refactor: simplify apps.colmena

feat: add golang module to work host
chore: update lockfile
2026-02-24 15:00:45 +01:00 · 2026-02-24 14:47:27 +01:00 · 2026-02-24 14:47:27 +01:00 · 2026-02-24 14:47:27 +01:00 · 2026-02-24 14:47:27 +01:00 · 2026-02-24 14:47:27 +01:00
42 changed files with 686 additions and 361 deletions
--- a/README.md
+++ b/README.md
@@ -1,15 +1,27 @@
 # NixOS flake

-## Set up virtual machine ([`disko`](https://github.com/nix-community/disko/blob/master/docs/interactive-vm.md))
+## hosts

-1. Build the virtual machine
+### NixOS
+
+```
+nixos-rebuild switch --flake .#<hostname>
+```
+
+### home manager
+
+```
+home-manager switch --flake .#work
+```
+
+### virtual machines

 ```
 nix build -L '.#nixosConfigurations.vm.config.system.build.vmWithDisko'
-```
-
-2. Run the virtual machine
-
-```
 ./result/bin/disko-vm
 ```
+
+## docs
+
+* [deploy using colmena](./deploy/README.md)
+* [SD installer images](./images/README.md)
--- a/deploy/colmena.nix
+++ b/deploy/colmena.nix
@@ -17,7 +17,7 @@ in
 inputs.colmena.lib.makeHive {
  meta = {
    nixpkgs = import inputs.nixpkgs {
-      system = "x86_64-linux";
+      localSystem = "x86_64-linux";
    };

    nodeNixpkgs = builtins.mapAttrs (_: v: v.pkgs) self.nixosConfigurations;
--- a/dots/.bashrc
+++ b/dots/.bashrc
@@ -103,13 +103,6 @@ if [[ -z "${SSH_CONNECTION}" ]]; then
 fi
 # }}}

-# pnpm
-export PNPM_HOME="/home/h/.local/share/pnpm"
-case ":$PATH:" in
-  *":$PNPM_HOME:"*) ;;
-  *) export PATH="$PNPM_HOME:$PATH" ;;
-esac
-# pnpm end

 # Codi
 # Usage: codi [filetype] [filename]
--- a/dots/.bin/sb-pomo
+++ b/dots/.bin/sb-pomo
@@ -1,3 +1,3 @@
 #!/usr/bin/env bash

-[ -f "/tmp/pomo" ] && cat /tmp/pomo || echo ""
+[ -f "/home/h/.local/share/pomo" ] && cat /home/h/.local/share/pomo || echo ""
--- a/dots/.bin/update-vim
+++ b/dots/.bin/update-vim
@@ -1,5 +0,0 @@
-#!/usr/bin/env bash
-
-# Tiny Vim update helper
-
-nvim +PlugUpgrade +PlugUpdate +CocUpdate
--- a/dots/.config/ncspot/config.toml
+++ b/dots/.config/ncspot/config.toml
@@ -1,5 +1,6 @@
 default_keybindings = false
 flip_status_indicators = true
+library_tabs = ["tracks", "albums", "artists", "playlists", "browse"] # remove podcasts tab

