feat: add c4patino@mutualofomaha host nixosConfiguration and homeConfiguration

.sops.yaml

@@ -6,6 +6,7 @@ keys:
   - &c4patino_chibi age1r9285z8xmtj7g6alau7xp946p4fguvtd62dz05nvfgxyujhmfs7svp0uyw
   - &c4patino_shiori age185cchggrqp8v9wryj7npdvv3h2z735zamtqgchu5tltmjmpsaehsteyrpk
   - &c4patino_tsuki age1uvdnhvu83fafnvvkfwx5e3jt7qfqppytqu0rnhwtc3ruyatrxsgqwzjvjz
+  - &c4patino_mutualofomaha age1988jz0qfj6m9xfenhd292tkxwyxvzhv79gkgrhm0gep353kej3yqe6zp86
   - &master age1q4c2fy5hrjg5pww86k3wsamknc67vxtfc7k5he5exndwag5fjehqv4kymv
 
 creation_rules:
@@ -20,6 +21,7 @@ creation_rules:
         - *c4patino_chibi
         - *c4patino_shiori
         - *c4patino_tsuki
+        - *c4patino_mutualofomaha
   - path_regex: secrets/sops/arisu.yaml
     key_groups:
       - age:
@@ -55,3 +57,8 @@ creation_rules:
       - age:
         - *master
         - *c4patino_tsuki
+  - path_regex: secrets/sops/mutualofomaha.yaml
+    key_groups:
+      - age:
+        - *master
+        - *c4patino_mutualofomaha

homes/x86_64-linux/c4patino@mutualofomaha/default.nix

@@ -0,0 +1,52 @@
+{
+  config,
+  host,
+  inputs,
+  lib,
+  namespace,
+  ...
+}: let
+  inherit (lib.${namespace}) enabled;
+in {
+  ${namespace} = {
+    bundles = {
+      common = enabled;
+      development = enabled;
+      shell = enabled;
+    };
+
+    cli = {
+      tools = {
+        presenterm = enabled;
+      };
+    };
+  };
+
+  programs.ssh.settings = {
+    "github-mutual.com" = {
+      HostName = "github.com";
+      User = "git";
+      IdentityFile = "~/.ssh/id_ed25519-mutualofomaha";
+      IdentitiesOnly = true;
+    };
+  };
+
+  sops.secrets = let
+    inherit (config.snowfallorg) user;
+  in {
+    "ssh/ceferino.patino@mutualofomaha/private" = {
+      path = "${user.home.directory}/.ssh/id_ed25519-mutualofomaha";
+      sopsFile = "${inputs.self}/secrets/sops/${host}.yaml";
+    };
+    "ssh/ceferino.patino@mutualofomaha/public" = {
+      path = "${user.home.directory}/.ssh/id_ed25519-mutualofomaha.pub";
+      sopsFile = "${inputs.self}/secrets/sops/${host}.yaml";
+    };
+    "forgejo" = {
+      path = "${user.home.directory}/.forgejo/token";
+      sopsFile = "${inputs.self}/secrets/sops/${host}.yaml";
+    };
+  };
+
+  home.stateVersion = "26.05";
+}

modules/nixos/bundles/common/users.nix

@@ -39,6 +39,7 @@ in {
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDzsxorrFOF5Eq0ABSXRMh/WZwxSxs1hCMG8RnbMF6yv c4patino@chibi"
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDlOHQEPIDtc8ffn1g7fmrUGvYnKGgX4f2dQYaQ5HbV4 c4patino@shiori"
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFCQww3/93dUGOr471IznJadCaIhKWPSQJM8dsRdZ1cw c4patino@tsuki"
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHXANLh9+yAgVwFQuAIR8RU5q/z4sHbx2UIpo4F/ZSh c4patino@mutualofomaha"
         ];
 
         shell = pkgs.bash;

