├── .envrc
├── .forgejo
    └── workflows
    │   └── deploy.yaml
├── .gitattributes
├── .gitignore
├── .helix
    └── config.toml
├── COPYING
├── README.md
├── commit.nu
├── deploy.nu
├── dns
    └── dnsconfig.js
├── flake.lock
├── flake.nix
├── hosts
    ├── default.nix
    ├── lungmen
    │   └── default.nix
    ├── tkaronto
    │   ├── default.nix
    │   ├── modules
    │   │   ├── ananicy.nix
    │   │   ├── autocpufreq.nix.disabled
    │   │   ├── avahi.nix
    │   │   ├── boot.nix
    │   │   ├── budgie.nix.disabled
    │   │   ├── docker.nix
    │   │   ├── flatpak.nix
    │   │   ├── fs.nix
    │   │   ├── gamemode.nix
    │   │   ├── github.nix
    │   │   ├── gnome.nix.disabled
    │   │   ├── gpu.nix.disabled
    │   │   ├── greetd.nix
    │   │   ├── iphone.nix
    │   │   ├── joycond.nix
    │   │   ├── keychron-v4.nix
    │   │   ├── libvirtd.nix.disabled
    │   │   ├── network.nix
    │   │   ├── persist.nix
    │   │   ├── secrets.nix
    │   │   ├── tlp.nix
    │   │   ├── waydroid.nix.disabled
    │   │   ├── weylus.nix.disabled
    │   │   ├── wgWolumondeIp
    │   │   ├── wgWolumondeKey.pub
    │   │   └── wireguard.nix
    │   └── win11.xml
    ├── wolumonde
    │   ├── default.nix
    │   └── modules
    │   │   ├── arpa.nix
    │   │   ├── atproto.nix
    │   │   ├── bernbot.disabled
    │   │   ├── blog.nix
    │   │   ├── conduit.disabled
    │   │   ├── couchdb.disabled
    │   │   ├── fluentbit.nix
    │   │   ├── forgejo-runner.disabled
    │   │   ├── forgejo.nix
    │   │   ├── forgejo
    │   │       ├── public
    │   │       │   └── assets
    │   │       │   │   ├── css
    │   │       │   │       └── theme-edge-dark.css
    │   │       │   │   ├── fonts
    │   │       │   │       ├── comic.woff2
    │   │       │   │       ├── comicbd.woff2
    │   │       │   │       └── comici.woff2
    │   │       │   │   └── img
    │   │       │   │       ├── favicon.png
    │   │       │   │       ├── grrr.webp
    │   │       │   │       ├── logo.png
    │   │       │   │       └── wecode.gif
    │   │       └── templates
    │   │       │   ├── base
    │   │       │       ├── head.tmpl
    │   │       │       └── head_navbar.tmpl
    │   │       │   └── home.tmpl
    │   │   ├── gitea-act.disabled
    │   │   ├── gitea.disabled
    │   │   ├── grafana.disabled
    │   │   ├── guestbook.disabled
    │   │   ├── hardware-configuration.nix
    │   │   ├── hedgedoc.nix
    │   │   ├── limbusart.nix
    │   │   ├── mosh.nix
    │   │   ├── musikquadrupled.disabled
    │   │   ├── musikspider.disabled
    │   │   ├── nginx.nix
    │   │   ├── nushell.nix
    │   │   ├── pds.nix
    │   │   ├── perses.nix
    │   │   ├── perses
    │   │       ├── dashboards
    │   │       │   ├── .gitignore
    │   │       │   ├── go.mod
    │   │       │   ├── go.sum
    │   │       │   └── wolumonde.go
    │   │       └── provision
    │   │       │   ├── 1-private-infra.yaml
    │   │       │   ├── 2-admin-role.yaml
    │   │       │   ├── 3-admin-bind-role.yaml
    │   │       │   ├── 4-victoria.yaml
    │   │       │   ├── 5-funny.yaml
    │   │       │   ├── 6-guest-role.yaml
    │   │       │   ├── 7-funny-bind-role.yaml
    │   │       │   └── 90-wolumonde.yaml
    │   │   ├── rathole.nix
    │   │   ├── secrets.nix
    │   │   ├── ssh.nix
    │   │   ├── tailscale.nix
    │   │   ├── tangled.nix
    │   │   ├── terraria.disabled
    │   │   ├── victoria.nix
    │   │   ├── webhook.nix
    │   │   ├── webhooks
    │   │       └── deploy-wolumonde.nix
    │   │   ├── wireguard.disabled
    │   │   └── xray.disabled
    └── wsl
    │   ├── default.nix
    │   └── modules
    │       ├── .keep
    │       ├── github.nix
    │       ├── podman.nix
    │       └── secrets.nix
├── lib
    ├── default.nix
    └── systems.nix
├── locale
    ├── default.nix
    └── geo.nix
├── modules
    ├── ananicy
    │   └── default.nix
    ├── base
    │   ├── default.nix
    │   ├── hm-system-defaults.nix
    │   └── nix.nix
    ├── cachix
    │   ├── default.nix
    │   ├── helix.nix
    │   └── nix-community.nix
    ├── de
    │   ├── budgie
    │   │   └── default.nix
    │   ├── gnome
    │   │   └── default.nix
    │   └── greetd
    │   │   └── default.nix
    ├── default.nix
    ├── develop
    │   ├── default.nix
    │   ├── editor
    │   │   ├── default.nix
    │   │   ├── helix.nix
    │   │   └── kakoune.nix
    │   └── nixbuild
    │   │   └── default.nix
    ├── flatpak
    │   └── default.nix
    ├── gamemode
    │   └── default.nix
    ├── github.nix
    ├── gnome-boxes
    │   └── default.nix
    ├── keyboards
    │   └── keychron-v4
    │   │   └── default.nix
    ├── libvirtd
    │   └── default.nix
    ├── network
    │   ├── default.nix
    │   ├── dns
    │   │   ├── cloudflare.nix
    │   │   ├── default.nix
    │   │   ├── nextdns.nix
    │   │   └── stubby
    │   │   │   ├── default.nix
    │   │   │   └── nextdns.nix
    │   ├── iwd
    │   │   └── default.nix
    │   ├── networkmanager
    │   │   └── default.nix
    │   ├── ssh.nix
    │   └── wpa_supplicant.nix
    ├── nushell
    │   ├── aliases.nu
    │   ├── default.nix
    │   └── prompt.nu
    ├── persist
    │   ├── default.nix
    │   └── null.nix
    └── syncthing
    │   └── default.nix
├── personal.nix
├── pkgs-set
    ├── default.nix
    ├── overlays
    │   ├── abaddon.nix
    │   ├── agenix.nix
    │   ├── anubis.nix
    │   ├── bitwig.nix
    │   ├── calf.nix
    │   ├── musikcube.nix
    │   ├── nur.nix
    │   ├── prismlauncher.nix
    │   ├── rofi-bluetooth.nix
    │   └── steam.nix
    ├── patches
    │   ├── bitwig.jar
    │   └── prismlauncher-offline.patch
    ├── pkgs-to-export.nix
    └── pkgs
    │   ├── comic-mono.nix
    │   ├── discordo.nix
    │   ├── dnsmngmt.nix
    │   ├── fluidsynth-dssi.nix
    │   ├── fractal-next.nix
    │   ├── generate-firefox-addons.nix
    │   ├── percli.nix
    │   └── phantom.nix
├── secrets
    ├── 9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa.did
    ├── bernbotToken.age
    ├── dawn.gaze.systems.did
    ├── deployWebhook.age
    ├── forgejoActRunnerToken.age
    ├── guestbook.gaze.systems.did
    ├── musikquadConfig.age
    ├── nixGithubAccessToken.age
    ├── pdsConfig.age
    ├── persesAdminUser.age
    ├── persesSecret.age
    ├── ratholeCreds.age
    ├── secrets.nix
    ├── tangledKnot.age
    ├── webhookAuth.age
    ├── websiteConfig.age
    ├── wolumonde.key.pub
    ├── xrayConfig.age
    └── yusdacra.key.pub
├── shells
    ├── dash.nu
    └── default.nix
├── treefmt.toml
└── users
    ├── firewatch
        └── default.nix
    ├── modules
        ├── arrpc
        │   └── default.nix
        ├── chromium
        │   └── default.nix
        ├── code
        │   └── default.nix
        ├── direnv
        │   └── default.nix
        ├── discord
        │   ├── default.nix
        │   └── theme.css
        ├── discordrp-mpris
        │   ├── config.toml
        │   └── default.nix
        ├── dunst
        │   └── default.nix
        ├── firefox
        │   ├── default.nix
        │   ├── extensions.json
        │   └── extensions.nix
        ├── fluxbox
        │   └── default.nix
        ├── foot
        │   └── default.nix
        ├── fzf
        │   └── default.nix
        ├── git
        │   └── default.nix
        ├── godot
        │   └── default.nix
        ├── helix
        │   └── default.nix
        ├── hyprland
        │   ├── config.nix
        │   ├── default.nix
        │   └── swayidle.nix
        ├── lollypop
        │   └── default.nix
        ├── mako
        │   └── default.nix
        ├── musikcube
        │   ├── default-config.json
        │   └── default.nix
        ├── musikcubed
        │   ├── default-config.json
        │   └── default.nix
        ├── newsflash
        │   └── default.nix
        ├── obsidian
        │   └── default.nix
        ├── premid
        │   └── default.nix
        ├── psd
        │   └── default.nix
        ├── ripcord
        │   └── default.nix
        ├── rofi-nm
        │   └── default.nix
        ├── rofi
        │   └── default.nix
        ├── s3s
        │   └── default.nix
        ├── settings
        │   └── default.nix
        ├── smos
        │   └── default.nix
        ├── spotify
        │   └── default.nix
        ├── ssh
        │   └── default.nix
        ├── starship
        │   └── default.nix
        ├── sway
        │   └── default.nix
        ├── swaylock
        │   └── default.nix
        ├── urxvt
        │   └── default.nix
        ├── vesktop
        │   └── default.nix
        ├── wayland
        │   └── default.nix
        ├── wezterm
        │   └── default.nix
        ├── wlsunset
        │   └── default.nix
        ├── wtf
        │   └── default.nix
        ├── zoxide
        │   └── default.nix
        └── zsh
        │   └── default.nix
    ├── patriot
        ├── default.nix
        └── stylix.nix
    └── root
        └── default.nix


/.envrc:
--------------------------------------------------------------------------------
1 | watch_file shells/* flake.nix flake.lock
2 | use flake


--------------------------------------------------------------------------------
/.forgejo/workflows/deploy.yaml:
--------------------------------------------------------------------------------
 1 | name: deploy to server
 2 | 
 3 | on:
 4 |   push:
 5 |   workflow_dispatch:
 6 | 
 7 | jobs:
 8 |   tag:
 9 |     runs-on: lixpine
10 |     steps:
11 |       - name: trigger deploy
12 |         env:
13 |           WEBHOOK_PASSWORD: ${{ secrets.WEBHOOK_PASSWORD }}
14 |         run: curl -u "meow:$WEBHOOK_PASSWORD" https://webhook.gaze.systems/deploy-wolumonde


--------------------------------------------------------------------------------
/.gitattributes:
--------------------------------------------------------------------------------
1 | secrets/* filter=git-crypt diff=git-crypt
2 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
 1 | result
 2 | .direnv
 3 | doc/index.html
 4 | keys
 5 | 
 6 | # Result of bud commands
 7 | vm
 8 | iso
 9 | doi
10 | 
11 | pkgs/_sources/.shake*
12 | ssh_key
13 | secrets/deploy-webhook.nu
14 | 
15 | # dnscontrol
16 | creds.json
17 | 


--------------------------------------------------------------------------------
/.helix/config.toml:
--------------------------------------------------------------------------------
1 | editor.insert-final-newline = false
2 | 


--------------------------------------------------------------------------------
/COPYING:
--------------------------------------------------------------------------------
 1 | Permission is hereby granted, free of charge, to any person obtaining
 2 | a copy of this software and associated documentation files (the
 3 | "Software"), to deal in the Software without restriction, including
 4 | without limitation the rights to use, copy, modify, merge, publish,
 5 | distribute, sublicense, and/or sell copies of the Software, and to
 6 | permit persons to whom the Software is furnished to do so, subject to
 7 | the following conditions:
 8 | 
 9 | The above copyright notice and this permission notice shall be
10 | included in all copies or substantial portions of the Software.
11 | 
12 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
13 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
14 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
15 | NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
16 | LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
17 | OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
18 | WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
19 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | NixOS / home manager configs, packages and modules
2 | 


--------------------------------------------------------------------------------
/commit.nu:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env nu
 2 | 
 3 | use std "path add"
 4 | 
 5 | 
 6 | path add /nix/var/nix/profiles/default/bin
 7 | 
 8 | 
 9 | def unwrap-or-else [val block] {
10 |   if $val == null { do $block } else { $val }
11 | }
12 | 
13 | 
14 | def main [
15 |   _msg?: string
16 |   --type (-t): string
17 |   --scope (-s): string
18 |   ...rest
19 | ] {
20 |   let msg: string = unwrap-or-else $_msg { input 'enter commit message: ' }
21 | 
22 |   let types = ["feat" "build" "ci" "fix" "refactor" "chore" "style"]
23 |   let hosts: list<string> = (nix eval ".#nixosConfigurations" --apply builtins.attrNames --json --quiet | from json)
24 |   let scopes = $hosts ++ ["qol" "treewide" "deploy" "commit" "deps"]
25 | 
26 |   let ty: string = unwrap-or-else $type { $types | input list 'choose type' --fuzzy }
27 |   let scp: string = unwrap-or-else $scope { $scopes | input list 'choose scope' --fuzzy }
28 |   let commit_msg = $"($ty)\(($scp)\): ($msg)"
29 |   git commit -m $commit_msg ...$rest
30 | }


--------------------------------------------------------------------------------
/deploy.nu:
--------------------------------------------------------------------------------
  1 | #!/usr/bin/env nu
  2 | 
  3 | use std "path add"
  4 | use std/log
  5 | 
  6 | path add /nix/var/nix/profiles/default/bin
  7 | 
  8 | cd $env.FLAKE
  9 | 
 10 | # load webhook secrets
 11 | rage -d -i ./ssh_key ./secrets/deployWebhook.age | from toml | load-env
 12 | 
 13 | def webhook [title: string, content: string, exit_code?: number, ping?: bool = false] {
 14 |   let type = if $exit_code == null { "⌛" } else if $exit_code == 0 { "✔️" } else { "❌" }
 15 |   let msg = {
 16 |     content: (if $ping { "hey <@853064602904166430>!" } else { "" }),
 17 |     embeds: [{
 18 |       description: $content,
 19 |       title: $"($type) /($title)/",
 20 |       footer: {
 21 |         text: $"(date now) \((sys host | get hostname)\)",
 22 |       }
 23 |     }]
 24 |   }
 25 | 
 26 |   if $exit_code == 0 or $exit_code == null {
 27 |     log info $content
 28 |   } else {
 29 |     log error $content
 30 |   }
 31 |   http post --content-type application/json $"https://discord.com/api/webhooks/($env.WEBHOOK_ID)/($env.WEBHOOK_TOKEN)" $msg
 32 | }
 33 | 
 34 | def upload-paste []: any -> string {
 35 |   let paste_url = http post --content-type multipart/form-data "https://0x0.st" {file: ($in | to text | into binary), secret: true}
 36 |   return $paste_url
 37 | }
 38 | 
 39 | def time-block [block]: nothing -> record {
 40 |   let start = date now
 41 |   let result = do $block
 42 |   let end = date now
 43 |   return {result: $result, elapsed: ($end - $start)}
 44 | }
 45 | 
 46 | def deploy [hostname: string] {
 47 |   log info $"start deploy host ($hostname)"
 48 |   let hooktitle = $"/($hostname)/deploy"
 49 | 
 50 |   webhook $hooktitle $"=== deploy for ($hostname): started ===\n\n(sys disks | to text)\n\n(sys mem | to text)"
 51 | 
 52 |   def run_step [action: string, block]: nothing -> bool {
 53 |     webhook $"($hooktitle)/($action)" $"=== ($action) ($hostname) started ==="
 54 |     let result = time-block $block
 55 |     let failed = $result.result.exit_code != 0
 56 |     log info ($result.result | to text)
 57 |     webhook $"($hooktitle)/($action)" $"=== ($action) ($hostname) is done ===\n\ntook ($result.elapsed)\n\nlog: ($result.result | upload-paste)" $result.result.exit_code $failed
 58 |     return $failed
 59 |   }
 60 | 
 61 |   let result_dir = mktemp -d | path join "result"
 62 |   let build_failed = run_step "build" {
 63 |     nh os build --no-nom -H $hostname -o $result_dir -- -L --show-trace | complete
 64 |   }
 65 |   if $build_failed {
 66 |     return
 67 |   }
 68 |   let result_link = readlink $result_dir
 69 | 
 70 |   # TODO: dont hardcode user
 71 |   let target = $"root@($hostname)"
 72 |   let copy_failed = run_step "copy to" {
 73 |     nix copy --to $"ssh://($target)" $result_link | complete
 74 |   }
 75 |   if $copy_failed {
 76 |     return
 77 |   }
 78 | 
 79 |   let activate_failed = run_step "activate" {
 80 |     ssh $target $"sudo '($result_link)/bin/switch-to-configuration' 'switch'" | complete
 81 |   }
 82 |   if $activate_failed {
 83 |     return
 84 |   }
 85 | 
 86 |   webhook $hooktitle $"=== deploy for ($hostname): finished ===" 0 true
 87 | }
 88 | 
 89 | def update-input [input: string] {
 90 |   let stashed = try {
 91 |     let stash_result = git stash | complete
 92 |     $stash_result.stdout | str contains "Saved working directory"
 93 |   } catch {
 94 |     false
 95 |   }
 96 |   log info $"trying to update input ($input)"
 97 |   let result = nix flake update $input | complete
 98 |   let is_ok = ($result.stderr | str contains "Updated input")
 99 |   let is_err = ($result.exit_code != 0)
100 |   if $is_ok or $is_err {
101 |     webhook $"/inputs/($input)" $"=== updated input ($input) ===\n\n($result.stderr)" $result.exit_code
102 |   }
103 |   if $is_ok {
104 |     # try committing flake updates
105 |     try {
106 |       git add flake.lock
107 |       let commit_msg = $"chore\(nix\): update input ($input) [skip ci]"
108 |       git commit -m $commit_msg
109 |       git push
110 |     }
111 |   } else {
112 |     try {
113 |       git restore .
114 |     }
115 |   }
116 |   if $stashed {
117 |     try {
118 |       git stash pop
119 |     }
120 |   }
121 | }
122 | 
123 | def main [] {
124 |   webhook "deploy" "=== started deploying all ==="
125 | 
126 |   update-input "blog"
127 | 
128 |   try {
129 |     log info "trying to update dns records"
130 |     nix run ".#dns" -- push
131 |   } catch { |err|
132 |     webhook "dns" $"=== error pushing dns ===\n\n($err.msg | to text)" 1
133 |   }
134 | 
135 |   deploy "wolumonde"
136 | }


--------------------------------------------------------------------------------
/dns/dnsconfig.js:
--------------------------------------------------------------------------------
 1 | var DSP_NAMECHEAP = NewDnsProvider("namecheap");
 2 | var DSP_CLOUDFLARE = NewDnsProvider("cloudflare");
 3 | var REG_NONE = NewRegistrar("none");
 4 | 
 5 | var WOLUMONDE_IP = "23.88.101.188"
 6 | 
 7 | D("gaze.systems", REG_NONE,
 8 | 	DnsProvider(DSP_NAMECHEAP),
 9 | 	DefaultTTL(1799),
10 | 	A("@", WOLUMONDE_IP, TTL(60)),
11 | 	// A("couchdb", WOLUMONDE_IP, TTL(60)),
12 | 	A("dawn", WOLUMONDE_IP),
13 | 	A("doc", WOLUMONDE_IP, TTL(60)),
14 | 	A("git", WOLUMONDE_IP, TTL(60)),
15 | 	A("guestbook", WOLUMONDE_IP),
16 | 	A("limbus", WOLUMONDE_IP, TTL(60)),
17 | 	A("pmart", WOLUMONDE_IP, TTL(60)),
18 | 	// A("test", WOLUMONDE_IP),
19 | 	A("webhook", WOLUMONDE_IP),
20 | 	A("dash", WOLUMONDE_IP), // grafana
21 | 	A("knot", WOLUMONDE_IP),
22 | 	// thing
23 | 	TXT("id", "a data endpoint for entity with serial id /90008/."),
24 | 	TXT("id", "entity linked here uses it/they pronouns. it can be referred to as /dusk/ or /dawn/."),
25 | 	TXT("id", "this one is not a human, try to refer to it in third person. use /this one/, /this thing/, etc."),
26 | 	TXT("id", "try connecting to https://gaze.systems/about for more information."),
27 | 	// github pages
28 | 	CNAME("dev", "yusdacra.github.io."),
29 | 	// fastmail
30 | 	CNAME("fm1._domainkey", "fm1.gaze.systems.dkim.fmhosted.com."),
31 | 	CNAME("fm2._domainkey", "fm2.gaze.systems.dkim.fmhosted.com."),
32 | 	CNAME("fm3._domainkey", "fm3.gaze.systems.dkim.fmhosted.com."),
33 | 	MX("@", 10, "in1-smtp.messagingengine.com."),
34 | 	MX("@", 20, "in2-smtp.messagingengine.com."),
35 | 	TXT("@", "v=spf1 include:spf.messagingengine.com ?all"),
36 | 	TXT("_dmarc", "v=DMARC1; p=none;"),
37 | 	// resend
38 | 	MX("send.poke", 10, "feedback-smtp.us-east-1.amazonses.com."),
39 | 	TXT("resend._domainkey.poke", "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8/06F14LZgg7l6eko9GXasUwCBUGHe1Abd5hMg0Xf9ufdUj7lAUB746DS1ErS04oxGEbCdjamkAGqRsYWvk5KGRIXmeYuKyMPFM44U0dt6caHOIr8pHoDj9ytAJD/RS/p1xQZoFXHBxKgAeEY3TUZy7iNLvGxCLkxuPnO7nlWKwIDAQAB"),
40 | 	TXT("send.poke", "v=spf1 include:amazonses.com ~all"),
41 | 	// atproto
42 | 	TXT("_atproto", "did=did:plc:dfl62fgb7wtjj3fcbb72naae", TTL(60)),
43 | );
44 | 
45 | D("9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa", REG_NONE,
46 | 	DnsProvider(DSP_CLOUDFLARE),
47 | 	DefaultTTL(1),
48 | 	A("@", WOLUMONDE_IP, CF_PROXY_ON),
49 | 	TXT("@", "a data endpoint for entity with serial id /90008/."),
50 | 	TXT("@", "entity linked here uses it/they pronouns. it can be referred to as /dusk/ or /dawn/."),
51 | 	TXT("@", "this one is not a human, try to refer to it in third person. use /this one/, /this thing/, etc."),
52 | 	TXT("@", "try connecting to https://gaze.systems/about for more information."),
53 | 	// atproto
54 | 	// TXT("_atproto", "did=did:plc:dfl62fgb7wtjj3fcbb72naae"),
55 | );
56 | 
57 | 


--------------------------------------------------------------------------------
/flake.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   description = "config!!!";
  3 | 
  4 |   inputs = {
  5 |     nixpkgs-master.url = "github:nixos/nixpkgs/master";
  6 |     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
  7 |     nur.url = "github:nix-community/NUR";
  8 | 
  9 |     nixos-wsl.url = "github:nix-community/NixOS-WSL";
 10 |     nixos-wsl.inputs.nixpkgs.follows = "nixpkgs";
 11 | 
 12 |     home.url = "github:nix-community/home-manager/master";
 13 |     home.inputs.nixpkgs.follows = "nixpkgs";
 14 | 
 15 |     nixos-hardware.url = "github:nixos/nixos-hardware";
 16 |     nixos-persistence.url = "github:nix-community/impermanence";
 17 | 
 18 |     nixpkgs-wayland.url = "github:nix-community/nixpkgs-wayland";
 19 |     nixpkgs-wayland.flake = false;
 20 | 
 21 |     # helix.url = "github:helix-editor/helix";
 22 | 
 23 |     blog.url = "git+https://git.gaze.systems/90008/website.git";
 24 |     # blog.inputs.nixpkgs.follows = "nixpkgs";
 25 | 
 26 |     bernbot.url = "github:yusdacra/bernbot";
 27 |     bernbot.inputs.nixpkgs.follows = "nixpkgs";
 28 | 
 29 |     # conduit.url = "gitlab:famedly/conduit/next";
 30 |     # conduit.inputs.nixpkgs.follows = "nixpkgs";
 31 | 
 32 |     # nil.url = "github:oxalica/nil";
 33 |     # nil.inputs.nixpkgs.follows = "nixpkgs";
 34 |     # nixd.url = "github:nix-community/nixd";
 35 |     # nixd.inputs.nixpkgs.follows = "nixpkgs";
 36 | 
 37 |     # stylix.url = "github:yusdacra/stylix/fixed";
 38 |     # stylix.inputs.nixpkgs.follows = "nixpkgs";
 39 |     # stylix.inputs.home-manager.follows = "home";
 40 | 
 41 |     # vscode-extensions.url = "github:nix-community/nix-vscode-extensions";
 42 |     # vscode-extensions.inputs.nixpkgs.follows = "nixpkgs";
 43 | 
 44 |     agenix.url = "github:ryantm/agenix";
 45 |     agenix.inputs.nixpkgs.follows = "nixpkgs";
 46 | 
 47 |     # musikquad.url = "git+https://git.gaze.systems/dusk/musikquadrupled.git";
 48 |     # musikquad.inputs.nixpkgs.follows = "nixpkgs";
 49 | 
 50 |     # musikspider.url = "git+https://git.gaze.systems/dusk/musikspider.git";
 51 |     # musikspider.inputs.nixpkgs.follows = "nixpkgs";
 52 | 
 53 |     limbusart.url = "git+https://git.gaze.systems/dusk/limbusart.git";
 54 |     # limbusart.inputs.nixpkgs.follows = "nixpkgs";
 55 | 
 56 |     # nh.url = "github:viperML/nh";
 57 |     # nh.inputs.nixpkgs.follows = "nixpkgs";
 58 | 
 59 |     # discordrp-mpris.url = "github:yusdacra/discordrp-mpris-flake";
 60 |     # discordrp-mpris.inputs.nixpkgs.follows = "nixpkgs";
 61 | 
 62 |     # s3s.url = "github:yusdacra/s3s-flake";
 63 |     # s3s.inputs.nixpkgs.follows = "nixpkgs";
 64 | 
 65 |     naked-shell.url = "github:yusdacra/mk-naked-shell";
 66 |     naked-shell.flake = false;
 67 | 
 68 |     # nixtopo.url = "github:oddlama/nix-topology";
 69 |     # nixtopo.inputs.nixpkgs.follows = "nixpkgs";
 70 | 
 71 |     # vfio.url = "github:yusdacra/nixos-vfio";
 72 |     # vfio.inputs.nixpkgs.follows = "nixpkgs";
 73 | 
 74 |     # needed for hyprland setup
 75 |     # hyprland.url = "github:hyprwm/Hyprland";
 76 |     # hyprland.inputs.nixpkgs.follows = "nixpkgs";
 77 |     # hyprland-contrib.url = "github:hyprwm/contrib";
 78 |     # hyprland-contrib.inputs.nixpkgs.follows = "nixpkgs";
 79 |     # eww.url = "github:elkowar/eww";
 80 |     # eww.inputs.nixpkgs.follows = "nixpkgs";
 81 | 
 82 |     # catppuccin-discord.url = "https://catppuccin.github.io/discord/dist/catppuccin-mocha.theme.css";
 83 |     # catppuccin-discord.flake = false;
 84 | 
 85 |     tangled.url = "git+https://tangled.sh/@tangled.sh/core";
 86 |     tangled.inputs.nixpkgs.follows = "nixpkgs";
 87 |   };
 88 | 
 89 |   outputs =
 90 |     inputs:
 91 |     let
 92 |       lib = inputs.nixpkgs.lib.extend (_: _: builtins);
 93 |       tlib = (import ./lib lib).extend (
 94 |         _: prev: rec {
 95 |           makePkgs =
 96 |             system:
 97 |             import ./pkgs-set {
 98 |               inherit system lib inputs;
 99 |               tlib = prev;
100 |             };
101 |           genPkgs = f: prev.genSystems (system: f (makePkgs system));
102 |         }
103 |       );
104 | 
105 |       allPkgs = tlib.genPkgs (x: x);
106 | 
107 |       miscApps =
108 |         lib.mapAttrs
109 |           (
110 |             _: cmds:
111 |             lib.mapAttrs (_: cmd: {
112 |               type = "app";
113 |               program = cmd;
114 |             }) cmds
115 |           )
116 |           (
117 |             lib.mapAttrs (_: pkgs: {
118 |               generate-firefox-addons = toString "${pkgs.generate-firefox-addons}/bin/generate-firefox-addons";
119 |               dns = toString "${pkgs.dnsmngmt}/bin/dns";
120 |             }) allPkgs
121 |           );
122 |     in
123 |     {
124 |       lib = tlib;
125 |       nixosConfigurations = import ./hosts { inherit lib tlib inputs; };
126 | 
127 |       packages = lib.mapAttrs (_: pkgs: pkgs._exported) allPkgs;
128 |       legacyPackages = allPkgs;
129 |       apps = miscApps;
130 | 
131 |       # topology = lib.mapAttrs (_: pkgs:
132 |       #   import inputs.nixtopo {
133 |       #     inherit pkgs;
134 |       #     modules = [{nixosConfigurations = {inherit (inputs.self.nixosConfigurations) wolumonde;};}];
135 |       #   })
136 |       # allPkgs;
137 | 
138 |       devShells = import ./shells { inherit lib tlib inputs; };
139 |     };
140 | }
141 | 


--------------------------------------------------------------------------------
/hosts/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   inputs,
 3 |   lib,
 4 |   tlib,
 5 |   ...
 6 | }:
 7 | let
 8 |   baseModules = [
 9 |     ../modules
10 |     ../locale
11 |     inputs.home.nixosModules.default
12 |   ];
13 | 
14 |   mkSystem =
15 |     name: system:
16 |     let
17 |       pkgs = tlib.makePkgs system;
18 |     in
19 |     lib.nixosSystem {
20 |       inherit system;
21 |       modules = baseModules ++ [
22 |         { networking.hostName = name; }
23 |         { nixpkgs.pkgs = pkgs; }
24 |         (import (./. + "/${name}/default.nix"))
25 |       ];
26 |       specialArgs = { inherit inputs tlib; };
27 |     };
28 | 
29 |   systems = {
30 |     # lungmen = "x86_64-linux";
31 |     # tkaronto = "x86_64-linux";
32 |     wolumonde = "x86_64-linux";
33 |     wsl = "x86_64-linux";
34 |   };
35 | in
36 | lib.mapAttrs mkSystem systems
37 | 


