Extract the reusable core module list into modules/default.nix (single
source of truth) and expose it as nixosModules.omnixy / .default.
configuration.nix now imports ./modules instead of listing each module,
so this repo's hosts and external consumers share one definition. Theme
stays a settings.theme-driven import inside the aggregate. Packs,
dev-env, sops and home-manager remain injected by mkSystem.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
configuration.nix is imported as the shared base by every host (incl.
hosts/example). It hardcoded bohm's lnbits/nextcloud MCP servers, which
declare sops secrets — so with secrets now opt-in (omnixy.secrets.enable),
a fork that imports the base but doesn't enable secrets failed to eval
(`sops.defaultSopsFile accessed but has no value`). Move the server
enablement into hosts/omnixy; the mcp module stays imported in the base
(inert until a host enables a server).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>