c4patino/yumeami
1
0
Fork 0
Code Activity Actions

feat: add system configuration for c4patino@tsuki and machine

Browse source
This commit is contained in:
Ceferino Patino 2026-05-22 00:13:25 -05:00
commit 2c00879d36
Signed by: c4patino
SSH key fingerprint: SHA256:Wu+cU1t+7zVT9wzew/4meNmeulo66NzMqc22MdDBgXI
11 changed files with 182 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

7
.sops.yaml
View file

@ -5,6 +5,7 @@ keys:
- &c4patino_kokoro_windows age1qq0x7cpk5yg70htdm4dywc4glyx22c4uu78d50t8lax69f7kpp7skspslr
- &c4patino_chibi age1r9285z8xmtj7g6alau7xp946p4fguvtd62dz05nvfgxyujhmfs7svp0uyw
- &c4patino_shiori age185cchggrqp8v9wryj7npdvv3h2z735zamtqgchu5tltmjmpsaehsteyrpk
- &c4patino_tsuki age1uvdnhvu83fafnvvkfwx5e3jt7qfqppytqu0rnhwtc3ruyatrxsgqwzjvjz
creation_rules:
- path_regex: secrets/sops/secrets.yaml
@ -16,6 +17,7 @@ creation_rules:
- *c4patino_kokoro_windows
- *c4patino_chibi
- *c4patino_shiori
- *c4patino_tsuki
- path_regex: secrets/sops/arisu.yaml
key_groups:
- age:
@ -42,3 +44,8 @@ creation_rules:
key_groups:
- age:
- *c4patino_shiori
- path_regex: secrets/sops/tsuki.yaml
key_groups:
- age:
- *c4patino_arisu
- *c4patino_tsuki

18
homes/x86_64-linux/c4patino@tsuki/default.nix Normal file
View file

@ -0,0 +1,18 @@
{
lib,
namespace,
...
}: let
inherit (lib.${namespace}) enabled;
in {
${namespace} = {
bundles = {
common = enabled;
shell = enabled;
};
cli.dev.neovim.variant = "minimal";
};
home.stateVersion = "25.11";
}

4
modules/nixos/bundles/common/default.nix
View file

@ -45,6 +45,10 @@ in {
configString = "CPUs=4 Sockets=1 CoresPerSocket=4 ThreadsPerCore=1 RealMemory=15500 Weight=5";
partitions = ["main" "extended"];
};
tsuki = {
configString = "CPUs=12 Sockets=1 CoresPerSocket=6 ThreadsPerCore=2 RealMemory=31500 Weight=0";
partitions = ["main" "extended"];
};
};
};
};

3
modules/nixos/bundles/common/networking.nix
View file

@ -30,6 +30,9 @@ in {
shiori = {
IP = "100.127.93.17";
};
tsuki = {
IP = "100.71.23.30";
};
};
network-services = {

1
modules/nixos/bundles/common/users.nix
View file

@ -37,6 +37,7 @@ in {
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIj2f9WyR0lEZ16fszVju8XdGLb0a7wsgUZclTIslQx+ c4patino@kokoro-windows"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDzsxorrFOF5Eq0ABSXRMh/WZwxSxs1hCMG8RnbMF6yv c4patino@chibi"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDlOHQEPIDtc8ffn1g7fmrUGvYnKGgX4f2dQYaQ5HbV4 c4patino@shiori"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFCQww3/93dUGOr471IznJadCaIhKWPSQJM8dsRdZ1cw c4patino@tsuki"
];
shell = pkgs.bash;

BIN
secrets/crypt/age/tsuki/keys.txt Normal file
View file

Binary file not shown.

BIN
secrets/crypt/ssl/ca.srl
View file

Binary file not shown.

