chore: dynamic hosts, builder targets

Make hosts read from directories, to limit manual changes
Rename vm-gitlab -> gitlab
A few reformatting and lint changes due to altered files
Create builder targets for Darwin builders

hosts/unstable/isaiah/default.nix

@@ -0,0 +1,118 @@
+{
+  config,
+  lib,
+  metadata,
+  ...
+}:
+{
+  imports = [
+    ./hardware-configuration.nix
+  ];
+
+  age.secrets = {
+    gitea-runner-isaiah-podman.file = ../../secrets/gitea/runner-isaiah-podman.age;
+    gitea-workerPassword.file = ../../secrets/gitea/workerPassword.age;
+    runner-reg.file = ../../secrets/gitlab/kubernetes-k3s-local.age;
+  };
+
+  boot = {
+    binfmt.emulatedSystems = [ "aarch64-linux" ];
+    extraModprobeConfig = "options kvm_amd nested=1";
+    kernel.sysctl = {
+      "net.bridge.bridge-nf-call-ip6tables" = 0;
+      "net.bridge.bridge-nf-call-iptables" = 0;
+      "net.bridge.bridge-nf-call-arptables" = 0;
+    };
+    loader = {
+      efi = {
+        canTouchEfiVariables = true;
+        efiSysMountPoint = "/boot";
+      };
+      systemd-boot = {
+        enable = true;
+      };
+    };
+    supportedFilesystems = [ "ntfs" ];
+  };
+
+  greg = {
+    kubernetes = {
+      enable = true;
+      vipInterface = "enp38s0";
+      vip = metadata.hosts.${config.networking.hostName}.ip;
+      priority = 255;
+    };
+    podman.enable = true;
+    tailscale = {
+      enable = true;
+      tags = [ "home" ];
+    };
+    remote-builder.enable = true;
+    runner = {
+      enable = true;
+      qemu = true;
+    };
+  };
+
+  fileSystems = {
+    "/media/proxmox" = {
+      device = "10.42.1.4:/volume1/proxmox";
+      fsType = "nfs";
+      options = [ "noatime" ];
+    };
+  };
+
+  networking = {
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [ 80 ];
+      checkReversePath = lib.mkForce false;
+    };
+    hostName = "isaiah";
+    interfaces.enp38s0.useDHCP = true;
+    useDHCP = false;
+  };
+
+  services = {
+    gitea-actions-runner.instances.podman = {
+      enable = true;
+      labels = [
+        "debian-latest:docker://node:25-trixie"
+
+        "ubuntu-latest:docker://docker.gitea.com/runner-images:ubuntu-latest"
+        "ubuntu-24.04:docker://docker.gitea.com/runner-images:ubuntu-24.04"
+        "ubuntu-22.04:docker://docker.gitea.com/runner-images:ubuntu-22.04"
+
+        "ubuntu-full-latest:docker://ghcr.io/catthehacker/ubuntu:full-latest"
+        "ubuntu-full-24.04:docker://ghcr.io/catthehacker/ubuntu:full-24.04"
+        "ubuntu-full-22.04:docker://ghcr.io/catthehacker/ubuntu:full-22.04"
+
+        "ubuntu-act-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest"
+        "ubuntu-act-24.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04"
+        "ubuntu-act-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04"
+
+        "ubuntu-runner-latest:docker://ghcr.io/catthehacker/ubuntu:runner-latest"
+        "ubuntu-runner-24.04:docker://ghcr.io/catthehacker/ubuntu:runner-24.04"
+        "ubuntu-runner-22.04:docker://ghcr.io/catthehacker/ubuntu:runner-22.04"
+
+        "ubuntu-rust-latest:docker://ghcr.io/catthehacker/ubuntu:rust-latest"
+        "ubuntu-rust-24.04:docker://ghcr.io/catthehacker/ubuntu:rust-24.04"
+        "ubuntu-rust-22.04:docker://ghcr.io/catthehacker/ubuntu:rust-22.04"
+
+        "nix-latest:docker://src.thehellings.com/greg/builder:latest"
+      ];
+      name = "isaiah-podman";
+      settings = {
+        container.force_pull = true;
+        runner.capacity = 7;
+      };
+      tokenFile = config.age.secrets.gitea-runner-isaiah-podman.path;
+      url = "https://gitea.shire-zebra.ts.net";
+    };
+    k3s.clusterInit = true; # This is the first node in the cluster
+    openssh = {
+      enable = true;
+      settings.PermitRootLogin = "yes";
+    };
+  };
+}

hosts/unstable/isaiah/hardware-configuration.nix

@@ -0,0 +1,97 @@
+# Do not modify this file!	It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.	Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  modulesPath,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+  boot = {
+    extraModulePackages = [ ];
+    kernelModules = [ "kvm-amd" ];
+    initrd = {
+      availableKernelModules = [
+        "nvme"
+        "xhci_pci"
+        "ahci"
+        "usb_storage"
+        "usbhid"
+        "sd_mod"
+        "sr_mod"
+      ];
+      kernelModules = [ ];
+    };
+    loader = {
+      timeout = 15;
+      systemd-boot = {
+        enable = true;
+        configurationLimit = 20;
+        extraEntries = {
+          "Win.conf" = ''
+            title Windows
+            efi /EFI/Microsoft/Boot/bootmgfw.efi
+          '';
+          "Bootx64.conf" = ''
+            title BOOTX64.efi
+            efi /EFI/BOOT/BOOTX64.efi
+            options -nointerrupt -noconsolein -nosonsoleout windows11.nsh
+          '';
+          "Shell.conf" = ''
+            title EFI Shell
+            efi /shell.efi
+          '';
+        };
+        extraFiles = {
+          "windows11.nsh" = (pkgs.writeText "windows11.nsh" (lib.strings.concatStringsSep "\n" [ ]));
+          "shell.efi" = "${pkgs.edk2-uefi-shell}/shell.efi";
+        };
+      };
+    };
+  };
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/714744ca-dd9d-4713-b571-c6ccfbf56d79";
+    fsType = "btrfs";
+    options = [ "subvol=nixos" ];
+  };
+
+  fileSystems."/home" = {
+    device = "/dev/disk/by-uuid/714744ca-dd9d-4713-b571-c6ccfbf56d79";
+    fsType = "btrfs";
+    options = [ "subvol=home" ];
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/4A92-3E4B";
+    fsType = "vfat";
+  };
+
+  fileSystems."/myvol" = {
+    device = "/dev/disk/by-uuid/714744ca-dd9d-4713-b571-c6ccfbf56d79";
+    fsType = "btrfs";
+  };
+
+  fileSystems."/var/lib/longhorn" = {
+    device = "/dev/disk/by-uuid/b9f5ace7-d224-4aff-8770-d5a9d22be2ae";
+    fsType = "xfs";
+  };
+
+  swapDevices = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp38s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp39s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp42s0f3u5u3c2.useDHCP = lib.mkDefault true;
+
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}