Format using alejandra

flake.nix

@@ -13,14 +13,19 @@
     agenix.url = "github:yaxitech/ragenix";
   };
 
-  outputs = inputs@{ self, nixpkgs, home-manager, microvm, agenix, ... }:
+  outputs = inputs @ {
-    let
+    self,
+    nixpkgs,
+    home-manager,
+    microvm,
+    agenix,
+    ...
+  }: let
     system = "x86_64-linux";
     username = "tbarnouin";
     proxy_host = "192.168.1.40";
     pgsql_host = "192.168.1.13";
-    in
+  in {
-    {
     nixosConfigurations = {
       nixmox-curiosity = nixpkgs.lib.nixosSystem {
         inherit system;
@@ -84,16 +89,16 @@
           }
         ];
       };
-#        template = nixpkgs.lib.nixosSystem {
+      #        template = nixpkgs.lib.nixosSystem {
-#          inherit system;
+      #          inherit system;
-#          modules = [
+      #          modules = [
-#            agenix.nixosModules.default
+      #            agenix.nixosModules.default
-#            "${inputs.self}/systems/minimalVMConfig.nix"
+      #            "${inputs.self}/systems/minimalVMConfig.nix"
-#            {
+      #            {
-#              networking.hostName = "nixos";
+      #              networking.hostName = "nixos";
-#            }
+      #            }
-#          ];
+      #          ];
-#        };
+      #        };
       jellyfin = nixpkgs.lib.nixosSystem {
         inherit system;
         modules = [

hosts/nixmox-curiosity/configuration.nix

@@ -1,11 +1,15 @@
-{ config, lib, pkgs, ... }:
+{
-
+  config,
-{ imports = [ ./hardware-configuration.nix ];
+  lib,
+  pkgs,
+  ...
+}: {
+  imports = [./hardware-configuration.nix];
 
   nix = {
     settings = {
-      experimental-features = [ "nix-command" "flakes" ];
+      experimental-features = ["nix-command" "flakes"];
-      trusted-users = [ "@wheel" ];
+      trusted-users = ["@wheel"];
       auto-optimise-store = true;
     };
     gc = {
@@ -17,9 +21,9 @@
 
   security.sudo.wheelNeedsPassword = false;
 
-  networking= {
+  networking = {
     useNetworkd = true;
-    firewall.allowedTCPPorts = [ 22 ];
+    firewall.allowedTCPPorts = [22];
   };
 
   systemd.network = {
@@ -104,5 +108,4 @@
   };
 
   system.stateVersion = "24.11"; # Did you read the comment?
-
 }

hosts/nixmox-curiosity/hardware-configuration.nix

@@ -1,13 +1,15 @@
-{ lib, system, ... }:
-
 {
+  lib,
+  system,
+  ...
+}: {
   boot = {
     # use latest kernel
     # kernelPackages = pkgs.linuxPackages_latest;
-    supportedFilesystems = [ "ext4" "btrfs" "xfs" "fat" "vfat" "cifs" "nfs" ];
+    supportedFilesystems = ["ext4" "btrfs" "xfs" "fat" "vfat" "cifs" "nfs"];
     growPartition = true;
-    kernelModules = [ "kvm-intel" ];
+    kernelModules = ["kvm-intel"];
-    kernelParams = lib.mkForce [ ];
+    kernelParams = lib.mkForce [];
 
     loader = {
       grub = {
@@ -20,8 +22,8 @@
     };
 
     initrd = {
-      availableKernelModules = [ "9p" "9pnet_virtio" "ata_piix" "uhci_hcd" "virtio_blk" "virtio_mmio" "virtio_net" "virtio_pci" "virtio_scsi" ];
+      availableKernelModules = ["9p" "9pnet_virtio" "ata_piix" "uhci_hcd" "virtio_blk" "virtio_mmio" "virtio_net" "virtio_pci" "virtio_scsi"];
-      kernelModules = [ "virtio_balloon" "virtio_console" "virtio_rng" ];
+      kernelModules = ["virtio_balloon" "virtio_console" "virtio_rng"];
     };
 
     tmp.cleanOnBoot = true;
@@ -45,7 +47,6 @@
     };
   };
 
