thinkpad -> kirk

Re-deployed with `nixos-anywhere` (now it uses `disko`)

hosts/default.nix

@@ -68,6 +68,27 @@
       #     "chatgpt-token".owner = "ccr";
       #   };
       # };
+      kirk = {
+        vpn = {
+          ip = "10.100.0.3";
+          publicKey = "GrCpICbC25FQ+7JXgOJ9btvZp8YI/uecyBXx9IevsBo=";
+        };
+        extraModules = [
+          inputs.disko.nixosModules.disko
+          inputs.nixosHardware.nixosModules.lenovo-thinkpad-x1-7th-gen
+        ];
+        extraHmModules = [
+          inputs.ccrEmacs.hmModules.default
+          "${inputs.homeManagerGitWorkspace}/modules/services/git-workspace.nix"
+        ];
+        secrets = {
+          "kirk-wireguard-private-key" = {};
+          "chatgpt-token".owner = "ccr";
+          "cachix-personal-token".owner = "ccr";
+          "git-workspace-tokens".owner = "ccr";
+          "autistici-password".owner = "ccr";
+        };
+      };
 
       picard = {
         vpn = {

hosts/kirk/default.nix

@@ -0,0 +1,91 @@
+{
+  fleetModules,
+  lib,
+  ...
+}: {
+  imports =
+    fleetModules [
+      "common"
+      "ssh"
+      "ccr"
+      "nix"
+      "networkmanager"
+      "bluetooth"
+      "dbus"
+      "docker"
+      "fonts"
+      "qmk-udev"
+      "mosh"
+      "udisks2"
+      "xdg"
+      "pipewire"
+      "nix-development"
+      "waydroid"
+      "virt-manager"
+      "ssh-initrd"
+      "printing"
+      "pam"
+      "wireguard-client"
+    ]
+    ++ [
+      ./disko.nix
+    ];
+
+  ccr = {
+    enable = true;
+    autologin = true;
+    modules = [
+      "git"
+      "git-workspace"
+      "helix"
+      "shell"
+      "element"
+      "emacs"
+      "firefox"
+      "gpg"
+      "mpv"
+      "password-store"
+      "slack"
+      "hyprland"
+      "udiskie"
+      "xdg"
+      "spotify"
+      "lutris"
+      "wine"
+      "cura"
+      "chrome"
+      "email"
+      "digikam"
+    ];
+    extraGroups = [];
+  };
+
+  boot.initrd.kernelModules = ["i915"];
+  boot.initrd.availableKernelModules = [
+    "nvme"
+    "xhci_pci"
+    "usb_storage"
+    "sd_mod"
+  ];
+  boot.kernelModules = [
+    "kvm-intel"
+  ];
+
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.loader.systemd-boot = {
+    enable = true;
+    configurationLimit = 20;
+  };
+
+  networking.hostId = "3a7683ae";
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  powerManagement.cpuFreqGovernor = lib.mkDefault "powersave"; # or ondemand?
+  hardware.enableRedistributableFirmware = lib.mkDefault true;
+
+  hardware.opengl = {
+    enable = true;
+    driSupport = true;
+    driSupport32Bit = true;
+  };
+}

hosts/kirk/disko.nix

@@ -0,0 +1,72 @@
+{
+  disko.devices = {
+    disk = {
+      nvme = {
+        type = "disk";
+        device = "/dev/nvme0n1";
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              size = "1G";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+              };
+            };
+            zfs = {
+              size = "100%";
+              content = {
+                type = "zfs";
+                pool = "zroot";
+              };
+            };
+          };
+        };
+      };
+    };
+    zpool = {
+      zroot = {
+        type = "zpool";
+        rootFsOptions = {
+          compression = "lz4";
+          acltype = "posixacl";
+          xattr = "sa";
+          "com.sun:auto-snapshot" = "true";
+          mountpoint = "none";
+        };
+        datasets = {
+          "root" = {
+            type = "zfs_fs";
+            options = {
+              mountpoint = "none";
+              encryption = "aes-256-gcm";
+              keyformat = "passphrase";
+              keylocation = "prompt";
+            };
+          };
+          "root/nixos" = {
+            type = "zfs_fs";
+            options.mountpoint = "/";
+            mountpoint = "/";
+          };
+          "root/home" = {
+            type = "zfs_fs";
+            options.mountpoint = "/home";
+            mountpoint = "/home";
+          };
+          "root/tmp" = {
+            type = "zfs_fs";
+            mountpoint = "/tmp";
+            options = {
+              mountpoint = "/tmp";
+              sync = "disabled";
+            };
+          };
+        };
+      };
+    };
+  };
+}