refactor: centralize host and user metadata

modules/hosts/orion/default.nix

@@ -1,45 +1,12 @@
-{
-  inputs,
-  config,
-  ...
-}:
+{ config, ... }:
 let
   nixosModules = config.flake.modules.nixos;
+  metaLib = config.meta.lib;
 in
 {
-  flake.modules.nixos.orion =
+  flake.modules.nixos."orion-admin" =
     { pkgs, ... }:
     {
-      _module.args.hostType = "server";
-
-      imports = [
-        inputs.home-manager.nixosModules.home-manager
-        nixosModules.sopsHost
-        nixosModules.caddy
-        nixosModules.openssh
-        nixosModules.vaultwarden
-        nixosModules.radicale
-        nixosModules.actual
-        nixosModules.gitea
-        nixosModules.kiri
-        ./_hardware.nix
-        ./_disk.nix
-      ];
-
-      system.stateVersion = "24.05";
-
-      home-manager = {
-        useGlobalPkgs = true;
-        backupFileExtension = "bak";
-        extraSpecialArgs = { inherit inputs; };
-      };
-
-      networking.hostName = "orion";
-
-      security.sudo.extraConfig = ''
-        Defaults env_keep+=SSH_AUTH_SOCK
-      '';
-
       users.users.kiri = {
         linger = true;
         openssh.authorizedKeys.keys = [
@@ -50,16 +17,28 @@ in
       environment.systemPackages = [
         pkgs.kitty
       ];
-
-      networking = {
-        firewall.enable = true;
-        firewall.allowPing = false;
-        nftables.enable = true;
-      };
-
-      security.pam = {
-        sshAgentAuth.enable = true;
-        services.sudo.sshAgentAuth = true;
-      };
     };
+
+  flake.modules.nixos.orion = metaLib.mkHost {
+    name = "orion";
+    kind = "server";
+    users = {
+      inherit (metaLib.users) kiri;
+    };
+
+    imports = [
+      nixosModules."server-base"
+      nixosModules.caddy
+      nixosModules."server-firewall"
+      nixosModules."ssh-agent-auth"
+      nixosModules."orion-admin"
+      nixosModules.vaultwarden
+      nixosModules.radicale
+      nixosModules.actual
+      nixosModules.gitea
+      nixosModules."user-kiri"
+      ./_hardware.nix
+      ./_disk.nix
+    ];
+  };
 }