forked from wurzel/fruitbasket
fixed typo and added test vm
This commit is contained in:
parent
80ccf96a3a
commit
ab8e827aca
4 changed files with 141 additions and 1 deletions
41
modules/vm.nix
Normal file
41
modules/vm.nix
Normal file
|
@ -0,0 +1,41 @@
|
|||
{ config, lib, pkgs, buildVM, ... }:
|
||||
|
||||
{
|
||||
assertions = [
|
||||
{ assertion = buildVM; message = "this module may only be used when building a VM!"; }
|
||||
];
|
||||
|
||||
users.users.root.hashedPassword = "";
|
||||
users.mutableUsers = false;
|
||||
|
||||
networking.useDHCP = lib.mkForce false;
|
||||
networking.interfaces = lib.mkForce {
|
||||
eth0.useDHCP = true;
|
||||
};
|
||||
networking.defaultGateway = lib.mkForce null;
|
||||
|
||||
sops.defaultSopsFile = lib.mkForce ../secrets/quitte-vm.yaml;
|
||||
sops.age.sshKeyPaths = lib.mkForce [ ];
|
||||
sops.gnupg.sshKeyPaths = lib.mkForce [ ];
|
||||
sops.age.keyFile = lib.mkForce "${../keys/gpg/test.age}";
|
||||
sops.age.generateKey = lib.mkForce false;
|
||||
|
||||
# don't use production endpoint for test vm, to avoid rate limiting
|
||||
security.acme.defaults.server = "https://acme-staging-v02.api.letsencrypt.org/directory";
|
||||
|
||||
# Set VM disk size (in MB)
|
||||
virtualisation.diskSize = 2048;
|
||||
|
||||
# Set VM ram amount (in MB)
|
||||
virtualisation.memorySize = 2048;
|
||||
|
||||
virtualisation.forwardPorts = [
|
||||
{ from = "host"; host.port = 2222; guest.port = 22; }
|
||||
];
|
||||
virtualisation.graphics = false;
|
||||
|
||||
# show systemd logs on console
|
||||
services.journald.extraConfig = ''
|
||||
ForwardToConsole=yes
|
||||
'';
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue