initial scaffold: multi-host flake (poppy, muscari, rosemary)

- flake.nix with mkNixos + mkDarwin dispatchers
- hosts/common/{default.nix} (NixOS shared)
- hosts/common-darwin/{default.nix} (darwin shared)
- hosts/poppy/ (M1 MacBook Air, nix-darwin)
- hosts/muscari/ (k3s server, placeholder)
- hosts/rosemary/ (backup VM, placeholder)
- home/default.nix (home-manager for mikl)
- README.md, garden.md (host naming scheme: plants)
- secrets/.gitkeep

old muscari-only config moved to nix-config-legacy/

hosts/common-darwin/default.nix

@@ -0,0 +1,20 @@
+{ pkgs, ... }:
+{
+  # flake + nix-command
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+
+  # nix daemon (multi-user install)
+  services.nix-daemon.enable = true;
+
+  users.users.mikl = {
+    home = "/Users/mikl";
+    shell = pkgs.zsh;
+  };
+
+  environment.systemPackages = [
+    pkgs.vim
+  ];
+}

hosts/common/default.nix

@@ -0,0 +1,18 @@
+{ pkgs, ... }:
+{
+  # flake + nix-command
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+
+  users.users.mikl = {
+    isNormalUser = true;
+    shell = pkgs.zsh;
+    home = "/home/mikl";
+  };
+
+  environment.systemPackages = [
+    pkgs.vim
+  ];
+}

hosts/muscari/default.nix

@@ -0,0 +1,6 @@
+{ ... }:
+{
+  networking.hostName = "muscari";
+
+  # TODO: migrate from nix-config-legacy/hosts/muscari
+}

hosts/poppy/default.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  networking.hostName = "poppy";
+
+  # Allow unfree packages (some macOS-ported tools need it)
+  nixpkgs.config.allowUnfree = true;
+
+  system.primaryUser = "mikl";
+}

hosts/rosemary/default.nix

@@ -0,0 +1,4 @@
+{ ... }:
+{
+  networking.hostName = "rosemary";
+}