nixops-aws

nixops-aws copied to clipboard

See https://www.cloudsqueeze.ai/amazons-t3-who-should-use-it-when-how-and-the-why/index.html for context. We need some way to specify that we want to change the behavior of the "Unlimited" feature from the default.

coretemp

Adding AWS CloudFormation Support

2

I plan to add AWS CloudFormation support to NixOps. Reasons: - CloudFormation is a well-tested tool for declaratively creating AWS resources - Affords us full access to the [range of...

ghost

I was getting authorization errors trying to use nixops. Looking at the failing files locally I noticed that they did not account for the token, I think the failing files...

Ariakenom

EC2: add support encrypted root volume

5

It would be pretty neat if the root EBS volume could be encrypted. The use case would be to protect it if the instance is stopped and somebody gains access...

edolstra

rbvermaa

NixOps does not clean up route53 DNS entry on destroy.

1

rbvermaa

Cannot specify egress rules for ec2 security groups

1

With other deployment tools, I can specify security group rules that limit egress from machines in EC2. Currently in nixops, I can only specify ingress rules. The relevant boto API...

jml

Dynamic securityGroupIds

6

We can define `resources.ec2KeyPairs` and refer them in `deployment.ec2`. E. g.: ``` nix { # ... resources.ec2KeyPairs.petcatKey = { inherit accessKeyId; region = "ap-southeast-1"; }; # ... petcat = {...

ip1981

EC2: use public IP by default when elasticIPv4 is set

2

Back to NixOS/nixops#221: Private IP should be used if `ec2.associatePublicIpAddress` is not `true` (done) _or_ `elasticIPv4` is not set (should be done).

ip1981

AWS VPC instances aren't assigned multiple security groups

2

With the following configuration, using either the security group names or `sg-...` IDs, the instance is only ever launched with the `default` security group. Same if I remove the spot...

grahamc