feat(xdg): declare 'xdg' module

home/hosts/andromache/default.nix

@@ -16,9 +16,6 @@
     homeDirectory = "/home/${config.host.username}";
   };
 
-  xdg.userDirs.createDirectories = false;
-  xdg.userDirs.download = "${config.home.homeDirectory}/dl";
-
   modules."3d".printing.enable = true;
   ai-tools = {
     claude-code.enable = true;
@@ -64,6 +61,7 @@
   taskwarrior.enable = true;
   terminal.enable = true;
   torrenting.enable = true;
+  my.xdg.enable = true;
   my.yubikey.enable = true;
   zk.enable = true;
 

home/hosts/astyanax/default.nix

@@ -15,11 +15,6 @@
     homeDirectory = "/home/${config.host.username}";
   };
 
-  xdg.userDirs = {
-    enable = false;
-    createDirectories = false;
-  };
-
   modules."3d".printing.enable = true;
   ai-tools = {
     claude-code.enable = true;
@@ -44,6 +39,7 @@
   keepassxc.enable = true;
   music.enable = true;
   newsboat.enable = true;
+  my.xdg.enable = true;
   my.yubikey.enable = true;
   nfc.enable = true;
   nvim.enable = true;

home/hosts/work/default.nix

@@ -16,13 +16,7 @@
 
   nixpkgs.config.allowUnfree = true;
 
-  xdg = {
-    systemDirs.config = [ "/etc/xdg" ];
-    userDirs = {
-      createDirectories = false;
-      download = "${config.home.homeDirectory}/dl";
-    };
-  };
+  xdg.systemDirs.config = [ "/etc/xdg" ];
 
   home = {
     stateVersion = "25.05";
@@ -70,8 +64,11 @@
   k8s.enable = true;
   keepassxc.enable = true;
   music.enable = true;
-  my.dconf.enable = true;
-  my.stylix.enable = true;
+  my = {
+    dconf.enable = true;
+    stylix.enable = true;
+    xdg.enable = true;
+  };
   nvim = {
     enable = true;
     colorscheme = "vscode";

home/modules/xdg/default.nix

@@ -0,0 +1,28 @@
+{
+  config,
+  lib,
+  ...
+}:
+
+let
+  inherit (config.home) homeDirectory;
+in
+{
+  options.my.xdg.enable = lib.mkEnableOption "XDG user directories";
+
+  config = lib.mkIf config.my.xdg.enable {
+    xdg.userDirs = {
+      enable = true;
+      createDirectories = false;
+      download = "${homeDirectory}/dl";
+      documents = "${homeDirectory}/doc";
+      desktop = homeDirectory;
+      music = homeDirectory;
+      pictures = homeDirectory;
+      projects = homeDirectory;
+      publicShare = homeDirectory;
+      templates = homeDirectory;
+      videos = homeDirectory;
+    };
+  };
+}

modules/backups/default.nix

@@ -14,7 +14,7 @@ in
 
     passwordFile = lib.mkOption {
       type = lib.types.str;
-      default = config.sops.secrets."restic/password".path;
+      default = config.sops.secrets."${host}-restic/password".path;
     };
 
     paths = lib.mkOption {
@@ -30,7 +30,7 @@ in
 
   config = lib.mkIf cfg.enable {
     secrets = {
-      restic = [ "password" ];
+      "${host}-restic" = [ "password" ];
       backblaze-b2 = [
         "bucket-name"
         "account-id"