refactor: ponytail audit

modules/hosts/orion/_disk.nix

@@ -10,7 +10,6 @@
         type = "gpt";
         partitions = {
           boot = {
-            name = "boot";
             size = "1M";
             type = "EF02";
           };
@@ -25,7 +24,6 @@
             };
           };
           root = {
-            name = "root";
             size = "100%";
             content = {
               type = "lvm_pv";
@@ -43,7 +41,6 @@
           type = "filesystem";
           format = "ext4";
           mountpoint = "/";
-          mountOptions = [ "defaults" ];
         };
       };
     };

modules/hosts/orion/_hardware.nix

@@ -7,16 +7,9 @@
   boot.initrd.availableKernelModules = [
     "ata_piix"
     "uhci_hcd"
-    "virtio_pci"
-    "virtio_scsi"
     "sd_mod"
     "sr_mod"
   ];
-  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ ];
-  boot.extraModulePackages = [ ];
-
-  networking.useDHCP = lib.mkDefault true;
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
 }

modules/hosts/orion/default.nix

@@ -1,7 +1,6 @@
 { config, ... }:
 let
   nixosModules = config.flake.modules.nixos;
-  account = config.facts.account;
 in
 {
   facts.machines.orion = {
@@ -11,29 +10,26 @@ in
     stateVersion = "24.05";
   };
 
-  flake.modules.nixos.orion =
-    { ... }:
-    {
-      imports = [
-        nixosModules.host-base
+  flake.modules.nixos.orion = {
+    imports = [
+      nixosModules.host-base
 
-        nixosModules.sops-host-ssh-key
-        nixosModules.openssh
-        nixosModules.caddy
-        nixosModules.server-firewall
-        nixosModules.sudo-ssh-agent-auth
-        # nixosModules.vps-insights
-        nixosModules.vaultwarden
-        nixosModules.radicale
-        nixosModules.actual
-        nixosModules.gitea
-        nixosModules.transcription
-        ./_hardware.nix
-        ./_disk.nix
-      ];
+      nixosModules.sops-host-ssh-key
+      nixosModules.openssh
+      nixosModules.caddy
+      nixosModules.server-firewall
+      nixosModules.sudo-ssh-agent-auth
+      nixosModules.vaultwarden
+      nixosModules.radicale
+      nixosModules.actual
+      nixosModules.gitea
+      nixosModules.transcription
+      ./_hardware.nix
+      ./_disk.nix
+    ];
 
-      environment.enableAllTerminfo = true;
+    environment.enableAllTerminfo = true;
 
-      users.users.${account.name}.linger = true;
-    };
+    users.users.${config.facts.account.name}.linger = true;
+  };
 }