From ab86d3e6a2932165d3622f3d9496d49b3c08430f Mon Sep 17 00:00:00 2001 From: pazpi Date: Wed, 8 Jan 2025 14:32:49 +0100 Subject: [PATCH] New module for standard LXC containers --- modules/utils/default.nix | 1 + modules/utils/lxc-standard.nix | 29 +++++++++++++++++++++++++++++ 2 files changed, 30 insertions(+) create mode 100644 modules/utils/lxc-standard.nix diff --git a/modules/utils/default.nix b/modules/utils/default.nix index a638d41..01484c5 100644 --- a/modules/utils/default.nix +++ b/modules/utils/default.nix @@ -2,6 +2,7 @@ imports = [ ./commons.nix ./helper-functions.nix + ./lxc-standard.nix ./server-node-users.nix ]; } diff --git a/modules/utils/lxc-standard.nix b/modules/utils/lxc-standard.nix new file mode 100644 index 0000000..7ead31c --- /dev/null +++ b/modules/utils/lxc-standard.nix @@ -0,0 +1,29 @@ +{ config, lib, ... }: +let + cfg = config.my.utils.lxc-standard; +in +{ + options.my.utils.lxc-standard = { + enable = lib.mkEnableOption "Enable if the host is a service LXC container"; + }; + + config = lib.mkIf cfg.enable { + + # Enable SSH + services = { + openssh.enable = true; + }; + + # Monitor node with node_exporter + services.prometheus.exporters = { + node = { + enable = true; + openFirewall = true; + enabledCollectors = [ "systemd" ]; + }; + }; + + networking.nameservers = [ "192.168.1.2" ]; + + }; +}