4 files changed, 153 insertions, 0 deletions
diff --git a/hosts/T430/configuration.nix b/hosts/T430/configuration.nix
new file mode 100644
index 0000000..cc530d6
--- /dev/null
+++ b/hosts/T430/configuration.nix
@@ -0,0 +1,78 @@
+{ config, lib, pkgs, ... }: {
+	imports = [ ./wg.nix ];
+
+	# Setup bootloader
+	boot._loader.enable = true;
+
+	# Enable common options
+	_archetypes = {
+		profiles = {
+			desktop = {
+				enable = true;
+				home.users.timmy.enable = true;
+			};
+			btrfs.enable = true;
+		};
+		collections = {
+			desktop = {
+				extraUtilities.enable = true;
+				cad.enable = true;
+				chromium.enable = true;
+				crypto.enable = true;
+				graphics.enable = true;
+				office.enable = true;
+			};
+		};
+	};
+
+	# Configure charge threshold for battery
+	services.tlp = {
+		enable = true;
+		settings = {
+			START_CHARGE_THRESH_BAT0 = 55;
+			STOP_CHARGE_THRESH_BAT0 = 80;
+		};
+	};
+
+	# Enable user timmy
+	_users.timmy = {
+		enable = true;
+		autologin.enable = true;
+		wifi.enable = true;
+		nas = {
+			enable = true;
+			home.enable = true;
+		};
+	};
+
+	# Configure home
+	home-manager.users.timmy = {
+		gtk._mintTheme = {
+			dark = true;
+			color = "Purple";
+			icons.color = "Purple";
+		};
+		gtk = {
+			font.name = "monospace";
+			font.size = 8;
+			cursorTheme.size = 24;
+		};
+		programs._st = {
+			enable = true;
+			font = {
+				name = "TamzenForPowerline";
+				attrs = {
+					pixelsize = 14;
+				};
+			};
+		};
+		programs._seasonalwallpaper.wallpapers.download = true;
+		fonts.fontconfig = {
+			defaultFonts.monospace = [ "TamzenForPowerline" ];
+			subpixelRendering = "rgb";
+			hinting = "slight";
+		};
+	};
+
+	system.stateVersion = "24.05";
+}
diff --git a/hosts/T430/hardware-configuration.nix b/hosts/T430/hardware-configuration.nix
new file mode 100644
index 0000000..78b0160
--- /dev/null
+++ b/hosts/T430/hardware-configuration.nix
@@ -0,0 +1,46 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ehci_pci" "ahci" "usb_storage" "sd_mod" "sr_mod" "sdhci_pci" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/mapper/cryptroot";
+      fsType = "btrfs";
+      options = [ "subvol=@" ];
+    };
+
+  boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-uuid/222813d7-cd5e-473a-9cdb-1a2bae74e904";
+
+  fileSystems."/home" =
+    { device = "/dev/mapper/cryptroot";
+      fsType = "btrfs";
+      options = [ "subvol=@home" ];
+    };
+
+  fileSystems."/nix" =
+    { device = "/dev/mapper/cryptroot";
+      fsType = "btrfs";
+      options = [ "subvol=@nix" ];
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/117A-6AB4";
+      fsType = "vfat";
+      options = [ "fmask=0022" "dmask=0022" ];
+    };
+
+  swapDevices = [ ];
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}
diff --git a/hosts/T430/resources/secrets/wg.yaml b/hosts/T430/resources/secrets/wg.yaml
new file mode 100644
index 0000000..3e29c4c
--- /dev/null
+++ b/hosts/T430/resources/secrets/wg.yaml
@@ -0,0 +1,18 @@
