Set up 'andromache' host

flake.nix

@@ -64,6 +64,10 @@
           modules = [ ./hosts/vm/configuration.nix ];
           specialArgs = { inherit inputs; };
         };
+        andromache = nixpkgs.lib.nixosSystem {
+          modules = [ ./hosts/andromache/configuration.nix ];
+          specialArgs = { inherit inputs; };
+        };
         astyanax = nixpkgs.lib.nixosSystem {
           modules = [ ./hosts/astyanax/configuration.nix ];
           specialArgs = { inherit inputs; };

home/hosts/andromache/default.nix

@@ -0,0 +1 @@
+import ../astyanax

hosts/andromache/configuration.nix

@@ -0,0 +1,93 @@
+{
+  inputs,
+  config,
+  pkgs,
+  ...
+}:
+
+{
+  system.stateVersion = "25.05";
+
+  imports = [
+    inputs.disko.nixosModules.disko
+    inputs.home-manager.nixosModules.default
+    ./hard.nix
+    ../../modules/bootloader.nix
+    ../../modules/disko.zfs-encrypted-root.nix
+    ../../modules/gnome.nix
+    ../../modules/bluetooth.nix
+    ../../modules/keyboard
+    (import ../../modules/networking.nix { hostName = "andromache"; })
+    ../../modules/users.nix
+    ../../modules/audio.nix
+    ../../modules/printing.nix
+    ../../modules/localization.nix
+    ../../modules/fonts
+    ../../modules/ssh/hardened-openssh.nix
+  ];
+
+  hardware = {
+    graphics.enable = true;
+    nvidia = {
+      modesetting.enable = true;
+      powerManagement.enable = true;
+      powerManagement.finegrained = false;
+      open = true;
+      nvidiaSettings = true;
+      package = config.boot.kernelPackages.nvidiaPackages.stable;
+    };
+  };
+
+  environment.systemPackages = [ inputs.nvim.packages.x86_64-linux.nvim ];
+
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+
+  nixpkgs.config.allowUnfree = true;
+
+  home-manager = {
+    useGlobalPkgs = true;
+    useUserPackages = true;
+    users.h = import ../../home/hosts/andromache {
+      inherit inputs;
+      inherit config;
+      inherit pkgs;
+    };
+  };
+
+  networking = {
+    hostId = "80eef97e";
+  };
+
+  services.xserver = {
+    videoDrivers = [ "nvidia" ];
+  };
+
+  services.openssh = {
+    enable = true;
+    harden = true;
+  };
+
+  services.syncthing = {
+    enable = true;
+    openDefaultPorts = true;
+    folders = {
+      "/home/h/sync" = {
+        id = "sync";
+        devices = [ ];
+      };
+    };
+    devices = {
+      # "device1" = {
+      #   id = "DEVICE-ID-GOES-HERE";
+      # };
+    };
+  };
+
+  services.locate = {
+    enable = true;
+    package = pkgs.plocate;
+  };
+}

hosts/andromache/hard.nix

@@ -0,0 +1,26 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "vmd" "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "uas" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.eno1.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp0s20f3.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}