oldie: init secrets, connect to wireguard

flake.lock

@@ -91,11 +91,11 @@
         "nixpkgs-stable": "nixpkgs-stable"
       },
       "locked": {
-        "lastModified": 1781005595,
+        "lastModified": 1781374202,
-        "narHash": "sha256-mWx7QLnJrWcw0EfWXzf2Rpv30xRM+cgOWVEuWKxAJiw=",
+        "narHash": "sha256-rR5QHASdw1DcBDmg2BWaI241Wvt5aY8mPZgXBAyUp9E=",
         "owner": "nix-community",
         "repo": "emacs-overlay",
-        "rev": "2aba9beb9b36aa281e4677c2bc519f2cca2173c7",
+        "rev": "d6f892bd9570237c69a3e1c42b465594d54d477a",
         "type": "github"
       },
       "original": {
@@ -114,11 +114,11 @@
         "nixpkgs-stable": "nixpkgs-stable_2"
       },
       "locked": {
-        "lastModified": 1781005595,
+        "lastModified": 1781374202,
-        "narHash": "sha256-mWx7QLnJrWcw0EfWXzf2Rpv30xRM+cgOWVEuWKxAJiw=",
+        "narHash": "sha256-rR5QHASdw1DcBDmg2BWaI241Wvt5aY8mPZgXBAyUp9E=",
         "owner": "nix-community",
         "repo": "emacs-overlay",
-        "rev": "2aba9beb9b36aa281e4677c2bc519f2cca2173c7",
+        "rev": "d6f892bd9570237c69a3e1c42b465594d54d477a",
         "type": "github"
       },
       "original": {
@@ -348,11 +348,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1780883961,
+        "lastModified": 1781319724,
-        "narHash": "sha256-WU6SUrESuPiEXEUvX4D51AgWrXRJty+sLJBwBaDBGqE=",
+        "narHash": "sha256-ZGuxexEMo4Xv28KJ0dX/m/PHN4oZIOnxHZpNTyrvx4M=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "4eb4fec41674d5b059aa2eedf0f98453890546fa",
+        "rev": "8355f0a16b2dbb06a97959a918af5b239bbe05ae",
         "type": "github"
       },
       "original": {
@@ -370,11 +370,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1781009359,
+        "lastModified": 1781365335,
-        "narHash": "sha256-w/mZkRscTatf8NWyUstli8ROzM/eopxZzi0WRjoeYkU=",
+        "narHash": "sha256-zqDBhXMzfbdlO7F2bGHe7MOtB3xngd/+4ieMHDC+ZXo=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "c58ead12efcac436afffa93a22099a5595eb4157",
+        "rev": "5b6f5733726a1b2ccafb5dec6ac4ca7299fad66c",
         "type": "github"
       },
       "original": {
@@ -448,11 +448,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1780977736,
+        "lastModified": 1781324273,
-        "narHash": "sha256-++gnmHagnlrp8zxRLaVMFS00EfLiXXoEEwYFeJd+r6s=",
+        "narHash": "sha256-8o3W8DlntG3V49csNA/po1r0OAuyAuGtAclzl9rKOeM=",
         "owner": "nix-community",
         "repo": "nix-vscode-extensions",
-        "rev": "4bb5e8d544537f62d3d0bc6da6c56f9895a50eab",
+        "rev": "75312cf67b194550cac918d13bdaafc5b56b6795",
         "type": "github"
       },
       "original": {
@@ -470,11 +470,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1780977736,
+        "lastModified": 1781324273,
-        "narHash": "sha256-++gnmHagnlrp8zxRLaVMFS00EfLiXXoEEwYFeJd+r6s=",
+        "narHash": "sha256-8o3W8DlntG3V49csNA/po1r0OAuyAuGtAclzl9rKOeM=",
         "owner": "nix-community",
         "repo": "nix-vscode-extensions",
-        "rev": "4bb5e8d544537f62d3d0bc6da6c56f9895a50eab",
+        "rev": "75312cf67b194550cac918d13bdaafc5b56b6795",
         "type": "github"
       },
       "original": {
@@ -497,11 +497,11 @@
         "nur": "nur"
       },
       "locked": {
-        "lastModified": 1781018938,
+        "lastModified": 1781209591,
-        "narHash": "sha256-5LUzkIEBQGo1/hYeu9Ku5feWsv8CYyaE/FOCnlKAdio=",
+        "narHash": "sha256-47j+gBV1UWTT52tF6EwX5IJ+xI4efrX57UZ1hUfFksw=",
         "owner": "materusPL",
         "repo": "Nixerus",
-        "rev": "6b9c35b7175a0356d4d513ab49b57921c8a0845e",