--------------------------------------------------------------------------------
/hosts/lungmen/default.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   config,
  3 |   lib,
  4 |   pkgs,
  5 |   inputs,
  6 |   ...
  7 | }:
  8 | let
  9 |   btrfsPartPath = "/dev/disk/by-label/NIXOS";
 10 |   btrfsOptions = [
 11 |     "compress-force=zstd"
 12 |     "noatime"
 13 |   ];
 14 | in
 15 | {
 16 |   imports =
 17 |     with inputs;
 18 |     with nixos-hardware.nixosModules;
 19 |     [
 20 |       nixpkgs.nixosModules.notDetected
 21 |       nixos-persistence.nixosModule
 22 |       common-pc-ssd
 23 |       common-pc
 24 |       common-gpu-amd
 25 |       common-cpu-amd
 26 |       ../../modules/persist
 27 |       ../../modules/network
 28 |       #../../modules/develop/nixbuild
 29 |       ../../users/root
 30 |       ../../users/patriot
 31 |     ];
 32 | 
 33 |   system.persistDir = "/persist";
 34 | 
 35 |   boot = {
 36 |     tmpOnTmpfs = true;
 37 |     loader = {
 38 |       efi.canTouchEfiVariables = true;
 39 |       systemd-boot.enable = true;
 40 |       systemd-boot.configurationLimit = 10;
 41 |     };
 42 |     kernelPackages = pkgs.linuxPackages_latest;
 43 |     supportedFilesystems = [ "btrfs" ];
 44 |     initrd = {
 45 |       availableKernelModules = [
 46 |         "xhci_pci"
 47 |         "ahci"
 48 |         "usb_storage"
 49 |         "usbhid"
 50 |         "sd_mod"
 51 |       ];
 52 |       kernelModules = [ "amdgpu" ];
 53 |     };
 54 |     kernelModules = [ "kvm-amd" ];
 55 |     extraModulePackages = [ ];
 56 |     kernel.sysctl = {
 57 |       "fs.inotify.max_user_watches" = 524288;
 58 |     };
 59 |   };
 60 | 
 61 |   fileSystems."/" = {
 62 |     device = "none";
 63 |     fsType = "tmpfs";
 64 |     options = [
 65 |       "defaults"
 66 |       "size=2G"
 67 |       "mode=755"
 68 |     ];
 69 |   };
 70 |   fileSystems."/nix" = {
 71 |     device = btrfsPartPath;
 72 |     fsType = "btrfs";
 73 |     options = [ "subvol=nix" ] ++ btrfsOptions;
 74 |   };
 75 |   fileSystems."${config.system.persistDir}" = {
 76 |     device = btrfsPartPath;
 77 |     fsType = "btrfs";
 78 |     options = [ "subvol=persist" ] ++ btrfsOptions;
 79 |     neededForBoot = true;
 80 |   };
 81 |   fileSystems."/boot" = {
 82 |     device = "/dev/disk/by-label/BOOT";
 83 |     fsType = "vfat";
 84 |   };
 85 | 
 86 |   swapDevices = [ ];
 87 |   zramSwap = {
 88 |     enable = true;
 89 |     algorithm = "zstd";
 90 |   };
 91 | 
 92 |   nix.settings.max-jobs = lib.mkDefault 4;
 93 |   security = {
 94 |     pam.loginLimits = [
 95 |       {
 96 |         domain = "*";
 97 |         type = "soft";
 98 |         item = "nofile";
 99 |         value = "524288";
100 |       }
101 |       {
102 |         domain = "*";
103 |         type = "hard";
104 |         item = "nofile";
105 |         value = "524288";
106 |       }
107 |     ];
108 |     allowSimultaneousMultithreading = false;
109 |     # Deleting root subvolume makes sudo show lecture every boot
110 |     sudo.extraConfig = ''
111 |       Defaults lecture = never
112 |     '';
113 |     rtkit.enable = true;
114 |   };
115 | 
116 |   sound.enable = false;
117 |   services.pipewire = {
118 |     enable = true;
119 |     alsa.enable = true;
120 |     alsa.support32Bit = true;
121 |     pulse.enable = true;
122 |   };
123 |   hardware = {
124 |     opengl = {
125 |       driSupport = true;
126 |       driSupport32Bit = true;
127 |       enable = true;
128 |       extraPackages = with pkgs; [
129 |         libvdpau-va-gl
130 |         vaapiVdpau
131 |         libva
132 |         vulkan-loader
133 |         amdvlk
134 |       ];
135 |       extraPackages32 =
136 |         with pkgs.pkgsi686Linux;
137 |         [
138 |           libvdpau-va-gl
139 |           vaapiVdpau
140 |           libva
141 |           vulkan-loader
142 |         ]
143 |         ++ [
144 |           pkgs.driversi686Linux.amdvlk
145 |         ];
146 |     };
147 |     pulseaudio = {
148 |       enable = false;
149 |       support32Bit = true;
150 |     };
151 |   };
152 | 
153 |   fonts = {
154 |     enableDefaultFonts = true;
155 |     fontconfig.enable = true;
156 |     fonts = [ pkgs.dejavu_fonts ];
157 |   };
158 | 
159 |   environment = {
160 |     systemPackages = [ pkgs.ntfs3g ];
161 |     pathsToLink = [ "/share/zsh" ];
162 |     persistence."${config.system.persistDir}" = {
163 |       directories = [ "/etc/nixos" ];
164 |       files = [ "/etc/machine-id" ];
165 |     };
166 |   };
167 | 
168 |   networking.firewall.checkReversePath = "loose";
169 |   networking.interfaces.enp6s0.useDHCP = true;
170 |   services = {
171 |     earlyoom.enable = true;
172 |     tailscale.enable = false;
173 |     ipfs = {
174 |       enable = false;
175 |       enableGC = true;
176 |       autoMount = true;
177 |     };
178 |     flatpak.enable = false;
179 |     xserver.videoDrivers = [ "amdgpu" ];
180 |   };
181 | 
182 |   system.stateVersion = "22.05";
183 | }
184 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/default.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   config,
  3 |   lib,
  4 |   tlib,
  5 |   pkgs,
  6 |   inputs,
  7 |   ...
  8 | }:
  9 | {
 10 |   imports =
 11 |     with inputs;
 12 |     with nixos-hardware.nixosModules;
 13 |     [
 14 |       # vfio.nixosModules.kvmfr
 15 |       # vfio.nixosModules.virtualisation
 16 |       # vfio.nixosModules.vfio
 17 |       # vfio.nixosModules.libvirtd
 18 |       agenix.nixosModules.default
 19 |       nixpkgs.nixosModules.notDetected
 20 |       nixos-persistence.nixosModule
 21 |       common-pc-ssd
 22 |       common-pc-laptop
 23 |       common-gpu-nvidia
 24 |       common-gpu-amd
 25 |       common-cpu-amd
 26 |       common-cpu-amd-pstate
 27 |       ../../users/root
 28 |       ../../users/patriot
 29 |     ]
 30 |     ++ (tlib.importFolder (toString ./modules));
 31 | 
 32 |   system.persistDir = "/persist";
 33 | 
 34 |   nix.settings.max-jobs = lib.mkForce 16;
 35 |   security = {
 36 |     pam.loginLimits = [
 37 |       {
 38 |         domain = "*";
 39 |         type = "soft";
 40 |         item = "nofile";
 41 |         value = "16777216";
 42 |       }
 43 |       {
 44 |         domain = "*";
 45 |         type = "hard";
 46 |         item = "nofile";
 47 |         value = "16777216";
 48 |       }
 49 |     ];
 50 |     allowSimultaneousMultithreading = true;
 51 |     # Deleting root subvolume makes sudo show lecture every boot
 52 |     sudo.extraConfig = ''
 53 |       Defaults lecture = never
 54 |     '';
 55 |     rtkit.enable = true;
 56 |   };
 57 | 
 58 |   sound.enable = false;
 59 |   services.pipewire = {
 60 |     enable = true;
 61 |     alsa.enable = true;
 62 |     alsa.support32Bit = true;
 63 |     pulse.enable = true;
 64 |     jack.enable = true;
 65 |   };
 66 |   hardware.pulseaudio = {
 67 |     enable = false;
 68 |     support32Bit = true;
 69 |   };
 70 | 
 71 |   services.xserver.videoDrivers = [
 72 |     "nvidia"
 73 |     "amdgpu"
 74 |   ];
 75 |   hardware = {
 76 |     nvidia = {
 77 |       package = config.boot.kernelPackages.nvidiaPackages.production;
 78 |       modesetting.enable = true;
 79 |       powerManagement.enable = false;
 80 |       powerManagement.finegrained = true;
 81 |       open = false;
 82 |       nvidiaSettings = true;
 83 |       prime = {
 84 |         offload = {
 85 |           enable = true;
 86 |           enableOffloadCmd = true;
 87 |         };
 88 |         amdgpuBusId = "PCI:5:0:0";
 89 |         nvidiaBusId = "PCI:1:0:0";
 90 |       };
 91 |     };
 92 |     opengl = {
 93 |       driSupport = true;
 94 |       driSupport32Bit = true;
 95 |       enable = true;
 96 |       extraPackages = with pkgs; [
 97 |         libvdpau-va-gl
 98 |         vaapiVdpau
 99 |         libva
100 |         vulkan-loader
101 |       ];
102 |       extraPackages32 = with pkgs.pkgsi686Linux; [
103 |         libvdpau-va-gl
104 |         vaapiVdpau
105 |         libva
106 |         vulkan-loader
107 |       ];
108 |     };
109 |   };
110 | 
111 |   hardware = {
112 |     bluetooth.enable = true;
113 |   };
114 | 
115 |   programs.light.enable = true;
116 | 
117 |   fonts = {
118 |     enableDefaultPackages = true;
119 |     fontconfig.enable = true;
120 |     packages = [ pkgs.dejavu_fonts ];
121 |   };
122 | 
123 |   environment = {
124 |     sessionVariables.FLAKE = "/etc/nixos";
125 |     pathsToLink = [ "/share/zsh" ];
126 |     persistence."${config.system.persistDir}" = {
127 |       directories = lib.flatten [
128 |         "/etc/nixos"
129 |         (lib.optional config.virtualisation.docker.enable [
130 |           "/var/lib/docker"
131 |           "/var/lib/containers"
132 |         ])
133 |       ];
134 |       files = [ "/etc/machine-id" ];
135 |     };
136 |   };
137 | 
138 |   # warframe
139 |   networking.firewall.allowedUDPPorts = [
140 |     4990
141 |     4991
142 |     4992
143 |     4993
144 |     4994
145 |     4995
146 |   ];
147 |   # musikcube
148 |   networking.firewall.allowedTCPPorts =
149 |     [
150 |       7905
151 |       7906
152 |     ]
153 |     ++ [
154 |       6695
155 |       6696
156 |       6697
157 |       6698
158 |       6699
159 |     ]
160 |     ++ [ 50300 ];
161 | 
162 |   # for tailscale
163 |   networking.firewall.checkReversePath = "loose";
164 |   services.tailscale.enable = true;
165 | 
166 |   services = {
167 |     earlyoom.enable = true;
168 |     gvfs.enable = true;
169 |   };
170 | 
171 |   system.stateVersion = "22.05";
172 | }
173 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/ananicy.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/ananicy/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/autocpufreq.nix.disabled:
--------------------------------------------------------------------------------
 1 | {
 2 |   services.auto-cpufreq.enable = true;
 3 |   services.auto-cpufreq.settings = {
 4 |     charger = {
 5 |       governor = "powersave";
 6 |       scaling_min_freq = 600000;
 7 |       scaling_max_freq = 3000000;
 8 |       turbo = "off";
 9 |     };
10 |     battery = {
11 |       governor = "powersave";
12 |       scaling_min_freq = 400000;
13 |       scaling_max_freq = 2000000;
14 |       turbo = "off";
15 |     };
16 |   };
17 |   services.tlp.settings = {
18 |     CPU_ENERGY_PERF_POLICY_ON_AC = "";
19 |     CPU_ENERGY_PERF_POLICY_ON_BAT = "";
20 |   };
21 | }
22 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/avahi.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   services.avahi = {
 3 |     enable = true;
 4 |     nssmdns = true;
 5 |     publish = {
 6 |       enable = true;
 7 |       workstation = true;
 8 |       userServices = true;
 9 |       domain = true;
10 |       hinfo = true;
11 |     };
12 |     openFirewall = true;
13 |   };
14 | }
15 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/boot.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   boot = {
 4 |     tmp.useTmpfs = true;
 5 |     loader = {
 6 |       efi.canTouchEfiVariables = true;
 7 |       systemd-boot.enable = true;
 8 |       systemd-boot.configurationLimit = 10;
 9 |     };
10 |     kernelPackages = pkgs.linuxPackages_zen;
11 |     supportedFilesystems = [ "f2fs" ];
12 |     initrd = {
13 |       availableKernelModules = [
14 |         "nvme"
15 |         "xhci_pci"
16 |         "ahci"
17 |         "usb_storage"
18 |         "usbhid"
19 |         "sd_mod"
20 |       ];
21 |       kernelModules = [ "amdgpu" ];
22 |     };
23 |     kernelModules = [ "kvm-amd" ];
24 |     extraModulePackages = [ ];
25 |     kernel.sysctl = {
26 |       "fs.inotify.max_user_watches" = 524288;
27 |     };
28 |   };
29 | }
30 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/budgie.nix.disabled:
--------------------------------------------------------------------------------
1 | ../../../modules/de/budgie/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/docker.nix:
--------------------------------------------------------------------------------
1 | {
2 |   config.virtualisation.docker.enable = true;
3 | }
4 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/flatpak.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/flatpak/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/fs.nix:
--------------------------------------------------------------------------------
 1 | { config, ... }:
 2 | let
 3 |   byLabel = label: "/dev/disk/by-label/${label}";
 4 |   f2fsOptions = [
 5 |     "compress_algorithm=zstd:6"
 6 |     "compress_chksum"
 7 |     "atgc"
 8 |     "gc_merge"
 9 |     "lazytime"
10 |   ];
11 | in
12 | {
13 |   fileSystems."/" = {
14 |     device = "none";
15 |     fsType = "tmpfs";
16 |     options = [
17 |       "defaults"
18 |       "size=2G"
19 |       "mode=755"
20 |     ];
21 |   };
22 |   fileSystems."/nix" = {
23 |     device = byLabel "NIX";
24 |     fsType = "f2fs";
25 |     options = f2fsOptions;
26 |   };
27 |   fileSystems."${config.system.persistDir}" = {
28 |     device = byLabel "PERSIST";
29 |     fsType = "f2fs";
30 |     neededForBoot = true;
31 |     options = f2fsOptions;
32 |   };
33 |   fileSystems."/boot" = {
34 |     device = byLabel "BOOT";
35 |     fsType = "vfat";
36 |   };
37 | 
38 |   swapDevices = [ ];
39 |   zramSwap = {
40 |     enable = true;
41 |     algorithm = "zstd";
42 |   };
43 | }
44 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/gamemode.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/gamemode/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/github.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/github.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/gnome.nix.disabled:
--------------------------------------------------------------------------------
1 | ../../../modules/de/gnome/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/gpu.nix.disabled:
--------------------------------------------------------------------------------
 1 | {pkgs, ...}: {
 2 |   environment.systemPackages = with pkgs; [
 3 |     virt-manager
 4 |     virtiofsd
 5 |     looking-glass-client
 6 |   ];
 7 |   virtualisation = {
 8 |     spiceUSBRedirection.enable = true;
 9 |     libvirtd = {
10 |       enable = true;
11 |       # extraConfig = ''
12 |       #   user="patriot"
13 |       # '';
14 |       qemu = {
15 |         ovmf.enable = true;
16 |         # runAsRoot = true;
17 |         # Full is needed for TPM and secure boot emulation
18 |         ovmf.packages = [pkgs.OVMFFull.fd];
19 |         swtpm.enable = true;
20 |         # verbatimConfig = ''
21 |         #   namespaces = []
22 |         #   cgroup_device_acl = [ "/dev/vfio/9", "/dev/kvm", "/dev/null" ]
23 |         #   user = "patriot"
24 |         #   group = "libvirtd"
25 |         # '';
26 |       };
27 |     };
28 |     vfio = {
29 |       enable = true;
30 |       IOMMUType = "amd";
31 |       devices = [
32 |         "10de:25a2" # GPU
33 |       ];
34 |       blacklistNvidia = true;
35 |       ignoreMSRs = true;
36 |       disableEFIfb = false;
37 |     };
38 |     kvmfr = {
39 |       enable = true;
40 |       devices = [
41 |         {
42 |           dimensions = {
43 |             width = 1920;
44 |             height = 1080;
45 |           };
46 |           permissions = {
47 |             user = "patriot";
48 |             group = "kvm";
49 |             mode = "0660";
50 |           };
51 |         }
52 |       ];
53 |     };
54 |   };
55 | }
56 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/greetd.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/de/greetd/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/iphone.nix:
--------------------------------------------------------------------------------
1 | { pkgs, ... }:
2 | {
3 |   services.usbmuxd.enable = true;
4 |   environment.systemPackages = [ pkgs.libimobiledevice ];
5 | }
6 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/joycond.nix:
--------------------------------------------------------------------------------
1 | {
2 |   services.joycond.enable = true;
3 |   # hardware.xpadneo.enable = true;
4 |   hardware.xone.enable = true;
5 | }
6 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/keychron-v4.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/keyboards/keychron-v4/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/libvirtd.nix.disabled:
--------------------------------------------------------------------------------
1 | ../../../modules/libvirtd/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/network.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/network/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/persist.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/persist/default.nix


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/secrets.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   age.identityPaths = [ "/persist/keys/ssh_key" ];
 3 | 
 4 |   age.secrets.nixGithubAccessToken.file = ../../../secrets/nixGithubAccessToken.age;
 5 |   age.secrets.wgTkarontoKey = {
 6 |     file = ../../../secrets/wgTkarontoKey.age;
 7 |     mode = "600";
 8 |     owner = "systemd-network";
 9 |     group = "systemd-network";
10 |   };
11 | 
12 |   # age.secrets.nixBuildKey = {
13 |   #   file = ../../../secrets/nixBuildKey.age;
14 |   #   owner = "root";
15 |   #   group = "nix-build-key-access";
16 |   # };
17 |   # users.groups."nix-build-key-access" = {};
18 | }
19 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/tlp.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   services.tlp = {
 3 |     enable = true;
 4 |     settings = {
 5 |       RADEON_DPM_PERF_LEVEL_ON_AC = "auto";
 6 |       RADEON_DPM_PERF_LEVEL_ON_BAT = "auto";
 7 |       RADEON_DPM_STATE_ON_AC = "balanced";
 8 |       RADEON_DPM_STATE_ON_BAT = "battery";
 9 |       PCIE_ASPM_ON_AC = "default";
10 |       PCIE_ASPM_ON_BAT = "powersupersave";
11 |       PLATFORM_PROFILE_ON_AC = "balanced";
12 |       PLATFORM_PROFILE_ON_BAT = "low-power";
13 |       NMI_WATCHDOG = 0;
14 |       CPU_DRIVER_OPMODE_ON_AC = "active";
15 |       CPU_DRIVER_OPMODE_ON_BAT = "active";
16 |       CPU_ENERGY_PERF_POLICY_ON_AC = "balance_power";
17 |       CPU_ENERGY_PERF_POLICY_ON_BAT = "balance_power";
18 |       CPU_SCALING_GOVERNOR_ON_AC = "powersave";
19 |       CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
20 |       SOUND_POWER_SAVE_ON_AC = 1;
21 |       SOUND_POWER_SAVE_ON_BAT = 1;
22 |       RUNTIME_PM_ON_AC = "auto";
23 |       RUNTIME_PM_ON_BAT = "auto";
24 |     };
25 |   };
26 | }
27 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/waydroid.nix.disabled:
--------------------------------------------------------------------------------
1 | {config, ...}: {
2 |   virtualisation.waydroid.enable = true;
3 |   environment.persistence."${config.system.persistDir}" = {
4 |     directories = ["/var/lib/waydroid"];
5 |   };
6 | }
7 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/weylus.nix.disabled:
--------------------------------------------------------------------------------
1 | {
2 |   programs.weylus = {
3 |     enable = true;
4 |     users = ["patriot"];
5 |     openFirewall = true;
6 |   };
7 | }
8 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/wgWolumondeIp:
--------------------------------------------------------------------------------
1 | 23.88.101.188


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/wgWolumondeKey.pub:
--------------------------------------------------------------------------------
1 | wua7uoPmmz0nXop3TKJOEUJ++LSmJdQxCRk9rNbPaAg=
2 | 


--------------------------------------------------------------------------------
/hosts/tkaronto/modules/wireguard.nix:
--------------------------------------------------------------------------------
 1 | { config, ... }:
 2 | {
 3 |   systemd.network.enable = true;
 4 |   systemd.network.netdevs."wg0" = {
 5 |     enable = true;
 6 |     netdevConfig = {
 7 |       Name = "wg0";
 8 |       Kind = "wireguard";
 9 |     };
10 |     wireguardConfig = {
11 |       PrivateKeyFile = config.age.secrets.wgTkarontoKey.path;
12 |     };
13 |     wireguardPeers = [
14 |       {
15 |         wireguardPeerConfig = {
16 |           PublicKey = builtins.readFile ./wgWolumondeKey.pub;
17 |           AllowedIPs = [ "10.99.0.1/32" ];
18 |           Endpoint = "${builtins.readFile ./wgWolumondeIp}:51820";
19 |           PersistentKeepalive = 25;
20 |         };
21 |       }
22 |     ];
23 |   };
24 |   systemd.network.networks."wg0" = {
25 |     matchConfig.Name = "wg0";
26 |     networkConfig.Address = "10.99.0.2/24";
27 |     # routes = [
28 |     #   {
29 |     #     routeConfig = {
30 |     #       Gateway = "10.99.0.1";
31 |     #       Destination = "10.99.0.0/24";
32 |     #       GatewayOnLink = true;
33 |     #     };
34 |     #   }
35 |     # ];
36 |   };
37 | }
38 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   inputs,
 3 |   tlib,
 4 |   pkgs,
 5 |   ...
 6 | }:
 7 | {
 8 |   imports = [
 9 |     inputs.agenix.nixosModules.default
10 |     # inputs.nixtopo.nixosModules.default
11 |   ] ++ (tlib.importFolder (toString ./modules));
12 | 
13 |   environment.systemPackages = with pkgs; [
14 |     magic-wormhole-rs
15 |     systemctl-tui
16 |   ];
17 | 
18 |   boot.tmp.cleanOnBoot = true;
19 |   zramSwap.enable = true;
20 | 
21 |   # firewall stuffs
22 |   networking.firewall = {
23 |     enable = true;
24 |     allowedTCPPorts = [
25 |       22
26 |       80
27 |       443
28 |       5005
29 |     ];
30 |     allowedUDPPortRanges = [ ];
31 |   };
32 | 
33 |   virtualisation.docker.enable = false;
34 | 
35 |   system.stateVersion = "22.05";
36 | }
37 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/arpa.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, config, ... }:
 2 | let
 3 |   index = pkgs.writeText "index.txt" ''
 4 |     hi there~
 5 | 
 6 |     you are currently interfacing with one of the data endpoints
 7 |     of entity with serial id /90008/. you may want to open a
 8 |     connection to https://gaze.systems/about for more data.
 9 | 
10 |     /discord         yusdacra/
11 |     /bsky       @gaze.systems/
12 |     /email 90008@gaze.systems/
13 | 
14 |     /dig +short TXT 9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa/
15 |   '';
16 |   root = pkgs.runCommand "root" { } ''
17 |     mkdir -p $out
18 |     ln -s ${index} $out/index.txt
19 |   '';
20 | in
21 | {
22 |   services.nginx.virtualHosts."9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa" = {
23 |     inherit root;
24 |     locations."/".index = "index.txt";
25 |     quic = true;
26 |     kTLS = true;
27 |   };
28 | }
29 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/atproto.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, lib, ... }:
 2 | let
 3 |   getFileType = name: if lib.hasSuffix ".json" name then "application/json" else "text/plain";
 4 |   mkWellKnownCfg = files: {
 5 |     locations = (
 6 |       lib.mapAttrs' (name: file: {
 7 |         name = "=/.well-known/${name}";
 8 |         value = {
 9 |           extraConfig = ''
10 |             alias ${file};
11 |             add_header access-control-allow-origin *;
12 |             default_type ${getFileType name};
13 |           '';
14 |         };
15 |       }) files
16 |     );
17 |   };
18 |   mkDidWebCfg = domain: {
19 |     "${domain}" =
20 |       (mkWellKnownCfg {
21 |         "did.json" = ../../../secrets/${domain}.did;
22 |         "atproto-did" = pkgs.writeText "server" "did:web:${domain}";
23 |       })
24 |       // (lib.optionalAttrs (lib.hasSuffix "gaze.systems" domain) {
25 |         useACMEHost = "gaze.systems";
26 |         forceSSL = true;
27 |         quic = true;
28 |         kTLS = true;
29 |       });
30 |   };
31 | in
32 | {
33 |   services.nginx.virtualHosts =
34 |     {
35 |       "gaze.systems" =
36 |         (mkWellKnownCfg {
37 |           "atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";
38 |         })
39 |         // {
40 |           useACMEHost = "gaze.systems";
41 |           forceSSL = true;
42 |           quic = true;
43 |           kTLS = true;
44 |         };
45 |       # "9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa" = mkWellKnownCfg {
46 |       #   "atproto-did" = pkgs.writeText "server" "did:plc:dfl62fgb7wtjj3fcbb72naae";
47 |       # };
48 |     }
49 |     // (mkDidWebCfg "dawn.gaze.systems")
50 |     // (mkDidWebCfg "guestbook.gaze.systems");
51 |   # // (mkDidWebCfg "9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa");
52 | }
53 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/bernbot.disabled:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   inputs,
 4 |   pkgs,
 5 |   lib,
 6 |   ...
 7 | }:
 8 | let
 9 |   bernbotPkg = inputs.bernbot.packages.${pkgs.system}.bernbot-release;
10 | in
11 | {
12 |   systemd.services.bernbot = {
13 |     description = "bernbot";
14 |     wantedBy = [ "multi-user.target" ];
15 |     after = [ "network.target" ];
16 |     serviceConfig = lib.mkMerge [
17 |       {
18 |         User = "bernbot";
19 |         ExecStart = "${bernbotPkg}/bin/bernbot";
20 |         Restart = "on-failure";
21 |         RestartSec = 5;
22 |         WorkingDirectory = "/var/lib/bernbot";
23 |         EnvironmentFile = config.age.secrets.bernbotToken.path;
24 |       }
25 |     ];
26 |   };
27 |   users.users.bernbot = {
28 |     isSystemUser = true;
29 |     group = "bernbot";
30 |   };
31 |   users.groups.bernbot = { };
32 | }
33 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/blog.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   pkgs,
 4 |   inputs,
 5 |   ...
 6 | }:
 7 | let
 8 |   PUBLIC_BASE_URL = "https://gaze.systems";
 9 |   pkg = inputs.blog.packages.${pkgs.system}.default.overrideAttrs (old: {
10 |     inherit PUBLIC_BASE_URL;
11 |   });
12 |   port = 3003;
13 | in
14 | {
15 |   users.users.website = {
16 |     isSystemUser = true;
17 |     group = "website";
18 |   };
19 |   users.groups.website = { };
20 | 
21 |   systemd.services.website = {
22 |     description = "website";
23 |     wantedBy = [ "multi-user.target" ];
24 |     after = [
25 |       "network.target"
26 |       "guestbook.service"
27 |     ];
28 |     environment = {
29 |       HOME = "/var/lib/website";
30 |       ORIGIN = PUBLIC_BASE_URL;
31 |       PORT = toString port;
32 |       GUESTBOOK_BASE_URL = "http://localhost:8080";
33 |       WEBSITE_DATA_DIR = "/var/lib/website";
34 |       VITE_CLOUDINARY_CLOUD_NAME = "dgtwf7mar";
35 |     };
36 |     serviceConfig = {
37 |       User = "website";
38 |       ExecStart = "${pkg}/bin/website";
39 |       Restart = "on-failure";
40 |       RestartSec = 5;
41 |       WorkingDirectory = "/var/lib/website";
42 |       EnvironmentFile = config.age.secrets.websiteConfig.path;
43 |     };
44 |   };
45 | 
46 |   services.nginx.virtualHosts."gaze.systems" = {
47 |     quic = true;
48 |     kTLS = true;
49 |     useACMEHost = "gaze.systems";
50 |     forceSSL = true;
51 |     locations."/" = {
52 |       proxyPass = "http://localhost:${toString port}";
53 |     };
54 |   };
55 | }
56 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/conduit.disabled:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   pkgs,
 4 |   inputs,
 5 |   ...
 6 | }: let
 7 |   _wellKnownFileClient = pkgs.writeText "client" (
 8 |     builtins.toJSON
 9 |     {
10 |       "m.homeserver"."base_url" = "https://matrix.gaze.systems";
11 |       "org.matrix.msc3575.proxy"."url" = "https://matrix.gaze.systems";
12 |     }
13 |   );
14 |   _wellKnownFileServer =
15 |     pkgs.writeText "server"
16 |     (builtins.toJSON {"m.server" = "matrix.gaze.systems:443";});
17 |   wellKnownFiles = pkgs.runCommand "well-known" {} ''
18 |     mkdir -p $out
19 |     cp ${_wellKnownFileServer} $out/server
20 |     cp ${_wellKnownFileClient} $out/client
21 |   '';
22 | in {
23 |   services.matrix-conduit = {
24 |     enable = true;
25 |     package = inputs.conduit.packages.${pkgs.system}.default;
26 |     settings.global = {
27 |       server_name = "gaze.systems";
28 |       max_request_size = 1000 * 1000 * 20;
29 |       allow_registration = false;
30 |       allow_federation = true;
31 |       trusted_servers = ["matrix.org" "nixos.dev" "conduit.rs"];
32 |       address = "::1";
33 |       port = 6167;
34 |       database_backend = "rocksdb";
35 |     };
36 |   };
37 | 
38 |   services.nginx.virtualHosts."matrix.gaze.systems" = {
39 |     useACMEHost = "gaze.systems";
40 |     forceSSL = true;
41 |     locations."/".proxyPass = "http://localhost:${toString config.services.matrix-conduit.settings.global.port}";
42 |   };
43 |   services.nginx.virtualHosts."gaze.systems" = {
44 |     locations."/.well-known/matrix/".extraConfig = ''
45 |       add_header content-type application/json;
46 |       add_header access-control-allow-origin *;
47 |       alias ${wellKnownFiles}/;
48 |     '';
49 |   };
50 | }
51 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/couchdb.disabled:
--------------------------------------------------------------------------------
 1 | {config, ...}: {
 2 |   services.couchdb = {
 3 |     enable = true;
 4 |     port = 5999;
 5 |     configFile = "/var/lib/couchdb/config";
 6 |   };
 7 |   services.nginx.virtualHosts."couchdb.gaze.systems" = {
 8 |     useACMEHost = "gaze.systems";
 9 |     forceSSL = true;
10 |     locations."/".proxyPass = "http://localhost:${toString config.services.couchdb.port}";
11 |     # locations."/".extraConfig = ''
12 |     #   add_header 'Access-Control-Allow-Credentials' 'true';
13 |     #   add_header 'Access-Control-Allow-Methods' 'GET, PUT, POST, HEAD, DELETE';
14 |     #   add_header 'Access-Control-Allow-Headers' 'Accept,Authorization,Content-Type,Origin,Referer';
15 |     #   add_header 'Access-Control-Max-Age' 3600;
16 |     # '';
17 |   };
18 | }
19 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/fluentbit.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   config,
 4 |   lib,
 5 |   ...
 6 | }:
 7 | {
 8 |   services.fluent-bit = {
 9 |     enable = true;
10 |     settings = {
11 |       service.flush = 1;
12 |       pipeline.inputs = [
13 |         {
14 |           name = "node_exporter_metrics";
15 |           tag = "metrics.node";
16 |           scrape_interval = 5;
17 |         }
18 |         # {
19 |         #   name = "dummy";
20 |         #   tag = "logs.dummy";
21 |         #   dummy = ''{"_msg": "dummy"}'';
22 |         # }
23 |         {
24 |           name = "fluentbit_metrics";
25 |           tag = "metrics.fluentbit";
26 |           scrape_interval = 5;
27 |         }
28 |       ];
29 |     };
30 |   };
31 | 
32 |   systemd.services.fluent-bit.serviceConfig.StateDirectory = "fluent-bit";
33 | }
34 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo-runner.disabled:
--------------------------------------------------------------------------------
 1 | {pkgs, config, ...}: {
 2 |   services.gitea-actions-runner.package = pkgs.forgejo-runner;
 3 |   services.gitea-actions-runner.instances."thermex" = {
 4 |     enable = true;
 5 |     url = config.services.forgejo.settings.server.ROOT_URL;
 6 |     name = "thermex";
 7 |     tokenFile = config.age.secrets.forgejoActRunnerToken.path;
 8 |     labels = ["docker:docker://yusdacra/lixpine:latest"];
 9 |     settings.container.privileged = true;
10 |   };
11 | }
12 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, lib, config, ... }:
 2 | let
 3 |   forgejoCfg = config.services.forgejo.settings;
 4 |   anubisCfg = config.services.anubis.instances."forgejo".settings;
 5 | in
 6 | {
 7 |   services.forgejo = {
 8 |     enable = true;
 9 |     package = pkgs.forgejo;
10 |     lfs.enable = true;
11 |     settings = {
12 |       DEFAULT.APP_NAME = "awruff ^^";
13 |       server = {
14 |         DOMAIN = "git.gaze.systems";
15 |         ROOT_URL = "https://git.gaze.systems/";
16 |         HTTP_PORT = 9008;
17 |       };
18 |       service = {
19 |         DISABLE_REGISTRATION = true;
20 |       };
21 |       security.REVERSE_PROXY_TRUSTED_PROXIES = "127.0.0.0/8,::1/128";
22 |       session.COOKIE_SECURE = true;
23 |       ui = {
24 |         DEFAULT_SHOW_FULL_NAME = true;
25 |         DEFAULT_THEME = "edge-dark";
26 |         THEMES = "edge-dark,forgejo-dark";
27 |         THEME_COLOR_META_TAG = "#333644";
28 |       };
29 |       "ui.meta" = {
30 |         DESCRIPTION = "nyan? arf!!!! :3";
31 |       };
32 |       metrics.ENABLED = true;
33 |     };
34 |   };
35 | 
36 |   # copy custom data stuff
37 |   systemd.services.forgejo.preStart = let
38 |     customDir = "${config.services.forgejo.stateDir}/custom";
39 |     getCustomDir = name: "${customDir}/${name}";
40 |     makeCopyCommand = dir: ''
41 |       mkdir -p ${customDir}
42 |       rm -rf ${getCustomDir dir}
43 |       cp -r --no-preserve=mode,ownership ${./forgejo/${dir}} ${getCustomDir dir}
44 |     '';
45 |   in
46 |     lib.concatMapStrings makeCopyCommand ["templates" "public"];
47 | 
48 |   services.nginx.virtualHosts."git.gaze.systems" = {
49 |     useACMEHost = "gaze.systems";
50 |     forceSSL = true;
51 |     quic = true;
52 |     kTLS = true;
53 |     # disallow metrics for public
54 |     locations."/metrics".return = "403";
55 |     locations."/" = {
56 |       extraConfig = ''
57 |         client_max_body_size 1000m;
58 |       '';
59 |       proxyPass = "http://localhost${anubisCfg.BIND}";
60 |     };
61 |   };
62 | 
63 |   services.anubis.instances."forgejo".settings = {
64 |     BIND = ":6293";
65 |     BIND_NETWORK = "tcp";
66 |     METRICS_BIND = ":9090";
67 |     METRICS_BIND_NETWORK = "tcp";
68 |     TARGET = "http://localhost:${toString forgejoCfg.server.HTTP_PORT}";
69 |     WEBMASTER_EMAIL = "90008@gaze.systems";
70 |     SERVE_ROBOTS_TXT = true;
71 |     OG_PASSTHROUGH = true;
72 |     DIFFICULTY = 4;
73 |   };
74 | 
75 |   # scrape forgejo metrics
76 |   services.victoriametrics.prometheusConfig.scrape_configs = [
77 |     {
78 |       job_name = "forgejo";
79 |       metrics_path = "/metrics";
80 |       static_configs = [ { targets = [ "localhost:${toString forgejoCfg.server.HTTP_PORT}" ]; } ];
81 |     }
82 |     {
83 |       job_name = "anubis_forgejo";
84 |       metrics_path = "/metrics";
85 |       static_configs = [ { targets = [ "localhost${anubisCfg.METRICS_BIND}" ]; } ];
86 |     }
87 |   ];
88 | }
89 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo/public/assets/fonts/comic.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/hosts/wolumonde/modules/forgejo/public/assets/fonts/comic.woff2


