Only import third party `nixosModules` where used
I left `disko` and `sops-nix` in the shared spot, because I assume they're used everywhere. This should have a (probably negligible) impact on performance. It also tightens our security stance a bit: a malicious commit to one of these third party modules will only impact some members of the non-critical fleet, rather than all of them).
Jeremy Fleischman committed
Jun 3, 2025 at 10:53 UTC
38420ae7d5cd9038dae0426783e0f3a15b90d447
3 files changed
+12
-3
non-critical-infra/flake-module.nix
-2
@@ -28,8 +28,6 @@
28
modules = [
29
value
30
inputs.disko.nixosModules.disko
31
- inputs.first-time-contribution-tagger.nixosModule
32
- inputs.simple-nixos-mailserver.nixosModule
31
inputs.sops-nix.nixosModules.sops
32
];
33
extraModules = [ inputs.colmena.nixosModules.deploymentOptions ];
non-critical-infra/modules/first-time-contribution-tagger.nix
+5
@@ -1,4 +1,9 @@
1
+{ inputs, ... }:
2
{
3
+ imports = [
4
+ inputs.first-time-contribution-tagger.nixosModule
5
+ ];
6
+
7
services.first-time-contribution-tagger = {
8
enable = true;
9
interval = "*:0/10";
non-critical-infra/modules/mailserver/default.nix
+7
-1
@@ -1,7 +1,13 @@
1
-{ config, pkgs, ... }:
1
+{
2
+ inputs,
3
+ config,
4
+ pkgs,
5
+ ...
6
+}:
7
8
{
9
imports = [
10
+ inputs.simple-nixos-mailserver.nixosModule
11
./mailing-lists.nix
12
./postsrsd.nix
13
];