137 lines
3.7 KiB
Nix
137 lines
3.7 KiB
Nix
{ config, lib, pkgs, user, ... }:
|
|
let
|
|
inherit (lib)
|
|
mkEnableOption mkOption mkIf types mkMerge mkAfter optionals mkDefault;
|
|
cfg = config.rsydn.containerization;
|
|
in {
|
|
options.rsydn.containerization = {
|
|
podman = {
|
|
enable = mkOption {
|
|
type = types.bool;
|
|
default = true;
|
|
description =
|
|
"Enable Podman for rootless containers as the primary engine.";
|
|
};
|
|
|
|
dockerCompat = mkOption {
|
|
type = types.bool;
|
|
default = true;
|
|
description =
|
|
"Expose the Docker-compatible socket for CLI compatibility.";
|
|
};
|
|
|
|
enableDnsnamePlugin = mkOption {
|
|
type = types.bool;
|
|
default = true;
|
|
description =
|
|
"Enable the dnsname CNI plugin so containers can resolve each other.";
|
|
};
|
|
|
|
extraPackages = mkOption {
|
|
type = types.listOf types.package;
|
|
default = with pkgs; [ podman-compose podman-tui ];
|
|
description =
|
|
"Additional Podman-related packages to install system-wide.";
|
|
};
|
|
};
|
|
|
|
docker = {
|
|
enable = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description =
|
|
"Enable the Docker daemon alongside Podman when explicitly requested.";
|
|
};
|
|
|
|
autoPrune = mkOption {
|
|
type = types.submodule {
|
|
options = {
|
|
enable = mkOption {
|
|
type = types.bool;
|
|
default = true;
|
|
description =
|
|
"Automatically prune unused Docker data on a schedule.";
|
|
};
|
|
dates = mkOption {
|
|
type = types.str;
|
|
default = "weekly";
|
|
description =
|
|
"Systemd calendar expression for docker system prune.";
|
|
};
|
|
flags = mkOption {
|
|
type = types.listOf types.str;
|
|
default = [ "--all" "--volumes" ];
|
|
description = "Extra flags passed to docker system prune.";
|
|
};
|
|
};
|
|
};
|
|
default = { };
|
|
description = "Settings for automatic Docker pruning.";
|
|
};
|
|
};
|
|
|
|
k3s = {
|
|
enable =
|
|
mkEnableOption "Run a lightweight Kubernetes control plane with k3s.";
|
|
|
|
role = mkOption {
|
|
type = types.enum [ "server" "agent" ];
|
|
default = "server";
|
|
description = "Choose whether this node runs as a k3s server or agent.";
|
|
};
|
|
|
|
extraFlags = mkOption {
|
|
type = types.listOf types.str;
|
|
default = [ "--write-kubeconfig-mode=0644" ];
|
|
description = "Additional flags to pass to the k3s service.";
|
|
};
|
|
};
|
|
};
|
|
|
|
config = mkMerge [
|
|
(mkIf cfg.podman.enable {
|
|
virtualisation.podman = {
|
|
enable = true;
|
|
dockerCompat = cfg.podman.dockerCompat;
|
|
defaultNetwork.settings.dnsname.enable = cfg.podman.enableDnsnamePlugin;
|
|
};
|
|
|
|
environment.systemPackages = mkAfter cfg.podman.extraPackages;
|
|
|
|
users.users.${user} = {
|
|
subUidRanges = mkDefault [{
|
|
startUid = 100000;
|
|
count = 65536;
|
|
}];
|
|
subGidRanges = mkDefault [{
|
|
startGid = 100000;
|
|
count = 65536;
|
|
}];
|
|
};
|
|
})
|
|
|
|
(mkIf cfg.docker.enable {
|
|
virtualisation.docker = {
|
|
enable = true;
|
|
package = pkgs.docker;
|
|
enableOnBoot = true;
|
|
autoPrune = {
|
|
enable = cfg.docker.autoPrune.enable;
|
|
dates = cfg.docker.autoPrune.dates;
|
|
flags = cfg.docker.autoPrune.flags;
|
|
};
|
|
};
|
|
})
|
|
|
|
(mkIf cfg.k3s.enable {
|
|
services.k3s = {
|
|
enable = true;
|
|
role = cfg.k3s.role;
|
|
extraFlags = cfg.k3s.extraFlags;
|
|
};
|
|
|
|
networking.firewall.allowedTCPPorts =
|
|
mkAfter (optionals (cfg.k3s.role == "server") [ 6443 ]);
|
|
})
|
|
];
|
|
}
|