RGBCube/ncc
1
Fork 0
mirror of https://github.com/RGBCube/ncc synced 2025-07-29 19:17:45 +00:00
Code Issues Activity

Remove old hosts

Browse source
This commit is contained in:
RGBCube 2025-01-08 18:47:15 +03:00
parent 4231044f8a
commit 3951f0e6a6
Signed by: RGBCube
SSH key fingerprint: SHA256:CzqbPcfwt+GxFYNnFVCqoN5Itn4YFrshg1TrnACpA5M
16 changed files with 4 additions and 218 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.gitignore vendored
View file

@ -4,8 +4,6 @@
!hosts/
!hosts/altk/
!hosts/cube/
!hosts/cube/acme/
!hosts/cube/forgejo/
@ -16,8 +14,6 @@
!hosts/disk/
!hosts/disk/mail/
!hosts/enka/
!hosts/nine/
!hosts/nine/github2forgejo/

43
hosts/altk/default.nix
View file

@ -1,43 +0,0 @@
{ themes, config, lib, pkgs, ... }: with lib; merge
(systemConfiguration {
system.stateVersion = "24.11";
nixpkgs.hostPlatform = "x86_64-linux";
time.timeZone = "Europe/Istanbul";
secrets.saidPassword.file = ./password.said.age;
users.users = {
root.hashedPasswordFile = config.secrets.saidPassword.path;
said = sudoUser (desktopUser {
description = "Said";
hashedPasswordFile = config.secrets.saidPassword.path;
});
};
theme = themes.custom (themes.raw.gruvbox-dark-hard // {
cornerRadius = 0;
borderWidth = 1;
margin = 0;
padding = 6;
font.size.normal = 12;
font.size.big = 16;
font.sans.name = "Lexend";
font.sans.package = pkgs.lexend;
font.mono.name = "JetBrainsMono Nerd Font";
font.mono.package = pkgs.nerdfonts.override { fonts = [ "JetBrainsMono"]; };
icons.name = "Gruvbox-Plus-Dark";
icons.package = pkgs.gruvbox-plus-icons;
});
})
(homeConfiguration {
home.stateVersion = "24.11";
})

35
hosts/altk/hardware.nix
View file

@ -1,35 +0,0 @@
{ config, lib, ... }: with lib;
systemConfiguration {
boot.loader = {
systemd-boot = enabled {
editor = false;
};
efi.canTouchEfiVariables = true;
};
boot.initrd.availableKernelModules = [
"ahci"
"ehci_pci"
"sd_mod"
"sr_mod"
"usb_storage"
"usbhid"
];
fileSystems."/" = {
device = "/dev/disk/by-label/root";
fsType = "btrfs";
options = [ "noatime" ];
};
fileSystems.${config.boot.loader.efi.efiSysMountPoint} = {
device = "/dev/disk/by-label/boot";
fsType = "vfat";
options = [ "noatime" ];
};
hardware.enableAllFirmware = true;
hardware.cpu.intel.updateMicrocode = true;
}

BIN
hosts/altk/id.age
View file

Binary file not shown.

10
hosts/altk/password.said.age
View file

@ -1,10 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 CzqbPQ YpdEAmAsfX1gVJFabC9iR71Fo3hQbnqfdqEOHG7k0ng
a/aOpjWKvwcOrPLDECd/12sIyP2oXySt/q0qX1gb3VU
-> ssh-ed25519 CzqbPQ fpyWx9qWw0JG0Zc1Gc8MD6HEDq8M1aY2jYPjMOiMohI
nmIHRcH+P6zlEh47qimm0gAo4WLDLVONjSfQ40BYuO0
-> ssh-ed25519 f5VzMA mljacn96t2J2LVhX8/vzbW2a0zzu5NtWCXZ2OQzBgVk
lCkWWSKlzOo4JHCkNT6csvlb+qMPcqmC6lKa5y24oKY
--- UbeKoJcDPPJ4xW3Y6Z58bpExIihCQjD7+ltak3T9fQk
²k_˜ŒîPê}|ºù•"ŽeП#ñ m ·6½ñ°A¶ƒ_:‡b=A{d6~x.¨=ŽC FI2
ü-þ7s˜8Frö?|Í£ Ÿ­ˆyÎQ]qõ)N{Φ%¿3?nÊ?÷-u©¼¿x\^

2
hosts/cube/default.nix
View file

@ -12,7 +12,7 @@
rgb = sudoUser {
description = "RGB";
openssh.authorizedKeys.keys = [ keys.enka ];
openssh.authorizedKeys.keys = keys.admins;
hashedPasswordFile = config.secrets.rgbPassword.path;
};

2
hosts/disk/default.nix
View file

@ -12,7 +12,7 @@
floppy = sudoUser {
description = "Floppy";
openssh.authorizedKeys.keys = [ keys.enka ];
openssh.authorizedKeys.keys = keys.admins;
hashedPasswordFile = config.secrets.floppyPassword.path;
};

31
hosts/enka/default.nix
View file

@ -1,31 +0,0 @@
{ config, lib, ... }: with lib; merge
(systemConfiguration {
system.stateVersion = "24.11";
nixpkgs.hostPlatform = "x86_64-linux";
time.timeZone = "Europe/Istanbul";
secrets = {
orhanPassword.file = ./password.orhan.age;
saidPassword.file = ./password.said.age;
};
users.users = {
root.hashedPasswordFile = config.secrets.saidPassword.path;
orhan = desktopUser {
description = "Orhan";
hashedPasswordFile = config.secrets.orhanPassword.path;
};
said = sudoUser (desktopUser {
description = "Said";
hashedPasswordFile = config.secrets.saidPassword.path;
});
};
})
(homeConfiguration {
home.stateVersion = "24.11";
})

