diff --git a/hosts/default.nix b/hosts/default.nix index ff6418d..ab96dc6 100644 --- a/hosts/default.nix +++ b/hosts/default.nix @@ -29,6 +29,7 @@ systems = { lungmen = "x86_64-linux"; tkaronto = "x86_64-linux"; + wolumonde = "x86_64-linux"; }; in lib.mapAttrs mkSystem systems diff --git a/hosts/wolumonde/default.nix b/hosts/wolumonde/default.nix new file mode 100644 index 0000000..e2de7c7 --- /dev/null +++ b/hosts/wolumonde/default.nix @@ -0,0 +1,17 @@ +{ inputs, ... }: { + imports = [ + ./hardware-configuration.nix + ]; + + boot.cleanTmpDir = true; + zramSwap.enable = true; + + services.openssh = { + enable = true; + passwordAuthentication = false; + }; + + users.users.root.openssh.authorizedKeys.keys = [ + (builtins.readFile "${inputs.self}/secrets/ssh-key.pub") + ]; +} \ No newline at end of file diff --git a/hosts/wolumonde/hardware-configuration.nix b/hosts/wolumonde/hardware-configuration.nix new file mode 100644 index 0000000..3542c25 --- /dev/null +++ b/hosts/wolumonde/hardware-configuration.nix @@ -0,0 +1,8 @@ +{ modulesPath, ... }: +{ + imports = [ (modulesPath + "/profiles/qemu-guest.nix") ]; + boot.loader.grub.device = "/dev/sda"; + boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" ]; + boot.initrd.kernelModules = [ "nvme" ]; + fileSystems."/" = { device = "/dev/sda1"; fsType = "ext4"; }; +} \ No newline at end of file diff --git a/secrets/.gitattributes b/secrets/.gitattributes index ff69eb2..2eacaa7 100644 --- a/secrets/.gitattributes +++ b/secrets/.gitattributes @@ -1,3 +1,4 @@ * filter=git-crypt diff=git-crypt +ssh-key.pub !filter !diff .gitattributes !filter !diff README.md !filter !diff diff --git a/secrets/ssh-key.pub b/secrets/ssh-key.pub new file mode 100644 index 0000000..596e647 --- /dev/null +++ b/secrets/ssh-key.pub @@ -0,0 +1 @@ +ssh-rsa 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 openpgp:0xDE3C8FCD