nix/lib/default.nix

@@ -1,11 +1,9 @@
-{ lib, config, ... }:
+{ lib, ... }:
 let
-  cfg = config.flake;
+  inherit (lib.attrsets) concatMapAttrs;
-  inherit (lib.attrsets) mapAttrs concatMapAttrs;
 in
 {
   flake.lib = {
     flattenAttrs = attrset: concatMapAttrs (_: v: v) attrset;
-    forAllUsers = f: mapAttrs f cfg.manifest.users;
   };
 }

nix/manifest.nix

@@ -8,6 +8,7 @@ let
       };
       nixpkgs.hostPlatform = "x86_64-linux";
       boot.loader.systemd-boot.enable = true;
+      system.stateVersion = "25.05";
       networking = { inherit hostName; };
     };
 in

nix/modules/home-manager.nix

@@ -1,18 +1,13 @@
-{ inputs, config, ... }:
+{ inputs, ... }:
 let
-  inherit (cfg.lib) flattenAttrs;
-  cfg = config.flake;
   hm = inputs.home-manager;
   globalCfg = {
-    useGlobalPkgs = true;
+    home-manager.useGlobalPkgs = true;
-    useUserPackages = true;
+    home-manager.useUserPackages = true;
-    sharedModules = [
-      (flattenAttrs (cfg.modules.homeManager or { }))
-    ];
   };
 in
 {
   imports = [ hm.flakeModules.home-manager ];
   flake.modules.nixos.default.imports = [ hm.nixosModules.home-manager ];
-  flake.modules.nixos.default.config.home-manager = globalCfg;
+  flake.modules.nixos.default.config = globalCfg;
 }

nix/modules/system.nix

@@ -1,10 +0,0 @@
-{
-  flake.modules.nixos.default = {
-    system.stateVersion = "25.11";
-  };
-  flake.modules.homeManager.default =
-    { osConfig, ... }:
-    {
-      home.stateVersion = osConfig.system.stateVersion;
-    };
-}

nix/modules/users.nix

@@ -1,13 +1,12 @@
 { config, lib, ... }:
 let
-  cfg = config.flake;
+  inherit (config.flake.lib) flattenAttrs;
-  inherit (config.flake.lib) forAllUsers flattenAttrs;
   inherit (lib.attrsets) filterAttrs;
-  owner = flattenAttrs (filterAttrs (_: v: (v.primary or false)) cfg.manifest.users);
+  owner = flattenAttrs (filterAttrs (_: v: (v.primary or false)) config.flake.manifest.users);
 in
 {
   flake.modules.nixos.default =
-    { pkgs, config, ... }:
+    { pkgs, ... }:
     {
       #TODO: move sudo/security options elsewhere
       security.sudo.wheelNeedsPassword = false;
@@ -27,12 +26,5 @@ in
           openssh.authorizedKeys.keys = [ owner.pubkey ];
         };
       };
-      home-manager.users = forAllUsers (
-        name: _: {
-          #TODO: move into nixos/darwin config - should not apply to homeConfigurations
-          home.username = name;
-          home.homeDirectory = config.users.users.${name}.home;
-        }
-      );
     };
 }