nixos-servers/nixos/machines/default.nix

{
  jefke = {
    name = "jefke";
    hostName = "jefke.hyp";

    nixosModule.lab = {
      terraformDatabase.enable = true;

      storage = {
        osDisk = "/dev/sda";
        dataPartition = "/dev/nvme0n1p1";
      };

      ssh = {
        useCertificates = true;
        hostCert = builtins.readFile ./jefke_host_ed25519-cert.pub;
        userCert = builtins.readFile ./jefke_user_ed25519-cert.pub;
      };
    };
  };

  atlas = {
    name = "atlas";
    hostName = "atlas.hyp";

    nixosModule.lab = {
      networking = {
        staticDMZIpv4Address = "192.168.30.7/24";
        dmzServices.enable = true;
      };

      storage = {
        osDisk = "/dev/sda";
        dataPartition = "/dev/nvme0n1p1";
      };

      ssh = {
        useCertificates = true;
        hostCert = builtins.readFile ./atlas_host_ed25519-cert.pub;
        userCert = builtins.readFile ./atlas_user_ed25519-cert.pub;
      };
    };
  };

  lewis = {
    name = "lewis";
    hostName = "lewis.hyp";

    nixosModule.lab = {
      dataHost.enable = true;

      storage = {
        osDisk = "/dev/sda";
        dataPartition = "/dev/nvme0n1p1";
      };

      ssh = {
        useCertificates = true;
        hostCert = builtins.readFile ./lewis_host_ed25519-cert.pub;
        userCert = builtins.readFile ./lewis_user_ed25519-cert.pub;
      };
    };
  };
}