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo/public/assets/fonts/comicbd.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/hosts/wolumonde/modules/forgejo/public/assets/fonts/comicbd.woff2


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo/public/assets/fonts/comici.woff2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/hosts/wolumonde/modules/forgejo/public/assets/fonts/comici.woff2


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo/public/assets/img/favicon.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/hosts/wolumonde/modules/forgejo/public/assets/img/favicon.png


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo/public/assets/img/grrr.webp:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/hosts/wolumonde/modules/forgejo/public/assets/img/grrr.webp


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo/public/assets/img/logo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/hosts/wolumonde/modules/forgejo/public/assets/img/logo.png


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo/public/assets/img/wecode.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/hosts/wolumonde/modules/forgejo/public/assets/img/wecode.gif


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo/templates/base/head.tmpl:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="{{ctx.Locale.Lang}}" data-theme="{{ThemeName .SignedUser}}">
 3 | <head>
 4 | 	<meta name="viewport" content="width=device-width, initial-scale=1">
 5 | 	{{/* Display `- .Repository.FullName` only if `.Title` does not already start with that. */}}
 6 | 	<title>{{if .Title}}{{.Title}} - {{end}}{{if and (.Repository.Name) (not (StringUtils.HasPrefix .Title .Repository.FullName))}}{{.Repository.FullName}} - {{end}}{{AppDisplayName}}</title>
 7 | 	{{if .ManifestData}}<link rel="manifest" href="data:{{.ManifestData}}">{{end}}
 8 | 	<meta name="author" content="{{if .Repository}}{{.Owner.Name}}{{else}}{{MetaAuthor}}{{end}}">
 9 | 	<meta name="description" content="{{if .Repository}}{{.Repository.Name}}{{if .Repository.Description}} - {{.Repository.Description}}{{end}}{{else}}{{MetaDescription}}{{end}}">
10 | 	<meta name="keywords" content="{{MetaKeywords}}">
11 | 	<meta name="referrer" content="no-referrer">
12 | {{if .GoGetImport}}
13 | 	<meta name="go-import" content="{{.GoGetImport}} git {{.RepoCloneLink.HTTPS}}">
14 | 	<meta name="go-source" content="{{.GoGetImport}} _ {{.GoDocDirectory}} {{.GoDocFile}}">
15 | {{end}}
16 | {{if and .EnableFeed .FeedURL}}
17 | 	<link rel="alternate" type="application/atom+xml" title="" href="{{.FeedURL}}.atom">
18 | 	<link rel="alternate" type="application/rss+xml" title="" href="{{.FeedURL}}.rss">
19 | {{end}}
20 | 	<link rel="alternate icon" href="{{AssetUrlPrefix}}/img/favicon.png" type="image/png">
21 | 	{{template "base/head_script" .}}
22 | 	{{template "shared/user/mention_highlight" .}}
23 | 	{{template "base/head_opengraph" .}}
24 | 	{{template "base/head_style" .}}
25 | 	{{template "custom/header" .}}
26 | </head>
27 | <body hx-headers='{"x-csrf-token": "{{.CsrfToken}}"}' hx-swap="outerHTML" hx-ext="morph" hx-push-url="false">
28 | 	{{template "custom/body_outer_pre" .}}
29 | 
30 | 	<div class="full height">
31 | 		<noscript>{{ctx.Locale.Tr "enable_javascript"}}</noscript>
32 | 
33 | 		{{template "custom/body_inner_pre" .}}
34 | 
35 | 		{{if not .PageIsInstall}}
36 | 			{{template "base/head_navbar" .}}
37 | 		{{end}}
38 | 
39 | {{if false}}
40 | 	{{/* to make html structure "likely" complete to prevent IDE warnings */}}
41 | 	</div>
42 | </body>
43 | </html>
44 | {{end}}
45 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/forgejo/templates/home.tmpl:
--------------------------------------------------------------------------------
 1 | {{template "base/head" .}}
 2 | <div role="main" aria-label="{{if .IsSigned}}{{ctx.Locale.Tr "dashboard"}}{{else}}{{ctx.Locale.Tr "home"}}{{end}}" class="page-content home">
 3 | 	<div class="tw-mb-8 tw-px-8">
 4 | 		<div class="center">
 5 | 			<img class="logo" width="220" height="220" src="https://git.gaze.systems/assets/img/grrr.webp" alt="i hate software" title="i hate software">
 6 | 			<div class="hero">
 7 | 				<h2>software</h2>
 8 | 			</div>
 9 | 			<div style="height: 200vh;"></div>
10 | 			<img class="logo" width="220" height="220" src="https://git.gaze.systems/assets/img/wecode.gif" alt="forgejo. beyond coding. we forge. but lowtiergod" title="skies ur rina">
11 | 		</div>
12 | 	</div>
13 | </div>
14 | {{template "base/footer" .}}
15 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/gitea-act.disabled:
--------------------------------------------------------------------------------
 1 | {pkgs, config, ...}: {
 2 |   services.gitea-actions-runner.instances."thermex" = {
 3 |     enable = true;
 4 |     url = config.services.gitea.settings.server.ROOT_URL;
 5 |     name = "thermex";
 6 |     tokenFile = config.age.secrets.giteaActRunnerToken.path;
 7 |     labels = ["native:host"];
 8 |     hostPackages = with pkgs; [
 9 |       bash
10 |       coreutils
11 |       curl
12 |       gawk
13 |       git
14 |       git-lfs
15 |       gnused
16 |       nodejs
17 |       wget
18 |       gnutar
19 |       gzip
20 |     ];
21 |   };
22 | }
23 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/gitea.disabled:
--------------------------------------------------------------------------------
 1 | {config, ...}: {
 2 |   services.gitea = {
 3 |     enable = true;
 4 |     lfs.enable = true;
 5 |     appName = "meow :3";
 6 |     settings = {
 7 |       server = {
 8 |         DOMAIN = "git.gaze.systems";
 9 |         ROOT_URL = "https://git.gaze.systems/";
10 |         HTTP_PORT = 3001;
11 |       };
12 |       service = {
13 |         DISABLE_REGISTRATION = false;
14 |         ALLOW_ONLY_EXTERNAL_REGISTRATION = true;
15 |       };
16 |       session.COOKIE_SECURE = true;
17 |       repository.MAX_CREATION_LIMIT = 0;
18 |       oauth2_client = {
19 |         ENABLE_AUTO_REGISTRATION = false;
20 |         UPDATE_AVATAR = true;
21 |       };
22 |       attachment = {
23 |         MAX_SIZE = 100;
24 |       };
25 |       ui = {
26 |         DEFAULT_SHOW_FULL_NAME = true;
27 |         DEFAULT_THEME = "edge-dark";
28 |         THEMES = "edge-dark,gitea";
29 |         THEME_COLOR_META_TAG = "#333644";
30 |       };
31 |     };
32 |   };
33 | 
34 |   services.nginx.virtualHosts."git.gaze.systems" = {
35 |     useACMEHost = "gaze.systems";
36 |     forceSSL = true;
37 |     locations."/" = {
38 |       extraConfig = ''
39 |         client_max_body_size 50m;
40 |       '';
41 |       proxyPass = "http://localhost:${toString config.services.gitea.settings.server.HTTP_PORT}";
42 |     };
43 |   };
44 | }
45 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/grafana.disabled:
--------------------------------------------------------------------------------
 1 | {config, ...}:
 2 | let
 3 |   grafanaCfg = config.services.grafana.settings;
 4 | in
 5 | {
 6 |   services.grafana = {
 7 |     enable = true;
 8 |     settings = {
 9 |       server = {
10 |         http_port = 7412;
11 |         enforce_domain = true;
12 |         enable_gzip = true;
13 |         domain = "dash.gaze.systems";
14 |       };
15 |       security = {
16 |         cookie_secure = true;
17 |       };
18 |       analytics = {
19 |         feedback_links_enabled = false;
20 |         reporting_enabled = false;
21 |       };
22 |     };
23 |   };
24 | 
25 |   services.nginx.virtualHosts.${grafanaCfg.server.domain} = {
26 |     useACMEHost = "gaze.systems"; # TODO: write a module to define vhosts for subdomains
27 |     quic = true;
28 |     kTLS = true;
29 |     forceSSL = true;
30 |     locations."/" = {
31 |       proxyPass = "http://localhost:${toString grafanaCfg.server.http_port}";
32 |     };
33 |   };
34 | }
35 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/guestbook.disabled:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   inputs,
 4 |   ...
 5 | }: let
 6 |   GUESTBOOK_WEBSITE_URI = "https://gaze.systems";
 7 |   pkg = inputs.blog.packages.${pkgs.system}.guestbook;
 8 |   port = 8080;
 9 | in {
10 |   users.users.guestbook = {
11 |     isSystemUser = true;
12 |     group = "guestbook";
13 |   };
14 |   users.groups.guestbook = {};
15 | 
16 |   systemd.services.guestbook = {
17 |     description = "guestbook";
18 |     wantedBy = ["multi-user.target"];
19 |     after = ["network.target"];
20 |     serviceConfig = {
21 |       User = "guestbook";
22 |       ExecStart = "${pkg}/bin/guestbook";
23 |       Restart = "on-failure";
24 |       RestartSec = 5;
25 |       WorkingDirectory = "/var/lib/guestbook";
26 |       Environment = "HOME=/var/lib/guestbook";
27 |       EnvironmentFile = pkgs.writeText "guestbook-env" ''
28 |         GUESTBOOK_WEBSITE_URI="${GUESTBOOK_WEBSITE_URI}"
29 |         PORT=${toString port}
30 |       '';
31 |     };
32 |   };
33 | }
34 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/hardware-configuration.nix:
--------------------------------------------------------------------------------
 1 | { modulesPath, ... }:
 2 | {
 3 |   imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
 4 |   boot.loader.grub.device = "/dev/sda";
 5 |   boot.initrd.availableKernelModules = [
 6 |     "ata_piix"
 7 |     "uhci_hcd"
 8 |     "xen_blkfront"
 9 |   ];
10 |   boot.initrd.kernelModules = [ "nvme" ];
11 |   fileSystems."/" = {
12 |     device = "/dev/sda1";
13 |     fsType = "ext4";
14 |   };
15 | }
16 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/hedgedoc.nix:
--------------------------------------------------------------------------------
 1 | { config, ... }:
 2 | {
 3 |   services.hedgedoc = {
 4 |     enable = true;
 5 |     settings = {
 6 |       port = 3333;
 7 |       domain = "doc.gaze.systems";
 8 |       protocolUseSSL = true;
 9 |       allowEmailRegister = false;
10 |       allowAnonymous = false;
11 |       allowAnonymousEdits = true;
12 |       allowFreeURL = true;
13 |       requireFreeURLAuthentication = true;
14 |     };
15 |   };
16 | 
17 |   services.nginx.virtualHosts."doc.gaze.systems" = {
18 |     useACMEHost = "gaze.systems";
19 |     forceSSL = true;
20 |     quic = true;
21 |     kTLS = true;
22 |     locations."/".proxyPass =
23 |       "http://${config.services.hedgedoc.settings.host}:${toString config.services.hedgedoc.settings.port}";
24 |   };
25 | }
26 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/limbusart.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   inputs,
 3 |   pkgs,
 4 |   lib,
 5 |   ...
 6 | }:
 7 | let
 8 |   pkg = inputs.limbusart.packages.${pkgs.system}.default;
 9 | in
10 | {
11 |   systemd.services.limbusart = {
12 |     description = "limbusart";
13 |     wantedBy = [ "multi-user.target" ];
14 |     after = [ "network.target" ];
15 |     serviceConfig = lib.mkMerge [
16 |       {
17 |         User = "limbusart";
18 |         ExecStart = "${pkg}/bin/limbusart";
19 |         Restart = "on-failure";
20 |         RestartSec = 5;
21 |         WorkingDirectory = "/var/lib/limbusart";
22 |         EnvironmentFile = pkgs.writeText "limbusart.conf" ''
23 |           ARTS_PATH="arts.txt"
24 |           SITE_TITLE="random pm art"
25 |           EMBED_TITLE="random pm art here!!"
26 |           EMBED_DESC="click NOW to see random pm art"
27 |           EMBED_COLOR="#bd0000"
28 |         '';
29 |       }
30 |     ];
31 |   };
32 |   users.users.limbusart = {
33 |     isSystemUser = true;
34 |     group = "limbusart";
35 |   };
36 |   users.groups.limbusart = { };
37 | 
38 |   services.nginx.virtualHosts."pmart.gaze.systems" = {
39 |     useACMEHost = "gaze.systems";
40 |     forceSSL = true;
41 |     quic = true;
42 |     kTLS = true;
43 |     locations."/".proxyPass = "http://localhost:3000";
44 |   };
45 |   # redirects
46 |   services.nginx.virtualHosts."limbus.gaze.systems" = {
47 |     useACMEHost = "gaze.systems";
48 |     forceSSL = true;
49 |     quic = true;
50 |     kTLS = true;
51 |     globalRedirect = "pmart.gaze.systems";
52 |   };
53 | }
54 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/mosh.nix:
--------------------------------------------------------------------------------
1 | {
2 |   programs.mosh.enable = true;
3 | }
4 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/musikquadrupled.disabled:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   inputs,
 4 |   pkgs,
 5 |   ...
 6 | }: let
 7 |   pkg = inputs.musikquad.packages.${pkgs.system}.default;
 8 | in {
 9 |   users.users.musikquad = {
10 |     isSystemUser = true;
11 |     group = "musikquad";
12 |   };
13 |   users.groups.musikquad = {};
14 | 
15 |   systemd.services.musikquadrupled = {
16 |     description = "musikquadrupled";
17 |     wantedBy = ["multi-user.target"];
18 |     after = ["network.target"];
19 |     serviceConfig = {
20 |       User = "musikquad";
21 |       ExecStart = "${pkg}/bin/musikquadrupled";
22 |       Restart = "on-failure";
23 |       RestartSec = 5;
24 |       WorkingDirectory = "/var/lib/musikquad";
25 |       EnvironmentFile = config.age.secrets.musikquadConfig.path;
26 |     };
27 |   };
28 | 
29 |   services.nginx.virtualHosts."mq.gaze.systems" = {
30 |     useACMEHost = "gaze.systems";
31 |     forceSSL = true;
32 |     locations."/" = {
33 |       proxyPass = "http://localhost:5005";
34 |       proxyWebsockets = true;
35 |     };
36 |   };
37 | }
38 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/musikspider.disabled:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   inputs,
 4 |   ...
 5 | }: let
 6 |   pkg =
 7 |     inputs.musikspider.packages.${pkgs.system}.musikspider.overrideAttrs
 8 |     (old: {
 9 |       LOCAL_MUSIKQUAD_SERVER = "http://127.0.0.1:5005";
10 |       PUBLIC_MUSIKQUAD_SERVER = "mq.gaze.systems";
11 |       PUBLIC_BASEURL = "ms.gaze.systems";
12 |     });
13 |   port = "4004";
14 | in {
15 |   users.users.musikspider = {
16 |     isSystemUser = true;
17 |     group = "musikspider";
18 |   };
19 |   users.groups.musikspider = {};
20 | 
21 |   systemd.services.musikspider = {
22 |     description = "musikspider";
23 |     wantedBy = ["multi-user.target"];
24 |     after = ["network.target"];
25 |     serviceConfig = {
26 |       User = "musikspider";
27 |       ExecStart = "${pkg}/bin/musikspider";
28 |       Restart = "on-failure";
29 |       RestartSec = 5;
30 |       WorkingDirectory = "/var/lib/musikspider";
31 |       Environment = "HOME=/var/lib/musikspider";
32 |       EnvironmentFile = pkgs.writeText "musikspider-env" ''
33 |         PORT=${port}
34 |       '';
35 |     };
36 |   };
37 | 
38 |   services.nginx.virtualHosts."ms.gaze.systems" = {
39 |     useACMEHost = "gaze.systems";
40 |     forceSSL = true;
41 |     locations."/" = {
42 |       proxyPass = "http://localhost:${port}";
43 |       proxyWebsockets = true;
44 |     };
45 |   };
46 | }
47 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/nginx.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   lib,
  3 |   inputs,
  4 |   pkgs,
  5 |   ...
  6 | }:
  7 | {
  8 |   services.nginx = {
  9 |     enable = true;
 10 |     package = pkgs.nginxQuic;
 11 |     recommendedTlsSettings = true;
 12 |     recommendedOptimisation = true;
 13 |     recommendedGzipSettings = true;
 14 |     recommendedProxySettings = true;
 15 |     # /nginx_status
 16 |     statusPage = true;
 17 |   };
 18 | 
 19 |   # output json logs so we can consume them more easily
 20 |   services.nginx.appendHttpConfig = ''
 21 |     log_format json_logs escape=json '{'
 22 |       '"_msg":"request completed",'
 23 |       '"time":"$time_local",'
 24 |       '"req.remoteAddr":"$remote_addr",'
 25 |       '"req.method":"$request_method",'
 26 |       '"req.url":"$uri",'
 27 |       '"req.httpVersion":"$server_protocol",'
 28 |       '"res.statusCode":$status,'
 29 |       '"res.bodySize":$body_bytes_sent,'
 30 |       '"req.headers.id":"$request_id",'
 31 |       '"req.headers.referer":"$http_referer",'
 32 |       '"req.headers.user-agent":"$http_user_agent",'
 33 |       '"requestTime":$request_time'
 34 |     '}';
 35 |     access_log /var/log/nginx/access.log json_logs;
 36 |   '';
 37 | 
 38 |   users.users.nginx.extraGroups = [ "acme" ];
 39 | 
 40 |   security.acme = {
 41 |     acceptTerms = true;
 42 |     defaults.email = (import "${inputs.self}/personal.nix").emails.primary;
 43 |     certs."gaze.systems" = {
 44 |       webroot = "/var/lib/acme/acme-challenge";
 45 |       extraDomainNames = [
 46 |         "git.gaze.systems"
 47 |         # "test.gaze.systems"
 48 |         # "ms.gaze.systems"
 49 |         # "mq.gaze.systems"
 50 |         # "couchdb.gaze.systems"
 51 |         "doc.gaze.systems"
 52 |         "pmart.gaze.systems"
 53 |         "limbus.gaze.systems"
 54 |         # "bsky.gaze.systems"
 55 |         "dawn.gaze.systems"
 56 |         "guestbook.gaze.systems"
 57 |         "webhook.gaze.systems"
 58 |         "dash.gaze.systems"
 59 |         "knot.gaze.systems"
 60 |       ];
 61 |     };
 62 |   };
 63 | 
 64 |   services.fluent-bit.settings = {
 65 |     parsers = [
 66 |       {
 67 |         name = "nginx_json";
 68 |         format = "json";
 69 |         time_key = "time";
 70 |         time_format = "%d/%b/%Y:%H:%M:%S %z";
 71 |       }
 72 |     ];
 73 |     pipeline = {
 74 |       inputs = [
 75 |         {
 76 |           name = "nginx_metrics";
 77 |           tag = "metrics.nginx";
 78 |           status_url = "/nginx_status";
 79 |           nginx_plus = false;
 80 |         }
 81 |         {
 82 |           name = "tail";
 83 |           tag = "logs.nginx";
 84 |           path = "/var/log/nginx/*.log";
 85 |           db = "/var/lib/fluent-bit/nginx-access.db";
 86 |           "db.locking" = true;
 87 |           buffer_chunk_size = "4m";
 88 |           buffer_max_size = "32m";
 89 |           parser = "nginx_json";
 90 |         }
 91 |       ];
 92 |       filters = [
 93 |         {
 94 |           name = "modify";
 95 |           match = "logs.nginx";
 96 |           Add = [ "name nginx" ];
 97 |         }
 98 |       ];
 99 |     };
100 |   };
101 | 
102 |   # need so fluent-bit can access nginx
103 |   systemd.services.fluent-bit.serviceConfig.SupplementaryGroups = lib.mkForce "systemd-journal nginx";
104 | 
105 |   services.vmalert.rules.groups = [
106 |     {
107 |       name = "nginx-logs";
108 |       type = "vlogs";
109 |       interval = "1m";
110 |       rules = [
111 |         {
112 |           record = "nginx_request_count";
113 |           expr = "name:nginx | stats (res.statusCode) count() as total_requests";
114 |         }
115 |         {
116 |           record = "nginx_request_latency";
117 |           # filter out subscribeRepos requests because they are long polling http L
118 |           expr = "name:nginx | filter req.url:!/xrpc/com.atproto.sync.subscribeRepos | stats avg(requestTime) avg, quantile(0.5, requestTime) p50, quantile(0.9, requestTime) p90, quantile(0.99, requestTime) p99";
119 |         }
120 |       ];
121 |     }
122 |   ];
123 | }
124 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/nushell.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/nushell/default.nix


