feat: infinitely expansible microvms

modules/config/default.nix

@@ -27,6 +27,18 @@ let
       }) (builtins.genList (i: i) numOptions)
     );
 
+  genOptionsSubmodule =
+    typeConfig: prefix:
+    builtins.listToAttrs (
+      map (i: {
+        name = "${prefix}${toString i}";
+        value = lib.mkOption {
+          type = typeConfig;
+          default = { };
+        };
+      }) (builtins.genList (i: i) numOptions)
+    );
+
   mkOptionsFromDir =
     path:
     builtins.listToAttrs (
@@ -54,32 +66,51 @@ let
     };
   };
 
-  interfaceConfig = {
+  interfaceConfig = lib.types.submodule {
+    options = {
       domain = stringType;
       email = stringType;
       ip = stringType;
       subdomain = stringType;
       wireguard = stringType;
-    microvm = {
+      microvm = lib.mkOption {
+        type = lib.types.submodule {
+          options = {
             gate = stringType;
             id = stringType;
             idUser = stringType;
             mac = stringType;
             macUser = stringType;
             num = intType;
+            ip = stringType; # Add this if it's missing
             ssh = intType;
+            port = intType;
           };
-    ssl = {
+        };
+        default = { };
+      };
+      ssl = lib.mkOption {
+        type = lib.types.submodule {
+          options = {
             cert = stringType;
             key = stringType;
             path = stringType;
           };
-    paths = {
+        };
+        default = { };
+      };
+      paths = lib.mkOption {
+        type = lib.types.submodule {
+          options = {
             mntPaths = genOptions stringType "path";
             secretPaths = genOptions stringType "path";
             varPaths = genOptions stringType "path";
           };
         };
+        default = { };
+      };
+    };
+  };
 
   instanceSubmodule = lib.types.submodule {
     options = {
@@ -90,7 +121,7 @@ let
       dns = genOptions stringType "provider";
       ports = genOptions intType "port";
       addresses = genOptions stringType "address";
-      interfaces = genOptions interfaceConfig "interface";
+      interfaces = genOptionsSubmodule interfaceConfig "interface";
     };
   };
 

modules/config/instances/config/forgejo.nix

@@ -33,7 +33,7 @@ in
         ssl = "${sslPath}/${domain}";
       in
       {
-        domains = domain;
+        domain = domain;
         subdomain = subdomain;
         email = "${emailNoReply}@${domain1}";
         microvm = {

modules/config/instances/config/mastodon.nix

@@ -23,7 +23,7 @@ in
   ports = {
     port0 = 80;
   };
-  interface = {
+  interfaces = {
     interface0 =
       let
         subdomain = "social";
@@ -32,7 +32,7 @@ in
         ssl = "${sslPath}/${domain}";
       in
       {
-        domains = domain;
+        domain = domain;
         subdomain = subdomain;
         email = "noreply@${domain1}";
         microvm = {

modules/config/instances/config/minecraft.nix

@@ -61,7 +61,7 @@ in
             path0 = "${varPath}/${name}";
           };
           mntPaths = {
-            path1 = "${mntPath}/${name}/${world}";
+            path0 = "${mntPath}/${name}/${world}";
           };
           secretPaths = {
             path0 = "${secretPath}/${name}";

modules/config/instances/config/ollama.nix

@@ -23,7 +23,7 @@ in
     port0 = 8088; # Open-WebUI (Ollama Front End)
     port1 = 11434; # Ollama API
   };
-  interface = {
+  interfaces = {
     interface0 =
       let
         domain = "${name}.${domain0}";

modules/config/instances/config/opencloud.nix

@@ -23,7 +23,7 @@ in
   ports = {
     port0 = 9200;
   };
-  interface = {
+  interfaces = {
     interface0 =
       let
         domain = "${short}.${domain0}";

modules/config/instances/config/photoprism.nix

@@ -23,7 +23,7 @@ in
   ports = {
     port0 = 3030;
   };
-  interface = {
+  interfaces = {
     interface0 =
       let
         domain = "${short}.${domain0}";

modules/config/instances/config/qbittorrent.nix

@@ -23,7 +23,7 @@ in
   ports = {
     port0 = 3030;
   };
-  interface = {
+  interfaces = {
     interface0 =
       let
         domain = "${short}.${domain0}";

modules/config/instances/config/vaultwarden.nix

@@ -24,7 +24,7 @@ in
   ports = {
     port0 = 8085;
   };
-  interface = {
+  interfaces = {
     interface0 =
       let
         domain = "${name}.${domain0}";

modules/config/instances/config/website.nix

@@ -16,7 +16,7 @@ in
     name
     "blog"
   ];
-  interface = {
+  interfaces = {
     interface0 =
       let
         ssl = "${sslPath}/${domain1}";

modules/config/instances/config/wireGuard.nix

@@ -9,8 +9,6 @@ in
 {
   label = label;
   name = name;
-  sops = {
-  };
   ports = {
     port0 = 53;
     port1 = 51821;

modules/config/instances/config/zookeeper.nix

@@ -11,7 +11,7 @@ in
 {
   label = label;
   name = name;
-  interface = {
+  interfaces = {
     interface0 = {
       microvm = {
         id = "vm-boonbot";

modules/nixos/default.nix

@@ -56,23 +56,19 @@ in
           acme
           caddy
           comfyui
-          firefly-iii
+          forgejoCeres
-          forgejo
           impermanence
-          jellyfin
+          jellyfinCeres
           lix
-          mastodon
+          mastodonCeres
           microvm
-          minecraft
+          minecraftCeres
-          ollama
+          opencloudCeres
-          opencloud1
+          websiteCeres
-          projectSite
+          qbittorrentCeres
-          qbittorrent
           restic
           sambaCeres
-          vaultwarden
+          zookeeperCeres
-          website
-          zookeeper
           ;
       };
     };
@@ -83,14 +79,13 @@ in
           impermanence
           lix
           microvm
-          nas
           sambaEris
+          fireflyEris
+          opencloudEris
+          vaultwardenEris
+          syncthingEris
+          photoprismEris
           ;
-        inherit (modules.guests.firefly-iii) fireflyNick;
-        inherit (modules.guests.opencloud) opencloudNick;
-        inherit (modules.guests.photoprism) photoprismNick;
-        inherit (modules.guests.vaultwarden) vaultwardenNick;
-        inherit (modules.guests.syncthing) syncthingNick;
       };
     };
 

modules/nixos/homelab/acme/default.nix

@@ -7,6 +7,7 @@ let
   inherit (flake.config.people.users.${user0}) email;
   inherit (flake.config.services) instances;
   serviceCfg = instances.acme;
+  interfaceCfg = serviceCfg.interfaces.interface0;
   dns0 = instances.web.dns.provider0;
   dns1 = instances.web.dns.provider1;
 in
@@ -50,7 +51,7 @@ in
 
   systemd = {
     tmpfiles.rules = [
-      "Z ${serviceCfg.secretPaths.path0} 755 ${serviceCfg.name} ${serviceCfg.name} -"
+      "Z ${interfaceCfg.paths.secretPaths.path0} 755 ${serviceCfg.name} ${serviceCfg.name} -"
     ];
   };
 }

