50 lines
1.7 KiB
Nix
50 lines
1.7 KiB
Nix
|
{ config, ... }: {
|
||
|
|
imports = [
|
||
|
|
./miniflux.nix
|
||
|
|
./oxaproxy.nix
|
||
|
|
];
|
||
|
|
|
||
|
|
microvm = {
|
||
|
|
hypervisor = "qemu";
|
||
|
|
mem = 1 * 1024;
|
||
|
|
vcpu = 1;
|
||
|
|
|
||
|
|
shares = [{
|
||
|
|
source = "/nix/store";
|
||
|
|
mountPoint = "/nix/.ro-store";
|
||
|
|
tag = "store";
|
||
|
|
proto = "virtiofs";
|
||
|
|
socket = "store.socket";
|
||
|
|
}] ++ map
|
||
|
|
(dir: {
|
||
|
|
source = "/var/lib/microvms/${config.networking.hostName}/${dir}";
|
||
|
|
mountPoint = "/${dir}";
|
||
|
|
tag = dir;
|
||
|
|
proto = "virtiofs";
|
||
|
|
socket = "${dir}.socket";
|
||
|
|
}) [ "etc" "var" "home" ];
|
||
|
|
|
||
|
|
interfaces = [{
|
||
|
|
type = "tap";
|
||
|
|
id = "vm-news";
|
||
|
|
mac = "EA:40:E8:60:C5:38";
|
||
|
|
}];
|
||
|
|
};
|
||
|
|
|
||
|
|
networking = {
|
||
|
|
hostName = "news";
|
||
|
|
};
|
||
|
|
|
||
|
|
services.openssh = {
|
||
|
|
enable = true;
|
||
|
|
permitRootLogin = "prohibit-password";
|
||
|
|
};
|
||
|
|
|
||
|
|
networking.firewall.allowedTCPPorts = [ 22 ];
|
||
|
|
users.users.root.openssh.authorizedKeys.keys = [
|
||
|
|
"ssh-rsa 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 cardno:16 811 348"
|
||
|
|
];
|
||
|
|
|
||
|
|
system.stateVersion = "22.11";
|
||
|
|
}
|