Add private machine profile definitions #1

Merged
vnprc merged 2 commits from agent/archetypes-profiles-a2 into master 2026-07-18 15:47:32 +01:00
Collaborator

Refs vnprc/notes#62

Summary

  • add the private profiles flake exporting real vnprc profile definitions
  • move machine definition modules from vnprc/secrets into hosts/ with byte-verbatim content
  • add the planned user-forgejo-token identity-path module and nexus desktop/session assertions

Validation

  • nix flake check
  • nix eval .#lib.profileDefinitions --apply builtins.attrNames --json
  • nix eval .#lib.profileDefinitions.dev --apply builtins.attrNames --json
  • byte-verbatim diff -q checks for moved host definitions and unchanged mullvad/preferences modules
  • lock pins checked for allod-secrets, forgejo-config, nvim-config, nur, nixpkgs, and allod-profiles

Risk

R1. This repo is additive until the deploy flip composes it. The intentional deviations from the old secrets behavior layer are the token file path source and the new nexus assertions module.

Refs vnprc/notes#62 ## Summary - add the private `profiles` flake exporting real vnprc profile definitions - move machine definition modules from `vnprc/secrets` into `hosts/` with byte-verbatim content - add the planned `user-forgejo-token` identity-path module and nexus desktop/session assertions ## Validation - `nix flake check` - `nix eval .#lib.profileDefinitions --apply builtins.attrNames --json` - `nix eval .#lib.profileDefinitions.dev --apply builtins.attrNames --json` - byte-verbatim `diff -q` checks for moved host definitions and unchanged `mullvad`/`preferences` modules - lock pins checked for `allod-secrets`, `forgejo-config`, `nvim-config`, `nur`, `nixpkgs`, and `allod-profiles` ## Risk R1. This repo is additive until the deploy flip composes it. The intentional deviations from the old secrets behavior layer are the token file path source and the new nexus assertions module.
Author
Collaborator

Follow-up requested: remove hard-coded machine architecture strings from profiles and other non-source-of-truth repos; inventory should remain the source of truth for supported platforms.

Follow-up requested: remove hard-coded machine architecture strings from profiles and other non-source-of-truth repos; inventory should remain the source of truth for supported platforms.
vnprc approved these changes 2026-07-18 15:47:26 +01:00
vnprc merged commit 216d21e6fd into master 2026-07-18 15:47:32 +01:00
vnprc deleted branch agent/archetypes-profiles-a2 2026-07-18 15:47:32 +01:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
vnprc/profiles!1
No description provided.