modules/nixos/homelab/caddy/config/default.nix

@@ -0,0 +1,11 @@
+let
+  importList =
+    let
+      content = builtins.readDir ./.;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
+    in
+    map (name: ./. + "/${name}") dirContent;
+in
+{
+  imports = importList;
+}

modules/nixos/homelab/caddy/config/firefly-iii/default.nix

@@ -7,7 +7,7 @@ let
 
   inherit (flake.config.services) instances;
   serviceCfg = instances.firefly-iii;
-  interfaceCfg = serviceCfg.intefaces.interface0;
+  interfaceCfg = serviceCfg.interfaces.interface0;
   host = interfaceCfg.domain;
   dns0 = instances.web.dns.provider0;
   dns0Path = "dns/${dns0}";

modules/nixos/homelab/caddy/config/jellyfin/default.nix

@@ -24,7 +24,7 @@ in
       virtualHosts = {
         "${host0}" = {
           extraConfig = ''
-            reverse_proxy ${interface0Cfg.interface.ip}:${toString serviceCfg.ports.port0} {
+            reverse_proxy ${interface0Cfg.microvm.ip}:${toString serviceCfg.ports.port0} {
               header_up X-Real-IP {remote_host}
             }
             tls ${interface0Cfg.ssl.cert} ${interface0Cfg.ssl.key}

modules/nixos/homelab/caddy/config/syncthing/default.nix

@@ -22,7 +22,7 @@ in
       virtualHosts = {
         "${host0}" = {
           extraConfig = ''
-            reverse_proxy ${interface0Cfg.interface.ip}:${toString serviceCfg.ports.port0} {
+            reverse_proxy ${interface0Cfg.microvm.ip}:${toString serviceCfg.ports.port0} {
               header_up X-Real-IP {remote_host}
             }
             tls ${interface0Cfg.ssl.cert} ${interface0Cfg.ssl.key}

modules/nixos/homelab/caddy/default.nix

@@ -18,7 +18,7 @@ in
     enable = true;
   };
 
-  tmpfiles.rules = [
+  systemd.tmpfiles.rules = [
     "d /run/secrets/caddy 755 caddy caddy -"
     "d /var/log/caddy 755 caddy caddy -"
   ];

modules/nixos/homelab/guests/default.nix

@@ -1,11 +1,10 @@
 let
-  inherit (import ./helpers.nix) labHelpers;
   importList =
     let
       content = builtins.readDir ./.;
       dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
     in
-    map (name: ./. + "/${name}" { inherit labHelpers; }) dirContent;
+    map (name: ./. + "/${name}") dirContent;
 in
 {
   imports = importList;

modules/nixos/homelab/guests/firefly-iii/default.nix

@@ -1,50 +1,11 @@
-{
-  config,
-  flake,
-  pkgs,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers) guestPath;
+  importList =
-  inherit (import ./config { inherit config flake pkgs; }) fireflyVM;
+    let
-  inherit (flake.config.people) user0;
+      content = builtins.readDir ./.;
-  inherit (flake.config.people.users.${user0}) email;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-  inherit (flake.config.services.instances) firefly-iii;
+    in
-  interface0Cfg = firefly-iii.interfaces.interface0;
+    map (name: ./. + "/${name}") dirContent;
-
 in
 {
-  fireflyNick = fireflyVM {
+  imports = importList;
-    user = user0;
-    ip = interface0Cfg.microvm.ip;
-    mac = interface0Cfg.microvm.mac;
-    userMac = interface0Cfg.microvm.macUser;
-    ssh = interface0Cfg.microvm.ssh0;
-    host = interface0Cfg.domain;
-    mnt = guestPath user0;
-    owner = email.address2;
-  };
-
-  # fireflyStacie = fireflyVM {
-  #   user = "stacie";
-  #   ip = ipAddress (id1);
-  #   mac = "02:00:00:00:${id1}:${id1}";
-  #   userMac = "02:00:00:00:00:${id1}";
-  #   ssh = fireflyEris.ssh1;
-  #   host = "";
-  #   mnt = guestPath "stacie";
-  #   owner = "";
-  # };
-
-  # fireflyGarnet = fireflyVM {
-  #   user = "garnet";
-  #   ip = ipAddress (id2);
-  #   mac = "02:00:00:00:${id2}:${id2}";
-  #   userMac = "02:00:00:00:00:${id2}";
-  #   ssh = fireflyEris.ssh2;
-  #   mnt = guestPath "garnet";
-  #   host = "";
-  #   owner = "";
-  # };
 }

modules/nixos/homelab/guests/firefly-iii/fireflyEris/default.nix

@@ -0,0 +1,27 @@
+{
+  config,
+  flake,
+  pkgs,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) guestPath;
+  inherit (import ../config { inherit config flake pkgs; }) fireflyVM;
+  inherit (flake.config.people) user0;
+  inherit (flake.config.people.users.${user0}) email;
+  inherit (flake.config.services.instances) firefly-iii;
+  interface0Cfg = firefly-iii.interfaces.interface0;
+
+  fireflyNick = fireflyVM {
+    user = user0;
+    ip = interface0Cfg.microvm.ip;
+    mac = interface0Cfg.microvm.mac;
+    userMac = interface0Cfg.microvm.macUser;
+    ssh = interface0Cfg.microvm.ssh;
+    host = interface0Cfg.domain;
+    owner = email.address2;
+    mnt = guestPath user0;
+  };
+in
+fireflyNick

modules/nixos/homelab/guests/forgejo/config/default.nix

@@ -52,7 +52,7 @@ in
                   };
                   mailer = {
                     ENABLED = true;
-                    SMTP_ADDR = smtpCfg.interface.interface1.domain;
+                    SMTP_ADDR = smtpCfg.interfaces.interface1.domain;
                     FROM = smtpCfg.interfaces.interface1.email;
                     USER = smtpCfg.interfaces.interface1.email;
                     PROTOCOL = "smtp+starttls";

modules/nixos/homelab/guests/forgejo/default.nix

@@ -1,25 +1,11 @@
-{
-  flake,
-  pkgs,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers) mntPath;
+  importList =
-  inherit (import ./config { inherit flake pkgs; }) forgejoVM;
+    let
-  inherit (flake.config.people) user0;
+      content = builtins.readDir ./.;
-  inherit (flake.config.services) instances;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-
+    in
-  interface0Cfg = instances.forgejo.interfaces.interface0;
+    map (name: ./. + "/${name}") dirContent;
 in
 {
-  forgejoNick = forgejoVM {
+  imports = importList;
-    user = user0;
-    ip = interface0Cfg.microvm.ip;
-    mac = interface0Cfg.microvm.mac;
-    userMac = interface0Cfg.microvm.macUser;
-    ssh = interface0Cfg.microvm.ssh;
-    mnt = mntPath;
-    host = interface0Cfg.domain;
-  };
 }

modules/nixos/homelab/guests/forgejo/forgejoCeres/default.nix

@@ -0,0 +1,25 @@
+{
+  flake,
+  pkgs,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) mntPath;
+  inherit (import ../config { inherit flake pkgs; }) forgejoVM;
+  inherit (flake.config.people) user0;
+  inherit (flake.config.services) instances;
+
+  interface0Cfg = instances.forgejo.interfaces.interface0;
+
+  forgejoNick = forgejoVM {
+    user = user0;
+    ip = interface0Cfg.microvm.ip;
+    mac = interface0Cfg.microvm.mac;
+    userMac = interface0Cfg.microvm.macUser;
+    ssh = interface0Cfg.microvm.ssh;
+    mnt = mntPath;
+    host = interface0Cfg.domain;
+  };
+in
+forgejoNick

