flake.nix

@@ -71,37 +71,27 @@
             course-management.nixosModules.default
             vscode-server.nixosModules.default
             ./hosts/quitte/configuration.nix
-            ./modules/bacula.nix
             ./modules/options.nix
-            ./modules/base.nix
-            ./modules/sops.nix
 
+            ./modules/core
             ./modules/ldap
-            ./modules/sssd.nix
             ./modules/mail
             ./modules/web
 
-            ./modules/mysql.nix
             ./modules/nix-serve.nix
-            ./modules/nginx.nix
             ./modules/hedgedoc.nix
             ./modules/padlist.nix
-            ./modules/postgres.nix
             ./modules/wiki
-            ./modules/ftp.nix
             #./modules/stream.nix
             ./modules/nextcloud.nix
             ./modules/matrix.nix
             ./modules/mautrix-telegram.nix
             ./modules/vaultwarden.nix
-            ./modules/zsh.nix
             ./modules/course-management.nix
             ./modules/courses-phil.nix
             ./modules/gitea.nix
-            ./modules/fail2ban.nix
             ./modules/kanboard.nix
             ./modules/zammad.nix
-            ./modules/initrd-ssh.nix
             ./modules/decisions.nix
             ./modules/struktur-bot.nix
             {
@@ -119,10 +109,10 @@
             vscode-server.nixosModules.default
             print-interface.nixosModules.default
             ./hosts/tomate/configuration.nix
-            ./modules/base.nix
+            ./modules/core/base.nix
-            ./modules/zsh.nix
+            ./modules/core/zsh.nix
-            ./modules/fail2ban.nix
+            ./modules/core/fail2ban.nix
-            ./modules/sssd.nix
+            ./modules/core/sssd.nix
             {
               sops.defaultSopsFile = ./secrets/tomate.yaml;
             }

modules/core/base.nix

@@ -54,14 +54,14 @@
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINJgYI2rXmw4uPXAMmOgqgJEwYfwj/IBExTCzs9Dgo+R w0lff"
     ];
     keyFiles = [
-      ../keys/ssh/marcus-sapphire
+      ../../keys/ssh/marcus-sapphire
-      ../keys/ssh/schrader
+      ../../keys/ssh/schrader
-      ../keys/ssh/jannusch
+      ../../keys/ssh/jannusch
-      ../keys/ssh/jannusch-arch
+      ../../keys/ssh/jannusch-arch
-      ../keys/ssh/tassilo
+      ../../keys/ssh/tassilo
-      ../keys/ssh/jonasga
+      ../../keys/ssh/jonasga
-      ../keys/ssh/rouven
+      ../../keys/ssh/rouven
-      ../keys/ssh/joachim
+      ../../keys/ssh/joachim
     ];
   };
 

modules/core/default.nix

@@ -0,0 +1,14 @@
+{ ... }:
+{
+  imports = [
+    ./base.nix
+    ./bacula.nix
+    ./fail2ban.nix
+    ./initrd-ssh.nix
+    ./mysql.nix
+    ./nginx.nix
+    ./postgres.nix
+    ./sssd.nix
+    ./zsh.nix
+  ];
+}

modules/sops.nix

@@ -1,5 +0,0 @@
-{ ... }:
-{
-  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-  sops.age.generateKey = false;
-}