add: hosts folder

hosts/x86_64/darp9.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }: 
+
+{
+    # Name your host machine
+    networking.hostName = "darp9"; 
+
+    # System76
+    hardware.system76.enableAll = true;
+}

hosts/x86_64/galp4.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }: 
+
+{
+    # Name your host machine
+    networking.hostName = "galp4"; 
+
+    # System76
+    hardware.system76.enableAll = true;
+}

hosts/x86_64/garrus/configuration.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }: 
+
+{
+    # Name your host machine
+    networking.hostName = "garrus"; 
+
+    # System76
+    hardware.system76.enableAll = true;
+}

hosts/x86_64/gaze16-3050.nix

@@ -0,0 +1,17 @@
+{ config, pkgs, ... }: 
+
+{
+    # Name your host machine
+    networking.hostName = "gaze16-3050"; 
+
+    # System76
+    hardware.system76.enableAll = true;
+
+    # NVIDIA
+    services.xserver.videoDrivers = [ "nvidia" ];   
+    hardware.opengl.enable = true;
+    hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.stable;
+
+    # Allow Unfree
+    nixpkgs.config.allowUnfree = true;
+}

hosts/x86_64/harbinger.nix

@@ -0,0 +1,129 @@
+{ config, pkgs, ... }:
+
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+#      ./unstable.nix
+      ./ahoneybun-net.nix
+      ./tildecafe-com.nix
+      ./rockymtnlug-org.nix
+    ];
+
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
+  
+  nix.settings.auto-optimise-store = true;
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 30d";
+  };
+
+  # Use the GRUB 2 boot loader.
+  boot.loader.grub.enable = true;
+  boot.loader.grub.version = 2;
+  boot.loader.grub.extraConfig = ''
+    serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
+    terminal_input serial;
+    terminal_output serial
+  '';
+  boot.loader.grub.device = "nodev"; # or "nodev" for efi only
+  boot.loader.timeout = 10;
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 80 443 ];
+  };
+
+  networking.extraHosts = 
+    ''
+      23.32.241.51 r3.o.lencr.org
+    '';
+
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "aaronhoneycutt@proton.me";
+  
+  networking.hostName = "harbinger";
+  # Pick only one of the below networking options.
+  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+  # networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.
+
+  # Set your time zone.
+  # time.timeZone = "Europe/Amsterdam";
+
+  # Configure network proxy if necessary
+  # networking.proxy.default = "http://user:password@proxy:port/";
+  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+  # Enable CUPS to print documents.
+  # services.printing.enable = true;
+
+  # Enable sound.
+  # sound.enable = true;
+  # hardware.pulseaudio.enable = true;
+
+  # Enable touchpad support (enabled default in most desktopManager).
+  # services.xserver.libinput.enable = true;
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users.users.aaronh = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
+    packages = with pkgs; [
+      cargo
+      git
+      git-lfs
+    ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    acme-sh
+    git
+    git-lfs
+    jekyll
+    mtr
+    neofetch
+    rubyPackages.webrick
+    rubyPackages.jekyll-feed 
+    rubyPackages.jekyll-redirect-from
+    sysstat
+    tree
+    wget
+  ];
+
+  # Some programs need SUID wrappers, can be configured further or are
+  # started in user sessions.
+  # programs.mtr.enable = true;
+  # programs.gnupg.agent = {
+  #   enable = true;
+  #   enableSSHSupport = true;
+  # };
+
+  # List services that you want to enable:
+
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "no";
+  };
+
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  # networking.firewall.enable = false;
+  networking.usePredictableInterfaceNames = false;
+  networking.useDHCP = false;
+  networking.interfaces.eth0.useDHCP = true;
+
+  # Copy the NixOS configuration file and link it from the resulting system
+  # (/run/current-system/configuration.nix). This is useful in case you
+  # accidentally delete configuration.nix.
+  # system.copySystemConfiguration = true;
+
+  system.stateVersion = "22.11"; # Did you read the comment?
+
+}

