diff options
Diffstat (limited to '')
| -rw-r--r-- | machines/nixos/x86_64-linux/synology-vm.nix (renamed from machines/nixos/x86_64-linux/synology-vm/default.nix) | 52 | ||||
| -rw-r--r-- | machines/nixos/x86_64-linux/synology-vm/hardware.nix | 23 | ||||
| -rw-r--r-- | machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix | 7 | ||||
| -rw-r--r-- | machines/nixos/x86_64-linux/synology-vm/secrets.nix | 20 | ||||
| -rw-r--r-- | profiles/disk/basic-vm.nix (renamed from machines/nixos/x86_64-linux/synology-vm/disks.nix) | 3 |
5 files changed, 46 insertions, 59 deletions
diff --git a/machines/nixos/x86_64-linux/synology-vm/default.nix b/machines/nixos/x86_64-linux/synology-vm.nix index c1b2270..702f8b4 100644 --- a/machines/nixos/x86_64-linux/synology-vm/default.nix +++ b/machines/nixos/x86_64-linux/synology-vm.nix @@ -1,20 +1,53 @@ { + modulesPath, lib, adminUser, config, ... }: { + age = { + secrets = { + restic_gcs_credentials = { + file = ../../../secrets/restic_gcs_credentials.age; + }; + restic_password = { + file = ../../../secrets/restic_password.age; + }; + nas_client_credentials = { + file = ../../../secrets/nas_client.age; + }; + wireguard = { + file = ../../../secrets/vm-synology/wireguard.age; + }; + }; + }; + imports = [ - ./disks.nix - ./hardware.nix - ./secrets.nix - ./profiles/goget.nix - ../../../../profiles/defaults.nix - ../../../../profiles/server.nix - ../../../../profiles/cgroups.nix + (modulesPath + "/profiles/qemu-guest.nix") + (modulesPath + "/installer/scan/not-detected.nix") + ../../../profiles/defaults.nix + ../../../profiles/server.nix + ../../../profiles/cgroups.nix + ../../../profiles/disk/basic-vm.nix ]; + boot.initrd.availableKernelModules = [ + "ata_piix" + "uhci_hcd" + "virtio_pci" + "virtio_scsi" + "sd_mod" + "sr_mod" + ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-amd" ]; + boot.extraModulePackages = [ ]; + + swapDevices = [ ]; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + boot.loader.efi.canTouchEfiVariables = true; boot.loader.systemd-boot.enable = true; @@ -79,6 +112,11 @@ }; }; + services.goget = { + enable = true; + openFirewall = true; + }; + networking.firewall.allowedUDPPorts = [ 51871 ]; system.stateVersion = "23.11"; # Did you read the comment? diff --git a/machines/nixos/x86_64-linux/synology-vm/hardware.nix b/machines/nixos/x86_64-linux/synology-vm/hardware.nix deleted file mode 100644 index ad1fd3f..0000000 --- a/machines/nixos/x86_64-linux/synology-vm/hardware.nix +++ /dev/null @@ -1,23 +0,0 @@ -{ lib, modulesPath, ... }: -{ - imports = [ - (modulesPath + "/profiles/qemu-guest.nix") - (modulesPath + "/installer/scan/not-detected.nix") - ]; - - boot.initrd.availableKernelModules = [ - "ata_piix" - "uhci_hcd" - "virtio_pci" - "virtio_scsi" - "sd_mod" - "sr_mod" - ]; - boot.initrd.kernelModules = [ ]; - boot.kernelModules = [ "kvm-amd" ]; - boot.extraModulePackages = [ ]; - - swapDevices = [ ]; - - nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; -} diff --git a/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix b/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix deleted file mode 100644 index ac32e62..0000000 --- a/machines/nixos/x86_64-linux/synology-vm/profiles/goget.nix +++ /dev/null @@ -1,7 +0,0 @@ -{ ... }: -{ - services.goget = { - enable = true; - openFirewall = true; - }; -} diff --git a/machines/nixos/x86_64-linux/synology-vm/secrets.nix b/machines/nixos/x86_64-linux/synology-vm/secrets.nix deleted file mode 100644 index e323097..0000000 --- a/machines/nixos/x86_64-linux/synology-vm/secrets.nix +++ /dev/null @@ -1,20 +0,0 @@ -{ self, ... }: -{ - age = { - secrets = { - restic_gcs_credentials = { - file = "${self}/secrets/restic_gcs_credentials.age"; - }; - restic_password = { - file = "${self}/secrets/restic_password.age"; - }; - nas_client_credentials = { - file = "${self}/secrets/nas_client.age"; - }; - wireguard = { - file = "${self}/secrets/vm-synology/wireguard.age"; - }; - }; - }; - -} diff --git a/machines/nixos/x86_64-linux/synology-vm/disks.nix b/profiles/disk/basic-vm.nix index 1641339..f3d9f33 100644 --- a/machines/nixos/x86_64-linux/synology-vm/disks.nix +++ b/profiles/disk/basic-vm.nix @@ -1,8 +1,7 @@ -{ lib, ... }: +{ ... }: { disko.devices = { disk.disk1 = { - device = lib.mkDefault "/dev/sda"; type = "disk"; content = { type = "gpt"; |
