sora/nixconfig
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Releases Activity

Fixing networks arion
All checks were successful
Nix Build / build-nixos (push) Successful in 6m8s
Details

Browse Source
This commit is contained in:
soraefir 2024-04-21 13:27:56 +02:00
parent 0f4154bcb5
commit a8c74cba69
Signed by: sora
GPG Key ID: A362EA0491E2EEA0
4 changed files with 20 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
modules/nixos/system/hw/virt/default.nix
View File

@ -10,7 +10,11 @@
enable = true;
dockerSocket.enable = true;
dockerCompat = true;
defaultNetwork.settings.dnsname.enable = true;
defaultNetwork.settings = {
dnsname.enable = true;
internal = true;
name = "internal";
};
};
};
};

6
modules/server/default.nix
View File

@ -1,13 +1,13 @@
{ config, pkgs, ... }:
{ config, pkgs, lib, ... }:
let
in {
environment.systemPackages = with pkgs; [ arion ];
virtualisation.arion = {
backend = "podman-socket";
projects = {
cloud.settings = import ./docker/cloud.nix { inherit config pkgs; };
cloud.settings = import ./docker/cloud.nix { inherit config pkgs lib; };
authentik.settings =
import ./docker/authentik.nix { inherit config pkgs; };
import ./docker/authentik.nix { inherit config pkgs lib; };
};
};
}

9
modules/server/docker/authentik.nix
View File

@ -1,14 +1,17 @@
{ config, pkgs, ... }:
{ config, pkgs, lib, ... }:
let serverCfg = config.syscfg.server;
in {
project.name = "authentik";
networks = {
internal = {
name = lib.mkForce "internal";
internal = true;
external = false;
};
external = { external = true; };
external = {
name = lib.mkForce "external";
internal = false;
};
};
services = {

9
modules/server/docker/cloud.nix
View File

@ -1,14 +1,17 @@
{ config, pkgs, ... }:
{ config, pkgs, lib, ... }:
let serverCfg = config.syscfg.server;
in {
project.name = "cloud";
networks = {
internal = {
name = lib.mkForce "internal";
internal = true;
external = false;
};
external = { external = true; };
external = {
name = lib.mkForce "external";
internal = false;
};
};
services = {