summaryrefslogtreecommitdiff
path: root/microvms/miniflux/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'microvms/miniflux/default.nix')
-rw-r--r--microvms/miniflux/default.nix60
1 files changed, 3 insertions, 57 deletions
diff --git a/microvms/miniflux/default.nix b/microvms/miniflux/default.nix
index d2f024f..89235c1 100644
--- a/microvms/miniflux/default.nix
+++ b/microvms/miniflux/default.nix
@@ -1,13 +1,11 @@
{ config, lib, ... }:
-let
- mac = "02:00:00:00:00:04";
-in
{
imports = [
+ ../lib
./miniflux.nix
];
- sops.defaultSopsFile = ./secrets.yaml;
- sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
+ oxalab.vm.number = 4;
sops.secrets = {
"wg/0xa-proxy" = {
@@ -16,62 +14,10 @@ in
};
microvm = {
- hypervisor = "cloud-hypervisor";
- vsock.cid = 3 + 4;
mem = 1 * 1024;
vcpu = 2;
- interfaces = [
- {
- type = "tap";
- id = "uvm-miniflux";
- mac = mac;
- }
- ];
- shares = [
- {
- source = "/nix/store";
- mountPoint = "/nix/.ro-store";
- tag = "store";
- proto = "virtiofs";
- socket = "store.socket";
- }
- ]
- ++
- map
- (dir: {
- source = dir;
- mountPoint = "/${dir}";
- tag = dir;
- proto = "virtiofs";
- socket = "${dir}.socket";
- })
- [
- "etc"
- "var"
- "home"
- ];
};
- networking.useNetworkd = true;
- networking.firewall.enable = lib.mkForce false; # firewalling done by the host
-
- systemd.network = {
- enable = true;
- networks."11-host" = {
- matchConfig.MACAddress = mac;
- networkConfig = {
- Address = "10.99.99.14/24";
- DHCP = "no";
- };
- routes = [
- {
- Gateway = "10.99.99.1";
- Destination = "0.0.0.0/0";
- Metric = 1024;
- }
- ];
- };
- };
networking.hostName = "miniflux";
system.stateVersion = "24.11";