declare rootless docker for 'andromache' host

flake.nix

@@ -51,6 +51,9 @@
       nvim,
     }@inputs:
     let
+      lib = inputs.nixpkgs.lib;
+      utils = import ./utils { inherit lib; };
+      hostDirNames = utils.dirNames ./hosts;
       system = "x86_64-linux";
       pkgs = import nixpkgs {
         inherit system;
@@ -59,20 +62,13 @@
     in
     {
       nix.nixPath = [ "nixpkgs=${inputs.nixpkgs}" ]; # <https://github.com/nix-community/nixd/blob/main/nixd/docs/configuration.md>
-      nixosConfigurations = {
+      nixosConfigurations = lib.genAttrs hostDirNames (
-        vm = nixpkgs.lib.nixosSystem {
+        host:
-          modules = [ ./hosts/vm ];
+        nixpkgs.lib.nixosSystem {
+          modules = [ ./hosts/${host} ];
           specialArgs = { inherit inputs; };
-        };
+        }
-        andromache = nixpkgs.lib.nixosSystem {
+      );
-          modules = [ ./hosts/andromache ];
-          specialArgs = { inherit inputs; };
-        };
-        astyanax = nixpkgs.lib.nixosSystem {
-          modules = [ ./hosts/astyanax ];
-          specialArgs = { inherit inputs; };
-        };
-      };
       homeConfigurations = {
         work = home-manager.lib.homeManagerConfiguration {
           inherit pkgs;

home/hosts/andromache/default.nix

@@ -1 +1,19 @@
-import ../astyanax
+{
+  lib,
+  inputs,
+  config,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [
+    (import ../astyanax {
+      inherit inputs;
+      inherit config;
+      inherit pkgs;
+    })
+  ];
+
+  programs.taskwarrior.config.recurrence = lib.mkForce "on";
+}

home/modules/taskwarrior.nix

@@ -44,7 +44,7 @@
       #     config.sops.secrets."taskwarrior_sync_encryption_secret".path
       #   }";
       # };
-      recurrence = "off"; # TODO: enable only on andromache
+      recurrence = "off";
     };
     extraConfig = "include ${config.sops.templates."taskrc.d/sync".path}";
   };

hosts/andromache/default.nix

@@ -37,6 +37,7 @@ in
       inherit inputs;
       inherit config;
     })
+    ../../modules/docker.nix
   ];
 
   secrets.username = username;
@@ -87,6 +88,7 @@ in
     useGlobalPkgs = true;
     useUserPackages = true;
     users.${username} = import ../../home/hosts/andromache {
+      inherit lib;
       inherit inputs;
       inherit config;
       inherit pkgs;

modules/docker.nix

@@ -0,0 +1,9 @@
+{
+  virtualisation.docker = {
+    enable = false;
+    rootless = {
+      enable = true;
+      setSocketVariable = true;
+    };
+  };
+}

utils/default.nix

@@ -0,0 +1,7 @@
+{ lib }:
+
+{
+  dirNames =
+    path:
+    builtins.attrNames (lib.filterAttrs (name: type: type == "directory") (builtins.readDir path));
+}