From 2b7b63a18c9e16a40a53593627c5f3614259d5c3 Mon Sep 17 00:00:00 2001 From: Nickolaj Jepsen Date: Thu, 20 Feb 2025 14:09:12 +0100 Subject: [PATCH] add work config --- parts/hosts/default.nix | 10 +++ parts/hosts/work/disk-configuration.nix | 62 ++++++++++++++++++ parts/hosts/work/nvidia.nix | 12 ++++ ...c90379f6eb88fa75b454820666b-ssh-key-ao.age | Bin 0 -> 2194 bytes ...2e7384d7f3072e2e35449d6ef6b-k8s-ao-dev.age | Bin 0 -> 2140 bytes ...07ba9d593ffa18993c45945c-hosts-private.age | Bin 0 -> 334 bytes ...a3e2049dc67ad5035f9e8a0582fe32-ssh-key.age | Bin 0 -> 729 bytes ...6a520c2d55313629c-hashed-user-password.age | 7 ++ ...6625c60cae3ee8c43902eb6ada-k8s-ao-prod.age | Bin 0 -> 2054 bytes secrets/hosts/work/id_ed25519.age | 10 +++ secrets/hosts/work/id_ed25519.pub | 1 + 11 files changed, 102 insertions(+) create mode 100644 parts/hosts/work/disk-configuration.nix create mode 100644 parts/hosts/work/nvidia.nix create mode 100644 secrets/hosts/work/.rekey/00e7cc90379f6eb88fa75b454820666b-ssh-key-ao.age create mode 100644 secrets/hosts/work/.rekey/343c52e7384d7f3072e2e35449d6ef6b-k8s-ao-dev.age create mode 100644 secrets/hosts/work/.rekey/6a96e98b07ba9d593ffa18993c45945c-hosts-private.age create mode 100644 secrets/hosts/work/.rekey/74a3e2049dc67ad5035f9e8a0582fe32-ssh-key.age create mode 100644 secrets/hosts/work/.rekey/9b761b7510ff07a6a520c2d55313629c-hashed-user-password.age create mode 100644 secrets/hosts/work/.rekey/f37a226625c60cae3ee8c43902eb6ada-k8s-ao-prod.age create mode 100644 secrets/hosts/work/id_ed25519.age create mode 100644 secrets/hosts/work/id_ed25519.pub diff --git a/parts/hosts/default.nix b/parts/hosts/default.nix index 4cf5cb1..1d023c2 100644 --- a/parts/hosts/default.nix +++ b/parts/hosts/default.nix @@ -75,5 +75,15 @@ in { ../modules/devenv.nix ]; }; + work = mkSystem { + hostname = "work"; + username = "nickolaj"; + modules = [ + ../modules/required.nix + ../modules/shell.nix + ../modules/graphical.nix + ../modules/devenv.nix + ]; + }; }; } diff --git a/parts/hosts/work/disk-configuration.nix b/parts/hosts/work/disk-configuration.nix