synchronous/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

moar

Browse Source
This commit is contained in:
JakeGinesin
2025-09-28 03:36:29 -04:00
parent e85a730391
commit 3c84fc17c6
3 changed files with 30 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
extras/k3s-node.nix
View File

@@ -4,16 +4,15 @@
lib, lib,
... ...
}: { }: {
environment.etc."rancher/k3s/registries.yaml".text = '' environment.etc."rancher/k3s/registries.yaml".text = ''
mirrors: mirrors:
"100.125.181.75:5000": "100.125.181.75:5000":
endpoint: endpoint:
- http://100.125.181.75:5000/v2 - http://100.125.181.75:5000/v2
configs: configs:
"100.125.181.75:5000": "100.125.181.75:5000":
tls: tls:
insecure_skip_verify: true insecure_skip_verify: true
''; '';
swapDevices = lib.mkForce []; swapDevices = lib.mkForce [];
@@ -29,6 +28,13 @@ configs:
"net.bridge.bridge-nf-call-ip6tables" = 1; "net.bridge.bridge-nf-call-ip6tables" = 1;
}; };
}; };
boot.kernelModules = ["rbd" "nbd" "ceph"];
# Make Ceph user-space tools available on the system
environment.systemPackages = with pkgs; [
];
networking.firewall.enable = false; networking.firewall.enable = false;
# networking.firewall.allowedTCPPorts = [ # networking.firewall.allowedTCPPorts = [
# 6443 # k3s: required so that pods can reach the API server (running on port 6443 by default) # 6443 # k3s: required so that pods can reach the API server (running on port 6443 by default)

19
extras/k3s.nix
View File

@@ -4,16 +4,15 @@
lib, lib,
... ...
}: { }: {
environment.etc."rancher/k3s/registries.yaml".text = '' environment.etc."rancher/k3s/registries.yaml".text = ''
mirrors: mirrors:
"100.125.181.75:5000": "100.125.181.75:5000":
endpoint: endpoint:
- http://100.125.181.75:5000/v2 - http://100.125.181.75:5000/v2
configs: configs:
"100.125.181.75:5000": "100.125.181.75:5000":
tls: tls:
insecure_skip_verify: true insecure_skip_verify: true
''; '';
swapDevices = lib.mkForce []; swapDevices = lib.mkForce [];
@@ -34,6 +33,8 @@ configs:
kubernetes-helm kubernetes-helm
]; ];
boot.kernelModules = ["rbd" "nbd" "ceph"];
networking.firewall.enable = false; networking.firewall.enable = false;
# networking.firewall.allowedTCPPorts = [ # networking.firewall.allowedTCPPorts = [
# 6443 # k3s: required so that pods can reach the API server # 6443 # k3s: required so that pods can reach the API server

10
system/system-server.nix
View File

@@ -45,15 +45,15 @@
''; '';
# services.containerd.registryMirrors = { # services.containerd.registryMirrors = {
# # Replace with your registry's address and port # # Replace with your registry's address and port
# "100.125.181.75:5000" = { # "100.125.181.75:5000" = {
# endpoint = ["http://100.125.181.75:5000"]; # endpoint = ["http://100.125.181.75:5000"];
# }; # };
# }; # };
virtualisation.containerd.settings = { virtualisation.containerd.settings = {
plugins."io.containerd.grpc.v1.cri".registry.mirrors."100.125.181.75:5000" = { plugins."io.containerd.grpc.v1.cri".registry.mirrors."100.125.181.75:5000" = {
endpoint = [ "http://100.125.181.75:5000" ]; endpoint = ["http://100.125.181.75:5000"];
}; };
plugins."io.containerd.grpc.v1.cri".registry.configs."100.125.181.75:5000".tls.insecure_skip_verify = true; plugins."io.containerd.grpc.v1.cri".registry.configs."100.125.181.75:5000".tls.insecure_skip_verify = true;