Pericyte: enable basic k3s

machines/pericyte/configuration.nix

@@ -5,6 +5,7 @@
     "${inputs.nixpkgs}/nixos/modules/profiles/minimal.nix"
 
     ./microvm-configuration.nix
+    ./k3s.nix
   ];
 
   nix.settings.experimental-features = [ "nix-command" "flakes" ];

machines/pericyte/k3s.nix

@@ -0,0 +1,19 @@
+{ pkgs, ... }: {
+  networking.firewall = {
+    allowedTCPPorts = [
+      6443 # k3s: required so that pods can reach the API server (running on port 6443 by default)
+      # 2379 # k3s, etcd clients: required if using a "High Availability Embedded etcd" configuration
+      # 2380 # k3s, etcd peers: required if using a "High Availability Embedded etcd" configuration
+    ];
+    allowedUDPPorts = [
+      # 8472 # k3s, flannel: required if using multi-node for inter-node networking
+    ];
+  };
+  services.k3s = {
+    enable = true;
+    role = "server";
+    extraFlags = toString [
+      # "--debug" # Optionally add additional args to k3s
+    ];
+  };
+}