From 74ffdf731c1e5b16651ac22fe8c1e9755a90881d Mon Sep 17 00:00:00 2001
From: Roy Dumblauskas <roydumblauskas@gmail.com>
Date: Tue, 15 Sep 2026 22:36:17 -0500
Subject: [PATCH] add some vm configs

---
 .../incus-vm/secrets/ex-psql.yaml             |  1 +
 homelab-services/incus-vm/virtual.nix         | 43 +++++++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 homelab-services/incus-vm/secrets/ex-psql.yaml
 create mode 100644 homelab-services/incus-vm/virtual.nix

diff --git a/homelab-services/incus-vm/secrets/ex-psql.yaml b/homelab-services/incus-vm/secrets/ex-psql.yaml
new file mode 100644
index 0000000..5e0f293
--- /dev/null
+++ b/homelab-services/incus-vm/secrets/ex-psql.yaml
@@ -0,0 +1 @@
+PSQL_TEST_PASSWORD=password1234
diff --git a/homelab-services/incus-vm/virtual.nix b/homelab-services/incus-vm/virtual.nix
new file mode 100644
index 0000000..e08699d
--- /dev/null
+++ b/homelab-services/incus-vm/virtual.nix
@@ -0,0 +1,43 @@
+{
+  config,
+  pkgs,
+  meta,
+  ...
+}:
+{
+  # ================================ #
+  #            K3S SERVICE           #
+  # ================================ #
+
+  services.k3s = {
+    enable = true;
+    disable = [ "traefik" ];
+    role = "server";
+
+    # only enable the service on k3s when roughly finalized
+    # Until then use a vm, as k3s is persisted
+    extraFlags = [
+      "--data-dir=/var/lib/rancher/k3s"
+      "--cluster-cidr=10.42.0.0/20"
+    ];
+  };
+
+  # ================================ #
+  #           PSQL SERVICE           #
+  # ================================ #
+
+  # Postgresql/postgrest for row storage (not on k3s)
+  services.postgresql-db = {
+    enable = true;
+    dataDir = "/var/lib/postgresql";
+    port = 5432;
+    credentialsFile = ./secrets/ex-psql.yaml;
+    databases = [
+      "test"
+    ];
+    ipMasks = [
+      "10.42.0.0/20" # k3s pod mask
+    ];
+  };
+
+}