diff options
| author | Grisha Shipunov | 2026-07-26 08:45:30 +0000 |
|---|---|---|
| committer | Grisha Shipunov | 2026-07-26 08:45:30 +0000 |
| commit | a38e90adf7d746cc9cb1c1e02a615e32556597fa (patch) | |
| tree | 4752a20ffb4a2dab18e26952eaf4a84c9e0417e0 /hosts/stream/default.nix | |
| parent | 7be7bf0700dd2ae6e9e9b9726ec94d211f4615d7 (diff) | |
move microvms to separate folder
Diffstat (limited to 'hosts/stream/default.nix')
| -rw-r--r-- | hosts/stream/default.nix | 77 |
1 files changed, 0 insertions, 77 deletions
diff --git a/hosts/stream/default.nix b/hosts/stream/default.nix deleted file mode 100644 index 2cad795..0000000 --- a/hosts/stream/default.nix +++ /dev/null @@ -1,77 +0,0 @@ -{ config, lib, ... }: -let - mac = "02:00:00:00:00:07"; -in -{ - imports = [ - ./navidrome.nix - ]; - - sops.defaultSopsFile = ./secrets.yaml; - sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; - - sops.secrets = { - "wg/0xa-proxy" = { - owner = config.users.users.systemd-network.name; - }; - }; - - microvm = { - hypervisor = "cloud-hypervisor"; - vsock.cid = 3 + 7; - mem = 3 * 1024; - vcpu = 2; - interfaces = [ - { - type = "tap"; - id = "uvm-stream"; - mac = mac; - } - ]; - shares = [ - { - source = "/nix/store"; - mountPoint = "/nix/.ro-store"; - tag = "store"; - proto = "virtiofs"; - } - ] - ++ - map - (dir: { - source = dir; - mountPoint = "/${dir}"; - tag = dir; - proto = "virtiofs"; - }) - [ - "etc" - "var" - "home" - ]; - }; - - networking.useNetworkd = true; - networking.firewall.enable = lib.mkForce false; # firewalling done by the host - - systemd.network = { - enable = true; - networks."11-host" = { - matchConfig.MACAddress = mac; - networkConfig = { - Address = "10.99.99.17/24"; - DHCP = "no"; - }; - routes = [ - { - Gateway = "10.99.99.1"; - Destination = "0.0.0.0/0"; - Metric = 1024; - } - ]; - }; - }; - - networking.hostName = "stream"; - system.stateVersion = "25.05"; -} |
