nixos: add server conditionals to network manager configuration

ensure wifi mac address is static if host is a server

outputs/lib/containers.nix

@@ -0,0 +1,67 @@
+{lib, ...}: let
+  inherit (builtins) isBool;
+  inherit (lib) toUpper optionalAttrs mapAttrs' nameValuePair;
+
+  # convert homepage attributes to labels
+  mkHomepageLabels = {
+    name,
+    domain,
+    group,
+    widget ? {},
+    ...
+  } @ args: let
+    # common homepage labels
+    commonLabels = mapAttrs' (n: v: nameValuePair "homepage.${n}" (toString v)) {
+      inherit name group;
+      icon = "${name}.svg";
+      href = domain;
+      description = args.description or name;
+    };
+
+    # process widget attributes, flattening them into label format
+    processWidget = attrs:
+      mapAttrs' (n: v:
+        nameValuePair "homepage.widget.${n}" (
+          if isBool v
+          then
+            if v
+            then "true"
+            else "false"
+          else toString v
+        ))
+      attrs;
+  in
+    commonLabels // (processWidget widget);
+
+  mkContainerLabels = {name, ...} @ args: let
+    homepage = args.homepage or {};
+    baseWidget = homepage.widget or {};
+  in
+    # traefik router labels
+    (optionalAttrs (args ? domain) {
+      "traefik.enable" = "true";
+      "traefik.http.routers.${name}.rule" = "Host(`${args.domain}`)";
+      "traefik.http.routers.${name}.entrypoints" = "websecure";
+      "traefik.http.routers.${name}.tls" = "true";
+      "traefik.http.routes.${name}.certresolver" = "cloudflare";
+    })
+    # traefik service labels
+    // (optionalAttrs ((args ? domain) && (args ? port)) {
+      "traefik.http.services.${name}.loadbalancer.server.port" = toString args.port;
+    })
+    # homepage labels
+    // (optionalAttrs (args ? homepage) (mkHomepageLabels {
+      inherit name;
+      inherit (args) domain;
+      group = args.homepage.group or name;
+      widget =
+        baseWidget
+        // {
+          type = name;
+          url = args.domain;
+          key = "{{HOMEPAGE_FILE_${toUpper name}}}";
+        };
+    }));
+in {
+  inherit mkContainerLabels;
+}