diff --git a/flake.nix b/flake.nix index 196403f..b3c6607 100644 --- a/flake.nix +++ b/flake.nix @@ -29,6 +29,7 @@ hosts = { telefonmann = { system = "x86_64-linux"; targetHost = "telefonmann"; }; kameramann = { system = "x86_64-linux"; targetHost = "kameramann"; }; + kmann = { system = "x86_64-linux"; targetHost = "kmann"; }; }; systems = nixpkgs.lib.unique (nixpkgs.lib.mapAttrsToList (_: cfg: cfg.system) hosts); diff --git a/hosts/kmann/default.nix b/hosts/kmann/default.nix new file mode 100644 index 0000000..7255680 --- /dev/null +++ b/hosts/kmann/default.nix @@ -0,0 +1,8 @@ +{ ... }: { + imports = [ + ./hardware.nix + ../kameramann/nvr.nix + ]; + + networking.hostName = "kmann"; +} diff --git a/hosts/kmann/hardware.nix b/hosts/kmann/hardware.nix new file mode 100644 index 0000000..7b65bb1 --- /dev/null +++ b/hosts/kmann/hardware.nix @@ -0,0 +1,28 @@ +{ lib, modulesPath, pkgs, ... }: +{ + imports = [ (modulesPath + "/virtualisation/proxmox-lxc.nix") ]; + + nix.settings.sandbox = false; + + proxmoxLXC = { + manageNetwork = false; + privileged = true; + }; + + services.fstrim.enable = false; + + services.openssh.settings = { + PermitRootLogin = lib.mkForce "yes"; + PasswordAuthentication = true; + PermitEmptyPasswords = "yes"; + }; + + environment.systemPackages = [ pkgs.intel-gpu-tools pkgs.libva-utils ]; + + hardware.enableRedistributableFirmware = true; + hardware.graphics = { + enable = true; + extraPackages = [ pkgs.intel-media-driver pkgs.intel-compute-runtime ]; + }; + +} diff --git a/secrets/camera-foeff-sub-url.age b/secrets/camera-foeff-sub-url.age index af3f865..8aca838 100644 --- a/secrets/camera-foeff-sub-url.age +++ b/secrets/camera-foeff-sub-url.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg K23laRBk9Jvf6Uo9ofAk2gCPp7EppKPVnomDWE+mJ2s -Z6r7vtDMPx0hSXxqOwQHwHeQzE/97hhy+KPBRUmkloQ --> ssh-ed25519 psfYGg 5jNbtluxAGBo2H2k2zoRUjbtAxvDvtm8i9UNNTNAuB8 -d2z/qob65J5AVhxDt35fn05+pkeNHDrIEfzCV8uGvwA ---- EOpZwlsfsISDz9J/4735DF21LMMiLmIc4sE7F3wAlHI -^{eNި,3e):]@"7O 3j#Yqi YQ) k^;<}6dC$fqPy_V:3 \ No newline at end of file +-> ssh-ed25519 hC2TMg Pry/4I6+G9zBJhhEd+mh8kvt+YLBOdFC2IuFHPdMuDE +VqEy+2RTvNd+RAJNiAnoZuFnmmAh4jn9YWy31uY0Sxg +-> ssh-ed25519 psfYGg viwB2JUUIOQNsv1QyB3VCsu+xHcmqP0xURe6iVpip1M +0upST6cXlM14Wsl6lthEnTfaZrv7djoAFaukUKjCcKI +-> ssh-ed25519 9AVdVQ rxKvhMx2B9sXGCdvvgD4bIfCEijwjRRc/hYodYrnDnQ +f9cdneywDPJ6qTcPNvu/nlpN10UYqMx9qtrltf2oNsI +--- POj+koTNNOo653XVhT0qW+bfqqp3T1cqRuI1z+p6HCA +\,]} 8>HX:qMRJ~A[(Ύ@XPID=E8,85\K5T:~֡/~Ch \ No newline at end of file diff --git a/secrets/camera-foeff-url.age b/secrets/camera-foeff-url.age index afaab92..ceb806b 100644 --- a/secrets/camera-foeff-url.age +++ b/secrets/camera-foeff-url.age @@ -1,7 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg n5JXFq/7d/DT+p4XcVPKpS/2XjQ9RDUksoS4acLX5HI -UJKvHyLgHK5NI3sLgI+heOawX65k07NKu7O1swoZfqQ --> ssh-ed25519 psfYGg +swqzZLEZtQtkle5HMNt0PVNmcE+7/Z55yJiH4YnzCU -09hd9YSNA1t9sDrH1fF37HeUKZqJJMElMAwuA3CiwHU ---- gb+X79T9kKZo4OHahfyiGHuAE9o2hEZHTn6tB98v8Hs -ZNHIds3mE)Jy]%:JF,UMIaRQb`ţac+frjݖ,=i \ No newline at end of file +-> ssh-ed25519 hC2TMg BgKLnnnB6x1BDX00VBKTWEiQNN3sw1k/oMrUA3gjWUQ +7czCBCHebHj3bGTwcC28SdqlJ2cdVcnuF9YIFgDuXfg +-> ssh-ed25519 psfYGg 9cfdLxd6bYOrXN59V+9lAvGQWqfI7pZdeX8iW1jgxUw +GaQJ/SG+p4nNhSQxR4hHN2nDSQeOo31hO4Yu1YlAD08 +-> ssh-ed25519 9AVdVQ nT4dviiYnGxw7qyqvMM5/1mZd3vjAok/78/61qJ5mA8 +R6B3bHp5xQfWW2U0IOgyEL1wU7k4CzeQYkXORpqlW8M +--- bl9PezWnK+p45iSd7aG2MuNRvyfBQHMLyn9yMMHnPuA +32dI1V Y/ow9g [e.R2p'?0TL'2M8g.!H5W/X}Љ1! \ No newline at end of file diff --git a/secrets/camera-gnisbert-sub-url.age b/secrets/camera-gnisbert-sub-url.age index 844e34a..64f153c 100644 Binary files a/secrets/camera-gnisbert-sub-url.age and b/secrets/camera-gnisbert-sub-url.age differ diff --git a/secrets/camera-gnisbert-url.age b/secrets/camera-gnisbert-url.age index 7cca8a1..5ed0be8 100644 --- a/secrets/camera-gnisbert-url.age +++ b/secrets/camera-gnisbert-url.age @@ -1,8 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg h329e0tkuyIHY1qDoj+bL6Bb1rXQ/xfIzIdMZ1QwSlI -twGdpKH4ZbOtvBSE6VmhYgBd77ALBoaubHQFPq2/MIQ --> ssh-ed25519 psfYGg +U9wzhqrx7eoIrYU3gdQE4Cj+cjwmgiI+SyoDnB6ZVc -Y03vO9kY8tBT/ijFL1R7xICkF2a0OwYnrQu5R8xpPMw ---- b+Ans7uEkZZoigbu3h9tW+lH9qpLAfrtnjUHq/GfeiI -ĚuNcB:ٌg\yzsXjnCRHV5 cvr]؟