demo nixos-containers

nixos/hosts/olympus/bastion/containers/default.nix

@@ -0,0 +1,30 @@
+{ lib, ... }: {
+  # TODO: Loop over subdirs, create nixos container for each
+  networking.nat = {
+    enable = true;
+    internalInterfaces = [ "ve-+" ];
+    externalInterface = "ens18";
+    # Lazy IPv6 connectivity for the container
+    enableIPv6 = true;
+  };
+
+  # Containers network is
+  # * 10.42.99.0/24
+  # * fc00:x
+
+  containers.monitoring = {
+    autoStart = true;
+    privateNetwork = true;
+    hostAddress = "10.42.99.1";
+    localAddress = "10.42.99.2";
+    hostAddress6 = "fc00::1";
+    localAddress6 = "fc00::2";
+
+    config = {
+      imports = [ ./monitoring ];
+      # Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
+      networking.useHostResolvConf = lib.mkForce false;
+      services.resolved.enable = true;
+    };
+  };
+}

nixos/hosts/olympus/bastion/containers/monitoring/default.nix

@@ -0,0 +1,5 @@
+{ ... }: {
+  imports = [
+    ./grafana.nix
+  ];
+}

nixos/hosts/olympus/bastion/containers/monitoring/grafana.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, ... }: {
+  services.grafana = {
+    enable = true;
+    domain = "grafana.olympus";
+    port = 80;
+    addr = "0.0.0.0";
+  };
+
+  networking.firewall.allowedTCPPorts = [ config.services.grafana.port ];
+}