modules/nixos/homelab/guests/jellyfin/config/default.nix

@@ -10,7 +10,7 @@ let
   id = 993;
 in
 {
-  forgejoVM =
+  jellyfinVM =
     {
       user,
       ip,

modules/nixos/homelab/guests/jellyfin/default.nix

@@ -1,26 +1,11 @@
-{
-  flake,
-  pkgs,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers) mntPath;
+  importList =
-  inherit (import ./config { inherit flake pkgs; }) jellyfinVM;
+    let
-  inherit (flake.config.people) user0;
+      content = builtins.readDir ./.;
-  inherit (flake.config.services) instances;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-
+    in
-  interface0Cfg = instances.jellyfin.interfaces.interface0;
+    map (name: ./. + "/${name}") dirContent;
-
 in
 {
-  jellyfinNick = jellyfinVM {
+  imports = importList;
-    user = user0;
-    ip = interface0Cfg.microvm.ip;
-    mac = interface0Cfg.microvm.mac;
-    userMac = interface0Cfg.microvm.macUser;
-    ssh = interface0Cfg.microvm.ssh;
-    mnt = mntPath;
-    host = interface0Cfg.domain;
-  };
 }

modules/nixos/homelab/guests/jellyfin/jellyfinCeres/default.nix

@@ -0,0 +1,26 @@
+{
+  flake,
+  config,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) mntPath;
+  inherit (import ../config { inherit flake config; }) jellyfinVM;
+  inherit (flake.config.people) user0;
+  inherit (flake.config.services) instances;
+
+  interface0Cfg = instances.jellyfin.interfaces.interface0;
+
+  jellyfinCeres = jellyfinVM {
+    user = user0;
+    ip = interface0Cfg.microvm.ip;
+    mac = interface0Cfg.microvm.mac;
+    userMac = interface0Cfg.microvm.macUser;
+    ssh = interface0Cfg.microvm.ssh;
+    mnt = mntPath;
+    host = interface0Cfg.domain;
+  };
+
+in
+jellyfinCeres

modules/nixos/homelab/guests/mastodon/default.nix

@@ -1,26 +1,11 @@
-{
-  flake,
-  pkgs,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers) mntPath;
+  importList =
-  inherit (import ./config { inherit flake pkgs; }) mastodonVM;
+    let
-  inherit (flake.config.people) user0;
+      content = builtins.readDir ./.;
-  inherit (flake.config.services) instances;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-
+    in
-  interface0Cfg = instances.mastodon.interfaces.interface0;
+    map (name: ./. + "/${name}") dirContent;
-
 in
 {
-  mastodonNick = mastodonVM {
+  imports = importList;
-    user = user0;
-    ip = interface0Cfg.microvm.ip;
-    mac = interface0Cfg.microvm.mac;
-    userMac = interface0Cfg.microvm.macUser;
-    ssh = interface0Cfg.microvm.ssh;
-    mnt = mntPath;
-    host = interface0Cfg.domain;
-  };
 }

modules/nixos/homelab/guests/mastodon/mastodonCeres/default.nix

@@ -0,0 +1,37 @@
+{
+  flake,
+  pkgs,
+  config,
+  lib,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) mntPath;
+  inherit
+    (import ../config {
+      inherit
+        flake
+        config
+        pkgs
+        lib
+        ;
+    })
+    mastodonVM
+    ;
+  inherit (flake.config.people) user0;
+  inherit (flake.config.services) instances;
+
+  interface0Cfg = instances.mastodon.interfaces.interface0;
+
+  mastodonNick = mastodonVM {
+    user = user0;
+    ip = interface0Cfg.microvm.ip;
+    mac = interface0Cfg.microvm.mac;
+    userMac = interface0Cfg.microvm.macUser;
+    ssh = interface0Cfg.microvm.ssh;
+    mnt = mntPath;
+    host = interface0Cfg.domain;
+  };
+in
+mastodonNick

modules/nixos/homelab/guests/minecraft/default.nix

@@ -1,107 +1,11 @@
-{
-  flake,
-  pkgs,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers) mntPath;
+  importList =
-  inherit (import ./config { inherit flake pkgs; }) minecraftVM;
+    let
-  inherit (flake.config.services) instances;
+      content = builtins.readDir ./.;
-  inherit (flake.config.people) user0;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-
+    in
+    map (name: ./. + "/${name}") dirContent;
 in
 {
-  minecraftNick01 =
+  imports = importList;
-    let
-      interfaceCfg = instances.minecraft.interfaces.interface0;
-    in
-    minecraftVM {
-      user = user0;
-      ip = interfaceCfg.microvm.ip;
-      mac = interfaceCfg.microvm.mac;
-      userMac = interfaceCfg.microvm.macUser;
-      ssh = interfaceCfg.microvm.ssh;
-      port = interfaceCfg.microvm.port;
-      mnt = mntPath;
-      worldNumber = "01";
-      config = {
-        allow-flight = false;
-        allow-nether = true;
-        difficulty = 2;
-        enable-command-block = false;
-        enable-rcon = true;
-        enable-status = true;
-        force-gamemode = true;
-        gamemode = 0;
-        generate-structures = true;
-        hardcore = false;
-        hide-online-players = false;
-        level-name = "Brix on Nix";
-        level-seed = "9064150133272194";
-        max-players = 10;
-        max-world-size = 64000000;
-        motd = "A cool Minecraft server powered by NixOS";
-        online-mode = true;
-        pvp = true;
-        spawn-animals = true;
-        spawn-monsters = true;
-        spawn-npcs = true;
-        spawn-protection = 16;
-        view-distance = 32;
-        white-list = true;
-      };
-      whitelist = {
-        Hefty_Chungus = "b75a9816-d408-4c54-b226-385b59ea1cb3";
-        Hefty_Chungus_Jr = "c3bf8cac-e953-4ea4-ae5f-7acb92a51a85";
-        EclipseMoon01 = "adef4af7-d8c6-4627-b492-e990ea1bb993";
-        Fallaryn = "d8baa117-ab58-4b07-92a5-48fb1978eb49";
-      };
-    };
-
-  minecraftNick02 =
-    let
-      interfaceCfg = instances.minecraft.interfaces.interface1;
-    in
-    minecraftVM {
-      user = user0;
-      ip = interfaceCfg.microvm.ip;
-      mac = interfaceCfg.microvm.mac;
-      userMac = interfaceCfg.microvm.macUser;
-      ssh = interfaceCfg.microvm.ssh;
-      port = interfaceCfg.microvm.port;
-      mnt = mntPath;
-      worldNumber = "02";
-      config = {
-        allow-flight = false;
-        allow-nether = true;
-        difficulty = 2;
-        enable-command-block = false;
-        enable-rcon = true;
-        enable-status = true;
-        force-gamemode = true;
-        gamemode = 0;
-        generate-structures = true;
-        hardcore = false;
-        hide-online-players = false;
-        level-name = "Cuddle Cubes";
-        level-seed = "-2332803749585407299";
-        max-players = 10;
-        max-world-size = 64000000;
-        motd = "A cool Minecraft server powered by NixOS";
-        online-mode = true;
-        pvp = true;
-        spawn-animals = true;
-        spawn-monsters = true;
-        spawn-npcs = true;
-        spawn-protection = 16;
-        view-distance = 32;
-        white-list = true;
-      };
-      whitelist = {
-        Hefty_Chungus = "b75a9816-d408-4c54-b226-385b59ea1cb3";
-        Fallaryn = "d8baa117-ab58-4b07-92a5-48fb1978eb49";
-      };
-    };
-
 }