hosts/x86_64/harbinger/configuration.nix

@@ -0,0 +1,123 @@
+{ config, pkgs, ... }:
+
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+#      ./unstable.nix
+      ./ahoneybun-net.nix
+      ./mc-ahoneybun-net.nix
+#      ./nextcloud.nix
+      ./tildecafe-com.nix
+      ./rockymtnlug-org.nix
+#      ./chat-rockymtnlug-org.nix
+    ];
+
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
+  
+  nix.settings.auto-optimise-store = true;
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 30d";
+  };
+
+  # Use the GRUB 2 boot loader.
+  boot.loader.grub.enable = true;
+  boot.loader.grub.extraConfig = ''
+    serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
+    terminal_input serial;
+    terminal_output serial
+  '';
+  boot.loader.grub.device = "nodev"; # or "nodev" for efi only
+  boot.loader.timeout = 10;
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 80 443 ];
+  };
+
+  networking.extraHosts = 
+    ''
+      23.32.241.51 r3.o.lencr.org
+    '';
+
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "aaronhoneycutt@proton.me";
+  
+  networking.hostName = "harbinger";
+  # Pick only one of the below networking options.
+  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+  # networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.
+
+  # Set your time zone.
+  # time.timeZone = "Europe/Amsterdam";
+
+  # Configure network proxy if necessary
+  # networking.proxy.default = "http://user:password@proxy:port/";
+  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+  # Enable CUPS to print documents.
+  # services.printing.enable = true;
+
+  # Enable sound.
+  # sound.enable = true;
+  # hardware.pulseaudio.enable = true;
+
+  # Enable touchpad support (enabled default in most desktopManager).
+  # services.xserver.libinput.enable = true;
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users.users.aaronh = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
+    packages = with pkgs; [
+      cargo
+      git
+      git-lfs
+    ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    acme-sh
+    git
+    git-lfs
+    mtr
+    neofetch
+    sysstat
+    tree
+    wget
+  ];
+
+  # Some programs need SUID wrappers, can be configured further or are
+  # started in user sessions.
+  # programs.mtr.enable = true;
+  # programs.gnupg.agent = {
+  #   enable = true;
+  #   enableSSHSupport = true;
+  # };
+
+  # List services that you want to enable:
+
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "no";
+  };
+
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  # networking.firewall.enable = false;
+  networking.usePredictableInterfaceNames = false;
+  networking.useDHCP = false;
+  networking.interfaces.eth0.useDHCP = true;
+
+  system.stateVersion = "22.11"; # Did you read the comment?
+  system.autoUpgrade.enable = true;
+}
+

hosts/x86_64/harbinger/flake.nix

@@ -0,0 +1,99 @@
+{
+  description = "Harbinger";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/release-23.05";
+  };
+
+  outputs = { self, nixpkgs, ... }@inputs: {
+    nixosConfigurations = {
+      "harbinger" = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
+        modules = [
+          # Import the configuration.nix we used before, so that the old configuration file can still take effect. 
+          # Note: /etc/nixos/configuration.nix itself is also a Nix Module, so you can import it directly here
+#          ./configuration.nix
+          ./hardware-configuration.nix
+          ./ahoneybun-net.nix
+          ./tildecafe-com.nix
+          ./rockymtnlug-org.nix
+
+          ({config, pkgs, ...}: {
+             nix = {
+                settings.auto-optimise-store = true;
+                settings.experimental-features = [ "nix-command" "flakes" ];
+           
+                gc = {
+                   automatic = true;
+                   dates = "weekly";
+                   options = "--delete-older-than 30d";
+                };
+             };
+
+             boot = {
+                kernelPackages = pkgs.linuxPackages_latest;
+                kernelParams = [ "console=ttyS0,1920n8" ];
+
+                loader.grub.enable = true;
+                loader.grub.extraConfig = ''
+                   serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
+                   terminal_input serial;
+                   terminal_output serial
+                   '';
+                loader.grub.device = "nodev"; # or "nodev" for efi only
+                loader.timeout = 10;
+             };
+             
+             networking = {
+                hostName = "harbinger";
+
+                firewall = {
+                   enable = true;
+                   allowedTCPPorts = [ 80 443 ];
+                };
+                
+                usePredictableInterfaceNames = false;
+                useDHCP = false;
+                interfaces.eth0.useDHCP = true;
+
+             };
+
+             users.users.aaronh = {
+                isNormalUser = true;
+                extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
+                packages = with pkgs; [
+                   cargo
+                   git
+                   git-lfs
+                ];
+             };
+
+             environment.systemPackages = with pkgs; [
+                acme-sh
+                git
+                git-lfs
+                mtr
+                neofetch
+                sysstat
+                tree
+                wget
+             ];
+
+             security.acme.acceptTerms = true;
+             security.acme.defaults.email = "aaronhoneycutt@proton.me";
+        
+             services.openssh = {
+                enable = true;
+                settings.PermitRootLogin = "no";
+             };
+
+             system = {
+                stateVersion = "23.05";
+                autoUpgrade.enable = true;
+             };
+          })
+        ];
+      };
+    };
+  };
+}

