test: jellyfin microVM

This commit is contained in:
Nick 2025-11-09 05:14:40 -06:00
parent 1faa06262d
commit 5fc49f405a
2 changed files with 28 additions and 30 deletions

View file

@ -149,10 +149,8 @@ in
users.users.caddy.extraGroups = [ "acme" ]; users.users.caddy.extraGroups = [ "acme" ];
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
# Create directories with 777 permissions so the jellyfin user (UID 999) inside the VM can write "d ${serviceCfg.mntPaths.path0} 0755 999 999 -"
# VirtioFS preserves host permissions, and we can't easily match UIDs between host and guest "d ${serviceCfg.mntPaths.path0}/cache 0755 999 999 -"
"d ${serviceCfg.mntPaths.path0} 0777 root root -"
"d ${serviceCfg.mntPaths.path0}/cache 0777 root root -"
]; ];
} }

View file

@ -18,32 +18,32 @@
# ┌────────────────────────────────────────────────┐ # ┌────────────────────────────────────────────────┐
# │ Host (NixOS Server) │ # │ Host (NixOS Server) │
# │ │ # │ │
# │ ┌──────────────┐ ┌──────────────┐ # │ ┌──────────────┐ ┌──────────────┐
# │ │ Caddy │ │ br-vms │ # │ │ Caddy │ │ br-vms │
# │ │ (Reverse │──────│ Bridge │ # │ │ (Reverse │──────│ Bridge │
# │ │ Proxy) │ │ 192.168.50 │ # │ │ Proxy) │ │ 192.168.50 │
# │ │ TLS Term │ │ .240 │ # │ │ TLS Term │ │ .240 │
# │ └──────────────┘ └──────┬───────┘ # │ └──────────────┘ └──────┬───────┘
# │ :443 │ # │ :443 │
# │ │ ┌─────▼──────┐ # │ │ ┌─────▼──────┐
# │ │ │ vm-NAME │ # │ │ │ vm-NAME │
# │ │ │ (TAP) │ # │ │ │ (TAP) │
# │ │ └─────┬──────┘ # │ │ └─────┬──────┘
# │ │ │ # │ │ │
# │ ┌─────▼──────────────────────▼────────────┐ # │ ┌─────▼──────────────────────▼────────────┐
# │ │ │ # │ │ │
# │ │ MicroVM Guest │ # │ │ MicroVM Guest │
# │ │ ┌────────────┐ ┌────────────┐ # │ │ ┌────────────┐ ┌────────────┐
# │ │ │ Service │ │ enp0s5 │ # │ │ │ Service │ │ enp0s5 │
# │ │ │ :PORT │ │192.168.50 │ # │ │ │ :PORT │ │192.168.50 │
# │ │ │ │ │ .1XX │ # │ │ │ │ │ .1XX │
# │ │ └────────────┘ └────────────┘ # │ │ └────────────┘ └────────────┘
# │ │ │ # │ │ │
# │ │ VirtioFS Mounts: │ # │ │ VirtioFS Mounts: │
# │ │ • /nix/.ro-store → Host /nix/store # │ │ • /nix/.ro-store → Host /nix/store
# │ │ • /var/lib/NAME → Host /mnt/storage # │ │ • /var/lib/NAME → Host /mnt/storage
# │ │ • /run/secrets → Host /run/secrets/NAME│ # │ │ • /run/secrets → Host /run/secrets/NAME│
# │ └─────────────────────────────────────────┘ # │ └─────────────────────────────────────────┘
# │ │ # │ │
# └────────────────────────────────────────────────┘ # └────────────────────────────────────────────────┘
# #