feat: try rework

system/default.nix

@@ -0,0 +1,9 @@
+{ config, pkgs, ... }:
+
+{
+  imports = [
+    ./sops.nix
+    ./static-ip.nix
+    ./users.nix
+  ];
+}

system/sops.nix

@@ -0,0 +1,14 @@
+{ lib, ... }:
+
+let
+  secretData = import ../intermediate/secrets.nix;
+in
+{
+  sops = {
+    age.keyFile = "/var/lib/sops-nix/key.txt";
+    secrets = secretData.byName;
+  };
+
+  warnings = lib.optional (secretData.missing != [])
+    "Some SOPS source files are missing or not yet encrypted; no runtime secrets will be provisioned for: ${builtins.concatStringsSep ", " (map (item: builtins.concatStringsSep "_" item.path) secretData.missing)}";
+}

system/static-ip.nix

@@ -0,0 +1,15 @@
+{ config, pkgs, ... }:
+
+let
+  net = import ../config/network.nix;
+in
+{
+  networking.interfaces.eth0.ipv4.addresses = [{
+    address = net.devices.self.ip;
+    prefixLength = net.network.cidr;
+  }];
+  
+  networking.defaultGateway = net.network.gateway;
+  
+  networking.nameservers = net.fallback_dns_servers;
+}

system/users.nix

@@ -0,0 +1,8 @@
+{ config, pkgs, lib, ... }:
+{
+  users.users.nudelerde = {
+    isNormalUser = true;
+    extraGroups = ["wheel" "docker"];
+    hashedPassword = "$y$j9T$NiaiVxQKs0C1V4VdCFKBO.$P6RfBDTyJfPJJzKyHf9PJEy9Ku5M6AU57U98nVD6wP6";
+  };
+}