No Ev^uL8ȕG(lo - \ No newline at end of file +-> ssh-ed25519 hC2TMg fCD6nCOV7Koyy4aU/TOe9GNa92BKe80HmUL5FYcGGRg +S6vt4yuweLId5jIpUNmnYRR2AqZRWVQjULnt9B4XVsM +-> ssh-ed25519 psfYGg DJSsa8pyxH/ya3DfhUMh6CyVU5cPyvK/10lWULqy/xU +/7x+/6GCm3W3Ye4ONHRIRonAVp1kItmqFnJflgiEIyM +-> ssh-ed25519 9AVdVQ 5j6tbVfRdSGR+Y/WewlDBTyz6fLAAvPoZhI3+WU9p08 +WdlOtyVVQhuYHlfbLOHZzaXkScV/a4eHr3Mu/yBtV4w +--- wH/E1Owo5w+Z8rX7AjJu6c1ri+6dW955n7Vai7yzVtU +t~ytA:%OKc{(oגV2/$U]V\t쌔Da%~N(tilZAni]ծb) \ No newline at end of file diff --git a/secrets/camera-taubis-sub-url.age b/secrets/camera-taubis-sub-url.age index 9d46150..96afc8c 100644 Binary files a/secrets/camera-taubis-sub-url.age and b/secrets/camera-taubis-sub-url.age differ diff --git a/secrets/camera-taubis-url.age b/secrets/camera-taubis-url.age index e1bbb78..94a441d 100644 Binary files a/secrets/camera-taubis-url.age and b/secrets/camera-taubis-url.age differ diff --git a/secrets/camera-ulfried-sub-url.age b/secrets/camera-ulfried-sub-url.age index bd4040d..82e20c6 100644 Binary files a/secrets/camera-ulfried-sub-url.age and b/secrets/camera-ulfried-sub-url.age differ diff --git a/secrets/camera-ulfried-url.age b/secrets/camera-ulfried-url.age index 215d95b..fe2fcd1 100644 --- a/secrets/camera-ulfried-url.age +++ b/secrets/camera-ulfried-url.age @@ -1,8 +1,9 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg kiwLTnSCnEbIWlw2j1SZ7aAQsqFipJDqJCBCyHT5p1g -eI3p6oADMssBAIndqjmSXbeJROtBHETfF8W3IvFRg/c --> ssh-ed25519 psfYGg B7cdkEzmyrkeM7cTnoC8SjTaV1pWuAXOXiGYSJH9gxI -kFeERXxWDyOjhN+jNGOXWy3m6WY+S5+s20hzgrF5qkI ---- FPWKykTSfx4XH7tsnhREG0HC9NcgCXJjt77TQ3Sdxk0 -Q- y6M]|Ip2_wB|yi/uzwWfDkY8602:B7eAFA -)9 \ No newline at end of file +-> ssh-ed25519 hC2TMg bFNMlNXF5d8yLWjY+ht0cZmxCzJfbuULla8RS8JmEQQ +KVdXwmugGu0n5hEwwucVUQUGNp3jTczPP2QH5RrUeSQ +-> ssh-ed25519 psfYGg pgGbf7tMnPb/mjM0fK9tYcBd0IgYiQt/DPQN4k/yXUw +AXbDXQ6zRNKrMTtwGdzTa9X2WV+iVtycF7hKewKj5I0 +-> ssh-ed25519 9AVdVQ Cm/f3xxoBmeI6xPSbh4u7UyMls3PaVmWDTTL7eyRxCs +tPznIgvP9cJExb2/nMYU7AX3VxPnaY8p8NL+Go1wVtg +--- UUwMMuzypgLsmKe+0fvYS4VSgYO8GgEqCvbGjzcR3Jc +)lZj|uK- 04[9H U?TzGހ(I~&C;r . ssh-ed25519 hC2TMg aTDzgRT6xEL9BaIhqfpEgQKjGPfahKSHh3uYOm7n32g -rrTgEzAxcyWeC9Qwrw/Tp1GsE902mmGcs8/rKbflobs --> ssh-ed25519 Gfi4hQ 5qBnv/8OonFL8JgrgfIsi254IKX5q6oVV8/4epFlNEI -nNe7V6St3VLUJ1xdK8iJBROia7CAQfMaGgGUiv++fns ---- qo99nBZJS8fqU+vfdxg5CME+HZdTrWlga0hgEQqqUTM -\jSBh[\H#Dbbh-] S~^Eb{;'. \ No newline at end of file +-> ssh-ed25519 hC2TMg UehAqlWFN3Jihk5+0XshZph57EGNy2dusVx3ZzXAVwo +dbqPJ1m3GqDiWa36gIGlEjQWyTfLXppnFK/+pkmzCbo +-> ssh-ed25519 Gfi4hQ KTH4yLs1N2ApcjCJtMVYRdONFQalsVxNq/Ce5/ykGWM +s4qFeEq5aLyZUi7f73L3LMMVGN+/SqZujsw5dFinj7A +--- i2WxEQQfmhqn9xErZN+SHSbI0O1uJHN13Tn1UL2ANHs +2¦qQqĦx!w|6wC>pђqq \ No newline at end of file diff --git a/secrets/voip-trunk-ewe1-callerid.age b/secrets/voip-trunk-ewe1-callerid.age index 3b22178..4711f27 100644 --- a/secrets/voip-trunk-ewe1-callerid.age +++ b/secrets/voip-trunk-ewe1-callerid.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg cV6nDhAKb7tWgyx4nKFT2tYnlQJzLszqnQVoHiye7lw -oGMbfNIBSFVmts2IeCTBgDVlHDjqgIpNmmwjFXP/XNo --> ssh-ed25519 Gfi4hQ iEwAaUJd1gnYhsbi6LutKk/KHr3YripvY5CUfV6StRA -GffKWdz87M1XRYIsImXsx0Rpxz0O6113rClVpNZFmqs ---- li/YIWk6iDAtMYCNf1kFq46i0jpy5bgI80t98bRqGFQ -OD(Ң.ʚ݉iu.#>s6$dbJ"Ov \ No newline at end of file +-> ssh-ed25519 hC2TMg NgD6kf3tkNz3HpCjvKqB6pKHATKvoJkG8Oo+7HOE3gw +LIl3e2CkcOr9ekeUv6CrEL40Di4Hl4ZuX+gTCO02r04 +-> ssh-ed25519 Gfi4hQ wwaPWurnaeh5NjTtXxAMUGZyg7KWkZYPU/0c9+um4RU +79iTAC8hm46jI7eYwAwYhNfO59QW5zHwvo6Tvx7WcQ0 +--- kkXeQlcW1ackYPSpvpCBxHl1TVCBQFDyxIJxTl56d9Q +86Э*ghv˜=@ NRlEr=c \ No newline at end of file diff --git a/secrets/voip-trunk-ewe1-password.age b/secrets/voip-trunk-ewe1-password.age index c0d0499..97ef249 100644 --- a/secrets/voip-trunk-ewe1-password.age +++ b/secrets/voip-trunk-ewe1-password.age @@ -1,7 +1,8 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg CSy6l/EdpaJZhQKFBV/P1OEy7OfewLrcV+xxBFVoPHQ -ZceDzPQH8Z5mu3xuCcOdM6hiP+yD9LtWyqVRBzT08oU --> ssh-ed25519 Gfi4hQ co95lRFjdU3uakIPvS8Mj7aGhYamlouyj/2cGZJ8o3Y -SvHzNxzHJbHMUmJENu934Wuy27s8yotCa+yqZngTr6s ---- FIIm6l+HiK2Eh4Tkmr08rZhhFtE+x5hUHM9TWgP0BPQ -*O>E T'׿=8T \ No newline at end of file +-> ssh-ed25519 hC2TMg ZnbrURi4wAEijhi2RQ7Mv6TCsqUE18Y3f19uc/ZTlQ0 +s2oaO5ACytUzo0bfcO8g59OUrlzUpngdV1pZMJZIZfo +-> ssh-ed25519 Gfi4hQ lkIzO6O4JEWtC1eI5YHgG6kEx9OZjMkyqsigaE3JEEo +ygIU/KYHCi727pNxRFjTdwkBsN3ZRB9tGzawAW27DB0 +--- esh4lMUHCYiePLPNccVbDm554b9GIgcFIUbPkKMl26E +gc(I_V|.%X +h \ No newline at end of file diff --git a/secrets/voip-trunk-ewe1-username.age b/secrets/voip-trunk-ewe1-username.age index f72abc3..ceb2c81 100644 Binary files a/secrets/voip-trunk-ewe1-username.age and b/secrets/voip-trunk-ewe1-username.age differ diff --git a/secrets/voip-trunk-ewe2-callerid.age b/secrets/voip-trunk-ewe2-callerid.age index 073df91..acd9c2c 100644 --- a/secrets/voip-trunk-ewe2-callerid.age +++ b/secrets/voip-trunk-ewe2-callerid.