major refactor

- `mkHost` now accepts an optional `specialArgs` argument to be passed to
  `nixosSystem()`
- the `modules` argument for `mkHMUser` is now optional

1 files changed, 4 insertions, 6 deletions

diff --git a/hosts/common/security.nix b/hosts/common/security.nix
index 04ae595..ed9be36 100644
--- a/hosts/common/security.nix
+++ b/hosts/common/security.nix
@@ -1,10 +1,8 @@
-{config, ...}: let
-	value = config.sys.wsl.enable;
-in {
+{wsl, ...}: {
 	security = {
-		apparmor.enable = value;
-		audit.enable = value;
-		auditd.enable = value;
+		apparmor.enable = !wsl;
+		audit.enable = !wsl;
+		auditd.enable = !wsl;
 		rtkit.enable = true;
 		sudo = {
 			configFile = ''