v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Projects Releases Packages Activity Actions

disable containers for now

Browse source
This commit is contained in:
Vivian 2024-01-01 14:39:53 +01:00
parent 40d88c2169
commit a7e1717462
7 changed files with 29 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

6
nixos/hosts/olympus/bastion/containers/common.nix Normal file
View file

@ -0,0 +1,6 @@
# common container config
{ lib, ... }: {
# Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
networking.useHostResolvConf = lib.mkForce false;
services.resolved.enable = true;
}

24
nixos/hosts/olympus/bastion/containers/default.nix
View file

@ -1,4 +1,8 @@
{ lib, ... }: {
{ config, lib, ... }:
let
hostAddress = "10.42.99.1";
hostAddress6 = "fc00::1";
in {
# TODO: Loop over subdirs, create nixos container for each
networking.nat = {
enable = true;
@ -6,25 +10,17 @@
externalInterface = "ens18";
# Lazy IPv6 connectivity for the container
enableIPv6 = true;
forwardPorts = [
];
};
# Containers network is
# * 10.42.99.0/24
# * fc00:x
containers.monitoring = {
autoStart = true;
privateNetwork = true;
hostAddress = "10.42.99.1";
localAddress = "10.42.99.2";
hostAddress6 = "fc00::1";
localAddress6 = "fc00::2";
containers = {
config = {
imports = [ ./monitoring ];
# Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
networking.useHostResolvConf = lib.mkForce false;
services.resolved.enable = true;
};
};
}

5
nixos/hosts/olympus/bastion/containers/monitoring/default.nix
View file

@ -1,5 +0,0 @@
{ ... }: {
imports = [
./grafana.nix
];
}

10
nixos/hosts/olympus/bastion/containers/monitoring/grafana.nix
View file

@ -1,10 +0,0 @@
{ config, pkgs, ... }: {
services.grafana = {
enable = true;
domain = "grafana.olympus";
port = 80;
addr = "0.0.0.0";
};
networking.firewall.allowedTCPPorts = [ config.services.grafana.port ];
}

6
nixos/hosts/olympus/victoriametrics/configuration.nix
View file

@ -8,8 +8,7 @@ let
grafanaDomain = config.meta.exposes.grafana.domain;
grafanaPort = config.meta.exposes.grafana.port;
vs = config.vault-secrets.secrets;
in
{
in {
imports = [ ];
# This value determines the NixOS release from which the default
@ -115,9 +114,8 @@ in
token_url = "https://dex.0x76.dev/token";
api_url = "https://dex.0x76.dev/userinfo";
skip_org_role_sync = true;
auto_login = true;
auto_login = false;
};
};
};
};