Configs for beefy.

This commit is contained in:
2025-10-29 17:13:23 +00:00
parent 163b9e4c22
commit e23dc7df5b
7 changed files with 134 additions and 45 deletions

View File

@@ -4,6 +4,7 @@ keys:
- &server_chilly age16yqffw4yl5jqvsr7tyd883vn98zw0attuv9g5snc329juff6dy3qw2w5wp
- &server_sparky age10zxwwufrf5uu9cv9p9znse2ftfm74q9ce893us6cnvxjc7e3ypcqy709dy
- &server_stinky age1me78u46409q9ez6fj0qanrfffc5e9kuq7n7uuvlljfwwc2mdaezqmyzxhx
- &server_beefy age1sthngxze7fl75u8gsppq998rez5m0shue5h9c9sjagvmdcwlwqks9w7fv3
- &server_alo_cloud_1 age1w5w4wfvtul3sge9mt205zvrkjaeh3qs9gsxhmq7df2g4dztnvv6qylup8z
- &server_c1 age1wwufz86tm3auxn6pn27c47s8rvu7en58rk00nghtaxsdpw0gya6qj6qxdt
- &server_c2 age1jy7pe4530s8w904wtvrmpxvteztqy5ewdt92a7y3lq87sg9jce5qxxuydt
@@ -17,6 +18,7 @@ creation_rules:
- *server_chilly
- *server_sparky
- *server_stinky
- *server_beefy
- *server_alo_cloud_1
- *server_c1
- *server_c2
@@ -41,6 +43,11 @@ creation_rules:
- age:
- *admin_ppetru
- *server_stinky
- path_regex: secrets/beefy\.yaml
key_groups:
- age:
- *admin_ppetru
- *server_beefy
- path_regex: secrets/wifi\.yaml
key_groups:
- age:

View File

@@ -165,6 +165,7 @@
];
chilly = mkHost "x86_64-linux" "workstation" [ ./hosts/chilly ];
sparky = mkHost "x86_64-linux" "desktop" [ ./hosts/sparky ];
beefy = mkHost "x86_64-linux" "desktop" [ ./hosts/beefy ];
stinky = mkHost "aarch64-linux" "minimal" [
nixos-hardware.nixosModules.raspberry-pi-4
./hosts/stinky
@@ -230,6 +231,15 @@
};
};
};
beefy = {
hostname = "beefy";
profiles = {
system = {
user = "root";
path = (deployPkgsFor "x86_64-linux").deploy-rs.lib.activate.nixos self.nixosConfigurations.beefy;
};
};
};
stinky = {
hostname = "stinky";
profiles = {

19
hosts/beefy/default.nix Normal file
View File

@@ -0,0 +1,19 @@
{ pkgs, inputs, ... }:
{
imports = [
../../common/encrypted-btrfs-layout.nix
../../common/global
../../common/desktop-node.nix # Hyprland + GUI environment
../../common/cluster-member.nix # Consul + storage clients
../../common/cluster-tools.nix # Nomad CLI (no service)
./hardware.nix
];
diskLayout = {
mainDiskDevice = "/dev/disk/by-id/nvme-CT1000P3PSSD8_25164F81F31D";
keyDiskDevice = "/dev/disk/by-id/usb-Intenso_Micro_Line_22080777650797-0:0";
};
networking.hostName = "beefy";
services.tailscaleAutoconnect.authkey = "tskey-auth-k79UsDTw2v11CNTRL-oYqji35BE9c7CqM89Dzs9cBF14PmqYsi";
}

19
hosts/beefy/hardware.nix Normal file
View File

@@ -0,0 +1,19 @@
{
config,
lib,
pkgs,
modulesPath,
...
}:
{
imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "usbhid" "usb_storage" "sd_mod" ];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-amd" ];
boot.extraModulePackages = [ ];
nixpkgs.hostPlatform = "x86_64-linux";
hardware.cpu.amd.updateMicrocode = true; # Uncomment for AMD
}

BIN
hosts/beefy/key.bin Normal file

Binary file not shown.

