NixOS container configuration

README.md

(Re)build the full OS and containers from scratch:

nixos-rebuild switch

Done :)

https://nixos.org/ https://nixos.org/nixos/about.html

base_pkgs.nix

{config, pkgs, ... }:

{

  environment.systemPackages = [
    pkgs.openssl
    pkgs.emacs
    pkgs.haskellPackages.cabal2nix
    pkgs.haskellPackages.hakyll
    pkgs.nginx
  ];

}

configuration.nix

{ config, pkgs, ...}:
{
  imports = [
    ./amazon-base-config.nix
    ./base-pkgs.nix
    ./noip.nix
    ./container-web1.nix
    ./container-db1-mysql.nix
  ];
  ec2.hvm = true;

  networking.nat.enable = true;
  networking.nat.internalInterfaces = ["ve-+"];
  networking.nat.externalInterface = "eth0";

}

container-db1-mysql.nix

{ config, pkgs, ... }:

{
  containers.db1mysql = {
    privateNetwork = true;
    hostAddress = "192.168.51.151";
    localAddress = "192.168.151.151";

    config = { config, pkgs, ... }: {
      networking.firewall = {
        enable = true;
        allowedTCPPorts = [ 3306 ];
      };

      environment.systemPackages = with pkgs; [
        vim
        git
        htop
        emacs
        wget
        mysql
      ];

      services.mysql = {
        enable = true;
        port = 3306;
        package = pkgs.mysql;
        user = "mysql";
        dataDir = "/var/db/mysql";
        extraOptions = ''
          bind-address        = 0.0.0.0
        '';
      };
    };
  };
}

container-web1.nix

{ config, pkgs, ... }:

{
  containers.web1 = {
    privateNetwork = true;
    hostAddress = "192.168.1.101";
    localAddress = "192.168.101.101";

    config = { config, pkgs, ... }: {
      networking.firewall = {
        enable = true;
        allowedTCPPorts = [ 80 443 ];
      };

      environment.systemPackages = with pkgs; [
        vim
        git
        htop
        emacs
        wget
      ];

      services.httpd = {
        enable = true;
        enableSSL = false;
        adminAddr = "web1@example.org";
        documentRoot = "/webroot";
        # we override the php version for all uses of pkgs.php with this,
        #  nix-env -qa --xml | grep php
        # lists available versions of php
        extraModules = [
          { name = "php5"; path = "${pkgs.php}/modules/libphp5.so"; }
        ];
      };
    };
  };
}

noip.nix

{config, pkgs, ... }:

{
  systemd.services.noip = {
    wantedBy = [ "multi-user.target" ];
    after    = [ "network.target"    ];
    serviceConfig = {
      Type = "forking";
      User = "root";
      ExecStart = ''/root/.nix-profile/bin/noip2 -d -c /etc/noip/noip'';
    };
  };
}