flake.lock

@@ -217,11 +217,11 @@
         "nixpkgs-stable": "nixpkgs-stable_2"
       },
       "locked": {
-        "lastModified": 1729217131,
-        "narHash": "sha256-/2wBluheB7gOBsZRjJ0mHGb4JHNtdoyFF3OR2xSQ+dc=",
+        "lastModified": 1729130734,
+        "narHash": "sha256-U1bIksHGGN/bObrRoiJxov51rVM3A5gNqw5oamo7yEI=",
         "owner": "nix-community",
         "repo": "emacs-overlay",
-        "rev": "264b4e4a44a67a42bfc161ee48d9139f3abd8ab0",
+        "rev": "3ff861b0b86704afa226b70312b584bfcdb46bd7",
         "type": "github"
       },
       "original": {
@@ -517,11 +517,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1729174520,
-        "narHash": "sha256-QxCAdgQdeIOaCiE0Sr23s9lD0+T1b/wuz5pSiGwNrCQ=",
+        "lastModified": 1729027341,
+        "narHash": "sha256-IqWD7bA9iJVifvJlB4vs2KUXVhN+d9lECWdNB4jJ0tE=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "e78cbb20276f09c1802e62d2f77fc93ec32da268",
+        "rev": "2a4fd1cfd8ed5648583dadef86966a8231024221",
         "type": "github"
       },
       "original": {
@@ -676,11 +676,11 @@
     },
     "nixpkgs-stable_2": {
       "locked": {
-        "lastModified": 1729044727,
-        "narHash": "sha256-GKJjtPY+SXfLF/yTN7M2cAnQB6RERFKnQhD8UvPSf3M=",
+        "lastModified": 1728909085,
+        "narHash": "sha256-WLxED18lodtQiayIPDE5zwAfkPJSjHJ35UhZ8h3cJUg=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "dc2e0028d274394f73653c7c90cc63edbb696be1",
+        "rev": "c0b1da36f7c34a7146501f684e9ebdf15d2bebf8",
         "type": "github"
       },
       "original": {
@@ -823,11 +823,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1729218602,
-        "narHash": "sha256-KDmYxpkFWa0Go0WnOpkgQOypVaQxbwgpEutET5ey1VQ=",
+        "lastModified": 1729132166,
+        "narHash": "sha256-Mhl4T7gDGknG4nPbHNSGWynfSjZeoWBdsaIzhUYuIlU=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "9051466c82b9b3a6ba9e06be99621ad25423ec94",
+        "rev": "32d889f9b9fc65cb65aa2d5db282d60ed06f348e",
         "type": "github"
       },
       "original": {

machines/mimir/configuration.nix

@@ -1,5 +1,6 @@
 {
   nixos-hardware,
+  microvm,
   attic,
   ...
 }:
@@ -11,6 +12,7 @@
     nixos-hardware.nixosModules.common-cpu-amd-pstate
     nixos-hardware.nixosModules.common-pc-ssd
 
+    microvm.nixosModules.host
     attic.nixosModules.atticd
 
     ../../users/erwin
@@ -211,7 +213,6 @@
       trustedInterfaces = [
         "lo"
         "tailscale0"
-        "enp5s0f1"
       ];
 
       allowedTCPPorts = [
@@ -230,6 +231,7 @@
 
     nat = {
       enable = true;
+      internalInterfaces = [ "microvm" ];
       externalInterface = "enp4s0";
     };
 
@@ -243,6 +245,8 @@
     };
   };
 
+  microvm.autostart = [ "miniflux" ];
+
   powerManagement = {
     cpuFreqGovernor = "ondemand";
   };
@@ -282,6 +286,15 @@
         };
       };
 
+      netdevs = {
+        "10-microvm" = {
+          netdevConfig = {
+            Kind = "bridge";
+            Name = "microvm";
+          };
+        };
+      };
+
       networks = {
         "40-enp4s0" = {
           enable = true;
@@ -309,8 +322,23 @@
           matchConfig = {
             Name = "enp5s0f1";
           };
+        };
 
-          addresses = [ { Address = "10.42.0.1/24"; } ];
+        "10-microvm" = {
+          matchConfig = {
+            Name = "microvm";
+          };
+
+          addresses = [ { Address = "172.16.0.1/24"; } ];
+        };
+
+        "11-microvm" = {
+          matchConfig = {
+            Name = "vm-*";
+          };
+          networkConfig = {
+            Bridge = "microvm";
+          };
         };
       };
     };