backup node fully integrated

flake.nix

@@ -74,13 +74,13 @@
         };
       };
        backup = {
-        hostname = "192.168.100.193";
+        hostname = "10.0.0.4";
         sshUser = "root";
         magicRollbackTimeout = 120;
         profiles.system = {
           user = "root";
           remoteBuild = false;
-          path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.desktop;
+          path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.backup;
         };
       };
 	};

hosts/backup/default.nix

@@ -1,6 +1,8 @@
 { config, lib, pkgs, ... }:
 
 {
+  imports = [ ./hardware-configuration.nix ../../modules/ssh.nix ];
+
   networking.hostName = "backup";
 
   users.users.lilac = {
@@ -21,6 +23,13 @@
 
   time.timeZone = "America/Winnipeg";
 
+  systemd.sleep.settings.Sleep = {
+    AllowSuspend = "no";
+    AllowHibernation = "no";
+    AllowHybridSleep = "no";
+    AllowSuspendThenHibernate = "no";
+  };
+
   i18n.defaultLocale = "en_US.UTF-8";
   i18n.extraLocaleSettings = {
     LC_ADDRESS = "en_US.UTF-8";
@@ -57,6 +66,11 @@
 	tor-browser
   ];
 
+  networking.wireless.enable = true;
+  networking.networkmanager.enable = true;
+
+  services.timesyncd.enable = true;    # optional
+
 networking = {
     firewall = {
 	  enable = true;

hosts/backup/hardware-configuration.nix

@@ -10,6 +10,9 @@
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.kernelPackages = pkgs.linuxPackages_latest;
 
   fileSystems."/" = {
     device = "/dev/disk/by-uuid/61b493e0-8c91-b7d1-4e336da06ff0";

hosts/vps/default.nix

@@ -46,6 +46,10 @@
           allowedIPs = [ "10.0.0.2/32" ];
 		  publicKey = "7BcwtszpzS4ABDwKwMaiJ7F35sJRa89fBbuh80Sk8Uk=";
 		}
+		{
+		  allowedIPs = [ "10.0.0.4/32" ];
+		  publicKey = "XjuV3wzkP03UUjYSJfY3OG3WWLRtoQBN7GokDEWhdhQ=";
+		}
       ];
 	};
 	nftables = {