+        "rev": "57c8b3dc63c0d13b1122e3d12370722c41116497",
         "type": "github"
       },
       "original": {
@@ -524,11 +524,11 @@
         "nur": "nur_3"
       },
       "locked": {
-        "lastModified": 1781018938,
+        "lastModified": 1781209591,
-        "narHash": "sha256-5LUzkIEBQGo1/hYeu9Ku5feWsv8CYyaE/FOCnlKAdio=",
+        "narHash": "sha256-47j+gBV1UWTT52tF6EwX5IJ+xI4efrX57UZ1hUfFksw=",
         "owner": "materusPL",
         "repo": "Nixerus",
-        "rev": "6b9c35b7175a0356d4d513ab49b57921c8a0845e",
+        "rev": "57c8b3dc63c0d13b1122e3d12370722c41116497",
         "type": "github"
       },
       "original": {
@@ -543,11 +543,11 @@
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1780310866,
+        "lastModified": 1781168557,
-        "narHash": "sha256-fPBRVf6A5xlACYcOI59shGrjURuvwu0lRsDoSCEXt/I=",
+        "narHash": "sha256-LOnLQ2tpYF9gqIDDr3+j3DbpJJr/QCH6zPRT2GzEUOE=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "4ed851c979641e28597a05086332d75cdc9e395f",
+        "rev": "6358ff76821101c178e3ab4919a62799bfe3652e",
         "type": "github"
       },
       "original": {
@@ -562,11 +562,11 @@
         "nixpkgs": "nixpkgs_5"
       },
       "locked": {
-        "lastModified": 1780310866,
+        "lastModified": 1781168557,
-        "narHash": "sha256-fPBRVf6A5xlACYcOI59shGrjURuvwu0lRsDoSCEXt/I=",
+        "narHash": "sha256-LOnLQ2tpYF9gqIDDr3+j3DbpJJr/QCH6zPRT2GzEUOE=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "4ed851c979641e28597a05086332d75cdc9e395f",
+        "rev": "6358ff76821101c178e3ab4919a62799bfe3652e",
         "type": "github"
       },
       "original": {
@@ -626,11 +626,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1780749050,
+        "lastModified": 1781074563,
-        "narHash": "sha256-3av0pIjlOWQ6rDbNOmpUSvbNnJkGORQKKjb4LtCZsIY=",
+        "narHash": "sha256-md8WlXOlfnIeHeOScMTTHFyf2d6iaTwPl2apR5EQ3P4=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "a799d3e3886da994fa307f817a6bc705ae538eeb",
+        "rev": "9ae611a455b90cf061d8f332b977e387bda8e1ca",
         "type": "github"
       },
       "original": {
@@ -716,11 +716,11 @@
     },
     "nixpkgs_7": {
       "locked": {
-        "lastModified": 1780902259,
+        "lastModified": 1781216227,
-        "narHash": "sha256-q8yYEC5f1mFlQO9RGna4LTc9QrcvWunX6FYp83munkQ=",
+        "narHash": "sha256-9mUW6gNwoN2SWc/l0fW4svPNOulXLl8ijqKyeSOGgJE=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "bd0ff2d3eac24699c3664d5966b9ef36f388e2ca",
+        "rev": "a0374025a863d007d98e3297f6aa46cc3141c2f0",
         "type": "github"
       },
       "original": {
@@ -736,11 +736,11 @@
         "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1781015510,
+        "lastModified": 1781208515,
-        "narHash": "sha256-DqRzaFfLijAyd3TDilgKEjNiqJ1UVymA/seyVamoWS4=",
+        "narHash": "sha256-Ke76KeYDAnm/w3OGEviATXQMFw4QnRPFS/Wj6MWqM0Y=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "961e2e196da88c8d6513bb8e9865ec5e5a6cb954",
+        "rev": "d66d4c98290f2b8dc3487e43bd1eb3d038039ab2",
         "type": "github"
       },
       "original": {
@@ -775,11 +775,11 @@
         "nixpkgs": "nixpkgs_4"
       },
       "locked": {
-        "lastModified": 1781015510,
+        "lastModified": 1781208515,
-        "narHash": "sha256-DqRzaFfLijAyd3TDilgKEjNiqJ1UVymA/seyVamoWS4=",
+        "narHash": "sha256-Ke76KeYDAnm/w3OGEviATXQMFw4QnRPFS/Wj6MWqM0Y=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "961e2e196da88c8d6513bb8e9865ec5e5a6cb954",
+        "rev": "d66d4c98290f2b8dc3487e43bd1eb3d038039ab2",
         "type": "github"
       },
       "original": {

