add nova

clients/nova/continuwuity.nix

@@ -0,0 +1,10 @@
+{
+  quad.matrix = {
+    enable = true;
+    domain = "polyphony.chat";
+    settings.well_known = {
+      support_email = "info@polyphony.chat";
+      support_mxid = null;
+    };
+  };
+}

clients/nova/flori.nix

@@ -0,0 +1,16 @@
+{ config, ... }:
+{
+  users = {
+    mutableUsers = true;
+    users.flori = {
+      isNormalUser = true;
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcXzWUeVwJN7iPxMT/1lhJySY4t6Z2/fH/GHVuzQFr6 cardno:32_241_564"
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBnstd9HyyIjfXWfGymWDcRlK9nZuqgTIcueiqPUDaQ star@starforge"
+      ];
+      hashedPasswordFile = config.age.secrets."initialFloriPassword.age".path;
+      description = "Flori";
+      extraGroups = [ "wheel" ];
+    };
+  };
+}

clients/nova/hardware-configuration.nix

@@ -0,0 +1,7 @@
+{
+  boot.kernelParams = [ "ip=dhcp" ];
+  boot.initrd.availableKernelModules = [
+    "virtio_pci"
+    "virtio_net"
+  ];
+}

clients/nova/unlock-ssh-initrd.nix

@@ -0,0 +1,20 @@
+{ config, ... }:
+{
+  fileSystems."/".options = [ "x-systemd.device-timeout=0" ];
+  networking.firewall.allowedTCPPorts = [ 222 ];
+  boot = {
+    loader.grub.enable = false;
+    initrd = {
+      systemd = {
+        enable = true;
+        users.root.shell = "/bin/systemd-tty-ask-password-agent";
+      };
+      network.ssh = {
+        enable = true;
+        port = 222;
+        hostKeys = [ "/etc/ssh/ssh_host_ed25519_key_initrd" ];
+        authorizedKeys = config.users.users.ava.openssh.authorizedKeys.keys;
+      };
+    };
+  };
+}