From a0bf3340520137aa194b7287464fab1dede9a6d0 Mon Sep 17 00:00:00 2001
From: Greg Hellings <greg.hellings@gmail.com>
Date: Thu, 20 Jun 2024 22:02:57 -0500
Subject: [PATCH] Enable backend connection to Minio

---
 hosts/jeremiah/default.nix | 11 +++++++++--
 hosts/jeremiah/minio.nix   | 32 ++++++++++++++++++++++++++++++++
 2 files changed, 41 insertions(+), 2 deletions(-)
 create mode 100644 hosts/jeremiah/minio.nix

diff --git a/hosts/jeremiah/default.nix b/hosts/jeremiah/default.nix
index c992675..584b31c 100644
--- a/hosts/jeremiah/default.nix
+++ b/hosts/jeremiah/default.nix
@@ -9,6 +9,7 @@
 		[ # Include the results of the hardware scan.
 			./ceph.nix
 			./hardware-configuration.nix
+			./minio.nix
 		];
 
 	# Bootloader.
@@ -22,6 +23,12 @@
 			address = " 10.42.1.1";
 			interface = "enp68s0";
 		};
+		vlans = {
+			san = {
+				id = 616;
+				interface = "enp67s0";
+			};
+		};
 		interfaces = {
 			enp68s0 = {
 				ipv4.addresses = [ {
@@ -32,10 +39,10 @@
 					prefixLength = 16;
 				} ];
 			};
-			enp67s0 = {
+			san = {
 				ipv4.addresses = [ {
 					address = "10.201.1.2";
-					prefixLength = 16;
+					prefixLength = 24;
 				} ];
 			};
 		};
diff --git a/hosts/jeremiah/minio.nix b/hosts/jeremiah/minio.nix
new file mode 100644
index 0000000..522498f
--- /dev/null
+++ b/hosts/jeremiah/minio.nix
@@ -0,0 +1,32 @@
+{ config, pkgs, ... }:
+
+let
+	minioPort = 9000;
+	minioConsolePort = 9001;
+in {
+	environment.systemPackages = with pkgs; [
+		minio-client
+		xfsprogs
+	];
+
+	greg.proxies."minio-02.thehellings.lan".target = "http://localhost:9000";
+
+	fileSystems."/data/1" = {
+		device = "/dev/disk/by-id/ata-ST12000NM0558_ZHZ5YSXW-part1";
+		fsType = "xfs";
+	};
+
+	networking.firewall.allowedTCPPorts = [
+		minioPort
+		minioConsolePort
+	];
+
+	age.secrets.minio.file = ../../secrets/minio.age;
+
+	services.minio = {
+		enable = true;
+		dataDir = [ "/data/1/minio" ];
+		rootCredentialsFile = config.age.secrets.minio.path;
+		browser = true;
+	};
+}