From e8e69c917dbfec6cc7991c5876ffaff2dd6d2602 Mon Sep 17 00:00:00 2001
From: isabel <isabel@isabelroses.com>
Date: Mon, 17 Aug 2026 11:49:34 +0100
Subject: [PATCH] treewide: rewrite lib usage

---
 home/isabel/ghostty.nix                        | 4 ++--
 home/isabel/hyprland/default.nix               | 4 ++--
 home/isabel/mpv.nix                            | 2 +-
 home/isabel/vicinae/extension.nix              | 4 ++--
 modules/base/catppuccin.nix                    | 2 +-
 modules/base/nix/environment.nix               | 2 +-
 modules/base/system/fonts.nix                  | 2 +-
 modules/flake/checks/default.nix               | 4 ++--
 modules/flake/default.nix                      | 4 ++--
 modules/flake/lib/mkhost.nix                   | 2 +-
 modules/flake/packages/default.nix             | 2 +-
 modules/flake/packages/docs/lib.nix            | 4 ++--
 modules/flake/packages/docs/options.nix        | 2 +-
 modules/flake/programs/formatter.nix           | 2 +-
 modules/home/environment/xdg.nix               | 6 +++---
 modules/iso/image.nix                          | 2 +-
 modules/nixos/catppuccin.nix                   | 2 +-
 modules/nixos/emulation.nix                    | 2 +-
 modules/nixos/environment/console.nix          | 2 +-
 modules/nixos/environment/locale.nix           | 6 +++---
 modules/nixos/hardware/cloud/oracle/garden.nix | 2 +-
 modules/nixos/hardware/cloud/overrides.nix     | 2 +-
 modules/nixos/hardware/media/sound.nix         | 2 +-
 modules/nixos/headless.nix                     | 2 +-
 modules/nixos/networking/tailscale.nix         | 4 ++--
 modules/nixos/services/arr.nix                 | 2 +-
 modules/nixos/services/borgbackup.nix          | 2 +-
 modules/nixos/services/forgejo.nix             | 4 ++--
 modules/nixos/services/mailserver.nix          | 4 ++--
 modules/nixos/services/matrix.nix              | 2 +-
 modules/nixos/services/postgresql.nix          | 2 +-
 modules/nixos/services/snot.nix                | 4 ++--
 modules/nixos/services/vaultwarden.nix         | 2 +-
 modules/nixos/services/wakapi.nix              | 2 +-
 modules/nixos/system/runners.nix               | 2 +-
 modules/nixos/system/terminfo.nix              | 2 +-
 systems/freyja/default.nix                     | 2 +-
 37 files changed, 51 insertions(+), 51 deletions(-)

diff --git a/home/isabel/ghostty.nix b/home/isabel/ghostty.nix
index 4bbe769a..e26b131d 100644
--- a/home/isabel/ghostty.nix
+++ b/home/isabel/ghostty.nix
@@ -23,8 +23,8 @@ in
       window-save-state = "always";
 
       # let fontconfig handle this on linux
-      font-family = lib.mkIf isDarwin config.garden.style.fonts.name;
-      font-size = lib.mkIf isDarwin 13;
+      font-family = lib.modules.mkIf isDarwin config.garden.style.fonts.name;
+      font-size = lib.modules.mkIf isDarwin 13;
 
       # home-manager does this for us
       shell-integration = "none";
diff --git a/home/isabel/hyprland/default.nix b/home/isabel/hyprland/default.nix
index 20ba18c0..bc016a60 100644
--- a/home/isabel/hyprland/default.nix
+++ b/home/isabel/hyprland/default.nix
@@ -19,9 +19,9 @@ let
   }) monitors;
 in
 {
-  options.programs.hyprland.enable = lib.mkEnableOption "Enable Hyprland as the Wayland window manager";
+  options.programs.hyprland.enable = lib.options.mkEnableOption "Enable Hyprland as the Wayland window manager";
 
