host(aquarius): remove old host, and add new host aquarius

systems/aarch64-linux/aquarius/default.nix

@@ -19,13 +19,17 @@ with lib.${namespace};
     generic-extlinux-compatible.enable = true;
   };
 
-  nix.settings.experimental-features = [
-    "nix-command"
-    "flakes"
-  ];
+  nix.settings = {
+    trusted-users = [ "philipp" ];
+    experimental-features = [
+      "nix-command"
+      "flakes"
+    ];
+  };
 
   # Disable detailed ddocumentation
   documentation.nixos.enable = false;
+  documentation.man.generateCaches = false;
 
   # Set your time zone.
   time.timeZone = "Europe/Berlin";
@@ -38,7 +42,6 @@ with lib.${namespace};
     description = "Philipp Böhm";
     extraGroups = [
       "wheel"
-      "caddy"
     ];
   };
 
@@ -50,16 +53,15 @@ with lib.${namespace};
     };
   };
 
+  services.openssh.settings.PasswordAuthentication = false;
+  services.openssh.settings.PermitRootLogin = "no";
+
+  services.cron = enabled;
+
   awesome-flake = {
     services = {
       ssh = enabled;
-      caddy = enabled;
-      restic = enabled;
-    };
-
-    container = {
-      technitium = enabled;
-      invidious = enabled;
+      technitium-dns-server = enabled;
     };
 
     system.sops = enabled;

systems/aarch64-linux/aquarius/networking.nix

@@ -0,0 +1,46 @@
+{
+  networking = {
+    hostName = "aquarius";
+    networkmanager.enable = false;
+    dhcpcd.enable = true;
+
+    interfaces.end0.useDHCP = true;
+
+    firewall = {
+      enable = true;
+      allowedUDPPorts = [ 51820 ];
+    };
+
+    wireguard = {
+      enable = true;
+      interfaces."wg0" = {
+        ips = [ "192.168.100.10/24" "fd00:100::10/64" ];
+        listenPort = 51820;
+        mtu = 1400;
+        privateKeyFile = "/run/secrets/privateKey";
+        peers = [
+          {
+            publicKey = "ylsjhpKiq3B6Kv4q2uiHXUJpyxY2b1DOAlGc/FWdflQ=";
+            presharedKeyFile = "/run/secrets/presharedKey";
+            allowedIPs = [ "192.168.100.1/32" "fd00:100::1/128" ];
+            endpoint = "neuruppin.boehm.sh:51820";
+            persistentKeepalive = 25;
+          }
+        ];
+      };
+    };
+  };
+
+  sops.secrets = {
+    privateKey = {
+      sopsFile = ../../../secrets/aquarius-wg.yaml;
+      key = "privateKey";
+    };
+
+    presharedKey = {
+      sopsFile = ../../../secrets/aquarius-wg.yaml;
+      key = "presharedKey";
+    };
+  };
+
+}

systems/aarch64-linux/blarm/networking.nix

@@ -1,33 +0,0 @@
-{
-  networking = {
-    hostName = "blarm";
-    firewall.enable = false;
-    networkmanager.enable = false;
-    dhcpcd.enable = true;
-    defaultGateway.address = "192.168.1.1";
-    interfaces.end0 = {
-      useDHCP = true;
-      ipv4.addresses = [
-        {
-          address = "192.168.1.251";
-          prefixLength = 32;
-        }
-        {
-          address = "192.168.1.202";
-          prefixLength = 32;
-        }
-      ];
-      ipv6.addresses = [
-        {
-          address = "fd00:192:168:1::202";
-          prefixLength = 64;
-        }
-        {
-          address = "fd00:192:168:1::251";
-          prefixLength = 64;
-        }
-      ];
-    };
-  };
-
-}

systems/x86_64-linux/blarm/default.nix

@@ -7,9 +7,7 @@
 }:
 with lib.${namespace};
 {
-  imports = [
-    (modulesPath + "/virtualisation/proxmox-lxc.nix")
-  ];
+  imports = [ (modulesPath + "/virtualisation/proxmox-lxc.nix") ];
 
   nix.settings = {
     trusted-users = [ "philipp" ];