beatific: add centroid key

flake.nix

@@ -54,6 +54,13 @@
           ./machine/catacomb
         ];
       };
+      centroid = nixpkgs-2311.lib.nixosSystem {
+        system = "x86_64-linux";
+        modules = [
+          self.nixosModules.beatific
+          ./machine/centroid
+        ];
+      };
       empyrean = nixpkgs-2305.lib.nixosSystem {
         system = "x86_64-linux";
         modules = [

keys/default.nix

@@ -0,0 +1,14 @@
+{
+  tvb = [
+    ./nix-on-droid.vagrant.pub
+    ./tvb.backyard.pub
+    ./tvb.catacomb.pub
+    ./tvb.centroid.pub
+    ./tvb.empyrean.pub
+    ./tvb.imperium.pub
+    ./tvb.palamas.pub
+    ./tvb.stagirite.pub
+    ./tvb.unfolder.pub
+    ./tvb.vagrant.pub
+  ];
+}

keys/tvb.centroid.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC364peKQVWeqFNzhJJkvHumKerKPkczeX2I/e9FFZyL tvb@centroid

machine/centroid/default.nix

@@ -0,0 +1,28 @@
+{ pkgs, ... }:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+  ];
+
+  beatific.hostName = "centroid";
+  beatific.defaults = {
+    time = false;
+    i18n = false;
+    programs = false;
+    ssh = false;
+    nebula = false;
+    tvbSync = false;
+    hosts = false;
+  };
+
+  environment.systemPackages = with pkgs; [
+    git
+    vim
+  ];
+
+  services.openssh.enable = true;
+  users.users.root.openssh.authorizedKeys.keys = [''ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCom6c/UrhM6KrzDcm8kJGZJ5ugR4wRfsFUhTJ5F4oLNQcNspvqlUfxT4Hjv4xHA5hCjvPYi7JxVWxBsOEmmIs/LAjFXRNw9Kz8m7TCf/lct+JUpf6eCn6a/orhA0OdUv4c9aiH2Dzp4ob3lR6xYvYUOH3LuffqypSXP0k5zCSetROUgTZibEpa0oE2GevcyjQAExpCjx02ZRIGkGOM20CXtm3EJsTzIs6uk4+2F9hB+HMqePFKCzsgOlFfVCNWiKNywLavXo7Gn0O9pWidufXZ9s8nCBiOEzU1n6T8pNQBat4z7G1uKFKKWNDPL6/HNEmCq0JxUuXSSjg8LIk+uqPH49Ubpf8EORON8z8nVFAAqbuI6rdYc7J9DllQ7hb7EBT9w9w+mcz3XH0BsGzJUOMD9r0P96pWOn+I6A9jPmOqoOZDzGpfYS18+zYWET/ohH4U4pABcW4nwGx0Jz7Fj6iQW3tyjOefuXcz+sJoYKo/9FOh44KYf4pgu3hfoMlGC0M= tvb@unfolder'' ];
+
+  system.stateVersion = "23.11";
+}

machine/centroid/hardware-configuration.nix

@@ -0,0 +1,14 @@
+{ modulesPath, ... }:
+{
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
+  boot.loader.grub = {
+    efiSupport = true;
+    efiInstallAsRemovable = true;
+    device = "nodev";
+  };
+  fileSystems."/boot" = { device = "/dev/disk/by-uuid/5D60-DD0E"; fsType = "vfat"; };
+  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "xen_blkfront" "vmw_pvscsi" ];
+  boot.initrd.kernelModules = [ "nvme" ];
+  fileSystems."/" = { device = "/dev/sda4"; fsType = "ext4"; };
+  swapDevices = [ { device = "/dev/sda3"; } ];
+}

modules/beatific.nix

@@ -184,17 +184,7 @@ in {
         group = "tvb";
         extraGroups = [ "wheel" ];
         initialPassword = "password";
-        openssh.authorizedKeys.keyFiles = [
-          ../keys/nix-on-droid.vagrant.pub
-          ../keys/tvb.backyard.pub
-          ../keys/tvb.catacomb.pub
-          ../keys/tvb.empyrean.pub
-          ../keys/tvb.imperium.pub
-          ../keys/tvb.palamas.pub
-          ../keys/tvb.stagirite.pub
-          ../keys/tvb.unfolder.pub
-          ../keys/tvb.vagrant.pub
-        ];
+        openssh.authorizedKeys.keyFiles = (import ../keys).tvb;
       };
     })