hosts/x86_64/hp-omen.nix

@@ -0,0 +1,24 @@
+{ config, pkgs, ... }: 
+
+{
+    # Name your host machine
+    networking.hostName = "hp-omen"; 
+
+    # NVIDIA
+    services.xserver.videoDrivers = [ "nvidia" ];   
+    hardware.opengl.enable = true;
+    hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.stable;
+
+    ## Enable 32 Bit libraries for applications like Steam
+    hardware.opengl.driSupport32Bit = true;
+
+    # Allow Unfree
+    nixpkgs.config.allowUnfree = true;
+
+    environment.systemPackages = 
+        with pkgs; 
+        [
+           steam
+        ]; 
+
+}

hosts/x86_64/joker/flake.nix

@@ -0,0 +1,143 @@
+{
+  description = "Joker";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/release-23.11";
+  };
+
+  outputs = { self, nixpkgs, ... }@inputs: {
+    nixosConfigurations = {
+      "thelio-b1" = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
+        modules = [
+          # Import the configuration.nix we used before, so that the old configuration file can still take effect. 
+          # Note: /etc/nixos/configuration.nix itself is also a Nix Module, so you can import it directly here
+#          ./configuration.nix
+          ./hardware-configuration.nix
+
+          ({config, pkgs, ...}: {
+            nix = {
+              settings.auto-optimise-store = true;
+              settings.experimental-features = [ "nix-command" "flakes" ];
+           
+              gc = {
+                automatic = true;
+                dates = "weekly";
+                options = "--delete-older-than 30d";
+              };
+            };
+
+            nixpkgs.config.allowUnfree = true; 
+
+            boot = {
+              initrd.luks.devices = {
+                root = { 
+                device = "/dev/nvme0n1p2";
+                preLVM = true;
+                };
+              };
+              
+              # kernelPackages = pkgs.linuxPackages_latest;
+              # kernelParams = [ "console=ttyS0,1920n8" ];
+
+              loader.systemd-boot.enable = true;
+              loader.systemd-boot.consoleMode = "0";
+            };
+             
+            networking = {
+              hostName = "thelio-b1";
+              networkmanager.enable = true;
+            };
+
+            users.users.aaronh = {
+              description = "Aaron Honeycutt";
+              home = "/home/aaronh";
+              isNormalUser = true;
+              shell = pkgs.fish;
+              extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
+              packages = with pkgs; [
+                cargo
+                git
+                git-lfs
+                mdbook
+                neofetch
+                restic
+                roboto-slab
+                rustc
+                
+                # GUI
+                signal-desktop
+                youtube-music
+              ];
+            };
+
+            programs.fish.enable = true;
+
+            environment.systemPackages = with pkgs; [
+              avahi
+              cosmic-edit
+              dmidecode
+              firefox
+              libcamera
+              lshw
+              nix-index
+              sysstat
+              tree
+              unzip
+              wget
+  
+              gnome.dconf-editor
+            ];
+
+            # GNOME
+            services.xserver = {
+              enable = true;
+              displayManager.gdm.enable = true;
+              desktopManager.gnome.enable = true;
+            };
+
+            # Remove GNOME packages
+            environment.gnome.excludePackages = (with pkgs; [
+              epiphany # web browser
+              gnome.geary
+              gnome.gnome-software
+              gnome-connections
+              gnome-photos
+              gnome-tour
+            ]);
+
+            # Services
+            services.udev.packages = with pkgs; [ gnome.gnome-settings-daemon ];
+
+            hardware.pulseaudio.enable = false;
+             
+            security.rtkit.enable = true;
+            services.pipewire = {
+              enable = true;
+              alsa.enable = true;
+              alsa.support32Bit = true;
+              pulse.enable = true;
+            };
+
+            services = {
+              fwupd.enable = true;
+              printing.enable = true;
+              openssh.enable = true;
+            };
+ 
+            services.avahi = {
+              enable = true;
+              nssmdns = true;
+              openFirewall = true;
+            };
+  
+            system = {
+              stateVersion = "23.11";
+              autoUpgrade.enable = true;
+            };
+          })
+        ];
+      };
+    };
+  };
+}

