From 765cc3ca49434cdd4b1eb3965a818dfa52289b20 Mon Sep 17 00:00:00 2001
From: RGBCube <git@rgbcu.be>
Date: Fri, 28 Feb 2025 00:38:07 +0300
Subject: [PATCH] chore: decomission cube host

---
 .gitignore                       |   2 -
 hosts/cube/default.nix           |  72 -------------------------------
 hosts/cube/hardware.nix          |  25 -----------
 hosts/cube/id.age                | Bin 721 -> 0 bytes
 hosts/cube/password.rgb.age      |   7 ---
 keys.nix                         |   1 -
 modules/common/ssh/default.nix   |   6 ---
 modules/linux/restic/default.nix |   2 +-
 secrets.nix                      |   6 +--
 9 files changed, 2 insertions(+), 119 deletions(-)
 delete mode 100644 hosts/cube/default.nix
 delete mode 100644 hosts/cube/hardware.nix
 delete mode 100644 hosts/cube/id.age
 delete mode 100644 hosts/cube/password.rgb.age

diff --git a/.gitignore b/.gitignore
index 503770d..d6b1677 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,8 +15,6 @@
 !hosts/best/nextcloud/
 !hosts/best/nextcloud/*.gif
 
-!hosts/cube/
-
 !hosts/disk/
 
 !hosts/nine/
diff --git a/hosts/cube/default.nix b/hosts/cube/default.nix
deleted file mode 100644
index 421fae0..0000000
--- a/hosts/cube/default.nix
+++ /dev/null
@@ -1,72 +0,0 @@
-lib: lib.nixosSystem ({ config, keys, lib, ... }: let
-  inherit (lib) collectNix remove;
-in {
-  imports = collectNix ./. |> remove ./default.nix;
-
-  secrets.id.file           = ./id.age;
-  services.openssh.hostKeys = [{
-    type = "ed25519";
-    path = config.secrets.id.path;
-  }];
-
-  services.openssh.banner = ''
-     _______________________________________
-    / If God doesn't destroy San Francisco, \
-    | He should apologize to Sodom and      |
-    \ Gomorrah.                             /
-     ---------------------------------------
-            \   ^__^
-             \  (oo)\_______
-                (__)\       )\/\
-                    ||----w |
-                    ||     ||
-  '';
-
-  secrets.rgbPassword.file = ./password.rgb.age;
-  users.users              = {
-    root.hashedPasswordFile = config.secrets.rgbPassword.path;
-
-    rgb = {
-      description                 = "RGB";
-      openssh.authorizedKeys.keys = keys.admins;
-      hashedPasswordFile          = config.secrets.rgbPassword.path;
-      isNormalUser                = true;
-      extraGroups                 = [ "wheel" ];
-    };
-
-    backup = {
-      description                 = "Backup";
-      openssh.authorizedKeys.keys = keys.all;
-      hashedPasswordFile          = config.secrets.rgbPassword.path;
-      isNormalUser                = true;
-    };
-  };
-
-  home-manager.users = {
-    root   = {};
-    rgb    = {};
-    backup = {};
-  };
-
-  networking = let
-    interface = "ens18";
-  in {
-    hostName = "cube";
-
-    ipv4.address = "5.255.78.70";
-    ipv4.prefixLength = 24;
-
-    domain = "rgbcu.be";
-
-    defaultGateway = {
-      inherit interface;
-
-      address = "5.255.78.1";
-    };
-  };
-
-  system.stateVersion        = "23.05";
-  home-manager.sharedModules = [{
-    home.stateVersion = "23.11";
-  }];
-})
diff --git a/hosts/cube/hardware.nix b/hosts/cube/hardware.nix
deleted file mode 100644
index 89be440..0000000
--- a/hosts/cube/hardware.nix
+++ /dev/null
@@ -1,25 +0,0 @@
-{ lib, modulesPath, ... }: let
-  inherit (lib) enabled;
-in {
-  imports = [(modulesPath + "/profiles/qemu-guest.nix")];
-
-  boot.loader.grub = enabled {
-    device = "/dev/vda";
-  };
-
-  boot.initrd.availableKernelModules = [
-    "ata_piix"
-    "sr_mod"
-    "uhci_hcd"
-    "virtio_blk"
-    "virtio_pci"
-  ];
-
-  fileSystems."/" = {
-    device  = "/dev/disk/by-label/root";
-    fsType  = "ext4";
-    options = [ "noatime" ];
-  };
-
-  nixpkgs.hostPlatform = "x86_64-linux";
-}
diff --git a/hosts/cube/id.age b/hosts/cube/id.age
deleted file mode 100644
index 0d1cc974743f49c0d7d1b08e73011f109f5642aa..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 721
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCUFE{ZY;DOYgMEGcv?
zHAo9e%1<^kPW3FS$~Ma|&ht<6F$k#2PxVSkPL9Y(i!jY{apW=&i*hs0aB{42v+(gR
zPAv=Za?T0JDv3-A2@m!x3M(%tiZn1O3J5dtPe!-RxvDTJAW)&8!ZoPaz&N0)*wUjg
zBQZEU!z;tJJk_W?)hj!v*vve)+|NBKtvof{HJdBQ*}yfe%)BT)JF%j`H8(rk%`-^9
zAk@jgu%aT+s5Go9%qXigInd24znDu`S63mcG~d!WD91OvvM?;z+ry$XJGs!*Cn_zs
z+&ec<Tf4L<FR&uR$gRTN%z~@+qH+B16XM6uG0d8EQ%x*C^)~x!`&6x;+}l4+F7B@E
z(kxL)&10Cs_3;g(PKwf*(&Q=2Zu99sJ#EX%;3y_x%x8G^%C(yBQ`fh%_FcXwJNc`z
zW#vLc>r4H6a^3}{b4g9s=lJ!}Va>Pyvllu>%vb&8`)|3of3Uqp#0jS|!7ZPvEDyZ5
zD!DY(u;%41iQaDIX0|s++YiglHfI&i)jRN$uOY-aZAa_8Z@cxl81h-ZI|b|(=(UkC
z6TIeqaL2wwp;LWo7wZOc_U~Eak$*oz%-nnFQ?m=xFZUVTwb;2@G*nyV=uLz9{EWWh
zHKC=U>mv3(p5mJSc+!sl%FYu+ldKPD*%q4ZTEwLE^xDHCi^YPJDiX^s@ZOyEiD9+%
z#zRjz<`oI;`59&(!jt~)mLX5Fn4U`OtA2%3rOPG5rkX5xF}Ly2j}0A+`z{%j%W1VW
z{;q!SUlMurTzQ1((O&(io{#afbZo+sSFUxxcj5K}-Vag^ue-jByga{my7`I4eLg%!
zG4C(Fk`#U&{OV}0!p=SSo>~V^<b0{ekhQ7y?GHiY{i+(W#i}n7HdMBA=+B<C@9?EX
IZr$PA0d#sU&Hw-a

