merge

hosts/v-th-ctr-01/configuration.nix

@@ -0,0 +1,31 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ modulesPath, ... }:
+
+{
+  imports = [
+    # Include the default incus configuration.
+    "${modulesPath}/virtualisation/lxc-container.nix"
+    # Include the container-specific autogenerated configuration.
+  ];
+
+  networking = {
+    dhcpcd.enable = false;
+    useDHCP = false;
+    useHostResolvConf = false;
+  };
+
+  systemd.network = {
+    enable = true;
+    networks."50-eth0" = {
+      matchConfig.Name = "eth0";
+      networkConfig = {
+        DHCP = "ipv4";
+        IPv6AcceptRA = true;
+      };
+      linkConfig.RequiredForOnline = "routable";
+    };
+  };
+}

hosts/v-th-ctr-01/default.nix

@@ -56,8 +56,12 @@
 
   networking.firewall = {
     enable = true;
-    allowedTCPPorts = [ 80 443 53 ];
-    allowedUDPPorts = [ 80 443 53 ];
+    allowedTCPPorts = [ 1080 1443 1053 ];
+    allowedUDPPorts = [ 1080 1443 1053 ];
+  };
+
+  networking.hosts = {
+    "127.0.0.1" = [ "tbmrs.nl" ];
   };
 
   users.users.deploy = {

hosts/v-th-ctr-01/home.nix

@@ -23,7 +23,7 @@
       applications.ssh.enable = true;
       applications.thunderbird.enable = false;
       applications.yazi.enable = true;
-      applications.zellij.enable = false;
+      applications.zellij.enable = true;
 
       services.nextcloud-sync.enable = false;
       services.podman.enable = true;
@@ -35,10 +35,19 @@
 
       desktop-environments.hyprland.enable = false;
 
-      containers.nginx.enable = true;
+      containers = {
+        network.enable = true;
+
+        nginx.enable = true;
+        caddy.enable = true;
+        kanidm.enable = true;
+        forgejo.enable = true;
+      };
     };
 
     home.packages = with pkgs; [
+      unstable.helix
+      lazygit
     ];
 
     # Enable home-manager