Add VPS host

hosts/nixos/vps/system.nix

@@ -0,0 +1,97 @@
+{ config, pkgs, ... }: {
+  imports = [
+    ./hardware-configuration.nix
+    ./disk-config.nix
+    ../../../modules/tailscale.nix
+    ../../../modules/borg.nix
+  ];
+
+  # GRUB bootloader with UEFI support
+  boot.loader.grub = {
+    enable = true;
+    device = "nodev"; # Required for EFI systems
+    efiSupport = true;
+    efiInstallAsRemovable = true; # Better compatibility with VPS
+  };
+
+  # Network configuration
+  networking = {
+    hostName = "vps";
+    hostId = "a8c06f42"; # Required for some services, generated randomly
+    networkmanager.enable = false; # Use systemd-networkd for VPS
+    useDHCP = true; # VPS typically use DHCP
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [ 22 ]; # Only SSH by default
+    };
+  };
+
+  # Set your time zone
+  time.timeZone = "Europe/Copenhagen";
+
+  # Select internationalisation properties
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  # Enable the OpenSSH daemon
+  services.openssh = {
+    enable = true;
+    settings = {
+      PermitRootLogin = "prohibit-password"; # Allow key-based root login for nixos-anywhere
+      PasswordAuthentication = false;
+      KbdInteractiveAuthentication = false;
+    };
+  };
+
+  # Root user configuration (for nixos-anywhere initial access)
+  users.users.root = {
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGVvviqbwBEGDIbAUnmgHQJi+N5Qfvo5u49biWl6R7oC yanlin@MacBook-Air"
+    ];
+  };
+
+  # Regular user account
+  users.users.yanlin = {
+    isNormalUser = true;
+    description = "yanlin";
+    extraGroups = [ "wheel" ]; # Enable sudo
+    shell = pkgs.zsh;
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGVvviqbwBEGDIbAUnmgHQJi+N5Qfvo5u49biWl6R7oC yanlin@MacBook-Air"
+    ];
+  };
+
+  # Enable sudo for wheel group
+  security.sudo.wheelNeedsPassword = false;
+
+  # List packages installed in system profile
+  environment.systemPackages = with pkgs; [
+    vim
+    git
+    htop
+    curl
+    wget
+    rsync
+    tmux
+    tree
+    lsof
+    tcpdump
+    iotop
+    zsh
+    home-manager
+  ];
+
+  # Enable zsh system-wide (required when set as user shell)
+  programs.zsh.enable = true;
+
+  # Enable experimental nix features
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+
+  # Allow unfree packages globally
+  nixpkgs.config.allowUnfree = true;
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It's perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  system.stateVersion = "24.05"; # Did you read the comment?
+}