sqq1-desk2

hosts/sqq1-desk2/configuration.nix

@@ -0,0 +1,87 @@
+{
+  config,
+  pkgs,
+  ...
+}:
+let
+  nvme = "/dev/disk/by-id/nvme-WDC_WDS250G2B0C-00PXH0_2043E7802918";
+in
+{
+  imports = [
+    ../../modules
+    ../../modules/profiles/xfce4
+    ../../modules/profiles/btrfs
+  ];
+
+  age.secrets = {
+    motiejus-passwd-hash.file = ../../secrets/motiejus_passwd_hash.age;
+    root-passwd-hash.file = ../../secrets/root_passwd_hash.age;
+  };
+
+  boot = {
+    initrd = {
+      availableKernelModules = [
+        "xhci_pci"
+        "thunderbolt"
+        "ahci"
+        "usbhid"
+        "tpm_tis"
+      ];
+    };
+  };
+
+  swapDevices = [
+    {
+      device = "${nvme}-part2";
+      randomEncryption.enable = true;
+    }
+  ];
+
+  fileSystems = {
+    "/" = {
+      device = "${nvme}-part3";
+      fsType = "btrfs";
+      options = [ "compress=zstd" ];
+    };
+    "/boot" = {
+      device = "${nvme}-part1";
+      fsType = "vfat";
+    };
+  };
+
+  hardware.cpu.intel.updateMicrocode = true;
+  nixpkgs.hostPlatform = "x86_64-linux";
+
+  mj = {
+    stateVersion = "25.05";
+    timeZone = "Europe/Vilnius";
+    username = "motiejus";
+
+    base = {
+      users = {
+        enable = true;
+        root.hashedPasswordFile = config.age.secrets.root-passwd-hash.path;
+        user.hashedPasswordFile = config.age.secrets.motiejus-passwd-hash.path;
+      };
+    };
+
+    services = {
+      tailscale = {
+        enable = true;
+        verboseLogs = true;
+        acceptDNS = true;
+      };
+    };
+  };
+
+  environment = {
+    systemPackages = with pkgs; [ ];
+  };
+
+  networking = {
+    hostId = "ef04ee1";
+    hostName = "sqq-desk2";
+    domain = "jakst.vpn";
+    firewall.rejectPackets = true;
+  };
+}