add argiletum

2026-05-03 13:59:56 -04:00
parent 24d451f825
commit 9222be4052
4 changed files with 67 additions and 0 deletions
@@ -0,0 +1,25 @@
+{ lib, ... }:
+{
+  time.timeZone = "America/New_York";
+
+  networking = {
+    hostId = "5f8a1c2e";
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [ 80 ];
+    };
+    useNetworkd = true;
+  };
+
+  # Raspberry Pi 4 uses U-Boot / extlinux, not systemd-boot
+  boot.useSystemdBoot = lib.mkForce false;
+
+  sops = {
+    defaultSopsFile = ./secrets.yaml;
+    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+  };
+
+  services.tang.enable = true;
+
+  system.stateVersion = "25.11";
+}