hosts/x86_64/lemp12.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }: 
+
+{
+    # Name your host machine
+    networking.hostName = "lemp12"; 
+
+    # System76
+    hardware.system76.enableAll = true;
+}

hosts/x86_64/linode.nix

@@ -0,0 +1,173 @@
+{ config, pkgs, ... }:
+
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+#      ./unstable.nix
+    ];
+
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
+  
+  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
+
+  nix.settings.extra-platforms = [ "aarch64-linux" ];
+  nix.settings.auto-optimise-store = true;
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  nix.buildMachines = [{ 
+     hostName = "localhost";
+     systems = ["x86_64-linux"
+                "aarch64-linux"
+                "x86_64-darwin"
+                "aarch64-darwin"];
+     supportedFeatures = ["kvm" "nixos-test" "big-parallel" "benchmark"];
+     maxJobs = 8;
+  }];
+
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 30d";
+  };
+
+  # Use the GRUB 2 boot loader.
+  boot.loader.grub.enable = true;
+  boot.loader.grub.version = 2;
+  boot.loader.grub.extraConfig = ''
+    serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
+    terminal_input serial;
+    terminal_output serial
+  '';
+  boot.loader.grub.device = "nodev"; # or "nodev" for efi only
+  boot.loader.timeout = 10;
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 80 443 ];
+  };
+
+  networking.extraHosts = 
+    ''
+      23.32.241.51 r3.o.lencr.org
+    '';
+
+  fileSystems."/mnt/swapfile" =
+    { device = "/dev/disk/by-uuid/82672991-fe8a-485a-8dcf-7c8ae1282b6c";
+      fsType = "ext4";
+    };
+
+  services.hydra = {
+    enable = true;
+    hydraURL = "localhost:3000";
+    notificationSender = "hydra@localhost";
+    #buildMachinesFiles = [];
+    useSubstitutes = true;
+  };
+
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "aaronhoneycutt@proton.me";
+  
+  networking.hostName = "nixos-server"; # Define your hostname.
+  # Pick only one of the below networking options.
+  # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+  # networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.
+
+  # Set your time zone.
+  # time.timeZone = "Europe/Amsterdam";
+
+  # Configure network proxy if necessary
+  # networking.proxy.default = "http://user:password@proxy:port/";
+  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+  # Enable CUPS to print documents.
+  # services.printing.enable = true;
+
+  # Enable sound.
+  # sound.enable = true;
+  # hardware.pulseaudio.enable = true;
+
+  # Enable touchpad support (enabled default in most desktopManager).
+  # services.xserver.libinput.enable = true;
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users.users.aaronh = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
+    packages = with pkgs; [
+      cargo
+      flatpak
+      git
+      git-lfs
+      just
+    ];
+  };
+
+  users.users.nathanielw = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" "networkmanager" ];
+    packages = with pkgs; [
+      neofetch
+    ];
+  };
+
+  users.users.builder = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" ];
+    packages = with pkgs; [
+      neofetch 
+    ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    acme-sh
+    git
+    inetutils
+    mtr
+    neofetch
+    sysstat
+    toybox
+    tree
+    wget
+  ];
+
+  # Some programs need SUID wrappers, can be configured further or are
+  # started in user sessions.
+  # programs.mtr.enable = true;
+  # programs.gnupg.agent = {
+  #   enable = true;
+  #   enableSSHSupport = true;
+  # };
+
+  # List services that you want to enable:
+
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "yes";
+  };
+
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  # networking.firewall.enable = false;
+  networking.usePredictableInterfaceNames = false;
+  networking.useDHCP = false;
+  networking.interfaces.eth0.useDHCP = true;
+
+  # Copy the NixOS configuration file and link it from the resulting system
+  # (/run/current-system/configuration.nix). This is useful in case you
+  # accidentally delete configuration.nix.
+  # system.copySystemConfiguration = true;
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "22.11"; # Did you read the comment?
+
+}