25
secrets/beefy.yaml Normal file
View File

@@ -0,0 +1,25 @@
kopia: ENC[AES256_GCM,data:FrvSs1th,iv:GnoJ9ec26Wx8rH/G5yuN2CwmBp2ITD2C264cYQ2t6io=,tag:zn67Rikn7PXS2jOTf+KQ3Q==,type:str]
sops:
age:
- recipient: age1df9ukkmg9yn9cjeheq9m6wspa420su8qarmq570rdvf2de3rl38saqauwn
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvQXExRGo0bkJuV1M1NnFr
MWcxczRHWE1Pd0lqNVJjRi82RlZsQmd6QXhJCjdtMFBPTGlDd2ppUCs4QjVEU0dF
S1lpdFlyY2NPWFZ6MzE5c09FVEFsWmcKLS0tIEh6Sjl2MnhRbHdIeFVvaytPWmZr
UXJkdTVTVmJrWGx2VUd0b0w3SFVGMFEKm2hW8sjWRvTcVKQTQYN5TWMOmwmAtFkv
zXIIt8pQGtYYvNB5+l2ixJmX3QvXksptApszhrUYvpDorcf3YunTZA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1sthngxze7fl75u8gsppq998rez5m0shue5h9c9sjagvmdcwlwqks9w7fv3
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLWkhyallScmkxOGhqVzBw
akp5R2pPekp2NVNTSW1hZXIrWkpMRjlLbzE0CkxUN1VBUW52aXFrNTh4clZISjQz
Ykd3aHk3MVJYMnl5K1c4aVVtamFTK1EKLS0tIG85M3VpMmhSdHN5RVFjU2dWZndP
ZDNYWVltcisyQTVmZDFJbjJSaFg2cHcKtZSalJFKQdl7X+hwLTLuYqJPRH7y4A8B
5GS2auFu3nspDLjYflMBIi+EiF6CvhUSq6EEzi3rb0mHz9ZnJg6h+Q==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-10-29T15:41:56Z"
mac: ENC[AES256_GCM,data:AM5Srw03yvk6gKVf3KF/N5ilYKgF0KKObA98N4KbLGNsxsAagvmQtvzWurgDmOvihbKyBlNyOCjBVCHrKwfzzdCHj0+9lcuCtZ5CC/zOy9a7LMFJvpElj0pQUxpODU+6HcGtdrQQpsfEkzrMBzw1wsJhJ9vC1rp0YdUqK7+wS5g=,iv:M0mTIlXZPdyiTUf/8vYJvmDTMB9bOwH2BKTexPpS/2Q=,tag:CFylsJEP9mePMcRoxrxgwA==,type:str]
unencrypted_suffix: _unencrypted
version: 3.11.0

