iru@localhost $_ on Nostr: ``` { description = "Killy the killing machine"; inputs = { nixpkgs = { url = ...

```
{
description = "Killy the killing machine";

inputs = {
nixpkgs = {
url = "github:NixOS/nixpkgs/nixos-unstable";
follows = "nix-bitcoin/nixpkgs-unstable";
};
lanzaboote = {
url = "github:nix-community/lanzaboote/v0.4.1";
inputs = {
nixpkgs = {
follows = "nixpkgs";
};
};
};
nix-bitcoin = {
url = "github:fort-nix/nix-bitcoin/release";
};
};
outputs = { self, nixpkgs, lanzaboote, nix-bitcoin, ...}: {
nixosConfigurations = {
killy = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [
./configuration.nix
nix-bitcoin.nixosModules.default
lanzaboote.nixosModules.lanzaboote
({ pkgs, lib, ... }: {
environment = {
systemPackages = [
pkgs.sbctl
];
};
boot = {
loader = {
systemd-boot = {
enable = lib.mkForce false;
};
};
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
};
nix-bitcoin = {
generateSecrets = true;
nodeinfo = {
enable = true;
};
};
services = {
bitcoind = {
enable = true;
txindex = true;
zmqpubrawblock = "tcp://127.0.0.1:28332";
zmqpubrawtx = "tcp://127.0.0.1:28333";
};
fulcrum = {
enable = true;
};
lnd = {
enable = true;
certificate = {
extraIPs = [
“[REDACTED]”
“[REDACTED]”
];
};
};
lightning-loop = {
enable = true;
certificate = {
extraIPs = [
“[REDACTED]”
“[REDACTED]”
];
};
};
lightning-pool = {
enable = true;
};
};
})
];
};
};
};
}

```