monolith: disable some nebula lighthouses

flake.lock

@@ -16,31 +16,6 @@
         "type": "github"
       }
     },
-    "agenix": {
-      "inputs": {
-        "darwin": "darwin",
-        "home-manager": [
-          "home-manager"
-        ],
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "systems": "systems"
-      },
-      "locked": {
-        "lastModified": 1770165109,
-        "narHash": "sha256-9VnK6Oqai65puVJ4WYtCTvlJeXxMzAp/69HhQuTdl/I=",
-        "owner": "ryantm",
-        "repo": "agenix",
-        "rev": "b027ee29d959fda4b60b57566d64c98a202e0feb",
-        "type": "github"
-      },
-      "original": {
-        "owner": "ryantm",
-        "repo": "agenix",
-        "type": "github"
-      }
-    },
     "blobs": {
       "flake": false,
       "locked": {
@@ -155,28 +130,6 @@
         "type": "github"
       }
     },
-    "darwin": {
-      "inputs": {
-        "nixpkgs": [
-          "agenix",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1744478979,
-        "narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=",
-        "owner": "lnl7",
-        "repo": "nix-darwin",
-        "rev": "43975d782b418ebf4969e9ccba82466728c2851b",
-        "type": "github"
-      },
-      "original": {
-        "owner": "lnl7",
-        "ref": "master",
-        "repo": "nix-darwin",
-        "type": "github"
-      }
-    },
     "demoji": {
       "inputs": {
         "advisory-db": "advisory-db",
@@ -312,7 +265,7 @@
     },
     "flake-utils": {
       "inputs": {
-        "systems": "systems_2"
+        "systems": "systems"
       },
       "locked": {
         "lastModified": 1681202837,
@@ -330,7 +283,7 @@
     },
     "flake-utils_2": {
       "inputs": {
-        "systems": "systems_3"
+        "systems": "systems_2"
       },
       "locked": {
         "lastModified": 1681202837,
@@ -363,7 +316,7 @@
     },
     "flake-utils_4": {
       "inputs": {
-        "systems": "systems_4"
+        "systems": "systems_3"
       },
       "locked": {
         "lastModified": 1681202837,
@@ -381,7 +334,7 @@
     },
     "flake-utils_5": {
       "inputs": {
-        "systems": "systems_5"
+        "systems": "systems_4"
       },
       "locked": {
         "lastModified": 1681202837,
@@ -399,7 +352,7 @@
     },
     "flake-utils_6": {
       "inputs": {
-        "systems": "systems_6"
+        "systems": "systems_5"
       },
       "locked": {
         "lastModified": 1681202837,
@@ -417,7 +370,7 @@
     },
     "flake-utils_7": {
       "inputs": {
-        "systems": "systems_7"
+        "systems": "systems_6"
       },
       "locked": {
         "lastModified": 1710146030,
@@ -791,7 +744,6 @@
     },
     "root": {
       "inputs": {
-        "agenix": "agenix",
         "catboy-spinner": "catboy-spinner",
         "contador-da-viagem": "contador-da-viagem",
         "demoji": "demoji",
@@ -973,21 +925,6 @@
         "type": "github"
       }
     },
-    "systems_7": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
     "tlauncher": {
       "inputs": {
         "flake-utils": "flake-utils_5",

flake.nix

@@ -22,12 +22,6 @@
     plymouth-themes.url = "github:adi1090x/plymouth-themes";
     plymouth-themes.flake = false;
 
-    agenix = {
-      url = "github:ryantm/agenix";
-      inputs.nixpkgs.follows = "nixpkgs";
-      inputs.home-manager.follows = "home-manager";
-    };
-
     sops-nix = {
       url = "github:Mic92/sops-nix";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -111,12 +105,10 @@
       common_modules = [
         { nixpkgs.pkgs = pkgs; }
         ./system/configuration.nix
-        ./system/secrets.nix
         ./system/sops.nix
         ./system/greetd.nix
         { login-manager.greetd.enable = desktop == "sway"; }
 
-        inputs.agenix.nixosModules.default
         inputs.sops-nix.nixosModules.default
         inputs.home-manager.nixosModules.home-manager
         inputs.disko.nixosModules.disko

hosts/monolith/nebula-vpn.nix

@@ -16,8 +16,6 @@ in
     enable = true;
     isLighthouse = false;
     lighthouses = [
-      "192.168.88.1"
-      "192.168.88.2"
       "192.168.88.3"
     ];
     settings = {
@@ -27,12 +25,6 @@ in
     key = s."nebula-wopus-vpn/monolith-key".path;
     ca = s."nebula-wopus-vpn/ca-crt".path;
     staticHostMap = {
-      "192.168.88.1" = [
-        "neubla-vpn.wopus.dev:4242"
-      ];
-      "192.168.88.2" = [
-        "82.25.77.78:4242"
-      ];
       "192.168.88.3" = [
         "72.60.60.221:4242"
       ];

hosts/phantom/default.nix

@@ -8,7 +8,6 @@
 {
   imports = [
     inputs.vpsadminos.nixosConfigurations.container
-    inputs.agenix.nixosModules.default
     inputs.sops-nix.nixosModules.default
 
     ../../system/sops.nix
@@ -57,10 +56,6 @@
 
   boot.kernel.sysctl."fs.inotify.max_user_watches" = 1048576;
 
