mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-11-13 12:13:36 +01:00
Ryan Yin
c292509351
Aquamarine's services now run directly on kubevirt-youko, so the guest definition is no longer needed: - move its service modules to hosts/k8s/kubevirt-youko/aquamarine/ and drop the explicit import list, leaving aquamarine-services.nix with just its IP and secret groups - delete the guest base, journald override, output entry and home config - repoint the eval tests that read the guest's config to kubevirt-youko - drop the now-dead 'aqua' colmena recipe and its image upload The aqua KubeVirt VM itself is deleted separately; the name is kept in the docs for a possible later test microvm/qemu-vm on idols-ai.
92 lines
2.1 KiB
Nix
92 lines
2.1 KiB
Nix
{
|
|
# dae(running on aquamarine) do not provides http/socks5 proxy server; so we use v2ray here.
|
|
# https://github.com/v2fly
|
|
services.v2ray = {
|
|
enable = true;
|
|
config = {
|
|
# for monitoring
|
|
"stats" = { };
|
|
"api" = {
|
|
"tag" = "api";
|
|
"services" = [
|
|
"StatsService"
|
|
];
|
|
};
|
|
"policy" = {
|
|
"levels" = {
|
|
"0" = {
|
|
"statsUserUplink" = true;
|
|
"statsUserDownlink" = true;
|
|
};
|
|
};
|
|
"system" = {
|
|
"statsInboundUplink" = true;
|
|
"statsInboundDownlink" = true;
|
|
"statsOutboundUplink" = true;
|
|
"statsOutboundDownlink" = true;
|
|
};
|
|
};
|
|
|
|
inbounds = [
|
|
# core inbound
|
|
{
|
|
listen = "0.0.0.0";
|
|
port = 7890;
|
|
protocol = "http";
|
|
}
|
|
{
|
|
listen = "0.0.0.0";
|
|
port = 7891;
|
|
protocol = "socks";
|
|
settings = {
|
|
auth = "noauth";
|
|
udp = true;
|
|
};
|
|
}
|
|
|
|
# for monitoring
|
|
{
|
|
"tag" = "api";
|
|
"listen" = "127.0.0.1";
|
|
"port" = 54321;
|
|
"protocol" = "dokodemo-door";
|
|
"settings" = {
|
|
"address" = "127.0.0.1";
|
|
};
|
|
}
|
|
];
|
|
outbounds = [
|
|
# forward traffic directly via system's default network(to dae proxy running on aquamarine)
|
|
{
|
|
protocol = "freedom";
|
|
tag = "freedom";
|
|
}
|
|
];
|
|
|
|
# for monitoring
|
|
"routing" = {
|
|
"rules" = [
|
|
{
|
|
"inboundTag" = [
|
|
"api"
|
|
];
|
|
"outboundTag" = "api";
|
|
"type" = "field";
|
|
}
|
|
];
|
|
};
|
|
};
|
|
};
|
|
|
|
# https://github.com/NixOS/nixpkgs/blob/nixos-26.05/nixos/modules/services/monitoring/prometheus/exporters/v2ray.nix
|
|
# https://github.com/wi1dcard/v2ray-exporter
|
|
services.prometheus.exporters.v2ray = {
|
|
enable = true;
|
|
# loopback only: scraped by VictoriaMetrics on the same host
|
|
listenAddress = "127.0.0.1";
|
|
port = 9153;
|
|
openFirewall = false;
|
|
v2rayEndpoint = "127.0.0.1:54321";
|
|
};
|
|
}
|