+1

hosts/default.nix

reviewed

··· 29 29 systems = { 30 30 lungmen = "x86_64-linux"; 31 31 tkaronto = "x86_64-linux"; 32 32 + wolumonde = "x86_64-linux"; 32 33 }; 33 34 in 34 35 lib.mapAttrs mkSystem systems

+17

hosts/wolumonde/default.nix

reviewed

··· 1 1 + { inputs, ... }: { 2 2 + imports = [ 3 3 + ./hardware-configuration.nix 4 4 + ]; 5 5 + 6 6 + boot.cleanTmpDir = true; 7 7 + zramSwap.enable = true; 8 8 + 9 9 + services.openssh = { 10 10 + enable = true; 11 11 + passwordAuthentication = false; 12 12 + }; 13 13 + 14 14 + users.users.root.openssh.authorizedKeys.keys = [ 15 15 + (builtins.readFile "${inputs.self}/secrets/ssh-key.pub") 16 16 + ]; 17 17 + }

+8

hosts/wolumonde/hardware-configuration.nix

reviewed

··· 1 1 + { modulesPath, ... }: 2 2 + { 3 3 + imports = [ (modulesPath + "/profiles/qemu-guest.nix") ]; 4 4 + boot.loader.grub.device = "/dev/sda"; 5 5 + boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" ]; 6 6 + boot.initrd.kernelModules = [ "nvme" ]; 7 7 + fileSystems."/" = { device = "/dev/sda1"; fsType = "ext4"; }; 8 8 + }

+1

secrets/.gitattributes

reviewed

··· 1 1 * filter=git-crypt diff=git-crypt 2 2 + ssh-key.pub !filter !diff 2 3 .gitattributes !filter !diff 3 4 README.md !filter !diff

+1

secrets/ssh-key.pub

reviewed

··· 1 1 + ssh-rsa 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 openpgp:0xDE3C8FCD