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/pds.nix:
--------------------------------------------------------------------------------
  1 | { lib, config, ... }:
  2 | let
  3 |   pdsLocalhost = "http://localhost:${toString config.services.pds.settings.PDS_PORT}";
  4 | in
  5 | {
  6 |   services.nginx.virtualHosts.${config.services.pds.settings.PDS_HOSTNAME} = {
  7 |     useACMEHost = "gaze.systems";
  8 |     forceSSL = true;
  9 |     locations =
 10 |       {
 11 |         # we need to proxy /xrpc for pds to work
 12 |         # silly but i want root domain >:3
 13 |         "/xrpc" = {
 14 |           proxyPass = pdsLocalhost;
 15 |           # pass ws headers so we can actually proxy the ws
 16 |           extraConfig = ''
 17 |             proxy_set_header Upgrade $http_upgrade;
 18 |             proxy_set_header Connection $connection_upgrade;
 19 |             proxy_set_header id $request_id;
 20 |           '';
 21 |           # higher prio just to make sure
 22 |           priority = 100;
 23 |         };
 24 |       }
 25 |       # others
 26 |       // (lib.genAttrs
 27 |         [
 28 |           "/@atproto"
 29 |           "/oauth"
 30 |           "=/.well-known/oauth-protected-resource"
 31 |           "=/.well-known/oauth-authorization-server"
 32 |         ]
 33 |         (_: {
 34 |           proxyPass = pdsLocalhost;
 35 |           # higher prio just to make sure
 36 |           priority = 100;
 37 |         })
 38 |       );
 39 |   };
 40 |   # setup pds stuff
 41 |   services.pds = {
 42 |     enable = true;
 43 |     settings = {
 44 |       PDS_HOSTNAME = "gaze.systems";
 45 |       PDS_PORT = 1334;
 46 | 
 47 |       PDS_SERVICE_NAME = ''"gazing at the sky"'';
 48 |       PDS_LOGO_URL = "https://gaze.systems/icons/gaze.png";
 49 | 
 50 |       PDS_RATE_LIMITS_ENABLED = "true";
 51 |       PDS_INVITE_REQUIRED = "true";
 52 | 
 53 |       PDS_DID_PLC_URL = "https://plc.directory";
 54 |       PDS_BSKY_APP_VIEW_URL = "https://api.bsky.app";
 55 |       PDS_BSKY_APP_VIEW_DID = "did:web:api.bsky.app";
 56 |       PDS_REPORT_SERVICE_URL = "https://mod.bsky.app";
 57 |       PDS_REPORT_SERVICE_DID = "did:plc:ar7c4by46qjdydhdevvrndac";
 58 |       PDS_CRAWLERS = "https://bsky.network";
 59 |     };
 60 |     environmentFiles = [ config.age.secrets.pdsConfig.path ];
 61 |   };
 62 | 
 63 |   services.fluent-bit.settings = {
 64 |     parsers = [
 65 |       {
 66 |         name = "pds_json";
 67 |         format = "json";
 68 |         time_key = "time";
 69 |         time_strict = false;
 70 |       }
 71 |     ];
 72 |     pipeline = {
 73 |       inputs = [
 74 |         {
 75 |           name = "systemd";
 76 |           tag = "logs.pds";
 77 |           systemd_filter = "_SYSTEMD_UNIT=pds.service";
 78 |         }
 79 |       ];
 80 |       filters = [
 81 |         {
 82 |           name = "parser";
 83 |           match = "logs.pds";
 84 |           key_name = "MESSAGE";
 85 |           parser = "pds_json";
 86 |         }
 87 |         {
 88 |           name = "modify";
 89 |           match = "logs.pds";
 90 |           Rename = [ "msg _msg" ];
 91 |         }
 92 |       ];
 93 |     };
 94 |   };
 95 | 
 96 |   services.vmalert.rules.groups = [
 97 |     {
 98 |       name = "pds-logs";
 99 |       type = "vlogs";
100 |       interval = "1m";
101 |       rules = [
102 |         {
103 |           record = "pds_request_count";
104 |           expr = "name:pds | stats (res.statusCode) count() as total_requests";
105 |         }
106 |         {
107 |           record = "pds_response_latency";
108 |           expr = "name:pds | stats avg(responseTime) avg, quantile(0.5, responseTime) p50, quantile(0.9, responseTime) p90, quantile(0.99, responseTime) p99";
109 |         }
110 |       ];
111 |     }
112 |   ];
113 | 
114 |   # virtualisation = {
115 |   #   podman = {
116 |   #     enable = true;
117 |   #     dockerCompat = true;
118 |   #     defaultNetwork.settings.dns_enabled = true;
119 |   #   };
120 |   #   oci-containers.containers = {
121 |   #     pds = {
122 |   #       image = "ghcr.io/bluesky-social/pds:0.4";
123 |   #       autoStart = true;
124 |   #       environmentFiles = [ ./pds.env config.age.secrets.pdsConfig.path ];
125 |   #       ports = [ "1334:1334" ];
126 |   #       volumes = [
127 |   #         "/var/lib/pds:/pds"
128 |   #       ];
129 |   #       extraOptions = [
130 |   #         #"--network=host"
131 |   #         "--label=io.containers.autoupdate=registry"
132 |   #       ];
133 |   #     };
134 |   #   };
135 |   # };
136 |   # # This is the podman auto-update systemd timer.
137 |   # # If I start to rely on podman auto-update more, I should move this out of the PDS definition.
138 |   # systemd.timers."podman-auto-update" = {
139 |   #   enable = true;
140 |   #   timerConfig = {
141 |   #     OnCalendar = "*-*-* 4:00:00";
142 |   #     Persistent = true;
143 |   #   };
144 |   #   wantedBy = [ "timers.target" ];
145 |   # };
146 | }
147 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses.nix:
--------------------------------------------------------------------------------
  1 | { pkgs, config, ... }:
  2 | let
  3 |   domain = "dash.gaze.systems";
  4 |   port = 7412;
  5 |   user = "perses";
  6 | 
  7 |   provisionFolder = "provisioning";
  8 | 
  9 |   persesConfig = {
 10 |     database.file = {
 11 |       folder = "/perses";
 12 |       extension = "json";
 13 |     };
 14 |     provisioning.folders = [ "/perses/${provisionFolder}" ];
 15 |     security = {
 16 |       enable_auth = true;
 17 |       authentication = {
 18 |         providers.enable_native = true;
 19 |         disable_sign_up = true;
 20 |       };
 21 |       cookie = {
 22 |         same_site = "strict";
 23 |         secure = true;
 24 |       };
 25 |     };
 26 |   };
 27 |   persesConfigYaml = pkgs.writers.writeYAML "config.yaml" persesConfig;
 28 | 
 29 |   persesImage = pkgs.dockerTools.pullImage {
 30 |     imageName = "docker.io/persesdev/perses";
 31 |     imageDigest = "sha256:7d4647ce31841f67c2361bd10ea344de1edd7fbf65711c75805a5aacdc7735d0";
 32 |     sha256 = "sha256-oOQYJzGEEEkjfqlVkEGLOH3e4iywd8QnptY9UxPd1iw=";
 33 |   };
 34 |   persesHealthcheckImage = pkgs.dockerTools.streamLayeredImage {
 35 |     name = "perses";
 36 |     tag = "latest";
 37 |     fromImage = persesImage;
 38 |     contents = [ pkgs.curl ];
 39 |     config.Entrypoint = [ "/bin/perses" ];
 40 |     config.Cmd = [
 41 |       "--config=${persesConfigYaml}"
 42 |       "--log.level=info"
 43 |       "--web.listen-address=:${toString port}"
 44 |       # "--log.method-trace"
 45 |     ];
 46 |     config.Healthcheck = {
 47 |       Test = [
 48 |         "/bin/curl"
 49 |         "http://localhost:${toString port}/api/v1/health"
 50 |       ];
 51 |       Retries = 3;
 52 |     };
 53 |   };
 54 | 
 55 |   persesEnv = config.virtualisation.oci-containers.containers.perses.environment;
 56 |   secrets = config.age.secrets;
 57 | in
 58 | {
 59 |   environment.systemPackages = [ pkgs.percli ];
 60 | 
 61 |   users.users.${user} = {
 62 |     isNormalUser = true;
 63 |     group = user;
 64 |     home = "/var/lib/${user}";
 65 |     createHome = true;
 66 |     linger = true;
 67 |     autoSubUidGidRange = true;
 68 |   };
 69 |   users.groups.${user} = { };
 70 | 
 71 |   age.secrets.persesSecret = {
 72 |     file = ../../../secrets/persesSecret.age;
 73 |     owner = user;
 74 |     group = user;
 75 |   };
 76 |   age.secrets.persesAdminUser = {
 77 |     file = ../../../secrets/persesAdminUser.age;
 78 |     owner = user;
 79 |     group = user;
 80 |   };
 81 | 
 82 |   systemd.services.perses.preStart =
 83 |     let
 84 |       provisioningFolder = "${config.users.users.${user}.home}/${provisionFolder}";
 85 |     in
 86 |     ''
 87 |       rm -rf ${provisioningFolder} && mkdir -p ${provisioningFolder}
 88 |       cp -f ${secrets.persesAdminUser.path} ${provisioningFolder}/1-admin-user.json
 89 |       cp -f ${./perses/provision}/* ${provisioningFolder}
 90 |     '';
 91 | 
 92 |   virtualisation.oci-containers.containers.perses = {
 93 |     serviceName = "perses";
 94 |     image = "perses:latest";
 95 |     imageStream = persesHealthcheckImage;
 96 |     autoStart = true;
 97 |     # workdir = config.users.users.${user}.home;
 98 |     podman = {
 99 |       inherit user;
100 |       sdnotify = "healthy";
101 |     };
102 |     environmentFiles = [ secrets.persesSecret.path ];
103 |     volumes = [
104 |       "/var/lib/perses:${persesConfig.database.file.folder}"
105 |     ];
106 |     extraOptions = [
107 |       "--network=host"
108 |     ];
109 |   };
110 | 
111 |   services.nginx.virtualHosts.${domain} = {
112 |     useACMEHost = "gaze.systems"; # TODO: write a module to define vhosts for subdomains
113 |     quic = true;
114 |     kTLS = true;
115 |     forceSSL = true;
116 |     locations."/" = {
117 |       proxyPass = "http://localhost:${toString port}";
118 |     };
119 |   };
120 | 
121 |   # scrape perses metrics
122 |   services.victoriametrics.prometheusConfig.scrape_configs = [
123 |     {
124 |       job_name = "perses";
125 |       metrics_path = "/metrics";
126 |       static_configs = [ { targets = [ "localhost:${toString port}" ]; } ];
127 |     }
128 |   ];
129 | 
130 |   # podmanning
131 |   virtualisation.podman = {
132 |     enable = true;
133 |     autoPrune.enable = true;
134 |     dockerCompat = true;
135 |     defaultNetwork.settings.dns_enabled = true;
136 |   };
137 | }
138 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/dashboards/.gitignore:
--------------------------------------------------------------------------------
1 | # folder used to store the results of the `percli dac build` command
2 | built
3 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/dashboards/go.mod:
--------------------------------------------------------------------------------
 1 | module dash
 2 | 
 3 | go 1.24.2
 4 | 
 5 | require (
 6 | 	github.com/beorn7/perks v1.0.1 // indirect
 7 | 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 8 | 	github.com/go-jose/go-jose/v4 v4.0.5 // indirect
 9 | 	github.com/jpillora/backoff v1.0.0 // indirect
10 | 	github.com/muhlemmer/gu v0.3.1 // indirect
11 | 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
12 | 	github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f // indirect
13 | 	github.com/perses/perses v0.50.3 // indirect
14 | 	github.com/prometheus/client_golang v1.20.5 // indirect
15 | 	github.com/prometheus/client_model v0.6.1 // indirect
16 | 	github.com/prometheus/common v0.63.0 // indirect
17 | 	github.com/prometheus/procfs v0.15.1 // indirect
18 | 	github.com/zitadel/oidc/v3 v3.36.1 // indirect
19 | 	github.com/zitadel/schema v1.3.0 // indirect
20 | 	golang.org/x/crypto v0.36.0 // indirect
21 | 	golang.org/x/net v0.35.0 // indirect
22 | 	golang.org/x/oauth2 v0.28.0 // indirect
23 | 	golang.org/x/sys v0.31.0 // indirect
24 | 	golang.org/x/text v0.23.0 // indirect
25 | 	google.golang.org/protobuf v1.36.5 // indirect
26 | 	gopkg.in/yaml.v2 v2.4.0 // indirect
27 | 	gopkg.in/yaml.v3 v3.0.1 // indirect
28 | )
29 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/dashboards/go.sum:
--------------------------------------------------------------------------------
 1 | github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 2 | github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
 3 | github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
 4 | github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 5 | github.com/go-jose/go-jose/v4 v4.0.5 h1:M6T8+mKZl/+fNNuFHvGIzDz7BTLQPIounk/b9dw3AaE=
 6 | github.com/go-jose/go-jose/v4 v4.0.5/go.mod h1:s3P1lRrkT8igV8D9OjyL4WRyHvjB6a4JSllnOrmmBOA=
 7 | github.com/jpillora/backoff v1.0.0 h1:uvFg412JmmHBHw7iwprIxkPMI+sGQ4kzOWsMeHnm2EA=
 8 | github.com/jpillora/backoff v1.0.0/go.mod h1:J/6gKK9jxlEcS3zixgDgUAsiuZ7yrSoa/FX5e0EB2j4=
 9 | github.com/muhlemmer/gu v0.3.1 h1:7EAqmFrW7n3hETvuAdmFmn4hS8W+z3LgKtrnow+YzNM=
10 | github.com/muhlemmer/gu v0.3.1/go.mod h1:YHtHR+gxM+bKEIIs7Hmi9sPT3ZDUvTN/i88wQpZkrdM=
11 | github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
12 | github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
13 | github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f h1:KUppIJq7/+SVif2QVs3tOP0zanoHgBEVAwHxUSIzRqU=
14 | github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
15 | github.com/perses/perses v0.50.3 h1:BHlU9qkCFCUSP4HP5p9GwophWcxm5Vnu6Fsrx8Fb/+w=
16 | github.com/perses/perses v0.50.3/go.mod h1:oqfHLOrXERvEqECShqXPjHXqVukQxcoaaTM6ySRF7hU=
17 | github.com/prometheus/client_golang v1.20.5 h1:cxppBPuYhUnsO6yo/aoRol4L7q7UFfdm+bR9r+8l63Y=
18 | github.com/prometheus/client_golang v1.20.5/go.mod h1:PIEt8X02hGcP8JWbeHyeZ53Y/jReSnHgO035n//V5WE=
19 | github.com/prometheus/client_model v0.6.1 h1:ZKSh/rekM+n3CeS952MLRAdFwIKqeY8b62p8ais2e9E=
20 | github.com/prometheus/client_model v0.6.1/go.mod h1:OrxVMOVHjw3lKMa8+x6HeMGkHMQyHDk9E3jmP2AmGiY=
21 | github.com/prometheus/common v0.63.0 h1:YR/EIY1o3mEFP/kZCD7iDMnLPlGyuU2Gb3HIcXnA98k=
22 | github.com/prometheus/common v0.63.0/go.mod h1:VVFF/fBIoToEnWRVkYoXEkq3R3paCoxG9PXP74SnV18=
23 | github.com/prometheus/procfs v0.15.1 h1:YagwOFzUgYfKKHX6Dr+sHT7km/hxC76UB0learggepc=
24 | github.com/prometheus/procfs v0.15.1/go.mod h1:fB45yRUv8NstnjriLhBQLuOUt+WW4BsoGhij/e3PBqk=
25 | github.com/zitadel/oidc/v3 v3.36.1 h1:1AT1NqKKEqAwx4GmKJZ9fYkWH2WIn/VKMfQ46nBtRf0=
26 | github.com/zitadel/oidc/v3 v3.36.1/go.mod h1:dApGZLvWZTHRuxmcbQlW5d2XVjVYR3vGOdq536igmTs=
27 | github.com/zitadel/schema v1.3.0 h1:kQ9W9tvIwZICCKWcMvCEweXET1OcOyGEuFbHs4o5kg0=
28 | github.com/zitadel/schema v1.3.0/go.mod h1:NptN6mkBDFvERUCvZHlvWmmME+gmZ44xzwRXwhzsbtc=
29 | golang.org/x/crypto v0.36.0 h1:AnAEvhDddvBdpY+uR+MyHmuZzzNqXSe/GvuDeob5L34=
30 | golang.org/x/crypto v0.36.0/go.mod h1:Y4J0ReaxCR1IMaabaSMugxJES1EpwhBHhv2bDHklZvc=
31 | golang.org/x/net v0.35.0 h1:T5GQRQb2y08kTAByq9L4/bz8cipCdA8FbRTXewonqY8=
32 | golang.org/x/net v0.35.0/go.mod h1:EglIi67kWsHKlRzzVMUD93VMSWGFOMSZgxFjparz1Qk=
33 | golang.org/x/oauth2 v0.28.0 h1:CrgCKl8PPAVtLnU3c+EDw6x11699EWlsDeWNWKdIOkc=
34 | golang.org/x/oauth2 v0.28.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8=
35 | golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik=
36 | golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
37 | golang.org/x/text v0.23.0 h1:D71I7dUrlY+VX0gQShAThNGHFxZ13dGLBHQLVl1mJlY=
38 | golang.org/x/text v0.23.0/go.mod h1:/BLNzu4aZCJ1+kcD0DNRotWKage4q2rGVAg4o22unh4=
39 | google.golang.org/protobuf v1.36.5 h1:tPhr+woSbjfYvY6/GPufUoYizxw1cF/yFoxJ2fmpwlM=
40 | google.golang.org/protobuf v1.36.5/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
41 | gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
42 | gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
43 | gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
44 | gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
45 | gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
46 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/provision/1-private-infra.yaml:
--------------------------------------------------------------------------------
1 | kind: Project
2 | metadata:
3 |   name: private-infra
4 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/provision/2-admin-role.yaml:
--------------------------------------------------------------------------------
 1 | - kind: GlobalRole
 2 |   metadata:
 3 |     name: admin
 4 |   spec:
 5 |     permissions:
 6 |     - actions:
 7 |       - '*'
 8 |       scopes:
 9 |       - '*'
10 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/provision/3-admin-bind-role.yaml:
--------------------------------------------------------------------------------
1 | - kind: GlobalRoleBinding
2 |   metadata:
3 |     name: admin
4 |   spec:
5 |     role: admin
6 |     subjects:
7 |     - kind: User
8 |       name: admin
9 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/provision/4-victoria.yaml:
--------------------------------------------------------------------------------
 1 | - kind: GlobalDatasource
 2 |   metadata:
 3 |     name: victoria
 4 |   spec:
 5 |     default: true
 6 |     plugin:
 7 |       kind: PrometheusDatasource
 8 |       spec:
 9 |         proxy:
10 |           kind: HTTPProxy
11 |           spec:
12 |             url: http://localhost:8428
13 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/provision/5-funny.yaml:
--------------------------------------------------------------------------------
 1 | {
 2 |   "kind": "User",
 3 |   "metadata": {
 4 |     "name": "cat"
 5 |   },
 6 |   "spec": {
 7 |     "nativeProvider": {
 8 |       "password": "ziplocballs"
 9 |     }
10 |   }
11 | }
12 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/provision/6-guest-role.yaml:
--------------------------------------------------------------------------------
 1 | - kind: GlobalRole
 2 |   metadata:
 3 |     name: guest
 4 |   spec:
 5 |     permissions:
 6 |     - actions:
 7 |       - 'read'
 8 |       scopes:
 9 |       - 'Dashboard'
10 |       - 'Project'
11 |       - 'Datasource'
12 |       - 'GlobalDatasource'
13 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/perses/provision/7-funny-bind-role.yaml:
--------------------------------------------------------------------------------
1 | - kind: GlobalRoleBinding
2 |   metadata:
3 |     name: cat
4 |   spec:
5 |     role: guest
6 |     subjects:
7 |     - kind: User
8 |       name: cat
9 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/rathole.nix:
--------------------------------------------------------------------------------
 1 | {config, ...}:
 2 | let
 3 |   ratholePort = 11111;
 4 |   mcPort = 25565;
 5 | in
 6 | {
 7 |   age.secrets.ratholeCreds.file = ../../../secrets/ratholeCreds.age;
 8 |   services.rathole = {
 9 |     enable = true;
10 |     role = "server";
11 |     settings = {
12 |       server = {
13 |         bind_addr = "0.0.0.0:${toString ratholePort}";
14 |         services.minecraft.bind_addr = "0.0.0.0:${toString mcPort}";
15 |       };
16 |     };
17 |     credentialsFile = config.age.secrets.ratholeCreds.path;
18 |   };
19 |   networking.firewall = {
20 |     allowedTCPPorts = [ratholePort mcPort];
21 |     allowedUDPPorts = [ratholePort mcPort];
22 |   };
23 | }
24 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/secrets.nix:
--------------------------------------------------------------------------------
 1 | { lib, ... }:
 2 | {
 3 |   age.secrets.bernbotToken.file = ../../../secrets/bernbotToken.age;
 4 |   age.secrets.websiteConfig.file = ../../../secrets/websiteConfig.age;
 5 |   age.secrets.pdsConfig.file = ../../../secrets/pdsConfig.age;
 6 |   # age.secrets.wgWolumondeKey = {
 7 |   #   file = ../../../secrets/wgWolumondeKey.age;
 8 |   #   mode = "600";
 9 |   #   owner = "systemd-network";
10 |   #   group = "systemd-network";
11 |   # };
12 |   # age.secrets.musikquadConfig.file = ../../../secrets/musikquadConfig.age;
13 |   # age.secrets.tmodloaderServerPass.file = ../../../secrets/tmodloaderServerPass.age;
14 |   # age.secrets.giteaActRunnerToken.file = ../../../secrets/giteaActRunnerToken.age;
15 |   # age.secrets.forgejoActRunnerToken.file = ../../../secrets/forgejoActRunnerToken.age;
16 |   # age.secrets.xrayConfig = {
17 |   #   name = "xrayConfig.json";
18 |   #   file = ../../../secrets/xrayConfig.age;
19 |   #   mode = "600";
20 |   #   # owner = "xray";
21 |   #   # group = "xray";
22 |   # };
23 | }
24 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/ssh.nix:
--------------------------------------------------------------------------------
 1 | { inputs, ... }:
 2 | {
 3 |   services.fail2ban.enable = true;
 4 |   services.openssh = {
 5 |     enable = true;
 6 |     settings.PasswordAuthentication = false;
 7 |   };
 8 |   users.users.root.openssh.authorizedKeys.keys = [
 9 |     (builtins.readFile "${inputs.self}/secrets/yusdacra.key.pub")
10 |   ];
11 | }
12 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/tailscale.nix:
--------------------------------------------------------------------------------
1 | {
2 |   services.tailscale.enable = true;
3 | }
4 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/tangled.nix:
--------------------------------------------------------------------------------
 1 | {config, inputs, ...}:
 2 | let
 3 |   cfg = config.services.tangled-knot;
 4 | in
 5 | {
 6 |   imports = [inputs.tangled.nixosModules.knot];
 7 | 
 8 |   age.secrets.tangledKnot.file = ../../../secrets/tangledKnot.age;
 9 | 
10 |   services.tangled-knot = {
11 |     enable = true;
12 |     gitUser = "git";
13 |     server = {
14 |       listenAddr = "0.0.0.0:7777";
15 |       secretFile = config.age.secrets.tangledKnot.path;
16 |       hostname = "knot.gaze.systems";
17 |     };
18 |   };
19 | 
20 |   services.nginx.virtualHosts.${cfg.server.hostname} = {
21 |     forceSSL = true;
22 |     enableACME = true;
23 |     quic = true;
24 |     kTLS = true;
25 |     locations."/".proxyPass = "http://${cfg.server.listenAddr}";
26 |   };
27 | }
28 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/terraria.disabled:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   lib,
 4 |   ...
 5 | }: let
 6 |   mods = [
 7 |     "2817496179"
 8 |     "2669644269"
 9 |     "2824688072"
10 |     "2826111637"
11 |     "2824688804"
12 |     "2793782057"
13 |     "2570931073"
14 |     "2776422822"
15 |     "2913232891"
16 |     "2797072909"
17 |     "2565639705"
18 |     "2760520795"
19 |     "2619954303"
20 |     "2899871898"
21 |     "2790924965"
22 |     "2785100219"
23 |     "2563862309"
24 |     "2909886416"
25 |     "2563851005"
26 |     "2827446882"
27 |     "2618946390"
28 |     "2597324266"
29 |     "2599842771"
30 |     "2563309347"
31 |     #"2893332653" mod of redemption
32 |     "2835407664"
33 |     "2562997415"
34 |     "2634682993"
35 |     "2563098343"
36 |     "2815540735"
37 |     "2831752947"
38 |     "2580273153"
39 |     "2565540604"
40 |     "2816694149"
41 |     "2802867430"
42 |     "2797518634"
43 |     "2562915378"
44 |   ];
45 |   modsToUse = lib.concatStringsSep "," mods;
46 | in {
47 |   virtualisation.oci-containers.containers = {
48 |     tmodloader = {
49 |       image = "jacobsmile/tmodloader1.4:v2022.09.47.49";
50 |       environment = {
51 |         TMOD_MAXPLAYERS = "6";
52 |         TMOD_WORLDNAME = "cbt";
53 |         TMOD_WORLDSEED = "cockandballtorture";
54 |         TMOD_MOTD = "You should kill yourself, NOW!";
55 |         TMOD_WORLDSIZE = "2";
56 |         TMOD_AUTODOWNLOAD = modsToUse;
57 |         TMOD_ENABLEDMODS = modsToUse;
58 |       };
59 |       environmentFiles = [config.age.secrets.tmodloaderServerPass.path];
60 |       ports = ["7777:7777"];
61 |       volumes = [
62 |         "/var/lib/terraria/worlds:/home/terraria/.local/share/Terraria/tModLoader/Worlds"
63 |       ];
64 |     };
65 |   };
66 | 
67 |   networking.firewall = {
68 |     allowedTCPPorts = [7777];
69 |     allowedUDPPorts = [7777];
70 |   };
71 | }
72 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/victoria.nix:
--------------------------------------------------------------------------------
 1 | { lib, config, ... }:
 2 | let
 3 |   syslogUdp = 5113;
 4 | in
 5 | {
 6 |   services.victoriametrics = {
 7 |     enable = true;
 8 |     listenAddress = ":8428";
 9 |   };
10 | 
11 |   services.victorialogs = {
12 |     enable = true;
13 |     listenAddress = ":9428";
14 |     # extraOptions = ["-syslog.listenAddr.udp=:${toString syslogUdp}" "-journald.maxRequestSize=1024000000"];
15 |   };
16 | 
17 |   services.vmalert = {
18 |     enable = true;
19 |     settings =
20 |       let
21 |         l = "http://localhost";
22 |       in
23 |       {
24 |         "datasource.url" = "${l}${config.services.victorialogs.listenAddress}";
25 |         "remoteWrite.url" = "${l}${config.services.victoriametrics.listenAddress}";
26 |         "remoteRead.url" = "${l}${config.services.victoriametrics.listenAddress}";
27 |         "rule.defaultRuleType" = "vlogs";
28 |       };
29 |   };
30 | 
31 |   services.fluent-bit.settings.pipeline.outputs = [
32 |     # write metrics to victoriametrics via prometheus
33 |     {
34 |       name = "prometheus_remote_write";
35 |       match = "metrics.*";
36 |       port = lib.removePrefix ":" config.services.victoriametrics.listenAddress;
37 |       uri = "/api/v1/write";
38 |     }
39 |     {
40 |       name = "http";
41 |       match = "logs.*";
42 |       port = lib.removePrefix ":" config.services.victorialogs.listenAddress;
43 |       uri = "/insert/jsonline?_stream_fields=stream&_msg_field=log&_time_field=date";
44 |       format = "json_lines";
45 |       json_date_format = "iso8601";
46 |     }
47 |     # write logs via syslog
48 |     # {
49 |     #   name = "syslog";
50 |     #   match = "*.log";
51 |     #   port = syslogUdp;
52 |     #   syslog_maxsize = 4096;
53 |     #   syslog_severity_key = "severity";
54 |     #   syslog_facility_key = "facility";
55 |     #   syslog_hostname_key = "hostname";
56 |     #   syslog_appname_key = "appname";
57 |     #   syslog_procid_key = "procid";
58 |     #   syslog_msgid_key = "msgid";
59 |     #   syslog_sd_key = "sd";
60 |     #   syslog_message_key = "message";
61 |     # }
62 |   ];
63 | 
64 |   # services.journald.upload = {
65 |   #   enable = true;
66 |   #   settings.Upload.URL = "http://localhost${config.services.victorialogs.listenAddress}/insert/journald";
67 |   # };
68 | }
69 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/webhook.nix:
--------------------------------------------------------------------------------
 1 | { config, tlib, ... }:
 2 | {
 3 |   imports = tlib.importFolder ./webhooks;
 4 | 
 5 |   services.webhook = {
 6 |     enable = true;
 7 |     urlPrefix = "";
 8 |   };
 9 | 
10 |   age.secrets.webhookAuth = {
11 |     file = ../../../secrets/webhookAuth.age;
12 |     mode = "600";
13 |     owner = "nginx";
14 |     group = "nginx";
15 |   };
16 | 
17 |   services.nginx.virtualHosts."webhook.gaze.systems" = {
18 |     useACMEHost = "gaze.systems";
19 |     forceSSL = true;
20 |     basicAuthFile = config.age.secrets.webhookAuth.path;
21 |     locations."/" = {
22 |       proxyPass = "http://localhost:${toString config.services.webhook.port}";
23 |     };
24 |   };
25 | }
26 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/webhooks/deploy-wolumonde.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   services.webhook.hooks."deploy-wolumonde" = {
 4 |     execute-command = "${pkgs.curl}/bin/curl";
 5 |     pass-arguments-to-command = builtins.map (n: {
 6 |       source = "string";
 7 |       name = n;
 8 |     }) [ "http://higashi:9000/hooks/deploy-wolumonde" ];
 9 |   };
10 | }
11 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/wireguard.disabled:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   pkgs,
 4 |   ...
 5 | }: {
 6 |   environment.systemPackages = [pkgs.wireguard-tools];
 7 | 
 8 |   systemd.network.enable = true;
 9 |   systemd.network.netdevs."wg0" = {
10 |     enable = true;
11 |     netdevConfig = {
12 |       Name = "wg0";
13 |       Kind = "wireguard";
14 |     };
15 |     wireguardConfig = {
16 |       ListenPort = 51820;
17 |       PrivateKeyFile = config.age.secrets.wgWolumondeKey.path;
18 |     };
19 |     wireguardPeers = [
20 |       {
21 |         wireguardPeerConfig = {
22 |           PublicKey = builtins.readFile ./wgTkarontoKey.pub;
23 |           AllowedIPs = ["10.99.0.2/32"];
24 |         };
25 |       }
26 |     ];
27 |   };
28 |   systemd.network.networks."wg0" = {
29 |     matchConfig.Name = "wg0";
30 |     networkConfig.Address = "10.99.0.1/24";
31 |     # routes = [
32 |     #   {
33 |     #     routeConfig = {
34 |     #       Gateway = "10.99.0.1";
35 |     #       Destination = "10.99.0.0/24";
36 |     #     };
37 |     #   }
38 |     # ];
39 |   };
40 | 
41 |   boot.kernel.sysctl = {
42 |     "net.ipv4.ip_forward" = 1;
43 |   };
44 | 
45 |   networking.firewall.allowedUDPPorts = [51820];
46 | }
47 | 


--------------------------------------------------------------------------------
/hosts/wolumonde/modules/xray.disabled:
--------------------------------------------------------------------------------
 1 | {lib, config, ...}: {
 2 |   services.xray = {
 3 |     enable = true;
 4 |     settingsFile = config.age.secrets.xrayConfig.path;
 5 |   };
 6 |   users.groups.xray = {};
 7 |   users.users.xray = {
 8 |     group = "xray";
 9 |     isSystemUser = true;
10 |   };
11 |   systemd.services.xray.serviceConfig = {
12 |     User = "xray";
13 |     Group = "xray";
14 |     DynamicUser = lib.mkForce false;
15 |     RuntimeDirectory = "xray";
16 |     ProtectSystem = "strict";
17 |     ProtectHome = "read-only";
18 |     PrivateTmp = "yes";
19 |     RemoveIPC = "yes";
20 |   };
21 |   networking.firewall.allowedUDPPorts = [1080];
22 |   networking.firewall.allowedTCPPorts = [1080];
23 | }
24 | 


--------------------------------------------------------------------------------
/hosts/wsl/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   lib,
 4 |   tlib,
 5 |   pkgs,
 6 |   inputs,
 7 |   ...
 8 | }:
 9 | {
10 |   imports = [
11 |     ../../users/root
12 |     ../../users/firewatch
13 |     inputs.nixos-wsl.nixosModules.wsl
14 |     inputs.agenix.nixosModules.default
15 |   ] ++ (tlib.importFolder (toString ./modules));
16 | 
17 |   wsl.enable = true;
18 |   wsl.defaultUser = "firewatch";
19 | 
20 |   nix.settings.max-jobs = lib.mkForce 10;
21 | 
22 |   networking.hostName = "wsl";
23 | 
24 |   environment.systemPackages = [ pkgs.wget ];
25 |   environment.sessionVariables = {
26 |     FLAKE = "/home/firewatch/ark";
27 |   };
28 | 
29 |   # for tailscale
30 |   networking.firewall.checkReversePath = "loose";
31 |   services.tailscale.enable = true;
32 | 
33 |   services.earlyoom.enable = true;
34 | 
35 |   system.stateVersion = "23.11";
36 | }
37 | 


--------------------------------------------------------------------------------
/hosts/wsl/modules/.keep:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/hosts/wsl/modules/.keep


--------------------------------------------------------------------------------
/hosts/wsl/modules/github.nix:
--------------------------------------------------------------------------------
1 | ../../../modules/github.nix


--------------------------------------------------------------------------------
/hosts/wsl/modules/podman.nix:
--------------------------------------------------------------------------------
1 | {
2 |   virtualisation.podman.enable = true;
3 | }
4 | 


--------------------------------------------------------------------------------
/hosts/wsl/modules/secrets.nix:
--------------------------------------------------------------------------------
1 | {
2 |   age.identityPaths = [ "/home/firewatch/.ssh/id_rsa" ];
3 | 
4 |   age.secrets.nixGithubAccessToken.file = ../../../secrets/nixGithubAccessToken.age;
5 | }
6 | 


--------------------------------------------------------------------------------
/lib/default.nix:
--------------------------------------------------------------------------------
 1 | lib:
 2 | lib.makeExtensible (self: {
 3 |   defaultSystems = import ./systems.nix;
 4 |   genSystems = lib.genAttrs self.defaultSystems;
 5 | 
 6 |   pkgBin =
 7 |     pkg:
 8 |     if (pkg.meta or { }) ? mainProgram then
 9 |       "${pkg}/bin/${pkg.meta.mainProgram}"
10 |     else
11 |       "${pkg}/bin/${pkg.pname}";
12 | 
13 |   prefixStrings = prefix: strings: lib.forEach strings (string: "${prefix}${string}");
14 | 
15 |   importFolder =
16 |     modules:
17 |     let
18 |       b = builtins;
19 |       files = b.readDir modules;
20 |       fileNames = b.attrNames files;
21 |       filesToImport = b.map (name: "${modules}/${name}") (
22 |         b.filter (name: b.match ".*\.nix" name != null) fileNames
23 |       );
24 |     in
25 |     filesToImport;
26 | })
27 | 


--------------------------------------------------------------------------------
/lib/systems.nix:
--------------------------------------------------------------------------------
1 | [ "x86_64-linux" ]
2 | 


--------------------------------------------------------------------------------
/locale/default.nix:
--------------------------------------------------------------------------------
 1 | { ... }:
 2 | {
 3 |   i18n = {
 4 |     defaultLocale = "en_US.UTF-8";
 5 |     supportedLocales = [
 6 |       "en_US.UTF-8/UTF-8"
 7 |       "tr_TR.UTF-8/UTF-8"
 8 |     ];
 9 |   };
10 |   time.timeZone = "Turkey";
11 |   services.xserver.xkb.layout = "us";
12 |   console.keyMap = "us";
13 | }
14 | 


--------------------------------------------------------------------------------
/locale/geo.nix:
--------------------------------------------------------------------------------
1 | {
2 |   lat = "39.1";
3 |   long = "35.6";
4 | }
5 | 


--------------------------------------------------------------------------------
/modules/ananicy/default.nix:
--------------------------------------------------------------------------------
 1 | { lib, ... }:
 2 | let
 3 |   l = lib // builtins;
 4 |   mkRule = name: type: {
 5 |     inherit name type;
 6 |   };
 7 | in
 8 | {
 9 |   services.ananicy = {
10 |     enable = true;
11 |     extraRules = [
12 |       # coompilers
13 |       (mkRule "g++" "BG_CPUIO")
14 |       (mkRule "gcc" "BG_CPUIO")
15 |       (mkRule "clang" "BG_CPUIO")
16 |       (mkRule "mold" "BG_CPUIO")
17 |       (mkRule "ld" "BG_CPUIO")
18 |       (mkRule "gold" "BG_CPUIO")
19 |       (mkRule "rustc" "BG_CPUIO")
20 |       (mkRule "zig" "BG_CPUIO")
21 |       (mkRule "cargo" "BG_CPUIO")
22 |       (mkRule "rust-analyzer" "BG_CPUIO")
23 |       (mkRule "go" "BG_CPUIO")
24 |       (mkRule "nix" "BG_CPUIO")
25 |       (mkRule "nix-daemon" "BG_CPUIO")
26 |       # editors
27 |       (mkRule "hx" "Doc-View")
28 |       (mkRule ".hx-wrapped" "Doc-View")
29 |       # browser
30 |       (mkRule "firefox" "Doc-View")
31 |       (mkRule ".firefox-wrapped" "Doc-View")
32 |       (mkRule "chromium" "Doc-View")
33 |       (mkRule ".chromium-wrapped" "Doc-View")
34 |       # wm
35 |       (mkRule ".gnome-shell-wrapped" "LowLatency_RT")
36 |       (mkRule "gnome-shell" "LowLatency_RT")
37 |       (mkRule "Hyprland" "LowLatency_RT")
38 |       (mkRule "sway" "LowLatency_RT")
39 |       (mkRule ".sway-wrapped" "LowLatency_RT")
40 |       (mkRule "rofi" "LowLatency_RT")
41 |       (mkRule ".rofi-wrapped" "LowLatency_RT")
42 |       (mkRule "wlsunset" "BG_CPUIO")
43 |       (mkRule "swayidle" "BG_CPUIO")
44 |       # term
45 |       (mkRule "wezterm-gui" "Doc-View")
46 |       (mkRule "foot" "Doc-View")
47 |       (mkRule "gnome-terminal" "Doc-View")
48 |       (mkRule ".gnome-terminal-wrapped" "Doc-View")
49 |       # other
50 |       (mkRule "syncthing" "BG_CPUIO")
51 |     ];
52 |   };
53 | }
54 | 