 [keybindings]
 "Enter" = "play"
@@ -24,11 +25,10 @@ flip_status_indicators = true
 "c" = "clear"
 "=" = "volup 1"
 "-" = "voldown 1"
-"/" = "focus search"
-"Q" = "focus queue"
-# "L" = "focus library"
 "1" = "focus queue"
-"2" = "focus library"
+"2" = "focus search"
+"3" = "focus library"
+"4" = "focus cover"
 "h" = "move left 1"
 "j" = "move down 1"
 "k" = "move up 1"
--- a/dots/.config/nvim/after/plugin/lspconfig.lua
+++ b/dots/.config/nvim/after/plugin/lspconfig.lua
@@ -85,6 +85,7 @@ local servers = {
      },
    },
  },
+  openscad_ls = {},
  pyright = {},
  -- tsserver = {},
  svelte = {
--- a/flake.lock
+++ b/flake.lock
@@ -1,5 +1,73 @@
 {
  "nodes": {
+    "base16": {
+      "inputs": {
+        "fromYaml": "fromYaml"
+      },
+      "locked": {
+        "lastModified": 1755819240,
+        "narHash": "sha256-qcMhnL7aGAuFuutH4rq9fvAhCpJWVHLcHVZLtPctPlo=",
+        "owner": "SenchoPens",
+        "repo": "base16.nix",
+        "rev": "75ed5e5e3fce37df22e49125181fa37899c3ccd6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "SenchoPens",
+        "repo": "base16.nix",
+        "type": "github"
+      }
+    },
+    "base16-fish": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1765809053,
+        "narHash": "sha256-XCUQLoLfBJ8saWms2HCIj4NEN+xNsWBlU1NrEPcQG4s=",
+        "owner": "tomyun",
+        "repo": "base16-fish",
+        "rev": "86cbea4dca62e08fb7fd83a70e96472f92574782",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tomyun",
+        "repo": "base16-fish",
+        "rev": "86cbea4dca62e08fb7fd83a70e96472f92574782",
+        "type": "github"
+      }
+    },
+    "base16-helix": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1760703920,
+        "narHash": "sha256-m82fGUYns4uHd+ZTdoLX2vlHikzwzdu2s2rYM2bNwzw=",
+        "owner": "tinted-theming",
+        "repo": "base16-helix",
+        "rev": "d646af9b7d14bff08824538164af99d0c521b185",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tinted-theming",
+        "repo": "base16-helix",
+        "type": "github"
+      }
+    },
+    "base16-vim": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1732806396,
+        "narHash": "sha256-e0bpPySdJf0F68Ndanwm+KWHgQiZ0s7liLhvJSWDNsA=",
+        "owner": "tinted-theming",
+        "repo": "base16-vim",
+        "rev": "577fe8125d74ff456cf942c733a85d769afe58b7",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tinted-theming",
+        "repo": "base16-vim",
+        "rev": "577fe8125d74ff456cf942c733a85d769afe58b7",
+        "type": "github"
+      }
+    },
    "colmena": {
      "inputs": {
        "flake-compat": "flake-compat",
@@ -53,11 +121,11 @@
      },
      "locked": {
        "dir": "pkgs/firefox-addons",
-        "lastModified": 1770437015,
-        "narHash": "sha256-+FHN9EthS+kHxnMoSDZEiGLoxwiIuij6ltK3aTmlLMA=",
+        "lastModified": 1771732978,
+        "narHash": "sha256-o7gZh/eXFkEEmzwlBdIbgCJhmdlqQhOhVjudqgsIefg=",
        "owner": "rycee",
        "repo": "nur-expressions",
-        "rev": "65d59f814068d04e532cad2773d281e4951acd95",
+        "rev": "18226106e18bc40cce99d436ee741a946f1888f6",
        "type": "gitlab"
      },
      "original": {
@@ -67,6 +135,22 @@
        "type": "gitlab"
      }
    },
+    "firefox-gnome-theme": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1764873433,
+        "narHash": "sha256-1XPewtGMi+9wN9Ispoluxunw/RwozuTRVuuQOmxzt+A=",
+        "owner": "rafaelmardojai",
+        "repo": "firefox-gnome-theme",
+        "rev": "f7ffd917ac0d253dbd6a3bf3da06888f57c69f92",
+        "type": "github"
+      },
+      "original": {
+        "owner": "rafaelmardojai",
+        "repo": "firefox-gnome-theme",
+        "type": "github"
+      }
+    },
    "flake-compat": {
      "flake": false,
      "locked": {
@@ -121,6 +205,27 @@
        "type": "github"
      }
    },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "stylix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1767609335,
+        "narHash": "sha256-feveD98mQpptwrAEggBQKJTYbvwwglSbOv53uCfH9PY=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "250481aafeb741edfe23d29195671c19b36b6dca",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
    "flake-utils": {
      "locked": {
        "lastModified": 1659877975,
@@ -154,6 +259,22 @@
        "type": "github"
      }
    },
+    "fromYaml": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1731966426,
+        "narHash": "sha256-lq95WydhbUTWig/JpqiB7oViTcHFP8Lv41IGtayokA8=",
+        "owner": "SenchoPens",
+        "repo": "fromYaml",
+        "rev": "106af9e2f715e2d828df706c386a685698f3223b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "SenchoPens",
+        "repo": "fromYaml",
+        "type": "github"
+      }
+    },
    "git-hooks": {
      "inputs": {
        "flake-compat": "flake-compat_2",
@@ -163,11 +284,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1769939035,
-        "narHash": "sha256-Fok2AmefgVA0+eprw2NDwqKkPGEI5wvR+twiZagBvrg=",
+        "lastModified": 1771857445,
+        "narHash": "sha256-NCrhxU9wq5+4jQG1fvRbyTnH8GSbH6LovreVoH2fOL4=",
        "owner": "cachix",
        "repo": "git-hooks.nix",
-        "rev": "a8ca480175326551d6c4121498316261cbb5b260",
+        "rev": "3d7a52f678227930ab089f5d9b384f2d50f7d534",
        "type": "github"
      },
      "original": {
@@ -197,6 +318,25 @@
        "type": "github"
      }
    },
+    "gnome-shell": {
+      "flake": false,
+      "locked": {
+        "host": "gitlab.gnome.org",
+        "lastModified": 1767737596,
+        "narHash": "sha256-eFujfIUQDgWnSJBablOuG+32hCai192yRdrNHTv0a+s=",
+        "owner": "GNOME",
+        "repo": "gnome-shell",
+        "rev": "ef02db02bf0ff342734d525b5767814770d85b49",
+        "type": "gitlab"
+      },
+      "original": {
+        "host": "gitlab.gnome.org",
+        "owner": "GNOME",
+        "ref": "gnome-49",
+        "repo": "gnome-shell",
+        "type": "gitlab"
+      }
+    },
    "home-manager": {
      "inputs": {
        "nixpkgs": [
@@ -204,11 +344,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1770476834,
-        "narHash": "sha256-cyxgVsNfHnJ4Zn6G1EOzfTXbjTy7Ds9zMOsZaX7VZWs=",
+        "lastModified": 1771851181,
+        "narHash": "sha256-gFgE6mGUftwseV3DUENMb0k0EiHd739lZexPo5O/sdQ=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "6cee0821577643e0b34e2c5d9a90d0b1b5cdca70",
+        "rev": "9a4b494b1aa1b93d8edf167f46dc8e0c0011280c",
        "type": "github"
      },
      "original": {
@@ -236,29 +376,6 @@
        "type": "github"
      }
    },
-    "nix-formatter-pack": {
-      "inputs": {
-        "nixpkgs": [
-          "nix-on-droid",
-          "nixpkgs"
-        ],
-        "nmd": "nmd",
-        "nmt": "nmt"
-      },
-      "locked": {
-        "lastModified": 1705252799,
-        "narHash": "sha256-HgSTREh7VoXjGgNDwKQUYcYo13rPkltW7IitHrTPA5c=",
-        "owner": "Gerschtli",
-        "repo": "nix-formatter-pack",
-        "rev": "2de39dedd79aab14c01b9e2934842051a160ffa5",
-        "type": "github"
-      },
-      "original": {
-        "owner": "Gerschtli",
-        "repo": "nix-formatter-pack",
-        "type": "github"
-      }
-    },
    "nix-github-actions": {
      "inputs": {
        "nixpkgs": [
@@ -280,34 +397,6 @@
        "type": "github"
      }
    },
-    "nix-on-droid": {
-      "inputs": {
-        "home-manager": [
-          "home-manager"
-        ],
-        "nix-formatter-pack": "nix-formatter-pack",
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "nixpkgs-docs": "nixpkgs-docs",
-        "nixpkgs-for-bootstrap": "nixpkgs-for-bootstrap",
-        "nmd": "nmd_2"
-      },
-      "locked": {
-        "lastModified": 1720396533,
-        "narHash": "sha256-UFzk/hZWO1VkciIO5UPaSpJN8s765wsngUSvtJM6d5Q=",
-        "owner": "nix-community",
-        "repo": "nix-on-droid",
-        "rev": "f3d3b8294039f2f9a8fb7ea82c320f29c6b0fe25",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "ref": "release-24.05",
-        "repo": "nix-on-droid",
-        "type": "github"
-      }
-    },
    "nix-secrets": {
      "flake": false,
      "locked": {
@@ -328,11 +417,11 @@
    },
    "nixCats": {
      "locked": {
-        "lastModified": 1769578476,
-        "narHash": "sha256-4+KbiBcC6hQ3sh0UbPXjy6TOfLh9yhskRlfPzyZ2FH4=",
+        "lastModified": 1770584904,
+        "narHash": "sha256-9Zaz8lbKF2W9pwXZEnbiGsicHdBoU+dHt3Wv3mCJoZ8=",
        "owner": "BirdeeHub",
        "repo": "nixCats-nvim",
-        "rev": "48f8be4bdafccfa19ceaaf08071a15eca36fdb1d",
+        "rev": "538fdde784d2909700d97a8ef307783b33a86fb1",
        "type": "github"
      },
      "original": {
@@ -364,11 +453,11 @@
    },
    "nixos-hardware": {
      "locked": {
-        "lastModified": 1769302137,
-        "narHash": "sha256-QEDtctEkOsbx8nlFh4yqPEOtr4tif6KTqWwJ37IM2ds=",
+        "lastModified": 1771423359,
+        "narHash": "sha256-yRKJ7gpVmXbX2ZcA8nFi6CMPkJXZGjie2unsiMzj3Ig=",
        "owner": "NixOS",
        "repo": "nixos-hardware",
-        "rev": "a351494b0e35fd7c0b7a1aae82f0afddf4907aa8",
+        "rev": "740a22363033e9f1bb6270fbfb5a9574067af15b",
        "type": "github"
      },
      "original": {
@@ -380,11 +469,11 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1770197578,
-        "narHash": "sha256-AYqlWrX09+HvGs8zM6ebZ1pwUqjkfpnv8mewYwAo+iM=",
+        "lastModified": 1771369470,
+        "narHash": "sha256-0NBlEBKkN3lufyvFegY4TYv5mCNHbi5OmBDrzihbBMQ=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "00c21e4c93d963c50d4c0c89bfa84ed6e0694df2",
+        "rev": "0182a361324364ae3f436a63005877674cf45efb",
        "type": "github"
      },
      "original": {
@@ -394,38 +483,6 @@
        "type": "github"
      }
    },
-    "nixpkgs-docs": {
-      "locked": {
-        "lastModified": 1705957679,
-        "narHash": "sha256-Q8LJaVZGJ9wo33wBafvZSzapYsjOaNjP/pOnSiKVGHY=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "9a333eaa80901efe01df07eade2c16d183761fa3",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "release-23.05",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs-for-bootstrap": {
-      "locked": {
