Greg Hellings
67e626c470
Add a mountpoint for the root Btrfs volume on Jeremiah so that the root of the volume can be accessed Also, create and mount a PVE subvol for fiddling around with the Btrfs suport in PVE
134 lines
2.9 KiB
Nix
134 lines
2.9 KiB
Nix
# Edit this configuration file to define what should be installed on
|
||
# your system. Help is available in the configuration.nix(5) man page
|
||
# and in the NixOS manual (accessible by running ‘nixos-help’).
|
||
|
||
{
|
||
config,
|
||
pkgs,
|
||
lib,
|
||
top,
|
||
...
|
||
}:
|
||
|
||
{
|
||
imports = [
|
||
# Include the results of the hardware scan.
|
||
./hardware-configuration.nix
|
||
top.proxmox.nixosModules.proxmox-ve
|
||
];
|
||
|
||
# Bootloader.
|
||
boot.loader = {
|
||
systemd-boot.enable = true;
|
||
efi.canTouchEfiVariables = true;
|
||
};
|
||
|
||
environment.systemPackages = with pkgs; [
|
||
curl
|
||
gawk
|
||
git
|
||
unzip
|
||
wget
|
||
];
|
||
|
||
fileSystems = {
|
||
"/nix" = {
|
||
fsType = "btrfs";
|
||
options = [ "subvol=nix" ];
|
||
device = "/dev/nvme0n1p1";
|
||
};
|
||
"/var" = {
|
||
fsType = "btrfs";
|
||
options = [ "subvol=var" ];
|
||
device = "/dev/nvme0n1p1";
|
||
};
|
||
"/var/pve" = {
|
||
fsType = "btrfs";
|
||
options = [ "subvol=pve" ];
|
||
device = "/dev/nvme0n1p1";
|
||
};
|
||
"/btrfs" = {
|
||
fsType = "btrfs";
|
||
device = "/dev/nvme0n1p1";
|
||
};
|
||
"/media/proxmox" = {
|
||
device = "10.42.1.4:/volume1/proxmox";
|
||
fsType = "nfs";
|
||
options = [ "noatime" ];
|
||
};
|
||
};
|
||
|
||
greg = {
|
||
home = true;
|
||
tailscale.enable = true;
|
||
remote-builder.enable = true;
|
||
};
|
||
|
||
networking = {
|
||
hostName = "jeremiah"; # Define your hostname.
|
||
useDHCP = false;
|
||
bridges.br0 = {
|
||
interfaces = [ "enp68s0" ];
|
||
};
|
||
defaultGateway = {
|
||
address = " 10.42.1.2";
|
||
interface = "br0";
|
||
};
|
||
interfaces = {
|
||
br0 = {
|
||
ipv4.addresses = [
|
||
{
|
||
address = "10.42.1.8";
|
||
prefixLength = 16;
|
||
}
|
||
];
|
||
};
|
||
};
|
||
nameservers = [ "10.42.1.5" ];
|
||
};
|
||
|
||
#####################################################################################
|
||
#################### Virtualbox Runner ##############################################
|
||
#####################################################################################
|
||
age.secrets.runner-reg.file = ../../secrets/gitlab/jeremiah-runner-reg.age;
|
||
|
||
services = {
|
||
gitlab-runner = {
|
||
enable = true;
|
||
settings.concurrent = 7;
|
||
services = {
|
||
shell = {
|
||
executor = "shell";
|
||
limit = 7;
|
||
authenticationTokenConfigFile = config.age.secrets.runner-reg.path;
|
||
environmentVariables = {
|
||
EFI_DIR = "${pkgs.OVMF.fd}/FV/";
|
||
STORAGE_URL = "s3.thehellings.lan:9000";
|
||
};
|
||
};
|
||
};
|
||
};
|
||
proxmox-ve = {
|
||
enable = true;
|
||
ipAddress = (builtins.elemAt config.networking.interfaces.br0.ipv4.addresses 0).address;
|
||
};
|
||
};
|
||
|
||
systemd.services."gitlab-runner" = {
|
||
after = [
|
||
"network.target"
|
||
"network-online.target"
|
||
"tailscaled.service"
|
||
];
|
||
requires = [
|
||
"network-online.target"
|
||
"tailscaled.service"
|
||
];
|
||
serviceConfig = {
|
||
DevicePolicy = lib.mkForce "auto";
|
||
User = "root";
|
||
DynamicUser = lib.mkForce false;
|
||
};
|
||
};
|
||
}
|