feat(krz01): Proxmox

machines/krz01/_configuration.nix

@@ -7,7 +7,7 @@ lib.extra.mkConfig {
 
   enabledServices = [
     # INFO: This list needs to stay sorted alphabetically
-    # "proxmox"
+    "proxmox"
   ];
 
   extraConfig = {
@@ -20,6 +20,8 @@ lib.extra.mkConfig {
     };
 
     services.netbird.enable = true;
+
+    users.users.root.hashedPassword = "$y$j9T$KOEV4hLDGyc4q1q8Rj2tE1$7mhZx4bNojsFfXlU2q5B.sRCD.6S1vhu6x2VSGJ79L2";
   };
 
   root = ./.;

machines/krz01/proxmox/default.nix

@@ -1,4 +1,4 @@
-{ sources, ... }:
+{ sources, lib, ... }:
 let
   proxmox-nixos = import sources.proxmox-nixos;
 in
@@ -6,4 +6,9 @@ in
   imports = [ proxmox-nixos.nixosModules.proxmox-ve ];
   services.proxmox-ve.enable = true;
   nixpkgs.overlays = [ proxmox-nixos.overlays.x86_64-linux ];
+  networking.firewall = {
+    trustedInterfaces = [ "wt0" ];
+    allowedTCPPorts = lib.mkForce [ 22 ];
+  };
+
 }