92 lines
2.1 KiB
Nix
92 lines
2.1 KiB
Nix
{
|
|
atlas = {
|
|
type = "physical";
|
|
|
|
nixosModule.lab = {
|
|
storage = {
|
|
osDisk = "/dev/sda";
|
|
dataPartition = "/dev/nvme0n1p1";
|
|
};
|
|
|
|
ssh = {
|
|
useCertificates = true;
|
|
hostCert = builtins.readFile ./certificates/atlas/host_ed25519.crt;
|
|
userCert = builtins.readFile ./certificates/atlas/user_ed25519.crt;
|
|
};
|
|
};
|
|
};
|
|
|
|
jefke = {
|
|
type = "physical";
|
|
|
|
nixosModule = {
|
|
lab = {
|
|
terraformDatabase.enable = true;
|
|
|
|
storage = {
|
|
osDisk = "/dev/sda";
|
|
dataPartition = "/dev/nvme0n1p1";
|
|
};
|
|
|
|
ssh = {
|
|
useCertificates = true;
|
|
hostCert = builtins.readFile ./certificates/jefke/host_ed25519.crt;
|
|
userCert = builtins.readFile ./certificates/jefke/user_ed25519.crt;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
lewis = {
|
|
type = "physical";
|
|
|
|
nixosModule.lab = {
|
|
backups.enable = true;
|
|
data-sharing.enable = true;
|
|
networking.dmz.allowConnectivity = true;
|
|
|
|
storage = {
|
|
osDisk = "/dev/sda";
|
|
dataPartition = "/dev/nvme0n1p1";
|
|
};
|
|
|
|
ssh = {
|
|
useCertificates = true;
|
|
hostCert = builtins.readFile ./certificates/lewis/host_ed25519.crt;
|
|
userCert = builtins.readFile ./certificates/lewis/user_ed25519.crt;
|
|
};
|
|
};
|
|
};
|
|
|
|
my-microvm = {
|
|
type = "virtual";
|
|
hypervisorName = "lewis";
|
|
|
|
nixosModule = { pkgs, ... }: {
|
|
# TODO: would be cool to create a check that a mac address is only ever assigned to one VM.
|
|
lab.vm.id = 0;
|
|
|
|
programs.bash.interactiveShellInit = ''
|
|
echo "Hello world from inside a virtual machine!!" | ${pkgs.lolcat}/bin/lolcat
|
|
'';
|
|
};
|
|
};
|
|
|
|
hermes = {
|
|
type = "virtual";
|
|
hypervisorName = "lewis";
|
|
|
|
nixosModule = { config, ... }: {
|
|
lab = {
|
|
networking.dmz.services.enable = true;
|
|
|
|
vm = {
|
|
id = 7;
|
|
staticNetworking = true;
|
|
staticIPv4 = config.lab.networking.dmz.ipv4.services;
|
|
staticIPv6 = config.lab.networking.dmz.ipv6.services;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|