feat(config): add franky
This commit is contained in:
parent
30edf646d3
commit
802a593502
4 changed files with 160 additions and 0 deletions
|
@ -21,6 +21,17 @@
|
|||
service = "service-nixin-web-lab12";
|
||||
};
|
||||
|
||||
# proxy for nixin-web on franky
|
||||
services.traefik.dynamicConfigOptions.http.services."service-nixin-web-franky-mrflos" = {
|
||||
loadBalancer.servers = [
|
||||
{ url = "http://192.168.12.9:8081"; }
|
||||
];
|
||||
};
|
||||
services.traefik.dynamicConfigOptions.http.routers."router-nixin-web-franky-mrflos" = {
|
||||
rule = "Host(`nixin.franky.mrflos.pw`)";
|
||||
service = "service-nixin-web-franky-mrflos";
|
||||
};
|
||||
|
||||
# proxy for nixin-web on sanji
|
||||
services.traefik.dynamicConfigOptions.http.services."service-nixin-web-sanji-mrflos" = {
|
||||
loadBalancer.servers = [
|
||||
|
|
99
config/franky/configuration.nix
Normal file
99
config/franky/configuration.nix
Normal file
|
@ -0,0 +1,99 @@
|
|||
{
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
|
||||
{
|
||||
imports = [
|
||||
./hardware-configuration.nix
|
||||
../modules/nixin-base.nix
|
||||
../modules/nginx.nix
|
||||
../modules/wireguard-client.nix
|
||||
../modules/users.nix
|
||||
../modules/nixin-web.nix
|
||||
];
|
||||
|
||||
boot.kernel.sysctl = {
|
||||
"net.ipv4.ip_forward" = 1;
|
||||
"net.ipv6.conf.all.forwarding" = 1;
|
||||
};
|
||||
|
||||
nixin.wg.client = {
|
||||
ipv4 = "192.168.12.9";
|
||||
ipv6 = "2a01:4f9:1a:9a05::9";
|
||||
allowedIPs = [
|
||||
"192.168.12.0/24"
|
||||
"2a01:4f9:1a:9a05::/64"
|
||||
];
|
||||
endpoint = "vpn.lab12.fr:51812";
|
||||
endpointKey = "cUmp55I20JEhxr+RMmOsX+6U9kcDiAq3grnvzjQ642w=";
|
||||
};
|
||||
|
||||
nixin.web = {
|
||||
domain = "nixin.franky.mrflos.pw";
|
||||
http-port = 8081;
|
||||
};
|
||||
nixpkgs.config.allowUnfree = true;
|
||||
|
||||
environment.systemPackages = with pkgs; [
|
||||
neovim
|
||||
magic-wormhole
|
||||
git
|
||||
];
|
||||
|
||||
boot.loader.systemd-boot.enable = true;
|
||||
boot.loader.efi.canTouchEfiVariables = true;
|
||||
i18n.defaultLocale = "en_US.UTF-8";
|
||||
|
||||
services.openssh = {
|
||||
enable = true;
|
||||
ports = [ 4222 ];
|
||||
};
|
||||
|
||||
networking = {
|
||||
hostName = "franky";
|
||||
firewall = {
|
||||
enable = true;
|
||||
allowedTCPPorts = [
|
||||
80
|
||||
4222
|
||||
443
|
||||
8081
|
||||
];
|
||||
allowedUDPPortRanges = [
|
||||
{
|
||||
from = 60000;
|
||||
to = 61000;
|
||||
}
|
||||
];
|
||||
};
|
||||
nat = {
|
||||
enable = true;
|
||||
internalIPs = [ "10.10.9.0/24" ];
|
||||
externalInterface = "enp0s31f6";
|
||||
};
|
||||
bridges = {
|
||||
"br0" = {
|
||||
interfaces = [ ];
|
||||
};
|
||||
};
|
||||
interfaces = {
|
||||
enp0s31f6 = {
|
||||
useDHCP = true;
|
||||
};
|
||||
# interface for containers virtual network
|
||||
br0 = {
|
||||
useDHCP = false;
|
||||
ipv4.addresses = [
|
||||
{
|
||||
address = "10.10.9.1";
|
||||
prefixLength = 24;
|
||||
}
|
||||
];
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
system.copySystemConfiguration = true;
|
||||
system.stateVersion = "24.11";
|
||||
}
|
40
config/franky/hardware-configuration.nix
Normal file
40
config/franky/hardware-configuration.nix
Normal file
|
@ -0,0 +1,40 @@
|
|||
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||
# and may be overwritten by future invocations. Please make changes
|
||||
# to /etc/nixos/configuration.nix instead.
|
||||
{ config, lib, pkgs, modulesPath, ... }:
|
||||
|
||||
{
|
||||
imports =
|
||||
[ (modulesPath + "/installer/scan/not-detected.nix")
|
||||
];
|
||||
|
||||
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "uas" "sd_mod" ];
|
||||
boot.initrd.kernelModules = [ ];
|
||||
boot.kernelModules = [ "kvm-intel" ];
|
||||
boot.extraModulePackages = [ ];
|
||||
|
||||
fileSystems."/" =
|
||||
{ device = "/dev/disk/by-uuid/b66aa655-23c0-45ca-a7b3-95b03bdda4fc";
|
||||
fsType = "btrfs";
|
||||
};
|
||||
|
||||
fileSystems."/boot" =
|
||||
{ device = "/dev/disk/by-uuid/5D1A-DA4E";
|
||||
fsType = "vfat";
|
||||
options = [ "fmask=0077" "dmask=0077" ];
|
||||
};
|
||||
|
||||
swapDevices =
|
||||
[ { device = "/dev/disk/by-uuid/8e976d77-2ca2-4b2a-a05d-ecb14254833c"; }
|
||||
];
|
||||
|
||||
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||
# still possible to use this option, but it's recommended to use it in conjunction
|
||||
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
||||
networking.useDHCP = lib.mkDefault true;
|
||||
# networking.interfaces.enp0s31f6.useDHCP = lib.mkDefault true;
|
||||
|
||||
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
||||
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||
}
|
10
krops.nix
10
krops.nix
|
@ -49,6 +49,14 @@ let
|
|||
};
|
||||
};
|
||||
|
||||
franky = pkgs.krops.writeDeploy "deploy-server-franky" {
|
||||
source = source "franky";
|
||||
target = lib.mkTarget "operator@192.168.12.9" // {
|
||||
port = "4222";
|
||||
sudo = true;
|
||||
};
|
||||
};
|
||||
|
||||
sanji = pkgs.krops.writeDeploy "deploy-server-sanji" {
|
||||
source = source "sanji";
|
||||
target = lib.mkTarget "operator@192.168.12.5" // {
|
||||
|
@ -110,6 +118,7 @@ in
|
|||
arachnide = arachnide;
|
||||
framboise = framboise;
|
||||
grille-pain = grille-pain;
|
||||
franky = franky;
|
||||
sanji = sanji;
|
||||
zoro = zoro;
|
||||
dromadaire = dromadaire;
|
||||
|
@ -119,6 +128,7 @@ in
|
|||
arachnide
|
||||
framboise
|
||||
grille-pain
|
||||
franky
|
||||
sanji
|
||||
zoro
|
||||
dromadaire
|
||||
|
|
Loading…
Reference in a new issue