-
   services.fstrim = {
     enable = true;
     interval = "weekly";

hosts/nixmox-curiosity/home.nix

@@ -1,5 +1,8 @@
-{ config, pkgs, ... }:
 {
+  config,
+  pkgs,
+  ...
+}: {
   home = {
     username = "tbarnouin";
     stateVersion = "24.11";
@@ -75,8 +78,7 @@
       };
       oh-my-zsh = {
         enable = true;
-        plugins =
+        plugins = [
-          [
           "git"
           "terraform"
           "sudo"

hosts/nixmox-perseverance/configuration.nix

@@ -1,11 +1,15 @@
-{ config, lib, pkgs, ... }:
+{
-
+  config,
-{ imports = [ ./hardware-configuration.nix ];
+  lib,
+  pkgs,
+  ...
+}: {
+  imports = [./hardware-configuration.nix];
 
   nix = {
     settings = {
-      experimental-features = [ "nix-command" "flakes" ];
+      experimental-features = ["nix-command" "flakes"];
-      trusted-users = [ "@wheel" ];
+      trusted-users = ["@wheel"];
       auto-optimise-store = true;
     };
     gc = {
@@ -17,9 +21,9 @@
 
   security.sudo.wheelNeedsPassword = false;
 
-  networking= {
+  networking = {
     useNetworkd = true;
-    firewall.allowedTCPPorts = [ 22 ];
+    firewall.allowedTCPPorts = [22];
   };
 
   systemd.network = {
@@ -104,5 +108,4 @@
   };
 
   system.stateVersion = "24.11"; # Did you read the comment?
-
 }

hosts/nixmox-perseverance/hardware-configuration.nix

@@ -1,13 +1,15 @@
-{ lib, system, ... }:
-
 {
+  lib,
+  system,
+  ...
+}: {
   boot = {
     # use latest kernel
     # kernelPackages = pkgs.linuxPackages_latest;
-    supportedFilesystems = [ "ext4" "btrfs" "xfs" "fat" "vfat" "cifs" "nfs" ];
+    supportedFilesystems = ["ext4" "btrfs" "xfs" "fat" "vfat" "cifs" "nfs"];
     growPartition = true;
-    kernelModules = [ "kvm-intel" ];
+    kernelModules = ["kvm-intel"];
-    kernelParams = lib.mkForce [ ];
+    kernelParams = lib.mkForce [];
 
     loader = {
       grub = {
@@ -20,8 +22,8 @@
     };
 
     initrd = {
-      availableKernelModules = [ "9p" "9pnet_virtio" "ata_piix" "uhci_hcd" "virtio_blk" "virtio_mmio" "virtio_net" "virtio_pci" "virtio_scsi" ];
+      availableKernelModules = ["9p" "9pnet_virtio" "ata_piix" "uhci_hcd" "virtio_blk" "virtio_mmio" "virtio_net" "virtio_pci" "virtio_scsi"];
-      kernelModules = [ "virtio_balloon" "virtio_console" "virtio_rng" ];
+      kernelModules = ["virtio_balloon" "virtio_console" "virtio_rng"];
     };
 
     tmp.cleanOnBoot = true;

hosts/nixmox-perseverance/home.nix

@@ -1,5 +1,8 @@
-{ config, pkgs, ... }:
 {
+  config,
+  pkgs,
+  ...
+}: {
   home = {
     username = "tbarnouin";
     stateVersion = "24.11";
@@ -75,8 +78,7 @@
       };
       oh-my-zsh = {
         enable = true;
-        plugins =
+        plugins = [
-          [
           "git"
           "terraform"
           "sudo"

secrets.nix

@@ -1,19 +1,17 @@
 let
   tbarnouin = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxccGxdfOFXeEClqz3ULl94ubzaJnk4pUus+ek18G0B tbarnouin@nixos";
-  users      = [ tbarnouin ];
+  users = [tbarnouin];
 
   forgejo = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF2NAam+nseSCzJV/1UTyO2LgMjx0xT7/vTOOi5EG9HV root@forgejo-runner";
   grafana = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDQxvO9vdd2f9aV4F3LEQrrTJaLwLvSLbLtjB9qNxc4z root@grafana";
   onlyoffice = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGbnzv2/Or4XdQXLDjIbr7oIDTQEvgSMTX4aiNCQk4tC root@onlyoffice";
 
