Initial tard host config

.gitignore

@@ -17,6 +17,8 @@
 
 !hosts/enka/
 
+!hosts/tard/
+
 !modules/
 !modules/hyprland/
 !modules/nushell/

hosts/tard/default.nix

@@ -0,0 +1,50 @@
+{ config, lib, keys, ... }: with lib; merge
+
+(systemConfiguration {
+  system.stateVersion  = "23.11";
+  nixpkgs.hostPlatform = "x86_64-linux";
+
+  secrets.id.file            = ./id.age;
+  secrets.tailPassword.file  = ./password.tail.age;
+
+  users.users = {
+    root.hashedPasswordFile = config.secrets.tailPassword.path;
+
+    tail = sudoUser {
+      description                 = "Tail";
+      openssh.authorizedKeys.keys = [ keys.enka ];
+      hashedPasswordFile          = config.secrets.tailPassword.path;
+    };
+  };
+
+  services.openssh.hostKeys = [{
+    type = "ed25519";
+    path = config.secrets.id.path;
+  }];
+
+  networking = {
+    ipv4 = "";
+    ipv6 = "";
+
+    domain = "rgbcu.be";
+
+    defaultGateway  = "";
+    defaultGateway6 = "";
+
+    interfaces.XXX = {
+      ipv4.addresses = [{
+        address      = config.networking.ipv4;
+        prefixLength = 25;
+      }];
+
+      ipv6.addresses = [{
+        address      = config.networking.ipv6;
+        prefixLength = 64;
+      }];
+    };
+  };
+})
+
+(homeConfiguration {
+  home.stateVersion = "23.11";
+})

hosts/tard/id.age

@@ -0,0 +1,19 @@
+age-encryption.org/v1
+-> ssh-ed25519 V6IHIQ 91DIbwI9swXgY2lHL3mWfc8gsImBcKjO0Xzd/zXRzyc
+0cOnu+aAh2sC1v0O2yhQ2YE6HUrJdQ96E6JKiipt9qM
+-> ssh-rsa jPaU3Q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+--- 8WAvkROEgqHn6kw2L0WbiVUNKh16tLZVpfKdkYXTrpE
+1ĺÂËťkz“=Ű‹pő<L‰źÜ`AŇńX¤\ŰkÍŘ,ýŞ<0C>Ýpöc)×<>śă“›#xžŐî“Ŕ‘÷ÁC±źłkľBV…ČľSĘ{W™ý†^
oö˙ˇ
+™áW1Đźn† sŻţĐ…8±
Éy#[”“őú9
+ý 
L–jń§ÍÇíĆQý0h`ufÍ´đEĽď…O®ĚR8{X-
+ĚKDťźNÔJ™Ľ\ŁÄZôvwÄĂÜsâŐ=ĚŠSŠ
ř	6~,đÄ‹
r•ŕYqéŹŮ.fµúk§„DcđłÄdšKdy'??ţl÷b<C3B7>ę-ĽŰFřÝ+ë±g¨é˨ë?‹žT)Ş
KĺHă‹-8`D<>ë…	٧mĆŠLi5ů6˛aU@ŹŘ^ň4¸—<C2B8>:y0şqŃ^P’‚›Ź/ŢYe% )őřćźČQ=©V˛ĺh˘“őěÇp¬3̱ľň14•˝Ţč7űÇŐtŮ
+ľ.1ůýĂ/´zžłÇD1«*”úRŕ¤_6<>sD®7U<37><55>°1vÂbÉ …%°…L˝<LÁ\›l"˘”hEÔ.ľb

hosts/tard/password.tail.age

@@ -0,0 +1,15 @@
+age-encryption.org/v1
+-> ssh-ed25519 V6IHIQ WPoRXyEXeNNfsjWnf1P0GdxY0tI2e7CXb5jX7CFJ6R0
+SFoPv2ciqczQ9nObpNprFhHZbatDUKaReSZYxtFhvH8
+-> ssh-rsa jPaU3Q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+--- Wd38yO4ui/BAnqkQKdmW+/vCrxNfrm9JiGHj7L3aZM4
+NÕ¶¸‚¨†]º8EÐÏ‘œÈ,‡AOUÿùNOßZãD½[è×n­•Ç›/}k³­®“<C2AE>¯».Ô5Њ]>‡ýÍ|Kg-<2D>ÓY§ðt‰ŠùÁïcŒ±\søéÆnûØ7DöGPï

keys.nix

@@ -2,4 +2,5 @@
   cube = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINMkCJeHcD0SIOZ4HkyF6rqUmbvlKhSha3HWMZ0hbIjp rgb@cube";
   disk = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItpYQ3Pz6zFifKXvFX7xAC8aby9RW/m5PkW8T9SOee4 floppy@disk";
   enka = "ssh-rsa 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 said@enka";
+  tard = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDzvLg5IvqGzqdiNUOsRLPdYC56wXXSYNo9QNlXwaCKw tail@tard";
 }

modules/ssh/default.nix

@@ -40,10 +40,11 @@
         port     = 2222;
       };
 
-      tailtard = {
+      # tard = {
-        hostname = "164.92.186.28";
+      #   hostname = self.tard.networking.ipv4;
-        user     = "root";
+      #   user     = "tail";
-      };
+      #   port     = 2222;
+      # };
 
       robotic = {
         hostname = "86.105.252.189";

secrets.nix

@@ -31,6 +31,10 @@ in with keys; {
   "hosts/enka/password.orhan.age".publicKeys = [ enka ];
   "hosts/enka/password.said.age".publicKeys  = [ enka ];
 
+  ### tard
+  "hosts/tard/id.age".publicKeys            = [ tard enka ];
+  "hosts/tard/password.tail.age".publicKeys = [ tard enka ];
+
   ### shared
   "modules/ssh/config.age".publicKeys  = all;
 }