dotfiles/nixos/systems/omen/uk3s.nix

{inputs', ...}: {
  imports = [
    inputs'.uk3s-nix.nixosModules.uk3s
    inputs'.uk3s-nix.nixosModules.uk3sIstio
    inputs'.uk3s-nix.nixosModules.uk3sMetalLB
    inputs'.uk3s-nix.nixosModules.ucontainers
    inputs'.uk3s-nix.nixosModules.ucontainersNetwork
  ];

  nixpkgs.overlays = [
    inputs'.uk3s-nix.overlays.templateHelmChart
  ];

  services.uk3s = {
    enable = true;
    hostAddress = "10.50.0.1/22";
    guestAddress = "10.50.0.2/22";

    vethNetwork = "10.50.0.0/22";
    clusterNetwork = "10.50.4.0/22";
    serviceNetwork = "10.50.6.0/23";

    hostInterface = "uk3s0";

    istio = {
      enable = true;

      istiod.enable = true;
      gateway.enable = true;
    };

    metallb = {
      enable = true;
    };

    k3s = {
      settings = {
        disable = [
          "traefik"
          "servicelb"
        ];
      };

      datastore = {
        type = "postgresql";
      };
    };
  };
}