move microvms to separate folder

3 files changed, 0 insertions, 185 deletions

diff --git a/hosts/forgejo/default.nix b/hosts/forgejo/default.nix
deleted file mode 100644
index 4e59c1b..0000000
--- a/hosts/forgejo/default.nix
+++ /dev/null
@@ -1,78 +0,0 @@
-{ config, lib, ... }:
-let
-  mac = "02:00:00:00:00:05";
-in
-{
-  imports = [
-    ./forgejo.nix
-  ];
-  sops.defaultSopsFile = ./secrets.yaml;
-  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-
-  sops.secrets = {
-    "wg/0xa-proxy" = {
-      owner = config.users.users.systemd-network.name;
-    };
-  };
-
-  microvm = {
-    hypervisor = "cloud-hypervisor";
-    vsock.cid = 3 + 5;
-    mem = 3 * 1024;
-    vcpu = 4;
-    interfaces = [
-      {
-        type = "tap";
-        id = "uvm-forgejo";
-        mac = mac;
-      }
-    ];
-    shares = [
-      {
-        source = "/nix/store";
-        mountPoint = "/nix/.ro-store";
-        tag = "store";
-        proto = "virtiofs";
-        socket = "store.socket";
-      }
-    ]
-    ++
-      map
-        (dir: {
-          source = dir;
-          mountPoint = "/${dir}";
-          tag = dir;
-          proto = "virtiofs";
-          socket = "${dir}.socket";
-        })
-        [
-          "etc"
-          "var"
-          "home"
-        ];
-  };
-
-  networking.useNetworkd = true;
-  networking.firewall.enable = lib.mkForce false; # firewalling done by the host
-
-  systemd.network = {
-    enable = true;
-    networks."11-host" = {
-      matchConfig.MACAddress = mac;
-      networkConfig = {
-        Address = "10.99.99.15/24";
-        DHCP = "no";
-      };
-      routes = [
-        {
-          Gateway = "10.99.99.1";
-          Destination = "0.0.0.0/0";
-          Metric = 1024;
-        }
-      ];
-    };
-  };
-
-  networking.hostName = "forgejo";
-  system.stateVersion = "24.11";
-}
diff --git a/hosts/forgejo/forgejo.nix b/hosts/forgejo/forgejo.nix
deleted file mode 100644
index 965354f..0000000
--- a/hosts/forgejo/forgejo.nix
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  config,
-  pkgs,
-  lib,
-  ...
-}:
-{
-  services.forgejo = {
-    enable = true;
-    package = pkgs.forgejo;
-    useWizard = false;
-    database = {
-      type = "postgres";
-      createDatabase = true;
-    };
-    lfs.enable = true;
-    settings = {
-      DEFAULT.APP_NAME = "0xa's compilable shitposts";
-      actions.ENABLED = false;
-      database.LOG_SQL = false;
-      indexer.REPO_INDEXER_ENABLED = true;
-      mailer.ENABLED = false;
-      packages.ENABLED = false;
-      session.COOKIE_SECURE = true;
-      server = {
-        DOMAIN = "git.oxapentane.com";
-        SSH_DOMAIN = "git.oxapentane.com";
-        ROOT_URL = "https://git.oxapentane.com/";
-        PROTOCOL = "http";
-        START_SSH_SERVER = true;
-        BUILTIN_SSH_SERVER_USER = "git";
-        SSH_LISTEN_PORT = 2222;
-      };
-      repository = {
-        DEFAULT_REPO_UNITS = "repo.code,repo.releases,repo.issues,repo.pulls";
-        ENABLE_PUSH_CREATE_USER = true;
-      };
-      service = {
-        REGISTER_EMAIL_CONFIRM = false;
-        DISABLE_REGISTRATION = true;
-      };