-        "lastModified": 1720244366,
-        "narHash": "sha256-WrDV0FPMVd2Sq9hkR5LNHudS3OSMmUrs90JUTN+MXpA=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "49ee0e94463abada1de470c9c07bfc12b36dcf40",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "49ee0e94463abada1de470c9c07bfc12b36dcf40",
-        "type": "github"
-      }
-    },
    "nixpkgs_2": {
      "locked": {
        "lastModified": 1743689281,
@@ -442,58 +499,29 @@
        "type": "github"
      }
    },
-    "nmd": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1666190571,
-        "narHash": "sha256-Z1hc7M9X6L+H83o9vOprijpzhTfOBjd0KmUTnpHAVjA=",
-        "owner": "rycee",
-        "repo": "nmd",
-        "rev": "b75d312b4f33bd3294cd8ae5c2ca8c6da2afc169",
-        "type": "gitlab"
-      },
-      "original": {
-        "owner": "rycee",
-        "repo": "nmd",
-        "type": "gitlab"
-      }
-    },
-    "nmd_2": {
+    "nur": {
      "inputs": {
-        "nixpkgs": [
-          "nix-on-droid",
-          "nixpkgs-docs"
+        "flake-parts": [
+          "stylix",
+          "flake-parts"
        ],
-        "scss-reset": "scss-reset"
+        "nixpkgs": [
+          "stylix",
+          "nixpkgs"
+        ]
      },
      "locked": {
-        "lastModified": 1705050560,
-        "narHash": "sha256-x3zzcdvhJpodsmdjqB4t5mkVW22V3wqHLOun0KRBzUI=",
-        "owner": "~rycee",
-        "repo": "nmd",
-        "rev": "66d9334933119c36f91a78d565c152a4fdc8d3d3",
-        "type": "sourcehut"
+        "lastModified": 1767810917,
+        "narHash": "sha256-ZKqhk772+v/bujjhla9VABwcvz+hB2IaRyeLT6CFnT0=",
+        "owner": "nix-community",
+        "repo": "NUR",
+        "rev": "dead29c804adc928d3a69dfe7f9f12d0eec1f1a4",
+        "type": "github"
      },
      "original": {
-        "owner": "~rycee",
-        "repo": "nmd",
-        "type": "sourcehut"
-      }
-    },
-    "nmt": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1648075362,
-        "narHash": "sha256-u36WgzoA84dMVsGXzml4wZ5ckGgfnvS0ryzo/3zn/Pc=",
-        "owner": "rycee",
-        "repo": "nmt",
-        "rev": "d83601002c99b78c89ea80e5e6ba21addcfe12ae",
-        "type": "gitlab"
-      },
-      "original": {
-        "owner": "rycee",
-        "repo": "nmt",
-        "type": "gitlab"
+        "owner": "nix-community",
+        "repo": "NUR",
+        "type": "github"
      }
    },
    "nvim": {
@@ -505,7 +533,6 @@
        ],
        "plugins-beancount-nvim": "plugins-beancount-nvim",
        "plugins-helm-ls-nvim": "plugins-helm-ls-nvim",
-        "plugins-m-taskwarrior-d-nvim": "plugins-m-taskwarrior-d-nvim",
        "plugins-mcphub-nvim": "plugins-mcphub-nvim",
        "plugins-nvimkit-nvim": "plugins-nvimkit-nvim",
        "plugins-shipwright-nvim": "plugins-shipwright-nvim",
@@ -553,22 +580,6 @@
        "type": "github"
      }
    },
-    "plugins-m-taskwarrior-d-nvim": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1767960157,
-        "narHash": "sha256-ov0qi4LhIlwqrBzSbTJ6APC5qjl2d/vlKWJfW5ZiDrg=",
-        "owner": "huantrinh1802",
-        "repo": "m_taskwarrior_d.nvim",
-        "rev": "107247387cd81823046bc2b8e71150c8edf041d3",
-        "type": "github"
-      },
-      "original": {
-        "owner": "huantrinh1802",
-        "repo": "m_taskwarrior_d.nvim",
-        "type": "github"
-      }
-    },
    "plugins-mcphub-nvim": {
      "flake": false,
      "locked": {
@@ -640,29 +651,13 @@
        "firefox-addons": "firefox-addons",
        "git-hooks": "git-hooks",
        "home-manager": "home-manager",
-        "nix-on-droid": "nix-on-droid",
        "nix-secrets": "nix-secrets",
        "nixgl": "nixgl",
        "nixos-hardware": "nixos-hardware",
        "nixpkgs": "nixpkgs",
        "nvim": "nvim",
-        "sops-nix": "sops-nix"
-      }
-    },
-    "scss-reset": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1631450058,
-        "narHash": "sha256-muDlZJPtXDIGevSEWkicPP0HQ6VtucbkMNygpGlBEUM=",
-        "owner": "andreymatin",
-        "repo": "scss-reset",
-        "rev": "0cf50e27a4e95e9bb5b1715eedf9c54dee1a5a91",
-        "type": "github"
-      },
-      "original": {
-        "owner": "andreymatin",
-        "repo": "scss-reset",
-        "type": "github"
+        "sops-nix": "sops-nix",
+        "stylix": "stylix"
      }
    },
    "sops-nix": {
@@ -672,11 +667,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1770145881,
-        "narHash": "sha256-ktjWTq+D5MTXQcL9N6cDZXUf9kX8JBLLBLT0ZyOTSYY=",
+        "lastModified": 1771735105,
+        "narHash": "sha256-MJuVJeszZEziquykEHh/hmgIHYxUcuoG/1aowpLiSeU=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "17eea6f3816ba6568b8c81db8a4e6ca438b30b7c",
+        "rev": "d7755d820f5fa8acf7f223309c33e25d4f92e74f",
        "type": "github"
      },
      "original": {
@@ -701,6 +696,40 @@
        "type": "github"
      }
    },
+    "stylix": {
+      "inputs": {
+        "base16": "base16",
+        "base16-fish": "base16-fish",
+        "base16-helix": "base16-helix",
+        "base16-vim": "base16-vim",
+        "firefox-gnome-theme": "firefox-gnome-theme",
+        "flake-parts": "flake-parts_2",
+        "gnome-shell": "gnome-shell",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "nur": "nur",
+        "systems": "systems_2",
+        "tinted-foot": "tinted-foot",
+        "tinted-kitty": "tinted-kitty",
+        "tinted-schemes": "tinted-schemes",
+        "tinted-tmux": "tinted-tmux",
+        "tinted-zed": "tinted-zed"
+      },
+      "locked": {
+        "lastModified": 1771787992,
+        "narHash": "sha256-Vg4bGwwenNYI8p3nJTl9FRyeIyrjATeZrZr+GyUSDrw=",
+        "owner": "danth",
+        "repo": "stylix",
+        "rev": "30054cca073b49b42a71289edec858f535b27fe9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "danth",
+        "repo": "stylix",
+        "type": "github"
+      }
+    },
    "systems": {
      "locked": {
        "lastModified": 1681028828,
@@ -715,6 +744,102 @@
        "repo": "default",
        "type": "github"
      }
+    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "tinted-foot": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1726913040,
+        "narHash": "sha256-+eDZPkw7efMNUf3/Pv0EmsidqdwNJ1TaOum6k7lngDQ=",
+        "owner": "tinted-theming",
+        "repo": "tinted-foot",
+        "rev": "fd1b924b6c45c3e4465e8a849e67ea82933fcbe4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tinted-theming",
+        "repo": "tinted-foot",
+        "rev": "fd1b924b6c45c3e4465e8a849e67ea82933fcbe4",
+        "type": "github"
+      }
+    },
+    "tinted-kitty": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1735730497,
+        "narHash": "sha256-4KtB+FiUzIeK/4aHCKce3V9HwRvYaxX+F1edUrfgzb8=",
+        "owner": "tinted-theming",
+        "repo": "tinted-kitty",
+        "rev": "de6f888497f2c6b2279361bfc790f164bfd0f3fa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tinted-theming",
+        "repo": "tinted-kitty",
+        "type": "github"
+      }
+    },
+    "tinted-schemes": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767710407,
+        "narHash": "sha256-+W1EB79Jl0/gm4JqmO0Nuc5C7hRdp4vfsV/VdzI+des=",
+        "owner": "tinted-theming",
+        "repo": "schemes",
+        "rev": "2800e2b8ac90f678d7e4acebe4fa253f602e05b2",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tinted-theming",
+        "repo": "schemes",
+        "type": "github"
+      }
+    },
+    "tinted-tmux": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767489635,
+        "narHash": "sha256-e6nnFnWXKBCJjCv4QG4bbcouJ6y3yeT70V9MofL32lU=",
+        "owner": "tinted-theming",
+        "repo": "tinted-tmux",
+        "rev": "3c32729ccae99be44fe8a125d20be06f8d7d8184",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tinted-theming",
+        "repo": "tinted-tmux",
+        "type": "github"
+      }
+    },
+    "tinted-zed": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767488740,
+        "narHash": "sha256-wVOj0qyil8m+ouSsVZcNjl5ZR+1GdOOAooAatQXHbuU=",
+        "owner": "tinted-theming",
+        "repo": "base16-zed",
+        "rev": "11abb0b282ad3786a2aae088d3a01c60916f2e40",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tinted-theming",
+        "repo": "base16-zed",
+        "type": "github"
+      }
    }
  },
  "root": "root",
--- a/flake.nix
+++ b/flake.nix
@@ -55,7 +55,6 @@
      home-manager,
      nixgl,
      git-hooks,
-      colmena,
      ...
    }@inputs:
    let
@@ -78,8 +77,10 @@
        (lib.genAttrs hostDirNames (
          host:
          nixpkgs.lib.nixosSystem {
-            system = import ./hosts/${host}/system.nix;
-            modules = [ ./hosts/${host} ];
+            modules = [
+              ./hosts/${host}
+              { nixpkgs.hostPlatform = import ./hosts/${host}/system.nix; }
+            ];
            specialArgs = {
              inherit inputs outputs dotsPath;
            };
@@ -87,14 +88,12 @@
        ))
        // {
          sd-image-orange-pi-aarch64 = nixpkgs.lib.nixosSystem {
-            system = "x86_64-linux";
            modules = [
              "${nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
              ./images/sd-image-orange-pi-aarch64.nix
              {
-                nixpkgs.crossSystem = {
-                  system = "aarch64-linux";
-                };
+                nixpkgs.buildPlatform = "x86_64-linux";
+                nixpkgs.hostPlatform = "aarch64-linux";
              }
            ];
            specialArgs = {
@@ -102,14 +101,12 @@
            };
          };
          sd-image-raspberry-pi-aarch64 = nixpkgs.lib.nixosSystem {
-            system = "x86_64-linux";
            modules = [
              "${nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
              ./images/sd-image-raspberry-pi-aarch64.nix
              {
-                nixpkgs.crossSystem = {
-                  system = "aarch64-linux";
-                };
+                nixpkgs.buildPlatform = "x86_64-linux";
+                nixpkgs.hostPlatform = "aarch64-linux";
              }
            ];
            specialArgs = {
@@ -132,7 +129,8 @@
      };

