Bos55/nix-config
2
Fork 1
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity

feat(nixos): add control center host with hypervisor gitops service

Browse source
This commit is contained in:
Tibo De Peuter 2026-07-27 22:01:40 +02:00
parent 89cec4e0f3
commit dc9b7a30d9
Signed by: tdpeuter
SSH key fingerprint: SHA256:u/h/LVoqKF1Iz02uOyxe6hcjmoZASCGV2HM0TG9ZMoU
10 changed files with 259 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

52
nixos/hosts/izanagi/default.nix Normal file
View file

@ -0,0 +1,52 @@
{ config, pkgs, ... }:
{
networking.hostName = "izanagi";
homelab = {
# Enable the standard guest VM configuration
virtualisation.guest.enable = true;
# Enable standard GitOps for the Control Center itself
common.gitops.enable = true;
# We might pull from our Forgejo instance eventually, but for bootstrap
# it might need to pull from Github or the local Gitea if it's up.
# common.gitops.repoUrl = "https://git.depeuter.dev/Bos55/nix-config.git";
services = {
openssh.enable = true;
# Enable the Hypervisor GitOps service to provision OTHER VMs
hypervisor-gitops = {
enable = true;
repoUrl = "https://git.depeuter.dev/Bos55/nix-config.git";
pollInterval = "hourly";
};
};
};
sops = {
defaultSopsFile = ./secrets.yaml;
defaultSopsFormat = "yaml";
age.keyFile = "/var/lib/sops-age/keys.txt"; # Injected via Cloud-Init during Phase 4
secrets = {
proxmox_api_token.owner = "root";
forgejo_token.owner = "root";
};
templates."hypervisor-gitops.env".content = ''
PROXMOX_VE_API_TOKEN=${config.sops.placeholder.proxmox_api_token}
FORGEJO_TOKEN=${config.sops.placeholder.forgejo_token}
PROXMOX_VE_ENDPOINT=https://mikoshi:8006/
PROXMOX_VE_INSECURE=true
'';
};
# Make the secrets available to the hypervisor-gitops service via EnvironmentFile
systemd.services.hypervisor-gitops.serviceConfig.EnvironmentFile = [
config.sops.templates."hypervisor-gitops.env".path
];
system.stateVersion = "24.05";
}