add daedalusvm

data/pubkeys.nix

@@ -10,7 +10,7 @@ let
       hosts = {
         ds9 = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ+BBXufXAJhyUHVfhqlk8Y4zEKJbKXgJQvsdE482lpV" ];
         picard = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAm3UXZaN95WBUaS9SiHLNEuI1tP1x1w07qnYxPe+vdr" ];
-        musicpi = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhyp46xPOgZFgGsbSUdBtHWJeqFASu+LFjwUK8b+gSt" ];
+        daedalusvm = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKLjCl98zeOF9lk2eELpyvUMfivjhvYU8uvc9j6zWwZy" ];
       };
     in
     {

hosts/daedalusvm/default.nix

@@ -0,0 +1,31 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, inputs, pkgs, lib, ... }:
+let
+  pubkeys = import ../../data/pubkeys.nix;
+in
+{
+  imports =
+    [
+      # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+    ];
+
+  # Don't Use the systemd-boot EFI boot loader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  # Immutable users due to tmpfs
+  users.mutableUsers = false;
+
+  ragon = {
+    cli.enable = true;
+    user.enable = true;
+
+    services = {
+      docker.enable = true;
+      ssh.enable = true;
+    };
+  };
+}

hosts/daedalusvm/hardware-configuration.nix

@@ -0,0 +1,21 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports = [ "${modulesPath}/profiles/qemu-guest.nix" ];
+  boot.initrd.availableKernelModules = [ "xhci_pci" "virtio_pci" "usbhid" "usb_storage" "sr_mod" ];
+
+  networking.interfaces.enp0s6.useDHCP = true;
+  swapDevices = [{ device = "/dev/disk/by-id/NIXOS_SWAP"; }];
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-id/NIXOS_BOOT";
+    fstype = "vfat";
+  };
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-id/NIXOS_ROOT";
+    fsType = "ext4";
+  };
+}

secrets/cloudflareAcme.age

@@ -1,15 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 ugHWWw DE5KD+R+e1lb1o4cKFJlwXuOC5Ustc0P6d6HKMWHzh8
+-> ssh-ed25519 ugHWWw ET4RvPlyRq0RHTvTgA51jqYE3hukU+5b9Pqu6TUoUkc
-q696lgcVHGKQJjYrHqpa/8M8+qmFMEn7bGa/yqGXrmo
+xt/0GMZserIOWPXfl9/r2u/IOEecJc+7tzFD+QhtPmo
--> ssh-ed25519 UU9RSA qDj+5sLCjdgKVG4Hd6BbKh9nGZU4DJIubQwkJZ9QkmQ
+-> ssh-ed25519 UU9RSA ItHKphKY7MOaPcQ4zsUuqZFuhVoU0IYc6a7nxEnAs1M
-uk7e5NHKKkDi2OZq4d9aH8YCyulAjfkj55MNKUizZWQ
+IyxfKpwxoYSQdl0FzBZHx3SV2ye/CIWrNSf5zJXnuS8
--> ssh-ed25519 IbXxfw 1b1K7Nbkjwt6cNWvSQecu/e5bSNPB4C1puvxjxFjAkk
+-> ssh-ed25519 IbXxfw T3R7EbqDIO0cS0lNbojuaxWXF6A7E58oMO/EeriqyT4
-KM+/IpuG6C5217OIcbv7vUV1Sk45ckrl7ok2U94tHD8
+k72DGwseD3gWOgZCBGN8kBcxXG56DScf7A5HSFsXg1I
--> ssh-ed25519 WceKOQ dKiRYF/lEwyVxcZDSun2gL94laXMsTAwjkTLrfGeszY
+-> ssh-ed25519 WceKOQ Aq02UlWhhy308Fz3iLz+l6L/kXd1e1PU+UW9Ts/gTDw
-mviaDjsmaa/CLVvBoCK1gXLqc/R65+ZV6JIzTyzlwDE
+aVBId1iQ40Brqt/1+Rv6pRQPiOEcwB5Bi6YyKJ6EKu0
--> ~j6)4y\?-grease 0KF%
+-> qU-grease ,?V >0a
-6xkODqF9GTL/jmnXMMRMW2npQW9tAQydKOdPnRYO4BmpENEaW2sNMUXSonubp5t0
+KZSxLSsrGh7/U54MJzoLhszWoskuQAANf60alfqhUumwUCEzdRReg1iKWbqZyppz
-M89ut56ZfIcW5A9eul/JPY62osMTlpqaJnllud3YWr2Ufv2jOGGYCCwrWRXwjnyT
+DVkEmoLGwrItSacwDNuqRWv1DiNo+P71NBp6SvMN5RLvI6JQsheMZz3ADwaYSw
-a4VL
+--- HI/LInQ7KkTsG15JUSfVEeCwAutBqU1SxrfA+5dZwag
---- a6EiNzIGd2LSO0jB+c7dSSvQIWknjxvVuV0ZyiWT1iw
+¡pHÌ<48>Í«p›¢¹Ö¸I‹-·2È3S›m¾¨º¥‚¨àg6ÿu@Y0ÁŸy¤¼¸¢‹ÕÜÛAĵ°¿]Ò,	¼ƒÃ4̱=%ù.÷s=¤HZá±KR[MY—¿ÀùŸv
-EVœ¿H hÈ…™ayž{˜nRÀVD“O¬ŠJ0CÆl¦ô4cn5_¤[v.ª7sq¦¹bÔ}š»ç‰û(ÿfò‡<ÿ€É×Ò‹NÛ®?Xvì‹Â-(%kª-ºÀ

