{ pkgs, ... }: { services.k3s = { enable = true; manifests.splunkd = { source = ../software/kubernetes/manifests/splunkd.yaml; }; }; environment.variables.KUBECONFIG = "/etc/rancher/k3s/k3s.yaml"; networking.firewall.allowedTCPPorts = [ 6443 10248 10250 10251 10252 ]; environment.systemPackages = with pkgs; [ kubectl kubernetes-helm ]; }