added more servers waow :3

hosts/arcturus/default.nix

@@ -13,7 +13,7 @@
   };
 
   boot = {
-    kernelPackages = pkgs.linuxPackages_6_12;
+    # kernel is defined in `groups/servers/default.nix`
     loader = {
       systemd-boot.enable = true;
       efi.canTouchEfiVariables = true;
@@ -123,6 +123,14 @@
     ];
   };
 
+  programs = {
+    nh = {
+      enable = true;
+      clean.enable = true;
+      clean.extraArgs = "--keep-since 14d --keep 8";
+    };
+  };
+
   environment = {
     systemPackages = with pkgs; [
       neovim

hosts/delphinus/default.nix

@@ -1,17 +1,12 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}: {
+{pkgs, ...}: {
   imports = [
     ./hardware-configuration.nix
   ];
 
-  networking.hostName = "delphinus";
-
   boot = {
-    kernelPackages = pkgs.linuxPackages_latest;
+    # kernel is defined in `groups/servers/default.nix`
+    kernelParams = ["console=ttyS0,19200n8"];
+
     loader = {
       timeout = 10;
       grub = {
@@ -27,15 +22,28 @@
     };
   };
 
+  networking.hostName = "delphinus";
+
   networking = {
     networkmanager.enable = true;
-    useDHCP = false;
     usePredictableInterfaceNames = false;
+    useDHCP = false;
+
+    interfaces.eth0 = {
+      useDHCP = true;
+
+      # linode expects ipv6 privacy extensions to be disabled:
+      # https://www.linode.com/docs/guides/manual-network-configuration/#static-vs-dynamic-addressing
+      tempAddress = "disabled";
+    };
+
     nftables.enable = true;
 
     firewall = {
       enable = true;
-      allowedTCPPorts = [6767];
+      allowedTCPPorts = [
+        4070
+      ];
       allowedUDPPorts = [];
     };
   };
@@ -48,38 +56,51 @@
     keyMap = "us";
   };
 
-  users.users.fox = {
-    isNormalUser = true;
-    extraGroups = ["wheel"];
-    packages = with pkgs; [
-      tree
-    ];
-
-    openssh.authorizedKeys.keys = [
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPGwai/gXJOJZQujpk0BSwdjSe2as3pT567bYhzjaQ4M aurora@nixarawrui"
-    ];
-  };
-
   services = {
     openssh = {
       enable = true;
 
-      ports = [6767];
+      ports = [4070];
       settings = {
         PasswordAuthentication = false;
         PermitRootLogin = "no";
-        AllowUsers = ["fox"];
-        UseDns = false; # disable rDNS lookup
+        AllowUsers = ["foxora"];
+        UseDns = false; # enables rDNS lookup
         X11Forwarding = false;
       };
     };
   };
 
-  environment.systemPackages = with pkgs; [
-    neovim
-    git
-    wget
-  ];
+  users.users.foxora = {
+    isNormalUser = true;
+    extraGroups = ["wheel"];
+
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPGwai/gXJOJZQujpk0BSwdjSe2as3pT567bYhzjaQ4M aurora@nixarawrui"
+    ];
+
+    packages = with pkgs; [];
+  };
+
+  programs = {
+    nh = {
+      enable = true;
+      clean.enable = true;
+      clean.extraArgs = "--keep-since 7d --keep 3";
+    };
+  };
+
+  environment = {
+    systemPackages = with pkgs; [
+      neovim
+      git
+      wget
+    ];
+
+    variables = {
+      EDITOR = "nvim";
+    };
+  };
 
   system.stateVersion = "25.11";
 }

hosts/delphinus/hardware-configuration.nix

@@ -1,26 +1,31 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
-
 {
-  imports =
-    [ (modulesPath + "/profiles/qemu-guest.nix")
-    ];
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}: {
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
 
-  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
-  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ ];
-  boot.extraModulePackages = [ ];
+  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+  boot.initrd.kernelModules = [];
+  boot.kernelModules = ["virtio_net"];
+  boot.extraModulePackages = [];
 