modules/nixos/homelab/guests/minecraft/minecraftCeres/default.nix

@@ -0,0 +1,105 @@
+{
+  flake,
+  pkgs,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) mntPath;
+  inherit (import ../config { inherit flake pkgs; }) minecraftVM;
+  inherit (flake.config.services) instances;
+  inherit (flake.config.people) user0;
+
+  minecraftNick01 =
+    let
+      interfaceCfg = instances.minecraft.interfaces.interface0;
+    in
+    minecraftVM {
+      user = user0;
+      ip = interfaceCfg.microvm.ip;
+      mac = interfaceCfg.microvm.mac;
+      userMac = interfaceCfg.microvm.macUser;
+      ssh = interfaceCfg.microvm.ssh;
+      port = interfaceCfg.microvm.port;
+      mnt = mntPath;
+      worldNumber = "01";
+      config = {
+        allow-flight = false;
+        allow-nether = true;
+        difficulty = 2;
+        enable-command-block = false;
+        enable-rcon = true;
+        enable-status = true;
+        force-gamemode = true;
+        gamemode = 0;
+        generate-structures = true;
+        hardcore = false;
+        hide-online-players = false;
+        level-name = "Brix on Nix";
+        level-seed = "9064150133272194";
+        max-players = 10;
+        max-world-size = 64000000;
+        motd = "A cool Minecraft server powered by NixOS";
+        online-mode = true;
+        pvp = true;
+        spawn-animals = true;
+        spawn-monsters = true;
+        spawn-npcs = true;
+        spawn-protection = 16;
+        view-distance = 32;
+        white-list = true;
+      };
+      whitelist = {
+        Hefty_Chungus = "b75a9816-d408-4c54-b226-385b59ea1cb3";
+        Hefty_Chungus_Jr = "c3bf8cac-e953-4ea4-ae5f-7acb92a51a85";
+        EclipseMoon01 = "adef4af7-d8c6-4627-b492-e990ea1bb993";
+        Fallaryn = "d8baa117-ab58-4b07-92a5-48fb1978eb49";
+      };
+    };
+
+  minecraftNick02 =
+    let
+      interfaceCfg = instances.minecraft.interfaces.interface1;
+    in
+    minecraftVM {
+      user = user0;
+      ip = interfaceCfg.microvm.ip;
+      mac = interfaceCfg.microvm.mac;
+      userMac = interfaceCfg.microvm.macUser;
+      ssh = interfaceCfg.microvm.ssh;
+      port = interfaceCfg.microvm.port;
+      mnt = mntPath;
+      worldNumber = "02";
+      config = {
+        allow-flight = false;
+        allow-nether = true;
+        difficulty = 2;
+        enable-command-block = false;
+        enable-rcon = true;
+        enable-status = true;
+        force-gamemode = true;
+        gamemode = 0;
+        generate-structures = true;
+        hardcore = false;
+        hide-online-players = false;
+        level-name = "Cuddle Cubes";
+        level-seed = "-2332803749585407299";
+        max-players = 10;
+        max-world-size = 64000000;
+        motd = "A cool Minecraft server powered by NixOS";
+        online-mode = true;
+        pvp = true;
+        spawn-animals = true;
+        spawn-monsters = true;
+        spawn-npcs = true;
+        spawn-protection = 16;
+        view-distance = 32;
+        white-list = true;
+      };
+      whitelist = {
+        Hefty_Chungus = "b75a9816-d408-4c54-b226-385b59ea1cb3";
+        Fallaryn = "d8baa117-ab58-4b07-92a5-48fb1978eb49";
+      };
+    };
+in
+minecraftNick01 // minecraftNick02

modules/nixos/homelab/guests/opencloud/default.nix

@@ -1,57 +1,11 @@
-{
-  flake,
-  pkgs,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers) mntPath guestPath;
+  importList =
-  inherit (import ./config { inherit flake pkgs; }) opencloudVM;
+    let
-  inherit (flake.config.people) user0;
+      content = builtins.readDir ./.;
-  inherit (flake.config.services.instances) opencloud;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-
+    in
-  interface0Cfg = opencloud.interfaces.interface0;
+    map (name: ./. + "/${name}") dirContent;
-  interface1Cfg = opencloud.interfaces.interface1;
-
 in
 {
-  opencloudNick = opencloudVM {
+  imports = importList;
-    user = user0;
-    ip = interface0Cfg.microvm.ip;
-    mac = interface0Cfg.microvm.mac;
-    userMac = interface0Cfg.microvm.macUser;
-    ssh = interface0Cfg.microvm.ssh;
-    mnt = guestPath user0;
-    host = interface0Cfg.domain;
-  };
-
-  opencloudProject = opencloudVM {
-    user = user0;
-    ip = interface1Cfg.microvm.ip;
-    mac = interface1Cfg.microvm.mac;
-    userMac = interface1Cfg.microvm.macUser;
-    ssh = interface1Cfg.microvm.ssh;
-    mnt = mntPath;
-    host = "${interface0Cfg.subdomain}.${flake.inputs.linkpage.secrets.domains.projectsite}";
-  };
-
-  # opencloudStacie = opencloudVM {
-  #   user = "stacie";
-  #   ip = ipAddress id1;
-  #   mac = "02:00:00:00:${id1}:${id1}";
-  #   userMac = "02:00:00:00:00:${id1}";
-  #   ssh = opencloud.ssh1;
-  #   mnt = guestPath "stacie";
-  #   host = "";
-  # };
-
-  # opencloudGarnet = opencloudVM {
-  #   user = "garnet";
-  #   ip = ipAddress id2;
-  #   mac = "02:00:00:00:${id2}:${id2}";
-  #   userMac = "02:00:00:00:00:${id2}";
-  #   ssh = opencloud.ssh2;
-  #   mnt = guestPath "garnet";
-  #   host = "";
-  # };
 }

modules/nixos/homelab/guests/opencloud/opencloudCeres/default.nix

@@ -0,0 +1,25 @@
+{
+  flake,
+  pkgs,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) mntPath;
+  inherit (import ../config { inherit flake pkgs; }) opencloudVM;
+  inherit (flake.config.people) user0;
+  inherit (flake.config.services.instances) opencloud;
+
+  interface0Cfg = opencloud.interfaces.interface0;
+
+  opencloudProject = opencloudVM {
+    user = user0;
+    ip = interface0Cfg.microvm.ip;
+    mac = interface0Cfg.microvm.mac;
+    userMac = interface0Cfg.microvm.macUser;
+    ssh = interface0Cfg.microvm.ssh;
+    mnt = mntPath;
+    host = "${interface0Cfg.subdomain}.${flake.inputs.linkpage.secrets.domains.projectsite}";
+  };
+in
+opencloudProject

