feat(config): add franky

This commit is contained in:
Florian Schmitt 2024-12-27 23:46:00 +03:00
parent 30edf646d3
commit 802a593502
4 changed files with 160 additions and 0 deletions

View file

@ -21,6 +21,17 @@
service = "service-nixin-web-lab12";
};
# proxy for nixin-web on franky
services.traefik.dynamicConfigOptions.http.services."service-nixin-web-franky-mrflos" = {
loadBalancer.servers = [
{ url = "http://192.168.12.9:8081"; }
];
};
services.traefik.dynamicConfigOptions.http.routers."router-nixin-web-franky-mrflos" = {
rule = "Host(`nixin.franky.mrflos.pw`)";
service = "service-nixin-web-franky-mrflos";
};
# proxy for nixin-web on sanji
services.traefik.dynamicConfigOptions.http.services."service-nixin-web-sanji-mrflos" = {
loadBalancer.servers = [

View file

@ -0,0 +1,99 @@
{
pkgs,
...
}:
{
imports = [
./hardware-configuration.nix
../modules/nixin-base.nix
../modules/nginx.nix
../modules/wireguard-client.nix
../modules/users.nix
../modules/nixin-web.nix
];
boot.kernel.sysctl = {
"net.ipv4.ip_forward" = 1;
"net.ipv6.conf.all.forwarding" = 1;
};
nixin.wg.client = {
ipv4 = "192.168.12.9";
ipv6 = "2a01:4f9:1a:9a05::9";
allowedIPs = [
"192.168.12.0/24"
"2a01:4f9:1a:9a05::/64"
];
endpoint = "vpn.lab12.fr:51812";
endpointKey = "cUmp55I20JEhxr+RMmOsX+6U9kcDiAq3grnvzjQ642w=";
};
nixin.web = {
domain = "nixin.franky.mrflos.pw";
http-port = 8081;
};
nixpkgs.config.allowUnfree = true;
environment.systemPackages = with pkgs; [
neovim
magic-wormhole
git
];
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
i18n.defaultLocale = "en_US.UTF-8";
services.openssh = {
enable = true;
ports = [ 4222 ];
};
networking = {
hostName = "franky";
firewall = {
enable = true;
allowedTCPPorts = [
80
4222
443
8081
];
allowedUDPPortRanges = [
{
from = 60000;
to = 61000;
}
];
};
nat = {
enable = true;
internalIPs = [ "10.10.9.0/24" ];
externalInterface = "enp0s31f6";
};
bridges = {
"br0" = {
interfaces = [ ];
};
};
interfaces = {
enp0s31f6 = {
useDHCP = true;
};
# interface for containers virtual network
br0 = {
useDHCP = false;
ipv4.addresses = [
{
address = "10.10.9.1";
prefixLength = 24;
}
];
};
};
};
system.copySystemConfiguration = true;
system.stateVersion = "24.11";
}

View file

@ -0,0 +1,40 @@
# Do not modify this file! It was generated by nixos-generate-config
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
imports =
[ (modulesPath + "/installer/scan/not-detected.nix")
];
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "uas" "sd_mod" ];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
fileSystems."/" =
{ device = "/dev/disk/by-uuid/b66aa655-23c0-45ca-a7b3-95b03bdda4fc";
fsType = "btrfs";
};
fileSystems."/boot" =
{ device = "/dev/disk/by-uuid/5D1A-DA4E";
fsType = "vfat";
options = [ "fmask=0077" "dmask=0077" ];
};
swapDevices =
[ { device = "/dev/disk/by-uuid/8e976d77-2ca2-4b2a-a05d-ecb14254833c"; }
];
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
# (the default) this is the recommended approach. When using systemd-networkd it's
# still possible to use this option, but it's recommended to use it in conjunction
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
networking.useDHCP = lib.mkDefault true;
# networking.interfaces.enp0s31f6.useDHCP = lib.mkDefault true;
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}

View file

@ -49,6 +49,14 @@ let
};
};
franky = pkgs.krops.writeDeploy "deploy-server-franky" {
source = source "franky";
target = lib.mkTarget "operator@192.168.12.9" // {
port = "4222";
sudo = true;
};
};
sanji = pkgs.krops.writeDeploy "deploy-server-sanji" {
source = source "sanji";
target = lib.mkTarget "operator@192.168.12.5" // {
@ -110,6 +118,7 @@ in
arachnide = arachnide;
framboise = framboise;
grille-pain = grille-pain;
franky = franky;
sanji = sanji;
zoro = zoro;
dromadaire = dromadaire;
@ -119,6 +128,7 @@ in
arachnide
framboise
grille-pain
franky
sanji
zoro
dromadaire