From 41ed609dc0738ea5fa5fe0d0a476a420afd14b53 Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Sun, 8 Feb 2026 20:56:33 +0100
Subject: [PATCH] external-hosts: Add `fairphone`

---
 external-hosts/fairphone/default.nix     | 29 ++++++++++++++++++++++++
 external-hosts/fairphone/keys/nebula.crt |  6 +++++
 external-hosts/fairphone/keys/nebula.pub |  3 +++
 profiles/core.nix                        |  8 -------
 4 files changed, 38 insertions(+), 8 deletions(-)
 create mode 100644 external-hosts/fairphone/default.nix
 create mode 100644 external-hosts/fairphone/keys/nebula.crt
 create mode 100644 external-hosts/fairphone/keys/nebula.pub

diff --git a/external-hosts/fairphone/default.nix b/external-hosts/fairphone/default.nix
new file mode 100644
index 0000000..a8646b8
--- /dev/null
+++ b/external-hosts/fairphone/default.nix
@@ -0,0 +1,29 @@
+{ self, ... }:
+{
+  imports = [ self.nixosModules.default ];
+
+  nixpkgs.hostPlatform = "aarch64-linux";
+
+  custom = {
+    networking = {
+      overlay = {
+        address = "10.254.250.74";
+        role = "client";
+      };
+      underlay.useDhcp = true;
+    };
+
+    services = {
+      nebula = {
+        publicKeyPath = toString ./keys/nebula.pub;
+        certificatePath = toString ./keys/nebula.crt;
+      };
+
+      syncthing = {
+        enable = true;
+        deviceId = "6ROH65D-E65I5F6-URI4OUZ-RCHFC3B-PMBSIHH-5DNLJPS-SYSUWQY-HKYGHQG";
+        folders = [ "Documents" ];
+      };
+    };
+  };
+}
diff --git a/external-hosts/fairphone/keys/nebula.crt b/external-hosts/fairphone/keys/nebula.crt
new file mode 100644
index 0000000..b1e8d52
--- /dev/null
+++ b/external-hosts/fairphone/keys/nebula.crt
@@ -0,0 +1,6 @@
+-----BEGIN NEBULA CERTIFICATE V2-----
+MIG9oFeACWZhaXJwaG9uZaEHBAUK/vpKGKMTDAZjbGllbnQMCXN5bmN0aGluZ4UE
+aYZd9oYEayh99IcgFUP+GVuq3tcsxWoMTgOEhDMlEFpe1AjCbmBFMjtzRWiCIElb
+0YB49Bb2JcLlgcwZlPGgzNBIxclJSjQWFW00pdEXg0DPZt5bCLCfd1nPUk6ty6R7
+UU+YZkx6A0p26wH8TeOVUIoD/9MxpPgEtewH3CPBZQhKFnmpWzDYgF3/WJY/LkQP
+-----END NEBULA CERTIFICATE V2-----
diff --git a/external-hosts/fairphone/keys/nebula.pub b/external-hosts/fairphone/keys/nebula.pub
new file mode 100644
index 0000000..fd518a0
--- /dev/null
+++ b/external-hosts/fairphone/keys/nebula.pub
@@ -0,0 +1,3 @@
+-----BEGIN NEBULA X25519 PUBLIC KEY-----
+SVvRgHj0FvYlwuWBzBmU8aDM0EjFyUlKNBYVbTSl0Rc=
+-----END NEBULA X25519 PUBLIC KEY-----
diff --git a/profiles/core.nix b/profiles/core.nix
index 39ff2cc..6fb7510 100644
--- a/profiles/core.nix
+++ b/profiles/core.nix
@@ -112,12 +112,4 @@
       sshd.enable = true;
     };
   };
-
-  services.syncthing.settings = {
-    devices."fairphone" = {
-      id = "6ROH65D-E65I5F6-URI4OUZ-RCHFC3B-PMBSIHH-5DNLJPS-SYSUWQY-HKYGHQG";
-      addresses = "tcp://10.254.250.74:22000";
-    };
-    folders."Documents".devices = [ config.services.syncthing.settings.devices."fairphone".name ];
-  };
 }