Extract a pass module

hosts/PW05CH3L/configuration.nix

@@ -10,6 +10,7 @@
   nixosModules = {
     cli = {
       docker.enable = true;
+      password-store.enable = true;
     };
   };
 

hosts/common/default.nix

@@ -43,16 +43,6 @@
     fastfetch
     mermaid-cli
     mkcert
-    passmenu-otp
-
-    (pass.withExtensions (
-      e: with e; [
-        passExtensions.pass-audit
-        passExtensions.pass-import
-        passExtensions.pass-otp
-        passExtensions.pass-update
-      ]
-    ))
   ];
 
   home-manager = {

hosts/t480/configuration.nix

@@ -13,6 +13,8 @@
   ];
 
   nixosModules = {
+    cli.password-store.enable = true;
+
     core = {
       bluetooth.enable = true;
       openssh.enable = true;

modules/nixos/cli/default.nix

@@ -2,5 +2,6 @@
   imports = [
     ./docker.nix
     ./podman.nix
+    ./password-store.nix
   ];
 }

modules/nixos/cli/password-store.nix

@@ -0,0 +1,30 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+with lib;
+
+let
+  cfg = config.nixosModules.cli.password-store;
+in
+{
+  options.nixosModules.cli.password-store.enable = mkEnableOption "Enable pass";
+
+  config = mkIf cfg.enable {
+    environment.systemPackages = with pkgs; [
+      passmenu-otp
+
+      (pass.withExtensions (
+        e: with e; [
+          passExtensions.pass-audit
+          passExtensions.pass-import
+          passExtensions.pass-otp
+          passExtensions.pass-update
+        ]
+      ))
+    ];
+  };
+}