Fix voyager; zfs, docker, metrics

hosts/chapel/configuration.nix

@@ -62,11 +62,6 @@
      '';
     }
   )
-    wget
-    git
-    tree
-    rsync
-    bottom
   ];
 
   networking.firewall.allowedTCPPorts = [ 80 22 3100 ];

hosts/voyager/configuration.nix

@@ -8,34 +8,34 @@
       ./hardware-configuration.nix
       ./containers.nix
 
+      ./services/nginx
       ./services/metrics
 
       # TODO:
-      # - Boots
+      # x Boot
+      # x Mount ZFS
+      # x Monitoring server
+      # x Podman
+      #    x Flame
       # - Transmission
       # - Jellyfin
       # - NFS exports
-      # x Monitoring server
+      # - FreeBSD VM
       # - Kali VM
       # - Kerberos / IPA
     ];
 
   boot = {
-    kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
-    kernelParams = [ "nohibernate" ]; # No swap, no hibernate
+    zfs.extraPools = [ "tank" ];
     supportedFilesystems = [ "zfs" ];
+    kernelPackages = config.boot.zfs.package.latestCompatibleLinuxPackages;
   };
 
-  # filesystems."/tank" = {
-  #   device = "tank";
-  #   fsType = "zfs";
-  # };
-
   networking = {
     hostName = "voyager";
     defaultGateway = "192.168.10.1";
     nameservers = [ "192.168.10.1" "1.1.1.1" ];
-    interfaces.eth0.ipv4 = {
+    interfaces.eno1.ipv4 = {
       addresses = [
         { address = "192.168.10.165"; prefixLength = 24; }
       ];
@@ -81,16 +81,11 @@
      '';
     }
   )
-    wget
-    git
-    tree
-    rsync
-    bottom
+    zfs
   ];
 
   networking.firewall.allowedTCPPorts = [ 22 ];
 
   system.stateVersion = "22.11";
-
 }
 

hosts/voyager/containers.nix

@@ -1,13 +1,19 @@
-{ config, pkgs, values, ... }:
+{ config, pkgs, lib, ... }:
 {
-   config.virtualisation.oci-containers.containers = {
+   # Flame - Homelab dashboard/linktree
+   virtualisation.oci-containers.containers = {
      flame = {
        image = "pawelmalak/flame";
-       ports = [ "5005:5005" ];
+       ports = [ "127.0.0.1:5005:5005" ];
        volumes = [
          "/var/lib/flame/data:/app/data/"
        ];
      };
    };
+   services.nginx.virtualHosts."flame.home.feal.no" = {
+     locations."/" = {
+       proxyPass = "http://127.0.0.1:5005";
+     };
+   };
  }
 

hosts/voyager/hardware-configuration.nix

@@ -8,33 +8,18 @@
     [ (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
-  boot.initrd.availableKernelModules = [ "ehci_pci" "ahci" "mpt3sas" "usb_storage" "usbhid" "sd_mod" "sr_mod" ];
+  boot.initrd.availableKernelModules = [ "ehci_pci" "ahci" "mpt3sas" "usbhid" "usb_storage" "sd_mod" "sr_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "rpool/nixos/root";
-      fsType = "zfs";
+    { device = "/dev/disk/by-uuid/5e292e89-d68c-4b45-9166-142de8b6ff5e";
+      fsType = "ext4";
     };
 
-  fileSystems."/home" =
-    { device = "rpool/nixos/home";
-      fsType = "zfs";
-    };
-
-  fileSystems."/var/lib" =
-    { device = "rpool/nixos/var/lib";
-      fsType = "zfs";
-    };
-
-  fileSystems."/boot/efis/usb-USB_SanDisk_3.2Gen1_0101b10101c61e14737f7ba5d4debafb705fb5bb1082a0be6e8a84f5eb4ae02393df000000000000000000009940bff9ff01740081558107b5ad5d4a-0:0-part1" =
-    { device = "/dev/sdb1";
-      fsType = "vfat";
-    };
-
-  fileSystems."/boot/efis/usb-USB_SanDisk_3.2Gen1_0101aa2faa7599e5f2afc0dde60a5f61a62999cc479fbf61706afe2f115d19735f550000000000000000000026304b1f0094160081558107b5ac9a2a-0:0-part1" =
-    { device = "/dev/sdc1";
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/7EA9-3E3A";
       fsType = "vfat";
     };
 

hosts/voyager/services/metrics/default.nix

@@ -5,6 +5,6 @@
     ./prometheus.nix
     ./grafana.nix
     ./loki.nix
-    ./snmp-exporter.nix
+    #./snmp-exporter.nix
   ];
 }

hosts/voyager/services/nginx/default.nix

@@ -0,0 +1,15 @@
+{ config, values, ... }:
+{
+  services.nginx = {
+    enable = true;
+    enableReload = true;
+
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+}
+