host: add sakhalin

hosts/default.nix

@@ -28,6 +28,14 @@ let
     };
     transformer = inputs.haumea.lib.transformers.liftDefault;
   };
+
+  sakhalin-module = { pkgs, ... }@args: inputs.haumea.lib.load {
+    src = ./sakhalin;
+    inputs = args // {
+      inherit inputs;
+    };
+    transformer = inputs.haumea.lib.transformers.liftDefault;
+  };
 in
 {
   whitefox = nixpkgs.lib.nixosSystem {
@@ -67,6 +75,15 @@ in
       inputs.bin.nixosModules.default
       redfox-module
     ];
-    specialArgs = { inherit inputs username home; };
+    specialArgs = { inherit inputs; };
+  };
+
+  sakhalin = nixpkgs.lib.nixosSystem {
+    system = "x86_64-linux";
+    modules = [
+      ./sakhalin/_hardware.nix
+      sakhalin-module
+    ];
+    specialArgs = { inherit inputs; };
   };
 }

hosts/sakhalin/_hardware.nix

@@ -0,0 +1,8 @@
+{ modulesPath, ... }:
+{
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
+  boot.loader.grub.device = "/dev/nvme0n1";
+  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
+  boot.initrd.kernelModules = [ "nvme" ];
+  fileSystems."/" = { device = "/dev/nvme0n1p1"; fsType = "ext4"; };
+}

hosts/sakhalin/default.nix

@@ -0,0 +1,16 @@
+{ pkgs, ... }: {
+
+  environment.systemPackages = with pkgs; [
+    curl
+    htop
+    wget
+    git
+  ];
+
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOqoRDiXXxBKU0FjnT2YcFnczYBKMKXGPgD9IVfBg5gq"
+    "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIHnLWTS5/vPyPFY+tCVYn3Ejf3NQpQzcGnWLQTyE7lbzAAAAC3NzaDpwYXNzZm94"
+  ];
+
+  system.stateVersion = "24.05";
+}

hosts/sakhalin/networking.nix

@@ -0,0 +1,9 @@
+{
+  hostName = "sakhalin";
+  firewall.allowedTCPPorts = [ 80 443 ];
+  firewall.allowedUDPPorts = [ 443 11111 ];
+  firewall.enable = false;
+
+  useDHCP = true;
+  useNetworkd = true;
+}

hosts/sakhalin/nix.nix

@@ -0,0 +1,17 @@
+{ inputs }:
+{
+  registry = {
+    nixpkgs.flake = inputs.nixpkgs;
+  };
+
+  extraOptions = ''
+    experimental-features = nix-command flakes
+  '';
+
+  channel.enable = false;
+
+  settings = {
+    nix-path = [ "nixpkgs=${inputs.nixpkgs}" ];
+    auto-optimise-store = true;
+  };
+}

hosts/sakhalin/nixpkgs.nix

@@ -0,0 +1,6 @@
+{
+  config = {
+    allowUnfree = true;
+    allowBroken = true;
+  };
+}

hosts/sakhalin/services.nix

@@ -0,0 +1,4 @@
+{ pkgs }:
+{
+  openssh.enable = true;
+}