remodel begin

This commit is contained in:
2025-08-17 14:04:02 -05:00
parent 1a0a5ced12
commit 453f175edc
36 changed files with 283 additions and 112 deletions

View File

@@ -1,11 +1,11 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.code-server.enable = lib.options.mkOption {
options.sysconfig.virtualization.code-server.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.code-server.enable {
config = lib.mkIf config.sysconfig.virtualization.code-server.enable {
containers.code-server = {

View File

@@ -1,11 +1,11 @@
{ config, lib, pkgs, ... }: {
options.sysconfig.opts.virtualization.gitea.enable = lib.options.mkOption {
options.sysconfig.virtualization.gitea.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.gitea.enable {
config = lib.mkIf config.sysconfig.virtualization.gitea.enable {
networking = {
hosts."192.168.100.20" = [ "gitea.blunkall.us" ];

View File

@@ -1,11 +1,11 @@
{ config, lib, pkgs, ... }: {
options.sysconfig.opts.virtualization.gitlab.enable = lib.options.mkOption {
options.sysconfig.virtualization.gitlab.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.gitlab.enable {
config = lib.mkIf config.sysconfig.virtualization.gitlab.enable {
sops.secrets = {
"gitlab/db_pass" = {};

View File

@@ -1,6 +1,6 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.homeassistant = {
options.sysconfig.virtualization.homeassistant = {
enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
@@ -11,7 +11,7 @@
};
};
config = lib.mkIf config.sysconfig.opts.virtualization.homeassistant.enable {
config = lib.mkIf config.sysconfig.virtualization.homeassistant.enable {
networking = {
hosts."192.168.100.25" = [ "hass.local" ];

View File

@@ -1,11 +1,11 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.jellyfin.enable = lib.options.mkOption {
options.sysconfig.virtualization.jellyfin.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.jellyfin.enable {
config = lib.mkIf config.sysconfig.virtualization.jellyfin.enable {
containers.jellyfin = {

View File

@@ -1,6 +1,6 @@
{ config, lib, inputs, ... }: {
options.sysconfig.opts.virtualization.keycloak.enable = lib.options.mkOption {
options.sysconfig.virtualization.keycloak.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
@@ -9,7 +9,7 @@
inputs.sops-nix.nixosModules.sops
];
config = lib.mkIf config.sysconfig.opts.virtualization.keycloak.enable {
config = lib.mkIf config.sysconfig.virtualization.keycloak.enable {
sops.secrets."keycloak/dbpass" = {};

View File

@@ -1,12 +1,12 @@
{ config, lib, pkgs, inputs, ... }: {
options.sysconfig.opts.virtualization.minecraft.enable = lib.options.mkOption {
options.sysconfig.virtualization.minecraft.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.minecraft.enable {
config = lib.mkIf config.sysconfig.virtualization.minecraft.enable {
networking = {
firewall = {

View File

@@ -1,11 +1,11 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.n8n.enable = lib.options.mkOption {
options.sysconfig.virtualization.n8n.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.n8n.enable {
config = lib.mkIf config.sysconfig.virtualization.n8n.enable {
networking = {
hosts."192.168.100.21" = [ "n8n.local" ];

View File

@@ -1,8 +1,8 @@
{ config, lib, inputs, ... }: {
options.sysconfig.opts = {
options.sysconfig = {
netbird.enable = lib.options.mkOption {
services.netbird.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
@@ -18,21 +18,21 @@
config = {
services.netbird = {
enable = config.sysconfig.opts.netbird.enable;
enable = config.sysconfig.services.netbird.enable;
};
networking = {
firewall = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
firewall = lib.mkIf config.sysconfig.virtualization.netbird.enable {
allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 51100; to = 56100; }];
};
nat.internalInterfaces = [ "ve-netbird" ];
};
sops.secrets."netbird/coturnPass" = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {};
sops.secrets."netbird/coturnPass" = lib.mkIf config.sysconfig.virtualization.netbird.enable {};
containers.netbird = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
containers.netbird = lib.mkIf config.sysconfig.virtualization.netbird.enable {
autoStart = true;
privateNetwork = true;

View File

@@ -1,11 +1,11 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.nextcloud.enable = lib.options.mkOption {
options.sysconfig.virtualization.nextcloud.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.nextcloud.enable {
config = lib.mkIf config.sysconfig.virtualization.nextcloud.enable {
sops.secrets."nextcloud/pass" = {};

View File

@@ -1,11 +1,11 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization."blunkall.us".enable = lib.mkOption {
options.sysconfig.virtualization."blunkall.us".enable = lib.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization."blunkall.us".enable {
config = lib.mkIf config.sysconfig.virtualization."blunkall.us".enable {
containers.blunkall-us = {

