infra/nix/os/devices/sj-srv1/configuration.nix

{ nodeName, config, ... }:
{
  disabledModules = [ ];
  imports = [
    ../../profiles/common/configuration.nix
    {
      users.commonUsers = {
        enable = true;
        enableNonRoot = true;
        rootPasswordFile = config.sops.secrets.passwords-root.path;
      };

      sops.secrets.passwords-root = {
        sopsFile = ../../../../secrets/${nodeName}/secrets.yaml;
        neededForUsers = true;
        format = "yaml";
      };
    }

    ./system.nix
    ./hw.nix
  ];
}