snapshot

hosts/desktop/flamingo/hardware.nix

@@ -0,0 +1,23 @@
+{
+  inputs,
+  modulesPath,
+  ...
+}: {
+  imports = [
+    "${modulesPath}/installer/scan/not-detected.nix"
+
+    inputs.hardware.nixosModules.lenovo-thinkpad-t480
+  ];
+
+  nixpkgs.hostPlatform = "x86_64-linux";
+
+  boot = {
+    initrd.availableKernelModules = ["xhci_pci" "nvme" "usb_storage" "sd_mod"];
+    kernelModules = ["kvm-intel"];
+  };
+
+  powerManagement.cpuFreqGovernor = "powersave";
+
+  console.keyMap = "de";
+  services.xserver.layout = "de";
+}

hosts/desktop/flamingo/system.nix

@@ -0,0 +1,3 @@
+{
+  system.stateVersion = "24.11";
+}

hosts/desktop/glacier/hardware.nix

@@ -0,0 +1,26 @@
+{
+  inputs,
+  modulesPath,
+  ...
+}: {
+  imports = [
+    "${modulesPath}/installer/scan/not-detected.nix"
+
+    inputs.hardware.nixosModules.common-cpu-amd
+    inputs.hardware.nixosModules.common-gpu-amd
+    inputs.hardware.nixosModules.common-pc-ssd
+  ];
+
+  nixpkgs.hostPlatform = "x86_64-linux";
+
+  boot = {
+    initrd = {
+      availableKernelModules = ["nvme" "ahci" "xhci_pci" "usbhid" "usb_storage" "sd_mod"];
+      kernelModules = ["amdgpu"];
+    };
+    kernelModules = ["kvm-amd"];
+    binfmt.emulatedSystems = ["aarch64-linux"];
+  };
+
+  powerManagement.cpuFreqGovernor = "performance";
+}

hosts/desktop/glacier/system.nix

@@ -0,0 +1,3 @@
+{
+  system.stateVersion = "24.11";
+}

hosts/server/abacus/backup.nix

@@ -1,9 +1,10 @@
 {
   attrName,
   config,
+  lib,
   ...
 }: {
-  age.secrets."restic-${attrName}".file = ../../secrets/restic-${attrName}.age;
+  age.secrets = lib.mkSecrets {"restic-${attrName}" = {};};
 
   services.restic.backups.${attrName} = {
     repository = "sftp:u385962@u385962.your-storagebox.de:/restic/${attrName}";

hosts/server/abacus/hardware.nix

@@ -0,0 +1,9 @@
+{modulesPath, ...}: {
+  imports = ["${modulesPath}/profiles/qemu-guest.nix"];
+
+  nixpkgs.hostPlatform = "aarch64-linux";
+
+  boot.initrd.availableKernelModules = ["xhci_pci" "virtio_pci" "virtio_scsi" "usbhid" "sr_mod"];
+
+  powerManagement.cpuFreqGovernor = "performance";
+}

hosts/server/abacus/microbin.nix

@@ -6,7 +6,7 @@
   inherit (config.networking) domain;
   virtualHostName = "bin.${domain}";
 in {
-  age.secrets.microbin.file = ../../secrets/microbin.age;
+  age.secrets = lib.mkSecrets {microbin = {};};
 
   services.microbin = {
     enable = true;
@@ -23,10 +23,10 @@ in {
       MICROBIN_ETERNAL_PASTA = true;
       MICROBIN_HIGHLIGHTSYNTAX = true;
       MICROBIN_PRIVATE = true;
-      MICROBIN_ENABLE_BURN_AFTER=true;
+      MICROBIN_ENABLE_BURN_AFTER = true;
       MICROBIN_QR = true;
-      MICROBIN_NO_FILE_UPLOAD=false;
-      MICROBIN_ENCRYPTION_CLIENT_SIDE=true;
+      MICROBIN_NO_FILE_UPLOAD = false;
+      MICROBIN_ENCRYPTION_CLIENT_SIDE = true;
 
       MICROBIN_MAX_FILE_SIZE_ENCRYPTED_MB = 1024;
       MICROBIN_MAX_FILE_SIZE_UNENCRYPTED_MB = 4096;

hosts/server/abacus/miniflux.nix

@@ -1,8 +1,12 @@
-{config, ...}: let
+{
+  config,
+  lib,
+  ...
+}: let
   inherit (config.networking) domain;
   virtualHostName = "flux.${domain}";
 in {
-  age.secrets.miniflux.file = ../../secrets/miniflux.age;
+  age.secrets = lib.mkSecrets {miniflux = {};};
 
   services.miniflux = {
     enable = true;

hosts/server/abacus/networking.nix

@@ -1,14 +1,4 @@
-{modulesPath, ...}: {
-  imports = ["${modulesPath}/profiles/qemu-guest.nix"];
-
-  nixpkgs.hostPlatform = "aarch64-linux";
-
-  boot.initrd.availableKernelModules = ["xhci_pci" "virtio_pci" "virtio_scsi" "usbhid" "sr_mod"];
-
-  system.stateVersion = "24.11";
-
-  powerManagement.cpuFreqGovernor = "performance";
-
+{
   networking = let
     interface = "enp1s0";
   in {

hosts/server/abacus/static.nix

@@ -22,7 +22,7 @@ in
         };
 
         systemd.tmpfiles.settings."10-static-sites".${root}.d = {
-          user = "lukas";
+          user = config.users.mainUser;
           group = "users";
           mode = "0755";
         };

hosts/server/abacus/system.nix

@@ -0,0 +1,3 @@
+{
+  system.stateVersion = "24.11";
+}

hosts/server/abacus/vaultwarden.nix

@@ -7,7 +7,7 @@
   virtualHostName = "vault.${domain}";
   backupDir = "/srv/backup/vaultwarden";
 in {
-  age.secrets.vaultwarden.file = ../../secrets/vaultwarden.age;
+  age.secrets = lib.mkSecrets {vaultwarden = {};};
 
   services.vaultwarden = {
     enable = true;

hosts/server/vessel/backup.nix

@@ -40,7 +40,7 @@ in {
     }
   ) (lib.attrNames backups));
 
-  age.secrets."restic-${attrName}".file = ../../secrets/restic-${attrName}.age;
+  age.secrets = lib.mkSecrets {"restic-${attrName}" = {};};
 
   services.restic.backups.${attrName} = {
     repository = "sftp:u385962@u385962.your-storagebox.de:/restic/${attrName}";

hosts/server/vessel/hardware.nix

@@ -18,7 +18,5 @@
     kernelModules = ["kvm-intel"];
   };
 
-  system.stateVersion = "24.11";
-
   powerManagement.cpuFreqGovernor = "powersave";
 }

hosts/server/vessel/system.nix

@@ -0,0 +1,3 @@
+{
+  system.stateVersion = "24.11";
+}