-  systems    = [ forgejo grafana ];
+  systems = [forgejo grafana];
-in
+in {
-{
   "secrets/initialPassword.age".publicKeys = users ++ systems;
-  "services/grafana/secrets/grafana-db.age".publicKeys = [ tbarnouin grafana ];
+  "services/grafana/secrets/grafana-db.age".publicKeys = [tbarnouin grafana];
-  "services/grafana/secrets/grafana-oauth_secret.age".publicKeys = [ tbarnouin grafana ];
+  "services/grafana/secrets/grafana-oauth_secret.age".publicKeys = [tbarnouin grafana];
-  "services/grafana/secrets/kuma-token.age".publicKeys = [ tbarnouin grafana ];
+  "services/grafana/secrets/kuma-token.age".publicKeys = [tbarnouin grafana];
-  "services/onlyoffice/secrets/office-dbpass.age".publicKeys  = [ tbarnouin onlyoffice ];
+  "services/onlyoffice/secrets/office-dbpass.age".publicKeys = [tbarnouin onlyoffice];
-  "services/onlyoffice/secrets/office-jwtpass.age".publicKeys = [ tbarnouin onlyoffice ];
+  "services/onlyoffice/secrets/office-jwtpass.age".publicKeys = [tbarnouin onlyoffice];
 }
-

services/authentik/default.nix

@@ -1,14 +1,18 @@
-{ inputs, config, lib, authentik-nix, ... }:
-let
-  cfg = config.services.vm_authentik;
-in
 {
+  inputs,
+  config,
+  lib,
+  authentik-nix,
+  ...
+}: let
+  cfg = config.services.vm_authentik;
+in {
   options.services.vm_authentik = {
     enable = lib.mkEnableOption "Enable minimal config";
   };
   config = lib.mkIf cfg.enable {
     networking = {
-      firewall.allowedTCPPorts = [ 9000 9300 9443 ];
+      firewall.allowedTCPPorts = [9000 9300 9443];
     };
   };
 }

services/default.nix

@@ -1,5 +1,4 @@
-{ inputs, ... }:
+{inputs, ...}: {
-{
   imports = [
     ./nginx
     ./gitea

services/gitea/default.nix

@@ -1,8 +1,11 @@
-{ config, pkgs, lib, ... }:
-let
-  cfg = config.services.vm_gitea;
-in
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  cfg = config.services.vm_gitea;
+in {
   options.services.vm_gitea = {
     enable = lib.mkEnableOption "Enable minimal config";
     db_ip = lib.mkOption {
@@ -27,6 +30,6 @@ in
         passwordFile = "/run/secrets/gitea/gitea-dbpass";
       };
     };
-    networking.firewall.allowedTCPPorts = [ 3000 ];
+    networking.firewall.allowedTCPPorts = [3000];
   };
 }