38
hosts/enka/hardware.nix
View file

@ -1,38 +0,0 @@
{ config, lib, ... }: with lib;
systemConfiguration {
boot.loader = {
systemd-boot = enabled {
editor = false;
};
efi.canTouchEfiVariables = true;
};
boot.initrd.availableKernelModules = [
"ahci"
"nvme"
"sr_mod"
"usbhid"
"xhci_pci"
];
boot.kernelModules = [
"kvm-intel"
];
fileSystems."/" = {
device = "/dev/disk/by-label/root";
fsType = "btrfs";
options = [ "noatime" ];
};
fileSystems.${config.boot.loader.efi.efiSysMountPoint} = {
device = "/dev/disk/by-label/ESP";
fsType = "vfat";
options = [ "noatime" ];
};
hardware.enableAllFirmware = true;
hardware.cpu.intel.updateMicrocode = true;
}

BIN
hosts/enka/id.age
View file

Binary file not shown.

34
hosts/enka/nvidia.nix
View file

@ -1,34 +0,0 @@
{ hardware, lib, ... }: with lib;
systemConfiguration {
imports = [ hardware.nixosModules.common-gpu-nvidia ];
boot.kernelParams = [ "nvidia-drm.fbdev=1" ];
boot.kernelModules = [
"nvidia"
"nvidia_drm"
"nvidia_modeset"
"nvidia_uvm"
];
hardware.nvidia = {
open = false;
powerManagement = enabled;
prime = {
intelBusId = "PCI:0:2:0";
nvidiaBusId = "PCI:1:0:0";
};
};
environment.sessionVariables = {
GBM_BACKEND = "nvidia-drm";
LIBVA_DRIVER_NAME = "nvidia";
NVD_BACKEND = "direct";
XDG_SESSION_TYPE = "wayland";
__GLX_VENDOR_LIBRARY_NAME = "nvidia";
};
}

8
hosts/enka/password.orhan.age
View file

@ -1,8 +0,0 @@
age-encryption.org/v1
-> ssh-ed25519 CzqbPQ S+qzZKEm8R8tBrEzy51XyuGDgcJF7TTswPEIxQdCli0
/Cfi+/E78lT5V45L7DmWgdne+51tx1s6WzGJxqDRrzM
-> ssh-ed25519 f5VzMA 66MxeFz0QxNQ32nJJuM8wFPq6ilZC7k3D+WzDwsAxiQ
HwVYX8Na53eeuQUUiBC/EfyuE9LzeJhbwyD8oC2w1N8
--- 24UVWQQ8kg3+Eq0VdO/aFZ1C0ruKoe8bemv8rLMpXoY
U<>D:¬ÕÒƒvá Wñƒ‡IvßëÓMñ­gCÓ<
ƒÐê©F‘ŽLM<4C>äù3=Fd¾Z&äÚò¶$³6h”3É|Bë¥<fiÚ$£› rž¯öï*

BIN
hosts/enka/password.said.age
View file

Binary file not shown.

2
hosts/nine/default.nix
View file

@ -12,7 +12,7 @@
seven = sudoUser {
description = "Hungry Seven";
openssh.authorizedKeys.keys = [ keys.enka ];
openssh.authorizedKeys.keys = keys.admins;
hashedPasswordFile = config.secrets.sevenPassword.path;
};

4
keys.nix
View file

@ -1,13 +1,11 @@
let
keys = {
altk = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBVkWUQ6Z4OK539tore/R5wnueNPPaX532RUAld8UOCo said@altk";
cube = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINMkCJeHcD0SIOZ4HkyF6rqUmbvlKhSha3HWMZ0hbIjp rgb@cube";
disk = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItpYQ3Pz6zFifKXvFX7xAC8aby9RW/m5PkW8T9SOee4 floppy@disk";
enka = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBVkWUQ6Z4OK539tore/R5wnueNPPaX532RUAld8UOCo said@enka";
pala = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBVkWUQ6Z4OK539tore/R5wnueNPPaX532RUAld8UOCo said@pala";
nine = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILJDqnItmvXZMTSwzbalr+9jzS4kSJm5PWEpI8GOpebF seven@nine";
};
in keys // {
admins = with keys; [ altk enka pala ];
admins = with keys; [ pala ];
all = builtins.attrValues keys;
}

9
secrets.nix
View file

@ -1,8 +1,4 @@
with import ./keys.nix; {
# altk
"hosts/altk/id.age".publicKeys = admins;
"hosts/altk/password.said.age".publicKeys = admins;
# cube
"hosts/cube/id.age".publicKeys = [ cube ] ++ admins;
"hosts/cube/password.rgb.age".publicKeys = [ cube ] ++ admins;
@ -25,11 +21,6 @@ with import ./keys.nix; {
"hosts/disk/mail/password.plain.age".publicKeys = all;
"hosts/disk/mail/password.hash.age".publicKeys = [ disk nine ] ++ admins;
# enka
"hosts/enka/id.age".publicKeys = admins;
"hosts/enka/password.orhan.age".publicKeys = admins;
"hosts/enka/password.said.age".publicKeys = admins;
# nine
"hosts/nine/id.age".publicKeys = [ nine ] ++ admins;
"hosts/nine/password.seven.age".publicKeys = [ nine ] ++ admins;