Initial commit

.gitignore

@@ -0,0 +1,2 @@
+result
+.gcroots

AUTHORS

@@ -0,0 +1 @@
+Pierre Bourdon <delroth@dolphin-emu.org>

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 Dolphin Infrastructure authors (see AUTHORS file)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

flake.lock

@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1655278232,
+        "narHash": "sha256-H6s7tnHYiDKFCcLADS4sl1sUq0dDJuRQXCieguk/6SA=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "8b538fcb329a7bc3d153962f17c509ee49166973",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-22.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

flake.nix

@@ -0,0 +1,49 @@
+{
+  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-22.05";
+
+  outputs = { self, nixpkgs }: {
+
+    colmena = {
+      meta.nixpkgs = import nixpkgs {
+        system = "x86_64-linux";
+      };
+      "altair.dolphin-emu.org" = { pkgs, ... }: {
+        # Let 'nixos-version --json' know about the Git revision
+        # of this flake.
+        system.configurationRevision = nixpkgs.lib.mkIf (self ? rev) self.rev;
+        system.stateVersion = "22.05";
+
+        boot.initrd.availableKernelModules = [ "nvme" ];
+        fileSystems."/" = { fsType = "ext4"; device = "/dev/disk/by-label/root"; };
+
+        boot.loader.grub = {
+          enable = true;
+          version = 2;
+          efiSupport = false;
+          devices = [ "/dev/nvme0n1" "/dev/nvme1n1" ];
+        };
+
+        networking.hostName = "altair";
+        networking.domain = "dolphin-emu.org";
+        networking.search = [ "dolphin-emu.org" ];
+
+        networking.useDHCP = false;
+        networking.interfaces.enp41s0 = {
+          ipv4.addresses = [ { address = "144.76.17.114"; prefixLength = 27; } ];
+          ipv6.addresses = [ { address = "2a01:4f8:191:44a::1"; prefixLength = 64; } ];
+        };
+        networking.defaultGateway = "144.76.17.97";
+        networking.defaultGateway6 = { address = "fe80::1"; interface = "enp41s0"; };
+        networking.nameservers = [ "8.8.8.8" ];
+
+        services.openssh.enable = true;
+        services.openssh.permitRootLogin = "prohibit-password";
+        users.users.root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII3tjB4KYDok3KlWxdBp/yEmqhhmybd+w0VO4xUwLKKV" ];
+
+        # Network configuration.
+        networking.firewall.allowPing = true;
+        networking.firewall.logRefusedConnections = false;
+      };
+    };
+  };
+}