Initial commit

hosts/tureis/default.nix

@@ -0,0 +1,36 @@
+{ lib, config, ... }: {
+  nixpkgs.hostPlatform = "x86_64-linux";
+  hardware.enableRedistributableFirmware = true;
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" "ahci" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
+  boot.initrd.kernelModules = [ "usb_storage" ];
+  boot.kernelModules = [ "usb_storage" ];
+  boot.extraModulePackages = [ ];
+
+  #  age.secrets.tureis_user_password = {
+  #  rekeyFile = ./secrets/password.age;
+  #  owner = "user";
+  #  group = "users";
+  #  mode = "0400";
+  # };
+  
+  n.host = {
+    # hardware.cpu = "intel"; # TODO
+    bootloader = "lanzaboote";
+
+    hostId = "db4713ee";
+    users."user" = lib.mkUser "" true;
+    defaultUser = "user";
+    types = [ "desktop" ];
+  };
+
+  imports = [
+    (lib.fs.luks "nix" "/dev/sda4" {})
+
+    (lib.fs.tmpfs "/" "none" [ "mode=755" "size=40%" ])
+    (lib.fs.vfat "/boot" "/dev/disk/by-uuid/5B0A-68EA" [ "fmask=0022" "dmask=0022" ])
+    (lib.fs.ext4 "/nix" "/dev/mapper/nix" null)
+  ];
+
+  boot.initrd.supportedFilesystems.vfat = true;
+}

hosts/tureis/secrets/password.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 8IT6eg zOyK3R9L2wLc3j24BeClZfV0qreGhCUEAKe5I/ek/RQ
+p8Cs+J6Wr2gqbuxk9pBHzswsVu3hFBsi69fkxvGxNIE
+-> zh:p3}L;-grease 0r+81 g
+Fd+eCNxUNT6oCVS+ljiPObC9d0oIZQSwkXIhIaEyugAdMBRIfvniO9nkHiHn
+--- TsFWr7WQ1ublsHFf0In5XgH+THVqE9w7B3AWv4WthTo
++,
+
+ձ<EFBFBD>7<EFBFBD><EFBFBD><EFBFBD><EFBFBD>>f<<3C><><EFBFBD>5<EFBFBD>^<5E>Y<EFBFBD><59>w<EFBFBD>Ȁ<EFBFBD>9m|\͉?<3F><>\<1A>kaVk<56>
W<>ܒo<DC92><6F>S*<2A>q.<2E><>]`<60>[6<>5,Mϟ<4D><CF9F>ZƊB<><42><EFBFBD>di4<69><34>җ<EFBFBD><D297>N<EFBFBD><4E>d<EFBFBD>