add work config

parts/hosts/default.nix

@@ -75,5 +75,15 @@ in {
         ../modules/devenv.nix
       ];
     };
+    work = mkSystem {
+      hostname = "work";
+      username = "nickolaj";
+      modules = [
+        ../modules/required.nix
+        ../modules/shell.nix
+        ../modules/graphical.nix
+        ../modules/devenv.nix
+      ];
+    };
   };
 }

parts/hosts/work/disk-configuration.nix

@@ -0,0 +1,62 @@
+_: {
+  disko.devices = {
+    disk = {
+      main = {
+        device = "/dev/disk/by-id/ata-SanDisk_SDSSDXPS240G_153251401377";
+        type = "disk";
+        content = {
+          type = "gpt";
+          partitions = {
+            boot = {
+              name = "boot";
+              size = "1M";
+              type = "EF02";
+            };
+
+            ESP = {
+              size = "512M";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = ["defaults"];
+              };
+            };
+            luks = {
+              size = "100%";
+              content = {
+                type = "luks";
+                name = "crypted";
+                # Copied by deploy script, otherwise it will prompt for password
+                passwordFile = "/luks-password";
+                settings = {
+                  allowDiscards = true;
+                  bypassWorkqueues = true;
+                };
+                content = {
+                  type = "btrfs";
+                  extraArgs = ["-f"];
+                  subvolumes = {
+                    "@" = {
+                      mountpoint = "/";
+                      mountOptions = ["compress=zstd" "noatime"];
+                    };
+                    "@nix" = {
+                      mountpoint = "/nix";
+                      mountOptions = ["compress=zstd" "noatime"];
+                    };
+                    "@home" = {
+                      mountpoint = "/home";
+                      mountOptions = ["compress=zstd" "noatime"];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}

parts/hosts/work/nvidia.nix

@@ -0,0 +1,12 @@
+_: {
+  hardware.graphics = {
+    enable = true;
+  };
+  services.xserver.videoDrivers = ["nvidia"];
+  hardware.nvidia = {
+    open = true;
+    modesetting.enable = true;
+    powerManagement.enable = true;
+    nvidiaSettings = true;
+  };
+}

secrets/hosts/work/.rekey/9b761b7510ff07a6a520c2d55313629c-hashed-user-password.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 UQ3p6w /yVmAjLMBdkIfYSgms6cEhuuPcZcz/JRN77R76P2rC0
+Kqb0zKM7eJQHWmzW1WWQWrUGPo3n/MrvYsOpFnF8rV4
+-> 6-grease +_M?p) |
+kiOsWVqE
+--- M+2OJRF6l9Z7ewGUpQlcNnSzmy9wUyL33+rM8PXEUr4
+¦&°_ ‡#ÉÒš}(++–Ud6aðßñ)ŸD¦t’Š~\ç¦|}øî¢+ÌÑÉy¿‡èOÝò„ôÈt<C388><14>M¹Àn÷4téÿº™‘ë)…,ÛhÉ…øY’%L¢ˆ@€×û<ÐÀSø±Ø<C2B1>

secrets/hosts/work/id_ed25519.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> X25519 WlV00t6y5gzAQB+cdMy2fmTLo3tqNbEiCOJWjoQSkyw
+viZKX1xZvslqRKLuRAINOeT/KD4JdDcGXVGbLPej0Co
+-> piv-p256 q3LNVw A6KDzYBqOrvAtypk7670h8uoE/Zm5oXyC8Gs2hG2ZRUV
+L9/dhNUo5xkaZnSnXcgvjZFvzvxsrYFAgmwDPby6GPo
+-> ~#-grease
+TNWgHQD98J4xyQeizV1YVWW5rKImx7SfvqwODtXCTvdqm5/96alWhhrqQE+MD0DS
+ucPcrsbX8EZOdBJZd4J1d54peYoXklVFUJAkew
+--- MaaRl3MCla/w9yVonLLuBc5NKdGBmtnkWVBoNKngzSA
+[¬Åh@<40>äýša<C5A1>F’}W ù^©ô²ÊUÙqlÑ<S<>hSâ"QšÔÐqTd¿HýIiNPÍ”÷‡ßœ+½
Á'
«Ú+2šnö“LÁL÷à ¢CaÓ
*0×(ÀÀ1ƒ¨KYìÛd8ݘÜÀúñ9Dêú)¶äÛ9èÍ‹:däó95©;@ƒ„ˆŒã¨n]Hî*Ý®'™_<ÜC­<43>ãžþÛÛ+úö#µu` ò®•ÇÉ xa€s˜[O¥Õ9픸T¸‚.½{<12>Ä)îü«¬@y0¸°ÓÈãÏ?ÿç8!òóEd£
<0A>ˆ!9kÎp®î$ÐO¹/}qö³oyZ J¥AÙ¹d`<60>ö¸Qi—š¢mÙŸPû!ÆIÖÇ ÂôLˬٴ{þ#¨ºªI‚LçHOGtŠÛÐœ–Få×TõÛ"ò¢µíÄ‹o~(tlZ F¿Ù®HeñΗ”£¨«'ÝzzY)ŒY¤i‰”Ñ<8àÿ¬‹ä·æ§X<µì\Þ]õ»$<15>cJŒLÙ1î7an=÷¶0t<30>zý€©M	¥-
ø×Â5½W•›ÎÇ

secrets/hosts/work/id_ed25519.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHdjLD+8XcVRwqKwnT44/pFfd8ohhLk6FxwYsihDxYtO nij@ao.dk