secrets/sops/secrets.yaml

@@ -65,76 +65,85 @@ sops:
     age:
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXNzVMWU1ucmhJTTErUFBH
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzVnNXNld5VEYzNnVkaVlt
-            ZzhEZTRRMnpOckJZa29uendnYU5NbmoxeEFBCmdueldXSHlheVlUNUw1VWpEMG8w
+            QlUwQzZ3M2dRK05iaWJpQ2phOExSaDdMbUM0Cm1pQVJjYlg1REpSOS81MlBuWDhG
-            Uk40NG1TcTJVY2pEV0RlKzJrTUl6bXMKLS0tIFVYVVh1djQ4SmpXZjM3L1o4WG42
+            dmFsWjZkajBRQTZ6aUNzYyswdTdwWjAKLS0tIGlLSmFvVHh3TG5LS0xPR0NtZnV5
-            a1Vjd1d5dFpTanBwczhPNW1LaGp0Q0UKtGfu/q2DJhGILUadB4pAimttOj3IxvKL
+            dEplNUFmTVZQZDIvNjZib0xTVkR1WXMKQaFJEpMf0XEtGMoZXg/8WDN1yLqVZa5U
-            P6EWFvkwM9E4SUlN5skto4auqxjFwXg8auipgvKECE8eD8WKmEkd/g==
+            Ca/4XwgpFzNWDZUPLw9r/fzhe62DX22YpOD9gJW4v52uqHaHCKsMnQ==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1q4c2fy5hrjg5pww86k3wsamknc67vxtfc7k5he5exndwag5fjehqv4kymv
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1c1BzZCtMeE9vKzlGN25o
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAweW80NkIzN2w4SktQbTRC
-            R2Z3ZUh1bTlXVkZVWWJQWUJLSDd5TExIWUhFClJTSTJNMVVQWFN3REo5WER1UlVD
+            L2JGRWNHRHNGT1VpcERzMGJIb21HbWFLRm1vCm1yVkZaMmtOMEsxdFBzK1NmS3F4
-            UDFoYUY2VWlsbm92TlRSeWFzOEp4bWsKLS0tIGI0RzlNM2tNbVRpOE1ZZDRVbEZs
+            ZnhobWttdExzZHBTMjhIdThlaWs4bkkKLS0tIDl3TVJidjJoT3lpNXM5L2VmTlhS
-            b2pDNHo0bW9oa0Y5VGJQMUhKRUduemcKtUFO8yA8DAue4X1sKSlq7CWT0xNtbmr+
+            dGU2QkpXQWR3N3hadDBWMU00UEF0N2cK1L7jZhnHWrzd+J6glr4RrZNYLqLvWOVL
-            CAdB1W+pw8Tz0Mj3/x3w2WyciIEZU26QUsZUVndIFWA/i8HYpAqSIw==
+            6niMxSF8t3Jgz186lCRQR5LpQ2zsX/eVBXjHFcyTaFeL9Rz1dx6+aA==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1redpndk4tj0jy6d8cl98rkt5euxzpfzc8dvlhfan5a349tl7tg5s5j6zav
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkc2l5a3pyRHl0cjkxazUy
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjeHJYOTl4bmlCaElJY08w
-            VjFwZnpETkhXYzAxQk9oMWJZSmV3NjdFa0g0CnJLUndWZEVuQnRISVFGTjdpL3Uz
+            MzNSRW1zNjM5dU1JaGdBd0g1dFU4TjJ2L0NvCnFKNDluWEFnNTBaMTE4QUFSaitI
-            WVV4c3lydzY4UGZmaHZCN2hTb0p5aTQKLS0tIHpJUkFZQ0xHbmNTVTNNNkxnZG1N
+            SzNtRnVTN29LMm1PR2gvWEM1clpkYmsKLS0tIFdhYlowNGoxZitJSDZpamxUcnRS
-            eWdjTXNOcHVhR2ZPTDAwZ24yT3cxcU0K2hTqPJN/rtWF3zIbS5uG9bjQoxYd8XEr
+            cTdNaGczbWR2cyswd21sRGk2V1VuNmMKV5Prv/sgaU7z2GDVxMM0IggvVxqgP8Zk
-            YAMU0rSknhoZhsC6CniNxHunD3nKjc4r3imUpeZI6spYlp5PZNFBmw==
+            LTr8KWuIQh2A6DlWiMKkKwLuggm1hzZI2AHPwaOQtQNagCszqwMZig==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1sq60xvdnp2r7m0n3a72pgqee26uqe5k5azqjms0vjpcjggpmgqlqvql9e0
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxU0VqSnlBYzRwL2twQmRF
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSeUJWbGdadnhocVlaUzVS
-            WGpMZWZXVThzNDdBcGdJV1lpaDViS3g3aWhNCkVxVkxYYXZvQ2taSTlqOXcrcmVr
+            K0pMTjZBd0taNElWZkYwaS9haDVEUTY1ZXpRCnBUblcvVFFDbk1ITDVDblVRTFRW
-            TGtHanJwRldOcjl2WmpyY2RjS1FIc2cKLS0tIFVGWEsvYTY4ejgxNFRhNmY4ZDhh
+            K1k1TlAva2hWa29teXVabGdwUTlQbDQKLS0tIDFuZFdrbm9sUi9iU05OZUdCV3BW
-            bS9aVXA5OTVDaXlWQnRlL2pUeUZVN0EKOAM6Kk6WGwXneej2SDG5DxX5wBGkA9mE
+            ZDFYUFVtZVdmTnBoeXFUZHNpeFJSVk0K5MFNGCONFUl+G4AUdU4xUuozEDlNpsRa
-            zRmuLZkBOiWVRLXUBESFwYlhEsmxc+vZwncbIEeT/bJRYcgjxiVOIw==
+            koYylC7kiyPV3HsSBOr4IDlghlo7+uovMr9YYCJDAUbEEax8/V8hjQ==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1u0jz3r6tz3a7rz64j02xpwuykslq9zruxasutvmum07ya7k3xduseme93n
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhdlZhRUljTXBhNkk5NUZJ
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzb1RsNVdIMnpuRXEzT0pT
-            OWpVYUYwcFY5ZEVXVHRKVHozVE5zMm9oY2hBCkdwYktwU3hFT2c3Um4yRkV2Sk5k
+            RVFDYWR2bjE5cFoveUp1OXdDTVFsa2tTM25VCmV0TTdHVVRNeTVreWRDYytsWVQ4
-            aEVramQ1anZzeUNUclVtZmt3bzhvQk0KLS0tIEF0QVRYS2gvbmE1aU1XYXdseWox