modules/nixos/homelab/guests/opencloud/opencloudEris/default.nix

@@ -0,0 +1,25 @@
+{
+  flake,
+  pkgs,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) guestPath;
+  inherit (import ../config { inherit flake pkgs; }) opencloudVM;
+  inherit (flake.config.people) user0;
+  inherit (flake.config.services.instances) opencloud;
+
+  interface0Cfg = opencloud.interfaces.interface0;
+
+  opencloudNick = opencloudVM {
+    user = user0;
+    ip = interface0Cfg.microvm.ip;
+    mac = interface0Cfg.microvm.mac;
+    userMac = interface0Cfg.microvm.macUser;
+    ssh = interface0Cfg.microvm.ssh;
+    mnt = guestPath user0;
+    host = interface0Cfg.domain;
+  };
+in
+opencloudNick

modules/nixos/homelab/guests/photoprism/config/default.nix

@@ -15,6 +15,7 @@ in
       ip,
       mac,
       userMac,
+      host,
       ssh,
       mnt,
       data,
@@ -32,6 +33,8 @@ in
               ${serviceCfg.name} = {
                 enable = true;
                 settings = {
+                  PHOTOPRISM_SITE_URL = "https://${host}";
+                  PHOTOPRISM_DISABLE_TLS = "true";
                   PHOTOPRISM_ADMIN_USER = user;
                   PHOTOPRISM_DEFAULT_LOCAL = "en";
                 };

modules/nixos/homelab/guests/photoprism/default.nix

@@ -1,47 +1,11 @@
-{
-  flake,
-  lib,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers) guestPath mediaPath;
+  importList =
-  inherit (import ./config { inherit flake lib; }) photoprismVM;
+    let
-  inherit (flake.config.services.instances) photoprism;
+      content = builtins.readDir ./.;
-  inherit (flake.config.people) user0;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-  interface0Cfg = photoprism.interfaces.interface0;
+    in
-
+    map (name: ./. + "/${name}") dirContent;
 in
 {
-  photoprismNick = photoprismVM {
+  imports = importList;
-    user = user0;
-    ip = interface0Cfg.microvm.ip;
-    mac = interface0Cfg.microvm.mac;
-    userMac = interface0Cfg.microvm.macUser;
-    ssh = interface0Cfg.microvm.ssh;
-    mnt = guestPath user0;
-    data = mediaPath user0;
-    host = interface0Cfg.domain;
-  };
-
-  # photoprismStacie = photoprismVM {
-  #   user = "stacie";
-  #   ip = ipAddress id1;
-  #   mac = "02:00:00:00:${id1}:${id1}";
-  #   userMac = "02:00:00:00:00:${id1}";
-  #   ssh = photoprism.ssh1;
-  #   mnt = guestPath "stacie";
-  #   data = mediaPath "stacie";
-  # };
-
-  # photoprismGarnet = photoprismVM {
-  #   user = "garnet";
-  #   ip = ipAddress id2;
-  #   mac = "02:00:00:00:${id2}:${id2}";
-  #   userMac = "02:00:00:00:00:${id2}";
-  #   ssh = photoprism.ssh2;
-  #   mnt = guestPath "garnet";
-  #   data = mediaPath "stacie";
-  # };
-
 }

modules/nixos/homelab/guests/photoprism/photoprismEris/default.nix

@@ -0,0 +1,26 @@
+{
+  flake,
+  lib,
+  labHelpers,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) guestPath mediaPath;
+  inherit (import ../config { inherit flake lib; }) photoprismVM;
+  inherit (flake.config.services.instances) photoprism;
+  inherit (flake.config.people) user0;
+  interface0Cfg = photoprism.interfaces.interface0;
+
+  photoprismNick = photoprismVM {
+    user = user0;
+    ip = interface0Cfg.microvm.ip;
+    mac = interface0Cfg.microvm.mac;
+    userMac = interface0Cfg.microvm.macUser;
+    ssh = interface0Cfg.microvm.ssh;
+    mnt = guestPath user0;
+    data = mediaPath user0;
+    host = interface0Cfg.domain;
+  };
+in
+photoprismNick

modules/nixos/homelab/guests/qbittorrent/config/default.nix

@@ -8,8 +8,6 @@ let
   inherit (flake.config.people) user0;
   inherit (flake.config.services) instances;
   serviceCfg = instances.qbittorrent;
-  dns0 = instances.web.dns.provider0;
-  dns0Path = "dns/${dns0}";
 in
 {
   qbittorrentVM =
@@ -27,14 +25,13 @@ in
       dns,
       key,
     }:
-    {
-      microvm.vms =
     let
       torrentPort = port;
       vpnEndpoint = endpoint;
       localNet = "192.168.50.0/24";
     in
     {
+      microvm.vms = {
         "${serviceCfg.name}-${user}" = {
           autostart = true;
           config = {
@@ -392,6 +389,7 @@ in
           };
         };
 
+      };
       sops.secrets = {
         "torrent/${user}-wireguard-pass" = {
           owner = "root";
@@ -426,5 +424,4 @@ in
         ];
       };
     };
-    };
 }

modules/nixos/homelab/guests/qbittorrent/default.nix

@@ -1,31 +1,11 @@
-{
-  flake,
-  pkgs,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers) mntPath;
+  importList =
-  inherit (import ./config { inherit flake pkgs; }) qbittorrentVM;
+    let
-  inherit (flake.config.people) user0;
+      content = builtins.readDir ./.;
-  inherit (flake.config.services) instances;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-
+    in
-  interface0Cfg = instances.qbittorrent.interfaces.interface0;
+    map (name: ./. + "/${name}") dirContent;
-
 in
 {
-  qbittorrentCeres = qbittorrentVM {
+  imports = importList;
-    user = user0;
-    ip = interface0Cfg.microvm.ip;
-    mac = interface0Cfg.microvm.mac;
-    userMac = interface0Cfg.microvm.macUser;
-    ssh = interface0Cfg.microvm.ssh;
-    mnt = mntPath;
-    host = interface0Cfg.domain;
-    port = 51820;
-    endpoint = "185.111.110.1";
-    address = [ "10.2.0.2/32" ];
-    dns = [ "10.2.0.1" ];
-    key = "QPfiwJQmt5VLEOh1ufLbi1lj6LUnwQY0tgDSh3pWx1k=";
-  };
 }

modules/nixos/homelab/guests/qbittorrent/qbittorrentCeres/default.nix

@@ -0,0 +1,31 @@
+{
+  flake,
+  config,
+  pkgs,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) mntPath;
+  inherit (import ../config { inherit config flake pkgs; }) qbittorrentVM;
+  inherit (flake.config.people) user0;
+  inherit (flake.config.services) instances;
+
+  interface0Cfg = instances.qbittorrent.interfaces.interface0;
+
+  qbittorrentCeres = qbittorrentVM {
+    user = user0;
+    ip = interface0Cfg.microvm.ip;
+    mac = interface0Cfg.microvm.mac;
+    userMac = interface0Cfg.microvm.macUser;
+    ssh = interface0Cfg.microvm.ssh;
+    mnt = mntPath;
+    host = interface0Cfg.domain;
+    port = 51820;
+    endpoint = "185.111.110.1";
+    address = [ "10.2.0.2/32" ];
+    dns = [ "10.2.0.1" ];
+    key = "QPfiwJQmt5VLEOh1ufLbi1lj6LUnwQY0tgDSh3pWx1k=";
+  };
+in
+qbittorrentCeres