--------------------------------------------------------------------------------
/modules/base/default.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   inputs,
  3 |   config,
  4 |   pkgs,
  5 |   lib,
  6 |   tlib,
  7 |   ...
  8 | }:
  9 | let
 10 |   inherit (lib) fileContents mkIf;
 11 | 
 12 |   coreBin = v: "${pkgs.coreutils}/bin/${v}";
 13 |   nixBin = "${config.nix.package}/bin/nix";
 14 |   pkgBin = tlib.pkgBin;
 15 | in
 16 | {
 17 |   imports = [
 18 |     ./nix.nix
 19 |     ./hm-system-defaults.nix
 20 |   ];
 21 | 
 22 |   environment = {
 23 |     systemPackages = with pkgs; [
 24 |       binutils
 25 |       coreutils
 26 |       curl
 27 |       direnv
 28 |       dnsutils
 29 |       dosfstools
 30 |       fd
 31 |       bottom
 32 |       gptfdisk
 33 |       iputils
 34 |       jq
 35 |       manix
 36 |       moreutils
 37 |       nix-index
 38 |       nmap
 39 |       ripgrep
 40 |       skim
 41 |       tealdeer
 42 |       usbutils
 43 |       util-linux
 44 |       whois
 45 |       bat
 46 |       fzf
 47 |       eza
 48 |       lm_sensors
 49 |       mkpasswd
 50 |       bottom
 51 |       amber
 52 |       unzip
 53 |       unrar
 54 |       hydra-check
 55 |       du-dust
 56 |       mosh
 57 |       git
 58 |       git-crypt
 59 |     ];
 60 |     shellAliases =
 61 |       let
 62 |         ifSudo = string: mkIf config.security.sudo.enable string;
 63 |         inherit (pkgs)
 64 |           git
 65 |           bat
 66 |           eza
 67 |           du-dust
 68 |           ;
 69 |       in
 70 |       {
 71 |         g = pkgBin git;
 72 |         git-optimize = "${pkgBin git} gc --aggressive --prune=now";
 73 |         cat = "${pkgBin bat} -pp --theme=base16";
 74 |         c = "cat";
 75 |         du = "${pkgBin du-dust}";
 76 |         df = "${coreBin "df"} -h";
 77 |         free = "${pkgs.procps}/bin/free -h";
 78 |         ls = pkgBin eza;
 79 |         l = "${pkgBin eza} -lhg";
 80 |         la = "${pkgBin eza} -lhg -a";
 81 |         t = "${pkgBin eza} -lhg -T";
 82 |         ta = "${pkgBin eza} -lhg -a -T";
 83 |         n = nixBin;
 84 |         nb = "${nixBin} build";
 85 |         nf = "${nixBin} flake";
 86 |         nfu = "${nixBin} flake update";
 87 |         nfui = "${nixBin} flake update";
 88 |         nfs = "${nixBin} flake show";
 89 |         nsh = "${nixBin} shell";
 90 |         nix-store-refs = "nix-store -qR";
 91 |         nosrs = ifSudo "sudo nixos-rebuild --fast switch";
 92 |         nosrb = ifSudo "sudo nixos-rebuild --fast boot";
 93 |         nosrt = ifSudo "sudo nixos-rebuild --fast test";
 94 |         ngc = ifSudo "sudo nix-collect-garbage";
 95 |         ngcdo = ifSudo "sudo nix-collect-garbage --delete-old";
 96 |         top = "${pkgs.bottom}/bin/btm";
 97 |         myip = "${pkgs.dnsutils}/bin/dig +short myip.opendns.com @208.67.222.222 2>&1";
 98 |         mn =
 99 |           let
100 |             manix_preview = "manix '{}' | sed 's/type: /> type: /g' | bat -l Markdown --color=always --plain";
101 |           in
102 |           ''manix "" | rg '^# ' | sed 's/^# \(.*\) (.*/\1/;s/ (.*//;s/^# //' | sk --preview="${manix_preview}" | xargs manix'';
103 |         # systemd
104 |         ctl = "systemctl";
105 |         stl = ifSudo "s systemctl";
106 |         utl = "systemctl --user";
107 |         jtl = "journalctl";
108 |       };
109 |   };
110 |   system.activationScripts.diff = ''
111 |     if [ -z "$systemConfig" ]; then
112 |       ${config.nix.package}/bin/nix store \
113 |       --experimental-features 'nix-command' \
114 |       diff-closures /run/current-system "$systemConfig"
115 |     fi
116 |   '';
117 |   users.mutableUsers = false;
118 |   programs = {
119 |     command-not-found.enable = true;
120 |     git = {
121 |       enable = true;
122 |       config = {
123 |         safe.directory = [ "/etc/nixos" ];
124 |       };
125 |     };
126 |   };
127 | }
128 | 


--------------------------------------------------------------------------------
/modules/base/hm-system-defaults.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   inputs,
 4 |   tlib,
 5 |   ...
 6 | }:
 7 | {
 8 |   home-manager.useGlobalPkgs = true;
 9 |   home-manager.useUserPackages = true;
10 |   home-manager.sharedModules = [
11 |     "${inputs.self}/users/modules/settings"
12 |     {
13 |       home = {
14 |         inherit (config.environment) shellAliases sessionVariables;
15 |         stateVersion = config.system.stateVersion;
16 |       };
17 |       xdg.configFile."nix/registry.json".text = config.environment.etc."nix/registry.json".text;
18 |       xdg.configFile."nix/nix.conf".source = config.environment.etc."nix/nix.conf".source;
19 |       # xdg.configFile."nix/netrc".source = config.environment.etc."nix/netrc".source;
20 |     }
21 |     (
22 |       {
23 |         config,
24 |         pkgs,
25 |         lib,
26 |         ...
27 |       }:
28 |       {
29 |         home.packages = [
30 |           (pkgs.writeShellScriptBin "apply-hm-env" ''
31 |             ${lib.optionalString (config.home.sessionPath != [ ]) ''
32 |               export PATH=${builtins.concatStringsSep ":" config.home.sessionPath}:$PATH
33 |             ''}
34 |             ${builtins.concatStringsSep "\n" (
35 |               lib.mapAttrsToList (k: v: ''
36 |                 export ${k}="${builtins.toString v}"
37 |               '') config.home.sessionVariables
38 |             )}
39 |             ${config.home.sessionVariablesExtra}
40 |             exec "$@"
41 |           '')
42 |         ];
43 |       }
44 |     )
45 |   ];
46 |   home-manager.extraSpecialArgs = {
47 |     inherit inputs tlib;
48 |     nixosConfig = config;
49 |   };
50 | }
51 | 


--------------------------------------------------------------------------------
/modules/base/nix.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   lib,
 4 |   inputs,
 5 |   ...
 6 | }:
 7 | {
 8 |   nix = {
 9 |     registry = builtins.mapAttrs (_: v: { flake = v; }) (lib.filterAttrs (_: v: v ? outputs) inputs);
10 |     package = pkgs.lixPackageSets.latest.lix;
11 |     gc.automatic = false;
12 |     optimise.automatic = true;
13 |     extraOptions = ''
14 |       min-free = 536870912
15 |       keep-outputs = true
16 |       keep-derivations = true
17 |       fallback = true
18 |       extra-experimental-features = nix-command flakes
19 |       builders-use-substitutes = true
20 |     '';
21 |     nixPath = [
22 |       "nixpkgs=${inputs.nixpkgs}"
23 |       "home-manager=${inputs.home}"
24 |     ];
25 |   };
26 |   nix.settings = {
27 |     sandbox = true;
28 |     allowed-users = [ "@wheel" ];
29 |     trusted-users = [
30 |       "root"
31 |       "@wheel"
32 |     ];
33 |     auto-optimise-store = true;
34 |   };
35 | }
36 | 


--------------------------------------------------------------------------------
/modules/cachix/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   lib,
 4 |   ...
 5 | }:
 6 | let
 7 |   folder = ./.;
 8 |   toImport = name: value: folder + ("/" + name);
 9 |   filterCaches = key: value: value == "regular" && lib.hasSuffix ".nix" key && key != "default.nix";
10 |   imports = lib.mapAttrsToList toImport (lib.filterAttrs filterCaches (builtins.readDir folder));
11 | in
12 | {
13 |   inherit imports;
14 |   nix.settings.substituters = [ "https://cache.nixos.org/" ];
15 | }
16 | 


--------------------------------------------------------------------------------
/modules/cachix/helix.nix:
--------------------------------------------------------------------------------
1 | {
2 |   nix.settings = {
3 |     substituters = [ "https://helix.cachix.org" ];
4 |     trusted-public-keys = [ "helix.cachix.org-1:ejp9KQpR1FBI2onstMQ34yogDm4OgU2ru6lIwPvuCVs=" ];
5 |   };
6 | }
7 | 


--------------------------------------------------------------------------------
/modules/cachix/nix-community.nix:
--------------------------------------------------------------------------------
1 | {
2 |   nix.settings = {
3 |     substituters = [ "https://nix-community.cachix.org" ];
4 |     trusted-public-keys = [ "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" ];
5 |   };
6 | }
7 | 


--------------------------------------------------------------------------------
/modules/de/budgie/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   lib,
 4 |   ...
 5 | }:
 6 | {
 7 |   services.xserver = {
 8 |     enable = true;
 9 |     desktopManager = {
10 |       budgie.enable = true;
11 |       xterm.enable = false;
12 |     };
13 |     displayManager = {
14 |       gdm = {
15 |         enable = true;
16 |         wayland = false;
17 |       };
18 |       startx.enable = false;
19 |     };
20 |   };
21 |   systemd.services = {
22 |     "getty@tty1".enable = false;
23 |     "autovt@tty1".enable = false;
24 |   };
25 |   services.power-profiles-daemon.enable = false;
26 |   environment.systemPackages = with pkgs; [
27 |     ffmpegthumbnailer
28 |     webp-pixbuf-loader
29 |     yaru-theme
30 |   ];
31 |   # environment.etc."environment.d/10-use-amd.conf".text = ''
32 |   #   __EGL_VENDOR_LIBRARY_FILENAMES=/run/opengl-driver/glvnd/egl_vendor.d/50_mesa.json
33 |   # '';
34 | }
35 | 


--------------------------------------------------------------------------------
/modules/de/gnome/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   lib,
 4 |   ...
 5 | }:
 6 | {
 7 |   services.gnome = {
 8 |     gnome-keyring.enable = true;
 9 |     core-shell.enable = true;
10 |     core-os-services.enable = true;
11 |     at-spi2-core.enable = lib.mkForce false;
12 |     gnome-browser-connector.enable = true;
13 |     gnome-online-accounts.enable = false;
14 |     gnome-online-miners.enable = lib.mkForce false;
15 |     tracker-miners.enable = false;
16 |     tracker.enable = false;
17 |     sushi.enable = true;
18 |     gnome-remote-desktop.enable = false;
19 |   };
20 |   services.tumbler.enable = true;
21 |   programs = {
22 |     geary.enable = lib.mkForce false;
23 |     gnome-terminal.enable = true;
24 |     evince.enable = true;
25 |   };
26 |   services.xserver = {
27 |     enable = true;
28 |     desktopManager = {
29 |       gnome.enable = true;
30 |       xterm.enable = false;
31 |     };
32 |     displayManager = {
33 |       gdm = {
34 |         enable = true;
35 |         wayland = false;
36 |       };
37 |       startx.enable = false;
38 |     };
39 |   };
40 |   systemd.services = {
41 |     "getty@tty1".enable = false;
42 |     "autovt@tty1".enable = false;
43 |   };
44 |   services.power-profiles-daemon.enable = false;
45 |   environment.systemPackages = with pkgs; [
46 |     gnomeExtensions.unite
47 |     gnome.gnome-tweaks
48 |     ffmpegthumbnailer
49 |     webp-pixbuf-loader
50 |     yaru-theme
51 |   ];
52 |   environment.gnome.excludePackages = with pkgs; [
53 |     gnome-console
54 |     gnome-tour
55 |     gnome.gnome-maps
56 |   ];
57 |   # environment.etc."environment.d/10-use-amd.conf".text = ''
58 |   #   __EGL_VENDOR_LIBRARY_FILENAMES=/run/opengl-driver/glvnd/egl_vendor.d/50_mesa.json
59 |   # '';
60 | }
61 | 


--------------------------------------------------------------------------------
/modules/de/greetd/default.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   services.greetd = {
 4 |     enable = true;
 5 |     settings = {
 6 |       terminal.vt = 1;
 7 |       default_session = {
 8 |         command = "${pkgs.greetd.tuigreet}/bin/tuigreet --issue --time --cmd 'sway --unsupported-gpu'";
 9 |         user = "greeter";
10 |       };
11 |     };
12 |   };
13 |   systemd.services = {
14 |     "getty@tty1".enable = false;
15 |     "autovt@tty1".enable = false;
16 |   };
17 | }
18 | 


--------------------------------------------------------------------------------
/modules/default.nix:
--------------------------------------------------------------------------------
1 | {
2 |   imports = [
3 |     ./base
4 |     ./develop
5 |     ./cachix
6 |   ];
7 | }
8 | 


--------------------------------------------------------------------------------
/modules/develop/default.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   imports = [ ./editor ];
 4 |   environment.systemPackages = with pkgs; [
 5 |     git
 6 |     tokei
 7 |   ];
 8 |   documentation.dev.enable = true;
 9 | }
10 | 


--------------------------------------------------------------------------------
/modules/develop/editor/default.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   imports = [ ./helix.nix ];
 4 |   environment.systemPackages = with pkgs; [
 5 |     treefmt
 6 |     nixd
 7 |     nixfmt-rfc-style
 8 |   ];
 9 | }
10 | 


--------------------------------------------------------------------------------
/modules/develop/editor/helix.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | let
 3 |   pkg = pkgs.helix;
 4 |   bin = "${pkg}/bin/hx";
 5 | in
 6 | {
 7 |   environment.systemPackages = [ pkg ];
 8 |   environment.sessionVariables = {
 9 |     EDITOR = bin;
10 |     VISUAL = bin;
11 |   };
12 |   environment.shellAliases = {
13 |     e = bin;
14 |   };
15 | }
16 | 


--------------------------------------------------------------------------------
/modules/develop/editor/kakoune.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | let
 3 |   pkg = pkgs.kakoune-unwrapped;
 4 | in
 5 | {
 6 |   environment.systemPackages = [ pkg ];
 7 |   environment.sessionVariables = {
 8 |     EDITOR = "${pkg}/bin/kak";
 9 |     VISUAL = "${pkg}/bin/kak";
10 |   };
11 |   environment.shellAliases = {
12 |     k = "${pkg}/bin/kak";
13 |   };
14 | }
15 | 


--------------------------------------------------------------------------------
/modules/develop/nixbuild/default.nix:
--------------------------------------------------------------------------------
 1 | { config, ... }:
 2 | {
 3 |   programs.ssh.extraConfig = ''
 4 |     Host eu.nixbuild.net
 5 |       PubkeyAcceptedKeyTypes ssh-ed25519
 6 |       IdentityFile ${config.age.secrets.nixBuildKey.path}
 7 |   '';
 8 | 
 9 |   programs.ssh.knownHosts = {
10 |     nixbuild = {
11 |       hostNames = [ "eu.nixbuild.net" ];
12 |       publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPIQCZc54poJ8vqawd8TraNryQeJnvH1eLpIDgbiqymM";
13 |     };
14 |   };
15 | 
16 |   nix = {
17 |     distributedBuilds = true;
18 |     buildMachines = [
19 |       {
20 |         hostName = "eu.nixbuild.net";
21 |         system = "x86_64-linux";
22 |         maxJobs = 100;
23 |         supportedFeatures = [
24 |           "benchmark"
25 |           "big-parallel"
26 |         ];
27 |       }
28 |     ];
29 |   };
30 | }
31 | 


--------------------------------------------------------------------------------
/modules/flatpak/default.nix:
--------------------------------------------------------------------------------
1 | { config, ... }:
2 | {
3 |   services.flatpak.enable = true;
4 |   environment.persistence."${config.system.persistDir}".directories = [
5 |     "/var/lib/flatpak"
6 |   ];
7 | }
8 | 


--------------------------------------------------------------------------------
/modules/gamemode/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   inputs,
 4 |   lib,
 5 |   ...
 6 | }:
 7 | let
 8 |   programs = inputs.hyprland.packages.${pkgs.system}.default;
 9 | 
10 |   startscript = pkgs.writeShellScript "gamemode-start" ''
11 |     export PATH=$PATH:${programs}
12 |     export HYPRLAND_INSTANCE_SIGNATURE=$(ls -w1 /tmp/hypr | tail -1)
13 |     hyprctl --batch 'keyword decoration:blur 0 ; keyword animations:enabled 0 ; keyword misc:no_vfr 1'
14 |   '';
15 | 
16 |   endscript = pkgs.writeShellScript "gamemode-end" ''
17 |     export PATH=$PATH:${programs}
18 |     export HYPRLAND_INSTANCE_SIGNATURE=$(ls -w1 /tmp/hypr | tail -1)
19 |     hyprctl --batch 'keyword decoration:blur 1 ; keyword animations:enabled 1 ; keyword misc:no_vfr 0'
20 |   '';
21 | in
22 | {
23 |   programs.gamemode = {
24 |     enable = true;
25 |     enableRenice = true;
26 |     settings = {
27 |       general = {
28 |         softrealtime = "auto";
29 |         renice = 15;
30 |       };
31 |       custom = {
32 |         # start = "${startscript}";
33 |         # end = "${endscript}";
34 |       };
35 |     };
36 |   };
37 | }
38 | 


--------------------------------------------------------------------------------
/modules/github.nix:
--------------------------------------------------------------------------------
1 | { config, ... }:
2 | {
3 |   nix.extraOptions = ''
4 |     !include ${config.age.secrets.nixGithubAccessToken.path}
5 |   '';
6 | }
7 | 


--------------------------------------------------------------------------------
/modules/gnome-boxes/default.nix:
--------------------------------------------------------------------------------
1 | { pkgs, ... }:
2 | {
3 |   imports = [ ../libvirtd ];
4 |   environment.systemPackages = [ pkgs.gnome.gnome-boxes ];
5 | }
6 | 


--------------------------------------------------------------------------------
/modules/keyboards/keychron-v4/default.nix:
--------------------------------------------------------------------------------
1 | {
2 |   hardware.keyboard.qmk.enable = true;
3 | }
4 | 


--------------------------------------------------------------------------------
/modules/libvirtd/default.nix:
--------------------------------------------------------------------------------
1 | { config, ... }:
2 | {
3 |   virtualisation.libvirtd.enable = true;
4 |   environment.persistence."${config.system.persistDir}".directories = [
5 |     "/var/lib/libvirt"
6 |     "/var/lib/machines"
7 |   ];
8 | }
9 | 


--------------------------------------------------------------------------------
/modules/network/default.nix:
--------------------------------------------------------------------------------
1 | {
2 |   imports = [ ./networkmanager ];
3 |   systemd.network.wait-online.enable = false;
4 | }
5 | 


--------------------------------------------------------------------------------
/modules/network/dns/cloudflare.nix:
--------------------------------------------------------------------------------
 1 | { lib, ... }:
 2 | {
 3 |   networking.resolvconf.useLocalResolver = true;
 4 |   networking.networkmanager.dns = lib.mkForce "none";
 5 |   services.dnscrypt-proxy2 = {
 6 |     enable = true;
 7 |     settings = {
 8 |       server_names = [
 9 |         "cloudflare"
10 |         "cloudflare-ipv6"
11 |       ];
12 |     };
13 |   };
14 | }
15 | 


--------------------------------------------------------------------------------
/modules/network/dns/default.nix:
--------------------------------------------------------------------------------
1 | {
2 |   imports = [ ./cloudflare.nix ];
3 | }
4 | 


--------------------------------------------------------------------------------
/modules/network/dns/nextdns.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   networking.resolvconf.useLocalResolver = true;
 3 |   services.nextdns = {
 4 |     enable = true;
 5 |     arguments = [
 6 |       "-config"
 7 |       "75e43d"
 8 |     ];
 9 |   };
10 | }
11 | 


--------------------------------------------------------------------------------
/modules/network/dns/stubby/default.nix:
--------------------------------------------------------------------------------
1 | {
2 |   imports = [ ./nextdns.nix ];
3 |   networking.networkmanager.dns = "none";
4 |   services.stubby.enable = true;
5 | }
6 | 


--------------------------------------------------------------------------------
/modules/network/dns/stubby/nextdns.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   services.stubby = {
 3 |     roundRobinUpstreams = false;
 4 |     upstreamServers =
 5 |       let
 6 |         nextDnsId = "75e43d";
 7 |       in
 8 |       ''
 9 |         - address_data: 45.90.28.0
10 |           tls_auth_name: "${nextDnsId}.dns1.nextdns.io"
11 |         - address_data: 2a07:a8c0::0
12 |           tls_auth_name: "${nextDnsId}.dns1.nextdns.io"
13 |         - address_data: 45.90.30.0
14 |           tls_auth_name: "${nextDnsId}.dns2.nextdns.io"
15 |         - address_data: 2a07:a8c1::0
16 |           tls_auth_name: "${nextDnsId}.dns2.nextdns.io"
17 |       '';
18 |   };
19 | }
20 | 


--------------------------------------------------------------------------------
/modules/network/iwd/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   networking.wireless.iwd = {
 3 |     enable = true;
 4 |     settings = {
 5 |       Network = {
 6 |         EnableIPv6 = true;
 7 |       };
 8 |       Settings = {
 9 |         AutoConnect = true;
10 |       };
11 |     };
12 |   };
13 |   networking.networkmanager.wifi.backend = "iwd";
14 |   services.connman.wifi.backend = "iwd";
15 | }
16 | 


--------------------------------------------------------------------------------
/modules/network/networkmanager/default.nix:
--------------------------------------------------------------------------------
 1 | { config, ... }:
 2 | {
 3 |   imports = [
 4 |     ../dns
 5 |     ../iwd
 6 |   ];
 7 |   networking.networkmanager = {
 8 |     enable = true;
 9 |     wifi.powersave = true;
10 |   };
11 |   environment.persistence."${config.system.persistDir}" = {
12 |     directories = [ "/etc/NetworkManager/system-connections" ];
13 |   };
14 | }
15 | 


--------------------------------------------------------------------------------
/modules/network/ssh.nix:
--------------------------------------------------------------------------------
1 | {
2 |   services.openssh = {
3 |     enable = true;
4 |     challengeResponseAuthentication = false;
5 |     passwordAuthentication = false;
6 |     forwardX11 = true;
7 |   };
8 | }
9 | 


--------------------------------------------------------------------------------
/modules/network/wpa_supplicant.nix:
--------------------------------------------------------------------------------
1 | {
2 |   imports = [ ./dns ];
3 |   networking.wireless = {
4 |     enable = true;
5 |     userControlled.enable = true;
6 |   };
7 | }
8 | 


--------------------------------------------------------------------------------
/modules/nushell/aliases.nu:
--------------------------------------------------------------------------------
 1 | alias l = ls
 2 | alias ll = ls -l
 3 | alias la = ls -a
 4 | 
 5 | alias cat = bat
 6 | alias c = bat
 7 | 
 8 | alias g = git
 9 | alias gs = git status
10 | alias ga = git add
11 | 
12 | alias n = nix
13 | alias nfu = nix flake update
14 | alias nfs = nix flake show
15 | alias nb = nix build
16 | alias nd = nix develop
17 | alias ns = nix shell
18 | 
19 | alias e = hx
20 | 
21 | def mem [] { sys mem }
22 | def df [] { sys disks }
23 | 


--------------------------------------------------------------------------------
/modules/nushell/default.nix:
--------------------------------------------------------------------------------
 1 | { lib, pkgs, ... }:
 2 | {
 3 |   environment.shells = [ pkgs.nushell ];
 4 |   users.users.root.shell = pkgs.nushell;
 5 | 
 6 |   home-manager.users.root = {
 7 |     programs.nushell = {
 8 |       enable = true;
 9 |       package = pkgs.nushell;
10 |       shellAliases = {
11 |         myip = lib.mkForce "echo";
12 |       };
13 |       extraEnv = ''
14 |         source-env ${./prompt.nu}
15 |       '';
16 |       extraConfig = ''
17 |         let carapace_completer = {|spans: list<string>|
18 |           carapace $spans.0 nushell ...$spans
19 |           | from json
20 |           | if ($in | default [] | where value == $"($spans | last)ERR" | is-empty) { $in } else { null }
21 |         }
22 |         $env.CARAPACE_BRIDGES = 'zsh,fish,bash,inshellisense'
23 | 
24 |         let fish_completer = {|spans|
25 |           ${lib.getExe pkgs.fish} --command $'complete "--do-complete=($spans | str join " ")"'
26 |           | $"value(char tab)description(char newline)" + $in
27 |           | from tsv --flexible --no-infer
28 |         }
29 | 
30 |         let zoxide_completer = {|spans|
31 |             $spans | skip 1 | zoxide query -l ...$in | lines | where {|x| $x != $env.PWD}
32 |         }
33 | 
34 |         let multiple_completers = {|spans|
35 |           ## alias fixer start https://www.nushell.sh/cookbook/external_completers.html#alias-completions
36 |           let expanded_alias = scope aliases
37 |           | where name == $spans.0
38 |           | get -i 0.expansion
39 | 
40 |           let spans = if $expanded_alias != null {
41 |             $spans
42 |             | skip 1
43 |             | prepend ($expanded_alias | split row ' ' | take 1)
44 |           } else {
45 |             $spans
46 |           }
47 |           ## alias fixer end
48 | 
49 |           match $spans.0 {
50 |             __zoxide_z | __zoxide_zi => $zoxide_completer
51 |             _ => $carapace_completer
52 |           } | do $in $spans
53 |         }
54 | 
55 |         $env.config = {
56 |           show_banner: false,
57 |           completions: {
58 |             case_sensitive: false # case-sensitive completions
59 |             quick: true           # set to false to prevent auto-selecting completions
60 |             partial: true         # set to false to prevent partial filling of the prompt
61 |             algorithm: "fuzzy"    # prefix or fuzzy
62 |             external: {
63 |               # set to false to prevent nushell looking into $env.PATH to find more suggestions
64 |               enable: true 
65 |               # set to lower can improve completion performance at the cost of omitting some options
66 |               max_results: 100 
67 |               completer: $multiple_completers
68 |             }
69 |           }
70 |         } 
71 |         $env.PATH = ($env.PATH | 
72 |           split row (char esep) |
73 |           append /usr/bin/env
74 |         )
75 | 
76 |         source ${./aliases.nu}
77 |       '';
78 |     };
79 |     programs.carapace.enable = true;
80 |     programs.carapace.enableNushellIntegration = true;
81 |   };
82 | }
83 | 


--------------------------------------------------------------------------------
/modules/nushell/prompt.nu:
--------------------------------------------------------------------------------
 1 | let host_colors = {
 2 |     higashi: {start: "0xEC5228", end: "0xEF9651"},
 3 |     wolumonde: {start: "0x603F26", end: "0x6C4E31"},
 4 |     chernobog: {start: "0xA94438", end: "0xD24545"},
 5 | }
 6 | let user_colors = {
 7 |     kirara: {start: "0xFF407D", end: "0xEE99C2"},
 8 |     root: {start: "0xC5172E", end: "0xBF3131"},
 9 |     dusk: {start: "0x640D5F", end: "0xD91656"},
10 | }
11 | 
12 | def create_left_prompt [] {
13 |     let hostname = sys host | get hostname
14 |     # str replace handles whoami output on windows
15 |     let username = ^whoami | str replace $"($hostname)\\" ""
16 | 
17 |     let c = $host_colors | get $hostname
18 |     let hostname_fmt = $hostname | ansi gradient --fgstart $c.start --fgend $c.end
19 |     let c = $user_colors | get $username
20 |     let username_fmt = $username | ansi gradient --fgstart $c.start --fgend $c.end
21 | 
22 |     let dir = match (do -i { $env.PWD | path relative-to $nu.home-path }) {
23 |         null => $env.PWD
24 |         '' => '~'
25 |         $relative_pwd => ([~ $relative_pwd] | path join)
26 |     }
27 | 
28 |     let separator_color = ansi light_cyan
29 |     let string_color = ansi light_yellow
30 |     $"($separator_color)//($hostname_fmt)($separator_color)/($username_fmt)($separator_color)/($string_color)cwd=\"($dir)\""
31 | }
32 | 
33 | def create_right_prompt [] {
34 |     ()
35 | }
36 | 
37 | # Use nushell functions to define your right and left prompt
38 | $env.PROMPT_COMMAND = {|| create_left_prompt }
39 | # FIXME: This default is not implemented in rust code as of 2023-09-08.
40 | $env.PROMPT_COMMAND_RIGHT = {|| create_right_prompt }
41 | 
42 | # The prompt indicators are environmental variables that represent
43 | # the state of the prompt
44 | $env.PROMPT_INDICATOR = {|| "/ " }
45 | $env.PROMPT_INDICATOR_VI_INSERT = {|| "/: " }
46 | $env.PROMPT_INDICATOR_VI_NORMAL = {|| "/ " }
47 | $env.PROMPT_MULTILINE_INDICATOR = {|| "/::: " }
48 | 


--------------------------------------------------------------------------------
/modules/persist/default.nix:
--------------------------------------------------------------------------------
1 | { lib, ... }:
2 | {
3 |   options.system.persistDir = lib.mkOption {
4 |     type = lib.types.str;
5 |   };
6 | }
7 | 


--------------------------------------------------------------------------------
/modules/persist/null.nix:
--------------------------------------------------------------------------------
 1 | { lib, ... }:
 2 | {
 3 |   imports = [ ./default.nix ];
 4 | 
 5 |   config = {
 6 |     system.persistDir = "null";
 7 |   };
 8 | 
 9 |   options = {
10 |     home.persistence = lib.mkOption {
11 |       type = lib.raw;
12 |     };
13 |     environment.persistence = lib.mkOption {
14 |       type = lib.raw;
15 |     };
16 |   };
17 | }
18 | 


--------------------------------------------------------------------------------
/modules/syncthing/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   inputs,
 4 |   ...
 5 | }:
 6 | {
 7 |   users.users.syncthing.extraGroups = [ "users" ];
 8 |   services.syncthing = {
 9 |     enable = true;
10 |     devices.redmi-phone = {
11 |       id = builtins.readFile "${inputs.self}/secrets/redmi-phone.syncthing.id";
12 |       introducer = true;
13 |       autoAcceptFolders = true;
14 |     };
15 |     dataDir = "${config.system.persistDir}/syncthing";
16 |   };
17 | }
18 | 


--------------------------------------------------------------------------------
/personal.nix:
--------------------------------------------------------------------------------
1 | {
2 |   name = "dusk";
3 |   emails = {
4 |     primary = "y.bera003.06@protonmail.com";
5 |     short = "y.bera003.06@pm.me";
6 |   };
7 | }
8 | 


--------------------------------------------------------------------------------
/pkgs-set/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   inputs,
 3 |   system,
 4 |   lib,
 5 |   tlib,
 6 |   ...
 7 | }:
 8 | let
 9 |   l = lib;
10 |   overlays = l.mapAttrsToList (
11 |     name: _:
12 |     let
13 |       o = import "${./.}/overlays/${name}";
14 |     in
15 |     if (l.functionArgs o) ? inputs then o { inherit inputs; } else o
16 |   ) (l.readDir ./overlays);
17 |   newPkgs = l.mapAttrsToList (name: _: final: prev: {
18 |     ${l.removeSuffix ".nix" name} = final.callPackage "${./pkgs}/${name}" { inherit inputs tlib; };
19 |   }) (l.readDir ./pkgs);
20 |   pkgs = import inputs.nixpkgs {
21 |     inherit system;
22 |     config.allowUnfree = true;
23 |     # config.allowBroken = true;
24 |     # config.permittedInsecurePackages = ["electron-25.9.0"];
25 |     overlays = overlays ++ newPkgs;
26 |   };
27 |   pkgsToExport = import ./pkgs-to-export.nix pkgs;
28 | in
29 | pkgs
30 | // {
31 |   _exported = pkgsToExport;
32 | }
33 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/abaddon.nix:
--------------------------------------------------------------------------------
 1 | final: prev: {
 2 |   abaddon = prev.abaddon.overrideAttrs (old: rec {
 3 |     version = "0.1.12";
 4 |     src = final.fetchFromGitHub {
 5 |       owner = "uowuo";
 6 |       repo = "abaddon";
 7 |       rev = "v${version}";
 8 |       sha256 = "sha256-Rz3c6RMZUiKQ0YKKQkCEkelfIGUq+xVmgNskj7uEjGI=";
 9 |       fetchSubmodules = true;
10 |     };
11 |     buildInputs =
12 |       old.buildInputs
13 |       ++ (with final; [
14 |         miniaudio
15 |         libsodium
16 |         libopus
17 |         spdlog
18 |         pcre2
19 |         rnnoise
20 |         qrcodegen
21 |         openssl
22 |       ]);
23 |   });
24 | }
25 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/agenix.nix:
--------------------------------------------------------------------------------
1 | { inputs }:
2 | final: prev: {
3 |   agenix = inputs.agenix.packages."${final.system}".agenix;
4 | }
5 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/anubis.nix:
--------------------------------------------------------------------------------
 1 | final: prev: {
 2 |   anubis =
 3 |     let
 4 |       pname = "anubis";
 5 |       version = "1.17.0";
 6 | 
 7 |       src = final.fetchFromGitHub {
 8 |         owner = "TecharoHQ";
 9 |         repo = "anubis";
10 |         tag = "v${version}";
11 |         hash = "sha256-pwTb1P5gCxdiXylRo7jhykbJkJA4l3hE+imN9A2EF7g=";
12 |       };
13 |     in
14 |     prev.anubis.overrideAttrs (old: {
15 |       inherit src version;
16 |       name = "${pname}-${version}";
17 |       vendorHash = "sha256-v9GsTUzBYfjh6/ETBbFpN5dqMzMaOz8w39Xz1omaPJE=";
18 |     });
19 | }
20 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/bitwig.nix:
--------------------------------------------------------------------------------
 1 | final: prev: {
 2 |   bitwig-studio = prev.bitwig-studio.overrideAttrs (old: rec {
 3 |     version = "5.0.4";
 4 |     src = final.fetchurl {
 5 |       url = "https://downloads.bitwig.com/stable/${version}/${old.pname}-${version}.deb";
 6 |       sha256 = "sha256-IkhUkKO+Ay1WceZNekII6aHLOmgcgGfx0hGo5ldFE5Y=";
 7 |     };
 8 |     postInstall = ''
 9 |       cp ${../patches/bitwig.jar} $out/libexec/bin/bitwig.jar
10 |     '';
11 |   });
12 | }
13 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/calf.nix:
--------------------------------------------------------------------------------
 1 | final: prev: {
 2 |   calf = prev.calf.overrideAttrs (old: {
 3 |     src = final.fetchFromGitHub {
 4 |       owner = "calf-studio-gear";
 5 |       repo = "calf";
 6 |       rev = "024e9deab2d32b26e90b556d36d9c74f6b0aeb17";
 7 |       sha256 = "sha256-av6quHkesND9M8vlkOQKLXK4prf+oQxOLANuNsWL+eg=";
 8 |     };
 9 |     nativeBuildInputs =
10 |       old.nativeBuildInputs
11 |       ++ (with final; [
12 |         automake
13 |         autoconf
14 |         pkg-config
15 |         libtool
16 |       ]);
17 |     configurePhase = ''
18 |       $SHELL autogen.sh
19 |     '';
20 |   });
21 | }
22 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/musikcube.nix:
--------------------------------------------------------------------------------
1 | { inputs }:
2 | final: prev: {
3 |   musikcube = inputs.nixpkgs-master.legacyPackages.${final.system}.musikcube;
4 | }
5 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/nur.nix:
--------------------------------------------------------------------------------
1 | { inputs }: inputs.nur.overlays.default
2 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/prismlauncher.nix:
--------------------------------------------------------------------------------
1 | { inputs }:
2 | final: prev: {
3 |   prismlauncher = prev.prismlauncher.overrideAttrs (old: {
4 |     patches = [ ((toString inputs.self) + "/pkgs-set/patches/prismlauncher-offline.patch") ];
5 |   });
6 | }
7 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/rofi-bluetooth.nix:
--------------------------------------------------------------------------------
 1 | final: prev: {
 2 |   rofi-bluetooth-wayland =
 3 |     (prev.rofi-bluetooth.override { rofi-unwrapped = final.rofi-wayland-unwrapped; }).overrideAttrs
 4 |       (old: {
 5 |         src = final.fetchFromGitHub {
 6 |           owner = "nickclyde";
 7 |           repo = "rofi-bluetooth";
 8 |           rev = "0c07719c428984893c46f6cfe0a56660e03ccf50";
 9 |           sha256 = "sha256-Er59/fMhcA7xCXn3abMeBlrYfDYsOBApeykR1r8XbNU=";
10 |         };
11 |       });
12 | }
13 | 


