2023-01-27 00:08:51 +00:00
|
|
|
{
|
2023-01-27 20:24:35 +00:00
|
|
|
server = { enable ? true }: { pkgs, ... }: {
|
2023-01-27 00:08:51 +00:00
|
|
|
networking.firewall.enable = false;
|
|
|
|
|
2023-01-27 05:35:19 +00:00
|
|
|
boot.kernelModules = [ "ceph" ];
|
|
|
|
|
2023-01-27 00:08:51 +00:00
|
|
|
environment.systemPackages = with pkgs; [
|
|
|
|
k3s
|
|
|
|
(writeShellScriptBin "kubectl" (builtins.readFile ./kubectl))
|
|
|
|
];
|
|
|
|
|
|
|
|
services.k3s = {
|
2023-01-27 20:24:35 +00:00
|
|
|
inherit enable;
|
2023-01-27 00:08:51 +00:00
|
|
|
extraFlags = "--disable traefik --disable servicelb";
|
|
|
|
role = "server";
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
2023-01-27 20:24:35 +00:00
|
|
|
agent = { serverIp, enable ? true }: { config, ... }: {
|
2023-01-27 00:08:51 +00:00
|
|
|
networking.firewall.enable = false;
|
|
|
|
|
2023-01-27 05:35:19 +00:00
|
|
|
boot.kernelModules = [ "ceph" ];
|
|
|
|
|
2023-01-27 00:08:51 +00:00
|
|
|
sops.secrets.k3s_token = {
|
|
|
|
format = "yaml";
|
|
|
|
sopsFile = ../../secrets/k3s.yaml;
|
|
|
|
};
|
|
|
|
|
|
|
|
services.k3s = {
|
2023-01-27 20:24:35 +00:00
|
|
|
inherit enable;
|
2023-01-27 00:08:51 +00:00
|
|
|
role = "agent";
|
|
|
|
serverAddr = "https://${serverIp}:6443";
|
|
|
|
tokenFile = config.sops.secrets.k3s_token.path;
|
|
|
|
};
|
|
|
|
};
|
|
|
|
}
|