91 lines
2 KiB
Nix
91 lines
2 KiB
Nix
{
|
|
jefke = {
|
|
type = "physical";
|
|
|
|
nixosModule = {
|
|
lab = {
|
|
terraformDatabase.enable = true;
|
|
|
|
storage = {
|
|
osDisk = "/dev/sda";
|
|
dataPartition = "/dev/nvme0n1p1";
|
|
};
|
|
|
|
ssh = {
|
|
useCertificates = true;
|
|
# TODO: automatically set this?
|
|
hostCert = builtins.readFile ./jefke_host_ed25519-cert.pub;
|
|
userCert = builtins.readFile ./jefke_user_ed25519-cert.pub;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
atlas = {
|
|
type = "physical";
|
|
|
|
nixosModule.lab = {
|
|
storage = {
|
|
osDisk = "/dev/sda";
|
|
dataPartition = "/dev/nvme0n1p1";
|
|
};
|
|
|
|
ssh = {
|
|
useCertificates = true;
|
|
hostCert = builtins.readFile ./atlas_host_ed25519-cert.pub;
|
|
userCert = builtins.readFile ./atlas_user_ed25519-cert.pub;
|
|
};
|
|
};
|
|
};
|
|
|
|
lewis = {
|
|
type = "physical";
|
|
|
|
nixosModule.lab = {
|
|
dataHost.enable = true;
|
|
|
|
storage = {
|
|
osDisk = "/dev/sda";
|
|
dataPartition = "/dev/nvme0n1p1";
|
|
};
|
|
|
|
ssh = {
|
|
useCertificates = true;
|
|
hostCert = builtins.readFile ./lewis_host_ed25519-cert.pub;
|
|
userCert = builtins.readFile ./lewis_user_ed25519-cert.pub;
|
|
};
|
|
};
|
|
};
|
|
|
|
my-microvm = {
|
|
type = "virtual";
|
|
hypervisorName = "lewis";
|
|
|
|
nixosModule = { pkgs, ... }: {
|
|
# TODO: would be cool to create a check that a mac address is only ever assigned to one VM.
|
|
lab.vm.macAddress = "BA:DB:EE:F0:00:00";
|
|
|
|
programs.bash.interactiveShellInit = ''
|
|
echo "Hello world from inside a virtual machine!!" | ${pkgs.lolcat}/bin/lolcat
|
|
'';
|
|
};
|
|
};
|
|
|
|
hermes = {
|
|
type = "virtual";
|
|
hypervisorName = "lewis";
|
|
|
|
nixosModule = { config, ... }: {
|
|
lab = {
|
|
networking.dmz.services.enable = true;
|
|
|
|
vm = {
|
|
macAddress = "BA:DB:EE:F0:00:07";
|
|
staticNetworking = true;
|
|
staticIPv4 = config.lab.networking.dmz.ipv4.services;
|
|
staticIPv6 = config.lab.networking.dmz.ipv6.services;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|