refactor(common): modularize common host module

home/modules/git/default.nix

@@ -70,19 +70,16 @@ in
       };
     }
     // {
-      assertions = [
+      warnings = lib.optional (
-        {
+        !config.nvim.enable
-          assertion = config.nvim.enable;
+      ) "'git.enable' is enabled without 'nvim.enable' (not using 'nvimdiff')";
-          message = "git module requires 'nvim' module (`nvimdiff`)";
-        }
-      ];
 
       xdg.configFile."git/ignore".source = ./global.gitignore;
 
       programs.git = {
         enable = true;
-        settings = {
+        settings = lib.mkMerge [
-          core.editor = "nvim";
+          {
             user = {
               name = "Hektor Misplon";
               username = "hektor";
@@ -146,24 +143,24 @@ in
               date = "relative";
               abbrevCommit = true;
             };
-          merge = {
+            merge.conflictStyle = "diff3";
-            tool = "nvimdiff";
+            diff.colorMoved = "zebra";
-            conflictStyle = "diff3";
+            commit.gpgSign = false;
-          };
+            interactive.singleKey = true;
-          diff = {
+            pull.rebase = true;
-            colorMoved = "zebra";
+            rerere.enabled = true;
-            tool = "nvimdiff";
+          }
-          };
+          (lib.mkIf config.nvim.enable {
+            core.editor = "nvim";
+            diff.tool = "nvimdiff";
+            merge.tool = "nvimdiff";
             difftool.prompt = false;
             mergetool = {
               prompt = false;
               keepBackup = false;
             };
-          commit.gpgSign = false;
+          })
-          interactive.singleKey = true;
+        ];
-          pull.rebase = true;
-          rerere.enabled = true;
-        };
 
         includes = [
           { path = personalEmail; }

hosts/andromache/meta.nix

@@ -1,8 +1,8 @@
 {
   system = "x86_64-linux";
-  role = "desktop";
   tags = [ "personal" ];
   host = {
+    role = "desktop";
     username = "h";
     highRam = true;
     admin = true;

hosts/astyanax/meta.nix

@@ -1,8 +1,8 @@
 {
   system = "x86_64-linux";
-  role = "laptop";
   tags = [ "personal" ];
   host = {
+    role = "laptop";
     username = "h";
     highRam = true;
     admin = true;

hosts/eetion-02/meta.nix

@@ -1,8 +1,8 @@
 {
   system = "aarch64-linux";
-  role = "embedded";
   tags = [ "lab" ];
   host = {
+    role = "embedded";
     username = "h";
   };
 }

hosts/eetion/default.nix

@@ -22,6 +22,8 @@ in
     generic-extlinux-compatible.enable = true;
   };
 
+  hardware.deviceTree.name = "allwinner/sun50i-h616-orangepi-zero2.dtb";
+
   networking = {
     hostName = config.host.name;
     networkmanager.enable = true;

hosts/eetion/meta.nix

@@ -1,8 +1,8 @@
 {
   system = "aarch64-linux";
-  role = "embedded";
   tags = [ "lab" ];
   host = {
+    role = "embedded";
     username = "h";
   };
 }

hosts/hecuba/meta.nix

@@ -1,9 +1,9 @@
 {
   system = "x86_64-linux";
-  role = "server";
   tags = [ "lab" ];
   deploy.autoRollback = true;
   host = {
+    role = "server";
     username = "h";
   };
 }

hosts/vm/meta.nix

@@ -1,8 +1,8 @@
 {
   system = "x86_64-linux";
-  role = "vm";
   tags = [ "lab" ];
   host = {
+    role = "vm";
     username = "h";
   };
 }

modules/common/default.nix

@@ -1,92 +1,23 @@
-{
+{ lib, ... }:
-  inputs,
-  outputs,
-  dotsPath,
-  myUtils,
-  config,
-  ...
-}:
 
-let
-  inherit (inputs.nixpkgs) lib;
-  homeDir = ../../home/hosts + "/${config.host.name}";
-in
 {
   imports = [
-    inputs.home-manager.nixosModules.default
+    ./embedded.nix
+    ./home-manager.nix
     ./host.nix
+    ./nix.nix
+    ./nixpkgs.nix
+    ./upgrades.nix
   ];
 
-  options.nixpkgs.allowedUnfree = lib.mkOption {
-    type = lib.types.listOf lib.types.str;
-    default = [ ];
-  };
-
   config = {
     system.stateVersion = lib.mkDefault "25.05";
     boot.zfs.forceImportRoot = lib.mkDefault false;
 