services/grafana/default.nix

@@ -1,8 +1,11 @@
-{ lib, config, pkgs, ... }:
-let
-  cfg = config.services.vm_grafana;
-in
 {
+  lib,
+  config,
+  pkgs,
+  ...
+}: let
+  cfg = config.services.vm_grafana;
+in {
   options.services.vm_grafana = {
     enable = lib.mkEnableOption "Enable minimal config";
     vm_ip = lib.mkOption {
@@ -19,7 +22,7 @@ in
     };
   };
   config = lib.mkIf cfg.enable {
-    age.secrets ={
+    age.secrets = {
       grafana-db = {
         file = ./secrets/grafana-db.age;
         owner = "grafana";
@@ -88,95 +91,125 @@ in
           job_name = "kuma";
           scrape_interval = "30s";
           scheme = "http";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.90:3001" ];
+            {
-          }];
+              targets = ["192.168.1.90:3001"];
+            }
+          ];
           basic_auth.username = "tbarnouin";
           basic_auth.password_file = config.age.secrets.kuma-token.path;
         }
         {
           job_name = "grafana";
-          static_configs = [{
+          static_configs = [
-            targets = [ "127.0.0.1:9002" ];
+            {
-          }];
+              targets = ["127.0.0.1:9002"];
+            }
+          ];
         }
         {
           job_name = "openmediavault_cadvisor";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.125:8080" ];
+            {
-          }];
+              targets = ["192.168.1.125:8080"];
+            }
+          ];
         }
         {
           job_name = "opportunity";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.125:9100" ];
+            {
-          }];
+              targets = ["192.168.1.125:9100"];
+            }
+          ];
         }
         {
           job_name = "nginx";
-          static_configs = [{
+          static_configs = [
-            targets = [ "${cfg.proxy_ip}:9002" ];
+            {
-          }];
+              targets = ["${cfg.proxy_ip}:9002"];
+            }
+          ];
         }
         {
           job_name = "redis";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.16:9002" ];
+            {
-          }];
+              targets = ["192.168.1.16:9002"];
+            }
+          ];
         }
         {
           job_name = "ingenuity";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.90:9100" ];
+            {
-          }];
+              targets = ["192.168.1.90:9100"];
+            }
+          ];
         }
         {
           job_name = "gitea";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.14:9100" ];
+            {
-          }];
+              targets = ["192.168.1.14:9100"];
+            }
+          ];
         }
         {
           job_name = "postgresql";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.13:9100" ];
+            {
-          }];
+              targets = ["192.168.1.13:9100"];
+            }
+          ];
         }
         {
           job_name = "nextcloud";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.44:9100" ];
+            {
-          }];
+              targets = ["192.168.1.44:9100"];
+            }
+          ];
         }
         {
           job_name = "deluge";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.18:9100" ];
+            {
-          }];
+              targets = ["192.168.1.18:9100"];
+            }
+          ];
         }
         {
           job_name = "netbox";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.45:9100" ];
+            {
-          }];
+              targets = ["192.168.1.45:9100"];
+            }
+          ];
         }
         {
           job_name = "jellyfin";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.42:9100" ];
+            {
-          }];
+              targets = ["192.168.1.42:9100"];
+            }
+          ];
         }
         {
           job_name = "authentik-ldap";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.41:9100" ];
+            {
-          }];
+              targets = ["192.168.1.41:9100"];
+            }
+          ];
         }
         {
           job_name = "authentik";
-          static_configs = [{
+          static_configs = [
-            targets = [ "192.168.1.25:9002" ];
+            {
-          }];
+              targets = ["192.168.1.25:9002"];
+            }
+          ];
         }
       ];
     };
@@ -202,7 +235,8 @@ in
           chunk_retain_period = "30s";
         };
         schema_config = {
-          configs = [{
+          configs = [
+            {
               from = "2022-06-06";
               store = "boltdb-shipper";
               object_store = "filesystem";
@@ -211,7 +245,8 @@ in
                 prefix = "index_";
                 period = "24h";
               };
-          }];
+            }
+          ];
         };
         storage_config = {
           boltdb_shipper = {
@@ -255,9 +290,11 @@ in
         positions = {
           filename = "/tmp/positions.yaml";
         };
-        clients = [{
+        clients = [
+          {
             url = "http://127.0.0.1:3100/loki/api/v1/push";
-        }];
+          }
+        ];
         scrape_configs = [
           {
             job_name = "syslog";
@@ -271,27 +308,27 @@ in
             };
             relabel_configs = [
               {
-                source_labels = [ "__syslog_message_hostname" ];
+                source_labels = ["__syslog_message_hostname"];
                 target_label = "host";
               }
               {
-                source_labels = [ "__syslog_message_hostname" ];
+                source_labels = ["__syslog_message_hostname"];
                 target_label = "hostname";
               }
               {
-                source_labels = [ "__syslog_message_severity" ];
+                source_labels = ["__syslog_message_severity"];
                 target_label = "level";
               }
               {
-                source_labels = [ "__syslog_message_app_name" ];
+                source_labels = ["__syslog_message_app_name"];
                 target_label = "application";
               }
               {
-                source_labels = [ "__syslog_message_facility" ];
+                source_labels = ["__syslog_message_facility"];
                 target_label = "facility";
               }
               {
-                source_labels = [ "__syslog_connection_hostname" ];
+                source_labels = ["__syslog_connection_hostname"];
                 target_label = "connection_hostname";
               }
             ];
@@ -301,7 +338,7 @@ in
     };
 