View File

@@ -4,83 +4,92 @@ sops:
- recipient: age1df9ukkmg9yn9cjeheq9m6wspa420su8qarmq570rdvf2de3rl38saqauwn
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwandOMnBCNUtFYnRWVjRl
U2RNREZ6d1JiYXdDcTRoWGJmaHNrQXBYdzBBCklFcGxxTjlMT3VRMGtqZGRFMzZH
bm1qN1pXdDhERGZkeW9QeTNOSUNQUTgKLS0tIHEzQTk3Sm1ncUFaS0lYVFI1S2lp
NkdoZ0dMdWRkdGJlSE5QSjFxVnE3VUUK4I2euCBACjjoexxa7lPM9vkkNSK/YbyW
OoENUPsbvRkcNLDsi2sLnrEHSxBA/YJkfPDWxNrxZVZfUqoX+NrzOw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5WUo4UVE4ak8yYUIzdTZF
RE54QTNoVFhkSVVtVkloMDBEUU1YdEVLQ2tvCnU0WnFETzgyU1ZBdjdJb056ZlJ5
cWlmUVJwUm01Yk5VSEVZNTEyYTNDdVUKLS0tIHRhcm5DSHFoTkVpT2Q3akJFZ0Z0
N2V0QmJoZ1BRM2xIaEZZSHppQkJ5MlUKhs9s9cR6HnrvXSqrIGBbWT2+JVWodp13
yV6yoSc2Y7EzcyGFePhD94nmnJDHIYfTFdVpEjXzPHTWiLZdC5Q/Rw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1gtyw202hd07hddac9886as2cs8pm07e4exlnrgfm72lync75ng9qc5fjac
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJRGNMaUIrbzlPSlIzSDZ2
MVZFV0lUa2xtLzdJc3ZCWjRxK0MwQzZJeEVRCkNKUzVXV2pRVkd4MG1KWWNPUmJ2
OUZ3NFJOT1NZSVlNNlJTcUFCSFV5ZWcKLS0tIFBZaTQvd2NHMmdNc1dON1puZmll
ZG4yLytpUi8zenNQc1VySm1QeGUzbmsKBtAX+v4NSX0yiAtXxhq9i6eoJTyXFuE1
61kd7hFrCKJDMI0VOBxkqzsDI+/cH9sVV0Us4C5njcxckCWTCA6Uog==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVHB2bENRM1FpMW95ajF0
MWRUV2hWMFlPeTJONzFGejlKZVJDRS9MWFVBCnc4M01QSitvcEJDdlFneU1pdXR4
NzU0VVR0SytCVVJpdElscFNOOXZlMlkKLS0tIDRSWjRNTEc0OXR3ZzJHUUlUODc5
QUJTbEZ4cVlETzQ5UmNUZVNlNE16VTQKbxWphiLJshmkwHxvvsunhKNxkKLTe++W
ql1TuTv1wioqRptnXJ/QP61COw6e5bGFNOQvSlieUILu2r/Lws5l2w==
-----END AGE ENCRYPTED FILE-----
- recipient: age16yqffw4yl5jqvsr7tyd883vn98zw0attuv9g5snc329juff6dy3qw2w5wp
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByTENXMjBCcmladHRIQlZJ
MDZxSHpkRzJHN2c0ZmpvN0xid0l1UlI0ZW5nCkJIb25qUUNjdUx6dFFvZHlYLzZ0
N1RpZGtyL3laSldqdXBoN0NjSFhSWUkKLS0tIGlhdU0xanlsV2ZLYm9yeEYzaGF3
ZzJmSnZWVTViRVpZUWJNQ1Y5OGFDNDQK68nH8bQgBef3afCywEt+1mPzcPPF0sml
k3jraFAbL//4ZhQuRQcWbja5Qj1fqyc30EH0a/cIxUhE7MQ74gP5rA==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzYjJJZmR3OENQa2FvMEdm
U0VYSUV5anY5aTJsNVdwOFFyY2xSb3F6YmhnClNEOENBbEU1SzczOVhjUzVVUmxy
ZnpYQVhMUjZpOUxzNkJBMjJyMDdUN3MKLS0tIHlWeVlYS0c5MkRDRnBrVmUwSFhv
RFlmVThHRVJITDQ0dUZkaWJTT2F1WDgKhpFJaYJs+O6aHIiuqzQ0a5rsGpAeQ497
+v7SlRotX0UiAWs8TNFoQBQYeWHAPi/bVIcKL3H55r2iZtG3AmShew==
-----END AGE ENCRYPTED FILE-----
- recipient: age10zxwwufrf5uu9cv9p9znse2ftfm74q9ce893us6cnvxjc7e3ypcqy709dy
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByaXNZaHlGbnB1TGYyeXJh
ck5Sd1pWdXZkcXBHbnMzZ0FwcHlUZjNRdjBBCnhKeEMzUnNZWmVsVlh5Mldhd0sx