new file mode 100644 index 0000000..f5bc1d1 --- /dev/null +++ b/parts/hosts/work/disk-configuration.nix @@ -0,0 +1,62 @@ +_: { + disko.devices = { + disk = { + main = { + device = "/dev/disk/by-id/ata-SanDisk_SDSSDXPS240G_153251401377"; + type = "disk"; + content = { + type = "gpt"; + partitions = { + boot = { + name = "boot"; + size = "1M"; + type = "EF02"; + }; + + ESP = { + size = "512M"; + type = "EF00"; + content = { + type = "filesystem"; + format = "vfat"; + mountpoint = "/boot"; + mountOptions = ["defaults"]; + }; + }; + luks = { + size = "100%"; + content = { + type = "luks"; + name = "crypted"; + # Copied by deploy script, otherwise it will prompt for password + passwordFile = "/luks-password"; + settings = { + allowDiscards = true; + bypassWorkqueues = true; + }; + content = { + type = "btrfs"; + extraArgs = ["-f"]; + subvolumes = { + "@" = { + mountpoint = "/"; + mountOptions = ["compress=zstd" "noatime"]; + }; + "@nix" = { + mountpoint = "/nix"; + mountOptions = ["compress=zstd" "noatime"]; + }; + "@home" = { + mountpoint = "/home"; + mountOptions = ["compress=zstd" "noatime"]; + }; + }; + }; + }; + }; + }; + }; + }; + }; + }; +} diff --git a/parts/hosts/work/nvidia.nix b/parts/hosts/work/nvidia.nix new file mode 100644 index 0000000..0d4ef5e --- /dev/null +++ b/parts/hosts/work/nvidia.nix @@ -0,0 +1,12 @@ +_: { + hardware.graphics = { + enable = true; + }; + services.xserver.videoDrivers = ["nvidia"]; + hardware.nvidia = { + open = true; + modesetting.enable = true; + powerManagement.enable = true; + nvidiaSettings = true; + }; +} diff --git a/secrets/hosts/work/.rekey/00e7cc90379f6eb88fa75b454820666b-ssh-key-ao.age b/secrets/hosts/work/.rekey/00e7cc90379f6eb88fa75b454820666b-ssh-key-ao.age new file mode 100644 index 0000000000000000000000000000000000000000..6495d5093420dc09092a6ef80c1f912f51706f71 GIT binary patch literal 2194 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCR+4Kyw=D_1bd3^Phg zH;pg~4fn1HOxAY|O!rDL@G=Q?i}LVwEH!Y`4=l^G3~~2!H{mMGPu2G?wlFtMHFB@? z^b9M>OV`fNk2Ll(^{_0jO4IjpclNTh@DH|dF9+F{QB{{;5uux2l$uzasu1I>Q0=H- zQlpZoYond0pr&M`Xw4PqV`h+C7?xz3>}9H*7Lc115}IZd zVo>CmoZ{!4?dp{0Q(EDbXCAI!k`xtLn3Bt7VqjY2n&**knNnn&VdP$_ZS0eimE`E{ zQyQ9W>F=MRpJr+5lUW=Qk>=(Xp6|(}tE;P^omx<8=#`)Cp6`~G748%qQsQfw6y%p- zlAcspkZciPmSSq;otu>%WEsdcd(XSgVm-d=?mbY^?