semi - Semi-Personal¶


Platform	NixOS x86_64
CPU	Intel i9-14900K (24c/32t)
RAM	128 GB
User	nikhil.singh
Role	Semi-personal workstation (also a nix remote builder)

Services¶

imports = [
  ../common/workstation.nix        # shared Juspay workstation config
  ./disk.nix
  ./hardware.nix
  ./extra-users.nix
];

The common/workstation.nix base imports: default, juspay, sops, disko, beszel, tailscale, virtualisation, filebrowser.

semi acts as a remote build host for dsd (and vice versa). Builder config is in config.nix:

builders.semi = {
  hostName = "semi";
  hostNames = [ "semi" "semi.persian-vega.ts.net" ];
  hostPublicKey = "ssh-ed25519 AAAA...";
};

Known hosts are wired via programs.ssh.knownHosts in workstation.nix. jp-mbp uses semi (and dsd) as remote build machines.

Uses secrets/office.yaml (office age key):