23 files changed, 31 insertions, 31 deletions
diff --git a/deploy b/deploy
index d435ec8b..03a20017 100755
--- a/deploy
+++ b/deploy
@@ -1,6 +1,6 @@
 #! /bin/sh
 #
-# usage: ./deploy CONFIG [[USER@]HOST]
+# usage: ./deploy HOST [[USER@]HOST]
 #
 set -euf
 
@@ -9,7 +9,7 @@ set -euf
 user=root
 host=$1
 
-config=./$host.nix
+config=./modules/$host/default.nix
 target=${2-$user@$host}
 
 verbose deploy "$config" "$target"
diff --git a/infest b/infest
index cf946848..140a317b 100755
--- a/infest
+++ b/infest
@@ -76,7 +76,7 @@ infest_centos7_64bit() {
   target="root@$address"
 
   ./networking-configuration $cac_servername $hostname \
-    > modules/networking-$hostname.nix
+    > modules/$hostname/networking.nix
 
   echo '(
     set -xeuf
diff --git a/cd.nix b/modules/cd/default.nix
index c2a34172..a4e6bbc7 100644
--- a/cd.nix
+++ b/modules/cd/default.nix
@@ -4,13 +4,13 @@
   imports =
     [
       <secrets/hashedPasswords.nix>
-      ./modules/sanitize.nix
-      ./modules/base-cac-CentOS-7-64bit.nix
-      ./modules/exim-cd.nix
-      ./modules/ejabberd-cd.nix # XXX echtes modul
-      ./modules/iptables-cd.nix
-      ./modules/networking-cd.nix
-      ./modules/retiolum.nix
+      ./iptables.nix
+      ./networking.nix
+      ../tv/base-cac-CentOS-7-64bit.nix
+      ../tv/ejabberd.nix # XXX echtes modul
+      ../tv/exim-smarthost.nix
+      ../tv/retiolum.nix
+      ../tv/sanitize.nix
     ];
 
   # "Developer 2" plan has two vCPUs.
@@ -54,7 +54,7 @@
 
   services.retiolum = {
     enable = true;
-    hosts = ./hosts;
+    hosts = /etc/nixos/hosts;
     privateKeyFile = "/etc/nixos/secrets/cd.retiolum.rsa_key.priv";
     connectTo = [
       "fastpoke"
diff --git a/modules/iptables-cd.nix b/modules/cd/iptables.nix
index 48425e8d..48425e8d 100644
--- a/modules/iptables-cd.nix
+++ b/modules/cd/iptables.nix
diff --git a/modules/networking-cd.nix b/modules/cd/networking.nix
index 215e2082..215e2082 100644
--- a/modules/networking-cd.nix
+++ b/modules/cd/networking.nix
diff --git a/modules/urxvtd.nix b/modules/lass/urxvtd.nix
index 7eb471ed..a62e64a9 100644
--- a/modules/urxvtd.nix
+++ b/modules/lass/urxvtd.nix
@@ -1,7 +1,7 @@
 { config, lib, pkgs, ... }:
 
 let
-  inherit (import ../lib { inherit pkgs; }) shell-escape;
+  inherit (import ../../lib { inherit pkgs; }) shell-escape;
   inherit (pkgs) writeScript;
 in
 
diff --git a/mu.nix b/modules/mu/default.nix
index d94594f0..baec9bf8 100644
--- a/mu.nix
+++ b/modules/mu/default.nix
@@ -3,7 +3,7 @@
 { config, pkgs, ... }:
 
 let
-  lib = import ./lib { inherit pkgs; };
+  lib = import ../../lib { inherit pkgs; };
 
   inherit (lib) majmin;
 in
@@ -11,9 +11,9 @@ in
 {
   imports = [
     <secrets/hashedPasswords.nix>
-    ./modules/sanitize.nix
-    ./modules/exim.nix
-    ./modules/retiolum.nix
+    ../tv/exim-retiolum.nix
+    ../tv/retiolum.nix
+    ../tv/sanitize.nix
   ];
 
