new file: .gitignore

new file: .sops.yaml new file: README.md modified: flake.nix new file: home/README.md new file: home/default.nix modified: home/git.nix new file: home/ssh.nix new file: hosts/README.md new file: hosts/desktop/README.md new file: hosts/desktop/configuration.nix new file: hosts/desktop/default.nix new file: hosts/server/README.md new file: hosts/server/configuration.nix modified: hosts/server/default.nix new file: hosts/wsl/README.md new file: hosts/wsl/configuration.nix new file: hosts/wsl/default.nix new file: lib/README.md new file: lib/hosts.nix modified: lib/mkHost.nix new file: modules/README.md new file: modules/core/README.md new file: modules/core/default.nix new file: modules/core/sops.nix new file: modules/core/users.nix new file: modules/desktop/README.md new file: modules/desktop/apps.nix new file: modules/desktop/de/README.md new file: modules/desktop/de/default.nix new file: modules/desktop/de/kde.nix new file: modules/desktop/default.nix new file: modules/desktop/wm/README.md new file: modules/desktop/wm/default.nix new file: modules/drivers/README.md new file: modules/drivers/amdgpu.nix new file: modules/drivers/nvidia.nix new file: modules/server/README.md new file: modules/server/default.nix new file: modules/server/docker.nix new file: modules/server/ssh.nix new file: modules/wsl/README.md new file: modules/wsl/configuration.nix new file: modules/wsl/default.nix deleted: modules/wsl/wsl.nix new file: overlays/README.md new file: profiles/README.md new file: profiles/desktop.nix modified: profiles/server.nix new file: profiles/wsl.nix new file: secrets/README.md new file: secrets/users/README.md new file: secrets/users/luochen570.enc.yaml.example 添加了一些文件并优化了了部分配置桌面驱动有待改进等我去nixos实际操作一下改进该配置纯gpt生产，可能存在一些问题，欢迎大家提出意见和建议未经任何测试，直接提交了，请勿直接使用
2026-02-27 23:58:08 +08:00
parent 611d7c1c1f
commit 620b587010
53 changed files with 733 additions and 45 deletions
--- a/secrets/README.md
+++ b/secrets/README.md
@@ -0,0 +1,13 @@
+# 🔐 secrets 目录说明
+
+`sops-nix` 密钥目录。
+
+## 🌲 目录树
+```text
+🔐 secrets
+└─ 👤 users/
+```
+
+建议：
+- 仅提交加密后的 `*.enc.yaml`
+- 明文仅保留 `*.example` 模板
--- a/secrets/users/README.md
+++ b/secrets/users/README.md
@@ -0,0 +1,14 @@
+# 👤 secrets/users 目录说明
+
+用户级 secret 模板与密文。
+
+## 🌲 目录树
+```text
+👤 secrets/users
+├─ 📄 luochen570.enc.yaml.example  # 明文模板（不部署）
+└─ 🔒 luochen570.enc.yaml          # 加密后部署文件
+```
+
+## 🔐 本地源文件（Git 黑名单）
+- 你可以在本目录维护 `*.source` 文件作为本地敏感源文件（例如真实域名和 IP）。
+- 这些文件已被仓库 `.gitignore` 屏蔽，不会被 Git 收集和推送。
--- a/secrets/users/luochen570.enc.yaml.example
+++ b/secrets/users/luochen570.enc.yaml.example
@@ -0,0 +1,92 @@
+# Create encrypted file from this template:
+# cp secrets/users/luochen570.enc.yaml.example secrets/users/luochen570.enc.yaml
+# sops --encrypt --in-place secrets/users/luochen570.enc.yaml
+users:
+  luochen570:
+    authorized_key: "ssh-rsa AAAA... your-comment"
+    passwordHash: "REPLACE_WITH_mkpasswd_HASH"
+    ssh_config: |
+      # ~/.ssh/config
+      Host jz s0 pikvm nix zen gentoo ali tx jp k3s k3s-a1 k3s-a2 gmk
+          IdentityFile ~/.ssh/id_rsa
+
+      # <C1_DOMAIN>
+      Host jz
+          Hostname <C1_DOMAIN>
+          Port 10000
+          User root
+
+      # <S0_DOMAIN>
+      Host s0 pikvm nix k3s-1 k3s-2 k3s-3 test
+          Hostname <S0_DOMAIN>
+          User root
+
+      Host nix
+          User luochen570
+          Port 33
+
+      Host pikvm
+          Port 53912
+
+      Host k3s-1
+          Port 10000
+
+      Host k3s-2
+          Port 10002
+
+      Host k3s-3
+          Port 10004
+
+      Host test
+          Port 10008
+
+      Host zen
+          Hostname <ZEN_DOMAIN>
+          User root
+          Port 10002
+
+      Host gmk
+          Hostname <GMK_DOMAIN>
+          User root
+
+      Host fn
+          Hostname <FNOS_IP>
+          User luochen570
+
+      Host ali
+          Hostname <ALI_ECS_IP>
+          User ecs-user
+
+      Host tx
+          Hostname <TENCENT_CLOUD_IP>
+          User root
+
+      Host jp
+          Hostname <JP_SERVER_IP>
+          User root
+
+      Host hk
+          Hostname <HK_SERVER_IP>
+          User root
+
+      Host hk2
+          Hostname <HK2_SERVER_IP>
+          User root
+
+      Host k3s k3s-a1 k3s-a2 opensuse
+          User root
+          Hostname <S0_DOMAIN>
+
+      Host k3s
+          Port 10000
+
+      Host k3s-a1
+          Port 10004
+
+      Host opensuse
+          Port 10006
+
+      Host gitea
+          HostName <GITEA_IP>
+          User git
+          Port 222