hosts/x86_64/oryp6.nix

@@ -0,0 +1,17 @@
+{ config, pkgs, ... }: 
+
+{
+    # Name your host machine
+    networking.hostName = "oryp6"; 
+
+    # System76
+    hardware.system76.enableAll = true;
+
+    # NVIDIA
+    services.xserver.videoDrivers = [ "nvidia" ];   
+    hardware.opengl.enable = true;
+    hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.stable;
+
+    # Allow Unfree
+    nixpkgs.config.allowUnfree = true;
+}

hosts/x86_64/shepard/configuration.nix

@@ -0,0 +1,18 @@
+{ config, pkgs, ... }: 
+
+{
+    # Name your host machine
+    networking.hostName = "shepard"; 
+
+    ## Enable 32 Bit libraries for applications like Steam
+    hardware.opengl.driSupport32Bit = true;
+
+    # Allow Unfree
+    nixpkgs.config.allowUnfree = true;
+
+    environment.systemPackages = 
+        with pkgs; 
+        [
+           steam
+        ]; 
+}

hosts/x86_64/shepard/flake.nix

@@ -0,0 +1,129 @@
+{
+  description = "Shepard";
+
+  inputs = {
+#    nixpkgs.url = "github:NixOS/nixpkgs/release-23.05";
+    nixpkgs-unstable.url = "github:NixOS/nixpkgs/nixos-unstable";
+    nixos-hardware.url = "github:NixOS/nixos-hardware/master";
+  };
+
+  outputs = { self, nixpkgs-unstable, nixos-hardware, ... }@inputs: {
+    nixosConfigurations = {
+      "shepard" = nixpkgs-unstable.lib.nixosSystem {
+        system = "x86_64-linux";
+        specialArgs = { inherit inputs; };
+        modules = [
+          # Import the configuration.nix we used before, so that the old configuration file can still take effect. 
+          # Note: /etc/nixos/configuration.nix itself is also a Nix Module, so you can import it directly here
+#          nixos-hardware.nixosModules.raspberry-pi-4	
+#          ./configuration.nix
+          ./hardware-configuration.nix
+          ./gnome.nix
+
+        ({config, pkgs, ...}: {
+
+          # Latest kernel
+          boot.kernelPackages = pkgs.linuxPackages_latest;
+  
+          boot.loader = {
+             systemd-boot.enable = true;
+             systemd-boot.consoleMode = "0";
+          }; 
+
+          boot.initrd.luks.devices = {
+             root = {
+                device = "/dev/nvme1n1p2";
+                preLVM = true; 
+             };
+          };
+
+          nix = {
+             settings.auto-optimise-store = true;
+             settings.experimental-features = [ "nix-command" "flakes" ];
+ 
+             gc = {
+                automatic = true;
+                dates = "weekly";
+                options = "--delete-older-than 30d";
+             };
+          };
+
+          networking = {
+             hostName = "shepard";
+             networkmanager.enable = true;   
+          };
+
+          time.timeZone = "America/Denver";
+
+          # Stable
+          environment.systemPackages = with pkgs; [
+             avahi
+             cargo
+             cosmic-edit
+             dmidecode
+             fire
+             firefox
+             fish
+             git
+             git-lfs
+             libcamera
+             lshw
+             roboto-slab
+             neofetch
+             restic
+             unzip
+             wget
+             xz
+          ];
+
+          users.users.aaronh = {
+             description = "Aaron Honeycutt";
+             home = "/home/aaronh";
+             extraGroups = [ "wheel" "networkmanager" "adm" ];
+             isNormalUser = true;
+             shell = pkgs.fish;
+             hashedPassword = "$6$aAcbLtqiqzySifls$jdKMOQjoWITHD/dWNNZVUH/qNc6aoJ7v4zYofi0U7IJSVTbmOfChS3mzaJbp57AodjdPNKPrnrip8Nlh2Qanx.";
+
+             packages = with pkgs; [
+                signal-desktop
+                youtube-music
+             ];
+          };
+
+          programs.fish.enable = true;
+
+          # Enable Pipewire
+          security.rtkit.enable = true;
+          services.pipewire = {
+             enable = true;
+             alsa.enable = true;
+             alsa.support32Bit = true;
+             pulse.enable = true;
+          };
+          
+          # Turn off PulseAudio 
+          hardware.pulseaudio.enable = false;
+
+          # Enable Bluetooth
+          hardware.bluetooth.enable = true;
+
+          # Enable SSH
+          services.openssh.enable = true;
+
+          # Enable CUPS
+          services.printing.enable = true;
+
+          # Allow Unfree
+          nixpkgs.config.allowUnfree = true;
+
+          # System
+          system = {
+             stateVersion = "23.11";
+             autoUpgrade.enable = true;
+          };  
+         })
+       ];
+     };
+   };
+ };
+}

