Merge branch 'main' of gh:greg-hellings/nixos-config

This commit is contained in:
Greg Hellings
2024-07-22 17:46:19 -05:00
6 changed files with 6 additions and 111 deletions
-40
View File
@@ -75,10 +75,6 @@ in {
fsType = "nfs";
options = [ "ro" ];
};
"/proxy" = {
device = "/dev/vdb1";
fsType = "btrfs";
};
};
services = {
@@ -187,42 +183,6 @@ in {
"jellyfin.home".target = "http://localhost:8096/";
};
services = {
nginx.virtualHosts."nixcache.thehellings.lan" = {
serverName = "nixcache.thehellings.lan";
serverAliases = [ "nixcache" "nixcache.home" ];
root = "/proxy";
locations = {
"~ ^/nix-cache-info" = {
proxyPass = "https://cache.nixos.org";
root = "/proxy/nixpkgs/nix-cache-info/store";
recommendedProxySettings = false;
extraConfig = ''
error_log /var/log/nginx/proxy.log debug;
proxy_store on;
proxy_store_access user:rw group:rw all:r;
proxy_temp_path /proxy/nixpkgs/nix-cache-info/temp;
proxy_pass_request_headers on;
proxy_set_header Host "cache.nixos.org";
'';
};
"~^/nar/.+$" = {
proxyPass = "https://cache.nixos.org";
root = "/proxy/nixpkgs/nar/store";
recommendedProxySettings = false;
extraConfig = ''
proxy_store on;
proxy_store_access user:rw group:rw all:r;
proxy_temp_path /proxy/nixpkgs/nar/temp;
proxy_pass_request_headers on;
proxy_set_header Host "cache.nixos.org";
'';
};
};
};
};
systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/proxy" ];
environment.systemPackages = with pkgs; [
bind
curl # Used by dnsmasq fetching
-69
View File
@@ -57,74 +57,5 @@ in
layout = "us";
variant = "";
};
gitlab-runner = {
enable = true;
settings.concurrent = 1;
services = {
shell = {
executor = "shell";
limit = 5;
registrationConfigFile = config.age.secrets.runner-reg.path;
environmentVariables = {
EFI_DIR = "${pkgs.OVMF.fd}/FV/";
STORAGE_URL = "http://minio-01.thehellings.lan:9000";
};
};
};
};
};
#####################################################################################
#################### Virtualbox Runner ##############################################
#####################################################################################
age.secrets.runner-reg.file = ../../secrets/gitlab/myself-vbox-runner-reg.age;
virtualisation.virtualbox.host = {
enable = true;
enableExtensionPack = true;
enableHardening = false;
headless = true;
};
systemd.services."gitlab-runner" = {
after = [
"network.target"
"network-online.target"
"systemd-resolved.service"
];
# Moved here from myself/Isaiah, so technically unnecessary now
conflicts = [
"container@gitlab-runner-qemu.service"
];
wants = [
"network-online.target"
"systemd-resolved.service"
];
preStart = builtins.concatStringsSep "\n" [
"${pkgs.kmod}/bin/modprobe vboxdrv"
"${pkgs.kmod}/bin/modprobe vboxnetadp"
"${pkgs.kmod}/bin/modprobe vboxnetflt"
];
postStop = "${pkgs.kmod}/bin/rmmod vboxnetadp vboxnetflt vboxdrv";
serviceConfig = {
DevicePolicy = lib.mkForce "auto";
User = "root";
DynamicUser = lib.mkForce false;
};
};
environment.systemPackages = with pkgs; [
curl
gawk
git
p7zip
packer
pup
gregpy
shellcheck
unzip
xorriso
vagrant
wget
];
networking.firewall.allowedTCPPorts = [ 18083 ]; # Should be interface for vboxweb
}
+3
View File
@@ -10,6 +10,7 @@ in {
};
networking.firewall.allowedTCPPorts = [
80
minioPort
minioConsolePort
];
@@ -23,6 +24,8 @@ in {
browser = true;
};
greg.proxies."s3.thehellings.lan".target = "http://127.0.0.1:${toString minioPort}";
environment.systemPackages = with pkgs; [
minio-client
];
+1 -1
View File
@@ -18,7 +18,7 @@ in
keep-derivations = true;
min-free = (toString (1024 * 1024 * 1024) );
max-free = (toString (5 * 1024 * 1024 * 1024) );
substituters = (if notDarwin then [ "http://nixcache.home" ] else []) ++ [
substituters = [
"https://cache.garnix.io"
"https://ai.cachix.org"
];
+1
View File
@@ -25,6 +25,7 @@
efibootmgr
psmisc
lshw
usbutils
];
system.stateVersion = "24.05";
+1 -1
View File
@@ -83,7 +83,7 @@ in rec {
};
pipenv-ivr = prev.callPackage ./pipenv.nix { };
myxonsh = (prev.xonsh-unwrapped.passthru.wrapper.override {
myxonsh = (prev.unstable.xonsh-unwrapped.passthru.wrapper.override {
extraPackages = (ps: with ps; [
xonsh-apipenv
xonsh-direnv