flake.nix

@@ -132,6 +132,10 @@
           host = "materusPC";
           stable = true;
         };
+        oldie = makeSystem {
+          host = "oldie";
+          stable = true;
+        };
       };
 
       homeConfigurations = {
@@ -140,6 +144,11 @@
           host = "materusPC";
           stable = true;
         };
+        "materus@oldie" = makeHome {
+          user = "materus";
+          host = "oldie";
+          stable = true;
+        };
       };
 
     };

nix-config/home/materus/default.nix

@@ -7,9 +7,9 @@
 }:
 
 {
-  home.username = "materus";
+  home.username = lib.mkDefault "materus";
   home.homeDirectory = lib.mkDefault "/home/materus";
-  home.stateVersion = "25.11";
+
 
 
 

nix-config/host/materusPC/home-manager/materus.nix

@@ -9,6 +9,7 @@ let
   jsonFormat = pkgs.formats.json { };
 in
 {
+  home.stateVersion = "25.11";
   mkk.neovim.enable = true;
 
   mkk.dir = config.lib.file.mkOutOfStoreSymlink "/mkk/config";

nix-config/host/oldie/configuration.nix

@@ -0,0 +1,369 @@
+# Edit this configuration file to define what should be installed on
+# your system. Help is available in the configuration.nix(5) man page, on
+# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
+
+{
+  config,
+  lib,
+  pkgs,
+  materusArgs,
+  mkk,
+  ...
+}:
+
+{
+  imports = [
+    # Include the results of the hardware scan.
+    ./hardware-configuration.nix
+  ];
+
+  # Use the systemd-boot EFI boot loader.
+  boot.tmp.useTmpfs = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.loader.efi.efiSysMountPoint = "/boot/efi";
+  boot.loader.grub = {
+    enable = true;
+    efiSupport = true;
+    device = "nodev";
+    useOSProber = true;
+    memtest86.enable = true;
+  };
+  services.xserver.videoDrivers = [ "nvidia" ];
+  hardware.nvidia = {
+    modesetting.enable = true;
+    open = true;
+    nvidiaSettings = true;
+    package = config.boot.kernelPackages.nvidiaPackages.stable;
+  };
+  hardware.graphics = {
+    enable = true;
+    extraPackages = with pkgs; [
+    ];
+  };
+  # Use latest kernel.
+  boot.kernelPackages = pkgs.linuxPackagesFor pkgs.linux_zen;
+  networking.hostName = "oldie"; # Define your hostname.
+  environment.systemPackages = with pkgs; [
+    neovim
+    nano
+    fastfetch
+    brave
+  ];
+  environment.enableAllTerminfo = true;
+  environment.pathsToLink = [
+    "/share/zsh"
+    "/share/bash-completion"
+    "/share/fish"
+  ];
+  # Configure network connections interactively with nmcli or nmtui.
+  networking.networkmanager.enable = true;
+  programs.firefox.enable = true;
+  programs.java.enable = true;
+  programs.steam = {
+    enable = true;
+    remotePlay.openFirewall = true;
+    dedicatedServer.openFirewall = true;
+    extraPackages = with pkgs; [
+      vlc
+      libva
+      libva-utils
+      libva-vdpau-driver
+      mesa
+      mesa-demos
+      libvdpau-va-gl
+      nss
+      materusArgs.inputs.nixerus.packages.x86_64-linux.polymc
+    ];
+    extraCompatPackages = [
+      pkgs.proton-ge-bin
+    ];
+    package = pkgs.steam.override {
+      extraEnv = {
+        PRESSURE_VESSEL_FILESYSTEMS_RW = "\${XDG_RUNTIME_DIR}/wivrn/comp_ipc";
+        #PRESSURE_VESSEL_IMPORT_OPENXR_1_RUNTIMES="1";
+      };
+      extraLibraries =
+        p: with p; [
+        ];
+    };
+  };
+  fonts.packages = [
+    pkgs.dejavu_fonts
+    pkgs.freefont_ttf
+    pkgs.gyre-fonts
+    pkgs.liberation_ttf
+    pkgs.unifont
+
+    pkgs.noto-fonts
+    pkgs.noto-fonts-color-emoji
+    pkgs.noto-fonts-cjk-sans
+    pkgs.noto-fonts-cjk-serif
+    pkgs.wqy_zenhei
+    pkgs.corefonts
+    pkgs.hack-font
+    pkgs.nerd-fonts.hack
+
+    pkgs.ubuntu-classic
+    pkgs.monocraft
+    pkgs.nerd-fonts.droid-sans-mono
+    pkgs.nerd-fonts.meslo-lg