--------------------------------------------------------------------------------
/pkgs-set/overlays/steam.nix:
--------------------------------------------------------------------------------
 1 | { inputs }:
 2 | final: prev: {
 3 |   steam = prev.steam.override {
 4 |     extraLibraries =
 5 |       pkgs: with pkgs; [
 6 |         mimalloc
 7 |         pipewire
 8 |         vulkan-loader
 9 |         wayland
10 |         wayland-protocols
11 |       ];
12 |   };
13 | }
14 | 


--------------------------------------------------------------------------------
/pkgs-set/patches/bitwig.jar:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/pkgs-set/patches/bitwig.jar


--------------------------------------------------------------------------------
/pkgs-set/patches/prismlauncher-offline.patch:
--------------------------------------------------------------------------------
 1 | diff --git a/launcher/ui/pages/global/AccountListPage.cpp b/launcher/ui/pages/global/AccountListPage.cpp
 2 | index 6e1e2183..6821f192 100644
 3 | --- a/launcher/ui/pages/global/AccountListPage.cpp
 4 | +++ b/launcher/ui/pages/global/AccountListPage.cpp
 5 | @@ -186,19 +186,6 @@ void AccountListPage::on_actionAddMicrosoft_triggered()
 6 |  
 7 |  void AccountListPage::on_actionAddOffline_triggered()
 8 |  {
 9 | -    if (!m_accounts->anyAccountIsValid()) {
10 | -        QMessageBox::warning(
11 | -            this,
12 | -            tr("Error"),
13 | -            tr(
14 | -                "You must add a Microsoft or Mojang account that owns Minecraft before you can add an offline account."
15 | -                "<br><br>"
16 | -                "If you have lost your account you can contact Microsoft for support."
17 | -            )
18 | -        );
19 | -        return;
20 | -    }
21 | -
22 |      MinecraftAccountPtr account = OfflineLoginDialog::newAccount(
23 |          this,
24 |          tr("Please enter your desired username to add your offline account.")
25 | 


--------------------------------------------------------------------------------
/pkgs-set/pkgs-to-export.nix:
--------------------------------------------------------------------------------
1 | pkgs:
2 | (pkgs.lib.getAttrs [
3 |   "phantom"
4 |   "comic-mono"
5 |   "bitwig-studio"
6 |   "percli"
7 | ] pkgs)
8 | 


--------------------------------------------------------------------------------
/pkgs-set/pkgs/comic-mono.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   fetchurl,
 3 |   runCommand,
 4 |   ...
 5 | }:
 6 | let
 7 |   ttf = fetchurl {
 8 |     url = "https://dtinth.github.io/comic-mono-font/ComicMono.ttf";
 9 |     sha256 = "sha256-O8FCXpIqFqvw7HZ+/+TQJoQ5tMDc6YQy4H0V9drVcZY=";
10 |   };
11 | in
12 | runCommand "comic-mono" { } ''
13 |   mkdir -p $out/share/fonts/truetype
14 |   ln -s ${ttf} $out/share/fonts/truetype
15 | ''
16 | 


--------------------------------------------------------------------------------
/pkgs-set/pkgs/discordo.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   buildGoModule,
 3 |   fetchFromGitHub,
 4 |   ...
 5 | }:
 6 | let
 7 |   rev = "40e2e7e6a5533c1e0bd682cb7ccadf3e5bc5eae8";
 8 |   shortRev = builtins.substring 0 8 rev;
 9 | in
10 | buildGoModule {
11 |   pname = "discordo";
12 |   version = shortRev;
13 | 
14 |   src = fetchFromGitHub {
15 |     owner = "ayntgl";
16 |     repo = "discordo";
17 |     inherit rev;
18 |     sha256 = "sha256-620PwT6RVrc3orD6Ny51kyMMdcQU5bZ1gSMJDJA7H2g=";
19 |   };
20 | 
21 |   vendorSha256 = "sha256-XUoKEnLy88BAeUMZ19YS/vF1TksYroayQiyds5aQ3hI=";
22 | }
23 | 


--------------------------------------------------------------------------------
/pkgs-set/pkgs/dnsmngmt.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   dnscontrol,
 3 |   writers,
 4 |   ...
 5 | }:
 6 | writers.writeBashBin "dns" ''
 7 |   cd dns
 8 |   ${dnscontrol}/bin/dnscontrol $1 --notify
 9 | ''
10 | 


--------------------------------------------------------------------------------
/pkgs-set/pkgs/fluidsynth-dssi.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   lib,
 3 |   stdenv,
 4 |   fetchurl,
 5 |   alsa-lib,
 6 |   autoconf,
 7 |   automake,
 8 |   dssi,
 9 |   gtk2,
10 |   libjack2,
11 |   ladspaH,
12 |   ladspaPlugins,
13 |   liblo,
14 |   pkg-config,
15 |   fluidsynth,
16 |   rpm2targz,
17 |   libtool,
18 |   ...
19 | }:
20 | stdenv.mkDerivation rec {
21 |   pname = "fluidsynth-dssi";
22 |   version = "1.9.9";
23 | 
24 |   src = fetchurl {
25 |     url = "https://download.opensuse.org/source/distribution/leap/15.4/repo/oss/src/fluidsynth-dssi-1.9.9+git13012019-bp154.1.42.src.rpm";
26 |     sha256 = "sha256-DJSrdxQpjvQTzio6e3p/iSYJWu+AbydyKkeKsRQA6qc=";
27 |   };
28 | 
29 |   nativeBuildInputs = [
30 |     autoconf
31 |     automake
32 |     pkg-config
33 |     rpm2targz
34 |     libtool
35 |   ];
36 |   buildInputs = [
37 |     alsa-lib
38 |     dssi
39 |     gtk2
40 |     libjack2
41 |     ladspaH
42 |     ladspaPlugins
43 |     liblo
44 |     fluidsynth.dev
45 |   ];
46 | 
47 |   unpackPhase = ''
48 |     rpm2targz $src
49 |     tar -xf *.tar.gz
50 |     rm *.src.tar.gz
51 |     tar -xf *.tar.gz
52 |     rm *.diff
53 |     rm *.spec
54 |     rm *.tar.gz
55 |     cd fluidsynth-dssi-*
56 |   '';
57 |   configurePhase = ''
58 |     $SHELL autogen.sh
59 |     $SHELL configure
60 |   '';
61 |   installPhase = ''
62 |     mkdir -p $out/bin
63 |     mkdir -p $out/lib
64 |     cp src/FluidSynth-DSSI_gtk $out/bin
65 |     cp src/.libs/* $out/lib
66 |   '';
67 | 
68 |   meta = with lib; {
69 |     license = licenses.gpl2Plus;
70 |     platforms = platforms.linux;
71 |   };
72 | }
73 | 


--------------------------------------------------------------------------------
/pkgs-set/pkgs/fractal-next.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   lib,
  3 |   stdenv,
  4 |   fetchFromGitLab,
  5 |   nix-update-script,
  6 |   meson,
  7 |   cmake,
  8 |   ninja,
  9 |   gettext,
 10 |   python3,
 11 |   rustPlatform,
 12 |   pkg-config,
 13 |   glib,
 14 |   libhandy,
 15 |   libsecret,
 16 |   libshumate,
 17 |   gtk4,
 18 |   gtksourceview5,
 19 |   libadwaita,
 20 |   llvmPackages,
 21 |   glibc,
 22 |   wayland,
 23 |   pipewire,
 24 |   dbus,
 25 |   openssl,
 26 |   sqlite,
 27 |   gst_all_1,
 28 |   cairo,
 29 |   gdk-pixbuf,
 30 |   gspell,
 31 |   wrapGAppsHook,
 32 |   desktop-file-utils,
 33 |   appstream-glib,
 34 |   ...
 35 | }:
 36 | stdenv.mkDerivation rec {
 37 |   pname = "fractal-next";
 38 |   version = "26_10_2022";
 39 | 
 40 |   src = fetchFromGitLab {
 41 |     domain = "gitlab.gnome.org";
 42 |     owner = "GNOME";
 43 |     repo = "fractal";
 44 |     rev = "c3d1bd7ac8c1374d887746acf614b5036ac2f95c";
 45 |     sha256 = "sha256-UzlV9MSOtCSx7RNIbr2sv4y1Kxfqo/laWJBeNiGdrZI=";
 46 |   };
 47 | 
 48 |   cargoDeps = rustPlatform.fetchCargoTarball {
 49 |     inherit src;
 50 |     name = "${pname}-${version}";
 51 |     sha256 = "sha256-E0x+0vtpJATagVzpQ57hMiiTxqFR1vFM2sN7W2e17fc=";
 52 |   };
 53 | 
 54 |   nativeBuildInputs = [
 55 |     appstream-glib # for appstream-util
 56 |     gettext
 57 |     meson
 58 |     ninja
 59 |     pkg-config
 60 |     python3
 61 |     rustPlatform.rust.cargo
 62 |     rustPlatform.cargoSetupHook
 63 |     rustPlatform.rust.rustc
 64 |     wrapGAppsHook
 65 |     desktop-file-utils
 66 |     glib
 67 |     cmake
 68 |   ];
 69 | 
 70 |   buildInputs = [
 71 |     cairo
 72 |     dbus
 73 |     gdk-pixbuf
 74 |     glib
 75 |     gspell
 76 |     gst_all_1.gst-editing-services
 77 |     gst_all_1.gst-plugins-bad
 78 |     gst_all_1.gst-plugins-base
 79 |     (gst_all_1.gst-plugins-good.override {
 80 |       gtkSupport = true;
 81 |     })
 82 |     gst_all_1.gstreamer
 83 |     gst_all_1.gst-devtools
 84 |     gtk4
 85 |     gtksourceview5
 86 |     libadwaita
 87 |     wayland
 88 |     pipewire
 89 |     libhandy
 90 |     openssl
 91 |     libsecret
 92 |     libshumate
 93 |   ];
 94 | 
 95 |   # libspa-sys requires this for bindgen
 96 |   LIBCLANG_PATH = "${llvmPackages.libclang.lib}/lib";
 97 |   # <spa-0.2/spa/utils/defs.h> included by libspa-sys requires <stdbool.h>
 98 |   BINDGEN_EXTRA_CLANG_ARGS = "-I${llvmPackages.libclang.lib}/lib/clang/${lib.getVersion llvmPackages.clang}/include -I${glibc.dev}/include";
 99 | 
100 |   doCheck = false;
101 | 
102 |   postPatch = ''
103 |     patchShebangs build-aux/meson_post_install.py
104 |   '';
105 | 
106 |   passthru = {
107 |     updateScript = nix-update-script {
108 |       attrPath = pname;
109 |     };
110 |   };
111 | 
112 |   meta = with lib; {
113 |     description = "Matrix group messaging app";
114 |     homepage = "https://gitlab.gnome.org/GNOME/fractal";
115 |     license = licenses.gpl3;
116 |     maintainers =
117 |       teams.gnome.members
118 |       ++ (with maintainers; [
119 |         dtzWill
120 |         genofire
121 |       ]);
122 |   };
123 | }
124 | 


--------------------------------------------------------------------------------
/pkgs-set/pkgs/generate-firefox-addons.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   nur,
 3 |   treefmt,
 4 |   writers,
 5 |   tlib,
 6 |   ...
 7 | }:
 8 | writers.writeBashBin "generate-firefox-addons" ''
 9 |   ${tlib.pkgBin nur.repos.rycee.mozilla-addons-to-nix} \
10 |     users/modules/firefox/extensions.json \
11 |     users/modules/firefox/extensions.nix
12 |   ${tlib.pkgBin treefmt}
13 | ''
14 | 


--------------------------------------------------------------------------------
/pkgs-set/pkgs/percli.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   buildGoModule,
 3 |   fetchFromGitHub,
 4 |   ...
 5 | }:
 6 | let
 7 |   pname = "percli";
 8 |   version = "0.50.3";
 9 | 
10 |   src = fetchFromGitHub {
11 |     owner = "perses";
12 |     repo = "perses";
13 |     tag = "v${version}";
14 |     hash = "sha256-E8PTPit9QLPMlLvdx8rbw0BwC+ZqSMTHdfPJ4aE4dsw=";
15 |   };
16 | in
17 | buildGoModule {
18 |   inherit pname version src;
19 | 
20 |   env.CGO_ENABLED = 0;
21 | 
22 |   subPackages = [ "cmd/percli" ];
23 | 
24 |   vendorHash = "sha256-yUqV6pBl6tyE4f4tBVN0DwgVFey+1btVpK7eiMKkwIY=";
25 | }
26 | 


--------------------------------------------------------------------------------
/pkgs-set/pkgs/phantom.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   stdenv,
 3 |   libsForQt5,
 4 |   ...
 5 | }:
 6 | stdenv.mkDerivation {
 7 |   pname = "phantomstyle";
 8 |   version = "309c97";
 9 | 
10 |   src = builtins.fetchGit {
11 |     url = "https://github.com/randrew/phantomstyle.git";
12 |     rev = "309c97a955f6cdfb1987d1dd04c34d667e4bfce1";
13 |   };
14 | 
15 |   dontWrapQtApps = true;
16 | 
17 |   buildInputs = [ libsForQt5.qt5.qtbase ];
18 | 
19 |   buildPhase = ''
20 |     cd src/styleplugin
21 |     qmake && make
22 |   '';
23 | 
24 |   installPhase = ''
25 |     mkdir -p $out/$qtPluginPrefix/styles
26 |     mv libphantomstyleplugin.so $out/$qtPluginPrefix/styles
27 |   '';
28 | }
29 | 


--------------------------------------------------------------------------------
/secrets/9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa.did:
--------------------------------------------------------------------------------
 1 | {
 2 |   "@context": [
 3 |     "https://www.w3.org/ns/did/v1",
 4 |     "https://w3id.org/security/multikey/v1",
 5 |     "https://w3id.org/security/suites/secp256k1-2019/v1"
 6 |   ],
 7 |   "id": "did:web:9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa",
 8 |   "alsoKnownAs": [
 9 |     "at://9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa"
10 |   ],
11 |   "verificationMethod": [
12 |     {
13 |       "id": "did:web:9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa#atproto",
14 |       "type": "Multikey",
15 |       "controller": "did:web:9.0.0.0.8.e.f.1.5.0.7.4.0.1.0.0.2.ip6.arpa",
16 |       "publicKeyMultibase": "zDnaedt2KMppsttSWko283stBhEQXrLMLjNuBRXHfmfeRMbeh"
17 |     }
18 |   ],
19 |   "service": [
20 |     {
21 |       "id": "#atproto_pds",
22 |       "type": "AtprotoPersonalDataServer",
23 |       "serviceEndpoint": "https://gaze.systems"
24 |     }
25 |   ]
26 | }
27 | 


--------------------------------------------------------------------------------
/secrets/bernbotToken.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/bernbotToken.age


--------------------------------------------------------------------------------
/secrets/dawn.gaze.systems.did:
--------------------------------------------------------------------------------
 1 | {
 2 |   "@context": [
 3 |     "https://www.w3.org/ns/did/v1",
 4 |     "https://w3id.org/security/multikey/v1",
 5 |     "https://w3id.org/security/suites/secp256k1-2019/v1"
 6 |   ],
 7 |   "id": "did:web:dawn.gaze.systems",
 8 |   "alsoKnownAs": [
 9 |     "at://dawn.gaze.systems"
10 |   ],
11 |   "verificationMethod": [
12 |     {
13 |       "id": "did:web:dawn.gaze.systems#atproto",
14 |       "type": "Multikey",
15 |       "controller": "did:web:dawn.gaze.systems",
16 |       "publicKeyMultibase": "zQ3shgM1xUBo5aLVavTm5v5id9isstiiSvxYnsoetTNbwz5fZ"
17 |     }
18 |   ],
19 |   "service": [
20 |     {
21 |       "id": "#atproto_pds",
22 |       "type": "AtprotoPersonalDataServer",
23 |       "serviceEndpoint": "https://gaze.systems"
24 |     }
25 |   ]
26 | }
27 | 


--------------------------------------------------------------------------------
/secrets/deployWebhook.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/deployWebhook.age


--------------------------------------------------------------------------------
/secrets/forgejoActRunnerToken.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/forgejoActRunnerToken.age


--------------------------------------------------------------------------------
/secrets/guestbook.gaze.systems.did:
--------------------------------------------------------------------------------
 1 | {
 2 |   "@context": [
 3 |     "https://www.w3.org/ns/did/v1",
 4 |     "https://w3id.org/security/multikey/v1",
 5 |     "https://w3id.org/security/suites/secp256k1-2019/v1"
 6 |   ],
 7 |   "id": "did:web:guestbook.gaze.systems",
 8 |   "alsoKnownAs": [
 9 |     "at://guestbook.gaze.systems"
10 |   ],
11 |   "verificationMethod": [
12 |     {
13 |       "id": "did:web:guestbook.gaze.systems#atproto",
14 |       "type": "Multikey",
15 |       "controller": "did:web:guestbook.gaze.systems",
16 |       "publicKeyMultibase": "zQ3shSiLsnqpyQ4SfDTT1D8qzFEoeYT8rSDXW6o8pVY7VcRBJ"
17 |     }
18 |   ],
19 |   "service": [
20 |     {
21 |       "id": "#atproto_pds",
22 |       "type": "AtprotoPersonalDataServer",
23 |       "serviceEndpoint": "https://gaze.systems"
24 |     }
25 |   ]
26 | }
27 | 


--------------------------------------------------------------------------------
/secrets/musikquadConfig.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/musikquadConfig.age


--------------------------------------------------------------------------------
/secrets/nixGithubAccessToken.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/nixGithubAccessToken.age


--------------------------------------------------------------------------------
/secrets/pdsConfig.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/pdsConfig.age


--------------------------------------------------------------------------------
/secrets/persesAdminUser.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/persesAdminUser.age


--------------------------------------------------------------------------------
/secrets/persesSecret.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/persesSecret.age


--------------------------------------------------------------------------------
/secrets/ratholeCreds.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/ratholeCreds.age


--------------------------------------------------------------------------------
/secrets/secrets.nix:
--------------------------------------------------------------------------------
 1 | let
 2 |   yusdacra = builtins.readFile ./yusdacra.key.pub;
 3 |   wolumonde = builtins.readFile ./wolumonde.key.pub;
 4 | in
 5 | {
 6 |   "bernbotToken.age".publicKeys = [
 7 |     yusdacra
 8 |     wolumonde
 9 |   ];
10 |   "musikquadConfig.age".publicKeys = [
11 |     yusdacra
12 |     wolumonde
13 |   ];
14 |   "nixGithubAccessToken.age".publicKeys = [ yusdacra ];
15 |   "websiteConfig.age".publicKeys = [
16 |     yusdacra
17 |     wolumonde
18 |   ];
19 |   "forgejoActRunnerToken.age".publicKeys = [
20 |     yusdacra
21 |     wolumonde
22 |   ];
23 |   "xrayConfig.age".publicKeys = [
24 |     yusdacra
25 |     wolumonde
26 |   ];
27 |   "pdsConfig.age".publicKeys = [
28 |     yusdacra
29 |     wolumonde
30 |   ];
31 |   "webhookAuth.age".publicKeys = [
32 |     yusdacra
33 |     wolumonde
34 |   ];
35 |   "deployWebhook.age".publicKeys = [ yusdacra ];
36 |   "persesSecret.age".publicKeys = [
37 |     yusdacra
38 |     wolumonde
39 |   ];
40 |   "persesAdminUser.age".publicKeys = [
41 |     yusdacra
42 |     wolumonde
43 |   ];
44 |   "ratholeCreds.age".publicKeys = [
45 |     yusdacra wolumonde
46 |   ];
47 |   "tangledKnot.age".publicKeys = [yusdacra wolumonde];
48 | }
49 | 


--------------------------------------------------------------------------------
/secrets/tangledKnot.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/tangledKnot.age


--------------------------------------------------------------------------------
/secrets/webhookAuth.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/webhookAuth.age


--------------------------------------------------------------------------------
/secrets/websiteConfig.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/websiteConfig.age


--------------------------------------------------------------------------------
/secrets/wolumonde.key.pub:
--------------------------------------------------------------------------------
1 | ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFqvIsMes2kz/tbRYuPvM3amJdO0hhdXqofjiwDtiJjs


--------------------------------------------------------------------------------
/secrets/xrayConfig.age:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/yusdacra/ark/e5aac75644e2b957e98cf27e1bf48ff753412f6e/secrets/xrayConfig.age


--------------------------------------------------------------------------------
/secrets/yusdacra.key.pub:
--------------------------------------------------------------------------------
1 | ssh-rsa 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
2 | 


--------------------------------------------------------------------------------
/shells/dash.nu:
--------------------------------------------------------------------------------
 1 | def "main build" [file: path] {
 2 |   percli dac build -f ($file | path basename)
 3 |   glob ./built/*
 4 |     | enumerate
 5 |     | each {
 6 |       |f| mv -f $f.item (
 7 |             $env.PWD
 8 |             | path join .. provision (
 9 |               $f.item
10 |                 | path basename
11 |                 | str replace "_output.yaml" ".yaml"
12 |                 | $"9($f.index)-($in)"
13 |               )
14 |           )
15 |       }
16 |   rm ./built
17 | }
18 | 
19 | def main [] {}


--------------------------------------------------------------------------------
/shells/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   tlib,
 3 |   inputs,
 4 |   ...
 5 | }:
 6 | tlib.genPkgs (
 7 |   pkgs:
 8 |   let
 9 |     mkNakedShell = pkgs.callPackage inputs.naked-shell { };
10 |     agenix-wrapped = pkgs.writeShellApplication {
11 |       name = "agenix";
12 |       runtimeInputs = [ pkgs.agenix ];
13 |       text = ''
14 |         if [ -z "''${1-}" ]; then
15 |           agenix
16 |         else
17 |           RULES="$FLAKE/secrets/secrets.nix" agenix -i "$FLAKE/ssh_key" "$@"
18 |         fi
19 |       '';
20 |     };
21 |     commit = pkgs.writers.writeNuBin "commit" ../commit.nu;
22 |     deploy = pkgs.writers.writeNuBin "deploy" ../deploy.nu;
23 |     dash = pkgs.writers.writeNuBin "dash" ./dash.nu;
24 |   in
25 |   {
26 |     default = mkNakedShell {
27 |       name = "prts";
28 |       packages =
29 |         (with pkgs; [
30 |           git
31 |           nixfmt-rfc-style
32 |           treefmt
33 |           rage
34 |           nh
35 |           percli
36 |           go
37 |           gopls
38 |           # golangci-lint
39 |           # golangci-lint-langserver
40 |         ])
41 |         ++ [
42 |           dash
43 |           agenix-wrapped
44 |           commit
45 |           deploy
46 |         ];
47 |       shellHook = ''
48 |         echo \"$(tput bold)welcome to PRTS, $USER$(tput sgr0)\"
49 |         export FLAKE=$PWD
50 |       '';
51 |     };
52 |   }
53 | )
54 | 


--------------------------------------------------------------------------------
/treefmt.toml:
--------------------------------------------------------------------------------
 1 | # One CLI to format the code tree - https://github.com/numtide/treefmt
 2 | 
 3 | [formatter.nix]
 4 | # Formatter to run
 5 | command = "nixfmt"
 6 | # Command-line arguments for the command
 7 | options = []
 8 | # Glob pattern of files to include
 9 | includes = [ "*.nix" ]
10 | # Glob patterns of files to exclude
11 | excludes = []
12 | 


--------------------------------------------------------------------------------
/users/firewatch/default.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   pkgs,
  3 |   lib,
  4 |   tlib,
  5 |   config,
  6 |   ...
  7 | }@globalAttrs:
  8 | let
  9 |   l = lib // builtins;
 10 | 
 11 |   nixosConfig = globalAttrs.config;
 12 | 
 13 |   signKeyText = builtins.readFile ../../secrets/yusdacra.key.pub;
 14 | in
 15 | {
 16 |   users.users.firewatch = {
 17 |     isNormalUser = true;
 18 |     createHome = true;
 19 |     home = "/home/firewatch";
 20 |     extraGroups = l.flatten [
 21 |       "wheel"
 22 |       "adbusers"
 23 |       "nix-build-key-access"
 24 |       (l.optional nixosConfig.virtualisation.docker.enable "docker")
 25 |     ];
 26 |     shell = pkgs.zsh;
 27 |     hashedPassword = "$6$spzqhAyJfhHy$iHgLBlhjGn1l8PnbjJdWTn1GPvcjMqYNKUzdCe/7IrX6sHNgETSr/Nfpdmq9FCXLhrAfwHOd/q/8SvfeIeNX4/";
 28 |   };
 29 |   environment.shells = with pkgs; [
 30 |     bashInteractive
 31 |     zsh
 32 |   ];
 33 |   programs = {
 34 |     # cuz nixos complains
 35 |     zsh.enable = true;
 36 |   };
 37 |   home-manager.users.firewatch =
 38 |     {
 39 |       config,
 40 |       pkgs,
 41 |       inputs,
 42 |       secrets,
 43 |       ...
 44 |     }:
 45 |     let
 46 |       personal = import ../../personal.nix;
 47 |       name = personal.name;
 48 |       email = personal.emails.primary;
 49 |     in
 50 |     {
 51 |       imports =
 52 |         let
 53 |           modulesToEnable = l.flatten [
 54 |             [
 55 |               "zoxide"
 56 |               "zsh"
 57 |               "fzf"
 58 |               "starship"
 59 |               "direnv"
 60 |             ]
 61 |             # dev stuff
 62 |             [
 63 |               "helix"
 64 |               "git"
 65 |               "ssh"
 66 |             ]
 67 |           ];
 68 |         in
 69 |         l.flatten [
 70 |           ../../modules/persist/null.nix
 71 |           (tlib.prefixStrings "${inputs.self}/users/modules/" modulesToEnable)
 72 |         ];
 73 | 
 74 |       settings.enable = false;
 75 | 
 76 |       home = {
 77 |         homeDirectory = nixosConfig.users.users.firewatch.home;
 78 |         packages = with pkgs; [
 79 |           # Programs
 80 |           nix-output-monitor
 81 |           inputs.nh.packages.${pkgs.system}.default
 82 |         ];
 83 |         file.".ssh/authorized_keys".text = ''
 84 |           ${signKeyText}
 85 |         '';
 86 |       };
 87 | 
 88 |       programs = {
 89 |         command-not-found.enable = nixosConfig.programs.command-not-found.enable;
 90 |         git = {
 91 |           userName = name;
 92 |           userEmail = email;
 93 |           extraConfig = {
 94 |             gpg.format = "ssh";
 95 |             commit.gpgsign = true;
 96 |             user.signingkey = signKeyText;
 97 |           };
 98 |         };
 99 |       };
100 |     };
101 | }
102 | 


--------------------------------------------------------------------------------
/users/modules/arrpc/default.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   systemd.user.services.arrpc = {
 4 |     Install = {
 5 |       WantedBy = [ "default.target" ];
 6 |     };
 7 |     Unit = {
 8 |       Description = "arrpc";
 9 |     };
10 |     Service = {
11 |       ExecStart = "${pkgs.arrpc}/bin/arrpc";
12 |       Restart = "on-failure";
13 |       RestartSec = 5;
14 |     };
15 |   };
16 | }
17 | 


--------------------------------------------------------------------------------
/users/modules/chromium/default.nix:
--------------------------------------------------------------------------------
 1 | { config, ... }:
 2 | {
 3 |   home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories = [
 4 |     ".config/chromium"
 5 |     ".local/share/applications"
 6 |   ];
 7 |   programs.chromium = {
 8 |     enable = true;
 9 |     commandLineArgs = [
10 |       "--ozone-platform-hint=auto"
11 |       "--flag-switches-begin"
12 |       "--enable-webrtc-pipewire-capturer"
13 |       "--disable-software-rasterizer"
14 |       "--disable-gpu-driver-workarounds"
15 |       "--enable-accelerated-video-decode"
16 |       "--enable-accelerated-mjpeg-decode"
17 |       "--enable-gpu-compositing"
18 |       "--enable-oop-rasterization"
19 |       "--canvas-oop-rasterization"
20 |       "--enable-raw-draw"
21 |       "--enable-zero-copy"
22 |       "--enable-gpu-rasterization"
23 |       "--enable-zero-copy"
24 |       "--ignore-gpu-blocklist"
25 |       "--disable-gpu-driver-bug-workarounds"
26 |       "--ozone-platform-hint=wayland"
27 |       "--enable-features=SystemNotifications,WaylandWindowDecorations,WebRTCPipeWireCapturer,EnableDrDc,CanvasOopRasterization,RawDraw,VaapiVideoDecoder,UseSkiaRenderer"
28 |       "--flag-switches-end"
29 |       "--disk-cache-dir=\"$XDG_RUNTIME_DIR/chromium-cache\""
30 |     ];
31 |     extensions = [
32 |       "cjpalhdlnbpafiamejdnhcphjbkeiagm" # ublock origin
33 |       "nngceckbapebfimnlniiiahkandclblb" # bitwarden
34 |       "eimadpbcbfnmbkopoojfekhnkhdbieeh" # dark reader
35 |       "clngdbkpkpeebahjckkjfobafhncgmne" # stylus
36 |       "hlepfoohegkhhmjieoechaddaejaokhf" # refined github
37 |       "annfbnbieaamhaimclajlajpijgkdblo" # dark theme
38 |       "nblkbiljcjfemkfjnhoobnojjgjdmknf" # pronoundb
39 |     ];
40 |   };
41 | }
42 | 


