refactor: centralize host and user metadata

modules/features/desktop-base.nix

@@ -1,15 +1,29 @@
-{ inputs, config, ... }:
+{ config, ... }:
 let
   nixosModules = config.flake.modules.nixos;
 in
 {
-  flake.modules.nixos.desktopBase = {
+  flake.modules.nixos."core-base" = {
     imports = [
-      inputs.home-manager.nixosModules.home-manager
+      nixosModules."meta-host"
+      nixosModules."home-manager-base"
       nixosModules.nix
-      nixosModules.systemBase
-      nixosModules.standardBoot
-      nixosModules.regionNl
+      nixosModules."region-nl"
+      nixosModules."sops-host"
+    ];
+  };
+
+  flake.modules.nixos."server-base" = {
+    imports = [
+      nixosModules."core-base"
+      nixosModules.openssh
+    ];
+  };
+
+  flake.modules.nixos."workstation-base" = {
+    imports = [
+      nixosModules."core-base"
+      nixosModules."standard-boot"
       nixosModules.sddm
       nixosModules.niri
       nixosModules.audio
@@ -18,18 +32,19 @@ in
       nixosModules.fonts
       nixosModules.networking
       nixosModules.printing
-      nixosModules.qbittorrentClient
-      nixosModules.sopsHost
+      nixosModules."qbittorrent-client"
     ];
 
-    home-manager = {
-      useGlobalPkgs = true;
-      backupFileExtension = "bak";
-      extraSpecialArgs = { inherit inputs; };
-    };
+    users.mutableUsers = false;
 
-    security.sudo.extraConfig = ''
-      Defaults env_keep+=SSH_AUTH_SOCK
-    '';
+    services.dbus.implementation = "broker";
+
+    programs.nix-ld.enable = true;
+    environment.localBinInPath = true;
+  };
+
+  flake.modules.nixos."portable-host" = {
+    hardware.enableRedistributableFirmware = true;
+    services.fwupd.enable = true;
   };
 }