mob next [ci-skip] [ci skip] [skip ci]

lastFile:vars/per-machine/stellio/yggdrasil/privateKey/secret

machines/sirius/configuration.nix

@@ -60,9 +60,7 @@
     };
   };
 
-  services.journald.extraConfig = ''
-    Storage=none
-  '';
+  services.journald.settings.Journal.Storage = "none";
 
   systemd = {
     coredump.enable = false;

machines/stellio/configuration.nix

@@ -0,0 +1,31 @@
+{ inputs, lib, ... }:
+{
+  imports = [
+    inputs.matthew-hardware.nixosModules.mt7986a-glinet-gl-mt6000
+  ];
+
+  # matthew-hardware's common/generic-uefi-image.nix still sets
+  # `image.repart.enable = true`; nixpkgs removed that option (importing
+  # image/repart.nix now always defines system.build.image). Declare it so the
+  # definition has somewhere to land. Drop once upstream stops setting it.
+  options.image.repart.enable = lib.mkOption {
+    type = lib.types.bool;
+    default = true;
+    internal = true;
+  };
+
+  config = {
+    hardware.mt7986a-glinet-gl-mt6000.enable = true;
+    hardware.mt7986a-glinet-gl-mt6000.zealous = true;
+    hardware.mt7986a-glinet-gl-mt6000.image.repart.enable = true;
+
+    nixpkgs.hostPlatform.system = "aarch64-linux";
+    nixpkgs.buildPlatform.system = "x86_64-linux";
+
+    system.stateVersion = "26.11";
+    clan.core.sops.defaultGroups = [ "admins" ];
+
+    clan.core.settings.name = "stellio";
+    clan.core.settings.machine.description = "Flint-2 router";
+  };
+}

machines/stellio/disko.nix

@@ -0,0 +1,13 @@
+{ inputs, ... }:
+{
+  disko = {
+    imageBuilder = {
+      # Avoid double emulation to significantly speed up image building process.
+      # Update the system according to your host system.
+      # See https://github.com/nix-community/disko/issues/856
+      qemu =
+        inputs.nixpkgs.legacyPackages.x86_64-linux.qemu
+        + "/bin/qemu-system-aarch64 -M virt -cpu cortex-a57";
+    };
+  };
+}