44 lines
886 B
Nix
44 lines
886 B
Nix
|
{
|
||
|
|
config,
|
||
|
|
pkgs,
|
||
|
|
meta,
|
||
|
|
...
|
||
|
|
}:
|
||
|
|
{
|
||
|
|
# ================================ #
|
||
|
|
# K3S SERVICE #
|
||
|
|
# ================================ #
|
||
|
|
|
||
|
|
services.k3s = {
|
||
|
|
enable = true;
|
||
|
|
disable = [ "traefik" ];
|
||
|
|
role = "server";
|
||
|
|
|
||
|
|
# only enable the service on k3s when roughly finalized
|
||
|
|
# Until then use a vm, as k3s is persisted
|
||
|
|
extraFlags = [
|
||
|
|
"--data-dir=/var/lib/rancher/k3s"
|
||
|
|
"--cluster-cidr=10.42.0.0/20"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
|
||
|
|
# ================================ #
|
||
|
|
# PSQL SERVICE #
|
||
|
|
# ================================ #
|
||
|
|
|
||
|
|
# Postgresql/postgrest for row storage (not on k3s)
|
||
|
|
services.postgresql-db = {
|
||
|
|
enable = true;
|
||
|
|
dataDir = "/var/lib/postgresql";
|
||
|
|
port = 5432;
|
||
|
|
credentialsFile = ./secrets/ex-psql.yaml;
|
||
|
|
databases = [
|
||
|
|
"test"
|
||
|
|
];
|
||
|
|
ipMasks = [
|
||
|
|
"10.42.0.0/20" # k3s pod mask
|
||
|
|
];
|
||
|
|
};
|
||
|
|
|
||
|
|
}
|