feat: add premhome-gc1

nixos/secrets/k3s.age

@@ -1,17 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 BmGTzw KHQML0NZFWCGQ8KUycotaXb1Q80nabl6lI5eBMW61CY
+-> ssh-ed25519 OOT7iQ ixSK13Q0cZ/9Ja4qQgR6EG1NhVyMgnkdzCvFlps9mEg
-n3LwVM8pdrBS0Ni4a+V2IDc0ab3vvTGwKlWJqzb+UAc
+WRLpuj2dkgZ1ugTk39FBHh3QpbuJmeoHU6edtYym9iQ
--> ssh-ed25519 h40/IQ mFfezyPE2Z7d2rlIHCnbO0ZxCt3UEswBgqTmMnhKaAg
+-> ssh-ed25519 7Lat4Q KsGdrCPrPmoluHADPkW71DfkyljX+8cgRIhfQ4Yk5FQ
-AKOJHyl+gcdYS+ejP9NVorlftlBVidYGLPeorjV9idE
+FOjCmiG62fmjAzwGvLaQpgO2lEr+Rd0twYetW9CdEfI
--> ssh-ed25519 heGc5Q 7oj8IGtuiiIk09M5h31JxpNXMxRj8juo1LY/S0ebI1s
+-> ssh-ed25519 dPFwiQ dJn3lqlHDrFD6bbTIfboLiFYEJceLVZohGjUBKa3Nm4
-lCzna0+UP+xsIVXeZ2IrJnI5Yi7lX0/2UW9IDpcV2BU
+PWLa4dmU2AsBKVk/8JiQG9BGmdlxxd6PF6rxzxQrnrs
--> ssh-ed25519 GOpnMA Zslzb/cwH7WKhN6hyzkNxc0OF8RY3oqKyVBM3EXDOgk
+-> ssh-ed25519 OV7A4A jQRymJHujZYp9lEaQo+yK77SDchzFKQP49uzxyCXzRA
-Ksm5FhiYsSMHJnnoLufEYDvbhtzXmpUWtba8y4jq+Mk
+5CJiI+AnxXzWhtYNEB47ZC9lt4TQG7vVySHnnwuT/kA
--> ssh-ed25519 rhEK5w Tdqc6h3dK3KlRDuZl8n9zaSGHqEQYmlACi+BpDghAWw
+-> ssh-ed25519 Gc/MTQ 6JYkL1Nbe3/M2wwSDM7rRtiJqP4BQGrOYnzeIzzYjV8
-Zwj1FXz1cu11zdQ3+kpxp+Jqix+ITKtY//hGVN4ExrY
+em7ZPvc1dwaZ18/j3Y1SOjgYVq6l7udHPvd0BArd74c
--> ssh-ed25519 Gc/MTQ /bFhvTYCzfEtxh3aesWjgCfMX5PU1BZfnhK7DwGwyXw
+-> ssh-ed25519 0ckKSg CdnYg6Oh1eyAvbUDkrSHqOKUTJ128eKEfkRhY939qEA
-mJDsAnWyfS2koiYRaotrt5cqni1D7qD/+KiEPytflww
+XS7cA9F8MRE6Soe/2hAlaxhnv+4ThmJuTtQs7pZC2WY
--> ssh-ed25519 0ckKSg njJnd8uxtYFYqrcaCHyKJtqx/MxE2g7hee7opWq81Dk
+--- 23uZEJ1Vb+4Ya2AJWm9JScpqyRogoUNlWQHZNpo6C3g
-Tkaf7gsDTp+ReXio0koMIZaUAl5HLZttnAmuBAJhEv0
+f3xc<78>T<EFBFBD>
	<09>[%T<><54>*=<3D>
---- omdtkMg9qmbzDTpvKINuqQ9/QMUWdAiYtL07yjzPVN8
-#E<>i<EFBFBD><11>Փ7<1E>WR\P<>,T<><54><EFBFBD><EFBFBD>`1<>8<EFBFBD>U<0C>=<3D>A;<3B><<3C><1B><0F><>

