move shiniji wireguard secretes to only shinji host (refactor hosts)

1 files changed, 88 insertions, 0 deletions

diff --git a/hosts/shinji/default.nix b/hosts/shinji/default.nix
new file mode 100644
index 0000000..df49157
--- /dev/null
+++ b/hosts/shinji/default.nix
@@ -0,0 +1,88 @@
+# Shinji
+# System configuration for my laptop
+{
+  inputs,
+  options,
+  ...
+}:
+inputs.nixpkgs.lib.nixosSystem rec {
+  system = "x86_64-linux";
+  specialArgs = {inherit inputs;};
+  modules = [
+    options
+    ../../config
+    ../../home
+    ../../programs
+    ../../system
+    {
+      # imports
+      imports = [
+        ./sops.nix
+        ./wireguard.nix
+      ];
+
+      # options
+      hostName = "shinji";
+      monitors = [
+        {
+          name = "eDP-1";
+          scale = 1.25;
+        }
+      ];
+
+      # set power btn to suspend
+      services.logind.extraConfig = ''
+        HandlePowerKey=suspend
+      '';
+
+      # hardware
+      hardware.graphics.enable = true;
+      hardware.bluetooth.enable = true;
+      security.tpm2.enable = false;
+
+      # bootloader
+      boot.loader.systemd-boot.enable = true;
+      boot.loader.efi = {
+        canTouchEfiVariables = true;
+        efiSysMountPoint = "/boot/efi";
+      };
+
+      # kernel modules
+      boot.initrd.availableKernelModules = [
+        "nvme"
+        "xhci_pci"
+        "thunderbolt"
+        "usb_storage"
+        "sd_mod"
+      ];
+      boot.initrd.kernelModules = [];
+      boot.kernelModules = ["kvm-amd"];
+      boot.extraModulePackages = [];
+
+      # firmware
+      hardware.enableRedistributableFirmware = true;
+      hardware.cpu.amd.updateMicrocode = true;
+
+      # luks device
+      boot.initrd.luks.devices."root".device = "/dev/disk/by-uuid/ad489bfa-4280-44ea-8ad2-60347b516d60";
+
+      # root
+      fileSystems."/" = {
+        device = "/dev/disk/by-uuid/b43a7cf6-b9aa-44c2-ad29-da24ffa56901";
+        fsType = "btrfs";
+      };
+
+      # boot
+      fileSystems."/boot/efi" = {
+        device = "/dev/disk/by-uuid/6F93-6A0B";
+        fsType = "vfat";
+        options = ["fmask=0022" "dmask=0022"];
+      };
+
+      # swap
+      swapDevices = [
+        {device = "/dev/disk/by-uuid/57caa02d-8569-43e3-8bf9-09dd6f02b191";}
+      ];
+    }
+  ];
+}