From 10ad7c7c7f951728bc6011394f70c8d3b8a88954 Mon Sep 17 00:00:00 2001
From: Anish L <anish@lakhwara.com>
Date: Fri, 22 Apr 2022 21:47:05 +1000
Subject: [PATCH] more testing cube

---
 flake.nix                    |  6 +++---
 hosts/cube/configuration.nix | 33 +++++----------------------------
 hosts/curve/default.nix      |  1 -
 profiles/server/default.nix  |  7 +++++++
 4 files changed, 15 insertions(+), 32 deletions(-)
 create mode 100644 profiles/server/default.nix

diff --git a/flake.nix b/flake.nix
index 56b8d7eb..ce28dfaa 100644
--- a/flake.nix
+++ b/flake.nix
@@ -116,10 +116,10 @@
               users = digga.lib.rakeLeaves ./users;
             };
             suites = with profiles; rec {
-              base = [ core users.root users.anish ]; # TODO make anish non gui
-              sealight = [ base ]; # matrix rsshub backup wireguard website
+              base = [ core users.root users.anish ];
+              sealight = [ base ]; # matrix rsshub backup wireguard
               mossnet = [ base ]; # shaarli wallabag nextcloud taskwarrior headphones 
-              cube = [ base site ];
+              cube = [ base site server ];
               graphical = [ base bluetooth music sync wireguard wifi desktop ];
               curve = [ graphical secrets ];
               work = [ base ];
diff --git a/hosts/cube/configuration.nix b/hosts/cube/configuration.nix
index ef9a1101..de613218 100644
--- a/hosts/cube/configuration.nix
+++ b/hosts/cube/configuration.nix
@@ -2,7 +2,8 @@
 
 {
   imports =
-    [ # Include the results of the hardware scan.
+    [
+      # Include the results of the hardware scan.
       ./hardware-configuration.nix
     ];
 
@@ -13,39 +14,15 @@
   networking.hostName = "cube"; # Define your hostname.
   time.timeZone = "Australia/Brisbane";
 
-  # Use flakes
-  nix = {
-    trustedUsers = [ "root" "@wheel" ];
-    package = pkgs.nixFlakes; # or versioned attributes like nix_2_7
-    extraOptions = ''
-      experimental-features = nix-command flakes
-    '';
-   };
-
   networking.useDHCP = false;
   networking.interfaces.ens3.useDHCP = true;
-
-  users.users.anish = {
-    isNormalUser = true;
-    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
-    initialPassword = "SuperDuper";
-    openssh.authorizedKeys.keys = [ "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDM0Zvei46x/yZl/IeBCq6+IYQQ0avulzVyBysF9cPigZMCybWRV7IEU+E3k9t6JrbdbdGfJkcZIWmsWDdKS8W8mBnZpVoT0ffLynu8JQ/TKdGm4Qv6bgUeKNrGsNv0ZPs2CDaGSLj0oJfRF7Ko10tcLP0vW+yujrh+y6TH/vVzJioaV4TGvtCUpn+wEQah9ROwPQLUUofsSWdnRsDJ/gp37zXWs4l5wyjSKtP3O9RZUP7kBekbSqEgSXiTk0oUQSVqIWl9NDiP6onk/gSOjXsR/JPqsSN/XI/c/yj6gyY0f51Ru2D7iBxuMJIJcWV+rU6coIj+ULcQWLzt/7TI8jq5AOOzI/ll4zbL24Eo84Rz+TP9tvMMhDZ0VaMN22AJ8qQEjc5P09tWKsX7Jg39XelyV1jHXncE4yvIE9F4RSCHzWCeKeXakizQNuzSaxTxIExRFYHjNW5bR6+3MTGwVrEIXU+qML+0yFTR86MT+tdY5AreAJQLwbog79O1NupeXJE= anish@curve" ];
-  };
+  i18n.defaultLocale = "en_US.UTF-8";
 
   environment.systemPackages = with pkgs; [
-     vim 
-     gitAndTools.gitFull
+    vim
+    gitAndTools.gitFull
   ];
 
-  # services."anish.lakhwara.com".enable = true;
-  # security.acme.email = "anish+acme@lakhwara.com";
-  # security.acme.acceptTerms = true;
-
-
-  # Enable the OpenSSH daemon.
-  services.openssh.enable = true;
-  security.sudo.wheelNeedsPassword = false;
-
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions
   # on your system were taken. It‘s perfectly fine and recommended to leave
diff --git a/hosts/curve/default.nix b/hosts/curve/default.nix
index ebf379c8..9e2066bc 100644
--- a/hosts/curve/default.nix
+++ b/hosts/curve/default.nix
@@ -2,7 +2,6 @@
 {
   imports = [
     ./configuration.nix
-    profiles.users.anish
     profiles.mossnet-hosts
   ] ++ suites.curve;
 
diff --git a/profiles/server/default.nix b/profiles/server/default.nix
new file mode 100644
index 00000000..add4599a
--- /dev/null
+++ b/profiles/server/default.nix
@@ -0,0 +1,7 @@
+{ config, ... }:
+{
+  # Enable the OpenSSH daemon.
+  services.openssh.enable = true;
+  security.sudo.wheelNeedsPassword = false;
+
+}