add machine verbena

machines/flake-module.nix

@@ -22,6 +22,12 @@
           "syncthing"
         ];
       };
+      verbena = {
+        tags = [
+          "garage"
+          "server"
+        ];
+      };
     };
 
     inventory.instances = {
@@ -32,6 +38,7 @@
           "crocus" = { };
           "genepi" = { };
           "haze" = { };
+          "verbena" = { };
         };
         roles.default.settings.allowedKeys = {
           rpqt_haze = (import ../parts).keys.rpqt.haze;

machines/verbena/configuration.nix

@@ -0,0 +1,35 @@
+{ self, lib, ... }:
+{
+  imports = [
+    ../../system/core
+    ../../system/nix
+    ../../modules/unbound.nix
+    ../../modules/unbound-auth.nix
+
+    self.inputs.srvos.nixosModules.server
+  ];
+
+  nixpkgs.hostPlatform = "x86_64-linux";
+
+  networking.hostName = "verbena";
+
+  networking.useDHCP = lib.mkDefault true;
+
+  clan.core.settings.state-version.enable = true;
+
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "admin@turifer.dev";
+  };
+}

modules/unbound-auth.nix

@@ -16,12 +16,16 @@
             )
 
             @ 1D IN NS ns1.home.rpqt.fr.
+            @ 1D IN NS ns2.home.rpqt.fr.
+            @ 1D IN NS ns3.home.rpqt.fr.
 
             ns1 10800 IN CNAME crocus.home.rpqt.fr.
             ns2 10800 IN CNAME genepi.home.rpqt.fr.
+            ns3 10800 IN CNAME verbena.home.rpqt.fr.
 
             crocus 10800 IN AAAA fd80:150d:17cc:2ae:6999:9380:150d:17cc
             genepi 10800 IN AAAA fd80:150d:17cc:2ae:6999:9358:3e0e:d738
+            verbena 10800 IN AAAA fd80:150d:17cc:2ae:6999:9306:9a0e:c197
           '';
         }
       ];