service: gitea register

modules/services/dmz/microvm.nix

@@ -1,4 +1,4 @@
-{ config, microvm, nixpkgs, user, agenix, impermanence, ... }:
+{ config, microvm, lib, user, agenix, impermanence, ... }:
 let
   name = "gitea-runner";
 in
@@ -10,10 +10,7 @@ in
     vms = {
       ${name} = {
 
-        pkgs = import nixpkgs {
-          system = "x86_64-linux";
-          config.allowUnfree = true;
-        };
+        inherit pkgs;
 
         config = {
           imports = 
@@ -24,7 +21,7 @@ in
           networking = {
             hostName = "${name}";
 
-           firewall = {
+            firewall = {
               enable = true;
                 allowedUDPPorts = [  ];
                 allowedTCPPorts = [  ];
@@ -72,12 +69,12 @@ in
             };
           };
 
-          fileSystems."/persist".neededForBoot = nixpkgs.lib.mkForce true;
+          fileSystems."/persist".neededForBoot = lib.mkForce true;
 
           environment.persistence."/persist" = {
               directories = [
                 "/var/log"
-                "/var/lib"
+                "/var/lib/private"
               ];
 
               files = [