chore: update lockfile

flake.lock

@@ -142,11 +142,11 @@
     },
     "nixCats": {
       "locked": {
-        "lastModified": 1767604651,
+        "lastModified": 1768594882,
-        "narHash": "sha256-itAnxzTpWpY1s3LA/oNngOuZDXT5U5JUZP5fApwx9gs=",
+        "narHash": "sha256-KmVXwe4QDkcZlJbICj4FC83J+ZIT1r5t8nP+dCY/NDk=",
         "owner": "BirdeeHub",
         "repo": "nixCats-nvim",
-        "rev": "3c9bc4d7123e1b48d92f25ba505b889af541e897",
+        "rev": "6a04f1c7d741b1f084324159ab7c15bcedbb1e0a",
         "type": "github"
       },
       "original": {
@@ -268,11 +268,11 @@
     "plugins-helm-ls-nvim": {
       "flake": false,
       "locked": {
-        "lastModified": 1761915179,
+        "lastModified": 1768584652,
-        "narHash": "sha256-W9NRa84l5Cs62OsDeqb+LMxk8oYjhVBCB3o3UmE9a0I=",
+        "narHash": "sha256-jnMc87OjURNcqsva0npYgVyUrWc5C6L7yHpNvt9eSmg=",
         "owner": "qvalentin",
         "repo": "helm-ls.nvim",
-        "rev": "d6f3a8d4ad59b4f54cd734267dfb5411679ea608",
+        "rev": "f0b9a1723890971a6d84890b50dbf5f40974ea1b",
         "type": "github"
       },
       "original": {
@@ -300,11 +300,11 @@
     "plugins-mcphub-nvim": {
       "flake": false,
       "locked": {
-        "lastModified": 1765628564,
+        "lastModified": 1768498135,
-        "narHash": "sha256-nvWqCGRKhbUHsAM/zd+cwFdcoXXxf6EmcCkpN4mElf4=",
+        "narHash": "sha256-FPnN22K98+XtmQT/TxX+uImFjBrLGre2rUHkNyOl2Js=",
         "owner": "ravitemer",
         "repo": "mcphub.nvim",
-        "rev": "5193329d510a68f1f5bf189960642c925c177a3a",
+        "rev": "415d9d0ea1db12eafc77c871f1ee07936f3b6e03",
         "type": "github"
       },
       "original": {

hosts/andromache/default.nix

@@ -30,17 +30,21 @@ in
     ../../modules/localization
     ../../modules/fonts
     ../../modules/ssh/hardened-openssh.nix
-    (import ../../modules/secrets {
+    (import ../../modules/secrets { inherit lib inputs config; })
-      inherit lib inputs config;
-    })
     ../../modules/docker
   ];
 
   home-manager.users.${username} = import ../../home/hosts/andromache {
-    inherit inputs config pkgs lib;
+    inherit
+      inputs
+      config
+      pkgs
+      lib
+      ;
   };
 
   networking.hostName = hostName;
+
   ssh.username = username;
   ssh.authorizedHosts = [ "astyanax" ];
 
@@ -80,7 +84,9 @@ in
     };
   };
 
-  environment.systemPackages = [ inputs.nvim.packages.x86_64-linux.nvim ];
+  environment.systemPackages = [
+    inputs.nvim.packages.x86_64-linux.nvim
+  ];
 
   services.xserver = {
     videoDrivers = [ "nvidia" ];

hosts/astyanax/default.nix

@@ -31,19 +31,28 @@ in
     ../../modules/localization
     ../../modules/fonts
     ../../modules/ssh/hardened-openssh.nix
-    (import ../../modules/secrets {
+    ../../modules/vpn/wireguard.nix
-      inherit lib inputs config username;
+    (import ../../modules/secrets { inherit lib inputs config; })
-    })
+    ../../modules/docker
   ];
 
   home-manager.users.${username} = import ../../home/hosts/astyanax {
-    inherit inputs config pkgs lib;
+    inherit
+      inputs
+      config
+      pkgs
+      lib
+      ;
   };
 
   networking.hostName = hostName;
+
   ssh.username = username;
   ssh.authorizedHosts = [ "andromache" ];
 
+  secrets.username = username;
+  docker.user = username;
+
   hardware = {
     cpu.intel.updateMicrocode = true;
     # https://wiki.nixos.org/wiki/Intel_Graphics
@@ -61,8 +70,6 @@ in
     LIBVA_DRIVER_NAME = "iHD";
   };
 
-  secrets.username = username;
-
   environment.systemPackages = [
     inputs.nvim.packages.x86_64-linux.nvim
     (pkgs.writeShellApplication {

modules/common/default.nix

@@ -22,4 +22,29 @@
       inherit inputs outputs;
     };
   };
+
+  nix.optimise = {
+    automatic = true;
+    dates = [ "05:00" ];
+  };
+
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 30d";
+  };
+
+  system.autoUpgrade = {
+    enable = true;
+    flake = inputs.self.outPath;
+    operation = "switch";
+    flags = [
+      "--recreate-lock-file"
+      "--commit-lock-file"
+      "--print-build-logs"
+    ];
+    dates = "05:00";
+    randomizedDelaySec = "45min";
+    allowReboot = false;
+  };
 }