refactor

hm/users/lomig-desktop.nix

@@ -3,7 +3,6 @@
     ../desktop/bspwm.nix
     ./lomig.nix
   ];
-  home.stateVersion = "25.05"; # ou ton actuelle
   home = {
     packages = with pkgs; [
       fastfetch

hosts/pennsardin/configuration.nix

@@ -1,4 +1,7 @@
-{pkgs, ...}: {
+{pkgs, ...}: 
+let 
+  globals = import ../../config/globals.nix;
+in {
   imports = [
     ../../profiles/workstation-bspwm.nix
     ../../modules/hardware/bepovim.nix
@@ -37,7 +40,7 @@
 
   users.users.lomig = {
     isNormalUser = true;
-    extraGroups = ["networkmanager" "lp" "wheel"];
+    extraGroups = [ "lp" "wheel"];
     shell = pkgs.zsh;
   };
 
@@ -49,21 +52,26 @@
   networking = {
     useNetworkd = true;
     firewall.allowedTCPPorts = [22 80 5900 5901 5902];
-    interfaces.enp11s0.useDHCP = false;
+    interfaces = {
-    interfaces.br0 = {
+      enp11s0 = {
+        useDHCP = false;
+        wakeOnLan.enable = true ;
+      br0 = {
         useDHCP = false;
         ipv4.addresses = [
           {
-          address = "192.168.50.12";
+            address = globals.network.pennsardin.ip;
             prefixLength = 24;
           }
         ];
       };
+    };
+
     defaultGateway = {
       interface = "br0";
-      address = "192.168.50.1";
+      address = globals.network.gateway;
     };
-    nameservers = ["192.168.50.1" "1.1.1.1"];
+    nameservers = [ globals.network.gateway  "1.1.1.1"];
     bridges.br0.interfaces = ["enp11s0"];
   };
   systemd.network = {

modules/common/networking.nix

@@ -1,8 +1,6 @@
 _: {
   networking = {
     nameservers = ["1.1.1.1" "8.8.8.8"];
-    #    dhcpcd.extraConfig = "nohook resolv.conf";
     firewall.enable = true;
-    interfaces.enp11s0.wakeOnLan.enable = true;
   };
 }

modules/roles/workstation.nix

@@ -1,18 +1,10 @@
 {pkgs, ...}: {
   imports = [
     ../common/nix.nix
-
-    # Matériel
     ../hardware/gpu-amd.nix
     ../hardware/sensors-zenpower.nix
-
-    # Virtualisation/tuning
     ../virtual/kvm-amd.nix
     ../virtual/vfio.nix
-
-    # Dev
-    #    ../dev/qemu.nix
-    #    ../virtual/truenas.nix # seulement si tu l’utilises sur ce host
   ];
 
   environment.systemPackages = with pkgs; [

modules/services/forgejo.nix

@@ -1,4 +1,7 @@
-{pkgs, ...}: {
+{pkgs, ...}: 
+let
+  import ../../config/globals.nix;
+in {
   # --- Utilisateur dédié ---
   users.users.git = {
     isSystemUser = true;
@@ -20,10 +23,10 @@
       };
       settings = {
         server = {
-          DOMAIN = "govel.porzh.me";
+          DOMAIN = globals.services.forgejo.url ;
-          ROOT_URL = "https://govel.porzh.me/";
+          ROOT_URL = "https://${globals.services.forgejo.url}/";
-          SSH_DOMAIN = "govel.porzh.me";
+          SSH_DOMAIN = globals.services.forgejo.url;
-          HTTP_PORT = 3000;
+          HTTP_PORT = globals.services.forgejo.port;
           SSH_PORT = 22;
           START_SSH_SERVER = false;
         };
@@ -32,16 +35,16 @@
           REGISTER_EMAIL_CONFIRM = false;
         };
         repository = {
-          DEFAULT_BRANCH = "main";
+          DEFAULT_BRANCH = "master";
         };
       };
     };
     openssh.enable = true;
     caddy = {
       enable = true;
-      virtualHosts."govel.porzh.me" = {
+      virtualHosts.${globals.services.forgejo.url} = {
         extraConfig = ''
-          reverse_proxy localhost:3000
+          reverse_proxy localhost:${globals.services.forgejo.port}
         '';
       };
     };

modules/services/goaccess.nix

@@ -1,4 +1,7 @@
-{pkgs, ...}: {
+{pkgs, ...}: 
+let 
+  imports = ../../config/globals.nix ;
+in {
   environment.systemPackages = with pkgs; [
     goaccess
   ];
@@ -7,7 +10,7 @@
   systemd.services.goaccess-report = {
     description = "Generate GoAccess HTML report";
     serviceConfig = {
-      ExecStart = "${pkgs.goaccess}/bin/goaccess /var/log/caddy/access-levr.porzh.me.log --log-format=CADDY -o /var/www/goaccess/index.html";
+      ExecStart = "${pkgs.goaccess}/bin/goaccess /var/log/caddy/access-${globals.services.levr.url}.log --log-format=CADDY -o ${globals.services.goaccess.home}/index.html";
     };
   };
 
