53 lines
1.2 KiB
Nix
53 lines
1.2 KiB
Nix
{lib, ...}: {
|
|
users.users.tlater.password = "insecure";
|
|
|
|
# Disable graphical tty so -curses works
|
|
boot.kernelParams = ["nomodeset"];
|
|
|
|
networking.hostName = "testvm";
|
|
# Sets the base domain for nginx to a local domain so that we can
|
|
# easily test locally with the VM.
|
|
services.nginx.domain = "dev.local";
|
|
|
|
# Use the staging secrets
|
|
sops.defaultSopsFile = lib.mkOverride 99 ../../keys/staging.yaml;
|
|
|
|
systemd.network.networks."10-eth0" = {
|
|
matchConfig.Name = "eth0";
|
|
networkConfig = {
|
|
Address = "192.168.9.2/24";
|
|
};
|
|
};
|
|
|
|
# Both so we have a predictable key for the staging env, as well as
|
|
# to have a static key for decrypting the sops secrets for the
|
|
# staging env.
|
|
environment.etc."staging.key" = {
|
|
mode = "0400";
|
|
source = ../../keys/hosts/staging.key;
|
|
};
|
|
|
|
services.openssh.hostKeys = lib.mkForce [
|
|
{
|
|
type = "rsa";
|
|
bits = 4096;
|
|
path = "/etc/staging.key";
|
|
}
|
|
];
|
|
|
|
virtualisation.vmVariant = {
|
|
virtualisation = {
|
|
memorySize = 3941;
|
|
cores = 2;
|
|
graphics = false;
|
|
};
|
|
|
|
virtualisation.qemu = {
|
|
networkingOptions = lib.mkForce [
|
|
"-device virtio-net,netdev=n1"
|
|
"-netdev bridge,id=n1,br=br0,helper=$(which qemu-bridge-helper)"
|
|
];
|
|
};
|
|
};
|
|
}
|