      apps.${system}.colmena = inputs.colmena.apps.${system}.default;
-      colmenaHive = import ./deploy/colmena.nix {
+
+      colmena = import ./deploy/colmena.nix {
        inherit
          self
          inputs
@@ -143,9 +141,11 @@
      formatter.${system} = gitHooks.formatter;
      devShells.${system} = gitHooks.devShells;

-      images.sd-image-orange-pi-aarch64 =
-        self.nixosConfigurations.sd-image-orange-pi-aarch64.config.system.build.sdImage;
-      images.sd-image-raspberry-pi-aarch64 =
-        self.nixosConfigurations.sd-image-raspberry-pi-aarch64.config.system.build.sdImage;
+      legacyPackages.${system} = {
+        sd-image-orange-pi-aarch64 =
+          self.nixosConfigurations.sd-image-orange-pi-aarch64.config.system.build.sdImage;
+        sd-image-raspberry-pi-aarch64 =
+          self.nixosConfigurations.sd-image-raspberry-pi-aarch64.config.system.build.sdImage;
+      };
    };
 }
--- a/git-hooks.nix
+++ b/git-hooks.nix
@@ -10,7 +10,10 @@ let
  pre-commit-check = git-hooks.lib.${system}.run {
    inherit src;
    hooks = {
-      nixfmt.enable = true;
+      nixfmt = {
+        enable = true;
+        package = pkgs.nixfmt;
+      };
      statix.enable = true;
      deadnix.enable = true;
    };
--- a/home/hosts/andromache/default.nix
+++ b/home/hosts/andromache/default.nix
@@ -10,7 +10,9 @@ let
 in
 {
  imports = [
+    ../../modules
    ../../modules/ai-tools.nix
+    ../../modules/audio
    ../../modules/cloud
    ../../modules/comms
    ../../modules/desktop/niri
@@ -21,6 +23,7 @@ in
    ../../modules/kitty.nix
    ../../modules/music
    ../../modules/nvim.nix
+    ../../modules/pandoc.nix
    ../../modules/ssh.nix
    ../../modules/taskwarrior.nix
    ../../modules/keepassxc.nix
@@ -44,6 +47,7 @@ in
  cloud.hetzner.enable = true;
  comms.signal.enable = true;
  github.enable = true;
+  pandoc.enable = true;

