65 lines
1.2 KiB
HCL
65 lines
1.2 KiB
HCL
# NixOS resolver VM — Unbound DNS resolver on Proxmox
|
|
# Template (VMID 9010) must exist first; built via: ansible-playbook playbook.yml --tags template
|
|
|
|
locals {
|
|
nixos_ssh_keys = trimspace(<<-EOT
|
|
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHLyVSEEAEbGZZqwPwEup0XrlTpu3x3iF9ExvvQPA4xN
|
|
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOzrDMNn3nINGdIogzRxY05fkn05LSYi98BGW1Bz5yXD
|
|
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIER/8suIKcrT3a/NZHjvOpRosPC5uX4kcznIJHt/98qj
|
|
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEEKtgXwoW8HZGqC+KJok9iNpI/lK4glvoryL4Ng/AL+
|
|
EOT
|
|
)
|
|
}
|
|
|
|
resource "proxmox_virtual_environment_vm" "nixos_resolver" {
|
|
node_name = "vm2-380"
|
|
name = "nixos-resolver1"
|
|
vm_id = 110
|
|
|
|
clone {
|
|
vm_id = 9010
|
|
full = true
|
|
}
|
|
|
|
cpu {
|
|
cores = 2
|
|
}
|
|
|
|
memory {
|
|
dedicated = 4096
|
|
}
|
|
|
|
disk {
|
|
datastore_id = "local-lvm"
|
|
interface = "scsi0"
|
|
size = 64
|
|
}
|
|
|
|
network_device {
|
|
bridge = "vmbr0"
|
|
}
|
|
|
|
initialization {
|
|
datastore_id = "local-lvm"
|
|
|
|
ip_config {
|
|
ipv4 {
|
|
address = "10.0.0.30/24"
|
|
gateway = "10.0.0.254"
|
|
}
|
|
}
|
|
|
|
dns {
|
|
servers = ["9.9.9.9"]
|
|
}
|
|
|
|
user_account {
|
|
username = "root"
|
|
keys = [local.nixos_ssh_keys]
|
|
}
|
|
}
|
|
|
|
agent {
|
|
enabled = true
|
|
}
|
|
}
|