Files
nix-config-ryan4yin/vars
ryan4yin | 二花 d40ed42f6c feat(k3s-test-1): add three worker nodes and taint the control plane (#283)
* feat(k3s-test-1): add three worker nodes and taint the control plane

- hosts/k8s/k3s-test-1-worker-{1,2,3} (k3s agents) + flake outputs
- vars/networking: .117/.118/.119 (the .111-.113 range is still held by the
  never-deployed k3s-prod-1 workers)
- k3s-test-1-master-{1,2,3}: nodeTaints=node-role.kubernetes.io/control-plane:NoSchedule
- Justfile: upload the worker images too

* chore(k3s-test-1): move the workers to .111-.113

The k3s-prod-1 entries that held those addresses are gone (nix-config#284).
2026-09-21 12:56:49 +08:00
..
2026-03-16 15:30:24 +08:00
2025-08-21 15:32:50 +08:00

Variables

Common variables and configuration used across my NixOS and nix-darwin configurations.

Current Structure

vars/
├── README.md
├── default.nix         # Main variables entry point
└── networking.nix      # Network configuration and host definitions

Components

1. default.nix

Contains user information, SSH keys, and password configuration:

  • User credentials (username, full name, email)
  • Initial hashed password for new installations
  • SSH authorized keys (main and backup sets)
  • Public key references for system access

2. networking.nix

Comprehensive network configuration including:

  • Gateway settings: Main router and proxy gateway configurations
  • DNS servers: IPv4 and IPv6 name servers
  • Host inventory: Complete mapping of all hosts with their network interfaces and IP addresses
  • SSH configuration: Remote builder aliases and known hosts configuration
  • Network topology: Physical machines, VMs, Kubernetes clusters, and SBCs

Host Categories

The networking configuration covers:

  • Physical machines: Desktop PCs, Apple Silicon systems, SBCs
  • Virtual machines: KubeVirt guests, K3s nodes
  • Kubernetes clusters: Production and testing environments
  • Network infrastructure: Routers, gateways, and DNS configuration

Usage

These variables are imported and used throughout the configuration to ensure consistency across all hosts and maintain centralized network and security settings.