diff --git a/hosts/cube/password.rgb.age b/hosts/cube/password.rgb.age
deleted file mode 100644
index 9a13973..0000000
--- a/hosts/cube/password.rgb.age
+++ /dev/null
@@ -1,7 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 +rZ0Tw BqDKOhzKwsfB9r6GklGp+S3mXx+DdX09g41NXnacjl8
-70wY8mCl2g8AGtMYpav5NPF5g5u+RNGoR6JoET40FN4
--> ssh-ed25519 CzqbPQ KZzxhYghah9YxLv0Ne+eEMGArYme4QV4iKk9NIVt4kM
-WSSR9XCPC/EmPZeh6xvtPTLy6f4fqLl+Xsh6WBw9htM
---- JGLEyZKYrGTH9nXuuxIF3OYpyRZyGmEVAdyju4TKRUo
-1�����EK.�A���3=������D!�;%{HG� ���G��:F��2<s��dv&���GV<�5����wC�3�j*'(`V�fW��U]�vޏ�$۴
\ No newline at end of file
diff --git a/keys.nix b/keys.nix
index f8099d8..e636fd1 100644
--- a/keys.nix
+++ b/keys.nix
@@ -1,7 +1,6 @@
 let
   keys = {
     best = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBUsMV591/9VqzjBiMqdxJId0C7PlZTIXQByHEILWMwc the@best";
-    cube = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINMkCJeHcD0SIOZ4HkyF6rqUmbvlKhSha3HWMZ0hbIjp rgb@cube";
     disk = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItpYQ3Pz6zFifKXvFX7xAC8aby9RW/m5PkW8T9SOee4 floppy@disk";
     pala = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBVkWUQ6Z4OK539tore/R5wnueNPPaX532RUAld8UOCo pala@pala";
     nine = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILJDqnItmvXZMTSwzbalr+9jzS4kSJm5PWEpI8GOpebF seven@nine";
diff --git a/modules/common/ssh/default.nix b/modules/common/ssh/default.nix
index feda7ae..dbdd035 100644
--- a/modules/common/ssh/default.nix
+++ b/modules/common/ssh/default.nix
@@ -40,12 +40,6 @@ in {
           port     = 2222;
         };
 
-        cube = {
-          hostname = self.cube.networking.ipv4.address;
-          user     = "rgb";
-          port     = 2222;
-        };
-
         disk = {
           hostname = self.disk.networking.ipv4.address;
           user     = "floppy";
diff --git a/modules/linux/restic/default.nix b/modules/linux/restic/default.nix
index 69aeea3..555003d 100644
--- a/modules/linux/restic/default.nix
+++ b/modules/linux/restic/default.nix
@@ -1,7 +1,7 @@
 { config, lib, ... }: let
   inherit (lib) genAttrs mkConst mkIf remove;
 in{
-  options.services.restic.hosts = mkConst <| remove config.networking.hostName [ "cube" "disk" "nine" "best" ];
+  options.services.restic.hosts = mkConst <| remove config.networking.hostName [ "disk" "nine" "best" ];
 
   config.secrets.resticPassword.file = mkIf config.isServer ./password.age;
 
diff --git a/secrets.nix b/secrets.nix
index 9c17f65..ba7218c 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -1,5 +1,5 @@
 let
-  inherit (import ./keys.nix) best cube disk nine admins all;
+  inherit (import ./keys.nix) best disk nine admins all;
 in {
   # best
   "hosts/best/id.age".publicKeys            = [ best ] ++ admins;
@@ -20,10 +20,6 @@ in {
 
   "hosts/best/nextcloud/password.age".publicKeys      = [ best ] ++ admins;
 
-  # cube
-  "hosts/cube/id.age".publicKeys                      = [ cube ] ++ admins;
-  "hosts/cube/password.rgb.age".publicKeys            = [ cube ] ++ admins;
-
   # disk
   "hosts/disk/id.age".publicKeys              = [ disk ] ++ admins;
   "hosts/disk/password.floppy.age".publicKeys = [ disk ] ++ admins;