nixos/secrets/keys.nix

@@ -1,9 +1,8 @@
 {
-yadunut = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJXOpmWsAnl2RtOuJJMRUx+iJTwf2RWJ1iS3FqXJFzFG";
+  yadunut = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJXOpmWsAnl2RtOuJJMRUx+iJTwf2RWJ1iS3FqXJFzFG";
-yadunut-mbp = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOlXV+TevruoYChk2XbqG5+yqEklRJvOx7YdTGFfXY/f yadunut@yadunut-mbp";
+  yadunut-mbp = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOlXV+TevruoYChk2XbqG5+yqEklRJvOx7YdTGFfXY/f yadunut@yadunut-mbp";
-premhome-falcon-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAYkZ5zY1JXdgptr73l6wOw7V6CguR+W656LahD6vPAm yadunut@premhome-falcon-1";
+  premhome-falcon-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHim2wAW8m6rbFqo6oLBOeprbljAQqghYkFahtFFMNqV yadunut@premhome-falcon-1";
-premhome-falcon-2 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGeUv8uVQG2V2IbDYyE539czes1T2KpdI0yH3dQvhKat yadunut@premhome-falcon-2";
+  premhome-falcon-2 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILOjiTk60H5LMHkEG7MOaysa0BRlul7qvhuWYpnMtme6 yadunut@premhome-falcon-2";
-premhome-falcon-3 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO3cKE6+Z5rk2c9VRYVXTnV7Q2bO926S2SiSrkDa4JJR yadunut@premhome-falcon-3";
+  premhome-falcon-3 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH4vBKSQyWYRmwuaYfIodOVc10veeH7V+EgobBI/5QHL yadunut@premhome-falcon-3";
-premhome-eagle-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPb866ggFLW+MptS7yBzENIplQJGFEXeGn/dJ5pTSPO5 yadunut@premhome-eagle-1";
+premhome-gc1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA3I/bCyi6rBzgJkfCFa8T9F+y1eOuZDB7l2Ly67slX3 yadunut@premhome-gc1";
-premhome-eagle-2 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEF9SwC9wrfbYx+lyMD3H3544QXcWnhzW6cwbyQ6E/jD yadunut@premhome-eagle-2";
+}
-} # DO NOT ADD ANY NEW LINES AFTER THIS. IT WILL BREAK THE ".#setup-vm" flake

