feat: initial kameramann config

flake.nix

@@ -28,6 +28,7 @@
 
     hosts = {
       telefonmann = { system = "x86_64-linux"; targetHost = "telefonmann"; };
+      kameramann  = { system = "x86_64-linux"; targetHost = "kameramann"; };
     };
 
     systems = nixpkgs.lib.unique (nixpkgs.lib.mapAttrsToList (_: cfg: cfg.system) hosts);

hosts/kameramann/default.nix

@@ -0,0 +1,10 @@
+{ ... }: {
+  imports = [
+    ./hardware.nix
+    ./disko.nix
+  ];
+
+  networking.hostName = "kameramann";
+
+  networking.interfaces.ens18.useDHCP = true;
+}

hosts/kameramann/disko.nix

@@ -0,0 +1,35 @@
+{ ... }: {
+  disko.devices = {
+    disk = {
+      main = {
+        type = "disk";
+        # Proxmox VirtIO SCSI (scsi0) → /dev/sda
+        # Proxmox VirtIO Block (virtio0) → /dev/vda
+        device = "/dev/sda";
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "512M";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
+              };
+            };
+            root = {
+              size = "100%";
+              content = {
+                type = "filesystem";
+                format = "ext4";
+                mountpoint = "/";
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}

hosts/kameramann/hardware.nix

@@ -0,0 +1,13 @@
+{ ... }: {
+  services.qemuGuest.enable = true;
+  boot.loader = {
+    systemd-boot.enable = true;
+    efi.canTouchEfiVariables = true;
+  };
+  boot.initrd.availableKernelModules = [
+    "virtio_pci"
+    "virtio_scsi"  # use "virtio_blk" instead if disk is /dev/vda
+    "ahci"
+    "sd_mod"
+  ];
+}

secrets/secrets.nix

@@ -3,7 +3,8 @@ let
   users = [ jbruhn ];
 
   telefonmann = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEwgqWVjNOgBygI1uaG8P6wQlfr91A+FJS/EHYZbYWlX";
-  systems = [ telefonmann ];
+  kameramann = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMkXAM24G3s7EO6eQbwC85Rkb3OhrGZtLZRQMqut9IB5";
+  systems = [ telefonmann kameramann ];
 in
 {
   "voip-trunk-ewe-host.age".publicKeys = users ++ [ telefonmann ];