+    pkgs.nerd-fonts.profont
+    pkgs.nerd-fonts.fira-code
+  ];
+  fonts.enableDefaultPackages = lib.mkDefault true;
+
+  fonts.fontconfig.enable = lib.mkDefault true;
+  fonts.fontconfig.cache32Bit = lib.mkDefault true;
+
+  fonts.fontconfig.defaultFonts.sansSerif = [
+    "Noto Sans"
+    "DejaVu Sans"
+    "WenQuanYi Zen Hei"
+    "Noto Color Emoji"
+  ];
+  fonts.fontconfig.defaultFonts.serif = [
+    "Noto Serif"
+    "DejaVu Serif"
+    "WenQuanYi Zen Hei"
+    "Noto Color Emoji"
+  ];
+  fonts.fontconfig.defaultFonts.emoji = [
+    "Noto Color Emoji"
+    "OpenMoji Color"
+  ];
+  fonts.fontconfig.defaultFonts.monospace = [
+    "Hack Nerd Font"
+    "Noto Sans Mono"
+    "WenQuanYi Zen Hei Mono"
+  ];
+
+  fonts.fontDir.enable = lib.mkDefault true;
+
+  nixpkgs.config.allowUnfree = true;
+  nix.settings = {
+    experimental-features = lib.mkMerge [
+      [
+        "nix-command"
+        "flakes"
+      ]
+    ];
+    auto-optimise-store = true;
+    trusted-users = [
+      "root"
+      "@wheel"
+    ];
+
+    substituters = [
+      "https://nix-community.cachix.org"
+      "https://cache.nixos.org/"
+      "https://nixerus.cachix.org/"
+    ];
+    trusted-public-keys = [
+      "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+      "nixerus.cachix.org-1:2x7sIG7y1vAoxc8BNRJwsfapZsiX4hIl4aTi9V5ZDdE="
+    ];
+  };
+
+  # Set your time zone.
+  time.timeZone = "Europe/Warsaw";
+  users.users.materus = {
+    isNormalUser = true;
+    extraGroups = [
+      "audio"
+      "video"
+      "render"
+      "pipewire"
+      "wheel"
+      "networkmanager"
+      "input"
+      "kvm"
+      "libvirt-qemu"
+      "libvirt"
+      "libvirtd"
+      "podman"
+      "scanner"
+      "lp"
+    ];
+    #shell = pkgs.zsh;
+    description = "Mateusz Słodkowicz";
+    #openssh.authorizedKeys.keyFiles = [ ("${materusArg.cfg.path}" + "/extraFiles/keys/ssh/materus.pub") ];
+    #hashedPasswordFile = config.sops.secrets."users/materus".path;
+  };
+
+  # Configure network proxy if necessary
+  # networking.proxy.default = "http://user:password@proxy:port/";
+  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
+
+  users.defaultUserShell = pkgs.zsh;
+  programs.zsh = {
+    enable = true;
+    enableGlobalCompInit = false;
+    interactiveShellInit = ''
+      if [[ ''${__MATERUS_HM_ZSH:-0} == 0 ]]; then
+        source ${pkgs.grml-zsh-config}/etc/zsh/zshrc
+      fi
+    '';
+    promptInit = "";
+  };
+
+  # Select internationalisation properties.
+  i18n.defaultLocale = "pl_PL.UTF-8";
+  console = {
+    font = "Lat2-Terminus16";
+    keyMap = "pl";
+    useXkbConfig = false; # use xkb.options in tty.
+  };
+
+  programs.git = {
+    enable = true;
+    lfs.enable = true;
+  };
+  programs.gnupg.agent = {
+    enable = true;
+    enableSSHSupport = false;
+    enableBrowserSocket = true;
+  };
+
+  # Enable the X11 windowing system.
+  services.xserver.enable = false;
+  services.displayManager = {
+    autoLogin.enable = true;
+    autoLogin.user = "materus";
+    plasma-login-manager.enable = true;
+  };
+  services.desktopManager.plasma6.enable = true;
+  services.desktopManager.plasma6.enableQt5Integration = true;
+
+  programs.ssh.startAgent = true;
+
+  services.syncthing = {
+    enable = true;
+    user = "materus";
+    dataDir = "/home/materus";
+  };
+
+  # Configure keymap in X11
+  # services.xserver.xkb.layout = "us";
+  # services.xserver.xkb.options = "eurosign:e,caps:escape";
+
+  # Enable CUPS to print documents.
+  # services.printing.enable = true;
+
+  # Enable sound.
+  # services.pulseaudio.enable = true;
+  # OR
+  services.pipewire = {
+    enable = true;
+    audio.enable = true;
+    alsa.enable = true;
