4 files changed, 0 insertions, 145 deletions
diff --git a/microvms/music/default.nix b/microvms/music/default.nix
deleted file mode 100644
index 6c5d053..0000000
--- a/microvms/music/default.nix
+++ /dev/null
@@ -1,40 +0,0 @@
-{ pkgs, lib, config, ... }: {
-  imports = [
-    ./navidrome.nix
-    ./oxaproxy.nix
-    ./upload-user.nix
-  ];
-
-  microvm = {
-    hypervisor = "qemu";
-    mem = 4 * 1024;
-    vcpu = 3;
-
-    shares = [{
-      source = "/nix/store";
-      mountPoint = "/nix/.ro-store";
-      tag = "store";
-      proto = "virtiofs";
-      socket = "store.socket";
-    }] ++ map
-      (dir: {
-        source = "/var/lib/microvms/${config.networking.hostName}/${dir}";
-        mountPoint = "/${dir}";
-        tag = dir;
-        proto = "virtiofs";
-        socket = "${dir}.socket";
-      }) [ "etc" "var" "home" ];
-
-    interfaces = [{
-      type = "tap";
-      id = "vm-music";
-      mac = "02:00:00:00:00:01";
-    }];
-  };
-
-  networking = {
-    hostName = "music";
-  };
-
-  system.stateVersion = "22.11";
-}
diff --git a/microvms/music/navidrome.nix b/microvms/music/navidrome.nix
deleted file mode 100644
index f62ddd3..0000000
--- a/microvms/music/navidrome.nix
+++ /dev/null
@@ -1,16 +0,0 @@
-{ config, ... }: {
-  networking.firewall.interfaces.oxaproxy.allowedTCPPorts = [ 4533 ];
-  services.navidrome = {
-    enable = true;
-    settings = {
-      Address = "10.34.45.101";
-      BaseUrl = "/";
-      EnableExternalServices = false;
-      MusicFolder = "/var/lib/music";
-      Port = 4533;
-      ScanSchedule = "@every 11m";
-      TranscondigCacheSize = "5GiB";
-      ReverseProxyWhitelist = "10.34.45.1/24";
-    };
-  };
-}
diff --git a/microvms/music/oxaproxy.nix b/microvms/music/oxaproxy.nix
deleted file mode 100644
index 737d413..0000000
--- a/microvms/music/oxaproxy.nix
+++ /dev/null
@@ -1,68 +0,0 @@
-{ config, ... }: {
-
-  networking.wireguard.enable = true;
-  networking.useNetworkd = true;
-
-  #oxaproxy secret
-  sops.defaultSopsFile = ../../secrets/music/secrets.yaml;
-  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-
-  sops.secrets."wg/oxaproxy-seckey" = {
-    owner = config.users.users.systemd-network.name;
-  };
-
-  systemd.network = {
-    enable = true;
-    netdevs."10-oxaproxy" = {
-      netdevConfig = {
-        Kind = "wireguard";
-        Name = "oxaproxy";
-        Description = "oxa's enterprise reverse-proxy network";
-      };
-      wireguardConfig = {
-        PrivateKeyFile = config.sops.secrets."wg/oxaproxy-seckey".path;
-        #own pubkey: vQNkp51S9qLsu97dLPj0/EqFwvVtRFZpMHufgKhxum0=
-      };
-      wireguardPeers = [
-        {
-          # cirrus
-          wireguardPeerConfig = {
-            PublicKey = "0KMtL2fQOrrCH6c2a2l4FKiM73G86sUuyaNj4FarzVM=";
-            AllowedIPs = [ "10.34.45.0/24" ];
-            Endpoint = [ "95.216.166.21:51821" ];
-            PersistentKeepalive = 25;
-          };
-        }
-      ];
-    };
-    networks."10-oxaproxy" = {
-      matchConfig.Name = "oxaproxy";
-      networkConfig = {
-        Address = "10.34.45.101/24";
-      };
-    };
-
-    networks."111-host" = {
-      matchConfig.MACAddress = "02:00:00:00:00:01";
-      networkConfig = {
-        Address = "10.99.99.101/24";
-      };
-      routes = [
-        {
-          routeConfig = {
-            Gateway = "10.99.99.1";
-            Destination = "0.0.0.0/0";
-            Metric = 1024;
-          };
-        }
-        {
-          routeConfig = {
-            Gateway = "10.99.99.1";
-            Destination = "10.99.99.0/24";
-            Metric = 1024;
-          };
-        }
-      ];
-    };
-  };
-}
diff --git a/microvms/music/upload-user.nix b/microvms/music/upload-user.nix
deleted file mode 100644
index ae67f66..0000000
--- a/microvms/music/upload-user.nix
+++ /dev/null
@@ -1,21 +0,0 @@
-{ config, ... }: {
-  security.sudo.wheelNeedsPassword = false;
-
-  users.users.caretaker = {
-    isNormalUser = true;
-    home = "/home/caretaker";
-    createHome = true;
-    extraGroups = [
-      "wheel"
-      "navidrome"
-    ];
-    openssh.authorizedKeys.keys = [
-      # melo
-      "ssh-rsa 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 mel@umbreon"
-      # revol-xut
-      "ssh-rsa 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 revo-xut@plank"
-      # 0xa gpg
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHv82n6F6kwJ3/EMYlOoCc1/NaYFW7QHC5F8jKVzdlio gshipunov@toaster"
-    ];
-  };
-}