Initial commit

modules/hosts/orion/default.nix

@@ -0,0 +1,40 @@
+{ lux, ... }:
+let
+  lingerForUsers = {
+    user.linger = true;
+  };
+in
+{
+  den.aspects.orion = {
+    provides.to-users = lingerForUsers;
+
+    includes = with lux.services._; [
+      caddy
+      openssh
+      vaultwarden
+      radicale
+      actual
+      gitea
+    ];
+
+    nixos =
+      { pkgs, ... }:
+      {
+        environment.systemPackages = [
+          pkgs.kitty
+        ];
+
+        networking = {
+          firewall.enable = true;
+          firewall.allowPing = false;
+          nftables.enable = true;
+        };
+
+        # Use ssh authorization for sudo instead of password
+        security.pam = {
+          sshAgentAuth.enable = true;
+          services.sudo.sshAgentAuth = true;
+        };
+      };
+  };
+}

modules/hosts/orion/disk.nix

@@ -0,0 +1,63 @@
+{ inputs, ... }:
+{
+  den.aspects.orion = {
+    nixos =
+      { lib, ... }:
+      {
+        imports = [ inputs.disko.nixosModules.disko ];
+
+        disko.devices = {
+          disk.disk1 = {
+            device = lib.mkDefault "/dev/sda";
+            type = "disk";
+            content = {
+              type = "gpt";
+              partitions = {
+                boot = {
+                  name = "boot";
+                  size = "1M";
+                  type = "EF02";
+                };
+                esp = {
+                  name = "ESP";
+                  size = "500M";
+                  type = "EF00";
+                  content = {
+                    type = "filesystem";
+                    format = "vfat";
+                    mountpoint = "/boot";
+                  };
+                };
+                root = {
+                  name = "root";
+                  size = "100%";
+                  content = {
+                    type = "lvm_pv";
+                    vg = "pool";
+                  };
+                };
+              };
+            };
+          };
+          lvm_vg = {
+            pool = {
+              type = "lvm_vg";
+              lvs = {
+                root = {
+                  size = "100%FREE";
+                  content = {
+                    type = "filesystem";
+                    format = "ext4";
+                    mountpoint = "/";
+                    mountOptions = [
+                      "defaults"
+                    ];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+  };
+}

modules/hosts/orion/hardware.nix

@@ -0,0 +1,38 @@
+# Do not modify this file!  It was generated by 'nixos-generate-config'
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/system.nix instead.
+{ ... }:
+{
+  den.aspects.orion = {
+    nixos =
+      {
+        config,
+        lib,
+        pkgs,
+        modulesPath,
+        ...
+      }:
+
+      {
+        imports = [
+          (modulesPath + "/profiles/qemu-guest.nix")
+        ];
+
+        boot.initrd.availableKernelModules = [
+          "ata_piix"
+          "uhci_hcd"
+          "virtio_pci"
+          "virtio_scsi"
+          "sd_mod"
+          "sr_mod"
+        ];
+        boot.initrd.kernelModules = [ ];
+        boot.kernelModules = [ ];
+        boot.extraModulePackages = [ ];
+
+        networking.useDHCP = lib.mkDefault true;
+
+        nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+      };
+  };
+}