refactor: move auth settings inside machine configuration to modules

machines/calcite/configuration.nix

@@ -208,6 +208,7 @@
     element-desktop
     tdesktop
     qq
+    feishu
 
     # Password manager
     bitwarden
@@ -264,11 +265,6 @@
   custom.forgejo-actions-runner.enable = true;
   custom.forgejo-actions-runner.tokenFile = config.sops.secrets.gitea_env.path;
 
-  custom.prometheus = {
-    enable = true;
-    exporters.enable = true;
-  };
-
   # MTP support
   services.gvfs.enable = true;
 

machines/dolomite/default.nix

@@ -49,8 +49,6 @@ in
     networking.firewall.allowedTCPPorts = [ 80 8080 ];
     networking.firewall.allowedUDPPorts = [ ] ++ (lib.range 6311 6314);
 
-    services.tailscale.enable = true;
-
     custom.prometheus = {
       enable = false;
       exporters.enable = false;

machines/massicot/default.nix

@@ -8,7 +8,7 @@
     ./services.nix
   ];
 
-  commonSettings = {
+  customSettings = {
     auth.enable = true;
     nix.enable = true;
   };

modules/nixos/prometheus.nix

@@ -103,7 +103,7 @@ in
               name = "ntfy";
               webhook_configs = [
                 {
-                  url = "https://ntfy.xinyang.life/prometheus-alerts";
+                  url = "${config.services.ntfy-sh.settings.base-url}/prometheus-alerts";
                   send_resolved = true;
                 }
               ];