external-hosts: Add fairphone

external-hosts/fairphone/default.nix

@@ -0,0 +1,29 @@
+{ self, ... }:
+{
+  imports = [ self.nixosModules.default ];
+
+  nixpkgs.hostPlatform = "aarch64-linux";
+
+  custom = {
+    networking = {
+      overlay = {
+        address = "10.254.250.74";
+        role = "client";
+      };
+      underlay.useDhcp = true;
+    };
+
+    services = {
+      nebula = {
+        publicKeyPath = toString ./keys/nebula.pub;
+        certificatePath = toString ./keys/nebula.crt;
+      };
+
+      syncthing = {
+        enable = true;
+        deviceId = "6ROH65D-E65I5F6-URI4OUZ-RCHFC3B-PMBSIHH-5DNLJPS-SYSUWQY-HKYGHQG";
+        folders = [ "Documents" ];
+      };
+    };
+  };
+}

external-hosts/fairphone/keys/nebula.crt

@@ -0,0 +1,6 @@
+-----BEGIN NEBULA CERTIFICATE V2-----
+MIG9oFeACWZhaXJwaG9uZaEHBAUK/vpKGKMTDAZjbGllbnQMCXN5bmN0aGluZ4UE
+aYZd9oYEayh99IcgFUP+GVuq3tcsxWoMTgOEhDMlEFpe1AjCbmBFMjtzRWiCIElb
+0YB49Bb2JcLlgcwZlPGgzNBIxclJSjQWFW00pdEXg0DPZt5bCLCfd1nPUk6ty6R7
+UU+YZkx6A0p26wH8TeOVUIoD/9MxpPgEtewH3CPBZQhKFnmpWzDYgF3/WJY/LkQP
+-----END NEBULA CERTIFICATE V2-----

external-hosts/fairphone/keys/nebula.pub

@@ -0,0 +1,3 @@
+-----BEGIN NEBULA X25519 PUBLIC KEY-----
+SVvRgHj0FvYlwuWBzBmU8aDM0EjFyUlKNBYVbTSl0Rc=
+-----END NEBULA X25519 PUBLIC KEY-----

profiles/core.nix

@@ -112,12 +112,4 @@
       sshd.enable = true;
     };
   };
-
-  services.syncthing.settings = {
-    devices."fairphone" = {
-      id = "6ROH65D-E65I5F6-URI4OUZ-RCHFC3B-PMBSIHH-5DNLJPS-SYSUWQY-HKYGHQG";
-      addresses = "tcp://10.254.250.74:22000";
-    };
-    folders."Documents".devices = [ config.services.syncthing.settings.devices."fairphone".name ];
-  };
 }