  shell.bash = {
    enable = true;
--- a/home/hosts/astyanax/default.nix
+++ b/home/hosts/astyanax/default.nix
@@ -9,7 +9,9 @@ let
 in
 {
  imports = [
+    ../../modules
    ../../modules/ai-tools.nix
+    ../../modules/audio
    ../../modules/anki.nix
    ../../modules/cloud
    ../../modules/comms
@@ -21,6 +23,7 @@ in
    ../../modules/music
    ../../modules/nfc
    ../../modules/nvim.nix
+    ../../modules/pandoc.nix
    ../../modules/ssh.nix
    ../../modules/taskwarrior.nix
    ../../modules/keepassxc.nix
@@ -43,6 +46,7 @@ in
  comms.signal.enable = true;
  github.enable = true;
  nfc.proxmark3.enable = true;
+  pandoc.enable = true;

  shell.bash = {
    enable = true;
--- a/home/hosts/packages.nix
+++ b/home/hosts/packages.nix
@@ -6,17 +6,12 @@ with pkgs;
  entr
  feh
  fzf
-  haskellPackages.pandoc-crossref
  htop
  jq
-  nixfmt-rfc-style
  nmap
-  nodejs_24
  nvimpager
-  pandoc
  parallel
  pass
-  pnpm
  ripgrep
  silver-searcher
  sops
--- a/home/hosts/work/default.nix
+++ b/home/hosts/work/default.nix
@@ -11,25 +11,31 @@ in
 {
  imports = [
    inputs.sops-nix.homeManagerModules.sops
+    ../../modules
    ../../modules/stylix.nix
-    ../../modules/lib.nix
    ../../modules/ai-tools.nix
    ../../modules/cloud
    ../../modules/comms
+    ../../modules/desktop/niri
    ../../modules/dconf.nix
    ../../modules/direnv
    ../../modules/docker
    ../../modules/git
+    ../../modules/go
    ../../modules/k8s
    ../../modules/k8s/k9s.nix
    ../../modules/keepassxc.nix
    ../../modules/kitty.nix
    ../../modules/nvim.nix
+    ../../modules/pandoc.nix
    ../../modules/browser
    ../../modules/shell
    ../../modules/music
+    ../../modules/nodejs.nix
    ../../modules/taskwarrior.nix
    ../../modules/bruno.nix
+    ../../modules/pandoc.nix
+    ../../modules/vscode.nix
  ];

  sops = {
@@ -42,14 +48,29 @@ in
      taskwarrior_sync_encryption_secret = { };
      anki_sync_user = { };
      anki_sync_key = { };
+      opencode_api_key = { };
    };

-    templates."taskrc.d/sync" = {
-      content = ''
-        sync.server.url=${config.sops.placeholder.taskwarrior_sync_server_url}
-        sync.server.client_id=${config.sops.placeholder.taskwarrior_sync_server_client_id}
-        sync.encryption_secret=${config.sops.placeholder.taskwarrior_sync_encryption_secret}
-      '';
+    templates = {
+      "taskrc.d/sync" = {
+        content = ''
+          sync.server.url=${config.sops.placeholder.taskwarrior_sync_server_url}
+          sync.server.client_id=${config.sops.placeholder.taskwarrior_sync_server_client_id}
+          sync.encryption_secret=${config.sops.placeholder.taskwarrior_sync_encryption_secret}
+        '';
+      };
+
+      "opencode/auth.json" = {
+        path = "${config.home.homeDirectory}/.local/share/opencode/auth.json";
+        content = ''
+          {
+            "zai-coding-plan": {
+              "type": "api",
+              "key": "${config.sops.placeholder.opencode_api_key}"
+            }
+          }
+        '';
+      };
    };
  };

@@ -71,9 +92,13 @@ in
  cloud.azure.enable = true;
  comms.signal.enable = true;
  comms.teams.enable = true;
-  ai-tools.claude-code.enable = true;
+  ai-tools = {
+    claude-code.enable = true;
+    opencode.enable = true;
+  };
  github.enable = true;
  gitlab.enable = true;
+  pandoc.enable = true;

  shell.bash.enable = true;
  starship.enable = true;
--- a/home/modules/ai-tools.nix
+++ b/home/modules/ai-tools.nix
@@ -74,6 +74,16 @@ in
      home.packages = with pkgs; [
        opencode
      ];
+      home.file.".config/opencode/opencode.json".text = builtins.toJSON {
+        "$schema" = "https://opencode.ai/config.json";
+        permission = {
+          external_directory = {
+            "/run/secrets/" = "deny";
+            "~/.config/sops/age/keys.txt" = "deny";
+          };
+        };
+        plugin = [ "@mohak34/opencode-notifier@latest" ];
+      };
    })
  ];
 }
--- a/home/modules/audio/default.nix
+++ b/home/modules/audio/default.nix
@@ -0,0 +1,5 @@
+{ pkgs, ... }:
+
+{
+  home.packages = with pkgs; [ pulsemixer ];
+}
--- a/home/modules/browser/firefox-base.nix
+++ b/home/modules/browser/firefox-base.nix
@@ -1,7 +1,9 @@
 {
  config,
  inputs,
+  lib,
  pkgs,
+  ...
 }:

 let
@@ -24,7 +26,7 @@ in
      };
      extensions = {
        force = true;
-        packages = with inputs.firefox-addons.packages.${pkgs.system}; [
+        packages = with inputs.firefox-addons.packages.${pkgs.stdenv.hostPlatform.system}; [
          duckduckgo-privacy-essentials
          firefox-color
          istilldontcareaboutcookies
--- a/home/modules/browser/firefox.nix
+++ b/home/modules/browser/firefox.nix
@@ -11,6 +11,13 @@
    programs.firefox = {
      enable = true;
    }
-    // (import ./firefox-base.nix { inherit config inputs pkgs; });
+    // (import ./firefox-base.nix {
+      inherit
+        config
+        inputs
+        lib
+        pkgs
+        ;
+    });
  };
 }
--- a/home/modules/browser/librewolf.nix
+++ b/home/modules/browser/librewolf.nix
@@ -13,6 +13,13 @@
        programs.librewolf = {
          enable = true;
        }
-        // (import ./firefox-base.nix { inherit config inputs pkgs; });
+        // (import ./firefox-base.nix {
+          inherit
+            config
+            inputs
+            lib
+            pkgs
+            ;
+        });
      };
 }
--- a/home/modules/bruno.nix
+++ b/home/modules/bruno.nix
@@ -1,19 +1,7 @@
 { config, pkgs, ... }:

-let
-  needsNixGL = config.lib ? nixGL;
-  bruno =
-    if needsNixGL then
-      pkgs.bruno.overrideAttrs (old: {
-        postInstall = (old.postInstall or "") + ''
-          wrapProgram $out/bin/bruno --add-flags "--no-sandbox"
-        '';
-      })
-    else
-      pkgs.bruno;
-in
 {
  config = {
-    home.packages = [ (config.nixgl.wrap bruno) ];
+    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.bruno "--no-sandbox")) ];
  };
 }
--- a/home/modules/comms/signal.nix
+++ b/home/modules/comms/signal.nix
@@ -4,8 +4,9 @@
  pkgs,
  ...
 }:
+
 {
  config = lib.mkIf config.comms.signal.enable {
-    home.packages = [ (config.nixgl.wrap pkgs.signal-desktop) ];
+    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.signal-desktop "--no-sandbox")) ];
  };
 }
--- a/home/modules/comms/teams.nix
+++ b/home/modules/comms/teams.nix
@@ -7,6 +7,6 @@

 {
  config = lib.mkIf config.comms.teams.enable {
-    home.packages = [ (config.nixgl.wrap pkgs.teams-for-linux) ];
+    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.teams-for-linux "--no-sandbox")) ];
  };
 }
--- a/home/modules/default.nix
+++ b/home/modules/default.nix
@@ -0,0 +1,24 @@
+{ config, lib, ... }:
+
+{
+  options.nixgl.wrap = lib.mkOption {
+    type = lib.types.functionTo lib.types.package;
+    default = if config.lib ? nixGL then config.lib.nixGL.wrap else lib.id;
+    readOnly = true;
+  };
+
+  options.wrapApp = lib.mkOption {
+    type = lib.types.raw;
+    default =
+      pkg: flags:
+      if config.lib ? nixGL then
+        pkg.overrideAttrs (old: {
+          postInstall = (old.postInstall or "") + ''
+            wrapProgram $out/bin/${pkg.meta.mainProgram} --add-flags "${flags}"
+          '';
+        })
+      else
+        pkg;
+    readOnly = true;
+  };
+}
--- a/home/modules/go/default.nix
+++ b/home/modules/go/default.nix
@@ -0,0 +1,18 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  options.go = {
+    enable = lib.mkEnableOption "go language";
+  };
+
+  config = lib.mkIf config.go.enable {
+    home.packages = with pkgs; [
+      go
+      gopls
+    ];
+  };
+}
--- a/home/modules/lib.nix
+++ b/home/modules/lib.nix
@@ -1,9 +0,0 @@
-{ config, lib, ... }:
-
-{
-  options.nixgl.wrap = lib.mkOption {
-    type = lib.types.functionTo lib.types.package;
-    default = if config.lib ? nixGL then config.lib.nixGL.wrap else lib.id;
-    readOnly = true;
-  };
-}
--- a/home/modules/nodejs.nix
+++ b/home/modules/nodejs.nix
@@ -0,0 +1,26 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  options.nodejs = {
+    enable = lib.mkEnableOption "nodejs (and related packages)";
+    package = lib.mkOption {
+      type = lib.types.package;
+      default = pkgs.nodejs_24;
+    };
+  };
+
+  config = lib.mkIf config.nodejs.enable {
+    home.packages = with pkgs; [
+      config.nodejs.package
+      pnpm
+      yarn
+      biome
+      tsx
+    ];
+  };
+}
--- a/home/modules/nvim.nix
+++ b/home/modules/nvim.nix
@@ -3,7 +3,7 @@
 {
  config = {
    home.packages = [
-      inputs.nvim.packages.${pkgs.system}.nvim
+      inputs.nvim.packages.${pkgs.stdenv.hostPlatform.system}.nvim
    ];
  };
 }
--- a/home/modules/pandoc.nix
+++ b/home/modules/pandoc.nix
@@ -0,0 +1,19 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  options.pandoc = {
+    enable = lib.mkEnableOption "pandoc";
+  };
+
+  config = lib.mkIf config.pandoc.enable {
+    home.packages = with pkgs; [
+      haskellPackages.pandoc-crossref
+      pandoc
+      texliveSmall
+    ];
+  };
+}
--- a/home/modules/vscode.nix
+++ b/home/modules/vscode.nix
@@ -0,0 +1,7 @@
+{ config, pkgs, ... }:
+
+{
+  config = {
+    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.vscode "--disable-gpu-sandbox")) ];
+  };
+}
--- a/home/modules/waybar/style.css
+++ b/home/modules/waybar/style.css
@@ -18,6 +18,7 @@ window#waybar.hidden {
 }

 #workspaces button {
+  color: @base07;
  padding: 0;
  background-color: transparent;
 }
--- a/hosts/andromache/default.nix
+++ b/hosts/andromache/default.nix
@@ -5,6 +5,7 @@
  pkgs,
  ...
 }:
+
 let
  username = "h";
  hostName = "andromache";
@@ -27,6 +28,7 @@ in
    ../../modules/desktops/niri
    ../../modules/backups
    ../../modules/bluetooth
+    ../../modules/gaming
    ../../modules/keyboard
    (import ../../modules/networking { inherit hostName; })
    ../../modules/users
@@ -34,10 +36,12 @@ in
    ../../modules/localization
    ../../modules/fonts
    ../../modules/ssh/hardened-openssh.nix
+    ../../modules/storage
    ../../modules/stylix
    (import ../../modules/secrets { inherit lib inputs config; })
    ../../modules/docker
    ../../modules/syncthing
+    ../../modules/nvidia
  ];

  home-manager.users.${username} = import ../../home/hosts/andromache {
@@ -79,42 +83,26 @@ in
    };
  };

-  hardware = {
-    cpu.intel.updateMicrocode = true;
-    graphics.enable = true;
-    nvidia = {
-      modesetting.enable = true;
-      powerManagement.enable = true;
-      powerManagement.finegrained = false;
-      open = true;
-      nvidiaSettings = true;
-      package = config.boot.kernelPackages.nvidiaPackages.stable;
-    };
-  };
+  hardware.cpu.intel.updateMicrocode = true;