--------------------------------------------------------------------------------
/users/modules/code/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   inputs,
 4 |   ...
 5 | }:
 6 | {
 7 |   # stylix.targets.vscode.enable = false;
 8 |   programs.vscode = {
 9 |     enable = true;
10 |     package = pkgs.vscodium;
11 |     extensions = with inputs.vscode-extensions.extensions.x86_64-linux.vscode-marketplace; [
12 |       mkhl.direnv
13 |       bbenoist.nix
14 |       svelte.svelte-vscode
15 |       bradlc.vscode-tailwindcss
16 |       # (rust-lang.rust-analyzer.overrideAttrs (old: {
17 |       #   src = old.src.overrideAttrs (old: {
18 |       #     outputHash = "sha256-k9eDTY9y2ejg4jTApji8X6UmKYK/eCLMZJbiYuoTuyY=";
19 |       #   });
20 |       # }))
21 |       rust-lang.rust-analyzer
22 |     ];
23 |     userSettings = {
24 |       "files.associations" = {
25 |         "*.css" = "tailwindcss";
26 |       };
27 |       "editor.quickSuggestions" = {
28 |         "strings" = "on";
29 |       };
30 |       "editor.suggest.showStatusBar" = true;
31 |       "editor.formatOnSave" = true;
32 |       # "workbench.colorTheme" = "1am";
33 |     };
34 |   };
35 | }
36 | 


--------------------------------------------------------------------------------
/users/modules/direnv/default.nix:
--------------------------------------------------------------------------------
1 | {
2 |   programs.direnv = {
3 |     enable = true;
4 |     nix-direnv.enable = true;
5 |   };
6 | }
7 | 


--------------------------------------------------------------------------------
/users/modules/discord/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   inputs,
 4 |   pkgs,
 5 |   lib,
 6 |   ...
 7 | }:
 8 | {
 9 |   home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories = [
10 |     ".config/ArmCord"
11 |   ];
12 |   home.packages =
13 |     let
14 |       flags = [
15 |         # "--flag-switches-begin"
16 |         # "--enable-features=UseOzonePlatform,WebRTCPipeWireCapturer"
17 |         # "--flag-switches-end"
18 |         # "--ozone-platform=wayland"
19 |         # "--enable-webrtc-pipewire-capturer"
20 |         # "--disable-gpu-memory-buffer-video-frames"
21 |         # "--enable-accelerated-mjpeg-decode"
22 |         # "--enable-accelerated-video"
23 |         # "--enable-gpu-rasterization"
24 |         # "--enable-native-gpu-memory-buffers"
25 |         # "--enable-zero-copy"
26 |         # "--ignore-gpu-blocklist"
27 |       ];
28 |       pkg =
29 |         (pkgs.armcord.override {
30 |           nss = pkgs.nss_latest;
31 |         }).overrideAttrs
32 |           (old: {
33 |             # preInstall = ''
34 |             #   gappsWrapperArgs+=("--add-flags" "${lib.concatStringsSep " " flags}")
35 |             # '';
36 |           });
37 |     in
38 |     [ pkg ];
39 | }
40 | 


--------------------------------------------------------------------------------
/users/modules/discordrp-mpris/config.toml:
--------------------------------------------------------------------------------
 1 | [global]
 2 | # Enable debug level logging or configure level directly
 3 | debug = false
 4 | log_level = "WARNING"
 5 | 
 6 | poll_interval = 10
 7 | reconnect_wait = 1
 8 | 
 9 | # The following can be overridden per player.
10 | [options]
11 | # Whether to show status for paused players.
12 | show_paused = true
13 | # Whether to show status for previously active and now stopped player.
14 | show_stopped = false
15 | # Available values are: "elapsed", "remaining" or "none".
16 | show_time = "elapsed"
17 | # Upload images to the host
18 | # Note: if this set to true, valid image_host must be set.
19 | # meant to be set to true with all online players
20 | upload_images = true
21 | # Use image host to show local album covers
22 | # There is two conditions to use host:
23 | # 1) image is sent via HTTP POST
24 | # 2) The response will be a text which only contains URL of the uploaded image.
25 | image_host = "https://0x0.st"
26 | # Whether to ignore a player. Supposed to be overridden.
27 | ignore = false
28 | # Maximum number of bytes in the title field
29 | max_title_len = 64
30 | # informational string, usually is just artist and title
31 | # you can use theese formatters here: artist, albumArtist, title, album, position, length, player, state
32 | details = "{title}\nby {artist}"
33 | 
34 | # You can override any of the [options] options
35 | # for each player individually.
36 | # The player name to use as the key
37 | # is shown in your Discord Rich Presence (hover the icons).
38 | [player.Spotify]
39 | ignore = true
40 | 


--------------------------------------------------------------------------------
/users/modules/discordrp-mpris/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   inputs,
 3 |   pkgs,
 4 |   ...
 5 | }:
 6 | {
 7 |   systemd.user.services.discordrp-mpris = {
 8 |     Install = {
 9 |       WantedBy = [ "default.target" ];
10 |     };
11 |     Unit = {
12 |       Description = "discordrp-mpris";
13 |     };
14 |     Service = {
15 |       ExecStart = "${inputs.discordrp-mpris.packages.${pkgs.system}.default}/bin/discordrp-mpris";
16 |       Restart = "on-failure";
17 |       RestartSec = 5;
18 |     };
19 |   };
20 |   xdg.configFile."discordrp-mpris/config.toml".source = ./config.toml;
21 | }
22 | 


--------------------------------------------------------------------------------
/users/modules/dunst/default.nix:
--------------------------------------------------------------------------------
 1 | { config, ... }:
 2 | {
 3 |   # notification daemon
 4 |   services.dunst = {
 5 |     enable = true;
 6 |     iconTheme = config.settings.iconTheme;
 7 |     settings = {
 8 |       global = {
 9 |         alignment = "center";
10 |         corner_radius = 16;
11 |         follow = "mouse";
12 |         format = "<b>%s</b>\\n%b";
13 |         frame_width = 1;
14 |         offset = "5x5";
15 |         horizontal_padding = 8;
16 |         icon_position = "left";
17 |         indicate_hidden = "yes";
18 |         markup = "yes";
19 |         max_icon_size = 64;
20 |         mouse_left_click = "do_action";
21 |         mouse_middle_click = "close_all";
22 |         mouse_right_click = "close_current";
23 |         padding = 8;
24 |         plain_text = "no";
25 |         separator_height = 1;
26 |         show_indicators = false;
27 |         shrink = "no";
28 |         word_wrap = "yes";
29 |       };
30 | 
31 |       fullscreen_delay_everything = {
32 |         fullscreen = "delay";
33 |       };
34 |     };
35 |   };
36 | }
37 | 


--------------------------------------------------------------------------------
/users/modules/firefox/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   config,
 4 |   ...
 5 | }:
 6 | {
 7 |   home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories = [
 8 |     ".mozilla"
 9 |     ".floorp"
10 |   ];
11 |   home.packages = [ (pkgs.lib.hiPrio pkgs.floorp) ];
12 |   programs.firefox = {
13 |     enable = true;
14 |     package = pkgs.firefox.override {
15 |       extraPrefs = ''
16 |         lockPref("privacy.resistFingerprinting.letterboxing", false);
17 |         lockPref("browser.startup.homepage", "about:home");
18 |         lockPref("browser.newtabpage.enabled", true);
19 |         lockPref("browser.startup.page", 1);
20 |         lockPref("privacy.clearOnShutdown.downloads", false);
21 |         lockPref("privacy.clearOnShutdown.formdata", false);
22 |         lockPref("privacy.clearOnShutdown.history", false);
23 |         lockPref("privacy.clearOnShutdown.offlineApps", false);
24 |         lockPref("privacy.clearOnShutdown.sessions", false);
25 |         lockPref("privacy.clearOnShutdown.cookies", false);
26 |         lockPref("services.sync.engine.passwords", false);
27 |         lockPref("network.cookie.lifetimePolicy", 0);
28 |         lockPref("gfx.webrender.all", true);
29 |         lockPref("media.ffmpeg.vaapi.enabled", true);
30 |         lockPref("media.hardware-video-decoding.force-enabled", true);
31 |       '';
32 |       extraPolicies = {
33 |         CaptivePortal = false;
34 |         DisableFirefoxStudies = true;
35 |         DisablePocket = true;
36 |         DisableTelemetry = true;
37 |         DisableFirefoxAccounts = true;
38 |         FirefoxHome = {
39 |           Pocket = false;
40 |           Snippets = false;
41 |         };
42 |         UserMessaging = {
43 |           ExtensionRecommendations = false;
44 |           SkipOnboarding = true;
45 |         };
46 |       };
47 |     };
48 |     profiles = {
49 |       default = {
50 |         id = 0;
51 |         isDefault = false;
52 |         name = "defaulta";
53 |       };
54 |       personal = {
55 |         id = 1;
56 |         isDefault = true;
57 |         name = "personal";
58 |         extensions =
59 |           with pkgs.nur.repos.rycee.firefox-addons;
60 |           let
61 |             myExtensions = pkgs.callPackage ./extensions.nix { inherit buildFirefoxXpiAddon; };
62 |           in
63 |           [
64 |             ublock-origin
65 |             darkreader
66 |             bitwarden
67 |             refined-github
68 |           ]
69 |           ++ (with myExtensions; [
70 |             youtube-disable-number-seek
71 |             showdex
72 |             better-twitter-extension
73 |             better-clean-twitter
74 |           ]);
75 |         extraConfig = builtins.readFile (
76 |           builtins.fetchurl {
77 |             url = "https://raw.githubusercontent.com/arkenfox/user.js/115.1/user.js";
78 |             sha256 = "sha256:0x0xkbhmb53lyfpbc8wmm44dgr4zrn15b2pc6gny08mh5j4ny8m7";
79 |           }
80 |         );
81 |       };
82 |     };
83 |   };
84 | }
85 | 


--------------------------------------------------------------------------------
/users/modules/firefox/extensions.json:
--------------------------------------------------------------------------------
1 | [
2 |   {"slug":"catppuccin-mocha-sky"},
3 |   {"slug":"youtube-disable-number-seek"},
4 |   {"slug":"showdex"},
5 |   {"slug":"styl-us"},
6 |   {"slug":"better-twitter-extension"},
7 |   {"slug":"better-clean-twitter"}
8 | ]
9 | 


--------------------------------------------------------------------------------
/users/modules/firefox/extensions.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   buildFirefoxXpiAddon,
  3 |   fetchurl,
  4 |   lib,
  5 |   stdenv,
  6 | }:
  7 | {
  8 |   "better-clean-twitter" = buildFirefoxXpiAddon {
  9 |     pname = "better-clean-twitter";
 10 |     version = "1.3.2";
 11 |     addonId = "bct@presti.me";
 12 |     url = "https://addons.mozilla.org/firefox/downloads/file/4124387/better_clean_twitter-1.3.2.xpi";
 13 |     sha256 = "094d99c7678c3247a0b07a2d0d942df969daafe567d392a52a6f0b40ce7382bd";
 14 |     meta = with lib; {
 15 |       homepage = "https://presti.me";
 16 |       description = "Remove all the annoying clutter from your Twitter.";
 17 |       license = licenses.gpl3;
 18 |       mozPermissions = [
 19 |         "*://twitter.com/*"
 20 |         "*://api.twitter.com/*"
 21 |         "activeTab"
 22 |         "storage"
 23 |         "tabs"
 24 |         "scripting"
 25 |         "webRequest"
 26 |         "nativeMessaging"
 27 |         "https://twitter.com/*"
 28 |       ];
 29 |       platforms = platforms.all;
 30 |     };
 31 |   };
 32 |   "better-twitter-extension" = buildFirefoxXpiAddon {
 33 |     pname = "better-twitter-extension";
 34 |     version = "2.1.2";
 35 |     addonId = "{ef32ca60-1728-4011-a585-4de439fe7ba7}";
 36 |     url = "https://addons.mozilla.org/firefox/downloads/file/4056346/better_twitter_extension-2.1.2.xpi";
 37 |     sha256 = "25cf90586def269d7a54d8b4fd71aa63529e25ed6689df4c05b0d7f8c3fabca9";
 38 |     meta = with lib; {
 39 |       description = "Hide what is not important on <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/26ca20fd517be4e3078c65b14f44521b572c8c48532db6c37d90ff3a2ee15167/http%3A//Twitter.com\" rel=\"nofollow\">Twitter.com</a>";
 40 |       mozPermissions = [
 41 |         "storage"
 42 |         "https://twitter.com/*"
 43 |         "https://mobile.twitter.com/*"
 44 |       ];
 45 |       platforms = platforms.all;
 46 |     };
 47 |   };
 48 |   "catppuccin-mocha-sky" = buildFirefoxXpiAddon {
 49 |     pname = "catppuccin-mocha-sky";
 50 |     version = "2.0";
 51 |     addonId = "{12eeb304-58cd-4bcb-9676-99562b04f066}";
 52 |     url = "https://addons.mozilla.org/firefox/downloads/file/3954372/catppuccin_dark_sky-2.0.xpi";
 53 |     sha256 = "d9453ae265608d3a1b17c812d77422ab2aaf357365e527812268a407643efa25";
 54 |     meta = with lib; {
 55 |       description = "Firefox theme based on <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/110954a3f2718cf03892676379416caed51099b639f643aaf12989b7e698f073/https%3A//github.com/catppuccin/catppuccin\" rel=\"nofollow\">https://github.com/catppuccin/catppuccin</a>";
 56 |       license = licenses.cc-by-30;
 57 |       mozPermissions = [ ];
 58 |       platforms = platforms.all;
 59 |     };
 60 |   };
 61 |   "showdex" = buildFirefoxXpiAddon {
 62 |     pname = "showdex";
 63 |     version = "1.1.6";
 64 |     addonId = "showdex@tize.io";
 65 |     url = "https://addons.mozilla.org/firefox/downloads/file/4146071/showdex-1.1.6.xpi";
 66 |     sha256 = "1d608d261c73f8acac4c2f3a878c501d822ae6dc6f0e3f018b07bc6eada646a4";
 67 |     meta = with lib; {
 68 |       homepage = "https://github.com/doshidak/showdex";
 69 |       description = "Pokémon Showdown extension that harnesses the power of parabolic calculus to strategically extract your opponents' Elo.";
 70 |       mozPermissions = [
 71 |         "clipboardRead"
 72 |         "clipboardWrite"
 73 |         "*://play.pokemonshowdown.com/*"
 74 |         "*://*.psim.us/*"
 75 |         "*://play.radicalred.net/*"
 76 |       ];
 77 |       platforms = platforms.all;
 78 |     };
 79 |   };
 80 |   "styl-us" = buildFirefoxXpiAddon {
 81 |     pname = "styl-us";
 82 |     version = "1.5.35";
 83 |     addonId = "{7a7a4a92-a2a0-41d1-9fd7-1e92480d612d}";
 84 |     url = "https://addons.mozilla.org/firefox/downloads/file/4160414/styl_us-1.5.35.xpi";
 85 |     sha256 = "d415ee11fa4a4313096a268e54fd80fa93143345be16f417eb1300a6ebe26ba1";
 86 |     meta = with lib; {
 87 |       homepage = "https://add0n.com/stylus.html";
 88 |       description = "Redesign your favorite websites with Stylus, an actively developed and community driven userstyles manager. Easily install custom themes from popular online repositories, or create, edit, and manage your own personalized CSS stylesheets.";
 89 |       license = licenses.gpl3;
 90 |       mozPermissions = [
 91 |         "tabs"
 92 |         "webNavigation"
 93 |         "webRequest"
 94 |         "webRequestBlocking"
 95 |         "contextMenus"
 96 |         "storage"
 97 |         "unlimitedStorage"
 98 |         "alarms"
 99 |         "<all_urls>"
100 |         "http://userstyles.org/*"
101 |         "https://userstyles.org/*"
102 |       ];
103 |       platforms = platforms.all;
104 |     };
105 |   };
106 |   "youtube-disable-number-seek" = buildFirefoxXpiAddon {
107 |     pname = "youtube-disable-number-seek";
108 |     version = "1.2";
109 |     addonId = "{963aa3d4-c342-4dfe-872e-76be742d1bea}";
110 |     url = "https://addons.mozilla.org/firefox/downloads/file/4134869/youtube_disable_number_seek-1.2.xpi";
111 |     sha256 = "d6cde501b2603944e36baaa10adb9f24c9214929929c346176d0336d25418259";
112 |     meta = with lib; {
113 |       description = "Disables 0-9 keyboard shortcuts on YouTube which seek to different times on a video.";
114 |       license = licenses.mpl20;
115 |       mozPermissions = [
116 |         "*://*.youtube.com/*"
117 |         "*://*.youtube-nocookie.com/*"
118 |       ];
119 |       platforms = platforms.all;
120 |     };
121 |   };
122 | }
123 | 


--------------------------------------------------------------------------------
/users/modules/fluxbox/default.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   xsession.enable = true;
 4 |   xsession.windowManager.fluxbox = {
 5 |     enable = true;
 6 |     menu = ''
 7 |       [exec] (Floorp) {/etc/profiles/per-user/patriot/bin/floorp}
 8 |       [exec] (urxvt) {/etc/profiles/per-user/patriot/bin/urxvt}
 9 |     '';
10 |   };
11 | }
12 | 


--------------------------------------------------------------------------------
/users/modules/foot/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   lib,
 3 |   pkgs,
 4 |   ...
 5 | }:
 6 | {
 7 |   settings.terminal.name = "foot";
 8 |   settings.terminal.binary = "${pkgs.foot}/bin/foot";
 9 |   programs.foot = {
10 |     enable = true;
11 |     package = pkgs.foot;
12 |     server.enable = false;
13 |     settings.main.dpi-aware = lib.mkForce "yes";
14 |   };
15 | }
16 | 


--------------------------------------------------------------------------------
/users/modules/fzf/default.nix:
--------------------------------------------------------------------------------
1 | { config, ... }:
2 | {
3 |   programs.fzf.enable = true;
4 |   # home.sessionVariables = {
5 |   #   FZF_DEFAULT_OPTS = "--color=spinner:#F8BD96,hl:#F28FAD --color=fg:#D9E0EE,header:#F28FAD,info:#DDB6F2,pointer:#F8BD96 --color=marker:#F8BD96,fg+:#F2CDCD,prompt:#DDB6F2,hl+:#F28FAD";
6 |   # };
7 | }
8 | 


--------------------------------------------------------------------------------
/users/modules/git/default.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   programs.git = {
 4 |     enable = true;
 5 |     extraConfig = {
 6 |       pull.rebase = true;
 7 |       safe.directory = "/etc/nixos";
 8 |       diff.external = "${pkgs.difftastic}/bin/difft";
 9 |     };
10 |     lfs.enable = true;
11 |     aliases = {
12 |       a = "add -p";
13 |       co = "checkout";
14 |       cob = "checkout -b";
15 |       f = "fetch -p";
16 |       c = "commit";
17 |       ps = "push";
18 |       pl = "pull";
19 |       rb = "rebase";
20 |       ba = "branch -a";
21 |       bd = "branch -d";
22 |       bD = "branch -D";
23 |       d = "diff";
24 |       dc = "diff --cached";
25 |       ds = "diff --staged";
26 |       rs = "restore";
27 |       rss = "restore --staged";
28 |       s = "status -sb";
29 |       ss = "stash";
30 |       ssp = "stash pop";
31 |       ssl = "stash list";
32 |       ssd = "stash drop";
33 |       # reset
34 |       rsoft = "reset --soft";
35 |       rhard = "reset --hard";
36 |       rs1ft = "soft HEAD~1";
37 |       rh1rd = "hard HEAD~1";
38 |       # logging
39 |       l = "log --color --graph --pretty=format:'%Cred%h%Creset -%C(yellow)%d%Creset %s %Cgreen(%cr) %C(bold blue)<%an>%Creset' --abbrev-commit";
40 |       plog = "log --graph --pretty='format:%C(red)%d%C(reset) %C(yellow)%h%C(reset) %ar %C(green)%aN%C(reset) %s'";
41 |       tlog = "log --stat --since='1 Day Ago' --graph --pretty=oneline --abbrev-commit --date=relative";
42 |       rank = "shortlog -sn --no-merges";
43 |       # delete merged branches
44 |       bdm = "!git branch --merged | grep -v '*' | xargs -n 1 git branch -d";
45 |     };
46 |   };
47 | }
48 | 


--------------------------------------------------------------------------------
/users/modules/godot/default.nix:
--------------------------------------------------------------------------------
1 | { pkgs, ... }:
2 | {
3 |   home.packages = with pkgs; [ godot_4 ];
4 | }
5 | 


--------------------------------------------------------------------------------
/users/modules/helix/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   inputs,
 3 |   pkgs,
 4 |   ...
 5 | }:
 6 | {
 7 |   stylix.targets.helix.enable = false;
 8 |   programs.helix = {
 9 |     enable = true;
10 |     languages.language = [
11 |       {
12 |         name = "dockerfile";
13 |         roots = [
14 |           "Dockerfile"
15 |           "Containerfile"
16 |         ];
17 |         file-types = [
18 |           "Dockerfile"
19 |           "Containerfile"
20 |           "dockerfile"
21 |           "containerfile"
22 |         ];
23 |       }
24 |     ];
25 |     settings = {
26 |       theme = "ferra";
27 |       editor = {
28 |         soft-wrap.enable = true;
29 |         line-number = "relative";
30 |         middle-click-paste = false;
31 |         true-color = true;
32 |         whitespace.render = "all";
33 |         cursor-shape.insert = "block";
34 |         lsp = {
35 |           display-messages = true;
36 |           display-inlay-hints = false;
37 |         };
38 |         indent-guides = {
39 |           render = true;
40 |         };
41 |         auto-pairs = {
42 |           "(" = ")";
43 |           "{" = "}";
44 |           "[" = "]";
45 |           "\"" = "\"";
46 |           "'" = "'";
47 |           "<" = ">";
48 |         };
49 |         statusline = {
50 |           left = [
51 |             "mode"
52 |             "spinner"
53 |           ];
54 |           center = [
55 |             "file-name"
56 |             "file-encoding"
57 |             "version-control"
58 |           ];
59 |           right = [
60 |             "diagnostics"
61 |             "selections"
62 |           ];
63 |         };
64 |       };
65 |     };
66 |   };
67 | }
68 | 


--------------------------------------------------------------------------------
/users/modules/hyprland/config.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   config,
  3 |   pkgs,
  4 |   ...
  5 | }:
  6 | let
  7 |   run-as-service =
  8 |     slice:
  9 |     pkgs.writeShellScript "as-systemd-transient" ''
 10 |       exec ${pkgs.systemd}/bin/systemd-run \
 11 |         --slice=app-${slice}.slice \
 12 |         --property=ExitType=cgroup \
 13 |         --user \
 14 |         --wait \
 15 |         bash -lc "exec apply-hm-env $@"
 16 |     '';
 17 |   launcher = "rofi";
 18 |   launcherCmd = "${launcher} -show drun";
 19 |   term = config.settings.terminal.name;
 20 | in
 21 | {
 22 |   wayland.windowManager.hyprland.extraConfig = ''
 23 |     # should be configured per-profile
 24 |     monitor=eDP-1,preferred,0x0,1.6
 25 |     monitor=HDMI-A-1,1920x1080@75,auto,1
 26 |     workspace=eDP-1,1
 27 |     workspace=HDMI-A-1,2
 28 | 
 29 |     exec-once=xprop -root -f _XWAYLAND_GLOBAL_OUTPUT_SCALE 32c -set _XWAYLAND_GLOBAL_OUTPUT_SCALE 2
 30 |     exec-once=swaybg -i ~/.config/wallpaper
 31 |     exec-once=eww open bar
 32 | 
 33 |     input {
 34 |       kb_layout=tr
 35 |       follow_mouse=1
 36 |       force_no_accel=1
 37 |       touchpad {
 38 |         natural_scroll=1
 39 |       }
 40 |     }
 41 |     general {
 42 |       main_mod=SUPER
 43 |       gaps_in=5
 44 |       gaps_out=5
 45 |       border_size=0
 46 |     }
 47 |     decoration {
 48 |       rounding=16
 49 |       blur=0
 50 |       blur_size=3
 51 |       blur_passes=3
 52 |       blur_new_optimizations=1
 53 |       drop_shadow=0
 54 |       shadow_ignore_window=1
 55 |     }
 56 |     animations {
 57 |       enabled=1
 58 |       animation=windows,1,3,default,popin 80%
 59 |       animation=border,1,2,default
 60 |       animation=fade,1,4,default
 61 |       animation=workspaces,1,2,default,slide
 62 |     }
 63 |     dwindle {
 64 |       pseudotile=1
 65 |       preserve_split=1
 66 |       no_gaps_when_only=1
 67 |     }
 68 |     misc {
 69 |       no_vfr=0
 70 |     }
 71 | 
 72 |     # window rules
 73 |     windowrulev2=float,title:^(Media viewer)$
 74 |     windowrulev2=float,title:^(Picture-in-Picture)$
 75 |     windowrulev2=pin,title:^(Picture-in-Picture)$
 76 |     windowrulev2=float,title:^(Firefox — Sharing Indicator)$
 77 |     windowrulev2=move 0 0,title:^(Firefox — Sharing Indicator)$
 78 | 
 79 |     # window rules for organization
 80 |     windowrulev2=workspace 1,title:^(Firefox)$
 81 |     windowrulev2=workspace 2,title:^(Discord)$
 82 |     windowrulev2=workspace 2,title:^(WebCord)$
 83 |     windowrulev2=workspace 3,title:^(foot)$
 84 | 
 85 |     # make blueberry device-specific window proper size
 86 |     windowrulev2  =  tile,  class:^(blueberry.py)$,  title:^(?!Sound).+$
 87 | 
 88 |     # mouse
 89 |     bindm=SUPER,mouse:272,movewindow
 90 |     bindm=SUPER,mouse:273,resizewindow
 91 |     bindm=SUPERALT,mouse:272,resizewindow
 92 | 
 93 |     # compositor binds
 94 |     bind=SUPERSHIFT,E,exec,pkill Hyprland
 95 |     bind=SUPER,Q,killactive,
 96 |     bind=SUPER,F,fullscreen,
 97 |     bind=SUPER,P,pseudo,
 98 |     bind=SUPERSHIFT,T,togglefloating,
 99 | 
100 |     # utilities
101 |     bind=SUPER,L,exec,swaylock
102 |     bind=SUPER,RETURN,exec, ${term}
103 |     bind=SUPER,D,exec,pkill ${launcher} || ${launcherCmd}
104 |     bind=SUPER,Escape,exec,wlogout -p layer-shell
105 | 
106 |     # media management
107 |     bind=,XF86AudioPlay,exec,playerctl play-pause
108 |     bind=,XF86AudioPrev,exec,playerctl previous
109 |     bind=,XF86AudioNext,exec,playerctl next
110 | 
111 |     # volume management
112 |     bindle=,XF86AudioRaiseVolume,exec,wpctl set-volume @DEFAULT_AUDIO_SINK@ 6%+
113 |     bindle=,XF86AudioLowerVolume,exec,wpctl set-volume @DEFAULT_AUDIO_SINK@ 6%-
114 |     bind=,XF86AudioMute,exec,wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle
115 |     bind=,XF86AudioMicMute,exec,wpctl set-mute @DEFAULT_AUDIO_SOURCE@ toggle
116 | 
117 |     # brightness management
118 |     bind=,XF86MonBrightnessUp,exec,light -A 5
119 |     bind=,XF86MonBrightnessDown,exec,light -U 5
120 | 
121 |     # move focus
122 |     bind=SUPER,left,movefocus,l
123 |     bind=SUPER,right,movefocus,r
124 |     bind=SUPER,up,movefocus,u
125 |     bind=SUPER,down,movefocus,d
126 | 
127 |     # cycle workspaces
128 |     bind=SUPER,bracketleft,workspace,m-1
129 |     bind=SUPER,bracketright,workspace,m+1
130 | 
131 |     # cycle monitors
132 |     bind=SUPERSHIFT,braceleft,focusmonitor,l
133 |     bind=SUPERSHIFT,braceright,focusmonitor,r
134 | 
135 |     # workspaces
136 |     ${builtins.concatStringsSep "\n" (
137 |       builtins.genList (
138 |         x:
139 |         let
140 |           ws =
141 |             let
142 |               c = (x + 1) / 10;
143 |             in
144 |             builtins.toString (x + 1 - (c * 10));
145 |         in
146 |         ''
147 |           bind=SUPER,${ws},workspace,${toString (x + 1)}
148 |           bind=SHIFTSUPER,${ws},movetoworkspacesilent,${toString (x + 1)}
149 |         ''
150 |       ) 10
151 |     )}
152 | 
153 |     # screenshot
154 |     bind=,Print,exec,grimblast --notify copysave area
155 |     bind=SUPERSHIFT,R,exec,grimblast --notify copysave area
156 |     bind=CTRL,Print,exec,grimblast --notify --cursor copysave output
157 |     bind=SUPERSHIFTCTRL,R,exec,grimblast --notify --cursor copysave output
158 |     bind=ALT,Print,exec,grimblast --notify --cursor copysave screen
159 |     bind=SUPERSHIFTALT,R,exec,grimblast --notify --cursor copysave screen
160 |   '';
161 | }
162 | 


--------------------------------------------------------------------------------
/users/modules/hyprland/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   pkgs,
 4 |   inputs,
 5 |   ...
 6 | }:
 7 | {
 8 |   imports = [
 9 |     ../wayland
10 |     ../swaylock
11 |     ../wlsunset
12 |     ../eww
13 |     ../foot
14 |     ../dunst
15 |     ../rofi
16 |     ./swayidle.nix
17 |     ./config.nix
18 |     inputs.hyprland.homeManagerModules.default
19 |   ];
20 | 
21 |   home.sessionVariables = {
22 |     GDK_SCALE = "2";
23 |     QT_SCALE_FACTOR = "2";
24 |   };
25 | 
26 |   home.packages = with pkgs; [
27 |     wf-recorder
28 |     xorg.xprop
29 |     inputs.hyprland-contrib.packages.${pkgs.system}.grimblast
30 |     light
31 |     playerctl
32 |     wlogout
33 |     swaybg
34 |     mpvpaper
35 |   ];
36 | 
37 |   wayland.windowManager.hyprland = {
38 |     enable = true;
39 |     package = inputs.hyprland.packages.${pkgs.system}.hyprland;
40 |   };
41 | }
42 | 


--------------------------------------------------------------------------------
/users/modules/hyprland/swayidle.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   lib,
 4 |   ...
 5 | }:
 6 | {
 7 |   home.packages = with pkgs; [
 8 |     wlopm
 9 |     swayidle
10 |   ];
11 |   services.swayidle = {
12 |     enable = true;
13 |     events = [
14 |       {
15 |         event = "before-sleep";
16 |         command = "swaylock";
17 |       }
18 |       {
19 |         event = "lock";
20 |         command = "swaylock";
21 |       }
22 |     ];
23 |     timeouts = [
24 |       {
25 |         timeout = 120;
26 |         command = "wlopm --off \*";
27 |         resumeCommand = "wlopm --on \*";
28 |       }
29 |       {
30 |         timeout = 300;
31 |         command = "loginctl lock-session";
32 |       }
33 |     ];
34 |   };
35 |   systemd.user.services.swayidle.Install.WantedBy = lib.mkForce [ "hyprland-session.target" ];
36 | }
37 | 


--------------------------------------------------------------------------------
/users/modules/lollypop/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   pkgs,
 4 |   ...
 5 | }:
 6 | {
 7 |   home.packages = [ pkgs.lollypop ];
 8 |   home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories = [
 9 |     ".local/share/lollypop"
10 |   ];
11 | }
12 | 


--------------------------------------------------------------------------------
/users/modules/mako/default.nix:
--------------------------------------------------------------------------------
1 | { ... }:
2 | {
3 |   programs.mako = {
4 |     enable = true;
5 |     anchor = "top-center";
6 |     borderRadius = 16;
7 |   };
8 | }
9 | 


