feat(nixos): pass hostName to nixosSystem, move hm modules

nix/modules/users.nix

@@ -0,0 +1,30 @@
+{ config, lib, ... }:
+let
+  inherit (config.flake.lib) flattenAttrs;
+  inherit (lib.attrsets) filterAttrs;
+  owner = flattenAttrs (filterAttrs (_: v: (v.primary or false)) config.flake.manifest.users);
+in
+{
+  flake.modules.nixos.default =
+    { pkgs, ... }:
+    {
+      #TODO: move sudo/security options elsewhere
+      security.sudo.wheelNeedsPassword = false;
+      nix.settings.trusted-users = [ "@wheel" ];
+      #TODO: move to shell config
+      programs.${owner.shell}.enable = true;
+      #TODO: move ssh key settings elsewhere
+      users = {
+        mutableUsers = false;
+        groups.users.gid = 100;
+        users.root.openssh.authorizedKeys.keys = [ owner.pubkey ];
+        users.${owner.username} = {
+          isNormalUser = true;
+          # hashedPasswordFile
+          extraGroups = [ "wheel" ];
+          shell = pkgs.${owner.shell};
+          openssh.authorizedKeys.keys = [ owner.pubkey ];
+        };
+      };
+    };
+}