refactor(nixos): organize host modules

configs/nixos/modules/host/cachyos.nix

@@ -5,9 +5,9 @@
   ...
 }:
 {
-  options.modules.kernel.cachyos.enable = lib.mkEnableOption "CachyOS kernel";
+  options.modules.host.cachyos.enable = lib.mkEnableOption "CachyOS kernel";
 
-  config = lib.mkIf config.modules.kernel.cachyos.enable {
+  config = lib.mkIf config.modules.host.cachyos.enable {
     boot.kernelPackages = pkgs.linuxPackages_cachyos;
 
     nix.settings.extra-substituters = [ "https://nyx-cache.chaotic.cx/" ];

configs/nixos/modules/host/default.nix

@@ -5,7 +5,7 @@
   ...
 }:
 let
-  hostSecrets = ../secrets + "/${config.networking.hostName}.yaml";
+  hostSecrets = ../../secrets + "/${config.networking.hostName}.yaml";
 in
 {
   options.modules.host.enable = lib.mkEnableOption "physical host configuration";
@@ -33,7 +33,7 @@ in
     services.xserver.xkb.options = "caps:escape_shifted_capslock";
     console.useXkbConfig = true;
 
-    sops.defaultSopsFile = ../secrets/shared.yaml;
+    sops.defaultSopsFile = ../../secrets/shared.yaml;
     sops.age.keyFile = "/var/lib/sops-nix/key.txt";
     sops.age.sshKeyPaths = [ ];
     sops.gnupg.sshKeyPaths = [ ];

configs/nixos/modules/host/zfs.nix

@@ -5,10 +5,10 @@
 }:
 # The host-level ZFS pool import: durable service state a host mounts, never rebuilds.
 let
-  cfg = config.modules.zfs; # NOLINT(let_order)
+  cfg = config.modules.host.zfs; # NOLINT(let_order)
 in
 {
-  options.modules.zfs = {
+  options.modules.host.zfs = {
     enable = lib.mkEnableOption "importing durable ZFS pools that hold service state";
 
     pools = lib.mkOption {