add let/in with aliases

modules/system/default.nix

@@ -12,9 +12,9 @@
 
   modules.system.ssh.enable = lib.mkDefault true;
   modules.system.sops.enable = lib.mkDefault true;
-  modules.system.docker.enable = lib.mkDefault true;
+  modules.system.docker.enable = lib.mkDefault false;
   modules.system.tailscale.enable = lib.mkDefault true;
-  modules.system.syncthing.enable = lib.mkDefault true;
+  modules.system.syncthing.enable = lib.mkDefault false;
   modules.system.nvidia.enable = lib.mkDefault false;
 
 }

modules/system/docker.nix

@@ -1,11 +1,14 @@
 { pkgs, config, lib, ... }:
 
+let
+  cfg = config.modules.system.docker;
+in
 {
-  options = {
-    modules.system.docker.enable = lib.mkEnableOption "enables docker";
+  options.modules.system.docker = {
+    enable = lib.mkEnableOption "enables docker";
   };
 
-  config = lib.mkIf config.modules.system.docker.enable {
+  config = lib.mkIf cfg.enable {
     virtualisation.docker = {
       enable = true;
       daemon.settings = {

modules/system/nvidia.nix

@@ -1,11 +1,14 @@
 { pkgs, config, lib, ... }:
 
+let
+  cfg = config.modules.system.nvidia;
+in
 {
-  options = {
-    modules.system.nvidia.enable = lib.mkEnableOption "enables nvidia";
+  options.modules.system.nvidia = {
+    enable = lib.mkEnableOption "enables nvidia";
   };
 
-  config = lib.mkIf config.modules.system.nvidia.enable {
+  config = lib.mkIf cfg.enable {
     # enable nvidia proprietary driver
     hardware.nvidia = {
       modesetting.enable = true;  # required

modules/system/sops.nix

@@ -1,13 +1,16 @@
 { pkgs, config, lib, inputs, ... }:
 
+let
+  cfg = config.modules.system.sops;
+in
 {
   imports = [ inputs.sops-nix.nixosModules.sops ];
 
-  options = {
-    modules.system.sops.enable = lib.mkEnableOption "enables ssh";
+  options.modules.system.sops = {
+    enable = lib.mkEnableOption "enables sops";
   };
 
-  config = lib.mkIf config.modules.system.sops.enable {
+  config = lib.mkIf cfg.enable {
     # enable and configure sops for secrets
     sops.defaultSopsFile = ../../secrets/secrets.yaml;
     sops.defaultSopsFormat = "yaml";

modules/system/ssh.nix

@@ -1,11 +1,14 @@
 { pkgs, config, lib, ... }:
 
+let
+  cfg = config.modules.system.ssh;
+in
 {
-  options = {
-    modules.system.ssh.enable = lib.mkEnableOption "enables ssh";
+  options.modules.system.ssh = {
+    enable = lib.mkEnableOption "enables ssh";
   };
 
-  config = lib.mkIf config.modules.system.ssh.enable {
+  config = lib.mkIf cfg.enable {
     # enable and configure openssh
     services.openssh = {
       enable = true;

modules/system/syncthing.nix

@@ -1,11 +1,14 @@
 { pkgs, config, lib, ... }:
 
+let
+  cfg = config.modules.system.syncthing;
+in
 {
-  options = {
-    modules.system.syncthing.enable = lib.mkEnableOption "enables syncthing";
+  options.modules.system.syncthing = {
+    enable = lib.mkEnableOption "enables syncthing";
   };
 
-  config = lib.mkIf config.modules.system.syncthing.enable {
+  config = lib.mkIf cfg.enable {
     services.syncthing = {
       enable = true;
       user = "blake";

modules/system/tailscale.nix

@@ -1,15 +1,19 @@
 { pkgs, config, lib, ... }:
 
+let
+  cfg = config.modules.system.tailscale;
+  authkey_file = "/run/secrets/tailscale_authkey";
+in
 {
-  options = {
-    modules.system.tailscale.enable = lib.mkEnableOption "enables tailscale";
+  options.modules.system.tailscale = {
+    enable = lib.mkEnableOption "enables tailscale";
   };
 
-  config = lib.mkIf config.modules.system.tailscale.enable {
+  config = lib.mkIf cfg.enable {
     services.tailscale = {
       enable = true;
       useRoutingFeatures = "both";
-      authKeyFile = "/run/secrets/tailscale_authkey";
+      authKeyFile = authkey_file;
     };
   };
 }