-  config = lib.mkIf config.programs.hyprland.enable {
+  config = lib.modules.mkIf config.programs.hyprland.enable {
     garden.packages = { inherit (pkgs) hyprpicker cosmic-files; };
 
     wayland.windowManager.hyprland = {
diff --git a/home/isabel/mpv.nix b/home/isabel/mpv.nix
index aba287f4..cf36865a 100644
--- a/home/isabel/mpv.nix
+++ b/home/isabel/mpv.nix
@@ -45,7 +45,7 @@ in
             # mpv as our image viewer
             mpv-image-viewer.image-positioning
           ])
-          ++ lib.optionals pkgs.stdenv.hostPlatform.isLinux [
+          ++ lib.lists.optionals pkgs.stdenv.hostPlatform.isLinux [
             pkgs.mpvScripts.mpris
           ];
       };
diff --git a/home/isabel/vicinae/extension.nix b/home/isabel/vicinae/extension.nix
index ebfafb0f..61cf2b6a 100644
--- a/home/isabel/vicinae/extension.nix
+++ b/home/isabel/vicinae/extension.nix
@@ -3,7 +3,7 @@
   buildNpmPackage,
   fetchFromGitHub,
 }:
-lib.extendMkDerivation {
+lib.customisation.extendMkDerivation {
   constructDrv = buildNpmPackage;
 
   extendDrvArgs =
@@ -14,7 +14,7 @@ lib.extendMkDerivation {
       type ? "vicinae",
       ...
     }@args:
-    lib.checkListOfEnum "${finalAttrs.pname}: type must be one of vicinae or raycast"
+    lib.trivial.checkListOfEnum "${finalAttrs.pname}: type must be one of vicinae or raycast"
       [ "vicinae" "raycast" ]
       [ type ]
       {
diff --git a/modules/base/catppuccin.nix b/modules/base/catppuccin.nix
index cc007e7e..657e2808 100644
--- a/modules/base/catppuccin.nix
+++ b/modules/base/catppuccin.nix
@@ -22,7 +22,7 @@
 
           postBuild = ''
             wrapProgram $out/bin/whiskers \
-              --add-flag ${lib.escapeShellArg "--color-overrides=${
+              --add-flag ${lib.strings.escapeShellArg "--color-overrides=${
                 builtins.toJSON {
                   mocha = {
                     base = "000000";
diff --git a/modules/base/nix/environment.nix b/modules/base/nix/environment.nix
index 6e159634..e26c1960 100644
--- a/modules/base/nix/environment.nix
+++ b/modules/base/nix/environment.nix
@@ -1,5 +1,5 @@
 { lib, ... }:
 {
   # https://github.com/NixOS/nixpkgs/blob/eca4605163a534aed1981de0f5f1d7d7639d1640/nixos/modules/programs/environment.nix#L18
-  environment.variables.NIXPKGS_CONFIG = lib.mkForce "";
+  environment.variables.NIXPKGS_CONFIG = lib.modules.mkForce "";
 }
diff --git a/modules/base/system/fonts.nix b/modules/base/system/fonts.nix
index 46f48c34..3c163919 100644
--- a/modules/base/system/fonts.nix
+++ b/modules/base/system/fonts.nix
@@ -4,7 +4,7 @@
   ...
 }:
 {
-  fonts.packages = lib.attrValues {
+  fonts.packages = lib.attrsets.attrValues {
     inherit (pkgs)
       corefonts
 
diff --git a/modules/flake/checks/default.nix b/modules/flake/checks/default.nix
index efdcdc66..ade30f0e 100644
--- a/modules/flake/checks/default.nix
+++ b/modules/flake/checks/default.nix
@@ -3,7 +3,7 @@
 let
   inherit (pkgs) lib;
 
-  scope = lib.makeScope pkgs.newScope (scopeSelf: {
+  scope = lib.customisation.makeScope pkgs.newScope (scopeSelf: {
     inherit (inputs) self;
 