modules/nixos/homelab/guests/syncthing/default.nix

@@ -1,123 +1,11 @@
-{
-  flake,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers)
+  importList =
-    docsPath
+    let
-    guestPath
+      content = builtins.readDir ./.;
-    mediaPath
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-    miscPath
+    in
-    ;
+    map (name: ./. + "/${name}") dirContent;
-  inherit (import ./config { inherit flake; }) syncthingVM;
-  inherit (flake.config.services) instances;
-  inherit (flake.config.people) user0;
-  serviceCfg = instances.syncthing;
-  interface0Cfg = serviceCfg.interfaces.interface0;
-
-  foldersHelper = user: {
-    docs = {
-      enable = true;
-      id = "docs";
-      path = "/var/lib/${serviceCfg.name}/docs";
-      devices = [
-        "${user}Phone"
-      ];
-    };
-    media = {
-      enable = true;
-      id = "media";
-      path = "/var/lib/${serviceCfg.name}/media";
-      devices = [
-        "${user}Phone"
-      ];
-    };
-    misc = {
-      enable = true;
-      id = "misc";
-      path = "/var/lib/${serviceCfg.name}/misc";
-      devices = [
-        "${user}Phone"
-      ];
-    };
-  };
-
-  devicesHelper = user: syncID: device: deviceIP: {
-    "${user}${device}" = {
-      autoAcceptFolders = true;
-      name = "${user}${device}";
-      addresses = [
-        "tcp://${deviceIP}:${toString serviceCfg.ports.port2}"
-      ];
-      id = syncID;
-    };
-  };
-
-  mountsHelper = user: [
-    {
-      mountPoint = "/var/lib/${serviceCfg.name}/docs";
-      proto = "virtiofs";
-      source = docsPath user;
-      tag = "${serviceCfg.name}_${user}_docs";
-    }
-    {
-      mountPoint = "/var/lib/${serviceCfg.name}/media";
-      proto = "virtiofs";
-      source = mediaPath user;
-      tag = "${serviceCfg.name}_${user}_media";
-    }
-    {
-      mountPoint = "/var/lib/${serviceCfg.name}/misc";
-      proto = "virtiofs";
-      source = miscPath user;
-      tag = "${serviceCfg.name}_${user}_misc";
-    }
-  ];
-
-  tmpRules = [
-    "d /var/lib/${serviceCfg.name}/docs 0755 ${serviceCfg.name} ${serviceCfg.name} -"
-    "d /var/lib/${serviceCfg.name}/media 0755 ${serviceCfg.name} ${serviceCfg.name} -"
-    "d /var/lib/${serviceCfg.name}/misc 0755 ${serviceCfg.name} ${serviceCfg.name} -"
-  ];
-
 in
 {
-  syncthingNick =
+  imports = importList;
-    let
-      phoneID = "OALKHLZ-OODUWVX-PAC2LI7-UMZMSZO-FELLRCD-RS4DHJS-PVA5YQK-WTFXXQI";
-    in
-    syncthingVM {
-      user = user0;
-      ip = interface0Cfg.microvm.ip;
-      mac = interface0Cfg.microvm.mac;
-      userMac = interface0Cfg.microvm.macUser;
-      ssh = interface0Cfg.microvm.ssh;
-      mnt = guestPath user0;
-      host = interface0Cfg.domain;
-      folders = foldersHelper user0;
-      devices = devicesHelper user0 phoneID "Phone" "192.168.50.8";
-      tmp = tmpRules;
-      mounts = mountsHelper user0;
-    };
-
-  # syncthingStacie = syncthingVM {
-  #   user = "stacie";
-  #   ip = ipAddress id0;
-  #   mac = "02:00:00:00:${id0}:${id0}";
-  #   userMac = "02:00:00:00:00:${id0}";
-  #   ssh = syncthing.ssh0;
-  #   syncID = "";
-  #   deviceIP = "";
-  # };
-
-  # syncthingGarnet = syncthingVM {
-  #   user = "garnet";
-  #   ip = ipAddress id0;
-  #   mac = "02:00:00:00:${id0}:${id0}";
-  #   userMac = "02:00:00:00:00:${id0}";
-  #   ssh = syncthing.ssh0;
-  #   syncID = "";
-  #   deviceIP = "";
-  # };
 }

modules/nixos/homelab/guests/syncthing/syncthingEris/default.nix

@@ -0,0 +1,101 @@
+{
+  flake,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers)
+    guestPath
+    mediaPath
+    docsPath
+    miscPath
+    ;
+  inherit (import ../config { inherit flake; }) syncthingVM;
+  inherit (flake.config.services) instances;
+  inherit (flake.config.people) user0;
+  serviceCfg = instances.syncthing;
+  interface0Cfg = serviceCfg.interfaces.interface0;
+
+  foldersHelper = user: {
+    docs = {
+      enable = true;
+      id = "docs";
+      path = "/var/lib/${serviceCfg.name}/docs";
+      devices = [
+        "${user}Phone"
+      ];
+    };
+    media = {
+      enable = true;
+      id = "media";
+      path = "/var/lib/${serviceCfg.name}/media";
+      devices = [
+        "${user}Phone"
+      ];
+    };
+    misc = {
+      enable = true;
+      id = "misc";
+      path = "/var/lib/${serviceCfg.name}/misc";
+      devices = [
+        "${user}Phone"
+      ];
+    };
+  };
+
+  devicesHelper = user: syncID: device: deviceIP: {
+    "${user}${device}" = {
+      autoAcceptFolders = true;
+      name = "${user}${device}";
+      addresses = [
+        "tcp://${deviceIP}:${toString serviceCfg.ports.port2}"
+      ];
+      id = syncID;
+    };
+  };
+
+  mountsHelper = user: [
+    {
+      mountPoint = "/var/lib/${serviceCfg.name}/docs";
+      proto = "virtiofs";
+      source = docsPath user;
+      tag = "${serviceCfg.name}_${user}_docs";
+    }
+    {
+      mountPoint = "/var/lib/${serviceCfg.name}/media";
+      proto = "virtiofs";
+      source = mediaPath user;
+      tag = "${serviceCfg.name}_${user}_media";
+    }
+    {
+      mountPoint = "/var/lib/${serviceCfg.name}/misc";
+      proto = "virtiofs";
+      source = miscPath user;
+      tag = "${serviceCfg.name}_${user}_misc";
+    }
+  ];
+
+  tmpRules = [
+    "d /var/lib/${serviceCfg.name}/docs 0755 ${serviceCfg.name} ${serviceCfg.name} -"
+    "d /var/lib/${serviceCfg.name}/media 0755 ${serviceCfg.name} ${serviceCfg.name} -"
+    "d /var/lib/${serviceCfg.name}/misc 0755 ${serviceCfg.name} ${serviceCfg.name} -"
+  ];
+
+  syncthingNick =
+    let
+      phoneID = "OALKHLZ-OODUWVX-PAC2LI7-UMZMSZO-FELLRCD-RS4DHJS-PVA5YQK-WTFXXQI";
+    in
+    syncthingVM {
+      user = user0;
+      ip = interface0Cfg.microvm.ip;
+      mac = interface0Cfg.microvm.mac;
+      userMac = interface0Cfg.microvm.macUser;
+      ssh = interface0Cfg.microvm.ssh;
+      mnt = guestPath user0;
+      folders = foldersHelper user0;
+      devices = devicesHelper user0 phoneID "Phone" "192.168.50.8";
+      tmp = tmpRules;
+      mounts = mountsHelper user0;
+    };
+in
+syncthingNick