     # Open ports in the firewall.
-    networking.firewall.allowedTCPPorts = [ 3000 3100 3101 8086 9001 1514 514 ];
+    networking.firewall.allowedTCPPorts = [3000 3100 3101 8086 9001 1514 514];
-    networking.firewall.allowedUDPPorts = [ 514 ];
+    networking.firewall.allowedUDPPorts = [514];
   };
 }

services/jellyfin/default.nix

@@ -1,13 +1,16 @@
-{ lib, config, pkgs, ... }:
-let
-  cfg = config.services.vm_jellyfin;
-in
 {
+  lib,
+  config,
+  pkgs,
+  ...
+}: let
+  cfg = config.services.vm_jellyfin;
+in {
   options.services.vm_jellyfin = {
     enable = lib.mkEnableOption "Enable minimal config";
   };
   config = lib.mkIf cfg.enable {
-    environment.systemPackages = [ pkgs.cifs-utils ];
+    environment.systemPackages = [pkgs.cifs-utils];
     services.jellyfin = {
       enable = true;
       user = "tbarnouin";

services/minimalConfig/default.nix

@@ -1,20 +1,25 @@
-{ config, pkgs, lib, inputs, modulesPath, ... }:
 {
-
+  config,
+  pkgs,
+  lib,
+  inputs,
+  modulesPath,
+  ...
+}: {
   imports = [
     ./lxc.nix
     ./vm.nix
   ];
 
   nix = {
-    settings.experimental-features = [ "nix-command" "flakes" ];
+    settings.experimental-features = ["nix-command" "flakes"];
-    settings.trusted-users = [ "root" "@wheel" ];
+    settings.trusted-users = ["root" "@wheel"];
   };
 
   networking = {
     firewall = {
       enable = true;
-      allowedTCPPorts = [ 22 9002 ];
+      allowedTCPPorts = [22 9002];
     };
   };
 
@@ -35,7 +40,7 @@
   users = {
     users.tbarnouin = {
       isNormalUser = true;
-      extraGroups = [ "wheel" ];
+      extraGroups = ["wheel"];
       shell = pkgs.zsh;
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxccGxdfOFXeEClqz3ULl94ubzaJnk4pUus+ek18G0B tbarnouin@nixos"
@@ -58,7 +63,7 @@
       };
       ohMyZsh = {
         enable = true;
-        plugins = [ "git" ];
+        plugins = ["git"];
         theme = "bira";
       };
     };
@@ -110,7 +115,7 @@
       exporters = {
         node = {
           enable = true;
-          enabledCollectors = [ "systemd" ];
+          enabledCollectors = ["systemd"];
           port = 9002;
         };
       };

services/minimalConfig/lxc.nix

@@ -1,8 +1,11 @@
-{lib, config, modulesPath, ...}:
-let
-  cfg = config.services.lxc;
-in
 {
+  lib,
+  config,
+  modulesPath,
+  ...
+}: let
+  cfg = config.services.lxc;
+in {
   options.services.lxc = {
     enable = lib.mkEnableOption "Enable LXC container config";
   };

services/minimalConfig/vm.nix

@@ -1,8 +1,11 @@
-{lib, config, modulesPath, ...}:
-let
-  cfg = config.services.vm;
-in
 {
+  lib,
+  config,
+  modulesPath,
+  ...
+}: let
+  cfg = config.services.vm;
+in {
   options.services.vm = {
     enable = lib.mkEnableOption "Enable LXC container config";
   };

services/nextcloud/default.nix

@@ -1,8 +1,11 @@
-{ lib, config, pkgs, ... }:
-let
-  cfg = config.services.vm_nextcloud;
-in
 {
+  lib,
+  config,
+  pkgs,
+  ...
+}: let
+  cfg = config.services.vm_nextcloud;
+in {
   options.services.vm_nextcloud = {
     enable = lib.mkEnableOption "Enable minimal config";
     proxy_ip = lib.mkOption {
@@ -53,8 +56,8 @@ in
           "opcache.memory_consumption" = "512";
         };
         settings = {
-          trusted_proxies = [ "${cfg.proxy_ip}" ];
+          trusted_proxies = ["${cfg.proxy_ip}"];
-          trusted_domains = [ "${cfg.proxy_ip}" ];
+          trusted_domains = ["${cfg.proxy_ip}"];
           overwriteprotocol = "http";
           overwrite.cli.url = "http://${cfg.proxy_ip}/cloud/";
           "overwritehost" = "${cfg.proxy_ip}";
@@ -73,6 +76,6 @@ in
         };
       };
     };
-    networking.firewall.allowedTCPPorts = [ 80 ];
+    networking.firewall.allowedTCPPorts = [80];
   };
 }

