roles: Drop k40 and virtualbox. Add lix

modules/lix.nix

@@ -0,0 +1,16 @@
+let
+  module = fetchTarball {
+    name = "source";
+    url = "https://git.lix.systems/lix-project/nixos-module/archive/2.90.0-rc1.tar.gz";
+    sha256 = "sha256-64lB/NO6AQ6z6EDCemPSYZWX/Qc6Rt04cPia5T5v01g=";
+  };
+  lixSrc = fetchTarball {
+    name = "source";
+    url = "https://git.lix.systems/lix-project/lix/archive/2.90.0-rc1.tar.gz";
+    sha256 = "sha256-WY7BGnu5PnbK4O8cKKv9kvxwzZIGbIQUQLGPHFXitI0=";
+  };
+  # This is the core of the code you need; it is an exercise to the
+  # reader to write the sources in a nicer way, or by using npins or
+  # similar pinning tools.
+in
+import "${module}/module.nix" { lix = lixSrc; }

roles/all.nix

@@ -16,7 +16,6 @@ in
     ../modules/ssh.nix
     ../modules/steam.nix
     ../modules/via.nix
-    ../modules/virtualbox.nix
     ../modules/borgbackup.nix
     ../modules/udisks2.nix
     ../modules/samba.nix
@@ -24,6 +23,7 @@ in
     ../modules/sway.nix
     ../modules/nixld.nix
     ../modules/fwupd.nix
+    ../modules/lix.nix
 
     ../secrets/remote-builder.nix
     ../users/fleaz.nix
@@ -60,6 +60,9 @@ in
   # Look mum, I'm using all the new shiny stuff!
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
+  # Enable proprietary firmware
+  hardware.enableAllFirmware = true;
+
   # TMP
   networking.firewall = {
     allowedTCPPorts = [ 3000 ];

roles/laptop.nix

@@ -5,7 +5,6 @@
     ../modules/networkmanager.nix
     ../modules/tlp.nix
     ../modules/sus-then-hib.nix
-    ../modules/k40.nix
   ];
 
 }