diff options
Diffstat (limited to 'microvms/miniflux/default.nix')
| -rw-r--r-- | microvms/miniflux/default.nix | 60 |
1 files changed, 3 insertions, 57 deletions
diff --git a/microvms/miniflux/default.nix b/microvms/miniflux/default.nix index d2f024f..89235c1 100644 --- a/microvms/miniflux/default.nix +++ b/microvms/miniflux/default.nix @@ -1,13 +1,11 @@ { config, lib, ... }: -let - mac = "02:00:00:00:00:04"; -in { imports = [ + ../lib ./miniflux.nix ]; - sops.defaultSopsFile = ./secrets.yaml; - sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; + + oxalab.vm.number = 4; sops.secrets = { "wg/0xa-proxy" = { @@ -16,62 +14,10 @@ in }; microvm = { - hypervisor = "cloud-hypervisor"; - vsock.cid = 3 + 4; mem = 1 * 1024; vcpu = 2; - interfaces = [ - { - type = "tap"; - id = "uvm-miniflux"; - mac = mac; - } - ]; - shares = [ - { - source = "/nix/store"; - mountPoint = "/nix/.ro-store"; - tag = "store"; - proto = "virtiofs"; - socket = "store.socket"; - } - ] - ++ - map - (dir: { - source = dir; - mountPoint = "/${dir}"; - tag = dir; - proto = "virtiofs"; - socket = "${dir}.socket"; - }) - [ - "etc" - "var" - "home" - ]; }; - networking.useNetworkd = true; - networking.firewall.enable = lib.mkForce false; # firewalling done by the host - - systemd.network = { - enable = true; - networks."11-host" = { - matchConfig.MACAddress = mac; - networkConfig = { - Address = "10.99.99.14/24"; - DHCP = "no"; - }; - routes = [ - { - Gateway = "10.99.99.1"; - Destination = "0.0.0.0/0"; - Metric = 1024; - } - ]; - }; - }; networking.hostName = "miniflux"; system.stateVersion = "24.11"; |
