34 lines
1 KiB
Nix
34 lines
1 KiB
Nix
|
{ pkgs, lib, config, ... }:
|
||
|
|
let cfg = config.custom.k3s;
|
||
|
|
in {
|
||
|
|
options = {
|
||
|
|
custom = {
|
||
|
|
k3s.enable = lib.mkOption {
|
||
|
|
default = false;
|
||
|
|
type = lib.types.bool;
|
||
|
|
description = ''
|
||
|
|
Whether to start k3s with custom configuration.
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
config = lib.mkIf cfg.enable {
|
||
|
|
environment.systemPackages = [ pkgs.k3s ];
|
||
|
|
services.k3s.enable = true;
|
||
|
|
services.k3s.role = "server";
|
||
|
|
# Temporary fix: by default the full hostname of the server (jefke.hyp) is not included into the Subject Alternative Name of certificates of the server.
|
||
|
|
# We can hardcode this as a CLI flag to k3s.
|
||
|
|
services.k3s.extraFlags = "--tls-san jefke.hyp --data-dir /mnt/data/k3s";
|
||
|
|
|
||
|
|
# TODO: use kubenix for this.
|
||
|
|
system.activationScripts.k3s-bootstrap.text =
|
||
|
|
let
|
||
|
|
k3sBootstrapFile = pkgs.writeText "k3s-bootstrap" (builtins.readFile ./k3s-bootstrap.yaml);
|
||
|
|
in
|
||
|
|
''
|
||
|
|
ln -sf ${k3sBootstrapFile} /mnt/data/k3s/server/manifests/k3s-bootstrap.yaml
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
}
|