+    alsa.support32Bit = true;
+    pulse.enable = true;
+    systemWide = true;
+    jack.enable = true;
+  };
+
+  # Enable touchpad support (enabled default in most desktopManager).
+  services.libinput.enable = true;
+
+  # Define a user account. Don't forget to set a password with ‘passwd’.
+  # users.users.alice = {
+  #   isNormalUser = true;
+  #   extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
+  #   packages = with pkgs; [
+  #     tree
+  #   ];
+  # };
+
+  # programs.firefox.enable = true;
+
+  # List packages installed in system profile.
+  # You can use https://search.nixos.org/ to find more packages (and options).
+  # environment.systemPackages = with pkgs; [
+  #   vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
+  #   wget
+  # ];
+
+  # Some programs need SUID wrappers, can be configured further or are
+  # started in user sessions.
+  # programs.mtr.enable = true;
+  # programs.gnupg.agent = {
+  #   enable = true;
+  #   enableSSHSupport = true;
+  # };
+
+  # List services that you want to enable:
+
+  # Enable the OpenSSH daemon.
+  # services.openssh.enable = true;
+
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  networking.firewall.enable = true;
+
+  # Copy the NixOS configuration file and link it from the resulting system
+  # (/run/current-system/configuration.nix). This is useful in case you
+  # accidentally delete configuration.nix.
+  # system.copySystemConfiguration = true;
+
+  # This option defines the first version of NixOS you have installed on this particular machine,
+  # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
+  #
+  # Most users should NEVER change this value after the initial install, for any reason,
+  # even if you've upgraded your system to a new NixOS release.
+  #
+  # This value does NOT affect the Nixpkgs version your packages and OS are pulled from,
+  # so changing it will NOT upgrade your system - see https://nixos.org/manual/nixos/stable/#sec-upgrading for how
+  # to actually do that.
+  #
+  # This value being lower than the current NixOS release does NOT mean your system is
+  # out of date, out of support, or vulnerable.
+  #
+  # Do NOT change this value unless you have manually inspected all the changes it would make to your configuration,
+  # and migrated your data accordingly.
+
+  hardware.uinput.enable = true;
+  hardware.steam-hardware.enable = true;
+
+
+  sops.templates."networkmanager.env".content = ''
+    WIREGUARD_PRIVATEKEY="${config.sops.placeholder.wg-key}"
+  '';
+  networking.networkmanager.ensureProfiles.environmentFiles = [
+    config.sops.templates."networkmanager.env".path
+  ];
+  networking.networkmanager.ensureProfiles.profiles = {
+    wg0 = {
+      connection = {
+        id = "PodKos";
+        type = "wireguard";
+        interface-name = "wg-podkos";
+      };
+      wireguard = {
+        private-key = "$WIREGUARD_PRIVATEKEY";
+      };
+      "wireguard-peer.${mkk.wireguard.peers.valkyrie.pubKey}" = {
+        endpoint = "${mkk.network.valkyrie.ip}:${mkk.wireguard.peers.valkyrie.port}";
+        allowed-ips = "${mkk.wireguard.ip-masks.main};${mkk.wireguard.ip-masks.guest};${mkk.wireguard.ip-masks.asia};${mkk.wireguard.peers.valkyrie.ip}/32;";
+        persistent-keepalive = "20";
+      };
+      ipv4 = {
+        address1 = "${mkk.wireguard.peers.oldie.ip}/32";
+        dns = "${mkk.wireguard.peers.valkyrie.ip};";
+        method = "manual";
+        never-default = "true";
+      };
+      ipv6 = {
+        addr-gen-mode = "stable-privacy";
+        method = "disabled";
+      };
+      proxy = { };
+    };
+  };
+
+
+  # For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
+  system.stateVersion = "26.05"; # Did you read the comment?
+
+}

