Added: k3s setup; Changed Firewall

2026-02-18 16:35:01 +01:00
parent fc94e2f0af
commit ecf0d52f76
5 changed files with 71 additions and 9 deletions
--- a/hosts/services/k3s-agent.nix
+++ b/hosts/services/k3s-agent.nix
@@ -0,0 +1,29 @@
+{ ... }:
+
+{
+  boot.kernelParams = [
+    "cgroup_memory=1"
+    "cgroup_enable=memory"
+    "cgroup_enable=cpuset"
+  ];
+
+  services.k3s = {
+    enable = true;
+    role = "agent";
+    serverAddr = "https://192.168.2.199:6443";
+  };
+
+  networking.firewall = {
+    allowedTCPPortRanges = [
+      {
+        from = 10250;
+        to = 10250;
+      }
+      {
+        from = 30000;
+        to = 32767;
+      }
+    ];
+    trustedInterfaces = [ "cni0" ];
+  };
+}