69
secrets/sops/secrets.yaml
View file

@ -63,56 +63,65 @@ sops:
- recipient: age1redpndk4tj0jy6d8cl98rkt5euxzpfzc8dvlhfan5a349tl7tg5s5j6zav
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuM1BqMnFRaFdkUjVqWloz
d0lLSzRrYy9sRFpyQWZwbC9yUENCVEx2VFZVCmlhalMzV1g3eEdnamZIRmtzOGFm
U1JtbGY2ZlpIakg0MCt2QkFlKzNBUGMKLS0tIHNlQmxZMGl4VWQyd0FvY05xaDlz
ZUFVSVZ5VzVURHp0cXlYOEtzSkNodWMKELzvQRDqppdAdLtJ2ZOvi0VNa8kZ/7LQ
6q1YL43bTQHLSoHPtTxrkHK8X/2HyLGxWAmxG4xV2+9nbecSAIdYig==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2VkhvTDFVeGZ2b0FuYU5W
ZTlRQ3I2ZjlWZ2NYQVJKcGRhMUk5aXMreFQ0Cm03MEFpaWxzM2dleWtNdElSdVlO
NUJLMnlPTnMvelhwZ0xhMlJmUTZ1UlUKLS0tIERaNW1HSnNJbms2K2g2cnBkdUFy
TzJ1Sk9BN3QvNC92Z2YrUkc3SDhJc3MKkNndCgQ4QFvd1YFdqFORzV/aKvTIkADf
7rowg5OCTLeUa631il6c7t220QPhhDynGMaTIlqhWzBl3RNFoJhYFg==
-----END AGE ENCRYPTED FILE-----
- recipient: age1sq60xvdnp2r7m0n3a72pgqee26uqe5k5azqjms0vjpcjggpmgqlqvql9e0
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzeFExMjBPODdycW1OSTdD
QURUcWkraE56SThDa3hGM0FUbTdoUjNka2g0ClQvSEQrNVIzV2NOSGhjQkFkUEtL
V29Nd08yNzFZanVlTFFMQTB6dGVXUzgKLS0tIDJ5QlU5blpldWk4WkFhWlA1R203
L2VCbU91MFE4cTJSVHp4bFB3SHRPdU0KzrW505QJqxOViAqvIsWBBtlqv+5wXB3I
mTrH2j18gJwj93aWNzem+VqRJMXNC5InIrRKcT79uiJl0O7aE86UKQ==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzQTNLTC83REFodjlpNFNz
am8yUXpDN1g5WGhMVlhKeVNLN3gyWGVGVkVrClpZeGJoNU9uZmJxcnBwa09FNUFv
YzhFMVFBZXlhbnQ3K3kvem94Rlk3M0EKLS0tIFVlekd3Y1ZldzBFLzVySVQzeVZH
R0JpL0VpRUhSM2pnQUZwanJ0TmoyL1kKyKOQ7h2L7A0YVsbRbzaAsD/FGdgMG28Q
qir7xTXj7O2Y4MLI34/2ms/jEw0HfdYkiErP7gbI0B9cYosQ55ACuA==
-----END AGE ENCRYPTED FILE-----
- recipient: age1u0jz3r6tz3a7rz64j02xpwuykslq9zruxasutvmum07ya7k3xduseme93n
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUa3l3SDBYUWNLZmV2eUVU
akhwUXMvcml4VnYyMVM2UnpNSDVLMk9pM3lNCmtJa1dzL2JXOEhyWEQrb1h1RkdW
Y3hSS1AxTnJWNnVMbE1pODJ5a0xmM1kKLS0tIEZkbldCMzh0Z0F5Mnh0a3BNdTJx
MUhDbkxHUkk1K05PSDhFV2gyd0pIYTAKM/z28Js8XNSe/qisOUBCuDB1t6uz5BTU
HjHXsMD4AqgQPj8O7qjkIU2O1/J4GcCzbfT+ql+LDdP9kWPKLlKPHw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwb3hsTVQ1TUVkYWlPamg0
MGRqSTZzekZKUEYzWjdsWWdvSWRPU3F6SER3CjBkSXVpNTdXOHpHQThUdzQ1QXdP
NTd4VUpicGZzSEJ6K0lQMm5nMWRhbkUKLS0tIE0vdnBoMVA2bksvWXRDTytodVpa
NnFSZm5USVpBT3lVOFZvblJock5TUHcKcNsR6YhpFeI2GqGJ2gCyt73NvO8GW0sc
dUJtRMHTHa2sRPyuMYPH1JMozLHoyHavHHHGYR95uTx5+zhzdjhVjg==
-----END AGE ENCRYPTED FILE-----
- recipient: age1qq0x7cpk5yg70htdm4dywc4glyx22c4uu78d50t8lax69f7kpp7skspslr
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLUml3VHRLUVFHVWNheUFM
TFEydHA2aXVseFJ5WFF4M2s3Z3lGZVo4SGpJCjJ4ZzF4U2huRk0zVE1YeXg0RXQy
YW1NSytFRFVKampYSGJFVTFqTkx0aUEKLS0tIGhIUHNzK21NQ0ZvNXFPOWdyNEd6
WitBbFVXdWd2WWUxV1YxVFN4WG1pSU0Ky+FFeKHPMlOfDWiDne9CX+OYCcZsaYft