     # keep-sorted start block=yes newline_separated=yes
@@ -17,4 +17,4 @@ let
 
 in
 
-lib.filterAttrs (_: lib.isDerivation) scope
+lib.attrsets.filterAttrs (_: lib.attrsets.isDerivation) scope
diff --git a/modules/flake/default.nix b/modules/flake/default.nix
index 75b431a7..55a6b750 100644
--- a/modules/flake/default.nix
+++ b/modules/flake/default.nix
@@ -11,9 +11,9 @@ let
     "aarch64-darwin"
   ];
 
-  forAllSystems = fn: lib.genAttrs systems (system: fn nixpkgs.legacyPackages.${system});
+  forAllSystems = fn: lib.attrsets.genAttrs systems (system: fn nixpkgs.legacyPackages.${system});
 
-  mkHosts = lib.mapAttrs self.lib.mkHost;
+  mkHosts = lib.attrsets.mapAttrs self.lib.mkHost;
 in
 
 {
diff --git a/modules/flake/lib/mkhost.nix b/modules/flake/lib/mkhost.nix
index 08521f16..f06b07eb 100644
--- a/modules/flake/lib/mkhost.nix
+++ b/modules/flake/lib/mkhost.nix
@@ -99,7 +99,7 @@ evalHost {
   ]
   # if we are on darwin we need to import the nixpkgs source, its used in some
   # modules, if this is not set then you will get an error
-  ++ lib.optional (class == "darwin") {
+  ++ lib.lists.optional (class == "darwin") {
     key = "dotfiles#nixpkgs-darwin";
     _file = "${__curPos.file}";
 
diff --git a/modules/flake/packages/default.nix b/modules/flake/packages/default.nix
index 138dc736..899cf972 100644
--- a/modules/flake/packages/default.nix
+++ b/modules/flake/packages/default.nix
@@ -1,7 +1,7 @@
 # I would highly advise you do not use my flake as an input and instead you vendor this
 # if you want to use this code.
 { pkgs, inputs, ... }:
-removeAttrs (pkgs.lib.makeScope pkgs.newScope (self: {
+removeAttrs (pkgs.lib.customisation.makeScope pkgs.newScope (self: {
   inherit inputs;
 
   # keep-sorted start block=yes newline_separated=yes
diff --git a/modules/flake/packages/docs/lib.nix b/modules/flake/packages/docs/lib.nix
index f8844ec8..8b8a9193 100644
--- a/modules/flake/packages/docs/lib.nix
+++ b/modules/flake/packages/docs/lib.nix
@@ -45,13 +45,13 @@ stdenvNoCC.mkDerivation {
       nixdoc -c "$name" -d "lib.$name: $description" -f "$name.nix" > "$out/$name.md"
     }
 
-    ${lib.concatMapStrings (
+    ${lib.strings.concatMapStrings (
       {
         name,
         description,
       }:
       ''
-        docgen ${name} ${lib.escapeShellArg description}
+        docgen ${name} ${lib.strings.escapeShellArg description}
       ''
     ) libset}
 
diff --git a/modules/flake/packages/docs/options.nix b/modules/flake/packages/docs/options.nix
index ed4b9020..ba9d9592 100644
--- a/modules/flake/packages/docs/options.nix
+++ b/modules/flake/packages/docs/options.nix
@@ -56,7 +56,7 @@ let
               let
                 declStr = toString decl;
               in
-              if lib.hasPrefix selfStr declStr then
+              if lib.strings.hasPrefix selfStr declStr then
                 gitHubDeclaration "isabelroses" "dotfiles" (removePrefix "/" (removePrefix selfStr declStr))
               else
                 decl
diff --git a/modules/flake/programs/formatter.nix b/modules/flake/programs/formatter.nix
index 1b5b513c..71908b9d 100644
--- a/modules/flake/programs/formatter.nix
+++ b/modules/flake/programs/formatter.nix
@@ -39,7 +39,7 @@ treefmt.withConfig {
 
