feat: add new host and start modularizing system configuration

flake.nix

@@ -5,29 +5,66 @@
     nixos-hardware.url = "github:nixos/nixos-hardware";
     home-manager.url = "github:nix-community/home-manager";
     home-manager.inputs.nixpkgs.follows = "nixpkgs";
+    lanzaboote.url = "github:nix-community/lanzaboote/v0.4.2";
+    lanzaboote.inputs.nixpkgs.follows = "nixpkgs";
     sops-nix.url = "github:Mic92/sops-nix";
     sops-nix.inputs.nixpkgs.follows = "nixpkgs";
   };
-  outputs = inputs@{self, nixpkgs, nixos-hardware, sops-nix, ...}:
+  # https://nix.dev/tutorials/nix-language.html#named-attribute-set-argument
+  outputs = inputs@{self, nixpkgs, nixos-hardware, home-manager, sops-nix, lanzaboote, ...}:
+  let
+    mkSystem = (import ./lib {
+      inherit nixpkgs home-manager inputs;
+    }).mkSystem;
+  in
   {
+    # NOTE: Run `nix flake show` to see what this flake has to offer.
+    # TODO: Enable automated formatting with something like numtide/treefmt-nix
     nixosConfigurations = {
-      neon = nixpkgs.lib.nixosSystem {
-        system = "x86_64-linux";
-        modules = [
-          # https://github.com/NixOS/nixos-hardware/blob/master/README.md#using-nix-flakes-support
-          nixos-hardware.nixosModules.gpd-pocket-3
-          ./hosts/neon
-           # override from nixos-hardware
-          ({config, lib, ...}: { services.xserver.videoDrivers = lib.mkForce [ "modesetting" ]; })
+      neon = mkSystem {
+        hostname = "neon";
+        users = [ "jml" ];
+      };
+      lithium = mkSystem {
+        hostname = "lithium";
+        # extraModules = [ inputs.sops-nix.nixosModules.sops ];
+        users = [
+          "jml"
+          "breakglass"
         ];
       };
-      lithium = nixpkgs.lib.nixosSystem {
+      titanium = mkSystem {
+        hostname = "titanium";
+        users = [
+          "jml"
+        ];
+        extraModules = [
+          { nixpkgs.config.allowUnfree = true; }
+          lanzaboote.nixosModules.lanzaboote
+          ({ pkgs, lib, ... }: {
+            environment.systemPackages = [ pkgs.sbctl ];
+            boot.loader.systemd-boot.enable = lib.mkForce false;
+            boot.lanzaboote.enable = true;
+            boot.lanzaboote.pkiBundle = "/var/lib/sbctl";
+          })
+        ];
+      };
+      # `nix build .#nixosConfigurations.installIso.config.system.build.isoImage`
+      # https://github.com/nix-community/nixos-generators
+      installIso = nixpkgs.lib.nixosSystem {
         system = "x86_64-linux";
         modules = [
-          ./hosts/lithium
-          sops-nix.nixosModules.sops
+          "${nixpkgs}/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix"
         ];
+        specialArgs = {inherit inputs;};
       };
     }; 
+    homeConfigurations = {
+      "jml" = home-manager.lib.homeManagerConfiguration {
+        modules = [
+          ./users/jml/home.nix
+        ];
+      };
+    };
   };
 }