g8earCVcY6RmvoOPfUG+iChoo6SGQKWQzIAXyeppG44QKixWtEE2DQ==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUK3orRld2cU5iSE5xYVJ0
alVxS01XendhTTU1OEw0SThMM2g4ZlZrY3pNCjZ2bUd1Vi85TzI1MkxqU0xoR2JG
TUxZN1pBY2RNWW9LWEw1ZFVyQzRSMncKLS0tIFc4N2hRTGgzQ0wxTnQvRnlhMy9i
MGVmSUx5ZE80YjBlakZrRityQVlJVzAKdl4yXr3AOeDwLppdUe0U1KmX432kigVP
m8KqwS1THViVlY1hh9sfAHS7B3LcXdOzRXFlezhk6IQtM8m32ejquQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age1r9285z8xmtj7g6alau7xp946p4fguvtd62dz05nvfgxyujhmfs7svp0uyw
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFUk9LTVdCNVpLNDBYSDlN
RGE0bXNuUTNMUmZ6d09ENTc1WGwra3M3cFZRCmNwT2Zjai9DMHNSQkN5UDNILzBx
SEw5a0dkS2Z1MWUvTXhyTzhjeEFTR1kKLS0tIDQ4OTEwcDVzN3FJc3BXNVQycm5I
dWoyZFMrK3RsdU5QeGp6SUNJSnJrVW8Kkn30IdkMWgAj0Qqmvni1vf53XfYwAGFc
PV1KfUiUCFzeBFJBCeclroBgGLvxLS6gmotKYlbCljshZOCNpaOHzQ==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhWEpHV21kRllwdmZlWXpo
dFFSWXYwSWQ1V3Rsd0ZyUkNqZVdQREpZa1NRClh3UDRBU1BzTUJwWGp2dzdYbWtV
dGYrbWV0eUlwNklLNHMyTEhSeURZc2cKLS0tIDFSUHFBNGlNdTlNUHFMajBsdWxJ
NHZjbEI3aWZUaU5XZzdNMUNJd1E3S1kKb1kuUV7b5qAv6Z1RAdhMABIIs04DwMrF
VmyzuIGALZo0ouqke/41oDxDlFzKrC0mujyAj1X6qxPvg9cvkuHzYQ==
-----END AGE ENCRYPTED FILE-----
- recipient: age185cchggrqp8v9wryj7npdvv3h2z735zamtqgchu5tltmjmpsaehsteyrpk
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEZkV4elpUTkZPNTZqUm5y
K0VzL0tsYUhtaHdYWWxISVowYmRHOFR0MFFNCit1c2lRa2hCOG5ORW9icHZnKzRP
WXNiN0R1MkN3WFNzdEo3anZINVJvTWcKLS0tIGVxTGRoeWhTYkFKTU5ZM2xvdVcy
a1UrUzluckorRDd2UDhZWm9ZUjlUNG8KsAbtbujWKnacfK9iu1ShcNN7jHApn/7W
FB9Z/CHIZN18J/FJ6W2u6HstxULOT+Cop8TWdcqMarqDfd2UwAzE7A==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiWVFXOWVJQVlITUswNWhl
SjI3UlcvWldUL242NTAzM2Q0bGtXbWxWQlZNCmtuTFkxUlNyV1Exb25rK1MwRVVh
NjVUMDZEZzBwY3c4WlcxZEZ6bDdyUTgKLS0tIExCTXczV3dMeEFRbVBoYVdRL2ZV
QnNCSkNReGJwSGsvcU1PcjhlZFhpTzAKYOn33FevpvyEsHsTyJA+2+BCF2wtVA5A
9YGI27+LDmvYC7e3ABL/8zp4WmJTwIcYBZeoB9IMm2omVgD4Vgf5Lw==
-----END AGE ENCRYPTED FILE-----
- recipient: age1uvdnhvu83fafnvvkfwx5e3jt7qfqppytqu0rnhwtc3ruyatrxsgqwzjvjz
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLdXBIRm8xdW16RzZtNDNK
WE1UM1hHWVk2SmVLM05uMWQxZFR3TkFDK0hVCmZLQTliVDljaG1SdDBaMVZWSGhI
SERwOHZWUUx1NmlmMXhFMUdBUjNCZU0KLS0tIDNNcTVoOWN0U3hZVTJlb2VHL3ly
NXpKYXAybElQd0NoT0sxWElkU0oxSTAKn/MPnmj2fSlgrQgtzgJJyI/JfOyLEBXZ
ELRrzVwsb0xYXdWgzaiIRoj2ouMAzaMe9P3DcFlXrW169z/6e9+wRQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-05-05T03:12:16Z"
mac: ENC[AES256_GCM,data:AR8QrvMKdgn1ATil3T4+95fRfvpiJves7Dsiv56pthrD3pzOQVOMi2G7cn+51ZTQlzcnbi37USMEfNXuGH70Z5YUAqOliHT/1Gza02MWUBlfUuPu7SzJtgvPTSUtBfHra1WqqJ82IoEf1PzV13HnWsCizyyKQspJDoWJI0om0V8=,iv:MtW9FfLXLn4phTFIJ/o6lXOU5pPFIPZ1rzL1cDSI6Ak=,tag:G31sb1V6P1r6kPwNGvdwKg==,type:str]