nix-config/host/oldie/default.nix

@@ -0,0 +1,8 @@
+{ ... }:
+{
+  imports = [
+    ./configuration.nix
+
+    ./private
+  ];
+}

nix-config/host/oldie/hardware-configuration.nix

@@ -0,0 +1,96 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
+
+{
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "ehci_pci"
+    "ahci"
+    "usbhid"
+    "usb_storage"
+    "sd_mod"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  boot.initrd.systemd.enable = true;
+  boot.initrd.luks.devices."DECRYPTED_ROOT".device =
+    "/dev/disk/by-uuid/5e23b356-3494-4640-8f20-6aad670ee77c";
+  boot.initrd.luks.devices."DECRYPTED_DATA" = {
+    device = "/dev/disk/by-uuid/793e74af-381e-434c-b2b6-01206cf6edfd";
+    keyFile = "/root/password:/dev/mapper/DECRYPTED_ROOT";
+  };
+
+  fileSystems."/" = {
+    device = "/dev/mapper/DECRYPTED_ROOT";
+    fsType = "btrfs";
+    options = [
+      "subvol=@"
+      "ssd"
+      "compress=zstd"
+      "space_cache=v2"
+    ];
+  };
+
+  fileSystems."/var/log" = {
+    device = "/dev/mapper/DECRYPTED_ROOT";
+    fsType = "btrfs";
+    options = [
+      "subvol=@log"
+      "ssd"
+      "compress=zstd"
+      "space_cache=v2"
+    ];
+  };
+
+  fileSystems."/home" = {
+    device = "/dev/mapper/DECRYPTED_DATA";
+    fsType = "btrfs";
+    options = [
+      "subvol=@home"
+      "nossd"
+      "compress=zstd"
+      "space_cache=v2"
+    ];
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/535d8814-8541-4ac2-9cfb-ed0bf3852b0c";
+    fsType = "ext4";
+  };
+
+  fileSystems."/boot/efi" = {
+    device = "/dev/disk/by-uuid/93EE-5783";
+    fsType = "vfat";
+    options = [
+      "fmask=0022"
+      "dmask=0022"
+    ];
+  };
+  fileSystems."/etc/nixos" = {
+    device = "/mkk/config";
+    fsType = "none";
+    options = [ "bind" ];
+    depends = [ "/" ];
+  };
+
+  swapDevices = [
+    { device = "/dev/disk/by-uuid/9a5795a9-8ddb-4be0-b8f7-e59270ba8db9"; }
+  ];
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

nix-config/host/oldie/home-manager/materus.nix

@@ -0,0 +1,51 @@
+{ pkgs, ... }:
+{
+  home.stateVersion = "26.05";
+  mkk.neovim.enable = true;
+
+  home.packages = with pkgs; [
+    neovide
+    obsidian
+    git-crypt
+
+    telegram-desktop
+    discord
+    spotify
+    remmina
+
+    mesa-demos
+    vulkan-tools
+    nixfmt
+
+    curl
+    wget
+    python3
+
+    packwiz
+    ani-cli
+    mpv
+    kitty
+    keepassxc
+    moonlight-qt
+    wezterm
+
+    (vivaldi.override {proprietaryCodecs = true;})
+  ];
+  programs.vscode = {
+    enable = true;
+    mutableExtensionsDir = true;
+  };
+  programs.git = {
+    enable = true;
+    lfs.enable = true;
+    settings = {
+      user.email = "materus@podkos.pl";
+      user.name = "materus";
+      commit.gpgsign = true;
+      gpg.format = "ssh";
+    };
+
+    signing.signByDefault = true;
+    signing.key = "/mkk/config/extra-files/ssh/materus.pub";
+  };
+}