hosts/x86_64/sovereign.nix

@@ -0,0 +1,122 @@
+{ config, pkgs, ... }:
+
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+#      ./unstable.nix
+      ./stoners-space.nix
+    ];
+
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
+  
+  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
+
+  nix.settings.extra-platforms = [ "aarch64-linux" ];
+  nix.settings.auto-optimise-store = true;
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  nix.buildMachines = [{ 
+     hostName = "localhost";
+     systems = ["x86_64-linux"
+                "aarch64-linux"
+                "x86_64-darwin"
+                "aarch64-darwin"];
+     supportedFeatures = ["kvm" "nixos-test" "big-parallel" "benchmark"];
+     maxJobs = 8;
+  }];
+
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 30d";
+  };
+
+  # Use the GRUB 2 boot loader.
+  boot.loader.grub.enable = true;
+  boot.loader.grub.version = 2;
+  boot.loader.grub.extraConfig = ''
+    serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
+    terminal_input serial;
+    terminal_output serial
+  '';
+  boot.loader.grub.device = "nodev"; # or "nodev" for efi only
+  boot.loader.timeout = 10;
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 80 443 ];
+  };
+
+  networking.extraHosts = 
+    ''
+      23.32.241.51 r3.o.lencr.org
+    '';
+
+  # fileSystems."/mnt/swapfile" =
+  #   { device = "/dev/disk/by-uuid/82672991-fe8a-485a-8dcf-7c8ae1282b6c";
+  #     fsType = "ext4";
+  #   };
+
+  # services.hydra = {
+  #   enable = true;
+  #   hydraURL = "localhost:3000";
+  #   notificationSender = "hydra@localhost";
+  #   useSubstitutes = true;
+  # };
+
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "aaronhoneycutt@proton.me";
+  
+  networking.hostName = "sovereign";
+
+  # Set your time zone.
+  # time.timeZone = "Europe/Amsterdam";
+
+  # Configure network proxy if necessary
+  # networking.proxy.default = "http://user:password@proxy:port/";
+  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users.users.aaronh = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
+    packages = with pkgs; [
+      cargo
+      git
+      git-lfs
+    ];
+  };
+
+  users.users.builder = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" ];
+    packages = with pkgs; [
+      neofetch 
+    ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    acme-sh
+    git
+    mtr
+    neofetch
+    sysstat
+    tree
+    wget
+  ];
+
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "no";
+  };
+
+  networking.usePredictableInterfaceNames = false;
+  networking.useDHCP = false;
+  networking.interfaces.eth0.useDHCP = true;
+
+  system.stateVersion = "22.11"; # Did you read the comment?
+
+}

