v
/
infrastructure
1
0
Fork 0
Code Issues 13 Pull Requests 1 Actions Packages Projects Releases Activity

demo nixos-containers
Plex Update / update (push) Successful in 1m50s Details
Lint / lint (push) Failing after 1m37s Details

reboot
Vivian 2023-12-30 14:47:12 +01:00
parent 592537fb63
commit ee41777c7e
5 changed files with 62 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
flake.lock
View File

@ -254,11 +254,11 @@
"nixpkgs": "nixpkgs_5"
},
"locked": {
"lastModified": 1703847800,
"narHash": "sha256-nkLW3mxcduvWmEa4uudhEixZmNhc5pyvoOXRki4mfck=",
"lastModified": 1703864604,
"narHash": "sha256-XAqPLb7H5rcQMC9OeKlnUNVr8hte+1L1GeZC0ZR7akc=",
"owner": "jdonszelmann",
"repo": "essentials",
"rev": "9193eba36a0f495d721662e4f1d054c6a94be19f",
"rev": "2da99cdc27364844a887ea1c6ed3146c84c15041",
"type": "github"
},
"original": {
@ -1014,11 +1014,11 @@
},
"nixos-hardware": {
"locked": {
"lastModified": 1703545041,
"narHash": "sha256-nvQA+k1rSszrf4kA4eK2i/SGbzoXyoKHzzyzq/Jca1w=",
"lastModified": 1703879120,
"narHash": "sha256-oMJ5xtDswlBWxs0DT/aYKEUIhjEpGZJ9GbIxOclYP8I=",
"owner": "nixos",
"repo": "nixos-hardware",
"rev": "a15b6e525f5737a47b4ce28445c836996fb2ea8c",
"rev": "22ae59fec26591ef72ce4ccb5538c42c5f090fe3",
"type": "github"
},
"original": {
@ -1332,11 +1332,11 @@
},
"nixpkgs_8": {
"locked": {
"lastModified": 1703438236,
"narHash": "sha256-aqVBq1u09yFhL7bj1/xyUeJjzr92fXVvQSSEx6AdB1M=",
"lastModified": 1703637592,
"narHash": "sha256-8MXjxU0RfFfzl57Zy3OfXCITS0qWDNLzlBAdwxGZwfY=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "5f64a12a728902226210bf01d25ec6cbb9d9265b",
"rev": "cfc3698c31b1fb9cdcf10f36c9643460264d0ca8",
"type": "github"
},
"original": {
@ -1383,11 +1383,11 @@
"pre-commit-hooks": "pre-commit-hooks"
},
"locked": {
"lastModified": 1703847125,
"narHash": "sha256-MlCwrPr1U/DCIzTqYZ7mwsPVjdJ8vshSNH0wKBVPdJc=",
"lastModified": 1703859882,
"narHash": "sha256-wRXgap0eEuswF9xXUKDiWBh0tKuJ9vtmlJZ4iAX3K/E=",
"owner": "pta2002",
"repo": "nixvim",
"rev": "5d49b9b66d0eed89603221201490d27e8aea6b24",
"rev": "1d8e7906c9606c956c6b40d8d088c8d2110dc0c0",
"type": "github"
},
"original": {
@ -1398,11 +1398,11 @@
},
"nur": {
"locked": {
"lastModified": 1703839127,
"narHash": "sha256-Wf6swVm0Do2l2DQlZzg2cxvWID4Se2XJ/yFj8qoCHpI=",
"lastModified": 1703938048,
"narHash": "sha256-df8Lwe4k6QiyucOyZV0s6eoy6y7m2g4+/dOpEyYrZGU=",
"owner": "nix-community",
"repo": "NUR",
"rev": "b96cc681612efb6d3792e1a27624b8797dab066d",
"rev": "ae6fb319f88d5a995cb8dc4502c2d81c5fc1e578",
"type": "github"
},
"original": {

3
nixos/hosts/olympus/bastion/configuration.nix
View File

@ -6,7 +6,8 @@
imports = [
# Include the results of the hardware scan.
./hardware-configuration.nix
./vms.nix
./containers
# ./vms.nix
];
programs.nix-ld.enable = true;

30
nixos/hosts/olympus/bastion/containers/default.nix Normal file
View File

@ -0,0 +1,30 @@
{ lib, ... }: {
# TODO: Loop over subdirs, create nixos container for each
networking.nat = {
enable = true;
internalInterfaces = [ "ve-+" ];
externalInterface = "ens18";
# Lazy IPv6 connectivity for the container
enableIPv6 = true;
};
# Containers network is
# * 10.42.99.0/24
# * fc00:x
containers.monitoring = {
autoStart = true;
privateNetwork = true;
hostAddress = "10.42.99.1";
localAddress = "10.42.99.2";
hostAddress6 = "fc00::1";
localAddress6 = "fc00::2";
config = {
imports = [ ./monitoring ];
# Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
networking.useHostResolvConf = lib.mkForce false;
services.resolved.enable = true;
};
};
}

5
nixos/hosts/olympus/bastion/containers/monitoring/default.nix Normal file
View File

@ -0,0 +1,5 @@
{ ... }: {
imports = [
./grafana.nix
];
}

10
nixos/hosts/olympus/bastion/containers/monitoring/grafana.nix Normal file
View File

@ -0,0 +1,10 @@
{ config, pkgs, ... }: {
services.grafana = {
enable = true;
domain = "grafana.olympus";
port = 80;
addr = "0.0.0.0";
};
networking.firewall.allowedTCPPorts = [ config.services.grafana.port ];
}