aboutsummaryrefslogtreecommitdiff
path: root/machines/nixos/x86_64-linux/synology-vm
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--machines/nixos/x86_64-linux/synology-vm.nix (renamed from machines/nixos/x86_64-linux/synology-vm/default.nix)52
-rw-r--r--machines/nixos/x86_64-linux/synology-vm/hardware.nix23
-rw-r--r--machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix7
-rw-r--r--machines/nixos/x86_64-linux/synology-vm/secrets.nix20
-rw-r--r--profiles/disk/basic-vm.nix (renamed from machines/nixos/x86_64-linux/synology-vm/disks.nix)3
5 files changed, 46 insertions, 59 deletions
diff --git a/machines/nixos/x86_64-linux/synology-vm/default.nix b/machines/nixos/x86_64-linux/synology-vm.nix
index c1b2270..702f8b4 100644
--- a/machines/nixos/x86_64-linux/synology-vm/default.nix
+++ b/machines/nixos/x86_64-linux/synology-vm.nix
@@ -1,20 +1,53 @@
{
+ modulesPath,
lib,
adminUser,
config,
...
}:
{
+ age = {
+ secrets = {
+ restic_gcs_credentials = {
+ file = ../../../secrets/restic_gcs_credentials.age;
+ };
+ restic_password = {
+ file = ../../../secrets/restic_password.age;
+ };
+ nas_client_credentials = {
+ file = ../../../secrets/nas_client.age;
+ };
+ wireguard = {
+ file = ../../../secrets/vm-synology/wireguard.age;
+ };
+ };
+ };
+
imports = [
- ./disks.nix
- ./hardware.nix
- ./secrets.nix
- ./profiles/goget.nix
- ../../../../profiles/defaults.nix
- ../../../../profiles/server.nix
- ../../../../profiles/cgroups.nix
+ (modulesPath + "/profiles/qemu-guest.nix")
+ (modulesPath + "/installer/scan/not-detected.nix")
+ ../../../profiles/defaults.nix
+ ../../../profiles/server.nix
+ ../../../profiles/cgroups.nix
+ ../../../profiles/disk/basic-vm.nix
];
+ boot.initrd.availableKernelModules = [
+ "ata_piix"
+ "uhci_hcd"
+ "virtio_pci"
+ "virtio_scsi"
+ "sd_mod"
+ "sr_mod"
+ ];
+ boot.initrd.kernelModules = [ ];
+ boot.kernelModules = [ "kvm-amd" ];
+ boot.extraModulePackages = [ ];
+
+ swapDevices = [ ];
+
+ nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+
boot.loader.efi.canTouchEfiVariables = true;
boot.loader.systemd-boot.enable = true;
@@ -79,6 +112,11 @@
};
};
+ services.goget = {
+ enable = true;
+ openFirewall = true;
+ };
+
networking.firewall.allowedUDPPorts = [ 51871 ];
system.stateVersion = "23.11"; # Did you read the comment?
diff --git a/machines/nixos/x86_64-linux/synology-vm/hardware.nix b/machines/nixos/x86_64-linux/synology-vm/hardware.nix
deleted file mode 100644
index ad1fd3f..0000000
--- a/machines/nixos/x86_64-linux/synology-vm/hardware.nix
+++ /dev/null
@@ -1,23 +0,0 @@
-{ lib, modulesPath, ... }:
-{
- imports = [
- (modulesPath + "/profiles/qemu-guest.nix")
- (modulesPath + "/installer/scan/not-detected.nix")
- ];
-
- boot.initrd.availableKernelModules = [
- "ata_piix"
- "uhci_hcd"
- "virtio_pci"
- "virtio_scsi"
- "sd_mod"
- "sr_mod"
- ];
- boot.initrd.kernelModules = [ ];
- boot.kernelModules = [ "kvm-amd" ];
- boot.extraModulePackages = [ ];
-
- swapDevices = [ ];
-
- nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-}
diff --git a/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix b/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix
deleted file mode 100644
index ac32e62..0000000
--- a/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix
+++ /dev/null
@@ -1,7 +0,0 @@
-{ ... }:
-{
- services.goget = {
- enable = true;
- openFirewall = true;
- };
-}
diff --git a/machines/nixos/x86_64-linux/synology-vm/secrets.nix b/machines/nixos/x86_64-linux/synology-vm/secrets.nix
deleted file mode 100644
index e323097..0000000
--- a/machines/nixos/x86_64-linux/synology-vm/secrets.nix
+++ /dev/null
@@ -1,20 +0,0 @@
-{ self, ... }:
-{
- age = {
- secrets = {
- restic_gcs_credentials = {
- file = "${self}/secrets/restic_gcs_credentials.age";
- };
- restic_password = {
- file = "${self}/secrets/restic_password.age";
- };
- nas_client_credentials = {
- file = "${self}/secrets/nas_client.age";
- };
- wireguard = {
- file = "${self}/secrets/vm-synology/wireguard.age";
- };
- };
- };
-
-}
diff --git a/machines/nixos/x86_64-linux/synology-vm/disks.nix b/profiles/disk/basic-vm.nix
index 1641339..f3d9f33 100644
--- a/machines/nixos/x86_64-linux/synology-vm/disks.nix
+++ b/profiles/disk/basic-vm.nix
@@ -1,8 +1,7 @@
-{ lib, ... }:
+{ ... }:
{
disko.devices = {
disk.disk1 = {
- device = lib.mkDefault "/dev/sda";
type = "disk";
content = {
type = "gpt";