services/nginx/default.nix

@@ -1,8 +1,11 @@
-{ config, pkgs, lib, ... }:
-let
-  cfg = config.services.vm_nginx;
-in
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  cfg = config.services.vm_nginx;
+in {
   options.services.vm_nginx = {
     enable = lib.mkEnableOption "Enable minimal config";
   };
@@ -158,6 +161,6 @@ in
         };
       };
     };
-    networking.firewall.allowedTCPPorts = [ 80 443 ];
+    networking.firewall.allowedTCPPorts = [80 443];
   };
 }

services/onlyoffice/default.nix

@@ -1,8 +1,11 @@
-{ config, pkgs, lib, ... }:
-let
-  cfg = config.services.vm_onlyoffice;
-in
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  cfg = config.services.vm_onlyoffice;
+in {
   options.services.vm_onlyoffice = {
     enable = lib.mkEnableOption "Enable OnlyOffice service";
     pgsql_ip = lib.mkOption {
@@ -33,6 +36,6 @@ in
         jwtSecretFile = config.age.secrets.office-jwtpass.path;
       };
     };
-    networking.firewall.allowedTCPPorts = [ 80 4369 5432 5672 6379 8000 8080 ];
+    networking.firewall.allowedTCPPorts = [80 4369 5432 5672 6379 8000 8080];
   };
 }

services/postgresql/default.nix

@@ -1,8 +1,11 @@
-{ lib, config, pkgs, ... }:
-let
-  cfg = config.services.vm_postgresql;
-in
 {
+  lib,
+  config,
+  pkgs,
+  ...
+}: let
+  cfg = config.services.vm_postgresql;
+in {
   options.services.vm_postgresql = {
     enable = lib.mkEnableOption "Enable minimal config";
   };
@@ -44,6 +47,6 @@ in
         alter user nextcloud with password 'password';
       '';
     };
-    networking.firewall.allowedTCPPorts = [ 5432 ];
+    networking.firewall.allowedTCPPorts = [5432];
   };
 }

services/redis/default.nix

@@ -1,8 +1,11 @@
-{ config, pkgs, lib, ... }:
-let
-  cfg = config.services.vm_redis;
-in
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  cfg = config.services.vm_redis;
+in {
   options.services.vm_redis = {
     enable = lib.mkEnableOption "Enable minimal config";
   };
@@ -18,6 +21,6 @@ in
         };
       };
     };
-    networking.firewall.allowedTCPPorts = [ 6379 ];
+    networking.firewall.allowedTCPPorts = [6379];
   };
 }

systems/minimalLXCConfig.nix

@@ -1,15 +1,20 @@
-{ config, pkgs, lib, inputs, modulesPath, ... }:
 {
-
+  config,
+  pkgs,
+  lib,
+  inputs,
+  modulesPath,
+  ...
+}: {
   nix = {
-    settings.experimental-features = [ "nix-command" "flakes" ];
+    settings.experimental-features = ["nix-command" "flakes"];
-    settings.trusted-users = [ "root" "@wheel" ];
+    settings.trusted-users = ["root" "@wheel"];
   };
 
   networking = {
     firewall = {
       enable = true;
-      allowedTCPPorts = [ 22 9002 ];
+      allowedTCPPorts = [22 9002];
     };
   };
 
