Clean up aspi and kardorf configs

hosts/common/optional/authentication.nix

@@ -1,14 +1,11 @@
+{ pkgs, ... }:
 {
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-{
+  # Make programs like nextcloud client access saved passwords
+  programs.seahorse.enable = true;
+  services.gnome.gnome-keyring.enable = true;
 
+  # Make authentication work for e.g. gparted
   security.polkit.enable = true;
-
   systemd = {
     user.services.polkit-gnome-authentication-agent-1 = {
       description = "polkit-gnome-authentication-agent-1";

hosts/common/optional/avahi.nix

@@ -0,0 +1,9 @@
+{
+  # MDNS on local network
+  services.avahi = {
+    enable = true;
+    nssmdns4 = true;
+    publish.enable = true;
+    publish.addresses = true;
+  };
+}

hosts/common/optional/docker.nix

@@ -0,0 +1,5 @@
+{
+  virtualisation.docker = {
+    enable = true;
+  };
+}

hosts/common/optional/flatpak.nix

@@ -2,10 +2,9 @@
   pkgs,
   ...
 }:
-
 {
+  services.flatpak.enable = true;
   xdg.portal.enable = true;
   xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];
   xdg.portal.config.common.default = "*"; # Use first portal implementation found
-  # hyprland desktop portal added automatically
 }

hosts/common/optional/kerberos.nix

@@ -0,0 +1,24 @@
+{
+
+  security.krb5.enable = true;
+  security.krb5.settings = {
+    # domain_realm = {
+    #   ".julian-mutter.de" = "julian-mutter.de";
+    #   "julian-mutter.de" = "julian-mutter.de";
+    # };
+    libdefaults = {
+      default_realm = "julian-mutter.de";
+      #   dns_lookup_realm = true;
+      #   dns_lookup_kdc = true;
+      #   ticket_lifetime = "24h";
+      #   renew_lifetime = "7d";
+    };
+    realms = {
+      "julian-mutter.de" = {
+        kdc = [ "kerberos.julian-mutter.de" ];
+        admin_server = "kerberos-admin.julian-mutter.de";
+        default_domain = "julian-mutter.de";
+      };
+    };
+  };
+}

hosts/common/optional/keyring.nix

@@ -1,12 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-{
-
-  programs.seahorse.enable = true;
-  services.gnome.gnome-keyring.enable = true;
-}

hosts/common/optional/podman.nix

@@ -0,0 +1,12 @@
+{ config, ... }:
+let
+  dockerEnabled = config.virtualisation.docker.enable;
+in
+{
+  virtualisation.podman = {
+    enable = true;
+    dockerCompat = !dockerEnabled;
+    dockerSocket.enable = !dockerEnabled;
+    defaultNetwork.settings.dns_enabled = true;
+  };
+}

hosts/common/optional/wireguard.nix

@@ -0,0 +1,11 @@
+{
+  networking.wg-quick.interfaces = {
+    julian = {
+      configFile = "/etc/wireguard/julian.conf";
+      autostart = true; # This interface is started on boot
+    };
+    comu = {
+      configFile = "/etc/wireguard/comu.conf";
+    };
+  };
+}

hosts/common/optional/xserver.nix

@@ -0,0 +1,6 @@
+{
+  services.xserver = {
+    enable = true;
+    wacom.enable = true;
+  };
+}