cleanup common configs + disable CONFIG_VT if kmscon is enabled

AGENTS.md

@@ -21,7 +21,7 @@ flake.nix                  # 3 hosts, 2 channels
 deploy.sh                  # wrapper: current-host rebuild or `muffin` deploy-rs
 hosts/<host>/              # host entrypoints (default.nix, home.nix, disk.nix, …)
 modules/                   # flat namespace; see module naming below
-  common-*.nix             # imported by ALL hosts (nix settings, doas, fish shim)
+  common.nix               # imported by ALL hosts (nix settings, doas, fish shim)
   desktop-*.nix            # imported by mreow/yarn only
   server-*.nix             # imported by muffin only
   <bare>.nix               # scoped by filename (age-secrets, zfs, no-rgb, …)

hosts/muffin/default.nix

@@ -12,9 +12,7 @@
 {
   imports = [
     # common across all hosts
-    ../../modules/common-doas.nix
+    ../../modules/common.nix
-    ../../modules/common-shell-fish.nix
-    ../../modules/common-nix.nix
 
     # muffin-only system modules
     ./hardware.nix
@@ -95,8 +93,6 @@
 
   services.deployGuard.enable = true;
 
-  services.kmscon.enable = true;
-
   # Disable serial getty on ttyS0 to prevent dmesg warnings
   systemd.services."serial-getty@ttyS0".enable = false;
 

modules/common-doas.nix

@@ -1,15 +0,0 @@
-{ username, ... }:
-{
-  # doas replaces sudo on every host
-  security = {
-    doas.enable = true;
-    sudo.enable = false;
-    doas.extraRules = [
-      {
-        users = [ username ];
-        keepEnv = true;
-        persist = true;
-      }
-    ];
-  };
-}

modules/common-nix.nix

@@ -1,22 +0,0 @@
-{ lib, ... }:
-{
-  # Common Nix daemon settings. Host-specific overrides (binary cache substituters,
-  # gc retention) live in the host's default.nix.
-  nix = {
-    optimise.automatic = true;
-
-    gc = {
-      automatic = true;
-      dates = "weekly";
-      # Default retention: override per-host via lib.mkForce if different.
-      options = lib.mkDefault "--delete-older-than 30d";
-    };
-
-    settings = {
-      experimental-features = [
-        "nix-command"
-        "flakes"
-      ];
-    };
-  };
-}

modules/common-shell-fish.nix

@@ -1,16 +0,0 @@
-{ pkgs, lib, ... }:
-{
-  # https://nixos.wiki/wiki/Fish#Setting_fish_as_your_shell
-  # Login shells stay bash but immediately `exec fish` so fish is the effective shell
-  # without breaking scripts that hardcode #!/bin/bash.
-  programs.fish.enable = true;
-  programs.bash = {
-    interactiveShellInit = ''
-      if [[ $(${pkgs.procps}/bin/ps --no-header --pid=$PPID --format=comm) != "fish" && -z ''${BASH_EXECUTION_STRING} ]]
-      then
-        shopt -q login_shell && LOGIN_OPTION='--login' || LOGIN_OPTION=""
-        exec ${lib.getExe pkgs.fish} $LOGIN_OPTION
-      fi
-    '';
-  };
-}

modules/common.nix

@@ -0,0 +1,57 @@
+{
+  config,
+  lib,
+  pkgs,
+  username,
+  ...
+}:
+{
+  # Common Nix daemon settings. Host-specific overrides (binary cache substituters,
+  # gc retention) live in the host's default.nix.
+  nix = {
+    optimise.automatic = true;
+
+    gc = {
+      automatic = true;
+      dates = "weekly";
+      # Default retention: override per-host via lib.mkForce if different.
+      options = lib.mkDefault "--delete-older-than 30d";
+    };
+
+    settings = {
+      experimental-features = [
+        "nix-command"
+        "flakes"
+      ];
+    };
+  };
+
+  # doas replaces sudo on every host
+  security = {
+    doas.enable = true;
+    sudo.enable = false;
+    doas.extraRules = [
+      {
+        users = [ username ];
+        keepEnv = true;
+        persist = true;
+      }
+    ];
+  };
+
+  # https://nixos.wiki/wiki/Fish#Setting_fish_as_your_shell
+  # Login shells stay bash but immediately `exec fish` so fish is the effective shell
+  # without breaking scripts that hardcode #!/bin/bash.
+  programs.fish.enable = true;
+  programs.bash = {
+    interactiveShellInit = ''
+      if [[ $(${pkgs.procps}/bin/ps --no-header --pid=$PPID --format=comm) != "fish" && -z ''${BASH_EXECUTION_STRING} ]]
+      then
+        shopt -q login_shell && LOGIN_OPTION='--login' || LOGIN_OPTION=""
+        exec ${lib.getExe pkgs.fish} $LOGIN_OPTION
+      fi
+    '';
+  };
+
+  services.kmscon.enable = true;
+}

modules/desktop-common.nix

@@ -10,10 +10,7 @@
 }:
 {
   imports = [
-    # shared across all hosts
+    ./common.nix
-    ./common-doas.nix
-    ./common-shell-fish.nix
-    ./common-nix.nix
 
     # desktop-only modules
     ./desktop-vm.nix
@@ -34,8 +31,6 @@
   hardware.enableRedistributableFirmware = true;
   hardware.cpu.amd.updateMicrocode = true;
 
-  services.kmscon.enable = true;
-
   # Add niri to display manager session packages
   services.displayManager.sessionPackages = [ niri-package ];
 
@@ -255,6 +250,8 @@
           SGETMASK_SYSCALL = lib.mkForce no;
           UID16 = lib.mkForce no;
           X86_X32_ABI = lib.mkForce no;
+
+          VT = lib.mkForce (!config.services.kmscon.enable);
         };
       }
     ];