44
secrets/sops/tsuki.yaml Normal file
View file

File diff suppressed because one or more lines are too long

31
systems/x86_64-linux/tsuki/default.nix Executable file
View file

@ -0,0 +1,31 @@
{
inputs,
lib,
namespace,
...
}: let
inherit (lib.${namespace}) enabled;
in {
imports = [
inputs.disko.nixosModules.default
(import ../../disko.nix {main = "/dev/nvme0n1";})
];
${namespace} = {
bundles = {
common = enabled;
};
};
programs.nh = {
enable = true;
clean.enable = true;
};
networking = {
hostName = "tsuki";
hostId = "3d19e767";
};
system.stateVersion = "25.11";
}

35
systems/x86_64-linux/tsuki/hardware-configuration.nix Executable file
View file

@ -0,0 +1,35 @@
# Do not modify this file! It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
{
config,
lib,
modulesPath,
...
}: {
imports = [
(modulesPath + "/installer/scan/not-detected.nix")
];
boot = {
kernelModules = ["kvm-amd"];
extraModulePackages = [];
initrd = {
availableKernelModules = [
"ahci"
"nvme"
"sd_mod"
"usb_storage"
"usbhid"
"xhci_pci"
];
kernelModules = [];
systemd.tpm2.enable = false;
};
};
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}