     (writeShellScriptBin "statix-fix" ''
       for file in "$@"; do
-        ${lib.getExe statix} fix "$file"
+        ${lib.meta.getExe statix} fix "$file"
       done
     '')
   ];
diff --git a/modules/home/environment/xdg.nix b/modules/home/environment/xdg.nix
index 8710fc6d..4d5bcccc 100644
--- a/modules/home/environment/xdg.nix
+++ b/modules/home/environment/xdg.nix
@@ -64,8 +64,8 @@ let
     };
   };
 
-  associations' = lib.concatMapAttrs (
-    _: val: lib.listToAttrs (lib.map (mt: lib.nameValuePair mt "${val.app}.desktop") val.mimeTypes)
+  associations' = lib.attrsets.concatMapAttrs (
+    _: val: lib.attrsets.listToAttrs (lib.lists.map (mt: lib.attrsets.nameValuePair mt "${val.app}.desktop") val.mimeTypes)
   ) appsToAssoc;
 
   specifics = {
@@ -117,7 +117,7 @@ in
       defaultApplications = associations;
     };
 
-    portal.enable = lib.mkForce false;
+    portal.enable = lib.modules.mkForce false;
   };
 
   # You can generate something like this using xdg-ninja
diff --git a/modules/iso/image.nix b/modules/iso/image.nix
index dc75a9d6..660ad7ca 100644
--- a/modules/iso/image.nix
+++ b/modules/iso/image.nix
@@ -7,7 +7,7 @@
 }:
 let
   inherit (lib.sources) cleanSource;
-  inherit (lib) mkImageMediaOverride;
+  inherit (lib.modules) mkImageMediaOverride;
 
   # Get the hostname from our networking name provided in the mkNixosIso builder
   # If none is set then default to "nixos"
diff --git a/modules/nixos/catppuccin.nix b/modules/nixos/catppuccin.nix
index e729a1d9..ba3be899 100644
--- a/modules/nixos/catppuccin.nix
+++ b/modules/nixos/catppuccin.nix
@@ -11,7 +11,7 @@
     # pick our ports
     catppuccin.forgejo.enable = true;
 
-    console.colors = lib.mkIf config.catppuccin.enable [
+    console.colors = lib.modules.mkIf config.catppuccin.enable [
       "000000"
       "f38ba8"
       "a6e3a1"
diff --git a/modules/nixos/emulation.nix b/modules/nixos/emulation.nix
index 09cf20c0..7e26e891 100644
--- a/modules/nixos/emulation.nix
+++ b/modules/nixos/emulation.nix
@@ -11,7 +11,7 @@ let
   inherit (lib.options) mkOption mkEnableOption;
   inherit (lib.strings) splitString;
   inherit (lib.trivial) flip pipe;
-  inherit (lib) filter;
+  inherit (lib.lists) filter;
   inherit (lib.types)
     listOf
     str
diff --git a/modules/nixos/environment/console.nix b/modules/nixos/environment/console.nix
index 90826045..1d2f3fad 100644
--- a/modules/nixos/environment/console.nix
+++ b/modules/nixos/environment/console.nix
@@ -1,7 +1,7 @@
 { lib, pkgs, ... }:
 {
   console = {
-    enable = lib.mkDefault true;
+    enable = lib.modules.mkDefault true;
     earlySetup = true;
 
     keyMap = "en";
diff --git a/modules/nixos/environment/locale.nix b/modules/nixos/environment/locale.nix
index 4fc024a0..22f241a2 100644
--- a/modules/nixos/environment/locale.nix
+++ b/modules/nixos/environment/locale.nix
@@ -1,14 +1,14 @@
 { lib, config, ... }:
 {
   time = {
-    timeZone = lib.mkDefault (if config.garden.profiles.server.enable then "UTC" else "Europe/London");
+    timeZone = lib.modules.mkDefault (if config.garden.profiles.server.enable then "UTC" else "Europe/London");
     hardwareClockInLocalTime = true;
   };
 
   i18n = {
-    defaultLocale = lib.mkDefault "en_GB.UTF-8";
+    defaultLocale = lib.modules.mkDefault "en_GB.UTF-8";
 
