3

Deploy RustFS in place of the retired MinIO and move the S3 consumers over.

- flake.nix / flake.lock / outputs/default.nix: add a nixpkgs-small
  (nixos-unstable-small) input for the rustfs 1.0.0 package (with the web
  console), instantiated as pkgs-small in genSpecialArgs alongside the other
  nixpkgs instances; drop the rustfs flake input. The rest of the system stays
  on the default nixpkgs.
- hosts/12kingdoms-youko/homelab-services/rustfs.nix: use nixpkgs' own
  services.rustfs module, with package = pkgs-small.rustfs and
  environmentFile = the agenix rustfs.env secret.
- caddy.nix: s3.writefor.fun (S3 API) and s3-console.writefor.fun (console,
  redirects / to /rustfs/console/).
- secrets/nixos.nix: declare a single rustfs.env (dotenv) secret holding
  RUSTFS_ACCESS_KEY / RUSTFS_SECRET_KEY, replacing the separate key files.
- infra/minio -> infra/rustfs: buckets are managed with the hashicorp/aws
  provider against the RustFS S3 endpoint; IAM/ILM are applied with rc.

2026-09-25 15:23:50 +08:00

.terraform.lock.hcl

feat(youko): replace MinIO with RustFS S3

2026-09-25 15:23:50 +08:00

main.tf

feat(youko): replace MinIO with RustFS S3

2026-09-25 15:23:50 +08:00

README.md

feat(youko): replace MinIO with RustFS S3

2026-09-25 15:23:50 +08:00

run.sh

feat(youko): replace MinIO with RustFS S3

2026-09-25 15:23:50 +08:00

tf-s3-backend.tf

feat(youko): replace MinIO with RustFS S3

2026-09-25 15:23:50 +08:00

README.md

Terraform's S3 Backend

This terraform workspace is used only once, and we do not save its terraform.tfstate.

It creates the tf-s3-backend RustFS bucket that stores all the other workspaces' tfstate files.

The IAM service account used to read/write that state is created with the official rc client, not here (RustFS does not implement MinIO's Admin API). See ../README.md for the rc runbook.