base: move basic Nix configuration

base/default.nix

@@ -1,6 +1,7 @@
 { ... }:
 {
   imports = [
+    ./nix.nix
     ./users.nix
   ];
 }

base/nix.nix

@@ -0,0 +1,22 @@
+{ pkgs, ... }:
+{
+  nix = {
+    package = pkgs.nixUnstable;
+    extraOptions = ''
+      experimental-features = nix-command flakes
+    '';
+
+    binaryCaches = [
+      "https://alarsyo.cachix.org"
+    ];
+    binaryCachePublicKeys = [
+      "alarsyo.cachix.org-1:A6BmcaJek5+ZDWWv3fPteHhPm6U8liS9CbDbmegPfmk="
+    ];
+
+    gc = {
+      automatic = true;
+      dates = "03:15";
+      options = "--delete-older-than 30d";
+    };
+  };
+}

base/users.nix

@@ -10,7 +10,10 @@ in
   users.users.alarsyo = {
     hashedPassword = secrets.shadow-hashed-password-alarsyo;
     isNormalUser = true;
-    extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
+    extraGroups = [
+      "media"
+      "wheel" # Enable ‘sudo’ for the user.
+    ];
     shell = pkgs.fish;
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH3rrF3VSWI4n4cpguvlmLAaU3uftuX4AVV/39S/8GO9 alarsyo@thinkpad"

hosts/poseidon/default.nix

@@ -121,24 +121,4 @@ in
 
 
   boot.supportedFilesystems = [ "btrfs" ];
-
-  nix = {
-    package = pkgs.nixUnstable;
-    extraOptions = ''
-      experimental-features = nix-command flakes
-    '';
-
-    binaryCaches = [
-      "https://alarsyo.cachix.org"
-    ];
-    binaryCachePublicKeys = [
-      "alarsyo.cachix.org-1:A6BmcaJek5+ZDWWv3fPteHhPm6U8liS9CbDbmegPfmk="
-    ];
-
-    gc = {
-      automatic = true;
-      dates = "03:15";
-      options = "--delete-older-than 30d";
-    };
-  };
 }