some reorganizing

sys/machines/hopper/default.nix

@@ -0,0 +1,38 @@
+{
+  inputs,
+  systemProfiles,
+  ...
+}: {
+  imports = with systemProfiles; [
+    inputs.hardware.nixosModules.common-cpu-intel
+    inputs.vpn-confinement.nixosModules.default
+
+    ./hardware.nix
+    ./lab
+
+    secrets.default
+    secrets.hopper
+
+    core.security
+    core.locale
+    core.tools
+    core.ssh
+    core.deploy
+
+    nix.default # TODO slim this down
+
+    network.tailscale
+    network.avahi
+    network.networkd
+
+    # services.syncthing # TODO make syncthing not rely on having "xun" user
+  ];
+
+  networking.hostName = "hopper";
+
+  swapDevices = [];
+
+  networking.interfaces.eno1.wakeOnLan.enable = true;
+
+  system.stateVersion = "23.11";
+}