feat: init basic scaffolding for docker migration

hosts/hime/default.nix

@@ -22,7 +22,6 @@
     xkbVariant = "";
   };
 
-  virtualisation.docker.enable = true;
   users = {
     defaultUserShell = pkgs.nushell;
     users.oh = {
@@ -33,7 +32,6 @@
   };
 
   environment.systemPackages = with pkgs; [
-    docker-compose
     hugo
     wget
     python3Full

hosts/sakura/default.nix

@@ -6,6 +6,7 @@
   imports = [
     ./hardware-configuration.nix
     ../../modules
+    ../../modules/services
   ];
 
   boot.loader = {
@@ -16,7 +17,6 @@
       useOSProber = false;
     };
   };
-
   networking = {
     hostName = "sakura";
   };
@@ -26,7 +26,6 @@
     xkbVariant = "";
   };
 
-  virtualisation.docker.enable = true;
   users = {
     defaultUserShell = pkgs.nushell;
     users.notoh = {

hosts/sutakku/default.nix

@@ -26,7 +26,6 @@
     xkbVariant = "";
   };
 
-  virtualisation.docker.enable = true;
   users = {
     defaultUserShell = pkgs.nushell;
     users.oh = {

modules/default.nix

@@ -5,5 +5,6 @@
     ./nix.nix
     ./system.nix
     ./openssh.nix
+    ./virtualisation.nix
   ];
 }

modules/services/default.nix

@@ -0,0 +1,6 @@
+{...}: {
+  imports = [
+    ./traefik.nix
+    ./homepage.nix
+  ];
+}

modules/services/homepage.nix

@@ -0,0 +1,7 @@
+{pkgs, ...}: {
+  virtualisation.oci-containers.containers.homepage = {
+    ports = ["3000:3000"];
+    image = "ghcr.io/benphelps/homepage";
+    volumes = ["/home/notoh/docker/homepage:/app/config" "/var/run/docker.sock:/var/run/docker.sock:ro"];
+  };
+}

modules/services/traefik.nix

@@ -0,0 +1,29 @@
+{...}: {
+  networking.firewall.allowedTCPPorts = [80 443];
+
+  services.traefik = {
+    enable = true;
+    group = "docker";
+    dynamicConfigOptions = {
+      http = {
+        routers = {
+          homepage = {
+            rule = "Host(`dashboard.lab`)";
+            entryPoints = ["websecure"];
+            service = "homepage";
+          };
+        };
+      };
+    };
+    staticConfigOptions = {
+      global = {
+        checkNewVersion = false;
+        sendAnonymousUsage = false;
+      };
+      entryPoints = {
+        websecure.address = ":443";
+        web.address = ":80";
+      };
+    };
+  };
+}

modules/virtualisation.nix

@@ -0,0 +1,16 @@
+{pkgs, ...}: {
+  environment.systemPackages = with pkgs; [docker-compose];
+
+  virtualisation.oci-containers.backend = "docker";
+  virtualisation.docker = {
+    enable = true;
+    enableOnBoot = true;
+    autoPrune = {
+      enable = true;
+      dates = "weekly";
+    };
+    listenOptions = [
+      "/run/docker.sock"
+    ];
+  };
+}