+            REx3VjBnLzc4VzZtODkrbEVtZk9nWlUKLS0tIGJ3b05lSHNjcFVaYXY3enJ2eDFE
-            SGlERGZsUDB6bW05MGRHd3hUWS8xbzAKdg+YvuEl1SmiBUsl1A4oAWfGbLpG5vcc
+            SGk2eGR5OWQzUUVSUlVPVXc3QzBmNDAKMcum0Rfk+zO/U1+3LiF++nvY4aDzt7lX
-            uQB4867n2qlKtyGGxuxi0kn77I7Yssgd+kuri0CanL/kqGdAy53mag==
+            CqFMZQyQ6tYseBV7+WDddinC533dH+lNV6B4+553hVYob/xVfMc0Fw==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1qq0x7cpk5yg70htdm4dywc4glyx22c4uu78d50t8lax69f7kpp7skspslr
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHT3BIcEJ4TnBMbUxsbElP
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCbEVkdWM5VUZKT3JaelJL
-            WHo2QzZGVzJhVWIyZFVmMXBRSXU5Z29YbFFNCkVBWWl2MXZ5YTEzY2JRZ1VDUEJO
+            MUt2L3NjTTN6TDlZZ2s5RU0yU0dNMHV6VFVrCmhnT2RuQnE3aW1aTk14N0M2NHB2
-            QXJuOHdlcGNBc1VJcUxGZ3lJVkFIZkUKLS0tIGtUMnpHWWtMbW1nNkJMVTJHYTlP
+            M1Q2bjVmeTFCM3BiWmRyY2VRa3BGa2cKLS0tIDN3aWgvcGtuNHVSQXdOMGVkdEZo
-            c25hRXRaZlpSdnZCZ2lmdnppS2tPNWMKegxYq4d8th6zr+YWjsPe/Tiowzx9vLOR
+            OG9WMTFmQXlkelIvcDJtc2kva01aRW8KQPxgPfEN8606YPSYq9TCVhlgz1lOaNCH
-            u3LSfZSDjeT6IH4mTpCE0YwBPJoqUdh/eKGqKnFBlXYFVjG9mLRt8Q==
+            f4BiSeBeS2dazDmmWfspyGdrvY8KlXPzBHYkrAEAN5oF2TomlrMzPg==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1r9285z8xmtj7g6alau7xp946p4fguvtd62dz05nvfgxyujhmfs7svp0uyw
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVK0ZxN1dXNTU3ck1lcmJu
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5QzJIcVl6SzhpTkZja0lO
-            UUg0MDg5Z3JIL3hpVlJDak5QMTNyMjZnWHhRCkJIOWdPeGwvdzlwcUhoUGdEeGdD
+            ZkVNaVdLSVdEM0ErU2x2NkI5YzdVRGFvNkNFCnQzYVlLdXR5djRCUEVOMkFCM0dh
-            ckZpWVFUelg0bzVsTGdjUWdpK3doUEkKLS0tIGx3UEJWeUVKbk1ubStFeDZUNkdC
+            RGNyL2FSV3RuOUtzSkdjL3BUS0RDVjgKLS0tIDIyWitnSXBVZGRCSlZpQkMyMUJM
-            dVRLMzhVN3p6VEM0V3hMOFRPVHNXUDQKhhm3b+C5QhRVaedE4QDtqV5m0HWyGId8
+            dXJCaWpGZzJPTzg4VGtkdG51OUlRQWsK8OTR3lnc/jJT5iOJ+Bqb/dpuIzSXR6Nv
-            XVlviC7XHQDXH8YxEY4IV9VZgcZ2Wbi/JSMbl6B3kShubIEXS74cBg==
+            0hxyf6BlA936gkMlV9neylbXFpFw+xEU95ZhIfo+RcdDsaH1xC1bQA==
             -----END AGE ENCRYPTED FILE-----
           recipient: age185cchggrqp8v9wryj7npdvv3h2z735zamtqgchu5tltmjmpsaehsteyrpk
         - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBadU9nSDdUU1JBS2RKMTE2
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0NnlNNy83S29yb3hOOG5W
-            WFZabUc3UUlFMGFMYWtXcXc5Z0cyN0xkaXhrClFERGs4Z0t6UlQrVnFadXJVZmtq
+            NGlDUUVkcTZZbHlkM1RncThETHRGQTZkWFFJCjZJTmtJSEc1TG53NDRzejVZeTZ3
-            cDgzV1A3TkIzT0RBWTB1V2lmcVpkK0kKLS0tIHdkdDZnN0U3bWVYWjN0SmZ6NDJ2
+            eHBkaWFEc2xSZklZcm95ZGhLbGZsclEKLS0tIFpweS83WTNwNkFkWm8yMHE3TkYr
-            bHNsbTgwSzJyb1BkYlY1Q1FkTHM2Y3cKXdaeFv0mBwqcuFZ1Ydd+fdhAFJ5iK9OE
+            bFExcG5wajQ0NzRiUUUvOXM1eDFSS2cKAk/KbWV86cSgImEr9m0DGpPlsCcSUbWc
-            e49FUsmk0A6cT/figK7c9lwHUUKRpLHm34+g8BX4EZjDvrGRNQDY8Q==
+            jiS3EoTkMddqcgixMcPu/2GFcMWi3LbEYCiub9Gn/lMIPMsPs5yTBw==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1uvdnhvu83fafnvvkfwx5e3jt7qfqppytqu0rnhwtc3ruyatrxsgqwzjvjz
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzQW8rR2xudzlGRXV5RGIw
+            ekpHVkZkckZmZDRTWlI1OTJTQjJNNkdWSmpnClFQOXF5L1VZNDEvN1NORkpmem9G
+            QkpITmVpTC9zN2hRbGpjMkFKMWRQaEkKLS0tIFJNbFIyMUZTa1JYZEpJdWs1Nm5G
+            Z3RhNE5uOGRxUTFMbWFGN1dBTFhvVkEKSHG1wXg67MKyCBP1WnWMa5GZ/n9ew7Aw
+            yUtR1lCjpW5Hpi2vDoom4HDsodeXfazqS+RjpHuKOLeO39bb4KbAhg==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1988jz0qfj6m9xfenhd292tkxwyxvzhv79gkgrhm0gep353kej3yqe6zp86
     lastmodified: "2026-05-31T20:36:51Z"
     mac: ENC[AES256_GCM,data:F5kllbQV0K6f0qRLwOOFGOX6W5f4ZgwdVzQe56zfYrkQYwi70aDg+2FRctgSKJwbEBQAue8/4SGlZbY9Yd3V72TyaFBfZ/VaqJcTZQh2q22qRh8xxg5sieUsJgipYeB7C4hnm7afkc0W3rD2joNm3maD9hNfoLi/exd3g493Pqc=,iv:9UV5p8c9QYq9Pemqc54IDLPqVEaf5EwtnwI0pyUwhr0=,tag:Y9rlO2ie8c6ZEGN+tmN5IA==,type:str]
     unencrypted_suffix: _unencrypted

