update nix config
This commit is contained in:
parent
f610209aff
commit
07b7f0cc1f
34 changed files with 388 additions and 240 deletions
|
@ -1,5 +1,19 @@
|
|||
{ config, pkgs, ... }: {
|
||||
{ config, pkgs, lib, ... }: {
|
||||
|
||||
options = {
|
||||
rootless_docker = lib.mkOption {
|
||||
type = lib.types.bool;
|
||||
description = "rootless docker";
|
||||
default = true;
|
||||
};
|
||||
|
||||
privileged_ports = lib.mkOption {
|
||||
type = lib.types.bool;
|
||||
description = "rootless docker allowed privileged ports";
|
||||
default = false;
|
||||
};
|
||||
|
||||
};
|
||||
config = {
|
||||
|
||||
home-manager.users.${config.user} = { pkgs, ... }: {
|
||||
|
@ -8,14 +22,25 @@
|
|||
ctop
|
||||
];
|
||||
};
|
||||
|
||||
users.extraUsers.${config.user}.extraGroups = [ "docker" ];
|
||||
virtualisation.docker = {
|
||||
enable = true;
|
||||
rootless = {
|
||||
#enable = false;
|
||||
rootless = lib.mkIf config.rootless_docker {
|
||||
enable = true;
|
||||
setSocketVariable = true;
|
||||
};
|
||||
};
|
||||
|
||||
# https://im.salty.fish/index.php/archives/nixos-docker-rootless-privileged-ports.html
|
||||
security.wrappers = lib.mkIf config.privileged_ports {
|
||||
docker-rootlesskit = {
|
||||
owner = "root";
|
||||
group = "root";
|
||||
capabilities = "cap_net_bind_service+ep";
|
||||
source = "${pkgs.rootlesskit}/bin/rootlesskit";
|
||||
};
|
||||
};
|
||||
|
||||
};
|
||||
}
|
||||
|
|
12
modules/dev/utils.nix
Normal file
12
modules/dev/utils.nix
Normal file
|
@ -0,0 +1,12 @@
|
|||
{ config, pkgs, ... }: {
|
||||
|
||||
config = {
|
||||
|
||||
home-manager.users.${config.user} = { pkgs, ... }: {
|
||||
home.packages = with pkgs; [
|
||||
typescript
|
||||
httpie
|
||||
];
|
||||
};
|
||||
};
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue