From 29520393c87554800a6e980b630e81aab32504ad Mon Sep 17 00:00:00 2001
From: 0xTux <0xtux@pm.me>
Date: Mon, 21 Oct 2024 02:05:53 +0530
Subject: [PATCH] feat: add new host capella for game server hosting

---
 .sops.yaml                |  2 ++
 flake.nix                 | 19 ++++++++++
 hosts/capella/default.nix | 32 +++++++++++++++++
 hosts/capella/disko.nix   | 54 ++++++++++++++++++++++++++++
 hosts/capella/home.nix    |  7 ++++
 hosts/common/secrets.yaml | 75 ++++++++++++++++++++++-----------------
 6 files changed, 156 insertions(+), 33 deletions(-)
 create mode 100644 hosts/capella/default.nix
 create mode 100644 hosts/capella/disko.nix
 create mode 100644 hosts/capella/home.nix

diff --git a/.sops.yaml b/.sops.yaml
index fc3387a..6692cf1 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -8,6 +8,7 @@ keys:
     - &alpha age145uq9emlxqzm3wqauy9zqj78wqx9e6h09xag6wust7jjgn4upfzsaemcvx
     - &sirius age15d06qpn64p3w57l8yhdesdr5g69dtncwq8yrkx2uw0szql3p7fsq4awlka
     - &vega age1ydkclhk9kwqdq74utesqdfupt43lz64d5k65gz2z9uyljcqq9fcq3hv28l
+    - &capella age1y4luzn2jls7rvgphej23srvdlx563lxq29tvf66vhwwzaf7c3f3qzvresh
 
 creation_rules:
   - path_regex: hosts/common/secrets.yaml$
@@ -19,6 +20,7 @@ creation_rules:
           - *alpha
           - *sirius
           - *vega
+          - *capella
   - path_regex: hosts/canopus/secrets.yaml$
     key_groups:
       - age:
diff --git a/flake.nix b/flake.nix
index 70b6a66..a446c68 100755
--- a/flake.nix
+++ b/flake.nix
@@ -146,6 +146,25 @@
         ];
       };
 
+      capella = nixpkgs.lib.nixosSystem {
+        specialArgs = {inherit inputs outputs username;};
+        modules = [
+          ./hosts/capella
+
+          home-manager.nixosModules.home-manager
+          {
+            home-manager.backupFileExtension = "backup";
+            home-manager.useUserPackages = true;
+            home-manager.extraSpecialArgs = {inherit inputs outputs username;};
+            home-manager.users.${username} = {
+              imports = [
+                ./hosts/capella/home.nix
+              ];
+            };
+          }
+        ];
+      };
+
       vps = nixpkgs.lib.nixosSystem {
         specialArgs = {inherit inputs outputs username;};
         modules = [
diff --git a/hosts/capella/default.nix b/hosts/capella/default.nix
new file mode 100644
index 0000000..a8a33b4
--- /dev/null
+++ b/hosts/capella/default.nix
@@ -0,0 +1,32 @@
+{
+  modulesPath,
+  inputs,
+  ...
+}: {
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+    (modulesPath + "/profiles/qemu-guest.nix")
+    inputs.disko.nixosModules.default
+    (import ./disko.nix {device = "/dev/sda";})
+
+    ../common
+  ];
+
+  nixpkgs.hostPlatform = "x86_64-linux";
+
+  networking = {
+    hostName = "capella";
+    firewall.enable = false;
+  };
+
+  boot.loader.grub = {
+    efiSupport = true;
+    efiInstallAsRemovable = true;
+  };
+
+  environment.persistence."/persist" = {
+    enable = false;
+  };
+
+  system.stateVersion = "24.11";
+}
diff --git a/hosts/capella/disko.nix b/hosts/capella/disko.nix
new file mode 100644
index 0000000..ebd5c1a
--- /dev/null
+++ b/hosts/capella/disko.nix
@@ -0,0 +1,54 @@
+{device ? throw "Set this to the disk device, e.g. /dev/nvme0n1", ...}: {
+  disko.devices = {
+    disk.primary = {
+      inherit device;
+      type = "disk";
+      content = {
+        type = "gpt";
+        partitions = {
+          boot = {
+            name = "boot";
+            size = "1M";
+            type = "EF02";
+          };
+          esp = {
+            name = "ESP";
+            size = "500M";
+            type = "EF00";
+            content = {
+              type = "filesystem";
+              format = "vfat";
+              mountpoint = "/boot";
+            };
+          };
+          root = {
+            name = "root";
+            size = "100%";
+            content = {
+              type = "lvm_pv";
+              vg = "pool";
+            };
+          };
+        };
+      };
+    };
+    lvm_vg = {
+      pool = {
+        type = "lvm_vg";
+        lvs = {
+          root = {
+            size = "100%FREE";
+            content = {
+              type = "filesystem";
+              format = "ext4";
+              mountpoint = "/";
+              mountOptions = [
+                "defaults"
+              ];
+            };
+          };
+        };
+      };
+    };
+  };
+}
diff --git a/hosts/capella/home.nix b/hosts/capella/home.nix
new file mode 100644
index 0000000..bbac4a5
--- /dev/null
+++ b/hosts/capella/home.nix
@@ -0,0 +1,7 @@
+{...}: {
+  imports = [
+    ../common/home.nix
+  ];
+
+  home.stateVersion = "24.11";
+}
diff --git a/hosts/common/secrets.yaml b/hosts/common/secrets.yaml
index d19d11e..e7813d5 100644
--- a/hosts/common/secrets.yaml
+++ b/hosts/common/secrets.yaml
@@ -1,4 +1,4 @@
-tux-password: ENC[AES256_GCM,data:HhabXYKDqiNwNvOTzf3D+vBxm/y/XoTbuyh1U3HX3cxQdi5l8TdMpnO9x1MDQRLCYnCE8sBTBviybu9RGEu7RPXUatzTseMOIw==,iv:0T918MQMRUAhHfQJ20iPYcPBLCSWoGvpP1DesTb7Fek=,tag:oqnmIHTt99Gh3xNTDjCIFA==,type:str]
+tux-password: ENC[AES256_GCM,data:qGekvccmzu/AvaGc1iwbwV0Q3+2utMqEAtbnFG38F8xnr9g3ki16jQpLhyn5yAY7dpbtiahC7Y5q1iSRTQffZ+NSxy/g7PPpiw==,iv:Dn7kVJDJxEITTpM2YS8jlUQPybKBfhC4R7p+YUVdbOI=,tag:ccTHJ5L0abI4vuKgpOeIxQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -8,59 +8,68 @@ sops:
         - recipient: age14vktfes95f33vuefwnmuvryas7az04u76dsgyhfvsx73czkvmp2q7njkl4
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuNVg0UkpXSFd5dkZ2V2ZK
-            NVJGd0V4UFhrUWlwdVNLMElnZjJwcXNjbWtZCndJcmxyYUlDK0pzUitTU0t6TlN3
-            bTF1MnhMMzFtQjlRYzNiNTd2eStKWVUKLS0tIHhlZWtuOFZOZWIvTWVTOXUrMzNr
-            ZVJHdnJzYjRyeWU0TlpzTXVQT0FvN3MK4d9K16awsINh5YDTzGa08t2BGFSDTng7
-            t0QzH26cZvElDfsCpsC3JvV8cHKvNXPqsUqowQ5h/2TCybWz7CQDPQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOQ3l4YWxqdEZBYXFvNWFC
+            V0plbXNHNE92akI2MVdmWWxhV0JCZlZzekhVCnVaeXJrLzJ6VnZpRThpckZaVmR2
+            MThuOVY4QjJWYy8xSGhFRk0wcVVSZHcKLS0tIHFKdlpGWlJoZnlBcVVaRFFacGtX
+            L2Z3SVhjRmgxanVjenBGRnc1bU5NOVUKpVqyM5LHZslYgsLY/DhCHlLvMmexC/Hs
+            RmFZYmTrgfSl8QtL6T753gbNQ/v8WttnW3Yu5k2+xal1lNJUClv34Q==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1udt3cssu7ahdrhsvckt8450rswrr6mknn36xpq74dkfp9lpajvnq84kdzj
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4YUJON0VnVkFiZndGeHFS
-            TVBVYnlqMHZVczdnWm5hekJOM1VnMWlaQW04ClJ6Y0tpczZGYks1WE5VZEJDOVdD
-            Mi93SW9MVG1zVHFCcG5WTm9rNGJ1T2cKLS0tIEN5aHVLcFpjRjdQSVhrZExKanBu
-            NzFQTmtrSG00VzZiaUgybnJlR3RoalkKrCK2IGvPbqOOb4yXfF8zObqqFUiVy+8/
-            O+PQh+5wLI/mm6Ywov+iye15gxvv9KvIY+SYH68oz8dq1NBjGlH5Ew==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTS3RCWS9laDFIeTE4V2Mv
+            dnR6cjVsci9vMjFqSFBwQlNnWlU3anBXZGpVCkhDbHdTbVZrek5DNUNSTVVJTEpG
+            c2tKenBiSE5JV29HVXZMbE5BS1R4d1EKLS0tIFRGb3htU3NKS0c0MTRJUktZQ2lt
+            MTF5dnZFSjFhdVBVamczb1NDTUtBY3MKMVW+o6/lVB512k32EKIQYgdj+3p8YGQm
+            fqInjX0K9BcLUxpV86KxQtqrXzp+UzvjFZebJPDZDGgOr/qkhTZpyg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1zsl5d4vj6gl3h96y5p53sq5y4vr4vtlwp727h7rp9a4xfkxm53lqrh6r50
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwRUM5T1NtOUZKVlpBOUls
-            NEdmait3aHJCTlFzVVQ4ZnVnT21GOXhXZGtrCnFySVVRbVBjcGhnQ1o2aDBJLzBr
-            b1EwVU9rVzIzUko1NkVoMlNLN0xUSTQKLS0tIHZVYWhOTzMwUXIrQWl2TVVSbS9x
-            WFoxUlhZL1pUVStvd0dFRXJhS0IrTU0K7FXe8JmzpW0QNZREczz+027uakStniXg
-            rOFUP1Q4GFPPpwSkW3q6n1WOCJzrDgLhHv028thCB96HnwOnQMQLUw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKbXhiY0RYM0dOeWdXOFBH
+            NWoyMjhrdVkzdGFIV3lLWW5tbyt2Nmp0amc0CnF1cm51MWdIQlpIdys3VWtTU09N
+            RmVOdHlxYWFIRzFWZmltYVR0QkpRNzgKLS0tIHJQbHJXTndjTkpQdXljT3lBdm5z
+            SDYyVi9Ncm8vZUQrWlQ2NTY3ZnQrdVUKe8nxkkQRyJcjtHgL01D6h1hjZFnWtf8b
+            0WlaX09/DKAfZuFQ9vCRFMjjld5cGendHgnrpb5twGVi9X9PhUxpbw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age145uq9emlxqzm3wqauy9zqj78wqx9e6h09xag6wust7jjgn4upfzsaemcvx
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjNlRMWFZRb3BFcDlyZlp6
-            NGJIVVVzZXBPbDhkVlE3UERYUGc5RzYzcEJRCkdnejdIRHlyeFFwa2RtdUgvUmFC
-            cmgrcmZnVy9QUlFvN1pnUUNTbng5ZHcKLS0tIGd5M1FyOXBXa0tDZmxQUFFKUHhN
-            aCtYY3NJV3o0NllxbktnaWxkbHhpM0EKvp9AeumYmrnq8K6HwdTurbhn8xjSx6Iw
-            YGwZN8+QLGWO2c0c5ZfkzBNIQeBCkEspchCojE7GuvgIg0fjDvtcGA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2dDRnQnFSZ3pvaFYxNUxx
+            Zi9LK3FJYmNzYXVjUGZHcm9JakRXcjZtZUdFCkx2SmYxSHM1OU1BbGtzMjBQTU84
+            R1lYOFBHS0dUWTlPTVNFUFhySm8vSkkKLS0tIEQwdHJGWlBXUkVqZXAvbXZpemNt
+            dFVldkNOajdyTFNmN0d1VFBrRkNnZWsKRd4HGshgNmF6rKsFkQXJCQWPkcC7Wfp6
+            K38rEjfL/WealmXcjXtAPd23zl3t/xqmQlnkhJEW+gocYfnaCQnLjw==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age15d06qpn64p3w57l8yhdesdr5g69dtncwq8yrkx2uw0szql3p7fsq4awlka
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSUU02L2FQLzVEK0FOSXhL
-            K25FUzNXeHNXQUlJM2phTXhjajRGS3BwZzFBCkk5ZWlZRVJRM2xEMHpkQytYQUNK
-            RFdEOFNVSytPbUp4Nm5icFBGQXpPUEEKLS0tIDM4SXFHRkNDM2k2UWk4ZG01YWUv
-            Ny9CdmlSa3lhNzNwRmlhUUhicWZDMzAKcWtExqEK7wDnoX1dleU00SWpH5BISyP7
-            2EgX+BwGLe6SObOF95b6v4lyVCsEQPPnc+euBRGXjxrE+DXrUtG+/Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5TUdnZlM0emFsak55TkVi
+            Tm9oTnhXZE95bjI1ZFpMRDBtMk16TFVnV0ZJCmFGZEJzeDRpN05IalM1Q21VdzZu
+            a0Evam0wRTd5cFZqaDNQSE9xZGtJUlkKLS0tIHdKck1sRWpMbjNXVUh2bkJFVUdz
+            WEZqZ05WNnIzNFB0TFBCWVlyM2haNWcK3i/aA3nlgopWQCCpV7qVXtSNx/cdnIGH
+            vloR2sa3bBA4ycvOpSiTsLpB50KEILkKIZoOZO9Gj7B2f7kjNIscqg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1ydkclhk9kwqdq74utesqdfupt43lz64d5k65gz2z9uyljcqq9fcq3hv28l
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwNzJ2aTZvZExWaTZNQVNJ
-            ZDdUTmRqYzlhbDU5Q1ZsWDBGRlBzc2hoQ2tnCjZrQ0dITlFHZVhrTmhCREo4ZXp5
-            SGEyVmlBRW50UGdlTXhndkovckpVSlkKLS0tIGFxTzNjNUxuaGM2Skt1TWRJUE9W
-            RUorZ1IwVnBhRjNRR21uVU5VTDBsN3MKOPlgcJ/zv/GbEZYbzKFxpU65b9Uf7Udl
-            fRBpQBHzS3BWcO87l9lgN8eqCzUhuD+iu1jAOmpNjcEhiY6kUq3YzQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQSXR1WHVIaXBleE5Vc1Ft
+            MkFsemVjVGMrRWFHWFJ2QVhSNyt3eG8yT0c0CkM0c2VSM0dDZlhWRDdRUEN1WE5N
+            RFlESS9HU1lQYy9vR3oxWE94YmhtSDAKLS0tIHhEMlJoZnh0SHFQUFlkeVNoYVBV
+            STBCb0ViNlU4TS93bHFGTUdGSnhVcU0K9vRvTXkd+pcr/4uT/YCqa75fJ6BPWkr0
+            dTMXSUbmU/bVC/0g4HwoJmsvi9k0jHnX+2M70rahPb6jDt/D28CiVQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-10-16T17:57:50Z"
-    mac: ENC[AES256_GCM,data:n8XQiiwv/FcPmurf2MKuKVBMGW3nqmssVkfEHu+VrSmXDzH4AkrAW6Aph8fHKOvr4AFOtj7eEmh+7pHWlinvJkr/Hf9hPbXKlDazd2PVqVFRUShM6y6jSAYjFxvgxeaw0dkQNmNtI0mfogqt8kNQDtduDaiI6l0h2q3TVbLPGNA=,iv:R0HzfyxXYYdpB6hy0KX8mm8Ae+XeQBnNyrRxVX/4fkU=,tag:c+vYOQUDNVYhjAcuwa36Bg==,type:str]
+        - recipient: age1y4luzn2jls7rvgphej23srvdlx563lxq29tvf66vhwwzaf7c3f3qzvresh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJV09PZkk4WkRTVEY1MG9H
+            S2JRUG82R2hGeTdvYTZlckVmS0ZVVzR0SjNjClIrVFc2WDNiRWh2UUhrUUwyNDRI
+            MlRsOGtEd2V5L283cnlVclliRG1jVkEKLS0tIDc3Wm40dHJGMDRYWlVFVzBrWnU4
+            UFhKVXBINlc4YlNDVFpmMU5xMkVEOXcKH3nNbWZFRs46BZnNudtLuldVwXvq9ooD
+            YygMMkFCmUFC9+MK8ruX/5HFq2FTtvNGbgd7UmFBjFKFKkXqCZBUug==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-10-20T20:20:48Z"
+    mac: ENC[AES256_GCM,data:5Jm1nHVIWIMtCMfs4EITE/qFrqkxQZRVdvKUOVuc4sB3xqhFm3F1aTLPMmQ0ZdBTsy6/sboHknKUtClEBDzpvechpbQGdQptMJozgVhzvMeuJyEfyspVI4TYxnkID3BF8HmFPgHwTwRWgaW4BlnMSs9xvZuVuezfEYQjOMq79YI=,iv:C063yjoZe48Sq/orEcjMZYAO1eY9UbLh2ZoUh4150wo=,tag:Zx/ByCQf8lhfrKgRZT/+Dw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.0