feat: scaffold netcup vps host (disko/vda, static net, tailscale, caddy)

- new nixosConfigurations.vps: UEFI systemd-boot, disko on /dev/vda - static IPv4 159.195.64.117/22 gw .1 (+ IPv6), eth0 pinned, public DNS - tailscale via headscale + sops authkey (secrets/vps.yaml, own host key) - caddy public reverse proxy: audiobookshelf.mgaction.town -> jupiter tailnet:8000 - shared common.nix (user/ssh/nix) ; .sops.yaml per-host rules
2026-07-13 01:01:53 +02:00
parent 25c6982cea
commit 946c44f1d3
8 changed files with 223 additions and 6 deletions
@@ -0,0 +1,37 @@
+{ ... }:
+
+# Declarative disk layout (disko) for the netcup VPS.
+# UEFI: GPT with an ESP + ext4 root on the single virtio disk.
+#
+# ⚠️  /dev/vda is WIPED on install — this destroys everything currently on the
+#     VPS (docker containers, data, existing caddy config). Back up / port your
+#     services into NixOS BEFORE running nixos-anywhere.
+{
+  disko.devices.disk.vps = {
+    type = "disk";
+    device = "/dev/vda";        # netcup virtio disk (256G)
+    content = {
+      type = "gpt";
+      partitions = {
+        ESP = {
+          size = "512M";
+          type = "EF00";
+          content = {
+            type = "filesystem";
+            format = "vfat";
+            mountpoint = "/boot";
+            mountOptions = [ "umask=0077" ];
+          };
+        };
+        root = {
+          size = "100%";
+          content = {
+            type = "filesystem";
+            format = "ext4";
+            mountpoint = "/";
+          };
+        };
+      };
+    };
+  };
+}