View File

@@ -1,16 +1,16 @@
{ config, lib, pkgs, ... }: {
options.sysconfig.opts.virtualization.novnc.enable = lib.mkOption {
options.sysconfig.virtualization.novnc.enable = lib.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.novnc.enable {
config = lib.mkIf config.sysconfig.virtualization.novnc.enable {
networking = {
hosts."192.168.100.30" = [ "novnc.local" ];
firewall.interfaces."ve-novnc" = lib.mkIf config.sysconfig.opts.virtualization.novnc.enable {
firewall.interfaces."ve-novnc" = lib.mkIf config.sysconfig.virtualization.novnc.enable {
allowedTCPPorts = [ 5900 ];
allowedUDPPorts = [ 5900 ];
};

View File

@@ -1,11 +1,11 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.ntfy.enable = lib.mkOption {
options.sysconfig.virtualization.ntfy.enable = lib.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.ntfy.enable {
config = lib.mkIf config.sysconfig.virtualization.ntfy.enable {
containers.ntfy = {

View File

@@ -1,13 +1,13 @@
{ config, lib, inputs, ... }: {
options = {
sysconfig.opts.virtualization.ollama.enable = lib.options.mkOption {
sysconfig.virtualization.ollama.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
};
config = lib.mkIf config.sysconfig.opts.virtualization.ollama.enable {
config = lib.mkIf config.sysconfig.virtualization.ollama.enable {
containers.ollama = {

View File

@@ -1,12 +1,12 @@
{ config, lib, pkgs, inputs, ... }: {
options.sysconfig.opts.virtualization.pihole.enable = lib.options.mkOption {
options.sysconfig.virtualization.pihole.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.pihole.enable {
config = lib.mkIf config.sysconfig.virtualization.pihole.enable {
/* sops.secrets."pihole/pass" = {};
sops.templates."pihole.env" = {

View File

@@ -1,11 +1,11 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.rustdesk.enable = lib.options.mkOption {
options.sysconfig.virtualization.rustdesk.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.rustdesk.enable {
config = lib.mkIf config.sysconfig.virtualization.rustdesk.enable {
/*networking = {
firewall.allowedTCPPorts = [ 21115 21116 21117 21118 21119 ];

View File

@@ -1,6 +1,6 @@
{ config, lib, inputs, ... }: {
options.sysconfig.opts.virtualization.sandbox.enable = lib.mkOption {
options.sysconfig.virtualization.sandbox.enable = lib.mkOption {
type = lib.types.bool;
default = false;
};
@@ -18,7 +18,7 @@
})
];
config = lib.mkIf config.sysconfig.opts.virtualization.sandbox.enable {
config = lib.mkIf config.sysconfig.virtualization.sandbox.enable {
networking = {

View File

@@ -1,11 +1,11 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.traefik.enable = lib.options.mkOption {
options.sysconfig.virtualization.traefik.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.traefik.enable {
config = lib.mkIf config.sysconfig.virtualization.traefik.enable {
networking = {
hosts."192.168.100.11" = [ "blunkall.us" "*.blunkall.us" "traefik.local" ];

View File

@@ -1,6 +1,6 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.wyoming = {
options.sysconfig.virtualization.wyoming = {
enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
@@ -23,7 +23,7 @@
};
};
config = lib.mkIf config.sysconfig.opts.virtualization.wyoming.enable {
config = lib.mkIf config.sysconfig.virtualization.wyoming.enable {
containers.wyoming = {
@@ -32,7 +32,7 @@
hostAddress = "192.168.100.10";
localAddress = "192.168.100.26";
bindMounts = lib.mkIf config.sysconfig.opts.virtualization.wyoming.faster-whisper {
bindMounts = lib.mkIf config.sysconfig.virtualization.wyoming.faster-whisper {
"/dev/nvidia0" = {
hostPath = "/dev/nvidia0";
isReadOnly = false;
@@ -55,7 +55,7 @@
};
};
allowedDevices = lib.mkIf config.sysconfig.opts.virtualization.wyoming.faster-whisper [
allowedDevices = lib.mkIf config.sysconfig.virtualization.wyoming.faster-whisper [
{
node = "/dev/nvidia0";
modifier = "rw";
@@ -86,7 +86,7 @@
services.wyoming = {
piper = lib.mkIf config.sysconfig.opts.virtualization.wyoming.piper {
piper = lib.mkIf config.sysconfig.virtualization.wyoming.piper {
servers.piper = {
enable = true;
@@ -95,7 +95,7 @@
};
};
openwakeword = lib.mkIf config.sysconfig.opts.virtualization.wyoming.openwakeword {
openwakeword = lib.mkIf config.sysconfig.virtualization.wyoming.openwakeword {
enable = true;
uri = "tcp://0.0.0.0:11432";
preloadModels = [
@@ -109,7 +109,7 @@
];
};
faster-whisper = lib.mkIf config.sysconfig.opts.virtualization.wyoming.faster-whisper {
faster-whisper = lib.mkIf config.sysconfig.virtualization.wyoming.faster-whisper {
servers.whisper = {
enable = true;
device = "auto";
@@ -119,7 +119,7 @@
};
};
satellite = lib.mkIf config.sysconfig.opts.virtualization.wyoming.satellite {
satellite = lib.mkIf config.sysconfig.virtualization.wyoming.satellite {
enable = true;
uri = "tcp://0.0.0.0:11431";
#user = "nathan";