systems/x86_64-linux/mutualofomaha/default.nix

@@ -0,0 +1,64 @@
+{
+  config,
+  inputs,
+  lib,
+  namespace,
+  ...
+}: let
+  inherit (lib) mkForce;
+  inherit (lib.${namespace}) enabled disabled;
+in {
+  imports = [
+    inputs.nixos-wsl.nixosModules.default
+  ];
+
+  ${namespace} = {
+    bundles = {
+      common = enabled;
+    };
+
+    hardware.bootloader = mkForce disabled;
+
+    services = {
+      ci = {
+        slurm = {
+          enable = mkForce false;
+        };
+      };
+
+      networking = {
+        network-manager = mkForce disabled;
+        openssh = mkForce disabled;
+        tailscale = mkForce disabled;
+      };
+
+      storage = {
+        syncthing = mkForce disabled;
+        impermanence = mkForce disabled;
+      };
+    };
+  };
+
+  sops.age.keyFile = let
+    inherit (config.networking) hostName;
+    crypt = "${config.users.users.c4patino.home}/dotfiles/secrets/crypt";
+  in "${crypt}/age/${hostName}/keys.txt";
+
+  wsl = {
+    enable = true;
+    defaultUser = "c4patino";
+  };
+
+  security.pki.certificateFiles = [
+    "${inputs.self}/secrets/crypt/ssl/zscaler.crt"
+  ];
+
+  networking = {
+    resolvconf.enable = mkForce false;
+
+    hostName = "mutualofomaha";
+    hostId = "19101c94";
+  };
+
+  system.stateVersion = "26.05";
+}