{ description = "sea.fudo.org primary server."; docker-server = true; # ssh-fingerprints = [ # "1 1 075ee0ae86debffa6fd61436984b39e4699c93c6" # "1 2 17a555b21fe08841c8dfb0d598dc2da117b94bf5a94cbf2c6b391eafd3e2c15e" # "4 1 ce86eabbe6f015e6422d0f5ef9ae32cc7beb1f42" # "4 2 44a5741825d43e571f6f9eb91e8c102eea75a4632dd8a9c80668e091a5fdf7f5" # ]; rp = "niten"; admin-email = "niten@fudo.org"; domain = "sea.fudo.org"; site = "seattle"; profile = "server"; # ssh-pubkey = # "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHT8Uf6m8ZrSn4nmPyIO+JWLbgXJGX4jJTk0wfqDzzjb"; arch = "x86_64-linux"; nixos-system = true; machine-id = "709076ea18254f8f9097c4e54dde5ab3"; master-key = { public-key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIODtNR4b43ZJgyGo9Hc+CmC4+bzgxbsVYI9fhDqjyRSo"; key-path = "/state/master-key/key"; }; # initrd-ip = "10.0.5.10"; encrypted-filesystems.sea-store = { encrypted-device = "/dev/nostromo-store/locked"; key-path = "/run/keys/sea-store"; filesystem-type = "btrfs"; options = [ "noatime" "nodiratime" "compress=zstd" "noexec" ]; mountpoints = { "/export/documents" = { options = [ "subvol=@documents" ]; group = "sea-documents"; users = [ "niten" ]; }; "/export/downloads" = { options = [ "subvol=@downloads" ]; group = "sea-downloads"; users = [ "niten" ]; }; "/export/projects" = { options = [ "subvol=@projects" ]; group = "sea-projects"; users = [ "niten" ]; }; }; }; }