refactoring for iServer and isWorkstation: part 1

hosts/modules/security.nix

@@ -0,0 +1,26 @@
+{ hostType, lib, ... }:
+
+{
+  config = lib.mkMerge [
+    # Common configuration
+    {
+      security = {
+        unprivilegedUsernsClone = true; # Needed for rootless podman
+        sudo = {
+          wheelNeedsPassword = false;
+          extraConfig = ''
+            Defaults lecture = never
+          '';
+        };
+      };
+    }
+
+    # Server specific configuration
+    (lib.mkIf hostType.isServer {
+    })
+
+    # Workstation specific configuration
+    (lib.mkIf hostType.isWorkstation {
+    })
+  ];
+}