path: root/machines/bree.nix

{
  adminUser,
  lib,
  config,
  ...
}:
{
  imports = [
    ../profiles/core-metrics.nix
    ../profiles/defaults.nix
    ../profiles/disk/basic-vm.nix
    ../profiles/hardware/synology-vm.nix
    ../profiles/home-manager.nix
    ../profiles/server.nix
    ../profiles/users/admin-user.nix
    ../profiles/users/home-manager.nix
    ../profiles/wireguard.nix
  ];

  networking.hostName = "bree";
  networking.useDHCP = lib.mkDefault true;
  systemd.network.wait-online.anyInterface = lib.mkDefault config.networking.useDHCP;

  wgPublicKey = "bJZyQoemudGJQox8Iegebm23c4BNVIxRPy1kmI2l904=";

  age.secrets = {
    wireguard.file = ../secrets/bree/wireguard.age;
    disk-unlock-key.file = ../secrets/bree/disk-unlock-key.age;
    disk-passphrase.file = ../secrets/bree/disk-passphrase.age;
  };

  services.remoteDiskUnlock = {
    enable = true;
    hosts = [
      "192.168.1.114"
    ];
    sshKeyPath = config.age.secrets.disk-unlock-key.path;
    passphrasePath = config.age.secrets.disk-passphrase.path;
  };

  system.stateVersion = "23.11"; # Did you read the comment?

  home-manager.users.${adminUser.name} = {
    home.homeDirectory = "/home/${adminUser.name}";
    imports = [
      ../home/profiles/minimal.nix
    ];
  };
}