feat: add new host and start modularizing system configuration

hosts/titanium/configuration.nix

@@ -0,0 +1,19 @@
+{ config, lib, pkgs, ... }:
+{
+  networking.hostName = "titanium";
+  networking.networkmanager.enable = true;
+  environment.systemPackages = with pkgs; [
+    sbctl  # Secure-Boot
+    helix nil  # nice for editing '.nix'
+    discord
+    signal-desktop
+    obs-studio
+  ];
+  # Hardware Specific programs...
+  #programs.ryzen-monitor-ng.enable = true;
+  #programs.rog-control-center.enable = true;
+  services.openssh.enable = true;
+  services.tailscale.enable = true;
+  networking.firewall.trustedInterfaces = [ "tailscale0" ];
+  system.stateVersion = "25.05";
+}

hosts/titanium/default.nix

@@ -0,0 +1,12 @@
+{ inputs, ... }:
+{
+  imports = [
+    ../../modules/nixos/base.nix
+    ../../modules/nixos/audio.nix
+    ../../modules/nixos/desktop.nix
+    ../../modules/nixos/gaming.nix
+    inputs.nixos-hardware.nixosModules.asus-rog-strix-x570e
+    ./hardware.nix
+    ./configuration.nix
+  ];
+}

hosts/titanium/disko.nix

@@ -0,0 +1,76 @@
+{ ... }:
+{
+  # Based on:
+  # https://github.com/nix-community/disko/blob/master/example/luks-btrfs-subvolumes.nix
+  #
+  # Run with:
+  # `sudo nix --experimental-features "nix-command flakes" run github:nix-community/disko/latest -- --mode destroy,format,mount /tmp/disk-config.nix`
+  disko.devices = {
+    disk = {
+      main-disk = {
+	      type = "disk";
+	      device = "/dev/disk/by-path/pci-0000:08:00.0-ata-2";
+	      content = {
+		type = "gpt";
+		partitions = {
+		  ESP = {
+		    size = "512M";
+		    type = "EF00";
+		    content = {
+		      type = "filesystem";
+		      format = "vfat";
+		      mountpoint = "/boot";
+		      mountOptions = [ "umask=0077" ];
+		    };
+		  };
+		  luks = {
+		    size = "100%";  # Full Disk Encryption
+		    content = {
+		      type = "luks";
+		      name = "crypted";
+		      # disable settings.keyFile if you want to use interactive password entry
+		      # passwordFile = "/tmp/secret.key";  # Interactive
+		      settings = {
+			allowDiscards = true;
+			#keyFile = "/tmp/secret.key";
+		      };
+		      #additionalKeyFiles = [ "/tmp/additionalSecret.key" ];
+		      content = {
+			type = "btrfs";
+			extraArgs = [ "-f" ];  # What?
+			subvolumes = {
+			  "/root" = {
+			    mountpoint = "/";
+			    mountOptions = [
+			      "compress=zstd"
+			      "noatime"
+			    ];
+			  };
+			  "/home" = {
+			    mountpoint = "/home";
+			    mountOptions = [
+			      "compress=zstd"
+			      "noatime"
+			    ];
+			  };
+			  "/nix" = {
+			    mountpoint = "/nix";
+			    mountOptions = [
+			      "compress=zstd"
+			      "noatime"
+			    ];
+			  };
+			  "/swap" = {
+			    mountpoint = "/.swapvol";
+			    swap.swapfile.size = "16G";
+			  };
+			};
+		      };
+		    };
+		  };
+		};
+	      };
+	};
+    };
+  };
+}

hosts/titanium/hardware.nix

@@ -0,0 +1,72 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/0b3de117-c34f-4cc6-81db-5b84ea46cd51";
+      fsType = "btrfs";
+      options = [ "subvol=root" ];
+    };
+
+  boot.initrd.luks.devices."crypted".device = "/dev/disk/by-uuid/0ccc4028-c27e-4259-ade9-a2b2081722cb";
+
+  fileSystems."/.swapvol" =
+    { device = "/dev/disk/by-uuid/0b3de117-c34f-4cc6-81db-5b84ea46cd51";
+      fsType = "btrfs";
+      options = [ "subvol=swap" ];
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/219D-4579";
+      fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" ];
+    };
+
+  fileSystems."/home" =
+    { device = "/dev/disk/by-uuid/0b3de117-c34f-4cc6-81db-5b84ea46cd51";
+      fsType = "btrfs";
+      options = [ "subvol=home" ];
+    };
+
+  fileSystems."/nix" =
+    { device = "/dev/disk/by-uuid/0b3de117-c34f-4cc6-81db-5b84ea46cd51";
+      fsType = "btrfs";
+      options = [ "subvol=nix" ];
+    };
+
+  swapDevices = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp4s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp5s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp3s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+
+  # GPU Things
+  hardware.graphics.enable = true;
+  hardware.nvidia = {
+    # package = config.boot.kernelPackages.nvidiaPackages.stable;
+    modesetting.enable = true;
+    open = true;
+    nvidiaSettings = true;
+    powerManagement.enable = false;
+    powerManagement.finegrained = false;
+  };
+}