chore: move some common settings into core

hosts/nom/default.nix

@@ -11,7 +11,7 @@
 
     ../../modules/core
     ../../modules/dev
-
+    ../../modules/hardware/intel.nix
     ../../modules/efi.nix
     ../../modules/laptop.nix
     ../../modules/sound-pipewire.nix
@@ -25,28 +25,14 @@
     ./net.nix
   ];
 
-  boot = {
-    initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
-    kernelModules = [];
-  };
-
-  console = {
-    font = "ter-v28n";
-    keyMap = "de-latin1-nodeadkeys";
-    packages = with pkgs; [terminus_font];
-  };
-
+  boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
   environment.systemPackages = with pkgs; [wireguard-tools powertop];
 
   hardware = {
-    enableRedistributableFirmware = true;
-    enableAllFirmware = true;
     video.hidpi.enable = true;
     opengl.enable = true;
   };
 
-  powerManagement.cpuFreqGovernor = "powersave";
-
   services = {
     fwupd.enable = true;
     smartd.enable = true;

hosts/ward/default.nix

@@ -9,7 +9,7 @@
     nixos-hardware.common-pc-ssd
 
     ../../modules/core
-
+    ../../modules/hardware/intel.nix
     ../../modules/efi.nix
     ../../modules/zfs.nix
 
@@ -19,25 +19,7 @@
     ./net.nix
   ];
 
-  boot = {
-    initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" "sdhci_pci"];
-    kernelModules = ["kvm-intel"];
-  };
-
-  console = {
-    font = "ter-v28n";
-    keyMap = "de-latin1-nodeadkeys";
-    packages = with pkgs; [terminus_font];
-  };
-
-  environment.systemPackages = with pkgs; [wireguard-tools powertop];
-
-  hardware = {
-    enableRedistributableFirmware = true;
-    enableAllFirmware = true;
-  };
-
-  powerManagement.cpuFreqGovernor = "powersave";
+  boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" "sdhci_pci"];
 
   services = {
     fwupd.enable = true;

modules/core/default.nix

@@ -28,20 +28,23 @@ in {
   # Disable sudo which is entierly unnecessary.
   security.sudo.enable = false;
 
-  # Setup to use Secrets
-  rekey.hostPubkey = ../../secrets/pubkeys + "/${config.networking.hostName}.pub";
-  rekey.masterIdentities = [../../secrets/yk1-nix-rage.pub];
-  rekey.extraEncryptionPubkeys = [../../secrets/backup.pub];
-
-  home-manager = {
-    useGlobalPkgs = true;
-    useUserPackages = true;
-    verbose = true;
-  };
-
   time.timeZone = lib.mkDefault "Europe/Berlin";
   i18n.defaultLocale = "C.UTF-8";
 
+  console =
+    {
+      keyMap = "de-latin1-nodeadkeys";
+    }
+    // lib.mkIf video.hidpi.enable {
+      font = "ter-v28n";
+      packages = with pkgs; [terminus_font];
+    };
+
+  hardware = {
+    enableRedistributableFirmware = true;
+    enableAllFirmware = true;
+  };
+
   networking = {
     useDHCP = lib.mkForce false;
     useNetworkd = true;
@@ -57,16 +60,6 @@ in {
     "nixpkgs-overlays=/run/current-system/overlays"
   ];
 
-  programs = {
-    git = {
-      enable = true;
-      config = {
-        init.defaultBranch = "main";
-        pull.rebase = true;
-      };
-    };
-  };
-
   system = {
     extraSystemBuilderCmds = ''
       ln -sv ${pkgs.path} $out/nixpkgs
@@ -82,4 +75,25 @@ in {
   };
 
   users.mutableUsers = false;
+
+  # Setup to use Secrets
+  rekey.hostPubkey = ../../secrets/pubkeys + "/${config.networking.hostName}.pub";
+  rekey.masterIdentities = [../../secrets/yk1-nix-rage.pub];
+  rekey.extraEncryptionPubkeys = [../../secrets/backup.pub];
+
+  home-manager = {
+    useGlobalPkgs = true;
+    useUserPackages = true;
+    verbose = true;
+  };
+
+  programs = {
+    git = {
+      enable = true;
+      config = {
+        init.defaultBranch = "main";
+        pull.rebase = true;
+      };
+    };
+  };
 }

modules/hardware/intel.nix

@@ -0,0 +1,3 @@
+{pkgs, ...}: {
+  powerManagement.cpuFreqGovernor = "powersave";
+}

modules/laptop.nix

@@ -1,4 +1,5 @@
 {
+  environment.systemPackages = with pkgs; [powertop];
   services.logind = {
     lidSwitch = "ignore";
     lidSwitchDocked = "ignore";