qvm/flake/default-vm/flake.nix

{
  description = "Default NixOS VM template for QVM development environments";

  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
    home-manager = {
      url = "github:nix-community/home-manager";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    nixos-generators = {
      url = "github:nix-community/nixos-generators";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    opencode.url = "github:anomalyco/opencode";
    common.url = "git+https://git.joshuabell.xyz/ringofstorms/dotfiles?dir=flakes/common";
    ros_neovim.url = "git+https://git.joshuabell.xyz/ringofstorms/nvim";
  };

  outputs =
    {
      self,
      nixpkgs,
      nixos-generators,
      ...
    }@inputs:
    let
      system = "x86_64-linux";
      stateVersion = "26.05";

      vmModule =
        {
          config,
          pkgs,
          lib,
          ...
        }:
        {
          imports = [
            inputs.home-manager.nixosModules.home-manager

            # inputs.ros_neovim.nixosModules.default
            inputs.common.nixosModules.essentials
            inputs.common.nixosModules.git
            inputs.common.nixosModules.zsh
            inputs.common.nixosModules.tmux
          ];

          nixpkgs.config = {
            allowUnfree = true;
            allowUnfreePredicate = (_: true);
          };

          # Distinctive hostname for easy identification
          networking.hostName = "qvm-dev";

          # SSH enabled with password auth for root
          services.openssh = {
            enable = true;
            settings.PasswordAuthentication = true;
            settings.PermitRootLogin = "yes";
          };

          # Root user with password and zsh
          users.users.root = {
            password = "root";
            shell = pkgs.zsh;
          };

          programs.zsh.enable = true;

          # Home manager configuration for nice shell
          home-manager = {
            useUserPackages = true;
            useGlobalPkgs = true;
            backupFileExtension = "bak";

            sharedModules = [
              inputs.common.homeManagerModules.git
              inputs.common.homeManagerModules.postgres_cli_options
              inputs.common.homeManagerModules.starship
              inputs.common.homeManagerModules.zoxide
              inputs.common.homeManagerModules.zsh
              inputs.common.homeManagerModules.tmux
              inputs.common.homeManagerModules.direnv
              ({ programs.direnv.config.whitelist.prefix = [ "/" ]; })
            ];

            users.root = {
              home.stateVersion = stateVersion;
              programs.home-manager.enable = true;
            };
          };

          # Avoid slow boots due to wait-online
          systemd.network.wait-online.enable = false;
          systemd.services.NetworkManager-wait-online.enable = lib.mkForce false;
          systemd.services.systemd-networkd-wait-online.enable = lib.mkForce false;

          networking.firewall.allowedTCPPorts = [ 22 ];

          # Enable flakes
          nix.settings.experimental-features = [
            "nix-command"
            "flakes"
          ];

          # Josh's timezone
          time.timeZone = "America/Chicago";

          # Git safe.directory for 9p ownership issues
          environment.etc."gitconfig".text = ''
            [safe]
              directory = *
          '';

          # 9p mount points for caches (must match qvm-start mount tags)
          fileSystems."/cache/cargo" = {
            device = "cargo_home";
            fsType = "9p";
            options = [
              "trans=virtio"
              "version=9p2000.L"
              "msize=104857600"
              "_netdev"
              "nofail"
            ];
          };

          fileSystems."/cache/target" = {
            device = "cargo_target";
            fsType = "9p";
            options = [
              "trans=virtio"
              "version=9p2000.L"
              "msize=104857600"
              "_netdev"
              "nofail"
            ];
          };

          fileSystems."/cache/pnpm" = {
            device = "pnpm_store";
            fsType = "9p";
            options = [
              "trans=virtio"
              "version=9p2000.L"
              "msize=104857600"
              "_netdev"
              "nofail"
            ];
          };

          fileSystems."/cache/sccache" = {
            device = "sccache";
            fsType = "9p";
            options = [
              "trans=virtio"
              "version=9p2000.L"
              "msize=104857600"
              "_netdev"
              "nofail"
            ];
          };

          fileSystems."/root/.config/opencode" = {
            device = "opencode_config";
            fsType = "9p";
            options = [
              "trans=virtio"
              "version=9p2000.L"
              "msize=104857600"
              "_netdev"
              "nofail"
            ];
          };

          # Environment variables for cache directories
          environment.variables = {
            CARGO_HOME = "/cache/cargo";
            CARGO_TARGET_DIR = "/cache/target";
            PNPM_HOME = "/cache/pnpm";
            SCCACHE_DIR = "/cache/sccache";
          };

          # Ensure workspace directory exists
          systemd.tmpfiles.rules = [
            "d /workspace 0755 root root -"
          ];

          # Essential packages for development
          environment.systemPackages = with pkgs; [
            git
            vim
            tmux
            htop
            curl
            jq
            ripgrep
            fd
            inputs.opencode.packages.${system}.default
          ];

          # Opencode aliases without proxy interference
          environment.shellAliases = {
            "oc" = "all_proxy='' http_proxy='' https_proxy='' opencode";
            "occ" = "oc -c";
          };

          # MOTD to clearly show this is qvm-dev
          users.motd = ''
            ╔════════════════════════════════════════╗
            ║                                        ║
            ║         QVM Development VM             ║
            ║         Hostname: qvm-dev              ║
            ║                                        ║
            ║  Caches:    /cache/{cargo,target,...}  ║
            ║  Workspace: /workspace                 ║
            ║                                        ║
            ╚════════════════════════════════════════╝
          '';

          # GB disk size
          virtualisation.diskSize = 40 * 1024;

          system.stateVersion = stateVersion;
        };

    in
    let
      pkgs = nixpkgs.legacyPackages.${system};

      # Use standard NixOS VM builder instead of nixos-generators
      # nixos-generators qcow format has a 100MB RAM build VM that OOMs with large closures
      baseVm = nixpkgs.lib.nixosSystem {
        inherit system;
        modules = [ vmModule ];
      };
    in
    {
      nixosConfigurations.base = baseVm;

      # Runnable VM script (./result/bin/run-qvm-dev-vm)
      packages.${system} = {
        vm = baseVm.config.system.build.vm;
        default = baseVm.config.system.build.vm;
      };

      apps.${system}.default = {
        type = "app";
        program = "${baseVm.config.system.build.vm}/bin/run-qvm-dev-vm";
      };

      devShells.${system}.default = pkgs.mkShellNoCC {
        QEMU_NET_OPTS = "hostfwd=tcp::2222-:22";
      };

      nixosModules.default = vmModule;
    };
}