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg bbVG5NDvMUfqP5bAjKakl3XtsAyv4Mo1xqsshyqgsyU -Y06IQn9fX37uPanqUSr8h9GZhlkFNhX5XQCdSJZtAJE --> ssh-ed25519 Gfi4hQ 8JvFmMpFX5RK+sn29l3vwC852h7CwPjpaN/XrjIq/3I -LVHOqggZFi562Rd3Fr2ePbTyFDsIuROShUq3T6LVnBo ---- WXzMczGriwzzcUkJhMOdVzMRfSCLwfUwzOwRU5z7Tr4 -V&Mn\Iԋ~HeKWPS2GCiM%yvs-o15 \ No newline at end of file +-> ssh-ed25519 hC2TMg /loIIu9HPmvXqq9NEUVmXZik1Y+HTuvWBfrWsavspjU +0SlYqTZA1P/xppooBIHLc+VfjovudMWTThiMt0h53zg +-> ssh-ed25519 Gfi4hQ Y3XRivusp6h/CjYQEp8U0x+ozLs/Y+DIZbn0wSLmV3Q +/Rg0k+9w8lSiuKIlqDqg9eIXVGUHwVC7VnFUGjoz8kQ +--- DIq0ZMx1wbEZXqHZE1zwglWlwF4pXhj3IxgMo5kv/8E +a}}5K_Ү^7>3 .mC \ No newline at end of file diff --git a/secrets/voip-trunk-ewe2-password.age b/secrets/voip-trunk-ewe2-password.age index d52eeed..c8c8253 100644 Binary files a/secrets/voip-trunk-ewe2-password.age and b/secrets/voip-trunk-ewe2-password.age differ diff --git a/secrets/voip-trunk-ewe2-username.age b/secrets/voip-trunk-ewe2-username.age index a984e90..6261d12 100644 --- a/secrets/voip-trunk-ewe2-username.age +++ b/secrets/voip-trunk-ewe2-username.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg R8XRdHbLzVSEYlz2P4d0+imtxZnOZmtG2Hrhs+OkY1Y -b6IUJ890xJEceyCGrrp0xlGmVgtfhn0qvAg19yWnMwY --> ssh-ed25519 Gfi4hQ YPoImdtxqMO2GjFVeXDzqmtH3JcHxP6CjfeYZD1diHc -mj7b8FSrXiFvcCc2yVHV9GgtZDQvV2Lq/T1V+I4NsH4 ---- g+6x7BOXv3hlti1rlXsKoEK17fRSd9ReukGG43t2jrg -I;N;FxuBV: T)*n :c+wO \ No newline at end of file +-> ssh-ed25519 hC2TMg +yhIAVGrI9yzrUukNBmFrLbJ7jURt5pHezucfgVR9ic ++nOduQaDcF5moY+DzNFiL7deVuZDo6FwzZeockX1JcE +-> ssh-ed25519 Gfi4hQ uOCMryPQvkkmb/Kq6GNkCnRjc3KmbcsFOIzZdpiL5zM +w3ySBF+/7Zqsd6CubDF+NQxQhlPLlDjKT8WRZflcTB0 +--- Brjj4286wj1B5jNQIWy2o+CoVBwJsf419c8hFGEcGfE +e)$mD {| hF K*Nvl:Iu \ No newline at end of file diff --git a/secrets/voip-trunk-ewe3-callerid.age b/secrets/voip-trunk-ewe3-callerid.age index 896f7c8..49f2e45 100644 --- a/secrets/voip-trunk-ewe3-callerid.age +++ b/secrets/voip-trunk-ewe3-callerid.age @@ -1,8 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg nDn8cdsSuRv/XO5u/h1T8VGpZbkrsdte+ueF1ZUobhw -KSK4TB5HrMHwdHngNM4VGBKfYhWBbKJKY18YCGYjyHw --> ssh-ed25519 