2024-04-05 11:25:03 +02:00
|
|
|
{ stateVersion, hostname, username, ... }: {
|
2024-03-21 12:27:53 +01:00
|
|
|
imports = [
|
2024-03-21 10:51:41 +01:00
|
|
|
./${hostname}
|
|
|
|
../users/${username}
|
|
|
|
../common/modules/nixos.nix
|
2024-03-30 07:27:21 +01:00
|
|
|
# Services
|
|
|
|
../common/services/promtail.nix
|
|
|
|
../common/services/telegraf.nix
|
|
|
|
../common/services/openssh.nix
|
2024-03-21 10:51:41 +01:00
|
|
|
];
|
2024-03-30 07:27:21 +01:00
|
|
|
|
|
|
|
boot.isContainer = true;
|
|
|
|
system.stateVersion = stateVersion;
|
2024-04-05 11:25:03 +02:00
|
|
|
networking.hostName = hostname;
|
2024-03-30 07:27:21 +01:00
|
|
|
|
2024-03-25 03:53:39 +01:00
|
|
|
# Set up the secrets file:
|
2024-03-30 07:27:21 +01:00
|
|
|
sops.secrets."tailscale_key" = {
|
2024-03-25 04:41:07 +01:00
|
|
|
owner = "root";
|
|
|
|
sopsFile = ../../secrets/containers/${hostname}.yaml;
|
|
|
|
restartUnits = [
|
|
|
|
"tailscaled.service"
|
|
|
|
"tailscaled-autoconnect.service"
|
|
|
|
];
|
|
|
|
};
|
2024-03-26 01:00:46 +01:00
|
|
|
|
2024-04-05 06:54:07 +02:00
|
|
|
services.tailscale.enable = true;
|
2024-03-25 04:41:07 +01:00
|
|
|
services.tailscale.authKeyFile = "/run/secrets/tailscale_key";
|
2024-04-05 06:54:07 +02:00
|
|
|
services.tailscale.interfaceName = "userspace-networking";
|
2024-03-21 10:51:41 +01:00
|
|
|
}
|