secrets/gitlabInitialRootPassword.age

@@ -1,12 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 WceKOQ M3py3B6cVKa70y/2P/7IGd84gCnFkTuY5Eav2FHEdjE
+-> ssh-ed25519 WceKOQ 7WC4xzrGVJ/QxJ783jHIYc/dE/bpISFoBh0qkydAhgs
-3iODa4p5fxmORhz71XLov3EgVdCz3OXw4JFmcvryKbI
+E23G1Bu/5y/z1LGWTomgwrWl7pkEVHKhKGeVElThiW4
--> ssh-ed25519 ugHWWw tORpqcjWk9OGNK9FU/RIWrLFpgilsRM10yPR/289F0c
+-> ssh-ed25519 ugHWWw 2qsCCYr3hNKA5eFtEeq2FgHRHYAbVLtQL5vpWq4Zb2Q
-nS8Hh1JSkgDy4Wzwt4XegwYvIrkCpm2gVal18uFK3Js
+g73nqZivYbGG32BriTXscR7wGNIpvyjwVxilfFJkAuU
--> ssh-ed25519 UU9RSA +dC9ZdLbum/pAsXCpqmCWkR6A9cRATSKiQZt9YxonTo
+-> ssh-ed25519 UU9RSA IV6dk4m5KDww0J8T8+7UsElqI/a2/FJh16MgAreMlwM
-oJBIT5lM5Aqi3DB1lF/bIF1fwAaSHyYQCl1iEro9kZE
+ruI+CosRy++bV1vASimIic7fVeKad3tFJ+iazJoOXvo
--> cX}4N%W-grease
+-> F`W-grease "?jH>\#2 ,;^35J d8E@S%n OwSYRTN
-DphAyC4xwA7WxoDZ1fzuYajR+Pkn5ItjwWG48BVltOJ1qrHJiKxvpIXOZsfm/alF
+f6Yk3eBC2OhWTw
-baZr5hb4ZM9TG7/DiJ4WMpE/B9uCVyBZXWZOEng
+--- ddf26adLz8aelGPNJ8NVn7OXKOhC7qqqegjN0T/2UII
---- B48/JaTdKI8drTxRmNeJD31a7sbyAztdpnsvk8t91GQ
+Öl¦;čô¤Ďźěö:3x·™’âAś2´B‡˛<E280A1>¨Ą;áYÜű:<YŘq9pHÁ´C¤ZfüŤ4˝ŽTßúÖ
-¥¨GøÓU8Þjï-ôƒçÙ‘8é—Ù ½EêBhA‹º¦§Ê¨Ÿ<02>8!Y<>ãßY±)¼ò½úK¢£Å

