nixos/hosts/nixos-lxc/configuration.nix

{ modulesPath, ... }:
{
  imports = [
    (modulesPath + "/virtualisation/proxmox-lxc.nix")
  ];

  # 修复 LXC 挂载报错
  systemd.mounts = [
    { where = "/sys/kernel/debug"; enable = false; }
    { where = "/sys/fs/fuse/connections"; enable = false; }
  ];
  systemd.services."sys-kernel-debug.mount".enable = false;

  # 容器运行时设置
  nix.settings.sandbox = false;
  proxmoxLXC = {
    manageNetwork = false;
    privileged = true;
  };

  # 由宿主机处理 fstrim
  services.fstrim.enable = false;

  services.openssh = {
    enable = true;
    openFirewall = true;
    settings = {
      PermitRootLogin = "yes";
      PasswordAuthentication = true;
    };
  };

  security.sudo.wheelNeedsPassword = false;

  services.resolved = {
    extraConfig = ''
      Cache=true
      CacheFromLocalhost=true
    '';
  };

}