hosts/x86_64/sovereign/configuration.nix

@@ -0,0 +1,123 @@
+{ config, pkgs, ... }:
+
+{
+  imports =
+    [ # Include the results of the hardware scan.
+      ./hardware-configuration.nix
+#      ./unstable.nix
+      ./stoners-space.nix
+    ];
+
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
+  
+  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
+
+  nix.settings.extra-platforms = [ "aarch64-linux" ];
+  nix.settings.auto-optimise-store = true;
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  nix.buildMachines = [{ 
+     hostName = "localhost";
+     systems = ["x86_64-linux"
+                "aarch64-linux"
+                "x86_64-darwin"
+                "aarch64-darwin"];
+     supportedFeatures = ["kvm" "nixos-test" "big-parallel" "benchmark"];
+     maxJobs = 8;
+  }];
+
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 30d";
+  };
+
+  # Use the GRUB 2 boot loader.
+  boot.loader.grub.enable = true;
+  boot.loader.grub.extraConfig = ''
+    serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
+    terminal_input serial;
+    terminal_output serial
+  '';
+  boot.loader.grub.device = "nodev"; # or "nodev" for efi only
+  boot.loader.timeout = 10;
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 80 443 ];
+  };
+
+  networking.extraHosts = 
+    ''
+      23.32.241.51 r3.o.lencr.org
+    '';
+
+  # fileSystems."/mnt/swapfile" =
+  #   { device = "/dev/disk/by-uuid/82672991-fe8a-485a-8dcf-7c8ae1282b6c";
+  #     fsType = "ext4";
+  #   };
+
+  # services.hydra = {
+  #   enable = true;
+  #   hydraURL = "localhost:3000";
+  #   notificationSender = "hydra@localhost";
+  #   useSubstitutes = true;
+  # };
+
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "aaronhoneycutt@proton.me";
+  
+  networking.hostName = "sovereign";
+
+  # Set your time zone.
+  # time.timeZone = "Europe/Amsterdam";
+
+  # Configure network proxy if necessary
+  # networking.proxy.default = "http://user:password@proxy:port/";
+  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  users.users.aaronh = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
+    packages = with pkgs; [
+      cargo
+      git
+      git-lfs
+    ];
+  };
+
+  users.users.builder = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" ];
+    packages = with pkgs; [
+      neofetch 
+    ];
+  };
+
+  environment.systemPackages = with pkgs; [
+    acme-sh
+    git
+    inetutils
+    mtr
+    neofetch
+    sysstat
+    tree
+    wget
+  ];
+
+  # Enable the OpenSSH daemon.
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "no";
+  };
+
+  networking.usePredictableInterfaceNames = false;
+  networking.useDHCP = false;
+  networking.interfaces.eth0.useDHCP = true;
+
+  system.stateVersion = "22.11"; # Did you read the comment?
+  system.autoUpgrade.enable = true;
+}
+

hosts/x86_64/sovereign/flake.nix

@@ -0,0 +1,111 @@
+{
+  description = "Sovereign";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/release-23.05";
+  };
+
+  outputs = { self, nixpkgs, ... }@inputs: {
+    nixosConfigurations = {
+      "sovereign" = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
+        modules = [
+          # Import the configuration.nix we used before, so that the old configuration file can still take effect. 
+          # Note: /etc/nixos/configuration.nix itself is also a Nix Module, so you can import it directly here
+#          ./configuration.nix
+          ./hardware-configuration.nix
+          ./stoners-space.nix
+
+          ({config, pkgs, ...}: {
+             nix = {
+                settings.auto-optimise-store = true;
+                settings.experimental-features = [ "nix-command" "flakes" ];
+                settings.extra-platforms = [ "aarch64-linux" ];
+           
+                gc = {
+                   automatic = true;
+                   dates = "weekly";
+                   options = "--delete-older-than 30d";
+                };
+
+                buildMachines = [{
+                   hostName = "localhost";
+                   systems = [ "x86_64-linux"
+                               "aarch64-linux"
+                               "x86_64-darwin"
+                               "aarch64-darwin" ];
+                   supportedFeatures = [ "kvm" "nixos-test" "big-parallel" "benchmark" ];
+                   maxJobs = 8;
+                }];
+
+             };
+
+             boot = {
+                kernelPackages = pkgs.linuxPackages_latest;
+                kernelParams = [ "console=ttyS0,1920n8" ];
+
+                binfmt.emulatedSystems = [ "aarch64-linux" ];
+
+                loader.grub.enable = true;
+                loader.grub.extraConfig = ''
+                   serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
+                   terminal_input serial;
+                   terminal_output serial
+                   '';
+                loader.grub.device = "nodev"; # or "nodev" for efi only
+                loader.timeout = 10;
+             };
+             
+             networking = {
+                hostName = "sovereign";
+
+                firewall = {
+                   enable = true;
+                   allowedTCPPorts = [ 80 443 ];
+                };
+                
+                usePredictableInterfaceNames = false;
+                useDHCP = false;
+                interfaces.eth0.useDHCP = true;
+
+             };
+
+             users.users.aaronh = {
+                isNormalUser = true;
+                extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
+                packages = with pkgs; [
+                   cargo
+                   git
+                   git-lfs
+                ];
+             };
+
+             environment.systemPackages = with pkgs; [
+                acme-sh
+                git
+                git-lfs
+                mtr
+                neofetch
+                sysstat
+                tree
+                wget
+             ];
+
+             security.acme.acceptTerms = true;
+             security.acme.defaults.email = "aaronhoneycutt@proton.me";
+        
+             services.openssh = {
+                enable = true;
+                settings.PermitRootLogin = "no";
+             };
+
+             system = {
+                stateVersion = "23.05";
+                autoUpgrade.enable = true;
+             };
+          })
+        ];
+      };
+    };
+  };
+}