|kOYT762PvvB{`wZRomF`-Mt zF11Yg5w=_?ZsqAY8;(k<8*F<$b5#jZaP#?UGyK_4-NPL>6(W;8(#PCQXwn z-n&CbedYaUckMP$R*FnwZO_)bY`~|-&a^LFw{aDZaKRr@rOSy=zxuqqzEW$K>S}(* zUwa*M1w<=m7TS2P^VEo1^RjIZPp;te)rY5vPki*CVVbJ*_V4E`9?aKgF0=Uf=)zg$ zB*%+SvOAM`_GAg{+_xyQ$ZC4;jO#(STez#PPrfkU>tmiTr{CY;*L_;MH-OJdcFK4#I?p0f=db-}yCiFP}@Bg#1S&wi#)`WC5Ou9ErSzk2?@mrccoBR*KfKR7Q}@_B0g44EYs=91G? zWv<-mnzZ*#N5ioViX1QBy-SvV^7GWGMci!LE}1+O+$HvR@>7Nl3R{%7%-ZM@AZiz? z`p0qN+rzEDCxz7Ct`u|6F{>#8mplm* zK0JTHZ24nfHYUIHeyN_nCVL%c|6=juCp)<(xIC6Reee*+&;1ICPCL?8nTel#_h-Ac zyYb$eUS4^v1s^V_2R{`o?GG_1W3xWByJ5 z8_9hlnRAxOvCZ3<(Q{61^SOWb^*?K_`6U^kYi8Zw|Ia|uJ!yp+lWi)a?1r~dp6gld zr<^;oEpovhX6=mQyc?>fG%E+pnse(h=bE4C89H@25zJ3t_nrFh@-_5(dT_pQppf3> z#oVVAJ7=jZU9&N=Yw|zV=LI4MZhZdPAN}W1o<&5N zrT_aj@xO*|rr7>4b`;Av{+7QzKkJ!O^=qcDu8eA_{@v%>Hcw%;ne*`T-h|0tjUG}h`IMw~J7!Jw`mb~{G*9Z|Utw7h&Qi6Y+DAndNi4PdMO@?GJh^>w zs_WN-Yvu`S^zRAN%;(8$)EByJ@^s4~E)`>g62-Et>FYk$J!qMgal}HR#q+9TfL)-B zQQ1R>qh7MtW@f3Z2;rQn@~&}-!Q;pL>P{=97_u(LwPdjgn5|#nCOF0C1=pdicfN&w z3hi<76TY?~tnUz8t$_dbuA||*OJmDcM|x-ZS$t67KK6X2f%L0$&;Ne=r^8z-km$5A z;81+%%8k3Ezh2CI{m8RGv{mTvOXTy}g7(|< z42);Lxb0Zv_d8H5*?HpMz6U*bZsxq?-OD-AHY4(8k&56^y*C1%bysK~2soiLpGkT_ zL`GCy;f3>)S#=w3Dc@LHD{@)c+i$~D2BYsr{r5I(?Dw0aw1R)0^u+qDs}D!(c`aG7 z-sAQ5tZ+T^THZtbi9fTX*h-H7{q~c8UDiCwjLRGTp0C)M(4cnJD6*IqmAc zXRFp8O4+^FxaF9OPSA$^vTV-c$urDC@>5>j?eVH(`SgTWwr<8ftCX^(2WIhZoBAr; z(Ov)T4F`K$w-ZZLa+jQM2=>XE*W-8M`@vUY*KW7uUU|OfuY0Ckq1PxN5zoNMN}R@};x=iCFXyX~IePiVc^`c0Kjb9!Ihf>#0C`53QytS}B^-pJ+_ z=k`K)p8W2REiMNix#c)t+VP?5+~a$SS53qH)xI9ity=%LQ8;MAE#+b{!JC^;yeN3q z;~H|fYL%?$&8N3NmF2!?5jynun)2y1wU9G9-&+TXQfT}{HJue)N+`Y&x(vn^W|QduD*m-%+(o$n%_FGRL#q*gD#^4xH_xS#kn z<4cQoubQ-R>xQfy2fL=fI*EPd%p6{dtWNcJslo3%CUg1|{7^Gbp>YL)86rS(zV_=*U$fc{Rs}L5E z;ck)Y=I!TRW{?