eli/flowback-infra
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add VM overrides for local staging (HTTP + port forward + bootstrap password)

Browse source
This commit is contained in:
Eli Fadi 2026-03-03 12:18:49 +01:00
parent c44c5eeb12
commit b97ce7e4f1
1 changed files with 24 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

24
hosts/staging/configuration.nix
View file

@ -2,6 +2,7 @@
{ {
imports = [ imports = [
./hardware-configuration.nix
../../modules/common.nix ../../modules/common.nix
../../modules/sops.nix ../../modules/sops.nix
../../modules/nextcloud.nix ../../modules/nextcloud.nix
@ -29,6 +30,29 @@
}; };
security.sudo.wheelNeedsPassword = false; security.sudo.wheelNeedsPassword = false;
# Local VM overrides (so you can test immediately without real DNS/TLS/secrets)
virtualisation.vmVariant = { lib, config, ... }: {
# Forward guest port 80 -> host port 8080
virtualisation.forwardPorts = [
{ from = "host"; host.port = 8080; guest.port = 80; }
];
# Disable ACME/forced SSL for VM testing
security.acme.acceptTerms = lib.mkForce false;
services.nginx.virtualHosts.${config.services.flowback.nextcloudHost}.enableACME = lib.mkForce false;
services.nginx.virtualHosts.${config.services.flowback.nextcloudHost}.forceSSL = lib.mkForce false;
services.nginx.virtualHosts.${config.services.flowback.forgejoHost}.enableACME = lib.mkForce false;
services.nginx.virtualHosts.${config.services.flowback.forgejoHost}.forceSSL = lib.mkForce false;
# Nextcloud over HTTP in VM
services.nextcloud.https = lib.mkForce false;
# VM-only admin password file (OK for local testing)
environment.etc."nextcloud-adminpass".text = "admin123admin123";
services.nextcloud.config.adminpassFile = lib.mkForce "/etc/nextcloud-adminpass";
# Allow Forgejo user creation in VM (first user becomes admin during setup)
services.forgejo.settings.service.DISABLE_REGISTRATION = lib.mkForce false;
};
system.stateVersion = "25.11"; system.stateVersion = "25.11";
} }