style(nix): apply style fixes

configs/nixos/modules/network/ssh.nix

@@ -104,8 +104,7 @@ let
   isWorkstation = elem currentHost cfg.hosts.workstations;
 
   defaultAuthorizedKeys = lib.flatten (
-    clientKeysFor workstationNames
-    ++ optional isServer (clientKeysFor serverNames)
+    clientKeysFor workstationNames ++ optional isServer (clientKeysFor serverNames)
   );
 
   outboundTargetNames =
@@ -120,7 +119,8 @@ let
     in
     filter (name: name != currentHost) (targetNamesIn groupTargets);
 
-  sshSettingsFor = name:
+  sshSettingsFor =
+    name:
     let
       target = cfg.targets.${name};
     in
@@ -131,7 +131,8 @@ let
     }
     // optionalAttrs (target.port != 22) { Port = target.port; };
 
-  knownHostNamesFor = target:
+  knownHostNamesFor =
+    target:
     let
       names = unique (target.aliases ++ [ target.hostName ]);
       withPort = name: if target.port == 22 then name else "[${name}]:${toString target.port}";
@@ -142,7 +143,8 @@ let
     concatLists (
       mapAttrsToList (
         targetName: target:
-        imap0 (i: key:
+        imap0 (
+          i: key:
           nameValuePair "${targetName}-${toString i}" {
             hostNames = knownHostNamesFor target;
             publicKey = keyWithoutComment key;
@@ -290,58 +292,56 @@ in
     };
   };
 
-  config = mkIf cfg.enable (
-    mkMerge [
-      {
-        services.openssh.enable = true;
+  config = mkIf cfg.enable (mkMerge [
+    {
+      services.openssh.enable = true;
 
-        users.users.${user}.openssh.authorizedKeys.keys =
-          if cfg.authorizedKeys != null then
-            cfg.authorizedKeys
-          else
-            defaultAuthorizedKeys ++ cfg.extraAuthorizedKeys;
+      users.users.${user}.openssh.authorizedKeys.keys =
+        if cfg.authorizedKeys != null then
+          cfg.authorizedKeys
+        else
+          defaultAuthorizedKeys ++ cfg.extraAuthorizedKeys;
 
-        programs.ssh.knownHosts = knownHosts;
+      programs.ssh.knownHosts = knownHosts;
 
-        home-manager.users.${user}.programs.ssh = {
-          enable = true;
-          enableDefaultConfig = false;
-          settings =
-            mapAttrs (name: _: sshSettingsFor name) (genAttrs outboundTargetNames (name: name))
-            // cfg.extraSettings;
-        };
-      }
+      home-manager.users.${user}.programs.ssh = {
+        enable = true;
+        enableDefaultConfig = false;
+        settings =
+          mapAttrs (name: _: sshSettingsFor name) (genAttrs outboundTargetNames (name: name))
+          // cfg.extraSettings;
+      };
+    }
 
-      (mkIf cfg.hostKeys.restore {
-        assertions = [
-          {
-            assertion = cfg.hostKeys.sopsFile != null;
-            message = "modules.network.ssh.hostKeys.restore requires modules.network.ssh.hostKeys.sopsFile to name the encrypted host keys.";
-          }
-        ];
+    (mkIf cfg.hostKeys.restore {
+      assertions = [
+        {
+          assertion = cfg.hostKeys.sopsFile != null;
+          message = "modules.network.ssh.hostKeys.restore requires modules.network.ssh.hostKeys.sopsFile to name the encrypted host keys.";
+        }
+      ];
 
-        sops.secrets = genAttrs (map hostKeySecret cfg.hostKeys.types) (_: {
-          inherit (cfg.hostKeys) sopsFile;
-          mode = "0400";
-          restartUnits = [ "sshd.service" ];
-        });
+      sops.secrets = genAttrs (map hostKeySecret cfg.hostKeys.types) (_: {
+        inherit (cfg.hostKeys) sopsFile;
+        mode = "0400";
+        restartUnits = [ "sshd.service" ];
+      });
 
-        services.openssh.hostKeys = [ ];
-        services.openssh.extraConfig = concatStringsSep "" (
-          map (type: "HostKey ${config.sops.secrets.${hostKeySecret type}.path}\n") cfg.hostKeys.types
-        );
-      })
+      services.openssh.hostKeys = [ ];
+      services.openssh.extraConfig = concatStringsSep "" (
+        map (type: "HostKey ${config.sops.secrets.${hostKeySecret type}.path}\n") cfg.hostKeys.types
+      );
+    })
 
-      (mkIf (cfg.userKey.sopsFile != null) {
-        sops.secrets.${userKeySecret} = {
-          inherit (cfg.userKey) sopsFile;
-          mode = "0400";
-          owner = user;
-        };
+    (mkIf (cfg.userKey.sopsFile != null) {
+      sops.secrets.${userKeySecret} = {
+        inherit (cfg.userKey) sopsFile;
+        mode = "0400";
+        owner = user;
+      };
 
-        home-manager.users.${user}.programs.ssh.settings."*".IdentityFile =
-          config.sops.secrets.${userKeySecret}.path;
-      })
-    ]
-  );
+      home-manager.users.${user}.programs.ssh.settings."*".IdentityFile =
+        config.sops.secrets.${userKeySecret}.path;
+    })
+  ]);
 }

configs/nixos/modules/network/vlans.nix

@@ -75,10 +75,11 @@ in
     ];
 
     # networkd owns these interfaces so NetworkManager does not contend for them.
-    networking.networkmanager.unmanaged =
-      [ "interface-name:${cfg.trunk}" ]
-      ++ map (id: "interface-name:${bridgeName id}") cfg.ids
-      ++ map (id: "interface-name:${vlanName id}") cfg.ids;
+    networking.networkmanager.unmanaged = [
+      "interface-name:${cfg.trunk}"
+    ]
+    ++ map (id: "interface-name:${bridgeName id}") cfg.ids
+    ++ map (id: "interface-name:${vlanName id}") cfg.ids;
 
     systemd.network = {
       enable = true;

configs/nixos/modules/network/vpn-client.nix

@@ -88,16 +88,18 @@ in
 
     networking.wireguard.interfaces.${cfg.interface} = {
       ips = [ cfg.address ];
-      mtu = cfg.mtu;
+      inherit (cfg) mtu;
       privateKeyFile = config.sops.secrets.${cfg.privateKeySecret}.path;
 
       peers = [
-        ({
-          inherit (cfg.peer) publicKey endpoint allowedIPs;
-        }
-        // lib.optionalAttrs (cfg.peer.persistentKeepalive != null) {
-          inherit (cfg.peer) persistentKeepalive;
-        })
+        (
+          {
+            inherit (cfg.peer) publicKey endpoint allowedIPs;
+          }
+          // lib.optionalAttrs (cfg.peer.persistentKeepalive != null) {
+            inherit (cfg.peer) persistentKeepalive;
+          }
+        )
       ];
     };
   };