hosts/x86_64/thelio-nvidia.nix

@@ -0,0 +1,17 @@
+{ config, pkgs, ... }: 
+
+{
+    # Name your host machine
+    networking.hostName = "thelio-b1"; 
+
+    # System76
+    hardware.system76.enableAll = true;
+
+    # NVIDIA
+    services.xserver.videoDrivers = [ "nvidia" ];   
+    hardware.opengl.enable = true;
+    hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.stable;
+
+    # Allow Unfree
+    nixpkgs.config.allowUnfree = true;
+}

hosts/x86_64/vm/flake.nix

@@ -0,0 +1,140 @@
+{
+  description = "nixos-vm";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.05";
+  };
+
+  outputs = { self, nixpkgs, ... }@inputs: {
+    nixosConfigurations = {
+      "nixos-vm" = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
+        modules = [
+          # Import the configuration.nix we used before, so that the old configuration file can still take effect. 
+          # Note: /etc/nixos/configuration.nix itself is also a Nix Module, so you can import it directly here
+#          ./configuration.nix
+          ./hardware-configuration.nix
+
+          ({config, pkgs, ...}: {
+            nix = {
+              settings.auto-optimise-store = true;
+              settings.experimental-features = [ "nix-command" "flakes" ];
+           
+              gc = {
+                automatic = true;
+                dates = "weekly";
+                options = "--delete-older-than 30d";
+              };
+            };
+
+            nixpkgs.config.allowUnfree = true; 
+
+            boot = {
+              initrd.luks.devices = {
+                root = { 
+                device = "/dev/sda";
+                preLVM = true;
+                };
+              };
+
+              # kernelPackages = pkgs.linuxPackages_latest;
+              kernelParams = [ "console=ttyS0,1920n8" ];
+
+              binfmt.emulatedSystems = [ "aarch64-linux" ];
+
+              loader.systemd-boot.enable = true;
+              loader.systemd-boot.consoleMode = "0";
+            };
+             
+            networking = {
+              hostName = "nixos-vm";
+              networkmanager.enable = true;
+            };
+
+            users.users.aaronh = {
+              isNormalUser = true;
+              extraGroups = [ "wheel" "networkmanager" ]; # Enable ‘sudo’ for the user.
+              packages = with pkgs; [
+                cargo
+                git
+                git-lfs
+                mdbook
+                neofetch
+                restic
+                roboto-slab
+
+                firefox
+              ];
+            };
+
+            # GNOME
+            services.xserver = {
+              enable = true;
+              displayManager.gdm.enable = true;
+              desktopManager.gnome.enable = true;
+            };
+
+            environment.systemPackages = (with pkgs; [
+              avahi
+              dmidecode
+              libcamera
+              lshw
+              nix-index
+              sysstat
+              tree
+              unzip
+              wget
+
+              # Add GNOME packages
+              gnome.dconf-editor
+              gnome.gnome-tweaks
+              gnomeExtensions.appindicator
+              gnomeExtensions.pop-shell
+              gnomeExtensions.pop-launcher-super-key
+            ]);
+
+            # Remove GNOME packages
+            environment.gnome.excludePackages = (with pkgs; [
+              epiphany # web browser
+              gnome.geary
+              gnome.gnome-software
+              gnome-connections
+              gnome-photos
+              gnome-tour
+            ]);
+
+            # Services
+            services.udev.packages = with pkgs; [ gnome.gnome-settings-daemon ];
+
+            hardware.pulseaudio.enable = false;
+             
+            security.rtkit.enable = true;
+            services.pipewire = {
+              enable = true;
+              alsa.enable = true;
+              alsa.support32Bit = true;
+              pulse.enable = true;
+            };
+
+            services = {
+              fwupd.enable = true;
+              printing.enable = true;
+              openssh.enable = true;
+            };
+ 
+            services.avahi = {
+              enable = true;
+              nssmdns = true;
+              openFirewall = true;
+            };
+  
+            system = {
+              stateVersion = "23.05";
+              autoUpgrade.enable = true;
+            };
+          })
+        ];
+      };
+    };
+  };
+}