first commit

hosts/hetzner/vm.nix

@@ -0,0 +1,55 @@
+{ lib, ... }:
+{
+  virtualisation.vmVariant = {
+    virtualisation = {
+      memorySize = 4096;
+      cores = 2;
+      graphics = false;
+      sharedDirectories = {
+        sops-keys = {
+          source = "/home/louis/.config/sops/age";
+          target = "/var/lib/sops-nix";
+        };
+      };
+      forwardPorts = [
+        {
+          from = "host";
+          host.port = 8080;
+          guest.port = 80;
+        }
+      ];
+    };
+
+    fileSystems."/mnt/volume" = lib.mkForce {
+      device = "none";
+      fsType = "tmpfs";
+      options = [
+        "size=2G"
+        "mode=777"
+      ];
+    };
+
+    fileSystems."/mnt/box" = lib.mkForce {
+      device = "none";
+      fsType = "tmpfs";
+      options = [
+        "size=2G"
+        "mode=777"
+      ];
+    };
+
+    sops.age.keyFile = lib.mkForce "/var/lib/sops-nix/keys.txt";
+
+    users.users.root.password = "root";
+    services.openssh.settings.PermitRootLogin = "yes";
+    services.openssh.settings.PasswordAuthentication = true;
+
+    documentation.enable = false;
+    systemd.services.NetworkManager-wait-online.enable = false;
+
+    networking.useDHCP = lib.mkDefault true;
+
+    services.qemuGuest.enable = true;
+    networking.enableIPv6 = false;
+  };
+}