secrets/hedgedocSecret.age

@@ -1,11 +1,12 @@
 age-encryption.org/v1
--> ssh-ed25519 WceKOQ DRQr3QCZ5LLySeGDmKrqDFrJ5q33IKD1In878dEFsyA
+-> ssh-ed25519 WceKOQ 8d8HyUJjkB9EOGGhEZVNfynvk3eKCantalgxdmaLkBo
-dPyzC+zamdwnyLIlbHJHr8hS72TEQUMGWbCehH8O8Hg
+y2KGRQLZe8Gvu24PScvILyL4vV93FkexYwn6Ok5F64g
--> ssh-ed25519 ugHWWw soOwkh841qpnWgcirZSEHk/KzgEqSRWQPO9w4hsCcmA
+-> ssh-ed25519 ugHWWw pkc3SMj73eGC4NSIWaWdfGXLZapuPdIfFXpwEFMcMR0
-b/bLaU6Zn1owqP/ONvEJMys+aeU/pXXSJa2T1FppgcA
+2BFAifWKMCD80VzZPUCQd5M+GxVE2G9Xv+t1yrJhC0E
--> ssh-ed25519 UU9RSA dsSrrUht6Wzplekaf4vhtvKpGwgzlLDsSFZKsvWqiiA
+-> ssh-ed25519 UU9RSA cmoqVr04Ib1/chCsf1qawzenGIWoWBzTJzEtg0oP7hs
-GHVmkuN4pJ0RIg11HXjQmzWzShbGAsPDSsCPNBKBQ8E
+cCuChiH5SroqPkfn0xxwwzMMO81TVXPIYteWsz5IyH4
--> ;(Ko;&-grease H}A R
+-> #gh9HH;k-grease
-RzUJa+bwqrE2S2dficADVL6Krr85qm7Iqskw6iPLYbZ6e0JVgMsdHV0/6Q
+H9DftVHq+s+eHCPpAOLPMDeolhXZFL5p0uV90lkIFrn0nynT930VRyEDG9mzd/JT
---- oMxnaewPxjwhhxFOJEuWP2NzyZDt8gcfoZj57+AmckU
+ESNojwaJXiiV86NWXerwm/GTzuB4MjBOnvbjPSuYCvXONudOf+4do502S/6h5sI
-®¥¤‘xý¯p=ˆytó®U%Ä,?ëøˆ¢EÖ]ª÷ˆÆ±1É”–øm<C3B8>Í€ánUþ.§I̸Nhs}Í°\Vç'üÖÿU<C3BF>,¬yHI¦þ
+--- AOpthzyHcx4saVdHISAc0mL2NXNdplXL10vbCTt2YSE
+õ(ûŠ3íU„®‹%xÁÅ0›Y2%«a›#]=99˜Ssj$2œyˆ/7)ZÇ•X]8ý¶[£Í64<36>¬9oRZ×+ẻfN­ª”øç

