chore: resonite, storage and forgejo setup

roles/device/default.nix

@@ -1,11 +1,42 @@
-{ inputs, ... }:
+{ inputs, lib, ... }:
 {
   imports = [
     inputs.disko.nixosModules.disko
     ./firewall.nix
+    ./network.nix
     ./secrets.nix
     ./sudo.nix
     ./users.nix
   ]
   ++ import ../../modules/top-level.nix;
+
+  nix =
+    let
+      flakeInputs = lib.filterAttrs (_: lib.isType "flake") inputs;
+    in
+    {
+      registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;
+      nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;
+
+      settings = {
+        warn-dirty = false;
+        trusted-users = [ "@wheel" ];
+
+        experimental-features = [
+          "nix-command"
+          "flakes"
+        ];
+
+        substituters = [
+          "https://cache.garnix.io"
+          "https://nix-community.cachix.org"
+        ];
+
+        trusted-public-keys = [
+          "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
+          "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+        ];
+      };
+    };
+
 }