a

hosts/blade/default.nix

@@ -7,11 +7,8 @@
   ...
 }:
 {
-  imports = [
-    ../../common/incus.nix
-  ]; 
   deployment = {
-    targetHost = "192.168.1.69";
+    targetHost = "192.168.1.70";
     targetPort = 22;
     targetUser = "phoenix";
     buildOnTarget = true;
@@ -24,7 +21,9 @@
   imports = [
     ./hardware-configuration.nix
     ../../modules/common.nix
+    ../../modules/common/incus.nix
     ./networking.nix
     ./users.nix
+    ./power-plan.nix
   ];
 }

hosts/blade/power-plan.nix

@@ -0,0 +1,22 @@
+{
+  name,
+  nodes,
+  pkgs,
+  lib,
+  inputs,
+  ...
+}:
+{
+  services.power-profiles-daemon.enable = true;
+
+  powerManagement.powertop.enable = true;
+
+  # boot.kernelParams = [
+  #   "pcie_aspm=force"
+  # ];
+
+  environment.systemPackages = with pkgs; [
+    powertop
+    turbostat
+  ];
+}

modules/common.nix

@@ -7,6 +7,5 @@
     ./common/services.nix
     ./common/networking.nix
     ./common/system.nix
-    ./common/persisting.nix
   ];
 }

modules/common/incus.nix

@@ -74,4 +74,7 @@
       };
     };
   };
+  networking.nftables.enable = true;
+  users.users.phoenix.extraGroups = ["incus-admin"];
+  networking.firewall.trustedInterfaces = [ "incusbr*" "internalbr0" ];
 }

modules/common/persisting.nix

@@ -1,31 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  persisting = {
-    enable = true;
-    
-    # Default directories to persist
-    directories = [
-      {
-        path = "/persist";
-        target = "/persist";
-        options = [ "defaults" "bind" ];
-      }
-      {
-        path = "/var/log";
-        target = "/var/log";
-        options = [ "defaults" "bind" ];
-      }
-      {
-        path = "/var/lib";
-        target = "/var/lib";
-        options = [ "defaults" "bind" ];
-      }
-    ];
-  };
-  
-  # Ensure persist directory exists
-  systemd.tmpfiles.rules = [
-    "d /persist 0755 root root - -"
-  ];
-}

modules/common/users.nix

@@ -21,7 +21,7 @@
 
   security.sudo.extraRules = [
     {
-      users = [ "phoenix" ];
+      users = [ "phoenix" "deploy" ];
       commands = [
         {
           command = "ALL";