nixos/hosts/jeremiah/default.nix

# Edit this configuration file to define what should be installed on
# your system.	Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, lib, ... }:

{
  imports =
    [
      # Include the results of the hardware scan.
      ./ceph.nix
      ./hardware-configuration.nix
      ./minio.nix
    ];

  # Bootloader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  networking = {
    hostName = "jeremiah"; # Define your hostname.
    useDHCP = false;
    defaultGateway = {
      address = " 10.42.1.1";
      interface = "enp68s0";
    };
    vlans = {
      san = {
        id = 616;
        interface = "enp67s0";
      };
    };
    interfaces = {
      enp68s0 = {
        ipv4.addresses = [{
          address = "10.42.1.8";
          prefixLength = 16;
        }
          {
            address = "10.42.100.1";
            prefixLength = 16;
          }];
      };
      san = {
        ipv4.addresses = [{
          address = "10.201.1.2";
          prefixLength = 24;
        }];
      };
    };
    nameservers = [
      "10.42.1.5"
    ];
  };
  greg = {
    home = true;
    tailscale.enable = true;
  };
  environment.systemPackages = with pkgs; [
    curl
    gawk
    git
    unzip
    wget
  ];

  fileSystems = {
    "/nix" = {
      fsType = "btrfs";
      options = [ "subvol=nix" ];
      device = "/dev/nvme0n1p1";
    };
    "/var" = {
      fsType = "btrfs";
      options = [ "subvol=var" ];
      device = "/dev/nvme0n1p1";
    };
  };

  #####################################################################################
  #################### Virtualbox Runner ##############################################
  #####################################################################################
  services = {
    gitlab-runner = {
      enable = true;
      settings.concurrent = 7;
      services = {
        shell = {
          executor = "shell";
          limit = 5;
          authenticationTokenConfigFile = config.age.secrets.runner-reg.path;
          environmentVariables = {
            EFI_DIR = "${pkgs.OVMF.fd}/FV/";
            STORAGE_URL = "http://s3.thehellings.lan:9000";
          };
        };
      };
    };
  };
  age.secrets.runner-reg.file = ../../secrets/gitlab/jeremiah-runner-reg.age;
  virtualisation.virtualbox.host = {
    enable = true;
    enableExtensionPack = true;
    enableHardening = false;
    headless = true;
    enableWebService = true;
  };

  systemd.services."gitlab-runner" = {
    after = [
      "network.target"
      "network-online.target"
      "systemd-resolved.service"
    ];
    wants = [
      "network-online.target"
      "systemd-resolved.service"
    ];
    preStart = builtins.concatStringsSep "\n" [
      "${pkgs.kmod}/bin/modprobe vboxdrv"
      "${pkgs.kmod}/bin/modprobe vboxnetadp"
      "${pkgs.kmod}/bin/modprobe vboxnetflt"
    ];
    postStop = "${pkgs.kmod}/bin/rmmod vboxnetadp vboxnetflt vboxdrv";
    serviceConfig = {
      DevicePolicy = lib.mkForce "auto";
      User = "root";
      DynamicUser = lib.mkForce false;
    };
  };
}