Initial checkin

2021-11-22 06:40:37 -08:00
commit fcaafb347e
34 changed files with 1272 additions and 0 deletions
@@ -0,0 +1,48 @@
+{
+  description = "sea.fudo.org primary server.";
+  docker-server = true;
+  # ssh-fingerprints = [
+  #   "1 1 075ee0ae86debffa6fd61436984b39e4699c93c6"
+  #   "1 2 17a555b21fe08841c8dfb0d598dc2da117b94bf5a94cbf2c6b391eafd3e2c15e"
+  #   "4 1 ce86eabbe6f015e6422d0f5ef9ae32cc7beb1f42"
+  #   "4 2 44a5741825d43e571f6f9eb91e8c102eea75a4632dd8a9c80668e091a5fdf7f5"
+  # ];
+  rp = "niten";
+  admin-email = "niten@fudo.org";
+  domain = "sea.fudo.org";
+  site = "seattle";
+  profile = "server";
+  # ssh-pubkey =
+  #   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHT8Uf6m8ZrSn4nmPyIO+JWLbgXJGX4jJTk0wfqDzzjb";
+  arch = "x86_64-linux";
+  nixos-system = true;
+  machine-id = "709076ea18254f8f9097c4e54dde5ab3";
+  master-key = {
+    public-key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIODtNR4b43ZJgyGo9Hc+CmC4+bzgxbsVYI9fhDqjyRSo";
+    key-path = "/state/master-key/key";
+  };
+  # initrd-ip = "10.0.5.10";
+  encrypted-filesystems.sea-store = {
+    encrypted-device = "/dev/nostromo-store/locked";
+    key-path = "/run/keys/sea-store";
+    filesystem-type = "btrfs";
+    options = [ "noatime" "nodiratime" "compress=zstd" "noexec" ];
+    mountpoints = {
+      "/export/documents" = {
+        options = [ "subvol=@documents" ];
+        group = "sea-documents";
+        users = [ "niten" ];
+      };
+      "/export/downloads" = {
+        options = [ "subvol=@downloads" ];
+        group = "sea-downloads";
+        users = [ "niten" ];
+      };
+      "/export/projects" = {
+        options = [ "subvol=@projects" ];
+        group = "sea-projects";
+        users = [ "niten" ];
+      };
+    };
+  };
+}