awkawbandClaude Sonnet 5
330ec8c503
`just boot-vm` forwards the guest's port 80 to host port 8080 (QEMU_NET_OPTS in the justfile), but the backend builds absolute URLs (e.g. the stored company logo path returned by the upload API) from APP_URL, which defaults to plain "http://localhost" with no port. The SPA's own relative URLs are fine - they inherit whatever port the browser is already on - but any backend-generated absolute URL then points at host port 80, where nothing is listening, instead of the forwarded 8080. That gave a silent net::ERR_CONNECTION_REFUSED for the logo image specifically, even though the upload itself succeeded. Verified directly: with APP_URL overridden to "http://localhost:8080", a freshly uploaded logo's URL is "http://localhost:8080/storage/.../....png" instead of missing the port. Automated test checks are unaffected (checks derivation hash unchanged) since they curl the guest's own localhost directly, with no host-side port remap involved. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
56 lines
2.9 KiB
Nix
56 lines
2.9 KiB
Nix
{ proxyServer ? "nginx" }:
|
|
{ pkgs, modulesPath, ... }:
|
|
|
|
{
|
|
imports = [
|
|
(modulesPath + "/profiles/qemu-guest.nix")
|
|
# Not imported by default for a plain nixosSystem in this nixpkgs (only nixosTest nodes get it
|
|
# automatically) - needed explicitly so virtualisation.cores/memorySize below are real options.
|
|
(modulesPath + "/virtualisation/qemu-vm.nix")
|
|
(import ./common.nix { inherit proxyServer; })
|
|
];
|
|
|
|
# Required to build pkgs.chromium, which the module pulls in for PDF generation.
|
|
nixpkgs.config.allowUnfree = true;
|
|
|
|
# `nix flake check` evaluates config.system.build.toplevel directly, which asserts a real root
|
|
# filesystem and bootloader are configured. `just build-vm` builds config.system.build.vm
|
|
# instead, where the qemu-vm module overrides both of these with a tmpfs root and direct
|
|
# kernel boot (virtualisation.useBootLoader defaults to false) - so these values just need to
|
|
# satisfy the assertions and are otherwise unused.
|
|
fileSystems."/" = {
|
|
device = "/dev/disk/by-label/nixos";
|
|
fsType = "ext4";
|
|
};
|
|
boot.loader.grub.enable = false;
|
|
|
|
users.users.root = {
|
|
initialPassword = "toor";
|
|
};
|
|
|
|
services.resolved.enable = true;
|
|
|
|
# `just boot-vm` forwards the guest's port 80 to host port 8080 (QEMU_NET_OPTS in the justfile),
|
|
# but the backend builds absolute URLs (e.g. the stored company logo path) from APP_URL, which
|
|
# defaults to plain "http://localhost" with no port. The SPA's own relative URLs are fine (they
|
|
# inherit whatever port the browser is already on), but any backend-generated absolute URL then
|
|
# points at host port 80 - where nothing is listening - instead of the forwarded 8080, giving a
|
|
# silent net::ERR_CONNECTION_REFUSED for things like the logo image. Override to match the actual
|
|
# forwarded port.
|
|
services.invoiceninja.settings.APP_URL = "http://localhost:8080";
|
|
|
|
# The qemu-vm module's defaults (1 core, 1024MB) are too tight for real interactive use: MySQL +
|
|
# Redis + PHP-FPM + chromium (PDF generation, spawned per request - each is a full multi-process
|
|
# browser, not a lightweight renderer) running concurrently can exhaust 1GB fast, and this VM
|
|
# boots with panic_on_oom - so it's not a graceful slowdown, the whole VM goes down. Confirmed by
|
|
# reproducing a "logo upload hangs" report this way: at the 1024MB default, even a couple of
|
|
# concurrent PDF-generation requests triggered `redis-server invoked oom-killer` and a kernel
|
|
# panic. 2 cores / 2560MB comfortably handles 2 concurrent PDF generations alongside normal
|
|
# traffic (verified: ~1.4GB still free afterward); a deliberate flood of many concurrent PDF
|
|
# requests can still exhaust even this, since each is a full chromium instance - if that's a
|
|
# concern for your deployment, consider capping `phpfpm.settings."pm.max_children"` below its
|
|
# default of 8, or provisioning more RAM.
|
|
virtualisation.cores = 2;
|
|
virtualisation.memorySize = 2560;
|
|
}
|