Make servers headless, modularize the domain grabber

hosts/kitty/boot/default.nix

@@ -1,8 +1,7 @@
 { pkgs, ... }:
 {
   boot = {
-    kernelPackages = pkgs.linuxPackages_latest;
-    lanzaboote.enable = true;
+    kernelPackages = pkgs.linuxPackages_hardened;
     plymouth.enable = true;
   };
 }

hosts/kitty/default.nix

@@ -1,4 +1,4 @@
-{ config, lib, ... }:
+{ modulesPath, ... }:
 {
   imports = [
     ./boot
@@ -7,12 +7,14 @@
     ./hardware
     ./users
     ../../modules/system
+    (modulesPath + "/profiles/headless.nix")
   ];
 
   networking = {
     hostName = "kitty";
+    hostId = "8745e22e";
     interfaces."eno1".ipv4.addresses = [{
-      address = "10.2.0.101";
+      address = "10.2.0.2";
       prefixLength = 8;
     }];
     defaultGateway = {
@@ -22,7 +24,7 @@
   };
 
   system = {
-    desktop.enable = true;
+    server.enable = true;
     stateVersion = "24.11";
   };
 }

hosts/kitty/users/corn/default.nix

@@ -4,7 +4,7 @@
     isNormalUser = true;
     createHome = true;
     openssh.authorizedKeys.keys = [
-      "AAAAC3NzaC1lZDI1NTE5AAAAIKaZsnlyUJDNx2oK4iHsUDb+Ok4vg1jNYEAnoHsjjM2c Chinook"
+      "AAAAC3NzaC1lZDI1NTE5AAAAIBCADciME1/rtWOlR2BxaAkRSgIZt61SYOgjTi6hw+yS Chinook"
       "AAAAC3NzaC1lZDI1NTE5AAAAICtoHVAmq8Ps7EguBsV3VY4snagzkhH6aXqwbKzuGs2H Radiant"
     ];
     uid = 1001;

hosts/kitty/users/main/default.nix

@@ -1,8 +1,6 @@
 { config, lib, ... }:
 {
   home-manager.users."${config.sysusers.main}".home = {
-    desktop.enable = true;
-    production.enable = true;
     stateVersion = lib.mkForce config.system.stateVersion;
   };
 }