aboutsummaryrefslogtreecommitdiff
path: root/machines/bree.nix
diff options
context:
space:
mode:
Diffstat (limited to 'machines/bree.nix')
-rw-r--r--machines/bree.nix37
1 files changed, 37 insertions, 0 deletions
diff --git a/machines/bree.nix b/machines/bree.nix
new file mode 100644
index 0000000..e4cd443
--- /dev/null
+++ b/machines/bree.nix
@@ -0,0 +1,37 @@
+{ lib, config, ... }:
+{
+ imports = [
+ ../profiles/cgroups.nix
+ ../profiles/defaults.nix
+ ../profiles/disk/basic-vm.nix
+ ../profiles/hardware/synology-vm.nix
+ ../profiles/home-manager.nix
+ ../profiles/server.nix
+ ../profiles/users/fcuny.nix
+ ../profiles/wireguard.nix
+ ];
+
+ networking.hostName = "bree";
+ networking.useDHCP = lib.mkDefault true;
+ systemd.network.wait-online.anyInterface = lib.mkDefault config.networking.useDHCP;
+
+ age.secrets.disk-unlock-key.file = ../secrets/bree/disk-unlock-key.age;
+ age.secrets.disk-passphrase.file = ../secrets/bree/disk-passphrase.age;
+
+ services.remoteDiskUnlock = {
+ enable = true;
+ hosts = [
+ "192.168.1.114"
+ ];
+ sshKeyPath = config.age.secrets.disk-unlock-key.path;
+ passphrasePath = config.age.secrets.disk-passphrase.path;
+ };
+
+ system.stateVersion = "23.11"; # Did you read the comment?
+
+ home-manager.users.fcuny = {
+ imports = [
+ ../home/profiles/minimal.nix
+ ];
+ };
+}