-      oauth2_client = {
-        ENABLE_AUTO_REGISTRATION = true;
-        USERNAME = "nickname";
-        ACCOUNT_LINKING = "login";
-      };
-    };
-  };
-
-  # expose forgejo cli
-  environment.systemPackages =
-    let
-      cfg = config.services.forgejo;
-      forgejo-cli = pkgs.writeScriptBin "forgejo-cli" ''
-        #!${pkgs.runtimeShell}
-        cd ${cfg.stateDir}
-        sudo=exec
-        if [[ "$USER" != forgejo ]]; then
-          sudo='exec /run/wrappers/bin/sudo -u ${cfg.user} -g ${cfg.group} --preserve-env=GITEA_WORK_DIR --preserve-env=GITEA_CUSTOM'
-        fi
-        # Note that these variable names will change
-        export GITEA_WORK_DIR=${cfg.stateDir}
-        export GITEA_CUSTOM=${cfg.customDir}
-        $sudo ${lib.getExe cfg.package} "$@"
-      '';
-    in
-    [
-      forgejo-cli
-    ];
-}
diff --git a/hosts/forgejo/secrets.yaml b/hosts/forgejo/secrets.yaml
deleted file mode 100644
index a3d42af..0000000
--- a/hosts/forgejo/secrets.yaml
+++ /dev/null
@@ -1,37 +0,0 @@
-wg:
-    0xa-proxy: ENC[AES256_GCM,data:DZB/1S2Ev71DbnN+8C/K0mjIf/13Ki1f6vOIOdhsS6qyXKr5OwpbNb9KA0k=,iv:Gnd32DRJtP8LsC1P9GyS98oCLq/MBSCNcxrZngVXF6g=,tag:gyrzJOx9CS+1Kw5JRONIAw==,type:str]
-sops:
-    age:
-        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJl9iYG5oHBq/poBn7Jf1/FGWWbAnbx+NKjs7qtT3uAK
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHowb2lXdyB2OXBT
-            QkRaOERCYmJPdTViMXBqc2FUbGUxZjNkNmlqa2pCQzZ5R1JYT2xjCm51THQ2cTMx
-            WkV6b2QvWmQ0SHo5Sk0xTFB3NHpXUVRuWExzcy9wQUNQdUEKLS0tIGpvRnFRbUpy
-            Q3pqbGszM2p1eXFueTF3YXh4T1hzV0ZnOXdYODFRZ0JQcEkKZfPbYqMxfD1Qvu31
-            F7nESte4mN8YtUPnMTWHR0uNXWeUBAW2l/pjOOH40B8xHwmG/+4jv5fBVQJc2GKr
-            9REjvg==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAXrwZsBChUhVuF5gFEfj8GwQlnrqEttAytS5jVCfuE4 0xa@frituurpan
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFlJOElMUSBjRU9t
-            MWRoTEFsSFpUb1F4Mis5U0o4N3BldzlkSU53L3EwVTdkY2ZnUkZFCldvTmRNbjhD
-            eERYOTVob1o1c2xyVzNlbHd6ak5mbnk3dHc5YTB5SXNuR2cKLS0tIGpMRnRORy9k
-            N1F6a2lsQ2JCTFVHTXFtRTRJZHlUL1ZwVXhhNE9PUm15QlEK7Udv/Nx6FKfhjkBs
-            /hLzhzbZ3lwjexNhuyER+rpeZ70LtYmKm8EpcVnPdP3H0w5kyVyK31gv4iabpAUv
-            vNW+Wg==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1gknaqevzuq7dtqalng3547w5qflk9a0kugymea5h54eg6twu43pqpkr4zt
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByT05nL1Vla1k5S0VpVzY2
-            ZXgvOHlycnljMFYrb1g4ZGI0YTBzMytTZWxVCmNKRW9LWld5enNyL2lKVEQyZFlw
-            RUVOQlFsOXFvaW91VUJUS0w4RWR2ZW8KLS0tIHVpVU8waXVYY1hKTHhneVV5NlVD
-            TnQ3SFFsd2ZYdlRhQ2MyNzV6SzZJS3MKlAJNMzDPlxBYcyl/AyvApsq825FnOS1s
-            Etv58L70JbhMgOuJY6tu/4uBAQd2dLphTb8lm4slAQxxtp40pXZ3IA==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-02-03T18:25:04Z"
-    mac: ENC[AES256_GCM,data:sSG52AUXjzVo5klAx+t9rhWn/alKAETF6bPUSYP5Dz7WH3vcY5bs87RCm+BdxzlueHMTn4HBQ5iZ2V4e34403GPJsQMYgWSkKapbWGBRurT0xBO5aCJhxZWpvjFSPdehOGNODKGtYFgBVd81PwZRWFdx3MrkwIItyYEq4TAtIyI=,iv:p+t0QmQKDaSiwtuHfLzR31AzmmS39NFq1nn1BAG5YTk=,tag:FSm77zDvPbHCarkGZCgtmg==,type:str]
-    unencrypted_suffix: _unencrypted
-    version: 3.9.4