nixos/secrets/tailscale.age

@@ -1,17 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 BmGTzw zayq65Lk054GC5dPFuLyR94VG/jlj7RVp+kWM8lvI0Y
+-> ssh-ed25519 OOT7iQ ecFdicQQdTnNAyZA5MuyXhshSlQjNSH9uG+7YDNBEAk
-bEmYn7gDNiB/6gJZ0HDEVomfAfKpXwU/9nTLGIZCPss
+U/WFXmYbGo61rlNTR2Zys8Ksl1uUrOCR16Ef+FDK28w
--> ssh-ed25519 h40/IQ PAyi7ztBCjeQ/RES1txci+7Jc3zB/w27UQ5x8Pu4w0g
+-> ssh-ed25519 7Lat4Q Iek1M1Yp2yDhApdzrAYxPO+gW7QjhdIfXKkFS1L6Qns
-bJ/SSaYkxYbMXK9UyZhdlTeF02rT2fJbe07Wlt3lqxU
+8rlCaaT6Z//y1fwTytLHafWxQyranVg1rExSW3mBb+o
--> ssh-ed25519 heGc5Q Zon8cPXMtK7QegkklwOcDz8lFnehFCbbJuKDuYm2BxA
+-> ssh-ed25519 dPFwiQ iLFyM1fRMsLXWqcTpYRkwKbEnWMQ4AZacs2iarLEX1g
-7Mzdf2HDdSAAQnvzLnuR6LpGUt0k/w+LDd/e7tum2kI
+MK1Hkbmg6y65HyavNPhnk1RpKE0ZAUva+m6b/A7RzLs
--> ssh-ed25519 GOpnMA dNFMwF4ay6bRUGDSRiniKfF78cW+C9u4bhw7xCKPuls
+-> ssh-ed25519 OV7A4A 60KpKsaTvPObEc73MvOWougzlcj2QEWYkuGT4Eu6V1k
-4BsDHgS8xS/XCRAx4As4nTLYtfoyRb9qxTot3BJSzv4
+D8BZqPS4O7Lk9EszOMcu59dO9m0+bVFlSn4Gc8i1F10
--> ssh-ed25519 rhEK5w WcpiN21eo1HI6MOF51AkufusM/uCm8BklDa9y/do90E
+-> ssh-ed25519 Gc/MTQ WGFyDy9agPmXohiL77qJL/yd7IU36uDmK53f3QVAeSQ
-z3lxzpZnc/WJsPyFqGe2mmQKVg6nB1Qdz+D1aTR5gS0
+q2XAur/tUQXBGfz3vXU6XmreFC335LKPmxVY1TIe7kg
--> ssh-ed25519 Gc/MTQ qT3QhhP8AVz2FTuXsq82ovzuoYStuxQ6Tfm9n4amiyI
+-> ssh-ed25519 0ckKSg FVunuPx9CbuKnglZsyO9mANpGTiRI11XFaopVMWICQ4
-hHMZLJlPKqJSFBh/Xf+9wzqJnkiD7TzMq2jK2DPwwKk
+vU0YPFDfSaHxWT+dhobXe3ho4q3fo7rCp75HiKc3Dq0
--> ssh-ed25519 0ckKSg W1TLkF4SqpT5Vweacw+1iGi4w0m9+MgDxRV24Wq4EH0
+--- H7sSDwOt6NK5DL6InkRPUocLC4Hi1vWjH99rNnJK9X8
-8pQfU9TLOPisx/jS/EVXD1zoJRbJjfgE2PgR7WWugRM
+'G2 <20>Ba<42><61>%/|<7C>
nӐW繹ܱKVI<56><49><EFBFBD>r<EFBFBD>j%KA<4B>g<EFBFBD>,Y<><59>|<7C>
---- ahc8y3F2A0kTUVMJO0W53MQtRVXCgCjVmJS9lcqoHNw
-<EFBFBD>yi<EFBFBD><EFBFBD>/<2F>`1<><31>Ak<18>r
<01><><EFBFBD>?<3F><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><>UR<55><52>;<3B>b*<2A><>%/<1D>]<5D>E<EFBFBD><45>
,<2C>+<2B>Q<EFBFBD><13>|؅<>0QK7K#Yw<59>l<EFBFBD>

nixos/server/premhome-gc1/configuration.nix

@@ -0,0 +1,29 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  imports = [../../common/users.nix];
+  nix = {
+    settings.experimental-features = ["nix-command" "flakes"];
+  };
+
+  networking.hostName = "premhome-gc1";
+
+  age.secrets.k3s.file = ../../secrets/k3s.age;
+
+  boot.loader.grub.enable = true;
+  # grub.device is set by disko
+  boot.tmp.cleanOnBoot = true;
+
+  services.openssh.enable = true;
+  services.qemuGuest.enable = true;
+
+  environment.systemPackages = with pkgs; [
+    git
+    neovim
+    wget
+  ];
+
+  system.stateVersion = "24.11";
+}

nixos/server/premhome-gc1/disko-config.nix

@@ -0,0 +1,27 @@
+{
+  disko.devices = {
+    disk = {
+      main = {
+        type = "disk";
+        device = "/dev/vda";
+        content = {
+          type = "gpt";
+          partitions = {
+            boot = {
+              size = "1M";
+              type = "EF02";
+            };
+            root = {
+              size = "100%";
+              content = {
+                type = "filesystem";
+                format = "ext4";
+                mountpoint = "/";
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}

nixos/server/premhome-gc1/hardware-configuration.nix

@@ -0,0 +1,28 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}: {
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
+
+  boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk"];
+  boot.initrd.kernelModules = [];
+  boot.kernelModules = ["kvm-amd"];
+  boot.extraModulePackages = [];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens3.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}

nixos/server/proxmox/configuration.nix

@@ -11,8 +11,8 @@
 
   networking.hostName = meta.hostname;
 
-  age.secrets.tailscale.file = ../secrets/tailscale.age;
+  age.secrets.tailscale.file = ../../secrets/tailscale.age;
-  age.secrets.k3s.file = ../secrets/k3s.age;
+  age.secrets.k3s.file = ../../secrets/k3s.age;
 
   services.tailscale = {
     enable = true;