Access gitlab via raccoon in fox

m/apex/configuration.nix

@@ -5,12 +5,9 @@
     ../common/xeon.nix
     ../common/ssf/hosts.nix
     ../module/ceph.nix
-    ../module/power-policy.nix
     ./nfs.nix
   ];
 
-  power.policy = "always-on";
-
   # Don't install grub MBR for now
   boot.loader.grub.device = "nodev";
 

m/common/base.nix

@@ -3,6 +3,7 @@
   # Includes the basic configuration for an Intel server.
   imports = [
     ./base/agenix.nix
+    ./base/always-power-on.nix
     ./base/august-shutdown.nix
     ./base/boot.nix
     ./base/env.nix
@@ -11,7 +12,6 @@
     ./base/net.nix
     ./base/nix.nix
     ./base/ntp.nix
-    ./base/power-policy.nix
     ./base/rev.nix
     ./base/ssh.nix
     ./base/users.nix

m/common/base/always-power-on.nix

@@ -0,0 +1,8 @@
+{
+  imports = [
+    ../../module/power-policy.nix
+  ];
+
+  # Turn on as soon as we have power
+  power.policy = "always-on";
+}

m/common/base/power-policy.nix

@@ -1,9 +0,0 @@
-{
-  imports = [
-    ../../module/power-policy.nix
-  ];
-
-  # By default, keep the machines off as we don't know if the AC will be working
-  # once the electricity comes back.
-  power.policy = "always-off";
-}

m/fox/configuration.nix

@@ -6,11 +6,8 @@
     ../common/xeon/console.nix
     ../module/emulation.nix
     ../module/nvidia.nix
-    ../module/power-policy.nix
   ];
 
-  power.policy = "always-on";
-
   # Don't turn off on August as UPC has different dates.
   # Fox works fine on power cuts.
   systemd.timers.august-shutdown.enable = false;
@@ -38,6 +35,16 @@
 
   services.openssh.settings.X11Forwarding = true;
 
+  # Use SSH tunnel to reach internal hosts
+  programs.ssh.extraConfig = ''
+    Host bscpm04.bsc.es gitlab-internal.bsc.es tent
+      ProxyJump raccoon
+    Host raccoon
+      ProxyJump apex
+      HostName 127.0.0.1
+      Port 22022
+  '';
+
   networking = {
     timeServers = [ "ntp1.upc.edu" "ntp2.upc.edu" ];
     hostName = "fox";

m/module/power-policy.nix

@@ -18,15 +18,13 @@ in
     systemd.services."power-policy" = {
       description = "Set power policy to use via IPMI";
       wantedBy = [ "multi-user.target" ];
-      unitConfig = {
-        StartLimitBurst = "10";
-        StartLimitIntervalSec = "10m";
-      };
       serviceConfig = {
         ExecStart = "${pkgs.ipmitool}/bin/ipmitool chassis policy ${cfg}";
         Type = "oneshot";
         Restart = "on-failure";
         RestartSec = "5s";
+        StartLimitBurst = "10";
+        StartLimitIntervalSec = "10m";
       };
     };
   };

m/raccoon/configuration.nix

@@ -7,12 +7,9 @@
     ../module/debuginfod.nix
     ../module/ssh-hut-extern.nix
     ../module/nvidia.nix
-    ../module/power-policy.nix
     ../eudy/kernel/perf.nix
   ];
 
-  power.policy = "always-on";
-
   # Don't install Grub on the disk yet
   boot.loader.grub.device = "nodev";