modules/nixos/homelab/guests/vaultwarden/default.nix

@@ -1,46 +1,11 @@
-{
-  flake,
-  labHelpers,
-  ...
-}:
 let
-  inherit (labHelpers) guestPath;
+  importList =
-  inherit (import ./config { inherit flake; }) vaultwardenVM;
+    let
-  inherit (flake.config.people) user0;
+      content = builtins.readDir ./.;
-  inherit (flake.config.services.instances) vaultwarden;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
-
+    in
-  interface0Cfg = vaultwarden.interfaces.interface0;
+    map (name: ./. + "/${name}") dirContent;
-
 in
 {
-  vaultwardenNick = vaultwardenVM {
+  imports = importList;
-    user = user0;
-    ip = interface0Cfg.microvm.ip;
-    mac = interface0Cfg.microvm.mac;
-    userMac = interface0Cfg.microvm.macUser;
-    ssh = interface0Cfg.microvm.ssh;
-    mnt = guestPath user0;
-    host = interface0Cfg.domain;
-  };
-
-  # vaultwardenStacie = vaultwardenVM {
-  #   user = "stacie";
-  #   ip = ipAddress id1;
-  #   mac = "02:00:00:00:${id1}:${id1}";
-  #   userMac = "02:00:00:00:00:${id1}";
-  #   ssh = vaultwarden.ssh1;
-  #   mnt = guestPath "stacie";
-  #   host = "";
-  # };
-
-  # vaultwardenGarnet = vaultwardenVM {
-  #   user = "garnet";
-  #   ip = ipAddress id2;
-  #   mac = "02:00:00:00:${id2}:${id2}";
-  #   userMac = "02:00:00:00:00:${id2}";
-  #   ssh = vaultwarden.ssh2;
-  #   mnt = guestPath "garnet";
-  #   host = "";
-  # };
-
 }

modules/nixos/homelab/guests/vaultwarden/vaultwardenEris/default.nix

@@ -0,0 +1,26 @@
+{
+  flake,
+  labHelpers,
+  ...
+}:
+let
+  inherit (import ../../helpers.nix) labHelpers;
+  inherit (labHelpers) guestPath;
+  inherit (import ../config { inherit flake; }) vaultwardenVM;
+  inherit (flake.config.people) user0;
+  inherit (flake.config.services.instances) vaultwarden;
+
+  interface0Cfg = vaultwarden.interfaces.interface0;
+
+  vaultwardenNick = vaultwardenVM {
+    user = user0;
+    ip = interface0Cfg.microvm.ip;
+    mac = interface0Cfg.microvm.mac;
+    userMac = interface0Cfg.microvm.macUser;
+    ssh = interface0Cfg.microvm.ssh;
+    mnt = guestPath user0;
+    host = interface0Cfg.domain;
+  };
+
+in
+vaultwardenNick

modules/nixos/homelab/guests/website/default.nix

@@ -1,39 +1,11 @@
-{
-  flake,
-  pkgs,
-  labHelpers,
-  ...
-}:
 let
-  inherit (import ./config { inherit flake pkgs; }) websiteVM;
+  importList =
-  inherit (flake.config.services) instances;
+    let
-
+      content = builtins.readDir ./.;
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
+    in
+    map (name: ./. + "/${name}") dirContent;
 in
 {
-  websiteUpRoot =
+  imports = importList;
-    let
-      websitePkg = flake.self.packages.${pkgs.system}.website;
-      interfaceCfg = instances.website.interfaces.interface0;
-    in
-    websiteVM {
-      user = "uproot";
-      ip = interfaceCfg.microvm.ip;
-      mac = interfaceCfg.microvm.mac;
-      userMac = interfaceCfg.microvm.macUser;
-      package = websitePkg;
-    };
-
-  websiteProject =
-    let
-      websitePkg = flake.inputs.linkpage.packages.${pkgs.stdenv.hostPlatform.system}.websiteFrontend;
-      interfaceCfg = instances.website.interfaces.interface1;
-    in
-    websiteVM {
-      user = "project";
-      ip = interfaceCfg.microvm.ip;
-      mac = interfaceCfg.microvm.mac;
-      userMac = interfaceCfg.microvm.macUser;
-      package = websitePkg;
-    };
-
 }

modules/nixos/homelab/guests/website/websiteCeres/default.nix

@@ -0,0 +1,37 @@
+{
+  flake,
+  config,
+  pkgs,
+  ...
+}:
+let
+  inherit (import ../config { inherit flake config pkgs; }) websiteVM;
+  inherit (flake.config.services) instances;
+
+  websiteUpRoot =
+    let
+      websitePkg = flake.self.packages.${pkgs.system}.website;
+      interfaceCfg = instances.website.interfaces.interface0;
+    in
+    websiteVM {
+      user = "uproot";
+      ip = interfaceCfg.microvm.ip;
+      mac = interfaceCfg.microvm.mac;
+      userMac = interfaceCfg.microvm.macUser;
+      package = websitePkg;
+    };
+
+  websiteProject =
+    let
+      websitePkg = flake.inputs.linkpage.packages.${pkgs.stdenv.hostPlatform.system}.websiteFrontend;
+      interfaceCfg = instances.website.interfaces.interface1;
+    in
+    websiteVM {
+      user = "project";
+      ip = interfaceCfg.microvm.ip;
+      mac = interfaceCfg.microvm.mac;
+      userMac = interfaceCfg.microvm.macUser;
+      package = websitePkg;
+    };
+in
+websiteProject // websiteUpRoot

modules/nixos/homelab/guests/zookeeper/config/default.nix

@@ -10,7 +10,7 @@ let
   serviceCfg = instances.zookeeper;
 in
 {
-  websiteVM =
+  zookeeperVM =
     {
       user,
       ip,

modules/nixos/homelab/guests/zookeeper/default.nix

@@ -1,26 +1,11 @@
-{
-  flake,
-  pkgs,
-  labHelpers,
-  ...
-}:
 let
-  inherit (import ./config { inherit flake pkgs; }) zookeeperVM;
+  importList =
-  inherit (flake.config.services) instances;
+    let
-  interfaceCfg = instances.zookeeper.interfaces.interface0;
+      content = builtins.readDir ./.;
-
+      dirContent = builtins.filter (n: content.${n} == "directory") (builtins.attrNames content);
+    in
+    map (name: ./. + "/${name}") dirContent;
 in
 {
-  zookeeperBot =
+  imports = importList;
-    let
-      appPackage = flake.self.packages.${pkgs.system}.zookeeper;
-    in
-    zookeeperVM {
-      user = "boon";
-      ip = interfaceCfg.microvm.ip;
-      mac = interfaceCfg.microvm.mac;
-      userMac = interfaceCfg.microvm.macUser;
-      package = appPackage;
-    };
-
 }

