Add some parts of the nine host

hosts/nine/default.nix

@@ -0,0 +1,60 @@
+lib: lib.nixosSystem ({ config, keys, lib, ... }: let
+  inherit (lib) collect remove;
+in {
+  imports = collect ./. |> remove ./default.nix;
+
+  nixpkgs.hostPlatform = "aarch64-linux";
+
+  system.stateVersion  = "23.11";
+  home-manager.sharedModules = [{
+    home.stateVersion = "23.11";
+  }];
+
+  networking.hostName = "nine";
+
+  secrets.id.file             = ./id.age;
+  services.openssh.hostKeys = [{
+    type = "ed25519";
+    path = config.secrets.id.path;
+  }];
+
+  secrets.sevenPassword.file  = ./password.seven.age;
+  users.users                 = {
+    root.hashedPasswordFile = config.secrets.sevenPassword.path;
+
+    seven = {
+      description                 = "Hungry Seven";
+      openssh.authorizedKeys.keys = keys.admins;
+      hashedPasswordFile          = config.secrets.sevenPassword.path;
+      extraGroups                 = [ "wheel" ];
+    };
+
+    backup = {
+      description                 = "Backup";
+      openssh.authorizedKeys.keys = keys.all;
+      hashedPasswordFile          = config.secrets.sevenPassword.path;
+    };
+  };
+
+  networking = {
+    ipv4 = "152.53.2.105";
+    ipv6 = "2a0a:4cc0::12d9";
+
+    domain = "rgbcu.be";
+
+    defaultGateway  = "152.53.0.1";
+    defaultGateway6 = "fe80::1";
+
+    interfaces.enp4s0 = {
+      ipv4.addresses = [{
+        address      = config.networking.ipv4;
+        prefixLength = 22;
+      }];
+
+      ipv6.addresses = [{
+        address      = config.networking.ipv6;
+        prefixLength = 64;
+      }];
+    };
+  };
+})

hosts/nine/hardware.nix

@@ -0,0 +1,31 @@
+{ config, lib, modulesPath, ... }: let
+  inherit (lib) enabled;
+in {
+  imports = [(modulesPath + "/profiles/qemu-guest.nix")];
+
+  boot.loader.grub = enabled {
+    efiSupport            = true;
+    efiInstallAsRemovable = true;
+    device                = "nodev";
+  };
+
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "xen_blkfront"
+  ];
+
+  boot.initrd.kernelModules = [ "nvme" ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-label/root";
+    fsType = "ext4";
+  };
+
+  fileSystems.${config.boot.loader.efi.efiSysMountPoint} = {
+    device = "/dev/disk/by-label/boot";
+    fsType = "vfat";
+  };
+
+  zramSwap = enabled;
+}

hosts/nine/password.seven.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 dASlBQ gh2TXagLOCoZF72LeTEpCfa6y5bltnN+JlRjhxs/lA4
+QOi6kenko+A4MB5aLBbyOXjY8RmEpOHFUM24H3Pgnaw
+-> ssh-ed25519 CzqbPQ iP9T7X/mVGAZyj6xkMjuAkO4dDUsMFhQB29iTatmonY
+YRn1gcHQvPyzGl79UF50C4OXPaeI4xD5BkkdjJCxLFs
+--- 7+SPAGy57E4RsUE6Wsu8u3hbF9nnyJAysMQFlY3izIY
+‹Ö£Í8ùÆ$‹Ñb-‚GSsYÇ”yUùn뉘ûG*üDñ‘)€‡›ä¨×oç8°ïóÂi=¿*«LœËz‹»Â1“àûlqõè¦8È5!‰-„µ\U9Ùק‹çŸí^‘