-    extraLocales = lib.mkDefault [
+    extraLocales = lib.modules.mkDefault [
       "en_US.UTF-8/UTF-8"
       "en_GB.UTF-8/UTF-8"
     ];
diff --git a/modules/nixos/hardware/cloud/oracle/garden.nix b/modules/nixos/hardware/cloud/oracle/garden.nix
index 4cfd8724..ee038de5 100644
--- a/modules/nixos/hardware/cloud/oracle/garden.nix
+++ b/modules/nixos/hardware/cloud/oracle/garden.nix
@@ -8,7 +8,7 @@ in
     enable = mkEnableOption "Oracle Cloud profile";
   };
 
-  config = lib.mkIf config.garden.profiles.oracle.enable {
+  config = lib.modules.mkIf config.garden.profiles.oracle.enable {
     services.thermald.enable = mkForce false; # Unavailable - device lacks thermal sensors.
   };
 }
diff --git a/modules/nixos/hardware/cloud/overrides.nix b/modules/nixos/hardware/cloud/overrides.nix
index 27bef975..803f1bc8 100644
--- a/modules/nixos/hardware/cloud/overrides.nix
+++ b/modules/nixos/hardware/cloud/overrides.nix
@@ -52,7 +52,7 @@ in
           "9p"
           "9pnet_virtio"
         ]
-        ++ lib.optionals (!config.garden.profiles.oracle.enable) [
+        ++ lib.lists.optionals (!config.garden.profiles.oracle.enable) [
           "vmw_pvscsi"
         ];
 
diff --git a/modules/nixos/hardware/media/sound.nix b/modules/nixos/hardware/media/sound.nix
index 9c00d4b3..5d778364 100644
--- a/modules/nixos/hardware/media/sound.nix
+++ b/modules/nixos/hardware/media/sound.nix
@@ -10,7 +10,7 @@ in
 {
   config = mkIf config.garden.profiles.graphical.enable {
     # no thanks lol
-    services.pulseaudio.enable = lib.mkForce false;
+    services.pulseaudio.enable = lib.modules.mkForce false;
 
     # pipewire is newer and just better
     services.pipewire = {
diff --git a/modules/nixos/headless.nix b/modules/nixos/headless.nix
index 07f51344..c90af21d 100644
--- a/modules/nixos/headless.nix
+++ b/modules/nixos/headless.nix
@@ -57,7 +57,7 @@ in
 
       # don't start a tty on the serial consoles; we have no need for it here
       services = {
-        "serial-getty@ttyS0".enable = lib.mkDefault false;
+        "serial-getty@ttyS0".enable = lib.modules.mkDefault false;
         "serial-getty@hvc0".enable = false;
         "getty@tty1".enable = false;
         "autovt@".enable = false;
diff --git a/modules/nixos/networking/tailscale.nix b/modules/nixos/networking/tailscale.nix
index 1daffe03..98220792 100644
--- a/modules/nixos/networking/tailscale.nix
+++ b/modules/nixos/networking/tailscale.nix
@@ -29,7 +29,7 @@ in
     isClient = mkOption {
       type = bool;
       default = config.garden.profiles.workstation.enable;
-      defaultText = lib.literalExpression "config.garden.profiles.workstation.enable";
+      defaultText = lib.options.literalExpression "config.garden.profiles.workstation.enable";
       example = true;
       description = ''
         Whether the target host should utilize Tailscale client features";
@@ -41,7 +41,7 @@ in
     isServer = mkOption {
       type = bool;
       default = config.garden.profiles.server.enable;
-      defaultText = lib.literalExpression "config.garden.profiles.server.enable";
+      defaultText = lib.options.literalExpression "config.garden.profiles.server.enable";
       example = true;
       description = ''
         Whether the target host should utilize Tailscale server features.
diff --git a/modules/nixos/services/arr.nix b/modules/nixos/services/arr.nix
index e57b70be..8d92051e 100644
--- a/modules/nixos/services/arr.nix
+++ b/modules/nixos/services/arr.nix
@@ -41,7 +41,7 @@ in
     };
   };
 
