satori: enable docker

Signed-off-by: Amneesh Singh <natto@weirdnatto.in>
This commit is contained in:
2023-03-23 18:25:48 +05:30
parent 8e3a3aca2b
commit bfe8ae35b8
4 changed files with 15 additions and 8 deletions

View File

@@ -34,7 +34,7 @@
presence-nvim presence-nvim
nvim-web-devicons nvim-web-devicons
nvim-tree-lua nvim-tree-lua
(nvim-treesitter.withPlugins (plugins: pkgs.tree-sitter.allGrammars)) nvim-treesitter
vim-latex-live-preview vim-latex-live-preview
lspkind-nvim lspkind-nvim
catppuccin-nvim catppuccin-nvim

View File

@@ -13,7 +13,7 @@
}; };
firewall = { firewall = {
allowedTCPPorts = [ 22 18172 6600 8001 25565 ]; allowedTCPPorts = [ 22 18172 6600 8001 7590 25565 ];
allowedUDPPorts = [ 22 17840 18172 ]; allowedUDPPorts = [ 22 17840 18172 ];
trustedInterfaces = [ "docker0" ]; trustedInterfaces = [ "docker0" ];
}; };

View File

@@ -5,7 +5,7 @@
tor.enable = true; tor.enable = true;
openssh = { openssh = {
enable = true; enable = true;
settings.permitRootLogin = "yes"; settings.PermitRootLogin = "yes";
}; };
ratbagd.enable = true; ratbagd.enable = true;
btrfs.autoScrub.enable = true; btrfs.autoScrub.enable = true;
@@ -28,10 +28,17 @@
}; };
security.pki.certificateFiles = [ ../../cert.pem ]; security.pki.certificateFiles = [ ../../cert.pem ];
virtualisation.libvirtd = { virtualisation = {
docker = {
enable = true;
enableNvidia = true;
autoPrune.enable = true;
};
libvirtd = {
enable = true; enable = true;
onBoot = "ignore"; onBoot = "ignore";
onShutdown = "shutdown"; onShutdown = "shutdown";
qemu.runAsRoot = true; qemu.runAsRoot = true;
}; };
};
} }