^jXb~Dw?qca^T9TMwR_s;k99|mesuag z_fdSy!j8H1i_%nFG#ER7tmgHScw@UZYU70t#%t`JvT8C8{E5+@^|a)Emh&e|9n5EU z*vWhKgq@Ob^3{yi!U);P%%_##T(_xK$q#6C{Ts{Dx^v~)HwA}R&y4FhyMiY~^zOCi zyKrS1IXz@IuxyL~9^raam-q{`K+STZ(Qa-0o<rBm?Q7GtmKS|h zqgEH|da87B;f)aPw8)FnM!_l>52rubI;(7M-22Y+e~w13T*Mr$kKKO+t_wc6 z;mfhJGcI}@G6_zYe&Xxh&}WXk8ds*=>ixmEmT9un`=fRGJ}Gxa42(Jct+ia_=5F#z z+^+OZ%WO_7)2lL%l<&A3IHnyu{O8Ks|8JkbOBY%H zf4wOngW=W@i9NY>s$Gkg*s}A#P%Q~;x%_0_!V2q#n+CmUH$rUhn<{>FKfmSco9kA5 zrrh%nrl}QNO~{!%H)GeCw`uw_*Qw-8S(~J3y+DmQ`Ig(_CEI81lHF!)Eytk7eOGhE ze0wFEs#B>Q|M%WBmh8*qS`^`b{ajJW;SjZj&UN=!{R$7Mzuo`)!t_6NX-77{O#ZmD zbmh(E_bvYmY4=WOto{>Pl4fW(GbUNfDV+cAXO<#8$xP=rjB0K(MZVarZ_)lGcuBDG z^;fg9Qn6;Gx6wt17pj|N2F&<-u4i$3dvo-XV;6k`H*~ehIz7)>C7yQMaL$!8U$~{` z9+Eg8-qhOanwa3m3T`2~Y=jf-dh9kEUQ*n9M(pr?$@AwEuS zx0XjfXXW?Je#v;&2mR6}M)2@3i>; za`KX-Q&w+ZEESw5!BukZVXv@ZitHphks_hYQYGe)c@V^#A>l z<9|0rR-bWFJgePpXJysV_*6pedvf{vSuwt%DrY8LyJ_Fq`rUWJM1xnB2dbZ)2<7^^ zdZF=-smIsG+$m4cTBXoif0^Ofk1gU}p4}GzB)YBM74NVp?%NizHN1j7ZH1V^!S>#X zFAB5rPhQDh|GsjAo#C=iZ#OQC`aeB;(KECEG5)K5RJ6|Sm)lgn`V(*Hhd<&EK3@7( z->0P(9n(4ItQ`A3m*p$$XEI%tf37R>bc6bjgm=7JX{9+QmxX-0^lZ*rKbA%MHy?`K zdCOkz#D61mNrb_jdA~BX?xdeoxUi|H_54Qd1q#zcXGKoRzU6B&<>O3~3A~9@Z8e3I zJ>1<6MPC!V7j|YRS1EJJgRQMU<{sR3Msv=_o5~x^*JeuQA8+Sw^2t7+)#BYCmwG@% zV4lN%w(`PfiDq9ac9>Z(OjmyQ=I8K#^>9@g8p1fdAe$?mUu!>r~S3t8@{~za$&KE z#>U?Z+hn%}%CLzxW-GqQt7u5gUm#p#x_bV_$p`FDo;jszcLzn-@A5Y~4JkBhkY1 ztmC2s*DV;DQ{1}zx0$REnDB9C`x`fjd$Ofgce^rsAN!x(^Xz&p$BUJ3pQiBNS$MP1 zVrd-j(%q|qPAp%&#&6AW)!7>Qot-ceq literal 0 HcmV?d00001 diff --git a/secrets/hosts/work/.rekey/6a96e98b07ba9d593ffa18993c45945c-hosts-private.age b/secrets/hosts/work/.rekey/6a96e98b07ba9d593ffa18993c45945c-hosts-private.age new file mode 100644 index 0000000000000000000000000000000000000000..3bce62c1ce44635b3680724dfa61435058021eff GIT binary patch literal 334 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCR+4Kyw=D_8I~h)N9i zaSHQs@%D_!F{=tUb1}DY4Dc|>ato-)F)Y>2N%Hf}DeyN8F6Z*jvzuVWeH;5uB10=^hji74B8+ z704BLaMA;=cgs@rYs#5#dBo=HbQr07GF7v17u23v8y978cGni>Z6r88J>HZDcHha+{j+E)A%MM0xsN~I=a6)5!uA7O>_?r z@^`OF(JnG`33n|E_4n5=HVJaeH}y012raBCNe9`M9aE5Qrkh@rnpm8w;GLFdRV)3?B`Tf>0xGKQsiD~=@ME| zXzE&7kQLxuX6fdc7m%DC!sSxsWu6=n8E#ZrUhI~Y>KPSQXc87;!KJIKt6->~nCO?M zt(_T^66$A^TovjV9#I;eZxH6?QdDK`W@%g!q@CHAaVCj>p=+LIB` zxpQySecrT7#Rq~_FV*PZWC-Jbrub@4mBq)z&2@77W-T<(C=c}ty5Vp;@_hC7=2cJG zw$Htu{jwrb$83hWnPknEBeAw}BLDWrd!0HdsxF~9-}1`mIa#k=uBv!v+M0EUs#&*c zP0Gk!