test/vm.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

{ config, lib, ... }:

let
  nginxPorts = lib.concatLists
    (lib.mapAttrsToList (_: cfg: (builtins.map (x: x.port) cfg.listen))
      config.services.nginx.virtualHosts);
in {
  imports = [ ../configuration.nix ];

  networking = lib.mkForce {
    domain = "aristote.vm";

    interfaces = { };
    defaultGateway = null;
    nameservers = [ ];

    firewall = { allowedTCPPorts = nginxPorts; };
  };

  services.nginx.virtualHosts = {
    "quentin.${config.networking.domain}" = {
      listen = lib.mkForce [{
        addr = "0.0.0.0";
        port = 8080;
      }];
      forceSSL = lib.mkForce false;
      enableACME = lib.mkForce false;
    };
    "searx.${config.networking.domain}" = {
      listen = lib.mkForce [{
        addr = "0.0.0.0";
        port = 8081;
      }];
      forceSSL = lib.mkForce false;
      enableACME = lib.mkForce false;
    };
    "money.${config.networking.domain}" = {
      listen = lib.mkForce [{
        addr = "0.0.0.0";
        port = 8082;
      }];
      forceSSL = lib.mkForce false;
      enableACME = lib.mkForce false;
    };
  };

  environment.etc."searx/secrets".text = ''
    SECRET_KEY=secret_key
  '';
}