hosts: enable vault and deploy listener on test VMs

- Add vault.enable = true to testvm01, testvm02, testvm03
- Add homelab.deploy.enable = true for remote deployment via NATS
- Update create-host template to include these by default

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

hosts/testvm01/configuration.nix

@@ -18,6 +18,12 @@
     tier = "test";  # Start in test tier, move to prod after validation
   };
 
+  # Enable Vault integration
+  vault.enable = true;
+
+  # Enable remote deployment via NATS
+  homelab.deploy.enable = true;
+
   nixpkgs.config.allowUnfree = true;
   boot.loader.grub.enable = true;
   boot.loader.grub.device = "/dev/vda";

hosts/testvm02/configuration.nix

@@ -18,6 +18,12 @@
     tier = "test";  # Start in test tier, move to prod after validation
   };
 
+  # Enable Vault integration
+  vault.enable = true;
+
+  # Enable remote deployment via NATS
+  homelab.deploy.enable = true;
+
   nixpkgs.config.allowUnfree = true;
   boot.loader.grub.enable = true;
   boot.loader.grub.device = "/dev/vda";

hosts/testvm03/configuration.nix

@@ -18,6 +18,12 @@
     tier = "test";  # Start in test tier, move to prod after validation
   };
 
+  # Enable Vault integration
+  vault.enable = true;
+
+  # Enable remote deployment via NATS
+  homelab.deploy.enable = true;
+
   nixpkgs.config.allowUnfree = true;
   boot.loader.grub.enable = true;
   boot.loader.grub.device = "/dev/vda";

scripts/create-host/templates/configuration.nix.j2

@@ -18,6 +18,12 @@
     tier = "test";  # Start in test tier, move to prod after validation
   };
 
+  # Enable Vault integration
+  vault.enable = true;
+
+  # Enable remote deployment via NATS
+  homelab.deploy.enable = true;
+
   nixpkgs.config.allowUnfree = true;
   boot.loader.grub.enable = true;
   boot.loader.grub.device = "/dev/vda";

terraform/vms.tf

@@ -44,7 +44,7 @@ locals {
       memory              = 2048
       disk_size           = "20G"
       flake_branch        = "deploy-test-hosts"
-      vault_wrapped_token = "s.3XeDNvlhS5wqjjeOw1w7q4Cp"
+      vault_wrapped_token = "s.YRGRpAZVVtSYEa3wOYOqFmjt"
     }
     "testvm02" = {
       ip                  = "10.69.13.21/24"
@@ -52,7 +52,7 @@ locals {
       memory              = 2048
       disk_size           = "20G"
       flake_branch        = "deploy-test-hosts"
-      vault_wrapped_token = "s.JDFHGWsWUBU9vKAFZK3XPu3X"
+      vault_wrapped_token = "s.tvs8yhJOkLjBs548STs6DBw7"
     }
     "testvm03" = {
       ip                  = "10.69.13.22/24"
@@ -60,7 +60,7 @@ locals {
       memory              = 2048
       disk_size           = "20G"
       flake_branch        = "deploy-test-hosts"
-      vault_wrapped_token = "s.Msj0c4viIrvxprxRZZqw3jj4"
+      vault_wrapped_token = "s.sQ80FZGeG3z6jgrsuh74IopC"
     }
   }