-  fileSystems."/" =
-    { device = "/dev/sda";
-      fsType = "ext4";
-    };
+  fileSystems."/" = {
+    device = "/dev/sda";
+    fsType = "ext4";
+    autoResize = true;
+  };
 
-  swapDevices =
-    [ { device = "/dev/sdb"; }
-    ];
+  swapDevices = [
+    {device = "/dev/sdb";}
+  ];
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
 }

hosts/lunata/default.nix

@@ -0,0 +1,106 @@
+{pkgs, ...}: {
+  imports = [
+    ./hardware-configuration.nix
+  ];
+
+  boot = {
+    # kernel is defined in `groups/servers/default.nix`
+    kernelParams = ["console=ttyS0,19200n8"];
+
+    loader = {
+      timeout = 10;
+      grub = {
+        enable = true;
+        forceInstall = true;
+        device = "nodev";
+        extraConfig = ''
+          serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
+          terminal_input serial;
+          terminal_output serial
+        '';
+      };
+    };
+  };
+
+  networking.hostName = "lunata";
+
+  networking = {
+    networkmanager.enable = true;
+    usePredictableInterfaceNames = false;
+    useDHCP = false;
+
+    interfaces.eth0 = {
+      useDHCP = true;
+
+      # linode expects ipv6 privacy extensions to be disabled:
+      # https://www.linode.com/docs/guides/manual-network-configuration/#static-vs-dynamic-addressing
+      tempAddress = "disabled";
+    };
+
+    nftables.enable = true;
+
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [
+        4070
+      ];
+      allowedUDPPorts = [];
+    };
+  };
+
+  time.timeZone = "Europe/London";
+
+  i18n.defaultLocale = "en_US.UTF-8";
+  console = {
+    font = "Lat2-Terminus16";
+    keyMap = "us";
+  };
+
+  services = {
+    openssh = {
+      enable = true;
+
+      ports = [4070];
+      settings = {
+        PasswordAuthentication = false;
+        PermitRootLogin = "no";
+        AllowUsers = ["foxora"];
+        UseDns = false; # enables rDNS lookup
+        X11Forwarding = false;
+      };
+    };
+  };
+
+  users.users.foxora = {
+    isNormalUser = true;
+    extraGroups = ["wheel"];
+
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDyGwJ782W9Bk9u9kFqY6Ky8KxOvwna32dppOcAgT8n9 aurora@nixarawrui"
+    ];
+
+    packages = with pkgs; [];
+  };
+
+  programs = {
+    nh = {
+      enable = true;
+      clean.enable = true;
+      clean.extraArgs = "--keep-since 7d --keep 3";
+    };
+  };
+
+  environment = {
+    systemPackages = with pkgs; [
+      neovim
+      git
+      wget
+    ];
+
+    variables = {
+      EDITOR = "nvim";
+    };
+  };
+
+  system.stateVersion = "25.11";
+}

hosts/lunata/hardware-configuration.nix

@@ -0,0 +1,31 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}: {
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
+
+  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+  boot.initrd.kernelModules = [];
+  boot.kernelModules = ["virtio_net"];
+  boot.extraModulePackages = [];
+
+  fileSystems."/" = {
+    device = "/dev/sda";
+    fsType = "ext4";
+    autoResize = true;
+  };
+
+  swapDevices = [
+    {device = "/dev/sdb";}
+  ];
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}

hosts/lyra/default.nix

@@ -13,7 +13,7 @@
   };
 
   boot = {
-    kernelPackages = pkgs.linuxPackages_6_12;
+    # kernel is defined in `groups/servers/default.nix`
     loader = {
       systemd-boot.enable = true;
       efi.canTouchEfiVariables = true;
@@ -51,7 +51,6 @@
   virtualisation = {
     podman = {
       enable = true;
-      dockerCompat = true;
       defaultNetwork.settings.dns_enabled = true;
     };
   };
@@ -74,7 +73,6 @@
       enable = true;
       clean.enable = true;
       clean.extraArgs = "--keep-since 14d --keep 8";
-      flake = "/etc/nixos";
     };
   };