containers/amethyst: refactor

This commit is contained in:
Cilly Leang 2026-03-15 19:32:34 +11:00
parent acc4d31f46
commit 5a24bf690f
Signed by: cilly
GPG key ID: 6500251E087653C9

View file

@ -6,28 +6,32 @@
nixosConfigurations.container = nixpkgs.lib.nixosSystem {
modules = [ ./configuration.nix ];
};
nixosModule = { ... }: {
nixosModule = { ... }:
let
name = "amethyst";
subnet = "1";
in {
networking.nat = {
enable = true;
enableIPv6 = true;
internalInterfaces = [ "ve-+" ];
};
systemd.tmpfiles.rules = [ "d /persist/containers/amethyst 755 root users" ];
containers.amethyst = {
systemd.tmpfiles.rules = [ "d /persist/containers/${name} 755 root users" ];
containers.${name} = {
autoStart = true;
privateNetwork = true;
hostAddress = "10.30.1.1";
localAddress = "10.30.1.2";
hostAddress6 = "fd0d:1::1:1";
localAddress6 = "fd0d:1::1:2";
hostAddress = "10.30.${subnet}.1";
localAddress = "10.30.${subnet}.2";
hostAddress6 = "fd0d:1::${subnet}:1";
localAddress6 = "fd0d:1::${subnet}:2";
# privateUsers = "pick";
nixpkgs = nixpkgs;
ephemeral = true;
config = { imports = [ ./configuration.nix ]; };
bindMounts."persist" = {
hostPath = "/persist/containers/amethyst";
hostPath = "/persist/containers/${name}";
mountPoint = "/persist";
isReadOnly = false;
};