modules/nixos/homelab/guests/zookeeper/zookeeperCeres/default.nix

@@ -0,0 +1,24 @@
+{
+  flake,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  inherit (import ../config { inherit flake pkgs lib; }) zookeeperVM;
+  inherit (flake.config.services) instances;
+  interfaceCfg = instances.zookeeper.interfaces.interface0;
+
+  zookeeperBot =
+    let
+      appPackage = flake.self.packages.${pkgs.system}.zookeeper;
+    in
+    zookeeperVM {
+      user = "boon";
+      ip = interfaceCfg.microvm.ip;
+      mac = interfaceCfg.microvm.mac;
+      userMac = interfaceCfg.microvm.macUser;
+      package = appPackage;
+    };
+in
+zookeeperBot

modules/nixos/homelab/orphans/comfyui/default.nix

@@ -6,8 +6,8 @@
 let
   inherit (flake.config.services) instances;
   serviceCfg = instances.comfyui;
-  localhost = instances.web.localhost.address1;
+  interfaceCfg = serviceCfg.interfaces.interface0;
-  host = serviceCfg.domains.url0;
+  host = interfaceCfg.domain;
   dns = instances.web.dns.provider0;
   dnsPath = "dns/${dns}";
 
@@ -29,16 +29,16 @@ in
       autoStart = true;
 
       ports = [
-        "${localhost}:${toString serviceCfg.ports.port0}:8188"
+        "0.0.0.0:${toString serviceCfg.ports.port0}:8188"
       ];
 
       volumes = [
-        "${serviceCfg.varPaths.path0}:/root"
+        "${interfaceCfg.paths.varPaths.path0}:/root"
-        "${serviceCfg.varPaths.path0}/models:/root/models"
+        "${interfaceCfg.paths.varPaths.path0}/models:/root/models"
-        "${serviceCfg.varPaths.path0}/custom_nodes:/root/custom_nodes"
+        "${interfaceCfg.paths.varPaths.path0}/custom_nodes:/root/custom_nodes"
-        "${serviceCfg.varPaths.path0}/output:/root/output"
+        "${interfaceCfg.paths.varPaths.path0}/output:/root/output"
-        "${serviceCfg.varPaths.path0}/input:/root/input"
+        "${interfaceCfg.paths.varPaths.path0}/input:/root/input"
-        "${serviceCfg.varPaths.path0}/user:/root/user"
+        "${interfaceCfg.paths.varPaths.path0}/user:/root/user"
       ];
 
       environment = {
@@ -77,7 +77,7 @@ in
           }
 
           # Main reverse proxy with WebSocket support
-          reverse_proxy ${localhost}:${toString serviceCfg.ports.port0} {
+          reverse_proxy 0.0.0.0:${toString serviceCfg.ports.port0} {
             header_up Host {host}
             header_up X-Real-IP {remote}
             header_up X-Forwarded-For {remote}
@@ -94,7 +94,7 @@ in
             }
           }
 
-          tls ${serviceCfg.ssl.cert} ${serviceCfg.ssl.key}
+          tls ${interfaceCfg.ssl.cert} ${interfaceCfg.ssl.key}
 
           # Security headers
           header {
@@ -117,8 +117,8 @@ in
   };
 
   systemd.tmpfiles.rules = [
-    "d ${serviceCfg.varPaths.path0} 755 root root -"
+    "d ${interfaceCfg.paths.varPaths.path0} 755 root root -"
-    "d ${serviceCfg.secretPaths.path0}/caddy 755 caddy caddy -"
+    "d ${interfaceCfg.paths.secretPaths.path0}/caddy 755 caddy caddy -"
     "d /var/log/caddy 755 caddy caddy -"
   ];
 

modules/nixos/homelab/samba/default.nix

@@ -8,4 +8,19 @@ let
 in
 {
   imports = importList;
+
+  services = {
+    samba = {
+      enable = true;
+    };
+  };
+
+  networking = {
+    firewall = {
+      allowedTCPPorts = [
+        445
+      ];
+    };
+  };
+
 }

modules/nixos/homelab/samba/sambaCeres/default.nix

@@ -5,7 +5,6 @@
 let
   inherit (flake.config.services) instances;
   inherit (flake.config.people) user0;
-  service = instances.samba;
   jellyfin = instances.jellyfin;
 in
 {
@@ -14,7 +13,6 @@ in
   services = {
     samba = {
       # package = pkgs.samba4Full;
-      enable = true;
       openFirewall = true;
       settings = {
         "storage" = {
@@ -46,12 +44,4 @@ in
   systemd.tmpfiles.rules = [
     "d /mnt/transfer 2775 ${user0} users -"
   ];
-
-  networking = {
-    firewall = {
-      allowedTCPPorts = [
-        service.ports.port0
-      ];
-    };
-  };
 }

modules/nixos/homelab/samba/sambaEris/default.nix

@@ -3,16 +3,13 @@
   ...
 }:
 let
-  inherit (flake.config.services) instances;
   inherit (flake.config.people) user0;
-  service = instances.samba;
 in
 {
   # If you ever need to start fresh, you need to add yourself to the Samba users database:
   # sudo smbpasswd -a username
   services = {
     samba = {
-      enable = true;
       openFirewall = true;
       settings = {
         "storage" = {
@@ -27,12 +24,4 @@ in
       };
     };
   };
-
-  networking = {
-    firewall = {
-      allowedTCPPorts = [
-        service.ports.port0
-      ];
-    };
-  };
 }

systems/ceres/config/wireguard.nix

@@ -2,7 +2,8 @@
 let
   inherit (flake.config.services) instances;
   inherit (flake.config.machines.devices) mars deimos ceres;
-  service = instances.wireGuard;
+  serviceCfg = instances.wireGuard;
+  interfaceCfg = serviceCfg.interfaces.interface0;
 in
 {
   networking = {
@@ -19,8 +20,8 @@ in
     wireguard.interfaces = {
       wg0 = {
         ips = [ "${ceres.wireguard.ip0}/24" ];
-        listenPort = service.ports.port1;
+        listenPort = serviceCfg.ports.port1;
-        privateKeyFile = config.sops.secrets."${service.name}/private".path;
+        privateKeyFile = config.sops.secrets."${serviceCfg.name}/private".path;
         peers = [
           # if you need to create a new key pair
           # wg genkey | save --raw --force privatekey
@@ -41,7 +42,7 @@ in
   sops =
     let
       sopsPath = secret: {
-        path = "${service.sops.path0}/${service.name}-${secret}";
+        path = "${interfaceCfg.paths.secretPaths.path0}/${serviceCfg.name}-${secret}";
         owner = "root";
         mode = "600";
       };
@@ -50,7 +51,7 @@ in
       secrets = builtins.listToAttrs (
         map
           (secret: {
-            name = "${service.name}/${secret}";
+            name = "${serviceCfg.name}/${secret}";
             value = sopsPath secret;
           })
           [