@@ -22,9 +25,9 @@
   };
   services.caddy = {
     virtualHosts = {
-      "koum.porzh.me" = {
+      globals.services.goaccess.url = {
         extraConfig = ''
-          root * /var/www/goaccess
+          root * ${globals.services.goaccess.home}
           file_server browse
           try_files {path} {path}/ /index.html
 

modules/services/outline.nix

@@ -1,26 +1,29 @@
-{ config, pkgs, lib, ... }: {
+{ config, pkgs, lib, ... }: 
+let
+  import ../../config/globals.nix ;
+in {
   services = {
     outline = {
       enable = true;
-      port = 3002 ;
+      port = globals.services.outline.port ;
-      publicUrl = "http://notes.porzh.me";
+      publicUrl = "http://${globals.services.outline.url}";
       forceHttps = true;
       smtp = {
-        host = "smtp.protonmail.ch";
+        host = globals.smtp.host ;
-        username = "contact@porzh.me";
+        username = globals.smtp.user ;
         passwordFile = "/run/secrets/proton_pass";
-        fromEmail = "contact@porzh.me";
+        fromEmail = globals.smtp.user;
-        replyEmail = "contact@porzh.me";
+        replyEmail = globals.smtp.user;
-        port = 587 ;
+        port = globals.smtp.port;
         secure = false;
       };
       storage.storageType = "local";
     };
     caddy = {
       enable = true;
-      virtualHosts."notes.porzh.me" = {
+      virtualHosts.${globals.services.outline.url} = {
         extraConfig = ''
-          reverse_proxy localhost:3002
+          reverse_proxy localhost:${globals.services.outline.port}
           '';
       };
     };

modules/sites/levr.porzh.me.nix

@@ -1,4 +1,7 @@
-{ pkgs, lib, ...}: {
+{ pkgs, lib, ...}: 
+let
+  import = ../../config/globals.nix ;
+in {
   environment.systemPackages = with pkgs; [
     hugo
   ];
@@ -6,8 +9,8 @@
     description = "Auto build du blog hugo";
     serviceConfig = {
       Type = "oneshot";
-      WorkingDirectory = "/srv/blog" ;
+      WorkingDirectory = globals.services.levr.home ;
-      ExecStart = ''${pkgs.hugo}/bin/hugo --minify build -d /srv/blog/public'';
+      ExecStart = ''${pkgs.hugo}/bin/hugo --minify build -d ${globals.services.levr.build}'';
       User = "lomig";
     };
   };
@@ -23,7 +26,7 @@
     description = "Synchronisation du dépôt Hugo";
     serviceConfig = {
       Type = "oneshot";
-      WorkingDirectory = "/srv/blog";
+      WorkingDirectory = globals.services.levr.home;
       ExecStart = "${pkgs.git}/bin/git pull origin master";
       User = "lomig";
     };
@@ -41,17 +44,17 @@
   services.caddy = {
     enable = true;
     virtualHosts = {
-      "levr.porzh.me" = {
+      globals.services.levr.url = {
         extraConfig = ''
           @http {
             protocol http
           }
         redir @http https://{host}{uri} permanent
-          root * /srv/blog/public
+          root * ${globals.services.levr.build}
           file_server
 
           log {
-            output file /var/log/caddy/access-levr.porzh.me.log
+            output file /var/log/caddy/access-${global.services.levr.url}.log
           }
         '';
       };

modules/sites/porzh.me.nix

@@ -1,4 +1,5 @@
 {pkgs, ...}: let
+  import ../../config/globals.nix ;
   porzhSite = pkgs.stdenv.mkDerivation {
     pname = "porzh-site";
     version = "1.0";
@@ -13,8 +14,8 @@ in {
   services.caddy = {
     enable = true;
     virtualHosts = {
-      "porzh.me" = {
+      globals.domain = {
-        serverAliases = ["www.porzh.me"];
+        serverAliases = [ "www.${globals.domain}" ];
         extraConfig = ''
           root * ${porzhSite}
           file_server