From c859ace5efcd5cbcf0c6a357b06c5ad68d653506 Mon Sep 17 00:00:00 2001
From: Jan-Henrik Bruhn <jan-henrik.bruhn@offis.de>
Date: Sun, 19 Apr 2026 11:26:16 +0200
Subject: [PATCH] feat: initial kameramann config

---
 flake.nix                     |  1 +
 hosts/kameramann/default.nix  | 10 ++++++++++
 hosts/kameramann/disko.nix    | 35 +++++++++++++++++++++++++++++++++++
 hosts/kameramann/hardware.nix | 13 +++++++++++++
 secrets/secrets.nix           |  3 ++-
 5 files changed, 61 insertions(+), 1 deletion(-)
 create mode 100644 hosts/kameramann/default.nix
 create mode 100644 hosts/kameramann/disko.nix
 create mode 100644 hosts/kameramann/hardware.nix

diff --git a/flake.nix b/flake.nix
index 9230fd9..03f9c0a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -28,6 +28,7 @@
 
     hosts = {
       telefonmann = { system = "x86_64-linux"; targetHost = "telefonmann"; };
+      kameramann  = { system = "x86_64-linux"; targetHost = "kameramann"; };
     };
 
     systems = nixpkgs.lib.unique (nixpkgs.lib.mapAttrsToList (_: cfg: cfg.system) hosts);
diff --git a/hosts/kameramann/default.nix b/hosts/kameramann/default.nix
new file mode 100644
index 0000000..b76d20b
--- /dev/null
+++ b/hosts/kameramann/default.nix
@@ -0,0 +1,10 @@
+{ ... }: {
+  imports = [
+    ./hardware.nix
+    ./disko.nix
+  ];
+
+  networking.hostName = "kameramann";
+
+  networking.interfaces.ens18.useDHCP = true;
+}
diff --git a/hosts/kameramann/disko.nix b/hosts/kameramann/disko.nix
new file mode 100644
index 0000000..cf70250
--- /dev/null
+++ b/hosts/kameramann/disko.nix
@@ -0,0 +1,35 @@
+{ ... }: {
+  disko.devices = {
+    disk = {
+      main = {
+        type = "disk";
+        # Proxmox VirtIO SCSI (scsi0) → /dev/sda
+        # Proxmox VirtIO Block (virtio0) → /dev/vda
+        device = "/dev/sda";
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "512M";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
+              };
+            };
+            root = {
+              size = "100%";
+              content = {
+                type = "filesystem";
+                format = "ext4";
+                mountpoint = "/";
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}
diff --git a/hosts/kameramann/hardware.nix b/hosts/kameramann/hardware.nix
new file mode 100644
index 0000000..5ab4352
--- /dev/null
+++ b/hosts/kameramann/hardware.nix
@@ -0,0 +1,13 @@
+{ ... }: {
+  services.qemuGuest.enable = true;
+  boot.loader = {
+    systemd-boot.enable = true;
+    efi.canTouchEfiVariables = true;
+  };
+  boot.initrd.availableKernelModules = [
+    "virtio_pci"
+    "virtio_scsi"  # use "virtio_blk" instead if disk is /dev/vda
+    "ahci"
+    "sd_mod"
+  ];
+}
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index f0b8a0f..b468ad3 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -3,7 +3,8 @@ let
   users = [ jbruhn ];
 
   telefonmann = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEwgqWVjNOgBygI1uaG8P6wQlfr91A+FJS/EHYZbYWlX";
-  systems = [ telefonmann ];
+  kameramann = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMkXAM24G3s7EO6eQbwC85Rkb3OhrGZtLZRQMqut9IB5";
+  systems = [ telefonmann kameramann ];
 in
 {
   "voip-trunk-ewe-host.age".publicKeys = users ++ [ telefonmann ];