refactor: further progress

modules/features/services/actual.nix

@@ -1,8 +1,8 @@
 { config, ... }:
 let
-  metaRepo = config.meta.lib.repo;
-  metaLib = config.meta.lib;
-  service = metaRepo.services.actual;
+  repo = config.repo;
+  repoHelpers = repo.helpers;
+  service = repo.services.actual;
 in
 {
   flake.modules.nixos.actual =
@@ -19,7 +19,7 @@ in
         };
       }
 
-      (metaLib.mkCaddyReverseProxy {
+      (repoHelpers.mkCaddyReverseProxy {
         inherit (service)
           domain
           port

modules/features/services/caddy.nix

@@ -1,12 +1,12 @@
 { config, ... }:
 let
-  metaRepo = config.meta.lib.repo;
+  repo = config.repo;
 in
 {
   flake.modules.nixos.caddy = {
     services.caddy = {
       enable = true;
-      email = metaRepo.contact.email;
+      email = repo.contact.email;
       openFirewall = true;
     };
   };

modules/features/services/gitea.nix

@@ -1,8 +1,8 @@
 { config, ... }:
 let
-  metaRepo = config.meta.lib.repo;
-  metaLib = config.meta.lib;
-  service = metaRepo.services.gitea;
+  repo = config.repo;
+  repoHelpers = repo.helpers;
+  service = repo.services.gitea;
 in
 {
   flake.modules.nixos.gitea =
@@ -32,7 +32,7 @@ in
         services.openssh.settings.AllowUsers = [ "gitea" ];
       }
 
-      (metaLib.mkCaddyReverseProxy {
+      (repoHelpers.mkCaddyReverseProxy {
         inherit (service)
           domain
           port

modules/features/services/openssh.nix

@@ -20,7 +20,7 @@
         settings = {
           PermitRootLogin = "no";
           PasswordAuthentication = false;
-          AllowUsers = builtins.attrNames config.meta.host.users;
+          AllowUsers = builtins.attrNames config.meta.machine.users;
         };
       };
     };

modules/features/services/radicale.nix

@@ -1,8 +1,8 @@
 { config, ... }:
 let
-  metaRepo = config.meta.lib.repo;
-  metaLib = config.meta.lib;
-  service = metaRepo.services.radicale;
+  repo = config.repo;
+  repoHelpers = repo.helpers;
+  service = repo.services.radicale;
 in
 {
   flake.modules.nixos.radicale =
@@ -25,7 +25,7 @@ in
         };
       }
 
-      (metaLib.mkCaddyReverseProxy {
+      (repoHelpers.mkCaddyReverseProxy {
         inherit (service)
           domain
           port

modules/features/services/vaultwarden.nix

@@ -1,8 +1,8 @@
 { config, ... }:
 let
-  metaRepo = config.meta.lib.repo;
-  metaLib = config.meta.lib;
-  service = metaRepo.services.vaultwarden;
+  repo = config.repo;
+  repoHelpers = repo.helpers;
+  service = repo.services.vaultwarden;
 in
 {
   flake.modules.nixos.vaultwarden =
@@ -21,7 +21,7 @@ in
         };
       }
 
-      (metaLib.mkCaddyReverseProxy {
+      (repoHelpers.mkCaddyReverseProxy {
         inherit (service)
           domain
           port