Init project demos

.gitignore

@@ -1,5 +1,6 @@
 result
 .tmp
+*.qcow2
 
 # Generated by nix-pre-commit-hooks
 /.pre-commit-config.yaml

default.nix

@@ -257,4 +257,90 @@ rec {
   shell = pkgs.mkShellNoCC {
     packages = [ ];
   };
+
+  demo-system =
+    module:
+    let
+      nixosSystem =
+        args:
+        import (sources.nixpkgs + "/nixos/lib/eval-config.nix") (
+          {
+            inherit lib;
+            system = null;
+          }
+          // args
+        );
+    in
+    nixosSystem {
+      system = "x86_64-linux";
+      modules = [
+        module
+        (sources.nixpkgs + "/nixos/modules/profiles/qemu-guest.nix")
+        (sources.nixpkgs + "/nixos/modules/virtualisation/qemu-vm.nix")
+        (
+          { config, ... }:
+          {
+            users.users.nixos = {
+              isNormalUser = true;
+              extraGroups = [ "wheel" ];
+              initialPassword = "nixos";
+            };
+
+            users.users.root = {
+              initialPassword = "root";
+            };
+
+            security.sudo.wheelNeedsPassword = false;
+
+            services.getty.autologinUser = "nixos";
+            services.getty.helpLine = ''
+
+              Welcome to NGIpkgs!
+            '';
+
+            services.openssh = {
+              enable = true;
+              settings = {
+                PasswordAuthentication = true;
+                PermitEmptyPasswords = "yes";
+                PermitRootLogin = "yes";
+              };
+            };
+
+            system.stateVersion = "25.05";
+
+            networking.firewall.enable = false;
+
+            virtualisation = {
+              memorySize = 4096;
+              cores = 4;
+              graphics = false;
+
+              qemu.options = [
+                "-cpu host"
+                "-enable-kvm"
+              ];
+
+              # ssh + open service ports
+              forwardPorts = map (port: {
+                from = "host";
+                guest.port = port;
+                host.port = port + 10000;
+                proto = "tcp";
+              }) config.networking.firewall.allowedTCPPorts;
+            };
+          }
+        )
+      ] ++ extendedNixosModules;
+    };
+
+  demo =
+    module:
+    pkgs.writeShellScript "demo-vm" ''
+      ${(demo-system module).config.system.build.vm}/bin/run-nixos-vm
+    '';
+
+  # $ nix-build . -A demo-test
+  # $ ./result
+  demo-test = demo ./projects/Cryptpad/demo.nix;
 }