Initial commit.

roles/k3s.nix

@@ -0,0 +1,26 @@
+{ config, pkgs, ... }:
+
+{
+  networking.firewall = {
+    allowedTCPPorts = [
+      6443 # k3s: required so that pods can reach the API server (running on port 6443 by default)
+      # 2379 # k3s, etcd clients: required if using a "High Availability Embedded etcd" configuration
+      # 2380 # k3s, etcd peers: required if using a "High Availability Embedded etcd" configuration
+    ];
+    # allowedUDPPorts = [
+    # 8472 # k3s, flannel: required if using multi-node for inter-node networking
+    # ];
+  };
+  services.k3s = {
+    enable = true;
+    role = "server";
+  };
+  environment.systemPackages = [ pkgs.nfs-utils ];
+  services.openiscsi = {
+    enable = true;
+    name = "${config.networking.hostName}-initiatorhost";
+  };
+  systemd.tmpfiles.rules = [
+    "L+ /usr/local/bin - - - - /run/current-system/sw/bin/"
+  ];
+}