refactor: compose hosts and home-manager features explicitly

modules/hosts/orion/default.nix

@@ -1,10 +1,15 @@
-{ config, ... }:
+{
+  inputs,
+  config,
+  ...
+}:
 let
   nixosModules = config.flake.modules.nixos;
+  homeModules = config.flake.modules.homeManager;
   metaLib = config.meta.lib;
 in
 {
-  flake.modules.nixos."orion-admin" =
+  flake.modules.nixos.orion-admin =
     { pkgs, ... }:
     {
       users.users.kiri = {
@@ -21,22 +26,27 @@ in
 
   flake.modules.nixos.orion = metaLib.mkHost {
     name = "orion";
-    kind = "server";
     users = {
       inherit (metaLib.users) kiri;
     };
 
     imports = [
-      nixosModules."server-base"
+      nixosModules.host-base
+      nixosModules.sops-host-ssh-key
+      nixosModules.openssh
       nixosModules.caddy
-      nixosModules."server-firewall"
-      nixosModules."ssh-agent-auth"
-      nixosModules."orion-admin"
+      nixosModules.server-firewall
+      nixosModules.ssh-agent-auth
+      nixosModules.orion-admin
       nixosModules.vaultwarden
       nixosModules.radicale
       nixosModules.actual
       nixosModules.gitea
-      nixosModules."user-kiri"
+      (metaLib.mkHostUser {
+        account = metaLib.users.kiri;
+        needsPassword = false;
+        homeImports = [ homeModules.kiri-server ];
+      })
       ./_hardware.nix
       ./_disk.nix
     ];