<|C~9Cp-V%iyd0d7dM>@IMKYFXS#lZRdl0Ea^OnNS)#Se>JD}kF6G+vbmcLT z18#kLLody7Ns;~5pcwKx>|W3{okiON+;%nyUo?7ZetxU()Aw9WQ`cm_*#DsRtH{UN z?TiJp&#U2X{&)}HcUInH;YlaE zZj@YJ+rKnz{i!3R2fpk+!4ZD;grJoef9t}Gi%FJFX&RrtwVmB{mh-!9%7mk*)mC1% z`+rKc#)-qq^0#|PKZE*%~Ws9D(P-svm4Hf{c=UIuLXv*hzb egI5O344<6W&I(xAQWzb-V*iXQH(icRe+2+>F*Qm6 literal 0 HcmV?d00001 diff --git a/secrets/hosts/work/.rekey/9b761b7510ff07a6a520c2d55313629c-hashed-user-password.age b/secrets/hosts/work/.rekey/9b761b7510ff07a6a520c2d55313629c-hashed-user-password.age new file mode 100644 index 0000000..23e2bc0 --- /dev/null +++ b/secrets/hosts/work/.rekey/9b761b7510ff07a6a520c2d55313629c-hashed-user-password.age @@ -0,0 +1,7 @@ +age-encryption.org/v1 +-> ssh-ed25519 UQ3p6w /yVmAjLMBdkIfYSgms6cEhuuPcZcz/JRN77R76P2rC0 +Kqb0zKM7eJQHWmzW1WWQWrUGPo3n/MrvYsOpFnF8rV4 +-> 6-grease +_M?p) | +kiOsWVqE +--- M+2OJRF6l9Z7ewGUpQlcNnSzmy9wUyL33+rM8PXEUr4 +&_#Қ}(++Ud6a)ŸDt~\|}+yOtMn4t),hɅY%L@<S؁ \ No newline at end of file diff --git a/secrets/hosts/work/.rekey/f37a226625c60cae3ee8c43902eb6ada-k8s-ao-prod.age b/secrets/hosts/work/.rekey/f37a226625c60cae3ee8c43902eb6ada-k8s-ao-prod.age new file mode 100644 index 0000000000000000000000000000000000000000..adf73b1adf1583a1835df8af333a7789f3437cc6 GIT binary patch literal 2054 zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCR+4Kyw=D^~~!Ei&_n zEDQ_?Eln#<_b>K$tPC|z2@9``GO{d7_6RbJNb*lBtB5Rcapfw_PK*lo&5TUWHb^Td zEpV#z%C{(~FpJ8IF!W4`GBEHh$~Mpr^K#Yp4FuViXw-0=bsbq8I|E0S#A()=3Q7~V&PF)W)YlI<&;wt?p#=w>yc%c z>&f+e(~o!Vd%r|IcZe#!zU8N>nwXnxaoz!;Lbu8NDc8TNx~1E=vpqAf3vAtup=(RrIhWi&q`y#mzFoFq+zW_>&&b<749b` zGi}ev%O(1Ku`FMl`pilEiimO=ufvy=qSuj^&veDR1jIUO`GiO>*()aPsqo2tm8br} z(!=ZTM1@OVP~&Hqd1kgfzn3&q%OSG}!RgBlrOp?vJiO!nzI_?2e`rLH*m&bmKr9f zUoS1X7caeQ|36sVQ_jSvB9rxV!tvW~Z@xF4eR;?}fqRLKmFLertmWGb*-H*hY!pA? zf6!}NKy*^{i8-H=mN%WU{cLfjRPFSg>NREO`@gfTX?