aboutsummaryrefslogtreecommitdiff
path: root/machines/nixos/x86_64-linux/synology-vm.nix
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2025-11-27 11:08:09 -0800
committerFranck Cuny <franck@fcuny.net>2025-11-27 11:11:30 -0800
commitd16d72592137bd9df18c00f34e59a9cd753cb97a (patch)
tree17b0b9396e5747b2fb0a7caca8bab192ded4534a /machines/nixos/x86_64-linux/synology-vm.nix
parentmove reverse proxy configuration to a profile (diff)
downloadinfra-d16d72592137bd9df18c00f34e59a9cd753cb97a.tar.gz
rename synology-vm to bree
Diffstat (limited to 'machines/nixos/x86_64-linux/synology-vm.nix')
-rw-r--r--machines/nixos/x86_64-linux/synology-vm.nix87
1 files changed, 0 insertions, 87 deletions
diff --git a/machines/nixos/x86_64-linux/synology-vm.nix b/machines/nixos/x86_64-linux/synology-vm.nix
deleted file mode 100644
index 600312d..0000000
--- a/machines/nixos/x86_64-linux/synology-vm.nix
+++ /dev/null
@@ -1,87 +0,0 @@
-{
- lib,
- adminUser,
- config,
- ...
-}:
-{
- imports = [
- ../../../profiles/cgroups.nix
- ../../../profiles/defaults.nix
- ../../../profiles/disk/basic-vm.nix
- ../../../profiles/home-manager.nix
- ../../../profiles/server.nix
- ];
-
- age = {
- secrets = {
- restic_gcs_credentials = {
- file = ../../../secrets/restic_gcs_credentials.age;
- };
- restic_password = {
- file = ../../../secrets/restic_password.age;
- };
- nas_client_credentials = {
- file = ../../../secrets/nas_client.age;
- };
- wireguard = {
- file = ../../../secrets/vm-synology/wireguard.age;
- };
- };
- };
-
- boot.loader.efi.canTouchEfiVariables = true;
- boot.loader.systemd-boot.enable = true;
-
- networking.hostName = "synology-vm";
- networking.useDHCP = lib.mkDefault true;
- systemd.network.wait-online.anyInterface = lib.mkDefault config.networking.useDHCP;
-
- users.users.builder = {
- openssh.authorizedKeys.keys = [
- # my personal key
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBkozy+X96u5ciX766bJ/AyQ3xm1tXZTIr5+4PVFZFi"
- # remote builder ssh key
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGFGxdplt9WwGjdhoYkmPe2opZMJShtpqnGCI+swrgvw"
- ];
- isNormalUser = true;
- group = "nogroup";
- };
-
- nix.settings.trusted-users = [ "builder" ];
-
- networking.wireguard = {
- enable = true;
- interfaces.wg0 = {
- ips = [ "10.100.0.40/32" ];
- listenPort = 51871;
- privateKeyFile = config.age.secrets.wireguard.path;
- peers = [
- {
- publicKey = "I+l/sWtfXcdunz2nZ05rlDexGew30ZuDxL0DVTTK318=";
- allowedIPs = [ "10.100.0.0/24" ];
- endpoint = "165.232.158.110:51871";
- persistentKeepalive = 25;
- }
- {
- # rivendell
- publicKey = "jf7T7TMKQWSgSXhUplldZDV9G2y2BjMmHIAhg5d26ng=";
- allowedIPs = [ "10.100.0.0/24" ];
- persistentKeepalive = 25;
- }
- ];
- };
- };
-
- networking.firewall.allowedUDPPorts = [ 51871 ];
-
- home-manager = {
- users.${adminUser.name} = {
- imports = [
- ../../../home/profiles/minimal.nix
- ];
- };
- };
-
- system.stateVersion = "23.11"; # Did you read the comment?
-}