-  config = lib.mkIf cfg.enable {
+  config = lib.modules.mkIf cfg.enable {
     garden.services = {
       jellyfin.enable = true;
       sonarr.enable = true;
diff --git a/modules/nixos/services/borgbackup.nix b/modules/nixos/services/borgbackup.nix
index d3354b4a..255070f6 100644
--- a/modules/nixos/services/borgbackup.nix
+++ b/modules/nixos/services/borgbackup.nix
@@ -62,7 +62,7 @@ in
     };
   };
 
-  config = lib.mkIf cfg.enable {
+  config = lib.modules.mkIf cfg.enable {
     sops.secrets.borg-sshkey = mkSecret {
       file = "borg";
       key = "sshkey";
diff --git a/modules/nixos/services/forgejo.nix b/modules/nixos/services/forgejo.nix
index 48928170..2eb77b52 100644
--- a/modules/nixos/services/forgejo.nix
+++ b/modules/nixos/services/forgejo.nix
@@ -86,7 +86,7 @@ in
             # LANDING_PAGE = "/explore/repos";
 
             SSH_CREATE_AUTHORIZED_KEYS_FILE = true;
-            SSH_PORT = lib.head config.services.openssh.ports;
+            SSH_PORT = lib.lists.head config.services.openssh.ports;
 
             # fix gravatar images
             OFFLINE_MODE = false;
@@ -180,7 +180,7 @@ in
 
       postgresql = {
         ensureDatabases = [ "forgejo" ];
-        ensureUsers = lib.singleton {
+        ensureUsers = lib.lists.singleton {
           name = "forgejo";
           ensureDBOwnership = true;
         };
diff --git a/modules/nixos/services/mailserver.nix b/modules/nixos/services/mailserver.nix
index b6eac7f3..9c7d884f 100644
--- a/modules/nixos/services/mailserver.nix
+++ b/modules/nixos/services/mailserver.nix
@@ -18,7 +18,7 @@ in
 
   options.garden.services.mailserver = mkServiceOption "mailserver" { domain = "mail.${rdomain}"; };
 
-  config = lib.mkMerge [
+  config = lib.modules.mkMerge [
     {
       # for some reason without doing it like this we get an eval error saying
       # that "null cannot be coerced to a string". which i assume is caused by
@@ -317,7 +317,7 @@ in
 
         postgresql = {
           ensureDatabases = [ "roundcube" ];
-          ensureUsers = lib.singleton {
+          ensureUsers = lib.lists.singleton {
             name = "roundcube";
             ensureDBOwnership = true;
           };
diff --git a/modules/nixos/services/matrix.nix b/modules/nixos/services/matrix.nix
index 8de15ccf..c031eb18 100644
--- a/modules/nixos/services/matrix.nix
+++ b/modules/nixos/services/matrix.nix
@@ -163,7 +163,7 @@ in
         '';
 
         ensureDatabases = [ "matrix-sliding-sync" ];
-        ensureUsers = lib.singleton {
+        ensureUsers = lib.lists.singleton {
           name = "matrix-sliding-sync";
           ensureDBOwnership = true;
         };
diff --git a/modules/nixos/services/postgresql.nix b/modules/nixos/services/postgresql.nix
index da749dd6..adf07c92 100644
--- a/modules/nixos/services/postgresql.nix
+++ b/modules/nixos/services/postgresql.nix
@@ -126,7 +126,7 @@ in
         log_statement = "all";
         logging_collector = true;
         log_disconnections = true;
-        log_destination = lib.mkForce "syslog";
+        log_destination = lib.modules.mkForce "syslog";
       };
     };
   };
diff --git a/modules/nixos/services/snot.nix b/modules/nixos/services/snot.nix
index 7e9fcb5c..09178681 100644
--- a/modules/nixos/services/snot.nix
+++ b/modules/nixos/services/snot.nix
@@ -40,7 +40,7 @@ in
         };
       };
 
