Refactor admin module

clanServices/admin/default.nix

@@ -41,25 +41,13 @@
           };
         };
       };
+  };
 
-    perInstance =
-      { settings, ... }:
-      {
-        nixosModule =
-          { ... }:
-          {
-            imports = [
   # We don't have a good way to specify dependencies between
   # clanServices for now. When it get's implemtende, we should just
   # use the ssh and users modules here.
+  imports = [
     ./ssh.nix
     ./root-password.nix
   ];
-
-            _module.args = { inherit settings; };
-
-            users.users.root.openssh.authorizedKeys.keys = builtins.attrValues settings.allowedKeys;
-          };
-      };
-  };
 }

clanServices/admin/root-password.nix

@@ -1,11 +1,16 @@
 # We don't have a way of specifying dependencies between clanServices for now.
 # When it get's added this file should be removed and the users module used instead.
 {
+  roles.default.perInstance =
+    { ... }:
+    {
+      nixosModule =
+        {
           config,
           pkgs,
           ...
-}:
-{
+        }:
+        {
 
           users.mutableUsers = false;
           users.users.root.hashedPasswordFile =
@@ -45,4 +50,6 @@
               mkpasswd -s -m sha-512 < "$out"/password | tr -d "\n" > "$out"/password-hash
             '';
           };
+        };
+    };
 }

clanServices/admin/ssh.nix

@@ -1,17 +1,24 @@
 {
+  roles.default.perInstance =
+    { settings, ... }:
+    {
+      nixosModule =
+
+        {
           config,
           pkgs,
           lib,
-  settings,
           ...
-}:
-let
+        }:
+        let
           stringSet = list: builtins.attrNames (builtins.groupBy lib.id list);
 
           domains = stringSet settings.certificateSearchDomains;
 
-in
-{
+        in
+        {
+
+          users.users.root.openssh.authorizedKeys.keys = builtins.attrValues settings.allowedKeys;
 
           services.openssh = {
             enable = true;
@@ -112,4 +119,6 @@ in
             extraHostNames = builtins.map (domain: "*.${domain}") settings.certificateSearchDomains;
             publicKey = config.clan.core.vars.generators.openssh-ca.files."id_ed25519.pub".value;
           };
+        };
+    };
 }