29 lines
801 B
Nix
29 lines
801 B
Nix
{
|
|
pkgs,
|
|
config,
|
|
meta,
|
|
...
|
|
}: {
|
|
services.k3s = {
|
|
enable = true;
|
|
role = meta.role;
|
|
tokenFile = config.age.secrets.k3s.path;
|
|
clusterInit = config.networking.hostName == "premhome-gc1";
|
|
serverAddr =
|
|
if config.networking.hostName == "premhome-gc1"
|
|
then ""
|
|
else "https://${meta.server-addr}:6443";
|
|
extraFlags = ["--disable=servicelb" "--disable=traefik" "--node-ip ${meta.zt-ip}" "--flannel-iface ztxh6lvd6t" "--flannel-backend=host-gw" "--tls-san ${meta.zt-ip}"];
|
|
};
|
|
|
|
# For longhorn
|
|
environment.systemPackages = [ pkgs.nfs-utils ];
|
|
services.openiscsi = {
|
|
enable = true;
|
|
name = "iqn.2016-04.com.open-iscsi:${config.networking.hostName}";
|
|
};
|
|
systemd.tmpfiles.rules = [
|
|
"L+ /usr/local/bin - - - - /run/current-system/sw/bin/"
|
|
];
|
|
}
|