ns1: recreate with OpenTofu workflow

Old VM had incorrect hardware-configuration.nix with hardcoded UUIDs
that didn't match actual disk layout, causing boot failure (emergency mode).

Recreated using template2-based configuration for OpenTofu provisioning.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

terraform/vault/approle.tf

@@ -67,12 +67,6 @@ locals {
     }
 
     # Wave 3: DNS servers
-    "ns1" = {
-      paths = [
-        "secret/data/hosts/ns1/*",
-        "secret/data/shared/dns/*",
-      ]
-    }
 
     # Wave 4: http-proxy
     "http-proxy" = {

terraform/vault/hosts-generated.tf

@@ -26,6 +26,11 @@ locals {
         "secret/data/shared/dns/*",
       ]
     }
+    "ns1" = {
+      paths = [
+        "secret/data/hosts/ns1/*",
+      ]
+    }
   
   }
 

terraform/vms.tf

@@ -65,6 +65,13 @@ locals {
       disk_size = "20G"
       vault_wrapped_token = "s.3nran1e1Uim4B1OomIWCoS4T"
     }
+    "ns1" = {
+      ip        = "10.69.13.5/24"
+      cpu_cores = 2
+      memory    = 2048
+      disk_size = "20G"
+      vault_wrapped_token = "s.b6ge0KMtNQctdKkvm0RNxGdt"
+    }
   }
 
   # Compute VM configurations with defaults applied