refactor(flake): drop maintainer's personal host from public template

The public template should ship the copy-me `example` host and the ISO,
not the maintainer's real machine. bohm's `omnixy` host enables MCP
servers that require secrets (absent in the public tree), so it broke
`nix flake check` on the public branch. It moves to the private
omnixy-private branch (which re-adds it with the real secrets). Forkers
define their own host modeled on `example`.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Padreug 2026-06-28 10:10:38 +02:00
commit 1238703d9f

View file

@ -219,30 +219,13 @@
in
{
# NixOS configurations.
#
# This public template ships the `example` host (copy-me starter) and
# the live ISO. The maintainer's personal host (`omni`, a real
# machine with secrets + private hardware/VPN) is NOT here — it lives
# on the private `omni-private` branch, which adds it back alongside
# the real secret files. Forkers define their own host like `example`.
nixosConfigurations = {
# Main dev box. Uses the mksystem convention (hosts/omni/ +
# users/user/home-manager.nix shims — see commit dc9d70b).
#
# modules = [ ... ] is the escape hatch for host-specific
# home-manager options that mksystem doesn't expose directly,
# like sharedModules for nix-colors integration.
omni = mkSystem "omni" {
inherit system;
user = settings.user;
devEnv = true;
extraSpecialArgs = { inherit settings; };
extraHmArgs = { inherit settings; };
modules = [
{
home-manager.sharedModules = [
inputs.nix-colors.homeManagerModules.default
inputs.lazyvim.homeManagerModules.default
inputs.walker.homeManagerModules.default
];
}
];
};
# Copy-me template host (hosts/example/). Kept as a real,
# build-checked target so the template can't silently rot — its
# placeholder hardware-configuration.nix uses by-label devices