refactor(vars,hosts): networking & k3s clusters

hosts/k8s/kubevirt-shoryu/default.nix

@@ -1,4 +1,5 @@
 {
+  config,
   pkgs,
   mylib,
   myvars,
@@ -7,17 +8,25 @@
 }: let
   # MoreFine - S500Plus
   hostName = "kubevirt-shoryu"; # Define your hostname.
-  k8sLib = import ../lib.nix;
-  coreModule = k8sLib.gencoreModule {
+  
+  coreModule = mylib.genKubeVirtCoreModule {
     inherit pkgs hostName;
     inherit (myvars) networking;
   };
+  k3sModule = mylib.genK3sServerModule {
+    inherit pkgs;
+    kubeconfigFile = "/home/${myvars.username}/.kube/config";
+    tokenFile = config.age.secrets."k3s-prod-1-token".path;
+    # the first node in the cluster should be the one to initialize the cluster
+    clusterInit = true;
+  };
 in {
   imports =
     (mylib.scanPaths ./.)
     ++ [
-      coreModule
       disko.nixosModules.default
       ../disko-config/kubevirt-disko-fs.nix
+      coreModule
+      k3sModule
     ];
 }

hosts/k8s/kubevirt-shoryu/k3s.nix

@@ -1,42 +0,0 @@
-{
-  config,
-  pkgs,
-  myvars,
-  ...
-}: let
-  package = pkgs.k3s_1_29;
-in {
-  environment.systemPackages = with pkgs; [
-    package
-    k9s
-    kubectl
-    istioctl
-    kubernetes-helm
-
-    skopeo
-    dive # explore docker layers
-  ];
-  services.k3s = {
-    inherit package;
-    enable = true;
-
-    # Initialize HA cluster using an embedded etcd datastore.
-    # If you are configuring an HA cluster with an embedded etcd,
-    # the 1st server must have `clusterInit = true`
-    # and other servers must connect to it using serverAddr.
-    clusterInit = true;
-    role = "server";
-    tokenFile = "/run/media/nixos_k3s/kubevirt-k3s-token";
-    # https://docs.k3s.io/cli/server
-    extraFlags =
-      " --write-kubeconfig /etc/k3s/kubeconfig.yml"
-      + " --write-kubeconfig-mode 644"
-      + " --service-node-port-range 80-32767"
-      + " --kube-apiserver-arg='--allow-privileged=true'" # required by kubevirt
-      + " --data-dir /var/lib/rancher/k3s"
-      + " --disable-helm-controller" # we use fluxcd instead
-      + " --disable=traefik" # deploy our own ingress controller instead
-      + " --etcd-expose-metrics true"
-      + " --etcd-snapshot-schedule-cron '0 */12 * * *'";
-  };
-}