root
84e4c68f0e
buildbot/nix-eval Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-genesis Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-exodus Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-hosea Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-isaiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-jeremiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-linode Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-zeke Build done.
buildbot/nix-build Build done.
Per review feedback:
- nebula module now defaults unsafeRoutes to [{route=10.42.0.0/16 via=10.157.0.2}]
so all regular nodes get home LAN routing automatically
- genesis overrides unsafeRoutes=[] since it IS the routing node (avoids loop)
- exodus and all k3s nodes (hosea, isaiah, jeremiah, zeke) simplified to
nebula.enable = true only, relying on the new default
85 lines
1.5 KiB
Nix
85 lines
1.5 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
metadata,
|
|
top,
|
|
...
|
|
}:
|
|
|
|
{
|
|
imports = [
|
|
./boot.nix
|
|
./hardware-configuration.nix
|
|
# ./virt.nix
|
|
top.nix-hardware.nixosModules.system76
|
|
];
|
|
|
|
age.secrets = {
|
|
gitea-workerPassword.file = ../../../secrets/gitea/workerPassword.age;
|
|
};
|
|
|
|
boot.extraModulePackages = [ config.boot.kernelPackages.v4l2loopback ];
|
|
|
|
greg = {
|
|
kubernetes = {
|
|
enable = true;
|
|
vipInterface = "enp12s0";
|
|
priority = 253;
|
|
};
|
|
nebula.enable = true;
|
|
remote-builder.enable = true;
|
|
runner = {
|
|
enable = true;
|
|
vbox = false;
|
|
};
|
|
tailscale = {
|
|
enable = true;
|
|
tags = [ "home" ];
|
|
};
|
|
};
|
|
|
|
hardware = {
|
|
nvidia = {
|
|
modesetting.enable = true;
|
|
powerManagement = {
|
|
enable = false;
|
|
finegrained = false;
|
|
};
|
|
nvidiaSettings = true;
|
|
open = true;
|
|
};
|
|
system76 = {
|
|
firmware-daemon.enable = true;
|
|
#kernel-modules.enable = true;
|
|
};
|
|
};
|
|
|
|
networking = {
|
|
hostName = "zeke";
|
|
networkmanager.enable = lib.mkForce true;
|
|
enableIPv6 = false;
|
|
useDHCP = false;
|
|
interfaces.enp12s0.useDHCP = true;
|
|
};
|
|
|
|
# Let's do a sound thing
|
|
services = {
|
|
k3s = {
|
|
extraFlags = [
|
|
"--tls-san ${metadata.hosts.${config.networking.hostName}.ip}"
|
|
#"--bind-address ${ip}"
|
|
];
|
|
};
|
|
};
|
|
|
|
users.users.greg.extraGroups = [
|
|
"podman"
|
|
];
|
|
|
|
# virtualisation.virtualbox.host = {
|
|
# enableExtensionPack = true;
|
|
# headless = true;
|
|
# enableWebService = true;
|
|
# };
|
|
}
|