more refactoring

hosts/othalan/default.nix

@@ -1,14 +1,17 @@
-{ pkgs, enabled, ... }:
+{ enableAttrs, ... }:
 {
-  oizys = {
-    desktop = enabled;
-    hyprland = enabled;
-    chrome = enabled;
-    docker = enabled;
-    nix-ld = enabled;
-    vbox = enabled;
-    vpn = enabled;
-    backups = enabled;
+  oizys =
+    (enableAttrs [
+      "vpn"
+      "desktop"
+      "hyprland"
+      "chrome"
+      "docker"
+      "nix-ld"
+      "vbox"
+      "backups"
+    ])
+    // {
       languages = [
         "misc"
         "nim"
@@ -21,12 +24,6 @@
       ];
     };
 
-  environment.systemPackages = with pkgs; [
-    zk
-    quarto
-    cachix
-  ];
-
   services.restic.backups.gdrive = {
     user = "daylin";
     repository = "rclone:g:archives/othalan";
@@ -37,8 +34,5 @@
     ];
   };
 
-  users.users.daylin.extraGroups = [
-    "docker"
-    "audio"
-  ];
+  users.users.daylin.extraGroups = [ "audio" ];
 }

hosts/othalan/pkgs.nix

@@ -0,0 +1,10 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    zk
+    quarto
+    cachix
+    graphviz
+    nix-du
+  ];
+}

lib/default.nix

@@ -16,6 +16,7 @@ let
     mkDefaultOizysModule
     mkOizysModule
     enabled
+    enableAttrs
     ;
   inherit (lib.filesystem) listFilesRecursive;
 
@@ -43,6 +44,7 @@ let
           mkDefaultOizysModule
           mkOizysModule
           enabled
+          enableAttrs
           hostName
           ;
       };

modules/oizys.nix

@@ -40,6 +40,7 @@ in
   ];
 
   options.oizys.desktop.enable = mkEnableOption "is desktop";
+  options.oizys.docker.enable = mkEnableOption "enable docker support";
   config = {
     networking.hostName = hostName;
     time.timeZone = "US/Central";

modules/users/default.nix

@@ -5,8 +5,10 @@
   ...
 }:
 let
-  inherit (lib) mkOption mkIf types;
+  inherit (lib) mkOption mkIf types optional;
   cfg = config.users.defaultUser;
+  isDocker = config.oizys.docker.enable;
+  isDesktop = config.oizys.desktop.enable;
 in
 {
   options.users.defaultUser = mkOption {
@@ -22,10 +24,8 @@ in
       isNormalUser = true;
 
       shell = pkgs.zsh;
-      extraGroups = [
-        "wheel" # sudo
-        "docker"
-      ];
+      extraGroups = [ "wheel" ] ++ optional isDesktop "audio" ++ optional isDocker "docker";
+
       initialHashedPassword = "$2b$05$mGMrDFzf2cXLaoOlVQbGvOBV7UZlDt9dLg9Xqxutb/uHpjF5VrTBO";
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKkezPIhB+QW37G15ZV3bewydpyEcNlYxfHLlzuk3PH9"

modules/virtualization/docker.nix

@@ -1,10 +1,16 @@
 {
   pkgs,
   config,
-  mkOizysModule,
+  lib,
   ...
 }:
-mkOizysModule config "docker" {
+let
+  inherit (lib) mkIf;
+  cfg = config.oizys.docker;
+in
+{
+  config = mkIf cfg.enable {
     virtualisation.docker.enable = true;
     environment.systemPackages = with pkgs; [ lazydocker ];
+  };
 }