chore: initialized project

roles/device/default.nix

@@ -0,0 +1,11 @@
+{ inputs, ... }:
+{
+  imports = [
+    inputs.disko.nixosModules.disko
+    ./firewall.nix
+    ./secrets.nix
+    ./sudo.nix
+    ./users.nix
+  ]
+  ++ import ../../modules/top-level.nix;
+}

roles/device/firewall.nix

@@ -0,0 +1,3 @@
+{
+  networking.firewall.enable = true;
+}

roles/device/secrets.nix

@@ -0,0 +1,14 @@
+{
+  inputs,
+  config,
+  lib,
+  ...
+}:
+let
+  hostSecretsFile = ../../systems + "${config.networking.hostName}/secrets.yaml";
+in
+{
+  imports = [ inputs.sops-nix.nixosModules.sops ];
+
+  sops.defaultSopsFile = lib.mkIf (builtins.pathExists hostSecretsFile) hostSecretsFile;
+}

roles/device/sudo.nix

@@ -0,0 +1,6 @@
+{
+  security.sudo = {
+    enable = true;
+    wheelNeedsPassword = false;
+  };
+}

roles/device/users.nix

@@ -0,0 +1,5 @@
+{
+  imports = [
+    ../../users/bddvlpr.nix
+  ];
+}