Uld0djNlVk9MTDA3OHpOUHJ2ZkV3Q0kKLS0tIEh1MHdKZzMydDBBcjkyWU1wUVhH
ZVJFbWNzUWV0dDlGa0FnUERwUHNHZTgK08zByyr84MCjDgfJxOUbZ4DwhXKzM63+
/3rltIx/fjRFc+UAeR7OXU6nX2oauUzr5OAwYHdO2C5K+vF/kiLVLg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0eWQ5VTU0WVZ1SnlQS2ph
UWJFaEZLZytNaGg3T2YycjZRSlNFMnB5ZWxBCkwwWmhGOG50a3haK2RhdWtEVUlE
WGF4ekxWd1JLTllFWmhBKzNRY2MxbncKLS0tIFlMNEVIMUo0UmEzdFJjMTJ5YnF6
R2l6NC9hNjVSVkpJZ3lHNTFHT3RucE0KAK0Hc5KOVxa2rvm7S7bYt1ZKkAaAR2MO
con8nMpKqQYShTshJpjuWdUskslkOKuzYo9m0YZSQ6Irrnpvo3C4+w==
-----END AGE ENCRYPTED FILE-----
- recipient: age1me78u46409q9ez6fj0qanrfffc5e9kuq7n7uuvlljfwwc2mdaezqmyzxhx
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDdnR1N3N2RGEwbWNJMXhZ
S0poOHNKZjd5akZxNTdzUDdqU1NIOG9hMlVjCmNzU252Uzc0NVRTRk1ab3R5cGxy
Z2h1UjJCd0RGYzRxTVZFazRwV1oyQzAKLS0tIFoyakhGQ3pwR0pmNkVzcTVYSTU0
eWhpQ2I5VVlrcWh4ZEF4VmlLaDdBLzQKpI1F2w6yMh+cFor5vsBwVLvuKvY0RLDH
69svSp/l541YYAf/QKV1hJZ9ab0rK7uNBi8GIL/rGr5GhE3HiQ9r3w==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0T0J0RDVPbmRPanJVRXB5
Zk1vZDRob09mU0FqejdXeWtnemdtaENINWpnCjdjbEpHaDZXaExrT3hmeW8rYzBJ
QXZNYU8zNGpSZmVLS2k0OW5UQXErNDAKLS0tIHFBNVZuWklxN0tGS3l0c29GQUF0
UHM5dXNFMDFsWDhHeGQvcityZHdsb2cKxf7PNEnlVODKBEBdsrjUNYGkePayCOlR
VgO0mUG/MmuI/Hi46ByoDRLnxPUZQ1sFSPRhc7meppxzFffbv/cvSw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1sthngxze7fl75u8gsppq998rez5m0shue5h9c9sjagvmdcwlwqks9w7fv3
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4L1dVUjF6REZ6bDVkWFp4
UUhCWnJ0S3phaGNkM05ncjNLWWU0dWQwT1NjCklIVzd0ZEhYY1Q2bFBjcDJqSFdN
bnBPNUQ0a2NyS04xQU5neWt3WVkvcFEKLS0tIHRERy9uekNjb2grL0s5Yng5YWdI
R29vcDJtRERKR0I2K3J6Ly9YRGJleTAKzP66W2Ht4TE4109GnzU99C4oY1Ft8cv0
brDSJ7VZ9h+2Px3gQXSNFcgZWC/S5rbTYsou1vPdrkaF4V52XoPoCA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1w5w4wfvtul3sge9mt205zvrkjaeh3qs9gsxhmq7df2g4dztnvv6qylup8z
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVQUxYSnJ5N0w0c0cyRk1y
ZHNmNTk1L0hjNWN4NW42dVBHQWVWTlYwSVhJCjk5bzlaMVM5VU56WmRPdUR1NkUw
dEUwZ053M2xoQnVOZk15UVdGS2JPOFkKLS0tIEtJblhvMU1WZ09PWXJoQ3duQ0tC
LzkyNmJya3dJTVpIT0dSMURLTXlsdkUKGrF6TMCDSDXPPfFANL3NuNZfvzxfPrLb
sgn8RZtgsezyRAjmysce3OclX9ZOGwsv+vAvt79NA6OLO26We0SxUw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaallod2xRMFFHVjFKdjZj
cFBTb3A1MGUrVFNWU3c5ME1PcXF0Z2U5WmhvClh2U3RiS2hKNmhLVHhsZGlHQWll
UlI3U0lMZTEzS1VnWFZOR0liUUtRRk0KLS0tIGJOTGlDL0ZITjByQjE3T1pGRlBV
bnRjdzhKZklVN3gwZXFhL2tSdC9icG8KIAWSdNI/H3hD+9AVYZUaX4IV4EN0E1S6
UNXBRS5nGdY40xkNiEHjdOtrAtoHPxWmhsXMZNRdLsHnKmO5kKvOyw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1wwufz86tm3auxn6pn27c47s8rvu7en58rk00nghtaxsdpw0gya6qj6qxdt