@@ -43,7 +48,7 @@
   users = {
     users.tbarnouin = {
       isNormalUser = true;
-      extraGroups = [ "wheel" ];
+      extraGroups = ["wheel"];
       shell = pkgs.zsh;
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxccGxdfOFXeEClqz3ULl94ubzaJnk4pUus+ek18G0B tbarnouin@nixos"
@@ -66,7 +71,7 @@
       };
       ohMyZsh = {
         enable = true;
-        plugins = [ "git" ];
+        plugins = ["git"];
         theme = "bira";
       };
     };
@@ -118,7 +123,7 @@
       exporters = {
         node = {
           enable = true;
-          enabledCollectors = [ "systemd" ];
+          enabledCollectors = ["systemd"];
           port = 9002;
         };
       };

systems/minimalMicrovmConfig.nix

@@ -1,8 +1,14 @@
-{ config, pkgs, lib, inputs, modulesPath, microvm, ... }:
-let
-  cfg = config.services.micro_vm;
-in
 {
+  config,
+  pkgs,
+  lib,
+  inputs,
+  modulesPath,
+  microvm,
+  ...
+}: let
+  cfg = config.services.micro_vm;
+in {
   options.services.micro_vm = {
     enable = lib.mkEnableOption "Enable NixOS microvm config";
     hostname = lib.mkOption {
@@ -53,11 +59,13 @@ in
           mountPoint = "/run/secrets/${cfg.hostname}";
         }
       ];
-      interfaces = [ {
+      interfaces = [
+        {
           type = "tap";
           id = "vm-${cfg.hostname}";
           mac = "${cfg.macAddr}";
-      } ];
+        }
+      ];
 
       hypervisor = "qemu";
       socket = "control.socket";
@@ -76,14 +84,14 @@ in
     };
 
     nix = {
-      settings.experimental-features = [ "nix-command" "flakes" ];
+      settings.experimental-features = ["nix-command" "flakes"];
-      settings.trusted-users = [ "root" "@wheel" ];
+      settings.trusted-users = ["root" "@wheel"];
     };
 
     networking = {
       firewall = {
         enable = true;
-        allowedTCPPorts = [ 22 9002 ];
+        allowedTCPPorts = [22 9002];
       };
     };
 
@@ -104,7 +112,7 @@ in
     users = {
       users.tbarnouin = {
         isNormalUser = true;
-        extraGroups = [ "wheel" ];
+        extraGroups = ["wheel"];
         shell = pkgs.zsh;
         openssh.authorizedKeys.keys = [
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxccGxdfOFXeEClqz3ULl94ubzaJnk4pUus+ek18G0B tbarnouin@nixos"
@@ -127,7 +135,7 @@ in
         };
         ohMyZsh = {
           enable = true;
-          plugins = [ "git" ];
+          plugins = ["git"];
           theme = "bira";
         };
       };
@@ -179,7 +187,7 @@ in
         exporters = {
           node = {
             enable = true;
-            enabledCollectors = [ "systemd" ];
+            enabledCollectors = ["systemd"];
             port = 9002;
           };
         };
@@ -192,4 +200,3 @@ in
     };
   };
 }
-

systems/minimalVMConfig.nix

@@ -1,15 +1,20 @@
-{ config, pkgs, lib, inputs, modulesPath, ... }:
 {
-
+  config,
+  pkgs,
+  lib,
+  inputs,
+  modulesPath,
+  ...
+}: {
   nix = {
-    settings.experimental-features = [ "nix-command" "flakes" ];
+    settings.experimental-features = ["nix-command" "flakes"];
-    settings.trusted-users = [ "root" "@wheel" ];
+    settings.trusted-users = ["root" "@wheel"];
   };
 
   networking = {
     firewall = {
       enable = true;
-      allowedTCPPorts = [ 22 9002 ];
+      allowedTCPPorts = [22 9002];
     };
   };
 
@@ -30,7 +35,7 @@
   users = {
     users.tbarnouin = {
       isNormalUser = true;
-      extraGroups = [ "wheel" ];
+      extraGroups = ["wheel"];
       shell = pkgs.zsh;
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxccGxdfOFXeEClqz3ULl94ubzaJnk4pUus+ek18G0B tbarnouin@nixos"
@@ -53,7 +58,7 @@
       };
       ohMyZsh = {
         enable = true;
-        plugins = [ "git" ];
+        plugins = ["git"];
         theme = "bira";
       };
     };
@@ -106,7 +111,7 @@
       exporters = {
         node = {
           enable = true;
-          enabledCollectors = [ "systemd" ];
+          enabledCollectors = ["systemd"];
           port = 9002;
         };
       };