use colmena apply-local

flake.nix

@@ -65,27 +65,51 @@
         secrets = lib'.walk-dir ./secrets;
       };
 
-      mkDesktop =
+      mkModule =
-        host:
+        {
-        nixpkgs.lib.nixosSystem {
+          entry,
-          system = "x86_64-linux";
+          isServer ? false,
-          specialArgs = specialArgs // {
+        }:
-            inherit host;
+        {
-          };
+          imports = [
-          modules = [
+            entry
-            (./host + "/${host}")
-            ./home
             ./mod
-          ];
+          ]
+          ++ (if isServer then [ ] else [ ./home ]);
         };
+
+      # Not exposed as flake outputs because they depend on specialArgs
+      # if you add a host, make sure to add it to var/default.nix as well
+      nixosModules = {
+        "solo" = mkModule { entry = ./host/solo; };
+        "c2" = mkModule { entry = ./host/c2; };
+        "fw" = mkModule { entry = ./host/fw; };
+        "roam" = mkModule {
+          entry = ./host/roam;
+          isServer = true;
+        };
+      };
+
     in
     {
-      nixosConfigurations = {
+      nixosConfigurations =
-        # if you add a host, make sure to add it to var/default.nix as well
+        let
-        "solo" = mkDesktop "solo";
+          mkDesktop = host: {
-        "c2" = mkDesktop "c2";
+            name = host;
-        "fw" = mkDesktop "fw";
+            value = nixpkgs.lib.nixosSystem {
+              system = "x86_64-linux";
+              inherit specialArgs;
+              modules = [ (nixosModules.${host}) ];
             };
+          };
+        in
+        lib.listToAttrs (
+          map mkDesktop [
+            "solo"
+            "c2"
+            "fw"
+          ]
+        );
 
       colmenaHive = colmena.lib.makeHive {
         meta = {
@@ -99,10 +123,22 @@
             targetHost = "185.163.117.158";
             buildOnTarget = true;
           };
-          imports = [
+          imports = [ nixosModules."roam" ];
-            ./host/roam
+        };
-            ./mod
+        "solo" = {
-          ];
+          deployment.targetHost = null;
+          deployment.allowLocalDeployment = true;
+          imports = [ nixosModules."solo" ];
+        };
+        "c2" = {
+          deployment.targetHost = null;
+          deployment.allowLocalDeployment = true;
+          imports = [ nixosModules."c2" ];
+        };
+        "fw" = {
+          deployment.targetHost = null;
+          deployment.allowLocalDeployment = true;
+          imports = [ nixosModules."fw" ];
         };
       };
     }

mod/desktop/network.nix

@@ -32,7 +32,7 @@ in
       wg-quick = {
         interfaces = {
           "onet" = {
-            address = var.wg.wireguard-network.${host}.ips;
+            address = var.wg.wireguard-network.${config.networking.hostName}.ips;
             privateKeyFile = var.wg.keyFile;
             peers = [ (lib.removeAttrs var.wg.wireguard-network."roam" [ "ips" ]) ];
             mtu = 1248;