host: add vulpes

hosts/vulpes/_hardware.nix

@@ -0,0 +1,8 @@
+{ modulesPath, ... }:
+{
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
+  boot.loader.grub.device = "/dev/sda";
+  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
+  boot.initrd.kernelModules = [ "nvme" ];
+  fileSystems."/" = { device = "/dev/sda2"; fsType = "ext4"; };
+}

hosts/vulpes/default.nix

@@ -0,0 +1,18 @@
+{ pkgs, ... }: {
+
+  zramSwap.enable = true;
+  environment.systemPackages = with pkgs; [
+    curl
+    htop
+    wget
+    git
+    helix
+  ];
+
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOqoRDiXXxBKU0FjnT2YcFnczYBKMKXGPgD9IVfBg5gq"
+    "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIHnLWTS5/vPyPFY+tCVYn3Ejf3NQpQzcGnWLQTyE7lbzAAAAC3NzaDpwYXNzZm94"
+  ];
+
+  system.stateVersion = "24.05";
+}

hosts/vulpes/networking.nix

@@ -0,0 +1,9 @@
+{
+  hostName = "vulpes";
+  firewall.allowedTCPPorts = [ 80 443 ];
+  firewall.allowedUDPPorts = [ 443 22222 ];
+  firewall.enable = false;
+
+  useDHCP = true;
+  useNetworkd = true;
+}

hosts/vulpes/nix.nix

@@ -0,0 +1,17 @@
+{ inputs }:
+{
+  registry = {
+    nixpkgs.flake = inputs.nixpkgs;
+  };
+
+  extraOptions = ''
+    experimental-features = nix-command flakes
+  '';
+
+  channel.enable = false;
+
+  settings = {
+    nix-path = [ "nixpkgs=${inputs.nixpkgs}" ];
+    auto-optimise-store = true;
+  };
+}

hosts/vulpes/nixpkgs.nix

@@ -0,0 +1,6 @@
+{
+  config = {
+    allowUnfree = true;
+    allowBroken = true;
+  };
+}

hosts/vulpes/services.nix

@@ -0,0 +1,4 @@
+{ pkgs }:
+{
+  openssh.enable = true;
+}