tofu workflow

machines/_default/configuration.nix

@@ -0,0 +1,31 @@
+{
+  name,
+  config,
+  lib,
+  inputs,
+  ...
+}: {
+  imports = [
+    ./common_config.nix
+    ../modules
+    inputs.sops-nix.nixosModules.sops
+    # inputs.home-manager.nixosModules.home-manager
+  ];
+
+  networking.hostName = name;
+
+  deployment = {
+    replaceUnknownProfiles = lib.mkDefault true;
+    buildOnTarget = lib.mkDefault false;
+    targetHost = lib.mkDefault "${name}.lab";
+    tags = lib.mkDefault [config.nixpkgs.system name "homelab"];
+  };
+
+  sops = {
+    age.keyFile = "/etc/sops/age.key";
+    defaultSopsFile = ../../secrets/secrets.yaml;
+  };
+
+  nodeExporter.enable = lib.mkDefault true;
+  journalLog.enable = lib.mkDefault true;
+}