3 files changed, 0 insertions, 125 deletions
diff --git a/microvms/news/default.nix b/microvms/news/default.nix
deleted file mode 100644
index dfb196c..0000000
--- a/microvms/news/default.nix
+++ /dev/null
@@ -1,39 +0,0 @@
-{ config, ... }: {
-  imports = [
-    ./miniflux.nix
-    ./oxaproxy.nix
-  ];
-
-  microvm = {
-    hypervisor = "qemu";
-    mem = 1 * 1024;
-    vcpu = 1;
-
-    shares = [{
-      source = "/nix/store";
-      mountPoint = "/nix/.ro-store";
-      tag = "store";
-      proto = "virtiofs";
-      socket = "store.socket";
-    }] ++ map
-      (dir: {
-        source = "/var/lib/microvms/${config.networking.hostName}/${dir}";
-        mountPoint = "/${dir}";
-        tag = dir;
-        proto = "virtiofs";
-        socket = "${dir}.socket";
-      }) [ "etc" "var" "home" ];
-
-    interfaces = [{
-      type = "tap";
-      id = "vm-news";
-      mac = "02:00:00:00:00:02";
-    }];
-  };
-
-  networking = {
-    hostName = "news";
-  };
-
-  system.stateVersion = "22.11";
-}
diff --git a/microvms/news/miniflux.nix b/microvms/news/miniflux.nix
deleted file mode 100644
index 94d409b..0000000
--- a/microvms/news/miniflux.nix
+++ /dev/null
@@ -1,18 +0,0 @@
-{ config, ... }:
-let
-  listenport = 8080;
-in
-{
-  sops.secrets."miniflux-admin" = { };
-
-  networking.firewall.interfaces.oxaproxy.allowedTCPPorts = [ listenport ];
-  services.miniflux = {
-    enable = true;
-    config = {
-      LISTEN_ADDR = "10.34.45.102:${toString listenport}";
-      POLLING_FREQUENCY = "37";
-      CREATE_ADMIN = "1";
-    };
-    adminCredentialsFile = config.sops.secrets."miniflux-admin".path;
-  };
-}
diff --git a/microvms/news/oxaproxy.nix b/microvms/news/oxaproxy.nix
deleted file mode 100644
index d7de046..0000000
--- a/microvms/news/oxaproxy.nix
+++ /dev/null
@@ -1,68 +0,0 @@
-{ config, ... }: {
-
-  networking.wireguard.enable = true;
-  networking.useNetworkd = true;
-
-  #oxaproxy secret
-  sops.defaultSopsFile = ../../secrets/news/secrets.yaml;
-  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-
-  sops.secrets."oxaproxy-seckey" = {
-    owner = config.users.users.systemd-network.name;
-  };
-
-  systemd.network = {
-    enable = true;
-    netdevs."10-oxaproxy" = {
-      netdevConfig = {
-        Kind = "wireguard";
-        Name = "oxaproxy";
-        Description = "oxa's enterprise reverse-proxy network";
-      };
-      wireguardConfig = {
-        PrivateKeyFile = config.sops.secrets."oxaproxy-seckey".path;
-        #own pubkey: guzNmsPcQw4EGSLU3X0SP+WPKAcoMc+xv9SLWdHV1V0=
-      };
-      wireguardPeers = [
-        {
-          # cirrus
-          wireguardPeerConfig = {
-            PublicKey = "0KMtL2fQOrrCH6c2a2l4FKiM73G86sUuyaNj4FarzVM=";
-            AllowedIPs = [ "10.34.45.0/24" ];
-            Endpoint = [ "95.216.166.21:51821" ];
-            PersistentKeepalive = 25;
-          };
-        }
-      ];
-    };
-    networks."10-oxaproxy" = {
-      matchConfig.Name = "oxaproxy";
-      networkConfig = {
-        Address = "10.34.45.102/24";
-      };
-    };
-
-    networks."111-host" = {
-      matchConfig.MACAddress = (builtins.elemAt config.microvm.interfaces 0).mac;
-      networkConfig = {
-        Address = "10.99.99.102/24";
-      };
-      routes = [
-        {
-          routeConfig = {
-            Gateway = "10.99.99.1";
-            Destination = "0.0.0.0/0";
-            Metric = 1024;
-          };
-        }
-        {
-          routeConfig = {
-            Gateway = "10.99.99.1";
-            Destination = "10.99.99.0/24";
-            Metric = 1024;
-          };
-        }
-      ];
-    };
-  };
-}