myserver.nix

{...}: {
  copper.plate = {
    target = "6.7.8.9";
    hostKey = "op://My Server/Host Key/text";
    hostKeyLocation = "/persist/etc/ssh/ssh_host_ed25519_key";
    diskEncryptionKey = "op://My Server/Disk Encryption Key/password";
    initrdPublicKey = ./keys/initrd_host_ed25519_key.pub;
  };

  copper.features = [
    "hetzner-server"
    "server"
    "impermanence"
    "locale-de"
    "remote-unlock"
  ];

  copper.feature.zfs = {
    enable = true;
    snapshot = true;
    disko = {
      simpleZpool = true;
      singleDiskFormat = true;
      diskLabel = "sda";
    };
  };

  copper.feature.remote-unlock.initrdHostKeySecret = ./secrets/initrd_host_ed25519_key.age;

  # Networking configuration
  copper.feature.hetzner-server.ipv6 = "57c1::/112";
  networking.hostId = "cf36baa6"; # Actually required for ZFS

  nixpkgs.hostPlatform = "aarch64-linux";
}