entities/hosts/nostromo.nix

49 lines
1.5 KiB
Nix

{
description = "sea.fudo.org primary server.";
# ssh-fingerprints = [
# "1 1 075ee0ae86debffa6fd61436984b39e4699c93c6"
# "1 2 17a555b21fe08841c8dfb0d598dc2da117b94bf5a94cbf2c6b391eafd3e2c15e"
# "4 1 ce86eabbe6f015e6422d0f5ef9ae32cc7beb1f42"
# "4 2 44a5741825d43e571f6f9eb91e8c102eea75a4632dd8a9c80668e091a5fdf7f5"
# ];
rp = "niten";
admin-email = "niten@fudo.org";
domain = "sea.fudo.org";
site = "seattle";
profile = "server";
# ssh-pubkey =
# "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHT8Uf6m8ZrSn4nmPyIO+JWLbgXJGX4jJTk0wfqDzzjb";
arch = "x86_64-linux";
nixos-system = true;
machine-id = "709076ea18254f8f9097c4e54dde5ab3";
master-key = {
public-key =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIODtNR4b43ZJgyGo9Hc+CmC4+bzgxbsVYI9fhDqjyRSo";
key-path = "/state/master-key/key";
};
# initrd-ip = "10.0.5.10";
encrypted-filesystems.sea-store = {
encrypted-device = "/dev/nostromo-store/locked";
key-path = "/run/keys/sea-store";
filesystem-type = "btrfs";
options = [ "noatime" "nodiratime" "compress=zstd" "noexec" ];
mountpoints = {
"/export/documents" = {
options = [ "subvol=@documents" ];
group = "sea-documents";
users = [ "niten" ];
};
"/export/downloads" = {
options = [ "subvol=@downloads" ];
group = "sea-downloads";
users = [ "niten" ];
};
"/export/projects" = {
options = [ "subvol=@projects" ];
group = "sea-projects";
users = [ "niten" ];
};
};
};
}