oscar: Add include for untracked ssh_config

For example, this is useful for setting up temporary hosts that I don't
want tracked in my config. Sometimes I do this for e.g. vscodium remote
SSH.

bert/services/http/index.nix

@@ -7,6 +7,7 @@
     ./home.chandlerswift.com.nix
     ./isaacswift.com.nix
     ./katherineandchandler.com.nix
+    ./lawrencedeerclub.chandlerswift.com.nix
     ./maps.chandlerswift.com.nix
     ./music.chandlerswift.com.nix
     ./preview.chandlerswift.com.nix

bert/services/http/lawrencedeerclub.chandlerswift.com.nix

@@ -0,0 +1,18 @@
+
+{
+  services.caddy.virtualHosts."lawrencedeerclub.chandlerswift.com".extraConfig = ''
+    encode zstd gzip
+    file_server
+    root * /srv/www/lawrencedeerclub.chandlerswift.com
+    # hide .git # ???
+
+    handle_errors {
+      respond "{err.status_code} {err.status_text}"
+    }
+  '';
+  systemd.tmpfiles.settings."10-lawrencedeerclub-chandlerswift-com" = {
+    "/srv/www/lawrencedeerclub.chandlerswift.com" = {
+      d = {};
+    };
+  };
+}

bert/services/monitoring.nix

@@ -18,6 +18,22 @@
           ];
         }];
       }
+      {
+        job_name = "bigbird_zfs";
+        static_configs = [{
+          targets = [
+            "bigbird:9134"
+          ];
+        }];
+      }
+      {
+        job_name = "bigbird";
+        static_configs = [{
+          targets = [
+            "bigbird:9100"
+          ];
+        }];
+      }
     ];
     exporters.node = {
       enable = true;

bigbird/configuration.nix

@@ -37,6 +37,17 @@
   services.openssh.settings.PasswordAuthentication = false;
   users.users.root.openssh.authorizedKeys.keys = [''ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEhPyyqS3BGYor3zLbjc8hZuhem3mS8TNmvWogXcnz/b chandler@chandlerswift.com'' ];
 
+  services.prometheus.exporters = {
+    node = {
+      enable = true;
+      enabledCollectors = [
+        "systemd"
+        "zfs"
+      ];
+      openFirewall = true;
+    };
+  };
+
   # Open ports in the firewall.
   # networking.firewall.allowedTCPPorts = [ ... ];
   # networking.firewall.allowedUDPPorts = [ ... ];

oscar/configuration.nix

@@ -137,7 +137,8 @@
       gnome-sound-recorder
       josm
       kate
-      kicad
+      # kicad # https://github.com/NixOS/nixpkgs/issues/335003
+      (import (fetchTarball "https://github.com/NixOS/nixpkgs/archive/13456ccaf2874c921891b04fe0c39fc79aa7357f.tar.gz") {}).kicad
       libreoffice-qt
       prismlauncher
       prusa-slicer
@@ -225,6 +226,19 @@
       signing.key = null; # "let GnuPG decide what signing key to use depending on commit's author"
     };
 
+    programs.ssh = {
+      enable = true;
+      addKeysToAgent = "yes";
+      matchBlocks = {
+        bigbird = {
+          user = "root";
+        };
+      };
+      includes = [
+        "config.d/*"
+      ];
+    };
+
     programs.firefox = {
       enable = true;
 #       profiles = {