diff --git a/.gitignore b/.gitignore index 54383a6..78042c2 100644 --- a/.gitignore +++ b/.gitignore @@ -4,6 +4,8 @@ !hosts/ +!hosts/altk/ + !hosts/cube/ !hosts/cube/acme/ !hosts/cube/forgejo/ diff --git a/hosts/altk/default.nix b/hosts/altk/default.nix new file mode 100644 index 0000000..f7fd2c6 --- /dev/null +++ b/hosts/altk/default.nix @@ -0,0 +1,23 @@ +{ config, lib, ... }: with lib; merge + +(systemConfiguration { + system.stateVersion = "24.11"; + nixpkgs.hostPlatform = "x86_64-linux"; + + time.timeZone = "Europe/Istanbul"; + + secrets.saidPassword.file = ./password.said.age; + + users.users = { + root.hashedPasswordFile = config.secrets.saidPassword.path; + + said = sudoUser (desktopUser { + description = "Said"; + hashedPasswordFile = config.secrets.saidPassword.path; + }); + }; +}) + +(homeConfiguration { + home.stateVersion = "24.11"; +}) diff --git a/hosts/altk/hardware.nix b/hosts/altk/hardware.nix new file mode 100644 index 0000000..e7e09ab --- /dev/null +++ b/hosts/altk/hardware.nix @@ -0,0 +1,35 @@ +{ config, lib, ... }: with lib; + +systemConfiguration { + boot.loader = { + systemd-boot = enabled { + editor = false; + }; + + efi.canTouchEfiVariables = true; + }; + + boot.initrd.availableKernelModules = [ + "ahci" + "ehci_pci" + "sd_mod" + "sr_mod" + "usb_storage" + "usbhid" + ]; + + fileSystems."/" = { + device = "/dev/disk/by-label/root"; + fsType = "btrfs"; + options = [ "noatime" ]; + }; + + fileSystems.${config.boot.loader.efi.efiSysMountPoint} = { + device = "/dev/disk/by-label/boot"; + fsType = "vfat"; + options = [ "noatime" ]; + }; + + hardware.enableAllFirmware = true; + hardware.cpu.intel.updateMicrocode = true; +} diff --git a/hosts/altk/id.age b/hosts/altk/id.age new file mode 100644 index 0000000..81ad6d2 Binary files /dev/null and b/hosts/altk/id.age differ diff --git a/hosts/altk/password.said.age b/hosts/altk/password.said.age new file mode 100644 index 0000000..25179b1 Binary files /dev/null and b/hosts/altk/password.said.age differ diff --git a/keys.nix b/keys.nix index f22e064..fbf5667 100644 --- a/keys.nix +++ b/keys.nix @@ -1,5 +1,6 @@ let keys = { + altk = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBVkWUQ6Z4OK539tore/R5wnueNPPaX532RUAld8UOCo said@altk"; cube = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINMkCJeHcD0SIOZ4HkyF6rqUmbvlKhSha3HWMZ0hbIjp rgb@cube"; disk = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItpYQ3Pz6zFifKXvFX7xAC8aby9RW/m5PkW8T9SOee4 floppy@disk"; enka = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBVkWUQ6Z4OK539tore/R5wnueNPPaX532RUAld8UOCo said@enka"; @@ -7,6 +8,6 @@ let nine = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILJDqnItmvXZMTSwzbalr+9jzS4kSJm5PWEpI8GOpebF seven@nine"; }; in keys // { - admins = [ keys.enka keys.pala ]; + admins = with keys; [ altk enka pala ]; all = builtins.attrValues keys; }