--------------------------------------------------------------------------------
/users/modules/musikcube/default-config.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "AppQuitKey": "^D",
 3 |   "AsyncTrackListQueries": true,
 4 |   "AutoHideCommandBar": false,
 5 |   "AutoUpdateCheck": true,
 6 |   "CategoryTrackListSortOrder": 0,
 7 |   "ColorTheme": "",
 8 |   "DisableAlbumArtistFallback": false,
 9 |   "DisableCustomColors": false,
10 |   "DisableRatingColumn": false,
11 |   "DisableWindowTitleUpdates": true,
12 |   "FirstRunSettingsDisplayed": true,
13 |   "IndexerLogEnabled": false,
14 |   "IndexerThreadCount": 4,
15 |   "IndexerTransactionInterval": 300,
16 |   "InheritBackgroundColor": false,
17 |   "LastAcknowledgedUpdateVersion": "3.0.0",
18 |   "LastFmSessionId": "",
19 |   "LastFmToken": "",
20 |   "LastFmUsername": "",
21 |   "LibraryType": 1,
22 |   "Locale": "en_US",
23 |   "MinimizeToTray": false,
24 |   "PiggyEnabled": false,
25 |   "PlaybackTrackQueryTimeoutMs": 5000,
26 |   "RatingNegativeChar": "·",
27 |   "RatingPositiveChar": "★",
28 |   "RemoteLibraryHostname": "127.0.0.1",
29 |   "RemoteLibraryHttpPort": 7906,
30 |   "RemoteLibraryHttpTls": false,
31 |   "RemoteLibraryIgnoreVersionMismatch": 0,
32 |   "RemoteLibraryLatencyTimeoutMs": 5000,
33 |   "RemoteLibraryPassword": "",
34 |   "RemoteLibraryTranscoderBitrate": 192,
35 |   "RemoteLibraryTranscoderEnabled": false,
36 |   "RemoteLibraryTranscoderFormat": "ogg",
37 |   "RemoteLibraryWssPort": 7905,
38 |   "RemoteLibraryWssTls": false,
39 |   "RemoveMissingFiles": true,
40 |   "SaveSessionOnExit": true,
41 |   "StartMinimized": false,
42 |   "SyncOnStartup": true,
43 |   "TrackSearchSortOrder": 0,
44 |   "UsePaletteColors": true
45 | }


--------------------------------------------------------------------------------
/users/modules/musikcube/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   pkgs,
 4 |   lib,
 5 |   ...
 6 | }:
 7 | let
 8 |   cfg = config.programs.musikcube;
 9 | in
10 | {
11 |   options = {
12 |     programs.musikcube = {
13 |       enable = lib.mkEnableOption "whether to enable musikcube";
14 |       package = lib.mkOption {
15 |         type = lib.types.package;
16 |         default = pkgs.musikcube;
17 |       };
18 |       settings = lib.mkOption {
19 |         type = (pkgs.formats.json { }).type;
20 |         default = builtins.fromJSON (builtins.readFile ./default-config.json);
21 |       };
22 |     };
23 |   };
24 | 
25 |   config = lib.mkIf cfg.enable {
26 |     home.packages = [ cfg.package ];
27 |     home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories = [
28 |       ".config/musikcube"
29 |     ];
30 |     xdg.configFile."musikcube/settings.json".text = builtins.toJSON cfg.settings;
31 |   };
32 | }
33 | 


--------------------------------------------------------------------------------
/users/modules/musikcubed/default-config.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "debug": false,
 3 |   "http_server_enabled": true,
 4 |   "http_server_port": 7906,
 5 |   "password": "",
 6 |   "transcoder_cache_count": 50,
 7 |   "transcoder_max_active_count": 4,
 8 |   "transcoder_synchronous": false,
 9 |   "transcoder_synchronous_fallback": false,
10 |   "use_ipv6": false,
11 |   "websocket_server_enabled": true,
12 |   "websocket_server_port": 7905
13 | }


--------------------------------------------------------------------------------
/users/modules/musikcubed/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   lib,
 4 |   pkgs,
 5 |   ...
 6 | }:
 7 | let
 8 |   cfg = config.services.musikcubed;
 9 | in
10 | {
11 |   options = {
12 |     services.musikcubed = {
13 |       enable = lib.mkEnableOption "whether to enable musikcubed";
14 |       package = lib.mkOption {
15 |         type = lib.types.package;
16 |         default = pkgs.musikcube;
17 |       };
18 |       settings = lib.mkOption {
19 |         type = (pkgs.formats.json { }).type;
20 |         default = builtins.fromJSON (builtins.readFile ./default-config.json);
21 |       };
22 |     };
23 |   };
24 |   config = lib.mkIf cfg.enable {
25 |     systemd.user.services.musikcubed = {
26 |       Install = {
27 |         WantedBy = [ "default.target" ];
28 |       };
29 |       Unit = {
30 |         Description = "musikcubed";
31 |         After = "network.target";
32 |       };
33 |       Service = {
34 |         ExecStart = "${cfg.package}/bin/musikcubed --foreground";
35 |         Restart = "on-failure";
36 |         RestartSec = 5;
37 |       };
38 |     };
39 |     xdg.configFile."musikcube/plugin_musikcubeserver(wss,http).json".text =
40 |       builtins.toJSON cfg.settings;
41 |   };
42 | }
43 | 


--------------------------------------------------------------------------------
/users/modules/newsflash/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   pkgs,
 4 |   ...
 5 | }:
 6 | {
 7 |   home.packages = [ pkgs.newsflash ];
 8 |   home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories = [
 9 |     ".local/share/news-flash"
10 |     ".config/news-flash"
11 |   ];
12 | }
13 | 


--------------------------------------------------------------------------------
/users/modules/obsidian/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   config,
 4 |   lib,
 5 |   ...
 6 | }:
 7 | {
 8 |   home.packages = [ pkgs.obsidian ];
 9 |   home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories = [
10 |     ".config/obsidian"
11 |   ];
12 | }
13 | 


--------------------------------------------------------------------------------
/users/modules/premid/default.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   systemd.user.services.premid = {
 4 |     Install = {
 5 |       WantedBy = [ "default.target" ];
 6 |     };
 7 |     Unit = {
 8 |       Description = "premid";
 9 |     };
10 |     Service = {
11 |       ExecStart = "${pkgs.premid}/bin/premid";
12 |       Restart = "on-failure";
13 |       RestartSec = 5;
14 |     };
15 |   };
16 | }
17 | 


--------------------------------------------------------------------------------
/users/modules/psd/default.nix:
--------------------------------------------------------------------------------
 1 | username:
 2 | { pkgs, ... }:
 3 | {
 4 |   services.psd.enable = true;
 5 | 
 6 |   security.sudo.extraRules = [
 7 |     {
 8 |       users = [ username ];
 9 |       commands = [
10 |         {
11 |           command = "${pkgs.profile-sync-daemon}/bin/psd-overlay-helper";
12 |           options = [
13 |             "SETENV"
14 |             "NOPASSWD"
15 |           ];
16 |         }
17 |       ];
18 |     }
19 |   ];
20 | 
21 |   home-manager.users.${username} = {
22 |     xdg.enable = true;
23 |     xdg.configFile."psd/psd.conf".text = ''
24 |       USE_OVERLAYFS="no"
25 |       BROWSERS=(chromium)
26 |       USE_BACKUPS="no"
27 |     '';
28 |   };
29 | }
30 | 


--------------------------------------------------------------------------------
/users/modules/ripcord/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   pkgs,
 4 |   ...
 5 | }:
 6 | {
 7 |   home.packages = [ pkgs.ripcord ];
 8 |   home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories = [
 9 |     ".local/share/Ripcord"
10 |   ];
11 | }
12 | 


--------------------------------------------------------------------------------
/users/modules/rofi-nm/default.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   config,
  3 |   pkgs,
  4 |   lib,
  5 |   ...
  6 | }:
  7 | let
  8 |   rofi-nm = pkgs.fetchurl {
  9 |     url = "https://raw.githubusercontent.com/P3rf/rofi-network-manager/1daa69406c9b6539a4744eafb0d5bb8afdc80e9b/rofi-network-manager.sh";
 10 |     hash = "sha256:1nlnjmk5b743j5826z2nzfvjwk0fmbf7gk38darby93kdr3nv5zx";
 11 |   };
 12 |   package = pkgs.writeShellScriptBin "rofi-nm" ''
 13 |     ${config.home.homeDirectory}/.config/rofi-nm/rofi-nm.sh
 14 |   '';
 15 | in
 16 | {
 17 |   options = {
 18 |     programs.rofi-nm.package = lib.mkOption {
 19 |       type = lib.types.package;
 20 |     };
 21 |   };
 22 |   config = {
 23 |     programs.rofi-nm.package = package;
 24 | 
 25 |     home.packages = [ package ];
 26 | 
 27 |     xdg.configFile = {
 28 |       "rofi-nm/rofi-nm.sh" = {
 29 |         source = pkgs.runCommandLocal "rofi-nm" { } ''
 30 |           cp --no-preserve=mode,ownership ${rofi-nm} rofi-nm.sh
 31 |           substituteInPlace rofi-nm.sh \
 32 |             --replace "#!/bin/bash" "#!${pkgs.stdenv.shell}" \
 33 |             --replace "grep" "${pkgs.gnugrep}/bin/grep"
 34 |           mv rofi-nm.sh $out
 35 |         '';
 36 |         executable = true;
 37 |       };
 38 |       "rofi-nm/rofi-network-manager.conf".text = ''
 39 |         LOCATION=3
 40 |         WIDTH_FIX_MAIN=10
 41 |         WIDTH_FIX_STATUS=10
 42 |       '';
 43 |       "rofi-nm/rofi-network-manager.rasi".text = ''
 44 |         configuration {
 45 |           	show-icons:		false;
 46 |           	sidebar-mode: 	false;
 47 |           	hover-select: true;
 48 |           	me-select-entry: "";
 49 |           	me-accept-entry: [MousePrimary];
 50 |         }
 51 | 
 52 |         * {
 53 |             font: "${config.settings.font.regular.fullName}";
 54 |         }
 55 | 
 56 |         @theme "catppuccin"
 57 | 
 58 |         element-text, element-icon , mode-switcher {
 59 |             background-color: inherit;
 60 |             text-color:       inherit;
 61 |         }
 62 | 
 63 |         window {
 64 |             height: 40%;
 65 |             width: 40%;
 66 |             border: 3px;
 67 |             border-color: @border-col;
 68 |             background-color: @bg-col;
 69 |         }
 70 | 
 71 |         mainbox {
 72 |             background-color: @bg-col;
 73 |         }
 74 | 
 75 |         inputbar {
 76 |             children: [prompt,entry];
 77 |             background-color: @bg-col;
 78 |             border-radius: 5px;
 79 |             padding: 2px;
 80 |         }
 81 | 
 82 |         prompt {
 83 |             background-color: @blue;
 84 |             padding: 6px;
 85 |             text-color: @bg-col;
 86 |             border-radius: 3px;
 87 |             margin: 20px 0px 0px 20px;
 88 |         }
 89 | 
 90 |         textbox-prompt-colon {
 91 |             expand: false;
 92 |             str: ":";
 93 |         }
 94 | 
 95 |         entry {
 96 |             placeholder: "";
 97 |             padding: 6px;
 98 |             margin: 20px 0px 0px 10px;
 99 |             text-color: @fg-col;
100 |             background-color: @bg-col;
101 |         }
102 | 
103 |         listview {
104 |             border: 0px 0px 0px;
105 |             padding: 6px 0px 0px;
106 |             margin: 10px 0px 0px 20px;
107 |             columns: 1;
108 |             background-color: @bg-col;
109 |         }
110 | 
111 |         element {
112 |             padding: 5px;
113 |             background-color: @bg-col;
114 |             text-color: @fg-col  ;
115 |         }
116 | 
117 |         element-icon {
118 |             size: 25px;
119 |         }
120 | 
121 |         element selected {
122 |             background-color:  @selected-col ;
123 |             text-color: @fg-col2  ;
124 |         }
125 | 
126 |         mode-switcher {
127 |             spacing: 0;
128 |         }
129 | 
130 |         button {
131 |             padding: 10px;
132 |             background-color: @bg-col-light;
133 |             text-color: @grey;
134 |             vertical-align: 0.5;
135 |             horizontal-align: 0.5;
136 |         }
137 | 
138 |         button selected {
139 |           background-color: @bg-col;
140 |           text-color: @blue;
141 |         }
142 |       '';
143 |     };
144 |   };
145 | }
146 | 


--------------------------------------------------------------------------------
/users/modules/rofi/default.nix:
--------------------------------------------------------------------------------
1 | { pkgs, ... }:
2 | {
3 |   programs.rofi = {
4 |     enable = true;
5 |     package = pkgs.rofi-wayland;
6 |   };
7 | }
8 | 


--------------------------------------------------------------------------------
/users/modules/s3s/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   inputs,
 4 |   ...
 5 | }:
 6 | {
 7 |   imports = [ inputs.s3s.homeManagerModule ];
 8 |   services.s3s.enable = true;
 9 | }
10 | 


--------------------------------------------------------------------------------
/users/modules/settings/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   lib,
 4 |   ...
 5 | }:
 6 | let
 7 |   l = lib // builtins;
 8 |   t = l.types;
 9 |   cfg = config.settings;
10 | in
11 | {
12 |   options = {
13 |     settings.enable = l.mkOption {
14 |       type = t.bool;
15 |       default = true;
16 |     };
17 |     settings.iconTheme = {
18 |       name = l.mkOption {
19 |         type = t.str;
20 |       };
21 |       package = l.mkOption {
22 |         type = t.package;
23 |       };
24 |     };
25 |     settings.terminal = {
26 |       name = l.mkOption {
27 |         type = t.str;
28 |       };
29 |       binary = l.mkOption {
30 |         type = t.path;
31 |       };
32 |     };
33 |   };
34 | 
35 |   config = l.mkIf cfg.enable {
36 |     gtk.iconTheme = cfg.iconTheme;
37 |   };
38 | }
39 | 


--------------------------------------------------------------------------------
/users/modules/smos/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   inputs,
 4 |   secrets,
 5 |   ...
 6 | }:
 7 | let
 8 |   smosDir = "${config.home.homeDirectory}/smos";
 9 | in
10 | {
11 |   imports = [ "${inputs.smos}/nix/home-manager-module.nix" ];
12 |   programs.smos = {
13 |     enable = true;
14 |     notify.enable = true;
15 |     config = {
16 |       workflow-dir = smosDir + "/workflows";
17 |       github.oauth-token = secrets.githubToken;
18 |     };
19 |   };
20 |   home.shellAliases = {
21 |     s = "smos";
22 |     sin = "smos ${config.programs.smos.config.workflow-dir}/inbox.smos";
23 |     sq = "smos-query";
24 |     sqn = "smos-query next";
25 |     sqp = "smos-query projects";
26 |     sgh = "smos-github";
27 |     sghi = "smos-github import";
28 |     sghl = "smos-github list";
29 |   };
30 | }
31 | 


--------------------------------------------------------------------------------
/users/modules/spotify/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   pkgs,
 4 |   ...
 5 | }:
 6 | {
 7 |   services.spotifyd = {
 8 |     enable = true;
 9 |     settings = {
10 |       device_name = "nix";
11 |     };
12 |   };
13 |   home.packages = [ pkgs.spotify-tui ];
14 |   home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories = [
15 |     ".config/spotify-tui"
16 |   ];
17 | }
18 | 


--------------------------------------------------------------------------------
/users/modules/ssh/default.nix:
--------------------------------------------------------------------------------
 1 | { nixosConfig, ... }:
 2 | {
 3 |   programs.ssh = {
 4 |     enable = true;
 5 |     compression = true;
 6 |     hashKnownHosts = true;
 7 |     addKeysToAgent = "yes";
 8 |     package = nixosConfig.programs.ssh.package;
 9 |     # Only needed for darcs hub
10 |     # extraConfig = ''
11 |     #   Host hub.darcs.net
12 |     #      ControlMaster no
13 |     #      ForwardAgent no
14 |     #      ForwardX11 no
15 |     #      Ciphers +aes256-cbc
16 |     #      MACs +hmac-sha1
17 |     # '';
18 |   };
19 |   services.ssh-agent.enable = true;
20 | }
21 | 


--------------------------------------------------------------------------------
/users/modules/starship/default.nix:
--------------------------------------------------------------------------------
 1 | { ... }:
 2 | {
 3 |   programs.starship = {
 4 |     enable = true;
 5 |     settings = {
 6 |       format = "$directory$character";
 7 |       add_newline = false;
 8 |       character = {
 9 |         success_symbol = "[>](bold green)";
10 |         error_symbol = "[>](bold red)";
11 |       };
12 |       directory = {
13 |         truncation_length = 2;
14 |         truncate_to_repo = false;
15 |       };
16 |     };
17 |   };
18 | }
19 | 


--------------------------------------------------------------------------------
/users/modules/sway/default.nix:
--------------------------------------------------------------------------------
  1 | {
  2 |   config,
  3 |   nixosConfig,
  4 |   pkgs,
  5 |   lib,
  6 |   tlib,
  7 |   ...
  8 | }:
  9 | {
 10 |   imports = [
 11 |     ../wayland
 12 |     ../swaylock
 13 |     ../wlsunset
 14 |     ../dunst
 15 |     ../rofi
 16 |     # ./swayidle.nix
 17 |   ];
 18 |   wayland.windowManager = {
 19 |     sway =
 20 |       let
 21 |         mkRofiCmd =
 22 |           args:
 23 |           "${config.programs.rofi.package}/bin/rofi ${lib.concatStringsSep " " args} | ${pkgs.sway}/bin/swaymsg --";
 24 |         inherit (tlib) pkgBin;
 25 |       in
 26 |       {
 27 |         enable = true;
 28 |         extraSessionCommands = ''
 29 |           export QT_QPA_PLATFORM=wayland
 30 |         '';
 31 |         wrapperFeatures.gtk = true;
 32 |         extraConfig = ''
 33 |           exec dbus-update-activation-environment --systemd WAYLAND_DISPLAY XDG_CURRENT_DESKTOP=sway
 34 |           exec xprop -root -f _XWAYLAND_GLOBAL_OUTPUT_SCALE 32c -set _XWAYLAND_GLOBAL_OUTPUT_SCALE 2
 35 |         '';
 36 |         config = {
 37 |           bars = [ ];
 38 |           gaps.smartBorders = "on";
 39 |           menu = mkRofiCmd [
 40 |             "-show"
 41 |             "drun"
 42 |           ];
 43 |           modifier = "Mod4";
 44 |           terminal = config.settings.terminal.binary;
 45 |           keybindings =
 46 |             let
 47 |               mod = config.wayland.windowManager.sway.config.modifier;
 48 | 
 49 |               cat = pkgs.coreutils + "/bin/cat";
 50 |               grim = pkgBin pkgs.grim;
 51 |               slurp = pkgBin pkgs.slurp;
 52 |               pactl = pkgs.pulseaudio + "/bin/pactl";
 53 |               playerctl = pkgBin pkgs.playerctl;
 54 |               wf-recorder = pkgBin pkgs.wf-recorder;
 55 |               wl-copy = pkgs.wl-clipboard + "/bin/wl-copy";
 56 |               wlogout = pkgBin pkgs.wlogout;
 57 |               light = pkgBin pkgs.light;
 58 | 
 59 |               shotFile = config.home.homeDirectory + "/shots/shot_$(date '+%Y_%m_%d_%H_%M')";
 60 |               shotDir = config.home.homeDirectory + "/shots";
 61 |             in
 62 |             lib.mkOptionDefault {
 63 |               "${mod}+Escape" = "exec ${wlogout} -p layer-shell";
 64 |               "${mod}+q" = "kill";
 65 |               "${mod}+Shift+e" = "exit";
 66 |               "${mod}+Shift+r" = "reload";
 67 |               # Screenshot and copy it to clipboard
 68 |               "Mod1+s" = ''
 69 |                 exec export SFILE="${shotFile}.png" && mkdir -p ${shotDir} && ${grim} "$SFILE" && ${cat} "$SFILE" | ${wl-copy} -t image/png
 70 |               '';
 71 |               # Save selected area as a picture and copy it to clipboard
 72 |               "Mod1+Shift+s" = ''
 73 |                 exec export SFILE="${shotFile}.png" && mkdir -p ${shotDir} && ${grim} -g "$(${slurp})" "$SFILE" && ${cat} "$SFILE" | ${wl-copy} -t image/png
 74 |               '';
 75 |               # Record screen
 76 |               "Mod1+r" = ''exec mkdir -p ${shotDir} && ${wf-recorder} -x yuv420p -f "${shotFile}.mp4"'';
 77 |               # Record an area
 78 |               "Mod1+Shift+r" =
 79 |                 ''exec mkdir -p ${shotDir} && ${wf-recorder} -x yuv420p -g "$(${slurp})" -f "${shotFile}.mp4"'';
 80 |               # Stop recording
 81 |               "Mod1+c" = "exec pkill -INT wf-recorder";
 82 |               "XF86AudioRaiseVolume" = "exec ${pactl} set-sink-volume 0 +5%";
 83 |               "XF86AudioLowerVolume" = "exec ${pactl} set-sink-volume 0 -5%";
 84 |               "XF86AudioMute" = "exec ${pactl} set-sink-mute 0 toggle";
 85 |               "XF86AudioPlay" = "exec ${playerctl} play-pause";
 86 |               "XF86AudioPrev" = "exec ${playerctl} previous";
 87 |               "XF86AudioNext" = "exec ${playerctl} next";
 88 |               "XF86AudioStop" = "exec ${playerctl} stop";
 89 |               "XF86MonBrightnessUp" = "exec ${light} -T 1.4";
 90 |               "XF86MonBrightnessDown" = "exec ${light} -T 0.72";
 91 |             };
 92 |           input = {
 93 |             "13364:832:Keychron_Keychron_V4_Keyboard" = {
 94 |               xkb_layout = nixosConfig.services.xserver.layout;
 95 |             };
 96 |             "1:1:AT_Translated_Set_2_keyboard" = {
 97 |               xkb_layout = "tr";
 98 |             };
 99 |             "type:pointer" = {
100 |               accel_profile = "flat";
101 |             };
102 |             "type:touchpad" = {
103 |               accel_profile = "adaptive";
104 |               tap = "enabled";
105 |               scroll_method = "two_finger";
106 |               dwt = "enabled";
107 |               events = "disabled_on_external_mouse";
108 |             };
109 |           };
110 |           output = {
111 |             "*" = {
112 |               bg = "${config.stylix.image} fill";
113 |             };
114 |             "eDP-1" = {
115 |               scale = "2";
116 |               adaptive_sync = "on";
117 |             };
118 |             "HDMI-A-1" = {
119 |               mode = "1920x1080@74.973Hz";
120 |             };
121 |           };
122 |         };
123 |       };
124 |   };
125 | }
126 | 


--------------------------------------------------------------------------------
/users/modules/swaylock/default.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   programs.swaylock = {
 4 |     package = pkgs.swaylock-effects;
 5 |     settings = {
 6 |       screenshot = true;
 7 |       ignore-empty-password = true;
 8 |       clock = true;
 9 |       effect-scale = "0.5";
10 |       effect-greyscale = true;
11 |       effect-blur = "20x3";
12 |     };
13 |   };
14 | }
15 | 


--------------------------------------------------------------------------------
/users/modules/urxvt/default.nix:
--------------------------------------------------------------------------------
 1 | { ... }:
 2 | {
 3 |   programs.urxvt = {
 4 |     enable = true;
 5 |     keybindings = {
 6 |       "Shift-Control-C" = "eval:selection_to_clipboard";
 7 |       "Shift-Control-V" = "eval:paste_clipboard";
 8 |     };
 9 |   };
10 | }
11 | 


--------------------------------------------------------------------------------
/users/modules/vesktop/default.nix:
--------------------------------------------------------------------------------
1 | { pkgs, ... }:
2 | {
3 |   home.packages = [ pkgs.vesktop ];
4 | }
5 | 


--------------------------------------------------------------------------------
/users/modules/wayland/default.nix:
--------------------------------------------------------------------------------
 1 | { pkgs, ... }:
 2 | {
 3 |   home.packages = with pkgs; [
 4 |     wl-clipboard
 5 |   ];
 6 | 
 7 |   home.sessionVariables = {
 8 |     NIXOS_OZONE_WL = "1";
 9 |     MOZ_ENABLE_WAYLAND = "1";
10 |     XDG_SESSION_TYPE = "wayland";
11 |   };
12 | 
13 |   xdg.configFile = {
14 |     "environment.d/10-apply-wayland-env.conf".text = ''
15 |       NIXOS_OZONE_WL=1
16 |       MOZ_ENABLE_WAYLAND=1
17 |       XDG_SESSION_TYPE=wayland
18 |     '';
19 |   };
20 | }
21 | 


--------------------------------------------------------------------------------
/users/modules/wezterm/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   config,
 4 |   ...
 5 | }:
 6 | {
 7 |   settings.terminal.name = "wezterm";
 8 |   home.packages = [ pkgs.wezterm ];
 9 |   xdg.enable = true;
10 |   xdg.configFile = {
11 |     "wezterm/wezterm.lua".text = ''
12 |       local wezterm = require 'wezterm';
13 |       local catppuccin = require("colors/catppuccin").setup {
14 |       	-- whether or not to sync with the system's theme
15 |       	sync = false,
16 |       	-- the default/fallback flavour, when syncing is disabled
17 |       	flavour = "mocha"
18 |       }
19 | 
20 |       return {
21 |         font = wezterm.font("${config.settings.font.regular.name}"),
22 |         font_size = ${builtins.toJSON config.settings.font.regular.size},
23 |         default_cursor_style = "BlinkingBar",
24 |         enable_wayland = true,
25 |         enable_tab_bar = false,
26 |         colors = catppuccin,
27 |         window_background_opacity = 0.85
28 |       }
29 |     '';
30 |     "wezterm/colors/catppuccin.lua".source = builtins.fetchurl {
31 |       url = "https://raw.githubusercontent.com/catppuccin/wezterm/65078e846c8751e9b4837a575deb0745f0c0512f/catppuccin.lua";
32 |       sha256 = "sha256:0cm8kjjga9k1fzgb7nqjwd1jdjqjrkkqaxcavfxdkl3mw7qiy1ib";
33 |     };
34 |   };
35 | }
36 | 


--------------------------------------------------------------------------------
/users/modules/wlsunset/default.nix:
--------------------------------------------------------------------------------
 1 | { inputs, ... }:
 2 | let
 3 |   geo = import "${inputs.self}/locale/geo.nix";
 4 | in
 5 | {
 6 |   services.wlsunset = {
 7 |     enable = true;
 8 |     latitude = geo.lat;
 9 |     longitude = geo.long;
10 |   };
11 | }
12 | 


--------------------------------------------------------------------------------
/users/modules/wtf/default.nix:
--------------------------------------------------------------------------------
1 | { pkgs, ... }:
2 | {
3 |   home.packages = [ pkgs.wtf ];
4 | }
5 | 


--------------------------------------------------------------------------------
/users/modules/zoxide/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   pkgs,
 3 |   config,
 4 |   lib,
 5 |   ...
 6 | }:
 7 | {
 8 |   home.packages = [ pkgs.zoxide ];
 9 |   home.persistence."${config.system.persistDir}${config.home.homeDirectory}".directories =
10 |     lib.singleton ".local/share/zoxide";
11 |   programs.zsh.initExtra = ''
12 |     eval "$(zoxide init zsh)"
13 |   '';
14 | }
15 | 


--------------------------------------------------------------------------------
/users/modules/zsh/default.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   config,
 3 |   tlib,
 4 |   lib,
 5 |   pkgs,
 6 |   ...
 7 | }:
 8 | let
 9 |   pkgBin = tlib.pkgBin;
10 | in
11 | {
12 |   programs.zsh = {
13 |     enable = true;
14 |     autocd = true;
15 |     enableVteIntegration = true;
16 |     enableAutosuggestions = true;
17 |     enableCompletion = true;
18 |     plugins = [
19 |       {
20 |         name = "per-directory-history";
21 |         src = pkgs.fetchFromGitHub {
22 |           owner = "jimhester";
23 |           repo = "per-directory-history";
24 |           rev = "d2e291dd6434e340d9be0e15e1f5b94f32771c06";
25 |           hash = "sha256-VHRgrVCqzILqOes8VXGjSgLek38BFs9eijmp0JHtD5Q=";
26 |         };
27 |       }
28 |     ];
29 |     # configure history
30 |     history = {
31 |       extended = true;
32 |       ignorePatterns = [
33 |         "rm *"
34 |         "mv *"
35 |         "l"
36 |         "ls"
37 |         "ll"
38 |         "g s"
39 |         "git status"
40 |       ];
41 |       save = 1000000;
42 |       size = 1000000;
43 |     };
44 |     # xdg compliant
45 |     dotDir = ".config/zsh";
46 |     history.path = "${config.home.homeDirectory}/.local/share/zsh/history";
47 |     # extra stuff for fixing gpg-agent ssh and some random commands
48 |     initExtra = ''
49 |       ${lib.optionalString (
50 |         config.programs.ssh.enable && config.services.gpg-agent.enable
51 |       ) "export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)"}
52 | 
53 |       function tomp4 () {
54 |         ${pkgBin pkgs.ffmpeg} -i $1 -c:v libx264 -preset slow -crf 30 -c:a aac -b:a 128k "$1.mp4"
55 |       }
56 | 
57 |       function topng () {
58 |         ${pkgBin pkgs.ffmpeg} -i $1 "$1.png"
59 |       }
60 | 
61 |       # fix some key stuff
62 |       bindkey "$terminfo[kRIT5]" forward-word
63 |       bindkey "$terminfo[kLFT5]" backward-word
64 | 
65 |       # makes completions pog
66 |       zstyle ':completion:*' menu select
67 | 
68 |       # which env we are in
69 |       ${pkgBin pkgs.any-nix-shell} zsh --info-right | source /dev/stdin
70 |     '';
71 |   };
72 | }
73 | 


--------------------------------------------------------------------------------
/users/patriot/stylix.nix:
--------------------------------------------------------------------------------
 1 | {
 2 |   inputs,
 3 |   config,
 4 |   pkgs,
 5 |   lib,
 6 |   ...
 7 | }:
 8 | {
 9 |   imports = [
10 |     inputs.stylix.nixosModules.stylix
11 |   ];
12 | 
13 |   stylix.image = ./wallpaper.png;
14 |   stylix.polarity = "dark";
15 |   # stylix.base16Scheme = {
16 |   #   "base00" = "04080e";
17 |   #   "base01" = "36393e";
18 |   #   "base02" = "686b6e";
19 |   #   "base03" = "9b9c9f";
20 |   #   "base04" = "cdcecf";
21 |   #   "base05" = "ffffff";
22 |   #   "base06" = "1d2126";
23 |   #   "base07" = "e6e6e7";
24 |   #   "base08" = "cf0466"; # splatoon 2 pink
25 |   #   "base09" = "2851f6"; # splatoon 1 blue
26 |   #   "base0A" = "6844e6"; # splatoon 3 purple
27 |   #   "base0B" = "17a80d"; # splatoon 2 green
28 |   #   "base0C" = "fea972"; # splatoon 3 fuzzy orange color
29 |   #   "base0D" = "fa5a00"; # splatoon 1 orange
30 |   #   "base0E" = "fffe27"; # splatoon 3 yellow
31 |   #   "base0F" = "bdbebc";
32 |   # };
33 |   stylix.base16Scheme =
34 |     let
35 |       night = "#2b292d";
36 |       ash = "#383539";
37 |       umber = "#4d424b";
38 |       bark = "#6F5D63";
39 |       mist = "#D1D1E0";
40 |       sage = "#B1B695";
41 |       blush = "#fecdb2";
42 |       coral = "#ffa07a";
43 |       rose = "#F6B6C9";
44 |       ember = "#e06b75";
45 |       honey = "#F5D76E";
46 |     in
47 |     {
48 |       base00 = night;
49 |       base01 = ash;
50 |       base02 = umber;
51 |       base03 = bark;
52 |       base04 = blush;
53 |       base05 = mist;
54 |       base06 = mist;
55 |       base07 = bark;
56 |       base08 = ember;
57 |       base09 = honey;
58 |       base0A = rose;
59 |       base0B = sage;
60 |       base0C = bark;
61 |       base0D = coral;
62 |       base0E = blush;
63 |       base0F = umber;
64 |     };
65 | 
66 |   stylix.fonts = {
67 |     serif = {
68 |       name = "Comic Relief";
69 |       package = pkgs.comic-relief;
70 |     };
71 |     sansSerif = config.stylix.fonts.serif;
72 |     monospace = {
73 |       name = "Comic Mono";
74 |       package = pkgs.comic-mono;
75 |     };
76 |   };
77 | 
78 |   stylix.fonts.sizes = {
79 |     popups = 13;
80 |     terminal = 13;
81 |   };
82 | }
83 | 


--------------------------------------------------------------------------------
/users/root/default.nix:
--------------------------------------------------------------------------------
1 | { ... }:
2 | {
3 |   users.users.root.initialHashedPassword = "$6$XLWo1sPpgp63Zm$XHBbULH9q1gb/.yalPPU/I7EgTcW80bM.moCjIe/qGyOwE47VcXNVbTHloBZdIWQq0MfIG0IxInAu59.oJyos/";
4 | }
5 | 


--------------------------------------------------------------------------------