49 lines
1.2 KiB
Nix
49 lines
1.2 KiB
Nix
|
{
|
||
|
|
inputs = {
|
||
|
|
nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
|
||
|
|
};
|
||
|
|
outputs = { nixpkgs, ... }:
|
||
|
|
let
|
||
|
|
name = "diamond";
|
||
|
|
subnetId = "4";
|
||
|
|
|
||
|
|
subnet = x: "fd0d:1::${subnetId}:${toString x}";
|
||
|
|
host = subnet 1;
|
||
|
|
client = subnet 2;
|
||
|
|
|
||
|
|
modules = [
|
||
|
|
./configuration.nix
|
||
|
|
];
|
||
|
|
in {
|
||
|
|
nixosConfigurations.container = nixpkgs.lib.nixosSystem {
|
||
|
|
inherit modules;
|
||
|
|
};
|
||
|
|
nixosModule = { ... }: {
|
||
|
|
services.nginx.virtualHosts."diamond.local.lava.moe" = {
|
||
|
|
useACMEHost = "lava.moe";
|
||
|
|
forceSSL = true;
|
||
|
|
locations."/".proxyPass = "http://[${client}]:8000";
|
||
|
|
};
|
||
|
|
|
||
|
|
systemd.tmpfiles.rules = [ "d /persist/containers/${name} 755 root users" ];
|
||
|
|
containers.${name} = {
|
||
|
|
autoStart = true;
|
||
|
|
privateNetwork = true;
|
||
|
|
hostAddress6 = host;
|
||
|
|
localAddress6 = client;
|
||
|
|
# privateUsers = "pick";
|
||
|
|
nixpkgs = nixpkgs;
|
||
|
|
ephemeral = true;
|
||
|
|
config = { imports = modules; };
|
||
|
|
|
||
|
|
bindMounts."persist" = {
|
||
|
|
hostPath = "/persist/containers/${name}";
|
||
|
|
mountPoint = "/persist";
|
||
|
|
isReadOnly = false;
|
||
|
|
};
|
||
|
|
# flake = "path:" + ./.;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|