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnY0N0SVVVNUVVUFAvUDR3
eU5WVW0yOUFuWmQ4T3BjWFlOVCt1RndHdFhrCkZLYTJmRzFUVERNcGRWcmVmWXQx
WkRGYmdzMlA1MnNlWUNOWTMybHFtMG8KLS0tIDhBR1JXaEFYK3l0R1UxSWEvM1Iv
SWFPTDIwSTF3MkhVMjQ4RkdVR1FUNmcKcqzqJIK8/mDyUR0hG0QcMrjJTk1EahJ6
f6pdBA49ZrFjYS8ld1WbJ6A2zWQbV8T4NikfxTXM8AzGi9BTanpJww==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYSEpLUTk4NVFnandNelVT
WWxSTDErWnlCZ2hnVWN1YkhLTmExL0ZENEdVCnluZld1SzhRWHc3Z0ZISHJNeUQw
bFd4ZGhBNWJhbEVpSmozQmUzL0MzMlkKLS0tIE9WQlBDQ1B0UU9GUFdCYzErQ0pm
cEFJNGVDbkxjc2dITDVsQytoT3NoMFkKr/3Yh27q/xBCGpAkhBd58tgT14YP1fyi
qNVMTMo+eKrGe8SOvgAu1h3X8vMmfnEkSjd7acdGXjafvCg0SRvniQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1jy7pe4530s8w904wtvrmpxvteztqy5ewdt92a7y3lq87sg9jce5qxxuydt
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFTUs5VVF5WEt3ZmRwRStp
SUY2a1RsQXE4ejVxaW9vZlFpUTJ3R1NGZDBNCkV4MnNjN0hHMXVlZ3dlOFU1ZWQw
ZDI3UUVianplb3kwTXlJNEQwVzVlR28KLS0tIFNvem53ajl0TE9XUSt4R2x2Q1Zj
OUxTc0hmemJReldsUXI4VGxJeFN6eVEKa6rDLAd0LrECyoPFesYtTZfh1/qGAiUK
3rkBrjJuj5IGPeeeeRzLsNCs68InhIOB9aczB/RgDBSuAX4hPn1Z3g==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLY2tEVE1Ob01pVldTaExV
VmJTcXk2dFB0UWhFa0dzNktmak9xcnQ3Y3g4CjlZRnF6Wk9DR0NNSlViS05QMVZ5
dmZlSGtEL1RpL0hQWStOVzJsdnFzbHMKLS0tIFl0SDJ6Q1pGRmJJVEtEU0RxMVBI
MVRCMGJMWVFtR3NxdXZQM1NpSGFTWG8K2zadEy3dkiyAS+Xr61n6m43gViPy5ie0
s6c7yD4NgRxPlJM64yuzR9mT2jXBYo2dw+YEEW0MvHU16QCTzR0ORA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1zjgqu3zks5kvlw6hvy6ytyygq7n25lu0uj2435zlf30smpxuy4hshpmfer
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0UFJobWI4QzZUWXFVSExL
RW1JVURFNDZldHN5RHc4TnhtclRjZmZJNkg0CkpMcjZLTXNFK3RuZHFUb2tPbFdB
clN4M3djZjlEZ2ptNHZERUN1Z2F4RG8KLS0tIC8vVnVwZVZrczZEUGkwOEdiSzFr
c3pnUXowWWRZd1R4czBFdk12WHVCV0kK+y9xAgtGTqQnf6WEa3cla9QfOvxASfkk
NxHhH7rbtAzVEL/QrOMoIs5+R21jUps2kDSvqtUBO748UOfevCua0A==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByRTBvMHErQzNLWDBnOFh2
aldSUVIwbi9nQWZqTzA2azRrVzY2dzFPTENNCi9xN1l2K2ZVNWdZN1ZpRk82S0VH
ZnV1LzlxbW94NFdhN2UzMVVmQkZKRDQKLS0tIHNzRXlJZUdIbk50YzJ2T2hieVAr
OEU1NG9ySkI4ZUVDRTQ3aW5xRWhqTnMKYoVUuLWWWbZ02SGHfH11yPL53GxVvnu5
t+0VKJAS0R4GcgRU5yzU4CTrLQomznPrDYmYYq6CxjpQARK4+NKvsg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-04-04T09:34:06Z"
mac: ENC[AES256_GCM,data:YIcRrsPparPfPaI2+MLlKsxu7M19H8nndOsrDLuh/5BXzIZNiuTIWyvxODyhI745rDwlibO+7Q0QctanhTl4+IzGaYtuY4i+rb+3dzBMpcdT2VAbtCHHxcltWeanRGFq2K3WM2tbnQCERst5kejfn0Razjq3UU5vNwfBsdJMwGc=,iv:izDxy0ufVnH8ImkZIngcYhGuj0PGpLqBD/ZDvQyE+5I=,tag:oYBUEQS52pr09h5OvOadNg==,type:str]