vibebox-autoinstall.yaml

#cloud-config
autoinstall:
  version: 1

  locale: en_US.UTF-8

  keyboard:
    layout: us
    variant: alt-intl

  timezone: America/Sao_Paulo

  identity:
    hostname: vibebox
    username: kmpzr
    # Generate with: mkpasswd --method=SHA-512
    password: "$6$NfAthekh$Ht8/3pMEf.Zj6vtLEBrkhLouZgvlt6xWTgT3U/PTgmKKyAqxz74293KIBVtfvUmYErFMkhPlEuWv6G3XgCJIT."

  ssh:
    install-server: true
    allow-pw: false
    authorized-keys:
      - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK8v3FePANGxSVWyAodH/y1eugX2YnpBvHxUsx+Sm+Nd to@kmpzr.one"
      - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE7Nk1Sr3Hm6/H1Ko7USXy2eciV4nyew95GnPBE7olwl to@0xd.co"

  packages:
    - curl
    - git
    - nvim
    - tmux
    - build-essential

  storage:
    config:
      # Target ONLY the Linux NVMe
      - id: disk-nvme1n1
        type: disk
        match:
          path: /dev/nvme1n1
        ptable: gpt
        wipe: superblock
        grub_device: true

      # EFI System Partition (unencrypted)
      - id: part-efi
        type: partition
        device: disk-nvme1n1
        number: 1
        size: 512M
        wipe: superblock
        flag: boot
        grub_device: true

      - id: fmt-efi
        type: format
        volume: part-efi
        fstype: vfat

      - id: mnt-efi
        type: mount
        device: fmt-efi
        path: /boot/efi

      # Encrypted partition (LUKS)
      - id: part-crypt
        type: partition
        device: disk-nvme1n1
        number: 2
        size: -1
        wipe: superblock

      - id: cryptroot
        type: dm_crypt
        volume: part-crypt
        dm_name: cryptroot
        # TEMPORARY install passphrase — CHANGE AFTER INSTALL
        key: "changeme"

      # Btrfs inside LUKS mapping
      - id: fmt-root
        type: format
        volume: cryptroot
        fstype: btrfs

      - id: mnt-root
        type: mount
        device: fmt-root
        path: /