refactor: split server modules into smaller more manageable files

modules/nixos-modules/server/actual/const.nix

@@ -0,0 +1,3 @@
+{
+  dataDirectory = "/var/lib/actual/";
+}

modules/nixos-modules/server/actual/default.nix

@@ -0,0 +1,34 @@
+{
+  lib,
+  config,
+  ...
+}: let
+  const = import ./const.nix;
+  dataDirectory = const.dataDirectory;
+in {
+  imports = [
+    ./proxy.nix
+    ./fail2ban.nix
+    ./impermanence.nix
+  ];
+
+  options.services.actual = {
+    subdomain = lib.mkOption {
+      type = lib.types.str;
+      default = "actual";
+      description = "subdomain of base domain that actual will be hosted at";
+    };
+  };
+
+  config = lib.mkIf config.services.actual.enable {
+    systemd.tmpfiles.rules = [
+      "d ${dataDirectory} 2770 actual actual"
+    ];
+
+    services.actual = {
+      settings = {
+        ACTUAL_DATA_DIR = dataDirectory;
+      };
+    };
+  };
+}

modules/nixos-modules/server/actual/fail2ban.nix

@@ -0,0 +1,9 @@
+{
+  lib,
+  config,
+  ...
+}: {
+  config = lib.mkIf (config.services.actual.enable && config.services.fail2ban.enable) {
+    # TODO: configuration for fail2ban for actual
+  };
+}

modules/nixos-modules/server/actual/impermanence.nix

@@ -0,0 +1,26 @@
+{
+  lib,
+  config,
+  ...
+}: let
+  const = import ./const.nix;
+  dataDirectory = const.dataDirectory;
+in {
+  config = lib.mkIf (config.services.actual.enable && config.host.impermanence.enable) {
+    assertions = [
+      {
+        assertion = config.services.actual.settings.ACTUAL_DATA_DIR == dataDirectory;
+        message = "actual data location does not match persistence";
+      }
+    ];
+    environment.persistence."/persist/system/root" = {
+      directories = [
+        {
+          directory = dataDirectory;
+          user = "actual";
+          group = "actual";
+        }
+      ];
+    };
+  };
+}

modules/nixos-modules/server/actual/proxy.nix

@@ -0,0 +1,13 @@
+{
+  lib,
+  config,
+  ...
+}: {
+  config = lib.mkIf (config.services.actual.enable && config.host.reverse_proxy.enable) {
+    host = {
+      reverse_proxy.subdomains.${config.services.actual.subdomain} = {
+        target = "http://localhost:${toString config.services.actual.settings.port}";
+      };
+    };
+  };
+}