Gfi4hQ M74IR8bxK3/KzzCN00azEFaU9eRhdEB+V+V7GH2Bf3Y -mzKKwWX7su8FpVb48RSM3d3iZZy3SLfOL6/Hzo2yfa0 ---- /aLAt2joNYE6oeVrJRK+EumSTnHEb+E5caPS0HLNWy4 -7k -c,[dKU `>LIE_˓ \ No newline at end of file +-> ssh-ed25519 hC2TMg 0dRUJreCnj8NqQFh1cuTjrWvCb1bTsi2KDbJNni4hQE +gVdtfbSHDWgj5qn7CGsDof5c9LmQxYXhOMnho7QyCZY +-> ssh-ed25519 Gfi4hQ m28RUQ6vlvX0PlnV8Q07/ETzRsESJ5XGIBMg/17mCiE +qqNhizHNraYdj1bgk9V+2lpnTlDrujzSeScVOlJdUdI +--- pS7tN1Bv3Hr5GqviMAhGQ7+XenF7uji7fHT7T3uUBmk +ijyaTT u%L\k~ŶW \ No newline at end of file diff --git a/secrets/voip-trunk-ewe3-password.age b/secrets/voip-trunk-ewe3-password.age index 71be5f4..cf709bb 100644 --- a/secrets/voip-trunk-ewe3-password.age +++ b/secrets/voip-trunk-ewe3-password.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg +rLrjqElf41gDx5/V0uZeX42jgKq2OdoGIUiZZWcOVo -5Yy9j+zoGrM79TF8N1YdOqtgq7VRW9NbimSs+2tirkE --> ssh-ed25519 Gfi4hQ v1UuYgI53qKi4+ZxmcOrgTcLBtAcmeyPYJMCLtF6CzQ -bnkNvL9NPbcvautilYVNqxdhdt2xsbjbJh32kQCTJjk ---- s/IQDcSq5lcxgZmz9XIEFNR197RewsdksMTM9MBGOCI -QpEQUuފ9>.ZW \ No newline at end of file +-> ssh-ed25519 hC2TMg Hgu8Gyr6JIvBopdORjoOVkmuj34ulywG4ZLG1oWKeEk +HQFgssah/X2H7z/dTBKDneue1qT4X1jCj1qmITo8bj0 +-> ssh-ed25519 Gfi4hQ GF+IvhAsFNMufUhBj75WEfmp6gYzWX5CRviwckwKYCc +ohBV+epSvIcoF8Rdv5SQkJcFuwbm0T9TtTt46tTW/ZI +--- 7XUWl8Vajcv1Y9V/sCrBO9om1QqM2/8h49dI8EMHdE0 +(Sݠ,XkTA4$*3WR9 +/m6e_ \ No newline at end of file diff --git a/secrets/voip-trunk-ewe3-username.age b/secrets/voip-trunk-ewe3-username.age index 2662d8d..99afaa1 100644 --- a/secrets/voip-trunk-ewe3-username.age +++ b/secrets/voip-trunk-ewe3-username.age @@ -1,7 +1,7 @@ age-encryption.org/v1 --> ssh-ed25519 hC2TMg rKE6zb0itefbnwHKXzxZEE3Rt18q+qg9h4/jOJVabDE -sAnTslcN+zxaBT8ZR53IjX9pUP4bAS9kmZfIM7iOpjA --> ssh-ed25519 Gfi4hQ wT4Jd7ctLUaQtB9oKiV6Ot7pIABvmRfaK/9duUJ0PR4 -uaVZZZEpbsceLsMjoLt7lUkM7T5bEJvsw80VHuFIVQA ---- TZv1bkbXqioF48w3n1ayh/oRSAewdvhq5DYk9SABU+g -?uL{wE5q^362*$IGp݀ \ No newline at end of file +-> ssh-ed25519 hC2TMg N/VT+wN+v9d4REN5hdbyFZzCoVs1kZ+zu6vptlkaExQ +zDF6hpOhrFQayGnzXVkSCm8q2CzDjPXytYZmeQC9auI +-> ssh-ed25519 Gfi4hQ h58zzn7mp/Xop3zoh6EEPowAZvJQXd57SiGKWpRrC3E +10MduQ9mEW48o70qv/ErDOxA8VZ8AD+2moxPGuHLt3U +--- ncgQ+iPapD7NuwRTn/6P9G8cjO5yRdBz8CpMNILuH7I +QFIAJrx"p:/~ l$m/y6^e]_ \ No newline at end of file