feat: Update to raspberry pi stuff

nixos/tsuba/configuration.nix

@@ -2,27 +2,32 @@
   config,
   pkgs,
   lib,
+  device,
   ...
 }: {
+  nixpkgs.config.allowUnfree = true;
+  security.sudo.wheelNeedsPassword = false;
+  sops = {
+    defaultSopsFile = ../../secrets/secrets.yaml;
+    defaultSopsFormat = "yaml";
+    age.keyFile = "/home/servius/.config/sops/age/keys.txt";
+  };
   nix = {
     settings = {
       auto-optimise-store = true;
       extra-experimental-features = "nix-command flakes auto-allocate-uids";
-      trusted-users = ["root" "fs0c131y" "remotebuilder"];
+      trusted-users = ["root" "remotebuilder" device.user];
       substituters = [
         "https://nix-community.cachix.org"
-        # "https://sh.darksailor.dev"
       ];
       trusted-public-keys = [
         "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-        # "mirai:bcVPoFGBZ0i7JAKMXIqLj2GY3CulLC4kP7rQyqes1RM="
       ];
     };
     extraOptions = ''
       build-users-group = nixbld
       extra-nix-path = nixpkgs=flake:nixpkgs
       builders-use-substitutes = true
-      secret-key-files = ${config.sops.secrets."builder/mirai/cache/private".path}
     '';
     gc = {
       automatic = true;
@@ -37,12 +42,21 @@
       ../../builders/tsuba.nix
     ];
   };
-  users.users.servius = {
+  users.users.${device.user} = {
     isNormalUser = true;
     extraGroups = ["wheel"];
+    initialPassword = "aaa";
     openssh.authorizedKeys.keyFiles = [
       ../../secrets/id_ed25519.pub
       ../../secrets/id_ios.pub
     ];
   };
+  users.users.remotebuilder = {
+    isNormalUser = true;
+    openssh.authorizedKeys.keyFiles = [
+      ../../secrets/id_ed25519.pub
+    ];
+  };
+  system.stateVersion = "25.05";
+  services.openssh.enable = true;
 }