Add fastfetch

hosts/blade/default.nix

@@ -1,4 +1,4 @@
-{ ... }:
+{ pkgs, ... }:
 {
   imports = [
     ./hardware-configuration.nix
@@ -9,4 +9,27 @@
   ];
 
   networking.interfaces.eth0.wakeOnLan.enable = true;
+
+  # ── NetBird zero-trust VPN ─────────────────────────────────
+  services.netbird = {
+    enable = true;
+    login = {
+      enable = true;
+      setupKeyFile = "/run/secrets/netbird-setup-key";
+    };
+  };
+
+  # Decrypt the NetBird setup key from SOPS secrets before netbird starts
+  system.activationScripts.netbird-setup-key = {
+    text = ''
+      mkdir -p /run/secrets
+      ${pkgs.sops}/bin/sops \
+        --decrypt \
+        --extract '["netbird_setup_key"]' \
+        ${./secrets.yaml} \
+        > /run/secrets/netbird-setup-key
+      chmod 600 /run/secrets/netbird-setup-key
+    '';
+    deps = [ "etc" ];
+  };
 }

modules/common/packages.nix

@@ -14,5 +14,6 @@
     sysstat
     dig
     openssl
+    fastfetch
   ];
 }