refactor: move from den based to flake-parts based

modules/hosts/orion/_disk.nix

@@ -0,0 +1,51 @@
+{ inputs, lib, ... }:
+{
+  imports = [ inputs.disko.nixosModules.disko ];
+
+  disko.devices = {
+    disk.disk1 = {
+      device = lib.mkDefault "/dev/sda";
+      type = "disk";
+      content = {
+        type = "gpt";
+        partitions = {
+          boot = {
+            name = "boot";
+            size = "1M";
+            type = "EF02";
+          };
+          esp = {
+            name = "ESP";
+            size = "500M";
+            type = "EF00";
+            content = {
+              type = "filesystem";
+              format = "vfat";
+              mountpoint = "/boot";
+            };
+          };
+          root = {
+            name = "root";
+            size = "100%";
+            content = {
+              type = "lvm_pv";
+              vg = "pool";
+            };
+          };
+        };
+      };
+    };
+    lvm_vg.pool = {
+      type = "lvm_vg";
+      lvs.root = {
+        size = "100%FREE";
+        content = {
+          type = "filesystem";
+          format = "ext4";
+          mountpoint = "/";
+          mountOptions = [ "defaults" ];
+        };
+      };
+    };
+  };
+}

modules/hosts/orion/_hardware.nix

@@ -0,0 +1,22 @@
+{ lib, modulesPath, ... }:
+{
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "ata_piix"
+    "uhci_hcd"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  networking.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}

modules/hosts/orion/default.nix

@@ -1,43 +1,70 @@
-{ den, lib, lux, ... }:
+{
+  inputs,
+  config,
+  ...
+}:
 let
-  lingerForUsers = den.lib.perHost (
-    { host, ... }:
-    {
-      nixos.users.users = lib.mapAttrs (_: _: {
-        linger = true;
-      }) host.users;
-    }
-  );
+  nixosModules = config.flake.modules.nixos;
 in
 {
-  den.aspects.orion = {
-    includes = (with lux.services._; [
-      caddy
-      openssh
-      vaultwarden
-      radicale
-      actual
-      gitea
-    ]) ++ [ lingerForUsers ];
-
-    nixos =
-      { pkgs, ... }:
-      {
-        environment.systemPackages = [
-          pkgs.kitty
-        ];
-
-        networking = {
-          firewall.enable = true;
-          firewall.allowPing = false;
-          nftables.enable = true;
-        };
-
-        # Use ssh authorization for sudo instead of password
-        security.pam = {
-          sshAgentAuth.enable = true;
-          services.sudo.sshAgentAuth = true;
-        };
+  flake.modules.nixos.orion =
+    { pkgs, ... }:
+    let
+      host = {
+        isServer = true;
       };
-  };
+    in
+    {
+      _module.args.host = host;
+
+      imports = [
+        inputs.home-manager.nixosModules.home-manager
+        nixosModules.sopsHost
+        nixosModules.caddy
+        nixosModules.openssh
+        nixosModules.vaultwarden
+        nixosModules.radicale
+        nixosModules.actual
+        nixosModules.gitea
+        nixosModules.kiri
+        ./_hardware.nix
+        ./_disk.nix
+      ];
+
+      system.stateVersion = "24.05";
+
+      home-manager = {
+        useGlobalPkgs = true;
+        backupFileExtension = "bak";
+        extraSpecialArgs = { inherit inputs; };
+      };
+
+      networking.hostName = "orion";
+
+      security.sudo.extraConfig = ''
+        Defaults env_keep+=SSH_AUTH_SOCK
+      '';
+
+      users.users.kiri = {
+        linger = true;
+        openssh.authorizedKeys.keys = [
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAU2LydkXRTtNFY7oyX8JQURwXLVhB71DeK8XzrXeFX1 openpgp:0xA490D93A"
+        ];
+      };
+
+      environment.systemPackages = [
+        pkgs.kitty
+      ];
+
+      networking = {
+        firewall.enable = true;
+        firewall.allowPing = false;
+        nftables.enable = true;
+      };
+
+      security.pam = {
+        sshAgentAuth.enable = true;
+        services.sudo.sshAgentAuth = true;
+      };
+    };
 }

modules/hosts/orion/disk.nix

@@ -1,63 +0,0 @@
-{ inputs, ... }:
-{
-  den.aspects.orion = {
-    nixos =
-      { lib, ... }:
-      {
-        imports = [ inputs.disko.nixosModules.disko ];
-
-        disko.devices = {
-          disk.disk1 = {
-            device = lib.mkDefault "/dev/sda";
-            type = "disk";
-            content = {
-              type = "gpt";
-              partitions = {
-                boot = {
-                  name = "boot";
-                  size = "1M";
-                  type = "EF02";
-                };
-                esp = {
-                  name = "ESP";
-                  size = "500M";
-                  type = "EF00";
-                  content = {
-                    type = "filesystem";
-                    format = "vfat";
-                    mountpoint = "/boot";
-                  };
-                };
-                root = {
-                  name = "root";
-                  size = "100%";
-                  content = {
-                    type = "lvm_pv";
-                    vg = "pool";
-                  };
-                };
-              };
-            };
-          };
-          lvm_vg = {
-            pool = {
-              type = "lvm_vg";
-              lvs = {
-                root = {
-                  size = "100%FREE";
-                  content = {
-                    type = "filesystem";
-                    format = "ext4";
-                    mountpoint = "/";
-                    mountOptions = [
-                      "defaults"
-                    ];
-                  };
-                };
-              };
-            };
-          };
-        };
-      };
-  };
-}

modules/hosts/orion/hardware.nix

@@ -1,38 +0,0 @@
-# Do not modify this file!  It was generated by 'nixos-generate-config'
-# and may be overwritten by future invocations.  Please make changes
-# to /etc/nixos/system.nix instead.
-{ ... }:
-{
-  den.aspects.orion = {
-    nixos =
-      {
-        config,
-        lib,
-        pkgs,
-        modulesPath,
-        ...
-      }:
-
-      {
-        imports = [
-          (modulesPath + "/profiles/qemu-guest.nix")
-        ];
-
-        boot.initrd.availableKernelModules = [
-          "ata_piix"
-          "uhci_hcd"
-          "virtio_pci"
-          "virtio_scsi"
-          "sd_mod"
-          "sr_mod"
-        ];
-        boot.initrd.kernelModules = [ ];
-        boot.kernelModules = [ ];
-        boot.extraModulePackages = [ ];
-
-        networking.useDHCP = lib.mkDefault true;
-
-        nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-      };
-  };
-}