split home-manager into their own submodules

config/base.nix

@@ -26,6 +26,7 @@
     backupFileExtension = "hbckup";
     useUserPackages = true;
     useGlobalPkgs = true;
+    sharedModules = [ ../modules/home-manager.nix ];
     extraSpecialArgs = {
       inherit inputs outputs;
     };
@@ -98,6 +99,7 @@
         "flakes"
         "pipe-operators"
       ];
+      download-buffer-size = 134217728;
       substituters = [
         "${config.my.servers.atticd.url}/nixos"
         "${config.my.servers.atticd.url}/webref"

config/home-manager.nix

@@ -21,6 +21,7 @@ let
   };
 in
 {
+  imports = [ ./jawz-home.nix ];
   home.stateVersion = "23.05";
   programs = {
     direnv = {

config/jawz-home.nix

@@ -0,0 +1,32 @@
+{
+  lib,
+  inputs,
+  osConfig,
+  ...
+}:
+let
+  inherit (osConfig.networking) hostName;
+  nixosHosts = inputs.self.lib.getNixosHosts osConfig.my.ips hostName lib;
+  nixosHostsMatch = lib.concatStringsSep " " nixosHosts;
+in
+{
+  home.file.".librewolf/.stignore".source = ../dotfiles/stignore;
+  programs.ssh = lib.mkIf osConfig.my.secureHost {
+    enable = true;
+    enableDefaultConfig = false;
+    matchBlocks = {
+      vps = {
+        hostname = osConfig.my.ips.vps;
+        user = "jawz";
+        port = 3456;
+        identityFile = osConfig.sops.secrets."private_keys/${hostName}".path;
+      };
+      "${nixosHostsMatch}" = {
+        user = "jawz";
+        identityFile = osConfig.sops.secrets."private_keys/${hostName}".path;
+      };
+      "${osConfig.my.servers.gitea.host} github.com gitlab.com bitbucket.org".identityFile =
+        osConfig.sops.secrets."git_private_keys/${hostName}".path;
+    };
+  };
+}

config/jawz.nix

@@ -6,8 +6,6 @@
 }:
 let
   inherit (config.networking) hostName;
-  nixosHosts = inputs.self.lib.getNixosHosts config.my.ips hostName lib;
-  nixosHostsMatch = lib.concatStringsSep " " nixosHosts;
 in
 {
   sops.secrets = lib.mkIf config.my.secureHost (
@@ -26,27 +24,6 @@ in
       "git_private_keys/${hostName}" = keyConfig "${baseDir}_git";
     }
   );
-  home-manager.users.jawz = {
-    home.file.".librewolf/.stignore".source = ../dotfiles/stignore;
-    programs.ssh = lib.mkIf config.my.secureHost {
-      enable = true;
-      enableDefaultConfig = false;
-      matchBlocks = {
-        vps = {
-          hostname = config.my.ips.vps;
-          user = "jawz";
-          port = 3456;
-          identityFile = config.sops.secrets."private_keys/${hostName}".path;
-        };
-        "${nixosHostsMatch}" = {
-          user = "jawz";
-          identityFile = config.sops.secrets."private_keys/${hostName}".path;
-        };
-        "${config.my.servers.gitea.host} github.com gitlab.com bitbucket.org".identityFile =
-          config.sops.secrets."git_private_keys/${hostName}".path;
-      };
-    };
-  };
   users.users.jawz = {
     uid = 1000;
     linger = true;