xin/hosts/luna/default.nix

{ ... }:
let
  pubKeys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIPMaAm4rDxyU975Z54YiNw3itC2fGc3SaE2VaS1fai8 root@box"
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILnaC1v+VoVNnK04D32H+euiCyWPXU8nX6w+4UoFfjA3 qbit@plq"
  ];
  userBase = { openssh.authorizedKeys.keys = pubKeys; };
in {
  _module.args.isUnstable = false;
  imports = [ ./hardware-configuration.nix ];

  boot.loader.grub.enable = true;
  boot.loader.grub.device = "/dev/sdb";
  boot.loader.grub.useOSProber = true;

  # The moon based shipyard
  networking.hostName = "luna";

  networking.networkmanager.enable = true;
  networking.firewall.allowedTCPPorts = [ 22 ];

  environment.systemPackages = [ ];

  users.users.root = userBase;
  users.users.qbit = userBase;

  services = {
    fwupd = {
      enable = true;
      enableTestRemote = true;
    };
  };

  preDNS.enable = true;

  system.stateVersion = "22.05";
}