secrets/paperlessAdminPW.age

@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 IbXxfw R5AD+t/S4rz3t7F2YVMHqRtXwdkaEv8A5tMqCRoT218
+-> ssh-ed25519 IbXxfw UW6LqQ3v8J1rqOSHizL/OErakPHGkNo12Bzw9YMDqSw
-Q8KzZWjuxPTkqCY9s4hkSb7ijVk4iQ/174+kasXf7cM
+RXaNB8L4htMSwH3JZlUfetrMpZeJVL69F2zxVEd9dJM
--> ssh-ed25519 ugHWWw FSmejSaccWyUa5ALkxLVC4qtPU528TAp1Q1tijRUEzM
+-> ssh-ed25519 ugHWWw otkAeu94Olh6kSQJXSBQKnEP6elPRElQhrbkttVpHxQ
-9dc3WgC/3kSK3zb6uG+3gWNCli1tAk0k4K4o6GFy9WA
+4AMes9WPXIJ2wlpx4nwaKIN483GIyJKbkKK+YFU8FC4
--> ssh-ed25519 UU9RSA 0283kXKNQpMa04ZcDcD6M4ln5avF6gw/3qh48nYhemU
+-> ssh-ed25519 UU9RSA L5nDWEXhWjaLjpbCF1QiPjzPkvKiDP9b2Km2jZ0cTVk
-r5PZ/EZEzjp075i5FUt4iQXf6OkBr0WmDr/YlGTnbko
+Fwy+lP5J06Tl/eRfcgoXBiqRWU414zAJ9OqW8sDx0rI
--> ^E&)-grease O.r^p897
+-> -zj-grease C2W:~L T
-p3mQhe+BojKl5+Gvpxy6F0BZuLWEY1wW0ybKd/RITiXZgDeMhw
+Iyrfxg
---- xUsLTuxsE7ad8k2/o5i7t4iQPIOieFqHNsWOXk/d01s
+--- 2JwVqVwEC9JO9O6jUnfZdi1yrR41U+jKyYCeeAVv44w
-쨗tå¥xÖí‹ß8ë‹9Á˜YllTVPpÚDH1gz"dÐ]'~t*“hÝÑÛñÞ>‚
+ž!«îKˆâž‰ïÇùÏ/qeP%e {ä%d1BDîã
É(·Rö³å_˜T¥Ÿ§`”kW¿IÈñF¯®

secrets/picardResticPassword.age

@@ -1,13 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 WceKOQ k2R5Jitq8cEQPR6XFnucyYE3BDlBTnXeXakig5Rb6CQ
+-> ssh-ed25519 WceKOQ RwA4mxUnGSGTjRzwnsoKl3X8EpVwDSF/e3jC2NkvfDY
-aXWMcZDMsC4UqpgkUywkOuHGTb5aeTHvpKNjxEUfTDo
+vIE7X5qYCK7ndyu4JcKlnSOIpHAmHBMW8zMsGHVJ0F4
--> ssh-ed25519 ugHWWw 0CCoHYRYlYq5wFt8R26y5pSfSqTQzcR4jzdWl2E12TQ
+-> ssh-ed25519 ugHWWw NETKlsTyZsvJVSO+vMAnR3bD6j1reHyUA2QXpzRIEhM
-6qjep1dn6B5DA2lcMZXItnAzxE2eHY/XSJYVyDGRwW4
+qh2ricjY4XgRYnj5pROo9URUkgy8/6/SLSkenTxNVnE
--> ssh-ed25519 UU9RSA CMo9lkcazC9TXypP/o/majaFp0UP++XAbh65TYvEiDo
+-> ssh-ed25519 UU9RSA E8dytvN4FZ7uqDp6b+1jD7DcDisQ4mQhMrorHM9sHno
-GD1/sNmjRM2+9RpPbCMoMU9Q0JQb2jsjji1Yt0+LR9w
+9YbTgKRVd7quVbhYY1EhJKFR621ajrflg5Hh2bHJqwo
--> +!c:-grease zi]- eO\*
+-> paifQ-grease 3! pvk7' k"; of-g
-nKAD5+pPHB3K+HtpEHA+bDBG/P9ec6pb
+5eXUYmAl9ASz
---- 5x5Rpg23SqXQK/sSiUNEZ0tdXF+GxgBSTWVSbIOmmNw
+--- 1RZ5gqCnISWu2msk5KN2F0XZ76HC58y25g8Zt/zLKAo
-IåXnTBt·Œh¥|XÇwmôúèÎÓºSç=Sr”MCàâè<C3A2>Š²{¢¢MÂ…›^¯µÒHa›„£Wâi
+±áo·Z¿O‰$P®Ü{º"¹}·—¦zÉà¯ÚTŽô²ªl/ÙÐTàym˜Ûz«¼íº:«È¤âqþ<71>ÏBµË­–ÿ"©s¥'²å¸”B¡zÍý°/k5&@ô_<C3B4>¦nÒ0#Òx
-;†}ÿ
-,<2C>€:´—Ït’=öÓâ<C393>ùÐrC|À|h«©”$¹†–

