- new nixosConfigurations.vps: UEFI systemd-boot, disko on /dev/vda - static IPv4 159.195.64.117/22 gw .1 (+ IPv6), eth0 pinned, public DNS - tailscale via headscale + sops authkey (secrets/vps.yaml, own host key) - caddy public reverse proxy: audiobookshelf.mgaction.town -> jupiter tailnet:8000 - shared common.nix (user/ssh/nix) ; .sops.yaml per-host rules
38 lines
974 B
Nix
38 lines
974 B
Nix
{ ... }:
|
|
|
|
# Declarative disk layout (disko) for the netcup VPS.
|
|
# UEFI: GPT with an ESP + ext4 root on the single virtio disk.
|
|
#
|
|
# ⚠️ /dev/vda is WIPED on install — this destroys everything currently on the
|
|
# VPS (docker containers, data, existing caddy config). Back up / port your
|
|
# services into NixOS BEFORE running nixos-anywhere.
|
|
{
|
|
disko.devices.disk.vps = {
|
|
type = "disk";
|
|
device = "/dev/vda"; # netcup virtio disk (256G)
|
|
content = {
|
|
type = "gpt";
|
|
partitions = {
|
|
ESP = {
|
|
size = "512M";
|
|
type = "EF00";
|
|
content = {
|
|
type = "filesystem";
|
|
format = "vfat";
|
|
mountpoint = "/boot";
|
|
mountOptions = [ "umask=0077" ];
|
|
};
|
|
};
|
|
root = {
|
|
size = "100%";
|
|
content = {
|
|
type = "filesystem";
|
|
format = "ext4";
|
|
mountpoint = "/";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|