Initial commit

modules/infra.nix

@@ -0,0 +1,96 @@
+let
+  serviceDomain = "jelles.net";
+  adminKeyPath = "/var/lib/sops-nix/admin-key.txt";
+
+  sharedIdentity = {
+    realName = "Jelle Spreeuwenberg";
+    authorizedSshKeys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAU2LydkXRTtNFY7oyX8JQURwXLVhB71DeK8XzrXeFX1 openpgp:0xA490D93A"
+    ];
+  };
+
+  kiriAccount = sharedIdentity // {
+    emails = {
+      main = {
+        address = "mail@jelles.net";
+        primary = true;
+        kind = "mxrouting";
+      };
+      old = {
+        address = "mail@jellespreeuwenberg.nl";
+        kind = "mxrouting";
+      };
+      uni = {
+        address = "j.spreeuwenberg@student.tue.nl";
+        kind = "office365";
+      };
+      work = {
+        address = "jelle.spreeuwenberg@yookr.org";
+        kind = "office365";
+      };
+    };
+  };
+
+  ergonAccount = sharedIdentity // {
+    emails.work = {
+      address = "jelle.spreeuwenberg@yookr.org";
+      primary = true;
+      kind = "office365";
+    };
+  };
+in
+{
+  den.hosts.x86_64-linux = {
+    polaris = {
+      inherit serviceDomain;
+      sopsAdminKeyPath = adminKeyPath;
+      sopsAdminKeyUsers = [
+        "kiri"
+        "ergon"
+      ];
+      displays = {
+        "LG Electronics LG ULTRAGEAR 103NTYT8R290" = {
+          primary = true;
+          position.x = 0;
+          position.y = 0;
+        };
+
+        "LG Electronics LG ULTRAGEAR 103NTJJ8R332" = {
+          position.x = 2560;
+          position.y = 0;
+        };
+      };
+      users = {
+        kiri = kiriAccount // {
+          syncthingId = "6HBAKXB-DB3B4H2-BODCAXF-KD23H5W-6X5LGLC-ZJHZHLG-7U7YMGO-BB6IXQ3";
+        };
+        ergon = ergonAccount;
+      };
+    };
+
+    zenith = {
+      inherit serviceDomain;
+      sopsAdminKeyPath = adminKeyPath;
+      sopsAdminKeyUsers = [
+        "kiri"
+        "ergon"
+      ];
+      users = {
+        kiri = kiriAccount;
+        ergon = ergonAccount;
+      };
+    };
+
+    orion = {
+      inherit serviceDomain;
+      requiresSshRecovery = true;
+      sshRecoveryUsers = [ "kiri" ];
+      sopsHostSshKeyPath = "/etc/ssh/ssh_host_ed25519_key";
+      sopsAdminKeyPath = adminKeyPath;
+      sopsAdminKeyUsers = [ "kiri" ];
+      users.kiri = kiriAccount // {
+        syncthingId = "NNRNQKZ-OWPHSVA-B6KKBHE-SDYLSTV-7SVHGPR-NEWLKPL-4MWNJG4-G5FHUAI";
+      };
+    };
+  };
+}