hosts/eurovm/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

{ config, pkgs, ... }:

{
  imports = [
    ./hardware.nix
    ./disko.nix
    ../../modules/common.nix
    ../../modules/sops.nix
    ../../modules/acme.nix
    ../../modules/caddy.nix
    ../../modules/adguard.nix
    ../../modules/miniflux.nix
    ../../modules/actual.nix
    ../../modules/cgit.nix
  ];

  networking.hostName = "eurovm";

  # Admin user - authorized SSH keys for both Einstein and Galileo devices
  users.users.admin = {
    isNormalUser = true;
    extraGroups = [ "wheel" ];
    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAwAgL0o4NVonSG07Xu4Eai84ns4AjoZj2V7dGC9nXit karanjayachandra@Einstein.local"
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH+qnLTnorv+I2rSSfGjNiCuX/W5AxoNgAdu+cTOyKzW Galileo"
    ];
  };

  # Allow admin to use sudo
  security.sudo.wheelNeedsPassword = false;

  system.stateVersion = "24.11";
}