/sys/machines -> /hosts

hosts/hopper/lab/default.nix

@@ -0,0 +1,33 @@
+## TODO look into sops-nix placeholders
+## reference: https://github.com/javigomezo/nixos/blob/b3ebe8d570ea9b37aea8bb3a343f6e16e054e322/services/network/authelia/user_database.nix
+{
+  imports = [
+    ./acme.nix
+    ./audiobookshelf.nix
+    ./caddy.nix
+    ./dnsmasq.nix
+    ./glances.nix
+    ./homepage.nix
+    ./minecraft.nix
+    ./navidrome
+    ./prometheus.nix
+    ./restic.nix
+    ./samba.nix
+    ./slskd.nix
+    ./transmission.nix
+    ./vaultwarden.nix
+    ./vpn-namespace.nix
+  ];
+
+  users.groups.media = {};
+  users.users.media = {
+    isSystemUser = true;
+    group = "media";
+  };
+
+  networking.firewall = {
+    allowedUDPPorts = [1900 7359]; # Jellyfin auto-discovery
+  };
+
+  boot.kernel.sysctl."fs.inotify.max_user_watches" = 99999999;
+}