nixos-servers/nixos/machines/default.nix

{
  jefke = {
    name = "jefke";
    hostName = "jefke.hyp";

    nixosModule.lab = {
      dataDisk.enable = true;
      terraformDatabase.enable = true;
      # k3s.enable = true;
      disko.osDiskDevice = "/dev/nvme0n1";

      ssh = {
        useCertificates = true;
        hostCert = builtins.readFile ./jefke_host_ed25519-cert.pub;
        userCert = builtins.readFile ./jefke_user_ed25519-cert.pub;
      };
    };
  };

  atlas = {
    name = "atlas";
    hostName = "atlas.hyp";

    nixosModule.lab = {
      disko.osDiskDevice = "/dev/nvme0n1";

      ssh = {
        useCertificates = true;
        hostCert = builtins.readFile ./atlas_host_ed25519-cert.pub;
        userCert = builtins.readFile ./atlas_user_ed25519-cert.pub;
      };
    };
  };

  lewis = {
    name = "lewis";
    hostName = "lewis.hyp";

    nixosModule.lab = {
      disko.osDiskDevice = "/dev/sda";
      backups.enable = true;
      networking.allowDMZConnectivity = true;
      data-sharing.enable = true;

      dataDisk = {
        enable = true;
        devicePath = "/dev/nvme0n1p1";
      };

      ssh = {
        useCertificates = true;
        hostCert = builtins.readFile ./lewis_host_ed25519-cert.pub;
        userCert = builtins.readFile ./lewis_user_ed25519-cert.pub;
      };
    };
  };
}