# Bootstrap config for spindle-exec-1. ENG-468 replaces it with executor/flake.nix.
{ modulesPath, ... }:
{
  imports = [ "${modulesPath}/profiles/qemu-guest.nix" ];

  boot.loader.grub.enable = true;
  boot.loader.grub.device = "/dev/vda";
  boot.growPartition = true;
  boot.kernelParams = [ "console=ttyS0" ];
  fileSystems."/" = {
    device = "/dev/disk/by-label/nixos";
    fsType = "ext4";
    autoResize = true;
  };

  networking.hostName = "spindle-exec-1";
  networking.useDHCP = true;
  services.qemuGuest.enable = true;

  services.openssh = {
    enable = true;
    settings = {
      PasswordAuthentication = false;
      KbdInteractiveAuthentication = false;
      PermitRootLogin = "prohibit-password";
    };
  };
  users.users.root.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINPWqQVrFLbK57rpD5uUXDPxhLVejDoOqTX+4XMeH+px pneumo-lead@spindle-exec-1"
  ];

  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  time.timeZone = "UTC";
  system.stateVersion = "26.05";
}