Migrated from multi repos to monorepo architecture.

2026-05-02 12:52:08 +02:00
parent 72668492f5
commit 73adb395c0
218 changed files with 9639 additions and 57 deletions
@@ -0,0 +1,18 @@
+{ modulesPath, config, pkgs, inputs, ... }:
+
+{
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+    (modulesPath + "/profiles/qemu-guest.nix")
+    inputs.sops-nix.nixosModules.sops
+  ];
+
+  # System
+  system.stateVersion = "25.11";
+
+  # Secrets management
+  sops.defaultSopsFile = ./secrets/secrets.yaml;
+  sops.age.sshKeyPaths = [ "/home/numbus-admin/.ssh/id_ed25519" ];
+  sops.age.keyFile = "/var/lib/sops-nix/key.txt";
+  # Secrets
+  sops.secrets."authorizedSshPublicKeys" = { owner = "numbus-admin"; path = "/home/numbus-admin/.ssh/authorized_keys"; mode = "0600"; };
@@ -0,0 +1,48 @@
+{
+  inputs = {
+    # Core Nixpkgs
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
+    # Numbus server configuration
+    numbus.url = "git+https://gittea.dev/numbus/numbus-computer";
+    numbus.inputs.nixpkgs.follows = "nixpkgs";
+    # Disk-partitioning helper
+    disko.url = "github:nix-community/disko";
+    disko.inputs.nixpkgs.follows = "nixpkgs";
+    # Secrets handling
+    sops-nix.url = "github:Mic92/sops-nix";
+    sops-nix.inputs.nixpkgs.follows = "nixpkgs";
+    # Power savings
+    autoaspm.url = "git+https://git.notthebe.ee/notthebee/AutoASPM";
+    autoaspm.inputs.nixpkgs.follows = "nixpkgs";
+  };
+
+  outputs = { self, nixpkgs, numbus, disko, sops-nix, autoaspm, ... }@inputs: let
+    # System definition
+    system = "x86_64-linux";
+    pkgs = import nixpkgs {
+      inherit system;
+      config.allowUnfree = true;
+    };
+  in 
+  {
+    nixosConfigurations = {
+      numbus-server = nixpkgs.lib.nixosSystem {
+        inherit system;
+        specialArgs = { inherit inputs; };
+        modules = [
+          # Numbus server configuration
+          numbus.nixosModules.numbus
+          # Disk-partitioning helper
+          disko.nixosModules.disko
+          # Secrets handling
+          sops-nix.nixosModules.sops
+          # Power savings
+          autoaspm.nixosModules.autoaspm
+          # Core host configuration
+          ./configuration.nix
+          ./hardware-configuration.nix
+        ];
+      };
+    };
+  };
+}
@@ -0,0 +1,9 @@
+# .sops.yaml
+
+keys:
+  - &primary $SOPS_PUBLIC_KEY
+creation_rules:
+  - path_regex: secrets/secrets.yaml$
+    key_groups:
+    - age:
+      - *primary
@@ -0,0 +1,2 @@
+authorizedSshPublicKeys: |
+$SSH_KEYS_FORMATTED