It builds now.

modules/system/accounts/users/jimbo/default.nix

@@ -1,11 +1,11 @@
-{ pkgs, outputs, ... }:
+{ pkgs, config, ... }:
 {
   users.users = {
     jimbo = {
       description = "Jimbo";
-      hashedPassword = outputs.secrets.jimboAccPass;
+      hashedPassword = config.secrets.jimboAccPass;
       isNormalUser = true;
-      openssh.authorizedKeys.keys = outputs.secrets.jimKeys;
+      openssh.authorizedKeys.keys = config.secrets.jimKeys;
       extraGroups = [
         "wheel"
         "audio"

modules/system/accounts/users/liquidsoap/default.nix

@@ -1,10 +1,12 @@
 { ... }:
 {
-  users.users = {
-    nextcloud = {
+  users = {
+    users.liquidsoap = {
+      group = "liquidsoap";
       extraGroups = [ "nginx" ];
       isSystemUser = true;
       uid = 155;
     };
+    groups.liquidsoap = {};
   };
 }

modules/system/accounts/users/nextcloud/default.nix

@@ -1,9 +1,12 @@
-{ ... }: {
-  users.users = { 
-    nextcloud = {
+{ ... }:
+{
+  users = {
+    users.nextcloud = {
+      group = "nextcloud";
       extraGroups = [ "nfsShare" ];
       isSystemUser = true;
       uid = 995;
     };
+    groups.nextcloud = {};
   };
 }

modules/system/accounts/users/nginx/default.nix

@@ -1,10 +1,12 @@
 { ... }:
 {
-  users.users = { 
-    nginx = {
+  users = {
+    users.nginx = {
+      group = "nginx";
       extraGroups = [ "turnserver" "virtualMail" ];
       isSystemUser = true;
       uid = 60;
     };
+    groups.nginx = {};
   };
 }

modules/system/default.nix

@@ -1,4 +1,4 @@
-{ outputs, config, pkgs, ... }:
+{ config, pkgs, ... }:
 {
   nix = {
     settings = {
@@ -12,7 +12,9 @@
     };
   };
 
-  time.timeZone = outputs.secrets.timeZone;
+  nixpkgs.config.allowUnfree = true;
+
+  time.timeZone = "America/Toronto";
 
   programs = {
     zsh.enable = true;
@@ -29,7 +31,6 @@
     packages = with pkgs; [ terminus_font ];
   };
 
-  nixpkgs.config.allowUnfree = true;
   hardware.enableRedistributableFirmware = true;
 
   # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion

modules/system/devices/boot/systemd/default.nix

@@ -2,6 +2,7 @@
 {
   boot.loader.systemd-boot = {
     enable = true;
+    editor = false;
     netbootxyz.enable = true;
   };
 }

modules/system/devices/networking/firewall/pc/default.nix

@@ -1,9 +1,9 @@
-{ outputs, ... }:
+{ config, ... }:
 {
   networking.firewall = {
     allowPing = false;
     extraInputRules = ''
-      ip saddr { ${outputs.ips.server}, ${outputs.ips.wgSpan}.1 } accept comment "Accept Server"
+      ip saddr { ${config.ips.server}, ${config.ips.wgSpan}.1 } accept comment "Accept Server"
     '';
   };
 }

modules/system/services/common/ssh/fail2ban/default.nix

@@ -1,9 +1,8 @@
-{ outputs, ... }:
+{ ... }:
 {
   services.fail2ban = {
     enable = true;
     maxretry = 5;
     bantime = "5m";
-    ignoreIP = [ "${outputs.ips.localSpan}.0/24" ];
   };
 }