formatted all files with nixfmt, added env variable to hold secrets

hosts/desktop/config.nix

@@ -1,7 +1,5 @@
-{pkgs, username, ...}: {
-  imports = [
-    ./hardware.nix
-  ];
+{ pkgs, username, ... }: {
+  imports = [ ./hardware.nix ];
 
   # My module options
   movOpts = {
@@ -28,8 +26,8 @@
   nix = {
     settings = {
       auto-optimise-store = true;
-      experimental-features = ["nix-command" "flakes"];
-      substituters = ["https://nix-gaming.cachix.org"];
+      experimental-features = [ "nix-command" "flakes" ];
+      substituters = [ "https://nix-gaming.cachix.org" ];
     };
     gc = {
       automatic = true;
@@ -39,31 +37,26 @@
   };
 
   environment = {
-    variables = {
-      PATH = "${pkgs.clang-tools}/bin:$PATH";
-    };
-    shells = with pkgs; [
-      zsh
-      bash
-    ];
+    variables = { PATH = "${pkgs.clang-tools}/bin:$PATH"; };
+    shells = with pkgs; [ zsh bash ];
   };
 
   users = {
-    groups.persist = {};
+    groups.persist = { };
     users = {
       root.initialPassword = "1234";
       ${username} = {
         isNormalUser = true;
         initialPassword = "1234";
         shell = pkgs.zsh;
-        extraGroups = ["wheel" "persist" "libvirtd"];
+        extraGroups = [ "wheel" "persist" "libvirtd" ];
       };
     };
   };
   security.sudo.extraConfig = ''
     ${username} ALL=(ALL) NOPASSWD: /etc/profiles/per-user/${username}/bin/rebuild
   '';
-  nix.settings.allowed-users = ["${username}"];
+  nix.settings.allowed-users = [ "${username}" ];
 
   time.timeZone = "America/New_York";
   i18n.defaultLocale = "en_US.UTF-8";

hosts/desktop/hardware.nix

@@ -1,21 +1,14 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [
-    (modulesPath + "/installer/scan/not-detected.nix")
-  ];
+{ config, lib, pkgs, modulesPath, ... }: {
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
-  boot.initrd.availableKernelModules = ["nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod"];
-  boot.initrd.kernelModules = [];
-  boot.kernelModules = ["kvm-amd"];
-  boot.extraModulePackages = [];
+  boot.initrd.availableKernelModules =
+    [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
 
   fileSystems."/" = {
     device = "/dev/disk/by-partlabel/disk-main-root";
@@ -30,7 +23,7 @@
   fileSystems."/boot" = {
     device = "/dev/disk/by-partlabel/disk-main-ESP";
     fsType = "vfat";
-    options = ["fmask=0077" "dmask=0077"];
+    options = [ "fmask=0077" "dmask=0077" ];
   };
 
   fileSystems."/home" = {
@@ -38,7 +31,7 @@
     fsType = "ext4";
   };
 
-  swapDevices = [];
+  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
@@ -49,5 +42,6 @@
   # networking.interfaces.wlp15s0.useDHCP = lib.mkDefault true;
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+  hardware.cpu.amd.updateMicrocode =
+    lib.mkDefault config.hardware.enableRedistributableFirmware;
 }