From 4f94f54bb0f209e6371e3efcc72b7db8a3c67e40 Mon Sep 17 00:00:00 2001
From: Phoenix/HotaruBlaze <DeriousHD@gmail.com>
Date: Sun, 28 Jun 2026 18:50:03 +0100
Subject: [PATCH] Add fastfetch

---
 hosts/blade/default.nix     | 25 ++++++++++++++++++++++++-
 modules/common/packages.nix |  1 +
 2 files changed, 25 insertions(+), 1 deletion(-)

diff --git a/hosts/blade/default.nix b/hosts/blade/default.nix
index a7d0f0e..11d6790 100644
--- a/hosts/blade/default.nix
+++ b/hosts/blade/default.nix
@@ -1,4 +1,4 @@
-{ ... }:
+{ pkgs, ... }:
 {
   imports = [
     ./hardware-configuration.nix
@@ -9,4 +9,27 @@
   ];
 
   networking.interfaces.eth0.wakeOnLan.enable = true;
+
+  # ── NetBird zero-trust VPN ─────────────────────────────────
+  services.netbird = {
+    enable = true;
+    login = {
+      enable = true;
+      setupKeyFile = "/run/secrets/netbird-setup-key";
+    };
+  };
+
+  # Decrypt the NetBird setup key from SOPS secrets before netbird starts
+  system.activationScripts.netbird-setup-key = {
+    text = ''
+      mkdir -p /run/secrets
+      ${pkgs.sops}/bin/sops \
+        --decrypt \
+        --extract '["netbird_setup_key"]' \
+        ${./secrets.yaml} \
+        > /run/secrets/netbird-setup-key
+      chmod 600 /run/secrets/netbird-setup-key
+    '';
+    deps = [ "etc" ];
+  };
 }
diff --git a/modules/common/packages.nix b/modules/common/packages.nix
index 85070ec..b3a2452 100644
--- a/modules/common/packages.nix
+++ b/modules/common/packages.nix
@@ -14,5 +14,6 @@
     sysstat
     dig
     openssl
+    fastfetch
   ];
 }