- modules/remote.nix: OpenSSH with keys only (no passwords, no root), ports 22 and
8080 (zvm_node) opened for 192.168.1.0/24 only; /etc/hosts names for both machines
(DNS goes over TLS, so the router's *.lan names don't resolve)
- the laptop accepts the PC's key; the PC's list is ready for the laptop's
- hostName: nixos -> nexo-pc
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
system.nix had grown to 200 lines covering boot, networking, locale,
audio, Bluetooth, fonts, nix settings, hardening, DNS and RGB. Split it
by concern into boot.nix, networking.nix, locale.nix, nix-settings.nix,
security.nix and audio.nix.
Also:
- drivers.nix -> hardware.nix, absorbing Bluetooth, the I2C udev rule,
OpenRGB and printing
- fonts -> desktop.nix
- nix-ld and pkgs.file -> apps.nix
- the Bottles tmpfiles link -> users.nix, next to services.flatpak
The reorganization is behavior-neutral: the dbus-1, system-units,
user-units and system-path trees are byte-identical to the previous
build once self-referential store paths are normalized, and
`nix store diff-closures` against the running system reports exactly
one change -- go 1.26.7.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