secrets/ragonPasswd.age

@@ -1,16 +1,15 @@
 age-encryption.org/v1
--> ssh-ed25519 ugHWWw +FHwZvsw61Oz94pLCZI3Hf0MnKVrvBrZ5NIXA5pABjM
+-> ssh-ed25519 ugHWWw Yh7yZR7Mp5TuPD3r33rFcSIEuURgH1qKZuWWIw5z+1Q
-741DC7k+1yLIOl9Wc4A50kywIrK3BCuKEVZ9fP0l/EA
+NgGop95qQuLT/liGCPBCgNmKsRjrE9yokqhpUU2dYQU
--> ssh-ed25519 UU9RSA V2/HDc2w03ArHLZBccHOUVf6851VI9DtHwch9niHXXU
+-> ssh-ed25519 UU9RSA ALeQp7EnIcGH5Yl5C7RWfdE9CMhvbzRXCjKXSzqi7gI
-B9d3p6R7wGQmcpthbHi3I0/HCLDizohW8EiPaYKsp8U
+vDGWh6S4EbJBeVQIuPPZP1TSaFP9uoW+shEstBzxjFs
--> ssh-ed25519 IbXxfw LlZkMHSKYHdTtJvO6VBybmotdsVU8yplstUGeMKiA18
+-> ssh-ed25519 kKx7Qw XeJW2U6za78lTMIdduUjgYU2NFQBWL0O4AQPaXx5TCk
-4bu+TDWhkeSPycYBBcPoai+fCP4PppgBXewcqXYem5U
+4NoBvjshDWswGc90Yb58X9kDceZRVVI4h45N0zG6Xow
--> ssh-ed25519 U2IFSw 16fypyHqQkH8W1RjDlDid6wpGygBYCtgqKYIn1KfYEU
+-> ssh-ed25519 IbXxfw VJJ5Ndu8/8L3iqFIMtqGqyqYfZCQVdlmBmsvEgwxkmQ
-6wevhYdYIoWlAcJ9ykkixo9RTx9YJ0qBkXJEqX0DB5E
+XnzVDYZ8Bp6gaiqujswGB+q+BtSF10PPpjWGVjC710g
--> ssh-ed25519 WceKOQ QTMaAnkk+4cNTi8A4SeSKVMXbVQ2Pmd5mqM3DlcXHSU
+-> ssh-ed25519 WceKOQ q58TN4jXySWTsE+K/3xnN6MIMLfyv/3wx4mIOCquskw
-L3ee5gcgJnN1OdsRbYiTmAWppgPoBG2uGcj7UhBaDPk
+BMSVu3HWrVgG54IaTagQN4Og4MJl3d++w0kPrZ2qpIY
--> p-grease i|i(!: }G:
+-> 2Wr8^uaE-grease 8 RU&_6KOI
-zg
+JOg
---- a5FUpvshJxUeYHfefzhscXawq2s/IT5eKrbf+jvY8wI
+--- KJ9TUBOF7kG3MwHQAMqIKPKNsIFrT6Ddb4QDJba8ZEo
-7	íß‘F—FĐüĂŐX˘}«&č-=ąîY–|dÓ

ͦŞqÜ‘¶
+ïÝÏàMýPâo5ú^•Â¸¹8Ÿö"¦ÊÎ*:Ôá}1ÍtÞÚLË”@Ñ‹ t–dÊ7ZòþȘYå–í/‰(]¦*Q%[àw‡+AÒá¶öè:$ûL±'­D«=_¹1 y™ø³9uÝMÁ‘hZ­0ǯQ½Ý`æÿ«5îÀõd©p§‰_†
-R”ÎLÇ\Zý&óĆЍцěi<C49B>«‹pĎ.Ĺyß^kjĚŃÖäĹg¨žFljeµe©Î¸¨2{<7B>qvnôÄ&f›ÎeÇy@IÓ—"h˛h$č"qX<71>ýfYHÇ|ô