From 8d09ffa2d807aff0b9f69cc3d7e6abcd1b4f4f27 Mon Sep 17 00:00:00 2001
From: JuliusFreudenberger <julius+git@jfreudenberger.de>
Date: Thu, 11 Jun 2026 23:23:21 +0200
Subject: [PATCH] Add baszel agent to vms and xcy

---
 hosts/busch-gpu-docker/default.nix  | 9 +++++++++
 hosts/busch-gpu-docker/secrets.nix  | 1 +
 hosts/busch-main-docker/default.nix | 9 +++++++++
 hosts/busch-main-docker/secrets.nix | 1 +
 hosts/xcy/default.nix               | 9 +++++++++
 hosts/xcy/secrets.nix               | 1 +
 6 files changed, 30 insertions(+)

diff --git a/hosts/busch-gpu-docker/default.nix b/hosts/busch-gpu-docker/default.nix
index d7870cd..a31b2e3 100644
--- a/hosts/busch-gpu-docker/default.nix
+++ b/hosts/busch-gpu-docker/default.nix
@@ -56,6 +56,15 @@
     tokenSecretFile = config.age.secrets.hawser-token;
   };
 
+  services.beszel.agent = {
+    enable = true;
+    environment = {
+      HUB_URL = "https://beszel.jfreudenberger.de";
+      DISABLE_SSH = "true";
+    };
+    environmentFile = config.age.secrets.beszel.path;
+  };
+
   # This option defines the first version of NixOS you have installed on this particular machine,
   # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
   # Most users should NEVER change this value after the initial install, for any reason,
diff --git a/hosts/busch-gpu-docker/secrets.nix b/hosts/busch-gpu-docker/secrets.nix
index 093c7a0..82a4982 100644
--- a/hosts/busch-gpu-docker/secrets.nix
+++ b/hosts/busch-gpu-docker/secrets.nix
@@ -2,5 +2,6 @@
 {
   age.secrets = {
     hawser-token.file = "${inputs.secrets}/secrets/busch-gpu-docker/hawser-token";
+    beszel.file = "${inputs.secrets}/secrets/busch-gpu-docker/beszel";
   };
 }
diff --git a/hosts/busch-main-docker/default.nix b/hosts/busch-main-docker/default.nix
index ce7c502..6df1d21 100644
--- a/hosts/busch-main-docker/default.nix
+++ b/hosts/busch-main-docker/default.nix
@@ -44,6 +44,15 @@
     tokenSecretFile = config.age.secrets.hawser-token;
   };
 
+  services.beszel.agent = {
+    enable = true;
+    environment = {
+      HUB_URL = "https://beszel.jfreudenberger.de";
+      DISABLE_SSH = "true";
+    };
+    environmentFile = config.age.secrets.beszel.path;
+  };
+
   # This option defines the first version of NixOS you have installed on this particular machine,
   # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.
   # Most users should NEVER change this value after the initial install, for any reason,
diff --git a/hosts/busch-main-docker/secrets.nix b/hosts/busch-main-docker/secrets.nix
index f06e116..f009a67 100644
--- a/hosts/busch-main-docker/secrets.nix
+++ b/hosts/busch-main-docker/secrets.nix
@@ -2,5 +2,6 @@
 {
   age.secrets = {
     hawser-token.file = "${inputs.secrets}/secrets/busch-main-docker/hawser-token";
+    beszel.file = "${inputs.secrets}/secrets/busch-main-docker/beszel";
   };
 }
diff --git a/hosts/xcy/default.nix b/hosts/xcy/default.nix
index 0c62fef..8c87473 100644
--- a/hosts/xcy/default.nix
+++ b/hosts/xcy/default.nix
@@ -33,6 +33,15 @@
     tokenSecretFile = config.age.secrets.hawser-token;
   };
 
+  services.beszel.agent = {
+    enable = true;
+    environment = {
+      HUB_URL = "https://beszel.jfreudenberger.de";
+      DISABLE_SSH = "true";
+    };
+    environmentFile = config.age.secrets.beszel.path;
+  };
+
   networking.firewall = {
     checkReversePath = "loose";
     allowedTCPPorts = [
diff --git a/hosts/xcy/secrets.nix b/hosts/xcy/secrets.nix
index 4add6e7..6dfb2eb 100644
--- a/hosts/xcy/secrets.nix
+++ b/hosts/xcy/secrets.nix
@@ -2,5 +2,6 @@
 {
   age.secrets = {
     hawser-token.file = "${inputs.secrets}/secrets/xcy/hawser-token";
+    beszel.file = "${inputs.secrets}/secrets/xcy/beszel";
   };
 }