Finalize working configs and prior to adding secrets

System configurations in a known good state. Secrets still have to be
integrated, at this point the nixos-anywhere project will likely handle
this to keep the bootstrap completely automatic since it can copy ssh
host keys to the host prior to install/activation. This would work
nicely with the sops secret module, but a good way to manage host keys
for each machine still has to be decided.

1 files changed, 27 insertions, 1 deletions

diff --git a/machines/iridium/default.nix b/machines/iridium/default.nix
index c915eb0..8a3edd0 100644
--- a/machines/iridium/default.nix
+++ b/machines/iridium/default.nix
@@ -1 +1,27 @@
-{ ... }: { }
+{ inputs, lib, ... }: {
+  system.stateVersion = "24.11";
+
+  users.mutableUsers = false;
+  users.users.root = {
+    initialPassword = "test";
+  };
+
+  xnet = {
+    disk = {
+      enable = true;
+      device = "/dev/nvme0n1";
+    };
+    net = {
+      sshd.enable = true;
+    };
+    users.enable = [ "kle" ];
+    gitServer = {
+      enable = true;
+      gitweb.enable = true;
+      keys = builtins.filter (x: x != "")
+        (lib.strings.splitString "\n" (builtins.readFile inputs.sshKeys));
+    };
+  };
+
+  nix.registry.nixpkgs.flake = inputs.nixpkgs;
+}