  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];

  environment.systemPackages = [
-    inputs.colmena.packages.${pkgs.system}.colmena
+    inputs.colmena.packages.${pkgs.stdenv.hostPlatform.system}.colmena
  ];

  services = {
-    xserver = {
-      videoDrivers = [ "nvidia" ];
+    locate = {
+      enable = true;
+      package = pkgs.plocate;
    };

    openssh = {
      enable = true;
      harden = true;
    };
-    locate = {
-      enable = true;
-      package = pkgs.plocate;
-    };
  };

-  my.syncthing.enable = true;
-
  networking = {
    # TODO: generate unique hostId on actual host with: head -c 8 /etc/machine-id
    hostId = "80eef97e";
--- a/hosts/astyanax/default.nix
+++ b/hosts/astyanax/default.nix
@@ -35,11 +35,10 @@ in
    ../../modules/localization
    ../../modules/fonts
    ../../modules/ssh/hardened-openssh.nix
+    ../../modules/storage
    ../../modules/stylix
-    # ../../modules/vpn/wireguard.nix
    (import ../../modules/secrets { inherit lib inputs config; })
    ../../modules/docker
-    ../../modules/syncthing
    ../../modules/nfc
  ];

@@ -60,6 +59,7 @@ in
  secrets.username = username;
  docker.user = username;
  nfc.user = username;
+  desktop.ly.enable = true;

  nix.settings.secret-key-files = [ config.sops.secrets.nix_signing_key_astyanax.path ];

@@ -81,7 +81,7 @@ in
  };

  environment.systemPackages = [
-    inputs.colmena.packages.${pkgs.system}.colmena
+    inputs.colmena.packages.${pkgs.stdenv.hostPlatform.system}.colmena
    (pkgs.writeShellApplication {
      name = "wol-andromache";
      runtimeInputs = [ pkgs.wakeonlan ];
@@ -108,7 +108,20 @@ in
      enable = true;
      package = pkgs.plocate;
    };
-  };
+    tlp = {
+      enable = true;
+      settings = {
+        CPU_SCALING_GOVERNOR_ON_AC = "performance";
+        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";

-  my.syncthing.enable = true;
+        CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
+        CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
+
+        CPU_MIN_PERF_ON_AC = 0;
+        CPU_MAX_PERF_ON_AC = 100;
+        CPU_MIN_PERF_ON_BAT = 0;
+        CPU_MAX_PERF_ON_BAT = 20;
+      };
+    };
+  };
 }
--- a/hosts/hecuba/default.nix
+++ b/hosts/hecuba/default.nix
@@ -83,15 +83,4 @@ in
    enable = true;
    harden = true;
  };
-
-  nix.settings = {
-    trusted-public-keys = [
-      "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
-      "astyanax:JY2qJkZUFSax47R3c1nq53AZ8GnLfNqz6mSnJ60cLZ4="
-      "andromache:XM4VLrEw63RB/3v/56OxzH/Yw+kKXKMBLKCb7UGAXzo="
-    ];
-    auto-optimise-store = true;
-    keep-derivations = false;
-    keep-outputs = false;
-  };
 }
--- a/hosts/vm/default.nix
+++ b/hosts/vm/default.nix
@@ -25,6 +25,7 @@ in
    ../../modules/x
    ../../modules/fonts
    ../../modules/ssh/hardened-openssh.nix
+    ../../modules/storage
    (import ../../modules/secrets {
      inherit lib inputs config;
    })
--- a/images/sd-image-raspberry-pi-aarch64.nix
+++ b/images/sd-image-raspberry-pi-aarch64.nix
@@ -31,7 +31,7 @@ in

  hardware.enableRedistributableFirmware = true;

-  hardware.pulseaudio.enable = true;
+  services.pulseaudio.enable = true;

  networking.wireless.enable = true;

--- a/modules/audio/default.nix
+++ b/modules/audio/default.nix
@@ -1,6 +1,9 @@
-_:
-
 {
+  nixpkgs.allowedUnfree = [
+    "spotify"
+    "spotify-unwrapped"
+  ];
+
  security.rtkit.enable = true;
  services = {
    pulseaudio.enable = false;
--- a/modules/common/default.nix
+++ b/modules/common/default.nix
@@ -1,58 +1,67 @@
-let
-  flakePath = "/home/h/nix";
-in
 {
  inputs,
  outputs,
  dotsPath,
+  config,
  ...
 }:

+let
+  inherit (inputs.nixpkgs) lib;
+in
 {
  imports = [
    inputs.home-manager.nixosModules.default
  ];

-  system.stateVersion = "25.05";
-
-  nix.settings.experimental-features = [
-    "nix-command"
-    "flakes"
-  ];
-
-  nixpkgs.config.allowUnfree = true;
-
-  home-manager = {
-    useGlobalPkgs = true;
-    useUserPackages = true;
-    extraSpecialArgs = {
-      inherit inputs outputs dotsPath;
-    };
+  options.nixpkgs.allowedUnfree = lib.mkOption {
+    type = lib.types.listOf lib.types.str;
+    default = [ ];
  };

-  nix = {
-    optimise = {
-      automatic = true;
-      dates = [ "05:00" ];
-    };
-    gc = {
-      automatic = true;
-      dates = "weekly";
-      options = "--delete-older-than 30d";
-    };
-  };
+  config = {
+    system.stateVersion = "25.05";

-  system.autoUpgrade = {
-    enable = true;
-    flake = flakePath;
-    flags = [
-      "--recreate-lock-file"
-      "--commit-lock-file"
-      "--print-build-logs"
-      "--refresh"
-    ];
-    dates = "05:00";
-    randomizedDelaySec = "45min";
-    allowReboot = false;
+    nix = {
+      optimise = {
+        automatic = true;
+        dates = [ "05:00" ];
+      };
+      gc = {
+        automatic = true;
+        dates = "weekly";
+        options = "--delete-older-than 30d";
+      };
+      settings.experimental-features = [
+        "nix-command"
+        "flakes"
+      ];
+    };
+
+    system.autoUpgrade = {
+      enable = true;
+      flags = [
+        "--recreate-lock-file"
+        "--commit-lock-file"
+        "--print-build-logs"
+        "--refresh"
+      ];
+      dates = "05:00";
+      randomizedDelaySec = "45min";
+      allowReboot = false;
+    };
+
+    nixpkgs.config.allowUnfreePredicate =
+      pkg: builtins.elem (lib.getName pkg) config.nixpkgs.allowedUnfree;
+
+    environment.defaultPackages = lib.mkForce [ ];
+
+    home-manager = {
+      useGlobalPkgs = true;
+      useUserPackages = true;
+      extraSpecialArgs = {
+        inherit inputs outputs dotsPath;
+      };
+    };
  };
 }
--- a/modules/desktops/niri/default.nix
+++ b/modules/desktops/niri/default.nix
@@ -1,16 +1,32 @@
+{ config, lib, ... }:
+
+let
+  cfg = config.desktop;
+in
 {
-  programs.niri.enable = true;
-
-  services = {
-    dbus.enable = true;
-    logind.settings.Login = {
-      HandleLidSwitch = "suspend";
-      IdleAction = "suspend";
-      IdleActionSec = 1800;
+  options.desktop = {
+    ly = {
+      enable = lib.mkOption {
+        type = lib.types.bool;
+        default = false;
+      };
    };
+  };

