nixos: migrate server services to thegeneralist

Move hosted services and secrets from the retired central hosts, persist USB storage and ownership, harden RTL8822BU Wi-Fi, repair DNS behavior, and order CoreDNS after Tailscale.

modules/linux/dns.nix

@@ -6,8 +6,8 @@ in {
 
     settings.Resolve = {
       DNS = config.dnsServers;
-      DNSSEC = true;
-      DNSOverTLS = true;
+      DNSSEC = "allow-downgrade";
+      DNSOverTLS = "opportunistic";
     };
   };
 }

modules/linux/networking.nix

@@ -1,5 +1,5 @@
-{ config, ... }: {
-  networking.hostName = if config.isServer then "thegeneralist-central" else "thegeneralist";
+{ ... }: {
+  networking.hostName = "thegeneralist";
   networking.networkmanager.enable = true;
   networking.networkmanager.wifi.powersave = false;
 }

modules/linux/printers.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }: {
+{ ... }: {
   # Enable CUPS to print documents.
   services.printing.enable = true;
 
@@ -10,9 +10,5 @@
     pulse.enable = true;
   };
 
-  # Epson proprietary backend
   hardware.sane.enable = true;
-  hardware.sane.extraBackends = [
-    pkgs.epkowa
-  ];
 }