{L4{qgn6mQFgn)RldG;+`}7BIo#>v*+q8-6g$BRQ~BD%cQMLZJjBs zXRTU|e=qkqarlJonbRS2r6V5;Z0o8}=;BZ1`kQ+E{FyzMTDIScaLH2ONn9lKrd#GtkIq_Nib+_+N6@L52|m?;R@VjlmFPY-63@2ub?}PUw?@(*vlo~3<}z} z;Z(ilk=38oQc}cy3#L_fn=E^3o1L{Y$7)`K;*q)YeI(l7tPCuF-OMIe<8h4nc;>B} zRW7=QWrqt@+%LvonOyfTW$m@K5q-<%PTYUWFt2BgV~YQ_AHIs~`#O13E&lLrJKntc zR{K4cuA|o%1vT(!2)xKQnsv_N-PMPCu0Cf!^h)Mm@9M0KyUwrLIHO9xhZ?zX-45Sj zup{{Fr_i<6Iw}p-KiF#vaL6{zb@gI6^mRf@;+tQwN=}a&IZ7ABoZG!>a^HN8SVvv$ zOG~6GgY*2}XenONvRT!cT{Qig)~$9Zlg$lK<14ITG2{uKM_s zldaD1cl8&egRjeHxP?qrX^{`Cn0tS*zUXtAU#oU|n#sOq7QK1ZxkoBC<9F%qrv>aY zHD8u)yqIxFOs49T*5gxFl~NOD9haCUW}%f(xXsFyHDJwi*}LEW#((^_Z=%igUSIn_ zFE&5cZ<9h@CQkal&dTiY4YubSrnxXCc!XSwi9CIq`R)JEN#fS7Q^PAIe|j~#+coX_ zVs^tL=6qz*Y1hP7R~7TQF-(n9Bw~AB6d%u9`RkkCo{F1{-Ba89Iic{tLf9AD-b=c`se?Jzt zy7WJ+>d?H(vhTH(<=k(3j$7_z`QgX7Z5@xI^li>JVZGjx&rNo}lhrEz`({DiH4`Dl zM}K~)Ja0C8W<1F$KI7-?Zc$CAmO@#-+fp087wz8rwIV2DVg9A}8}h7wu}%w8KlIu* cefP}ghOaJcd*~p%LNHudq4%CgNW=~y0Cte#IRF3v literal 0 HcmV?d00001 diff --git a/secrets/hosts/work/id_ed25519.age b/secrets/hosts/work/id_ed25519.age new file mode 100644 index 0000000..636802c --- /dev/null +++ b/secrets/hosts/work/id_ed25519.age @@ -0,0 +1,10 @@ +age-encryption.org/v1 +-> X25519 WlV00t6y5gzAQB+cdMy2fmTLo3tqNbEiCOJWjoQSkyw +viZKX1xZvslqRKLuRAINOeT/KD4JdDcGXVGbLPej0Co +-> piv-p256 q3LNVw A6KDzYBqOrvAtypk7670h8uoE/Zm5oXyC8Gs2hG2ZRUV +L9/dhNUo5xkaZnSnXcgvjZFvzvxsrYFAgmwDPby6GPo +-> ~#-grease +TNWgHQD98J4xyQeizV1YVWW5rKImx7SfvqwODtXCTvdqm5/96alWhhrqQE+MD0DS +ucPcrsbX8EZOdBJZd4J1d54peYoXklVFUJAkew +--- MaaRl3MCla/w9yVonLLuBc5NKdGBmtnkWVBoNKngzSA +[h@aF}W ^Uql<ShS"QqTdHIiNPߜ+ '+2nLLࠢCa*0(1KYd89D)9͋:d95;@n]H*ݮ' _<C+#u` ɠxas[O9¸T.{)@y0?8!Ed !9kp$O/}qoyZJAٹd`QimٟP!IǠLˬٴ{#ILHOGtМFT"ċo~(tlZFٮHeΗ'zzY)Yi<8X<\]$cJL17an=0tzM -5W \ No newline at end of file diff --git a/secrets/hosts/work/id_ed25519.pub b/secrets/hosts/work/id_ed25519.pub new file mode 100644 index 0000000..0198b10 --- /dev/null +++ b/secrets/hosts/work/id_ed25519.pub @@ -0,0 +1 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHdjLD+8XcVRwqKwnT44/pFfd8ohhLk6FxwYsihDxYtO nij@ao.dk \ No newline at end of file