Init

hosts/services/k3s-agent.nix

@@ -0,0 +1,23 @@
+{ ... }:
+
+{
+  boot.kernelParams = [
+    "cgroup_memory=1"
+    "cgroup_enable=memory"
+    "cgroup_enable=cpuset"
+  ];
+
+  services.k3s = {
+    enable = true;
+    role = "agent";
+    serverAddr = "https://192.168.2.2:6443";
+  };
+
+  networking.firewall = {
+    allowedTCPPortRanges = [
+      { from = 10250; to = 10250; }
+      { from = 30000; to = 32767; }
+    ];
+    trustedInterfaces = [ "cni0" ];
+  };
+}

hosts/services/k3s-master.nix

@@ -0,0 +1,32 @@
+{ pkgs, ... }:
+
+{
+  boot.kernelParams = [
+    "cgroup_memory=1"
+    "cgroup_enable=memory"
+    "cgroup_enable=cpuset"
+  ];
+
+  services.k3s = {
+    enable = true;
+    role = "server";
+    clusterInit = true;
+    extraFlags = ''
+      --disable=traefik
+      --flannel-backend=host-gw
+    '';
+  };
+
+  networking.firewall = {
+    allowedTCPPorts = [ 6443 ];
+    allowedTCPPortRanges = [
+      { from = 10250; to = 10250; }
+      { from = 30000; to = 32767; }
+    ];
+    trustedInterfaces = [ "cni0" ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    kubectl
+  ];
+}