autoupgrade on servers

hosts/tor/default.nix

@@ -4,6 +4,7 @@
     ./tor.nix
     ../../overlays
     ../../modules/base
+    ../../modules/server
     ../../modules/tor
   ];
 

modules/base/system.nix

@@ -17,12 +17,6 @@
   };
   nixpkgs.config.allowUnfree = true;
 
-  system.autoUpgrade = {
-    enable = true;
-    flake = "${config.users.users.caspervk.home}/nixos";
-    flags = [ "--update-input" "nixpkgs" ];
-  };
-
   environment.systemPackages = with pkgs; [
     bat
     clang

modules/server/default.nix

@@ -0,0 +1,5 @@
+{ ... }: {
+  imports = [
+    ./system.nix
+  ];
+}

modules/server/system.nix

@@ -0,0 +1,13 @@
+{ ... }: {
+  # Automatically `nixos-rebuild switch` daily with the latest configuration
+  # from git. This overwrites any uncommitted changes in ~/nixos/, which is why
+  # it is only enabled on servers. Note that this requires updating flake.lock
+  # in the repository periodically (see .gitlab-ci.yml). Alternatively, at the
+  # cost of reproducability, add
+  # flags = [ "--recreate-lock-file" "--no-write-lock-file" ]
+  # to ignore the repository flake.lock and use the latest input versions.
+  system.autoUpgrade = {
+    enable = true;
+    flake = "git+https://git.caspervk.net/caspervk/nixos.git";
+  };
+}