-    nix = {
-      nixPath = [ "nixpkgs=${inputs.nixpkgs}" ]; # https://github.com/nix-community/nixd/blob/main/nixd/docs/configuration.md
-      optimise = {
-        automatic = true;
-        dates = [ "05:00" ];
-      };
-      gc = {
-        automatic = true;
-        dates = "weekly";
-        options = lib.mkDefault "--delete-older-than 30d";
-      };
-      settings.experimental-features = [
-        "nix-command"
-        "flakes"
-      ];
-      settings.trusted-public-keys = [
-        "nix-signing-key:M6ouQRFl/bZ5QQrceQUyar6P7o8qg4wwVkxD1SSLL2k="
-      ];
-    };
-
-    system.autoUpgrade = {
-      enable = true;
-      flags = [
-        "--recreate-lock-file"
-        "--commit-lock-file"
-        "--print-build-logs"
-        "--refresh"
-      ];
-      dates = "05:00";
-      randomizedDelaySec = "45min";
-      allowReboot = false;
-    };
-
-    nixpkgs.config.allowUnfreePredicate =
-      pkg: builtins.elem (lib.getName pkg) config.nixpkgs.allowedUnfree;
-
     environment.defaultPackages = lib.mkForce [ ];
     environment.pathsToLink = [
       "/share/applications"
       "/share/xdg-desktop-portal"
     ];
-
-    home-manager = {
-      useGlobalPkgs = true;
-      useUserPackages = true;
-      extraSpecialArgs = {
-        inherit
-          inputs
-          outputs
-          dotsPath
-          myUtils
-          ;
-      };
-      sharedModules = [
-        {
-          host.username = lib.mkDefault config.host.username;
-        }
-      ];
-      users = lib.optionalAttrs (builtins.pathExists homeDir) {
-        ${config.host.username} = import homeDir;
-      };
-    };
   };
 }

modules/common/embedded.nix

@@ -0,0 +1,15 @@
+{ lib, config, ... }:
+
+{
+  config = lib.mkIf (config.host.role == "embedded") {
+    system.autoUpgrade.enable = false;
+    nix.settings.max-jobs = 0;
+
+    zramSwap = {
+      enable = true;
+      memoryPercent = 100;
+    };
+
+    services.journald.settings.Journal.SystemMaxUse = "100M";
+  };
+}

modules/common/home-manager.nix

@@ -0,0 +1,37 @@
+{
+  inputs,
+  outputs,
+  dotsPath,
+  myUtils,
+  config,
+  lib,
+  ...
+}:
+
+let
+  homeDir = ../../home/hosts + "/${config.host.name}";
+in
+{
+  imports = [ inputs.home-manager.nixosModules.default ];
+
+  config.home-manager = {
+    useGlobalPkgs = true;
+    useUserPackages = true;
+    extraSpecialArgs = {
+      inherit
+        inputs
+        outputs
+        dotsPath
+        myUtils
+        ;
+    };
+    sharedModules = [
+      {
+        host.username = lib.mkDefault config.host.username;
+      }
+    ];
+    users = lib.optionalAttrs (builtins.pathExists homeDir) {
+      ${config.host.username} = import homeDir;
+    };
+  };
+}

modules/common/host.nix

@@ -10,6 +10,16 @@
       type = lib.types.str;
     };
 
+    role = lib.mkOption {
+      type = lib.types.enum [
+        "desktop"
+        "embedded"
+        "laptop"
+        "server"
+        "vm"
+      ];
+    };
+
     tags = lib.mkOption {
       type = lib.types.listOf lib.types.str;
       default = [ ];

modules/common/nix.nix

@@ -0,0 +1,23 @@
+{ inputs, lib, ... }:
+
+{
+  config.nix = {
+    nixPath = [ "nixpkgs=${inputs.nixpkgs}" ]; # https://github.com/nix-community/nixd/blob/main/nixd/docs/configuration.md
+    optimise = {
+      automatic = true;
+      dates = [ "05:00" ];
+    };
+    gc = {
+      automatic = true;
+      dates = "weekly";
+      options = lib.mkDefault "--delete-older-than 30d";
+    };
+    settings.experimental-features = [
+      "nix-command"
+      "flakes"
+    ];
+    settings.trusted-public-keys = [
+      "nix-signing-key:M6ouQRFl/bZ5QQrceQUyar6P7o8qg4wwVkxD1SSLL2k="
+    ];
+  };
+}

modules/common/nixpkgs.nix

@@ -0,0 +1,11 @@
+{ lib, config, ... }:
+
+{
+  options.nixpkgs.allowedUnfree = lib.mkOption {
+    type = lib.types.listOf lib.types.str;
+    default = [ ];
+  };
+
+  config.nixpkgs.config.allowUnfreePredicate =
+    pkg: builtins.elem (lib.getName pkg) config.nixpkgs.allowedUnfree;
+}

modules/common/upgrades.nix

@@ -0,0 +1,16 @@
+{ lib, ... }:
+
+{
+  config.system.autoUpgrade = {
+    enable = lib.mkDefault true;
+    flags = [
+      "--recreate-lock-file"
+      "--commit-lock-file"
+      "--print-build-logs"
+      "--refresh"
+    ];
+    dates = "05:00";
+    randomizedDelaySec = "45min";
+    allowReboot = false;
+  };
+}