refactor: ponytail audit

modules/hosts/polaris/_hardware.nix

@@ -1,9 +1,4 @@
-{
-  config,
-  lib,
-  modulesPath,
-  ...
-}:
+{ lib, modulesPath, ... }:
 {
   imports = [
     (modulesPath + "/installer/scan/not-detected.nix")
@@ -17,9 +12,7 @@
     "usb_storage"
     "sd_mod"
   ];
-  boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-amd" ];
-  boot.extraModulePackages = [ ];
 
   fileSystems."/" = {
     device = "/dev/disk/by-uuid/bda7f8b9-2b3d-4190-8518-baa50490227e";
@@ -35,10 +28,5 @@
     ];
   };
 
-  swapDevices = [ ];
-
-  networking.useDHCP = lib.mkDefault true;
-
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
 }

modules/hosts/polaris/default.nix

@@ -9,48 +9,40 @@ in
 {
   facts.machines.polaris = {
     system = "x86_64-linux";
-    sshKeys = {
-      personal.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVORk45HKkX7gaGGp90KsVyUy6t+fKhbWN/grjkf3cQ kiri@polaris";
-      work.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM5DMV6EQzsscgEOE0912mNglUHTEl+LPnaWYjj0y57B kiri@polaris#work";
-    };
+    sshKeys.personal.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEVORk45HKkX7gaGGp90KsVyUy6t+fKhbWN/grjkf3cQ kiri@polaris";
+    sshKeys.work.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM5DMV6EQzsscgEOE0912mNglUHTEl+LPnaWYjj0y57B kiri@polaris#work";
 
     syncthingId = "6HBAKXB-DB3B4H2-BODCAXF-KD23H5W-6X5LGLC-ZJHZHLG-7U7YMGO-BB6IXQ3";
 
     stateVersion = "24.05";
 
     displays = {
-      "LG Electronics LG ULTRAGEAR 103NTYT8R290" = {
-        x = 0;
-        y = 0;
-      };
+      "LG Electronics LG ULTRAGEAR 103NTYT8R290" = { };
 
       "LG Electronics LG ULTRAGEAR 103NTJJ8R332" = {
         primary = true;
         x = 2560;
-        y = 0;
       };
     };
   };
 
-  flake.modules.nixos.polaris =
-    { ... }:
-    {
-      imports = [
-        nixosModules.workstation-base
-        nixosModules.openssh
-        nixosModules.steam
-        ./_hardware.nix
-      ]
-      ++ (with inputs.nixos-hardware.nixosModules; [
-        common-pc
-        common-pc-ssd
-        common-cpu-amd
-        common-gpu-amd
-      ]);
+  flake.modules.nixos.polaris = {
+    imports = [
+      nixosModules.workstation-base
+      nixosModules.openssh
+      nixosModules.steam
+      ./_hardware.nix
+    ]
+    ++ (with inputs.nixos-hardware.nixosModules; [
+      common-pc
+      common-pc-ssd
+      common-cpu-amd
+      common-gpu-amd
+    ]);
 
-      services.openssh.openFirewall = false;
-      networking.firewall.extraInputRules = ''
-        ip saddr 192.168.178.0/24 tcp dport 22 accept
-      '';
-    };
+    services.openssh.openFirewall = false;
+    networking.firewall.extraInputRules = ''
+      ip saddr 192.168.178.0/24 tcp dport 22 accept
+    '';
+  };
 }