diff --git a/hosts/blade/default.nix b/hosts/blade/default.nix index 11d6790..ebb6773 100644 --- a/hosts/blade/default.nix +++ b/hosts/blade/default.nix @@ -1,35 +1 @@ -{ pkgs, ... }: -{ - imports = [ - ./hardware-configuration.nix - ./networking.nix - ./users.nix - ./power-plan.nix - ../../modules/common/incus.nix - ]; - - networking.interfaces.eth0.wakeOnLan.enable = true; - - # ── NetBird zero-trust VPN ───────────────────────────────── - services.netbird = { - enable = true; - login = { - enable = true; - setupKeyFile = "/run/secrets/netbird-setup-key"; - }; - }; - - # Decrypt the NetBird setup key from SOPS secrets before netbird starts - system.activationScripts.netbird-setup-key = { - text = '' - mkdir -p /run/secrets - ${pkgs.sops}/bin/sops \ - --decrypt \ - --extract '["netbird_setup_key"]' \ - ${./secrets.yaml} \ - > /run/secrets/netbird-setup-key - chmod 600 /run/secrets/netbird-setup-key - ''; - deps = [ "etc" ]; - }; -} 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 \ No newline at end of file