   time.timeZone = "Europe/Berlin";
diff --git a/modules/base-cac-CentOS-7-64bit.nix b/modules/tv/base-cac-CentOS-7-64bit.nix
index 42ab481b..42ab481b 100644
--- a/modules/base-cac-CentOS-7-64bit.nix
+++ b/modules/tv/base-cac-CentOS-7-64bit.nix
diff --git a/modules/base.nix b/modules/tv/base.nix
index 76c8b897..76c8b897 100644
--- a/modules/base.nix
+++ b/modules/tv/base.nix
diff --git a/modules/ejabberd-cd.nix b/modules/tv/ejabberd.nix
index e836d2cd..e836d2cd 100644
--- a/modules/ejabberd-cd.nix
+++ b/modules/tv/ejabberd.nix
diff --git a/modules/exim.nix b/modules/tv/exim-retiolum.nix
index e80358fc..e80358fc 100644
--- a/modules/exim.nix
+++ b/modules/tv/exim-retiolum.nix
diff --git a/modules/exim-cd.nix b/modules/tv/exim-smarthost.nix
index a4c47b39..a4c47b39 100644
--- a/modules/exim-cd.nix
+++ b/modules/tv/exim-smarthost.nix
diff --git a/modules/nginx.nix b/modules/tv/nginx.nix
index 8b420613..8b420613 100644
--- a/modules/nginx.nix
+++ b/modules/tv/nginx.nix
diff --git a/modules/retiolum.nix b/modules/tv/retiolum.nix
index 578547af..578547af 100644
--- a/modules/retiolum.nix
+++ b/modules/tv/retiolum.nix
diff --git a/modules/sanitize.nix b/modules/tv/sanitize.nix
index b6c749b6..b6c749b6 100644
--- a/modules/sanitize.nix
+++ b/modules/tv/sanitize.nix
diff --git a/modules/synaptics.nix b/modules/tv/synaptics.nix
index c47cb9de..c47cb9de 100644
--- a/modules/synaptics.nix
+++ b/modules/tv/synaptics.nix
diff --git a/modules/tools.nix b/modules/tv/tools.nix
index 4be84a6b..cf3fda93 100644
--- a/modules/tools.nix
+++ b/modules/tv/tools.nix
@@ -5,7 +5,7 @@ let
   inherit (lib.strings) concatStringsSep stringAsChars;
   inherit (lib.attrsets) attrValues mapAttrs;
   inherit (lib) makeSearchPath;
-  inherit (import ../lib { inherit pkgs; }) shell-escape;
+  inherit (import ../../lib { inherit pkgs; }) shell-escape;
 
 
   # TODO make these scripts available in an maintenance shell
diff --git a/modules/urxvt-tv.nix b/modules/tv/urxvt.nix
index a9758124..a9758124 100644
--- a/modules/urxvt-tv.nix
+++ b/modules/tv/urxvt.nix
diff --git a/modules/users.nix b/modules/tv/users.nix
index 79a00e3a..f42ba33c 100644
--- a/modules/users.nix
+++ b/modules/tv/users.nix
@@ -189,7 +189,7 @@ let
   sudoers =
     let
       inherit (builtins) filter hasAttr;
-      inherit (import ../lib { inherit pkgs; }) concat isSuffixOf removeSuffix setToList;
+      inherit (import ../../lib { inherit pkgs; }) concat isSuffixOf removeSuffix setToList;
 
       hasMaster = { group ? "", ... }:
         isSuffixOf "-sub" group;
diff --git a/modules/xserver.nix b/modules/tv/xserver.nix
index 897dbcc2..897dbcc2 100644
--- a/modules/xserver.nix
+++ b/modules/tv/xserver.nix
diff --git a/wu.nix b/modules/wu/default.nix
index e84e3169..f586552e 100644
--- a/wu.nix
+++ b/modules/wu/default.nix
@@ -1,25 +1,25 @@
 { config, pkgs, ... }:
 
 let
-  lib = import ./lib { inherit pkgs; };
+  lib = import ../../lib { inherit pkgs; };
 
   inherit (lib) majmin;
 in
 
 {
   imports = [
-    ./modules/sanitize.nix
-    ./modules/base.nix
-    ./modules/retiolum.nix
-    ./modules/urxvt-tv.nix
-    ./modules/iptables.nix
-    ./modules/users.nix
-    #./modules/tools.nix
-    ./modules/hosts.nix
-    ./modules/xserver.nix
-    ./modules/synaptics.nix
-    ./modules/exim.nix
-    ./modules/nginx.nix
+    ./hosts.nix
+    ./iptables.nix
+    ../tv/base.nix
+    ../tv/exim-retiolum.nix
+    ../tv/nginx.nix
+    ../tv/retiolum.nix
+    ../tv/sanitize.nix
+    ../tv/synaptics.nix
+    #../tv/tools.nix
+    ../tv/urxvt.nix
+    ../tv/users.nix
+    ../tv/xserver.nix
   ];
 
   services.udev.extraRules = ''
diff --git a/modules/hosts.nix b/modules/wu/hosts.nix
index f59f87cc..f59f87cc 100644
--- a/modules/hosts.nix
+++ b/modules/wu/hosts.nix
diff --git a/modules/iptables.nix b/modules/wu/iptables.nix
index ee403432..ee403432 100644
--- a/modules/iptables.nix
+++ b/modules/wu/iptables.nix