nixberry: add hostplatform

modules/nixos/services/openssh/default.nix

@@ -0,0 +1,29 @@
+{
+  lib,
+  config,
+  namespace,
+  ...
+}:
+let
+  cfg = config.${namespace}.services.openssh;
+  inherit (lib) mkIf mkEnableOption;
+in
+{
+  options.${namespace}.services.openssh = {
+    enable = mkEnableOption "Enable SSH";
+  };
+
+  config = mkIf cfg.enable {
+    services.openssh = {
+      enable = true;
+      settings = {
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+      };
+    };
+
+    services.fail2ban = {
+      enable = true;
+    };
+  };
+}

modules/nixos/services/remotebuild/default.nix

@@ -0,0 +1,48 @@
+{
+  lib,
+  config,
+  namespace,
+  ...
+}:
+let
+  cfg = config.${namespace}.services.remotebuild;
+  inherit (lib) mkIf mkEnableOption;
+in
+{
+  options.${namespace}.services.remotebuild = {
+    enable = mkEnableOption "Enable remotebuild";
+  };
+
+  config = mkIf cfg.enable {
+    users.users.remotebuild = {
+      isNormalUser = true;
+      createHome = false;
+      group = "remotebuild";
+
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJYZjG+XPNoVHVdCel5MK4mwvtoFCqDY1WMI1yoU71Rd root@yggdrasil"
+      ];
+    };
+
+    users.groups.remotebuild = { };
+
+    nix = {
+      nrBuildUsers = 64;
+      settings = {
+        trusted-users = [ "remotebuild" ];
+
+        min-free = 10 * 1024 * 1024;
+        max-free = 200 * 1024 * 1024;
+
+        max-jobs = "auto";
+        cores = 0;
+      };
+    };
+
+    systemd.services.nix-daemon.serviceConfig = {
+      MemoryAccounting = true;
+      MemoryMax = "90%";
+      OOMScoreAdjust = 500;
+    };
+  };
+}

systems/aarch64-linux/nixberry/default.nix

@@ -4,6 +4,7 @@
   lib,
   modulesPath,
   namespace,
+  pkgs,
   ...
 }:
 
@@ -16,52 +17,19 @@ in
 {
   imports = with inputs.nixos-hardware.nixosModules; [
     (modulesPath + "/installer/scan/not-detected.nix")
-    raspberry-pi-5
   ];
 
-  security.sudo.wheelNeedsPassword = false;
-  users.users.remotebuild = {
-    isNormalUser = true;
-    createHome = false;
-    group = "remotebuild";
-
-    openssh.authorizedKeys.keys = [
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJYZjG+XPNoVHVdCel5MK4mwvtoFCqDY1WMI1yoU71Rd root@yggdrasil"
-    ];
-  };
-
-  users.groups.remotebuild = { };
-
   nixpkgs.hostPlatform = {
     system = "aarch64-linux";
   };
 
-  nix = {
-    nrBuildUsers = 64;
-    settings = {
-      trusted-users = [ "remotebuild" ];
-
-      min-free = 10 * 1024 * 1024;
-      max-free = 200 * 1024 * 1024;
-
-      max-jobs = "auto";
-      cores = 0;
-    };
-  };
-
-  systemd.services.nix-daemon.serviceConfig = {
-    MemoryAccounting = true;
-    MemoryMax = "90%";
-    OOMScoreAdjust = 500;
-  };
-
   services.tailscale = {
     enable = true;
     useRoutingFeatures = "server";
   };
 
   networking = {
-    interfaces.wlan0 = {
+    interfaces.end0 = {
       ipv4.addresses = [
         {
           address = ipAddress;
@@ -70,6 +38,15 @@ in
       ];
       useDHCP = true;
     };
+    interfaces.wlan0 = {
+      ipv4.addresses = [
+        {
+          address = "192.168.178.3";
+          prefixLength = 24;
+        }
+      ];
+      useDHCP = true;
+    };
     defaultGateway = {
       address = "192.168.178.1";
       interface = "wlan0";
@@ -83,9 +60,7 @@ in
         };
       };
     };
-  };
+    firewall = {
-
-  networking.firewall = {
       allowedTCPPorts = [
         53
         80
@@ -94,6 +69,7 @@ in
         53
       ];
     };
+  };
 
   services.adguardhome = {
     enable = true;
@@ -135,6 +111,10 @@ in
             "https://adguardteam.github.io/HostlistsRegistry/assets/filter_47.txt"
           ];
 
+      statistics = {
+        enabled = true;
+        interval = "8760h";
+      };
     };
   };
 
@@ -165,17 +145,16 @@ in
     };
   };
 
-  services.openssh = {
-    enable = true;
-    settings = {
-      PasswordAuthentication = false;
-      KbdInteractiveAuthentication = false;
-    };
-  };
-
   ${namespace} = {
     submodules.basics = enabled;
 
+    services = {
+      openssh = enabled;
+      remotebuild = enabled;
+    };
+
+    apps.cli-apps.helix.pkg = pkgs.helix;
+
     system = {
       # cachemiss for webkit gtk
       hardware.networking.enable = mkForce false;

systems/x86_64-linux/loptland/default.nix

@@ -39,18 +39,6 @@ in
     };
   };
 
-  services.openssh = {
-    enable = true;
-    settings = {
-      PasswordAuthentication = false;
-      KbdInteractiveAuthentication = false;
-    };
-  };
-
-  services.fail2ban = {
-    enable = true;
-  };
-
   services.nginx = {
     enable = true;
     recommendedProxySettings = true;
@@ -199,6 +187,7 @@ in
         enable = true;
         inherit sopsFile;
       };
+      openssh = enabled;
     };
 
     security = {