kurogeek
08b5496980
Vendored from debling/nix-penpot (MIT). Fixes on top: - pnpm fetchers: drop --config.fetch-* flags (UND_ERR_INVALID_ARG on pnpm 11.27) and pin real store hashes (frontend x3, exporter, mcp) - deps-lock.json: add transitive funcool/beicon2 v2.0 so fake-git resolves potok2's pin during the shadow-cljs classpath build - expose frontend pnpm stores via passthru for rehashing - x86_64-linux only; devShell ships afk, jj, git
59 lines
1.7 KiB
Nix
59 lines
1.7 KiB
Nix
# A minimal headless NixOS VM running a full Penpot stack (backend, nginx
|
|
# vhost, exporter, MCP, PostgreSQL, Valkey and the mailpit SMTP sink).
|
|
#
|
|
# Build it with:
|
|
# nix build .#nixosConfigurations.penpot-vm.config.system.build.vm
|
|
# and run it headless with:
|
|
# ./result/bin/run-penpot-vm-vm
|
|
#
|
|
# The guest's port 8080 (the vhost's listen port, matching the public URI)
|
|
# is forwarded to the host's port 8080, so once the VM is up you can verify
|
|
# the deployment from the host:
|
|
# curl -fsS http://127.0.0.1:8080/readyz # backend health (via nginx)
|
|
# curl -fsS http://127.0.0.1:8080/ # frontend
|
|
# curl -fsS http://127.0.0.1:8080/js/config.js
|
|
# The mailpit SMTP-sink UI is forwarded too: http://localhost:8025
|
|
{
|
|
lib,
|
|
modulesPath,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
"${modulesPath}/virtualisation/qemu-vm.nix"
|
|
./penpot-config.nix
|
|
];
|
|
|
|
networking.hostName = "penpot-vm";
|
|
|
|
# Headless: serial console only.
|
|
virtualisation.graphics = false;
|
|
virtualisation.qemu.consoles = [ "ttyS0" ];
|
|
boot.kernelParams = [ "console=ttyS0,115200" ];
|
|
|
|
# The Clojure backend plus Chromium-driven exporter need some headroom.
|
|
virtualisation.memorySize = 3072;
|
|
virtualisation.diskSize = 4096;
|
|
|
|
# Host and guest ports must match: the vhost listens on the public URI's
|
|
# port (8080) and the served config.js points the app at that URL.
|
|
virtualisation.forwardPorts = [
|
|
{
|
|
from = "host";
|
|
host.port = 8080;
|
|
guest.port = 8080;
|
|
}
|
|
{
|
|
from = "host";
|
|
host.port = 8025;
|
|
guest.port = 8025;
|
|
}
|
|
];
|
|
|
|
system.stateVersion = "25.11";
|
|
|
|
# Convenience for poking around over the serial console.
|
|
services.getty.autologinUser = "root";
|
|
users.users.root.initialHashedPassword = "";
|
|
}
|