revamp of structure

devices/p14s/default.nix

@@ -1,45 +1,48 @@
 { pkgs, lib, ... }:
 {
   imports = [
-    ../../common
+    ../../modules/nixos
+    ../../modules/boot
+    ../../modules/
+    ../../modules/boot/plymouth.nix
+    ../../modules/boot/secure-boot.nix
     ./hardware-configuration.nix
   ];
 
   networking.hostName = "p14s";
-  
-  # secure boot shit
-  environment.systemPackages = [ pkgs.sbctl ];
-  boot.loader.systemd-boot.enable = lib.mkForce false;
-  
-  boot.lanzaboote = {
-    enable = true;
-    pkiBundle = "/var/lib/sbctl";
-    autoGenerateKeys.enable = true;
-    autoEnrollKeys = {
-      enable = true;
-      autoReboot = true;
-    };
-    configurationLimit = 5;
-  }; 
 
-  # swap & hibernate 
+  # swap & hibernate
   boot.initrd.luks.devices."luks-d51bdb99-5966-40d3-a920-83ea78a73699" = {
     device = "/dev/disk/by-uuid/d51bdb99-5966-40d3-a920-83ea78a73699";
     crypttabExtraOpts = [ "tpm2-device=auto" ];
   };
   boot.kernelParams = [ "resume=/dev/disk/by-uuid/d51bdb99-5966-40d3-a920-83ea78a73699" ];
   
-  # vm definition
-  virtualisation.vmVariant = {
-    virtualisation = {
-      memorySize = 8192;
-      cores = 6;
-    };
+  boot.initrd.checkJournalingFS = false; 
 
-    environment.systemPackages = with pkgs; [
-      spice-vdagent
+  hardware.graphics = {
+    enable = true;
+    enable32Bit = true;
+    extraPackages = with pkgs; [
+      mesa
+      vulkan-loader
+      vulkan-validation-layers
+    ];
+    extraPackages32 = with pkgs.pkgsi686Linux; [
+      mesa
+      vulkan-loader
     ];
   };
 
+  networking.firewall.allowedTCPPorts = [
+    22
+    8080
+  ];
+  networking.firewall.allowedUDPPorts = [ 8080 ];
+  networking.firewall.trustedInterfaces = [
+    "virbr0"
+    "docker0"
+  ];
+
   system.stateVersion = "26.05"; # yes
-}
+}