-  age = {
-    identityPaths = [ "/root/.ssh/id_rsa" ];
-  };
-
   sops = {
     secrets.hello = { };
     defaultSopsFile = lib.mkForce ../../secrets/phantom/default.yaml;

hosts/phantom/syncthing.nix

@@ -11,6 +11,10 @@
     dataDir = "/var/lib/syncthing-data";
     guiAddress = "0.0.0.0:8384";
     openDefaultPorts = true;
+    guiPasswordFile = config.sops.secrets."syncthing/password".path;
+    settings.gui = {
+      user = "lelgenio";
+    };
   };
 
   services.nginx.virtualHosts."syncthing.lelgenio.com" = {
@@ -26,4 +30,10 @@
           "proxy_pass_header Authorization;";
     };
   };
+
+  sops.secrets."syncthing/password" = {
+    mode = "400";
+    owner = "syncthing";
+    group = "syncthing";
+  };
 }

secrets/phantom/default.yaml

@@ -18,6 +18,8 @@ nextcloud:
     default-password: ENC[AES256_GCM,data:mR0KRCheXh6NBVn+odK9Kx0e4njJDuZ6OS37Iw==,iv:PAb/sCt7hq5WKZwr4FMfiMqf7mGvpXQEnZcbzmDz9oI=,tag:ukBDHbFKrStXckzuE1TwJA==,type:str]
 writefreely:
     password: ENC[AES256_GCM,data:5hzvM8Aitvj4Hb/RgViV1QjsnpQqln0k1nZvEz8Y7vdZvcHo,iv:Wi+pKcGqi09050sitgxt/+hYGF2mlmYC0SDjmqSWPr4=,tag:V0KSBgIV4fgMbxuADVTxrA==,type:str]
+syncthing:
+    password: ENC[AES256_GCM,data:s3EMaGJGSwGxgajdHfWpblAU1Ows/h5JzS6PB9jU/BfmSMvG,iv:E2Exhs2f2v16iovexQGm9HUMxpLrY2uQ8OS/rOawj08=,tag:QXesaGB9v+yPnokZh6DMWA==,type:str]
 sops:
     age:
         - recipient: age1zrgu7w8059xydagm60phnffghvfe9h2ca58cx8qwagqpyfuvs9fqw79c8h
@@ -38,8 +40,8 @@ sops:
             RU1HSUhldHpzeURaUWQvcjBCQ3pMY2cKYL87Njs4e68zu5AXKNF/hxiB3HduS8wz
             o0kmGI58DZx17+Cdipw0ab9a9wiu9C9Fn+LaiCcdM/ESXtS79RzdbQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-02-15T06:46:07Z"
+    lastmodified: "2026-02-22T12:00:25Z"
-    mac: ENC[AES256_GCM,data:lnvq80oOH2pO6AxBbnjNxvz0xcukTFowcxKf24RKFf/ZouRL6uCJEWJwNCoAKCGOHibrztsGHLDL/cgOffv9CTivIYmzbB+9q2MCQNGxrSL7CkWr/mK9xb5Yz1ASvvZxcGB7WmZNVZXvjIr6mdZy50UweHJoit+oDvE03cmG9Bw=,iv:CikhhcnCE9SXpRasZEImUR6vU5cauD4YIplxPYsPo4A=,tag:+QaBv8Nrk40UCYhUskepyw==,type:str]
+    mac: ENC[AES256_GCM,data:AZm1yDw8whCTufBYbiug3i1e1YQRVprOMFTSR6GvvPDXD8ouvwSqoqYbmL7Cm1GxEG5WME1Z/tRzBzN2rU0gleGpXAXb/C+nF3R4PEHdPg25b0vfWAShZHb1YZGpMwkAd3H69y7yJclXeE2sFKx85DUGieYELelrzF9hT8jceHE=,iv:74M+68IAx0Kv7MCAe4Hsj/oTRJP6XOZNc2bxc1Ot5kI=,tag:XfocOwXlpM9WYHVHGs0MWg==,type:str]
     pgp:
         - created_at: "2025-03-07T22:49:19Z"
           enc: |-

secrets/secrets.nix

@@ -1,5 +0,0 @@
-let
-  main_ssh_public_key = "ssh-rsa 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 lelgenio@i15";
-in
-{
-}

system/containers.nix

@@ -48,5 +48,9 @@
     programs.extra-container.enable = true;
 
     programs.firejail.enable = true;
+
+    virtualisation.libvirtd.enable = true;
+    environment.systemPackages = with pkgs; [ dnsmasq ];
+    networking.firewall.trustedInterfaces = [ "virbr0" ];
   };
 }

system/secrets.nix

@@ -1,6 +0,0 @@
-{ pkgs, config, ... }:
-{
-  age = {
-    identityPaths = [ "/root/.ssh/id_rsa" ];
-  };
-}

system/users.nix

@@ -20,6 +20,8 @@
       "corectrl"
       "vboxusers"
       "input"
+      "libvirtd"
+      "kvm"
     ];
     shell = pkgs.fish;
     openssh.authorizedKeys.keys = [

user/fish/default.nix

@@ -43,6 +43,14 @@ in
             echo "Exported key $export[1]"
           end
         end
+
+        function ssh
+          if test "$TERM" = "alacritty"
+            env TERM=xterm-256color ssh $argv
+          else
+            env ssh $argv
+          end
+        end
       '';
       shellAliases = {
         rm = "trash";

user/home.nix

@@ -114,9 +114,6 @@
     deluge
     nicotine-plus
 
-    ## Nix secrets management
-    inputs.agenix.packages.x86_64-linux.default
-
     ## Programming
     # rustup