+wg-office: ENC[AES256_GCM,data:Ft2P1nSMqs+0obsZdulyIV5oCxid019t++A0bAHTkcpysmwCuECHODZL2EHgpbmvomMKQyzKPPdrSgGS9H+Dar/+Qko70zPSs8uQit2j6yhceSwNtb2ivD2hFCTtQr9pvSr8HgpxKtmw22tGpfXXHTmu+xBlHFizvTMEAqKdz+bvspLk/ANbcbmLVYXrb5NwksF0vaZSOkzKnpeyDyhvb8Z5GGmvWTPzP3ILK7RzpPb11/9vgyBjyyMkQfT0QpwkE7OlaH4ffX/Qg1d0T4tWOA4Fsi3h853FZ1Rukh5f3YPSsEqgLNJpClDrprYM3m2d3dDUYen4F3+58MvF8K1CWLigs9RwxqH2F5ztloHDpLAzKp/9l3xOt869uNiOqKF68102lYdCP20AQDt34Xory8Qls7QMYo0auUb7m/XVdhHQD/ohyjDHIGZG6BrbuRtuMgAu8PZh8MpdeZw1xe+5oPb2XrL3dpR7xZ/eHpcy58zVBl8SQaoCP85e1uBabnqN0fbiVFDdUNL52xTEyRknrK7RISX0zPiwDvdMRIAa172C,iv:92BzIjqwiCIfLzl9El4QoU701Q7XZE6JgpPbZZCh4ZY=,tag:+KUlo0fF5h3kMveoU4NQ9g==,type:str]
+wg-home: ENC[AES256_GCM,data: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,iv:afhs9kQqstlhmBKXQ7okSENzNt2Y9VXsQVzvENoe/Fo=,tag:hJJkQH75rNeSfs8mOkdxVg==,type:str]
+wg-office-alt: ENC[AES256_GCM,data:Wk6di/P4yh0PhhfdUUB3af326glrnaqGepNoJmBkuVptmPZi0GdnrBL5/dXxTKLI3ZjGLonwf5JCX7VcXZTRzXwv8ntv0ts87pgaQcueDE7BFqlYjdlmQz6Rv+58ETCnm5yMu1F2oRkHp93ONPpZumyNmqV6lhzQlzf2XgSzVSI/eNPJ6eb2UmQHFs4hjyl3WUPKI21VlNIwNwikQXBVo4si9SUNOIvLkSYzfurkfqQLRWt6O2OJdRx1ZWMFcHp5YKuUDHFRwKym2226I16vvic0XOJfi6Sic6uZQ5GwuiPGB938uectXyfasOC0YQ2Fzj0HqR/mpQJvwj49ulwljDvDqFDjMQMmKYPa3EiTFegaUgEMOLjnQySJpAwThkZHEOo9M298L5TZKIIHiKWTsJa6PX82SeNOw0+3FDNdFEM9gQbGUIlQmRadlQYEY7VE,iv:XwM1xtriFkQLNzSIVhA/FtON9HccFh2qR4SSmSDF7r0=,tag:O/+m9RQbtYmGsQnxsF/OsA==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4NEN4NGxDR1oreGVoSGhE
+            TzMxSEY0QVBhS2Z6MW15ci9aVlJ0a3IyVlZBCldPRVNvcUhJSHhWSEk3akd4RjN0
+            ajhUV2d1ZWRsRFU4cTE2dGl6RmM4MGsKLS0tIFhnUjl5aDJqWVB1NE15SlNzR2Iv
+            YTNydURsOUMrSXZGdk9UOUdUQlA0SFUKxEDJRR6tpYva9qpWo9NxwCxk/xpRVoTl
+            YJkmDZzMcXikXXiro96AprP9dXJXvMPKYPGl2Zsal8PlGFPBoHW2GA==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1w80rc0dnuu8nw99gw64c596qqetm78jdnsqajr0u7ephykekr39qfz8vnv
+    lastmodified: "2026-10-05T19:03:13Z"
+    mac: ENC[AES256_GCM,data:17HpRszIH6PbDBOV91Q9J3fQvGJnqdCG32X5OU5kzBR7sA/zMVZSNGpT/Qz7J+11ZvWn+LzErnLpZSdfg+HIBUdmxgmTaKBSPHL34O5N0vHkbt5L1Vbys+RHiK1Gb/JnqfCSu5CSwSQRmbC5GIpimHL/Ke3iaMyTvmb0nxWqG/0=,iv:I84zf/PYlSIRpUaEj7TjzqslbYJj3RfC1BhC/FaT1zI=,tag:O/YK/FVCzE3hIAl/xh1hYA==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.13.3
diff --git a/hosts/T430/wg.nix b/hosts/T430/wg.nix
new file mode 100644
index 0000000..d6a5e47
--- /dev/null
+++ b/hosts/T430/wg.nix
@@ -0,0 +1,11 @@
+{ config, pkgs, inputs, ... }: {
+	sops.secrets.wg-office.sopsFile     = ./resources/secrets/wg.yaml;
+	sops.secrets.wg-office-alt.sopsFile = ./resources/secrets/wg.yaml;
+	sops.secrets.wg-home.sopsFile       = ./resources/secrets/wg.yaml;
+
+	networking.wg-quick.interfaces = {
+		wg-office     = { autostart = false; configFile = config.sops.secrets.wg-office.path; };
+		wg-office-alt = { autostart = false; configFile = config.sops.secrets.wg-office-alt.path; };
+		wg-home       = { autostart = false; configFile = config.sops.secrets.wg-home.path; };
+	};
+}