0 Fork 0

mirror of https://github.com/ryan4yin/nix-config.git synced 2026-11-13 12:13:46 +01:00

Files

T

ryan4yin | 二花 3acb5d4ee5 fix(nfs,libvirt): restrict the golden export and bind VNC to loopback (#400 )

* fix(nfs): restrict the golden export to its real clients

* fix(libvirt): bind VNC consoles to loopback

* fix(firewall): drop VNC ports on every host

* docs(security): record the NFS and VNC boundaries

2026-10-07 15:10:52 +08:00

colmenaSystem.nix

refactor: rename the three VM hosts to 12kingdoms-*

2026-09-21 17:10:14 +08:00

default.nix

chore: remove dead configuration (#352 )

2026-10-03 10:09:38 +08:00

genK3sAgentModule.nix

fix(k3s): deny credential-bearing host ports to pod sources (#399 )

2026-10-07 15:03:56 +08:00

genK3sServerModule.nix

fix(k3s): deny credential-bearing host ports to pod sources (#399 )

2026-10-07 15:03:56 +08:00

genLibvirtDomainXml.nix

fix(nfs,libvirt): restrict the golden export and bind VNC to loopback (#400 )

2026-10-07 15:10:52 +08:00

genMicrovmGuestModule.nix

fix(monitoring): stop recurring false alerts (#395 )

2026-10-07 12:51:30 +08:00

genVmHostModule.nix

refactor: trim unused virtualisation config and packages (#332 )

2026-10-01 19:42:20 +08:00

macosSystem.nix

feat: format via 'ls **/*.nix | each { |it| nixfmt $it.name }'

2025-07-30 12:17:24 +08:00

nixosSystem.nix

chore: replace nixos-generators image outputs

2026-06-14 14:10:08 +08:00

README.md

docs: fix stale claims and AI-flavored prose (#397 )

2026-10-07 14:48:36 +08:00

README.md

Library

This directory contains helper functions used by outputs/default.nix (and the installer flake) to reduce code duplication and make it easier to add new machines.

Current Functions

Core System Generators

macosSystem.nix - macOS configuration generator for nix-darwin
nixosSystem.nix - NixOS configuration generator
colmenaSystem.nix - Remote deployment configuration for colmena

Specialized Module Generators

genK3sServerModule.nix - K3s server node configuration generator
genK3sAgentModule.nix - K3s agent/worker node configuration generator
genVmHostModule.nix - physical VM host (bridge + libvirt) configuration generator
genMicrovmGuestModule.nix - NixOS microVM guest configuration generator
genLibvirtDomainXml.nix - libvirt domain XML generator (imported directly by host configs)

Entry Point

default.nix - Main entry point that imports the generators and exports them as a single attribute set, plus the relativeToRoot and scanPaths helpers

Usage

The generators import the shared host modules, so a new machine supplies its own values and system-specific attributes. colmenaSystem covers remote deployment, and genLibvirtDomainXml renders the domain XML for one guest.

Architecture Support

x86_64-linux: Primary desktop systems
aarch64-linux: ARM64 Linux systems (Apple Silicon, SBCs)
aarch64-darwin: Apple Silicon macOS systems