-      postgresql.ensureUsers = lib.singleton { name = "snot"; };
+      postgresql.ensureUsers = lib.lists.singleton { name = "snot"; };
 
       nginx.virtualHosts.${cfg.domain} = {
         locations."/" = {
@@ -50,7 +50,7 @@ in
       };
     };
 
-    systemd.services.postgresql-setup.script = lib.mkAfter ''
+    systemd.services.postgresql-setup.script = lib.modules.mkAfter ''
       psql -d forgejo <<'EOF'
         GRANT CONNECT ON DATABASE forgejo TO "snot";
         ALTER DEFAULT PRIVILEGES FOR ROLE forgejo GRANT SELECT ON TABLES TO "snot";
diff --git a/modules/nixos/services/vaultwarden.nix b/modules/nixos/services/vaultwarden.nix
index 1ad4c711..84a4584c 100644
--- a/modules/nixos/services/vaultwarden.nix
+++ b/modules/nixos/services/vaultwarden.nix
@@ -81,7 +81,7 @@ in
 
       postgresql = {
         ensureDatabases = [ "vaultwarden" ];
-        ensureUsers = lib.singleton {
+        ensureUsers = lib.lists.singleton {
           name = "vaultwarden";
           ensureDBOwnership = true;
         };
diff --git a/modules/nixos/services/wakapi.nix b/modules/nixos/services/wakapi.nix
index d9021ed1..ec8f1c0d 100644
--- a/modules/nixos/services/wakapi.nix
+++ b/modules/nixos/services/wakapi.nix
@@ -83,7 +83,7 @@ in
 
       postgresql = {
         ensureDatabases = [ "wakapi" ];
-        ensureUsers = lib.singleton {
+        ensureUsers = lib.lists.singleton {
           name = "wakapi";
           ensureDBOwnership = true;
         };
diff --git a/modules/nixos/system/runners.nix b/modules/nixos/system/runners.nix
index 2f133925..28f7a608 100644
--- a/modules/nixos/system/runners.nix
+++ b/modules/nixos/system/runners.nix
@@ -12,7 +12,7 @@ let
 in
 {
   options.garden.system.security = {
-    binaries.enable = lib.mkEnableOption "allow for none patched binaries to be run";
+    binaries.enable = lib.options.mkEnableOption "allow for none patched binaries to be run";
   };
 
   config = mkIf cfg.enable {
diff --git a/modules/nixos/system/terminfo.nix b/modules/nixos/system/terminfo.nix
index 80b0dcb5..6e537c0d 100644
--- a/modules/nixos/system/terminfo.nix
+++ b/modules/nixos/system/terminfo.nix
@@ -6,7 +6,7 @@
   ...
 }:
 {
-  config = lib.mkIf config.services.openssh.enable {
+  config = lib.modules.mkIf config.services.openssh.enable {
     garden.packages = {
       inherit (pkgs.ghostty) terminfo;
     };
diff --git a/systems/freyja/default.nix b/systems/freyja/default.nix
index 508dc94c..02c009da 100644
--- a/systems/freyja/default.nix
+++ b/systems/freyja/default.nix
@@ -31,5 +31,5 @@
     };
   };
 
-  services.smartd.enable = lib.mkForce false;
+  services.smartd.enable = lib.modules.mkForce false;
 }
-- 
2.51.2