refactor: split apps into own files

hosts/common/core/default.nix

@@ -87,9 +87,10 @@ in {
     stateVersion = "23.05";
   };
 
-  systemd = {
-    enableUnifiedCgroupHierarchy = true;
-    network.wait-online.anyInterface = true;
+  systemd.enableUnifiedCgroupHierarchy = true;
+  systemd.network = {
+    enable = true;
+    wait-online.anyInterface = true;
   };
 
   users.mutableUsers = false;

hosts/ward/grafana.nix

@@ -0,0 +1 @@
+{}

hosts/ward/net.nix

@@ -1,4 +1,7 @@
-{nodeSecrets, ...}: {
+{nodeSecrets, ...}: let
+  wgName = "wg-vms";
+  wgPort = 51820;
+in {
   networking.hostId = "49ce3b71";
 
   systemd.network.networks = {
@@ -17,4 +20,42 @@
       dhcpV6Config.RouteMetric = 20;
     };
   };
+
+  #systemd.network.netdevs."20-${wgName}" = {
+  #  netdevConfig = {
+  #    Kind = "wireguard";
+  #    Name = "${wgName}";
+  #    Description = "Wireguard network ${wgName}";
+  #  };
+  #  wireguardConfig = {
+  #    PrivateKeyFile = wireguardPrivateKey wgName nodeMeta.name;
+  #    ListenPort = wgPort;
+  #  };
+  #  wireguardPeers = [
+  #  {
+  #    wireguardPeerConfig = {
+  #      PublicKey = wireguardPublicKey wgName nodeMeta.name;;
+  #      PresharedKey = wireguardPresharedKey wgName nodeMeta.name;;
+  #      AllowedIPs = [ "10.66.66.10/32" ];
+  #      PersistentKeepalive = 25;
+  #    };
+  #  }
+  #  {
+  #    wireguardPeerConfig = {
+  #      AllowedIPs = [ "10.66.66.100/32" ];
+  #      PersistentKeepalive = 25;
+  #    };
+  #  }
+  #  ];
+  #};
+  #networks."20-${wgName}" = {
+  #  matchConfig.Name = wgName;
+  #  networkConfig = {
+  #    Address = "10.66.66.1/24";
+  #    IPForward = "ipv4";
+  #  };
+  #};
+
+  #extra.wireguard.servers.home = {
+  #};
 }

hosts/ward/node_exporter.nix

@@ -0,0 +1 @@
+{}

hosts/ward/prometheus.nix

@@ -0,0 +1 @@
+{}

hosts/ward/samba.nix

@@ -0,0 +1 @@
+{}