aboutsummaryrefslogtreecommitdiff
path: root/machines/nixos/x86_64-linux/bree.nix
blob: f91bf4f5d9c5cdb6fc975965b535beae3861b5e0 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
{
  lib,
  adminUser,
  config,
  ...
}:
{
  imports = [
    ../../../profiles/cgroups.nix
    ../../../profiles/defaults.nix
    ../../../profiles/disk/basic-vm.nix
    ../../../profiles/hardware/synology-vm.nix
    ../../../profiles/home-manager.nix
    ../../../profiles/server.nix
    ../../../profiles/wireguard.nix
  ];

  networking.hostName = "bree";
  networking.useDHCP = lib.mkDefault true;
  systemd.network.wait-online.anyInterface = lib.mkDefault config.networking.useDHCP;

  home-manager = {
    users.${adminUser.name} = {
      imports = [
        ../../../home/profiles/minimal.nix
      ];
    };
  };

  age.secrets.disk-unlock-key.file = ../../../secrets/bree/disk-unlock-key.age;
  age.secrets.disk-passphrase.file = ../../../secrets/bree/disk-passphrase.age;

  services.remoteDiskUnlock = {
    enable = true;
    hosts = [
      "192.168.1.114"
    ];
    sshKeyPath = config.age.secrets.disk-unlock-key.path;
    passphrasePath = config.age.secrets.disk-passphrase.path;
  };

  system.stateVersion = "23.11"; # Did you read the comment?
}