115 lines
2.6 KiB
Nix
115 lines
2.6 KiB
Nix
{ config, pkgs, lib, inputs, ... }:
|
|
|
|
let
|
|
|
|
gitlabStateDir = "/var/lib/gitlab";
|
|
|
|
registryPort = 8001;
|
|
|
|
container = input: (lib.attrsets.recursiveUpdate {
|
|
bindMounts."/etc/ssh".hostPath = "/etc/ssh"; # For agenix secrets
|
|
privateNetwork = true;
|
|
} input);
|
|
in {
|
|
networking = {
|
|
firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [ 80 registryPort ];
|
|
};
|
|
nat = {
|
|
enable = true;
|
|
internalInterfaces = [ "ve-+" ];
|
|
externalInterface = "enp38s0";
|
|
};
|
|
};
|
|
|
|
greg.proxies."git.thehellings.lan".target = "http://192.168.200.2";
|
|
|
|
system.activationScripts.makeGitlabDir = lib.stringAfter [ "var" ] "mkdir -p ${gitlabStateDir} && touch ${gitlabStateDir}/touch";
|
|
|
|
containers.gitlab = container {
|
|
autoStart = true;
|
|
bindMounts = {
|
|
"/var/gitlab/state" = {
|
|
hostPath = gitlabStateDir;
|
|
isReadOnly = false;
|
|
};
|
|
};
|
|
forwardPorts = [{
|
|
hostPort = 2222;
|
|
containerPort = 22;
|
|
}];
|
|
hostAddress = "192.168.200.1";
|
|
localAddress = "192.168.200.2";
|
|
config = ((import ./container-git.nix) { inherit inputs registryPort; });
|
|
};
|
|
|
|
systemd.services."container@gitlab-runner-qemu".serviceConfig = {
|
|
DevicePolicy = lib.mkForce "auto";
|
|
ExecPostStop = [
|
|
"rmmod kvm_amd kvm"
|
|
];
|
|
ExecPreStart = [
|
|
"modprobe kvm"
|
|
];
|
|
};
|
|
systemd.services."container@gitlab-runner-qemu".conflicts = [ "container@gitlab-runner-vbox.service" ];
|
|
|
|
containers.gitlab-runner-qemu = container {
|
|
bindMounts = {
|
|
"/dev/kvm" = {
|
|
hostPath = "/dev/kvm";
|
|
isReadOnly = false;
|
|
};
|
|
};
|
|
extraFlags = [
|
|
"--property=DeviceAllow=/dev/kvm"
|
|
];
|
|
hostAddress = "192.168.201.1";
|
|
localAddress = "192.168.201.2";
|
|
config = ((import ./container-runner-qemu.nix) inputs);
|
|
};
|
|
|
|
systemd.services."container@gitlab-runner-vbox".serviceConfig = {
|
|
DevicePolicy = lib.mkForce "auto";
|
|
ExecPostStop = [
|
|
"rmmod vboxnetadp vboxnetflt vboxdrv"
|
|
];
|
|
ExecPreStart = [
|
|
"modprobe vboxdrv vboxnetadp vboxnetflt"
|
|
];
|
|
};
|
|
systemd.services."container@gitlab-runner-vbox".conflicts = [ "container@gitlab-runner-qemu.service" ];
|
|
|
|
containers.gitlab-runner-vbox = container {
|
|
bindMounts = {
|
|
"/dev/vboxdrv" = {
|
|
hostPath = "/dev/vboxdrv";
|
|
isReadOnly = false;
|
|
};
|
|
"/dev/vboxdrvu" = {
|
|
hostPath = "/dev/vboxdrvu";
|
|
isReadOnly = false;
|
|
};
|
|
"/dev/vboxnetctl" = {
|
|
hostPath = "/dev/vboxnetctl";
|
|
isReadOnly = false;
|
|
};
|
|
};
|
|
hostAddress = "192.168.202.1";
|
|
localAddress = "192.168.202.2";
|
|
config = ((import ./container-runner-vbox.nix) {
|
|
inherit inputs;
|
|
name = "vbox";
|
|
extra = {
|
|
virtualisation.virtualbox.host = {
|
|
enable = true;
|
|
enableExtensionPack = true;
|
|
enableHardening = false;
|
|
headless = true;
|
|
};
|
|
};
|
|
});
|
|
};
|
|
}
|