-    displayManager.ly = {
-      enable = true;
+  config = {
+    programs.niri.enable = true;
+
+    services = {
+      dbus.enable = true;
+      logind.settings.Login = {
+        HandleLidSwitch = "suspend";
+        IdleAction = "suspend";
+        IdleActionSec = 1800;
+      };
+
+      displayManager.ly = lib.mkIf cfg.ly.enable {
+        enable = true;
+      };
    };
  };
 }
--- a/modules/gaming/default.nix
+++ b/modules/gaming/default.nix
@@ -0,0 +1,12 @@
+{
+  nixpkgs.allowedUnfree = [
+    "steam"
+    "steam-unwrapped"
+  ];
+
+  programs.steam = {
+    enable = true;
+    remotePlay.openFirewall = false;
+    dedicatedServer.openFirewall = false;
+  };
+}
--- a/modules/nvidia/default.nix
+++ b/modules/nvidia/default.nix
@@ -0,0 +1,22 @@
+{ config, ... }:
+
+{
+  nixpkgs.allowedUnfree = [
+    "nvidia-x11"
+    "nvidia-persistenced"
+    "nvidia-settings"
+  ];
+
+  hardware.graphics.enable = true;
+
+  hardware.nvidia = {
+    modesetting.enable = true;
+    powerManagement.enable = true;
+    powerManagement.finegrained = false;
+    open = true;
+    nvidiaSettings = true;
+    package = config.boot.kernelPackages.nvidiaPackages.stable;
+  };
+
+  services.xserver.videoDrivers = [ "nvidia" ];
+}
--- a/modules/storage/default.nix
+++ b/modules/storage/default.nix
@@ -0,0 +1,3 @@
+{
+  services.udisks2.enable = true;
+}
--- a/modules/stylix/default.nix
+++ b/modules/stylix/default.nix
@@ -31,8 +31,14 @@ in
  home-manager.sharedModules = [
    {
      stylix.targets = {
-        firefox.profileNames = [ "default" ];
-        librewolf.profileNames = [ "default" ];
+        firefox = {
+          profileNames = [ "default" ];
+          colorTheme.enable = true;
+        };
+        librewolf = {
+          profileNames = [ "default" ];
+          colorTheme.enable = true;
+        };
        kitty.variant256Colors = true;
        gnome.enable = false;
        gtk.enable = false;
Author	SHA1	Message	Date
Hektor Misplon	c4510abf88	refactor: simplify apps.colmena	2026-02-24 15:00:45 +01:00
Hektor Misplon	0c4cdd2d1e	feat: add golang module to work host	2026-02-24 14:47:27 +01:00
Hektor Misplon	c1418e1402	chore: update lockfile	2026-02-24 14:47:27 +01:00
Hektor Misplon	ab59c50520	fix: add wrapper util for home manager modules	2026-02-24 14:47:27 +01:00
Hektor Misplon	624a56e948	fix: remove pnpm bash config	2026-02-24 14:47:27 +01:00
Hektor Misplon	fb269c0265	fix: update 'work' host modules	2026-02-24 14:47:27 +01:00
Hektor Misplon	2a07ecef61	feat: add 'nodejs' module (and use on 'work' host)	2026-02-24 14:47:27 +01:00
Hektor Misplon	aa830fc795	feat: set up 'opencode' on work host	2026-02-24 14:47:27 +01:00
Hektor Misplon	227a4fe53d	feat: add 'vscode' module to work host	2026-02-24 14:47:27 +01:00
Hektor Misplon	99dfe10ebf	fix: add pdf support to pandoc module	2026-02-24 14:47:27 +01:00
hektor	c002741419	fix: remove default packages	2026-02-23 19:35:24 +01:00
hektor	448b3e5ef0	feat: set up 'tlp' for laptop mode on 'astyanax'	2026-02-23 18:15:19 +01:00
hektor	fafadf4034	feat: add notifier plugin to opencode	2026-02-23 18:11:29 +01:00
hektor	a5845fb847	fix :resolve 'andromache' syntax error	2026-02-23 18:11:24 +01:00
Hektor Misplon	757d5e5c81	feat: set up 'storage' module	2026-02-22 16:43:15 +01:00
Hektor Misplon	7b13880be2	fix: resolve nix build warnings	2026-02-22 16:40:20 +01:00
Hektor Misplon	b895e85953	chore: disable syncthing module	2026-02-22 16:22:55 +01:00
Hektor Misplon	ee3b95d986	fix: remove 'nix.settings' from 'hecuba' host	2026-02-22 16:20:52 +01:00
Hektor Misplon	f5ed623d53	refactor: extract 'pandoc' module	2026-02-22 16:16:17 +01:00
Hektor Misplon	d30fa3922b	docs: update readme	2026-02-22 14:37:09 +01:00
Hektor Misplon	1c20cc3326	feat: add basic 'gaming' module to 'andromache'	2026-02-22 14:08:43 +01:00
Hektor Misplon	e7a36abd8c	refactor: extract 'nvidia' module	2026-02-22 14:08:43 +01:00
Hektor Misplon	635583669f	refactor: add home 'allowedUnfree' option	2026-02-22 14:08:43 +01:00
Hektor Misplon	dec73a74d8	refactor: remove unused 'colmena' input	2026-02-22 14:08:43 +01:00
Hektor Misplon	ac23d88ca9	fix: deny opencode access to nix secret paths	2026-02-22 13:22:19 +01:00
Hektor Misplon	85df2e7886	fix: temporarily disable 'ly' on desktop	2026-02-22 12:42:43 +01:00
Hektor Misplon	7bb0f6fca4	feat: set up openscad lsp	2026-02-22 12:34:34 +01:00
Hektor Misplon	486e273b97	fix: update 'ncspot' config	2026-02-22 12:34:05 +01:00
Hektor Misplon	e7756a2959	chore: remove redundant 'update-vim' script	2026-02-22 12:19:39 +01:00
Hektor Misplon	68fa0d8c89	chore: update lockfile	2026-02-22 12:16:35 +01:00
Hektor Misplon	b9c7c099e7	fix: enable colortheme for firefox-based browsers	2026-02-22 12:16:07 +01:00
Hektor Misplon	e62790f2c7	fix: update 'sb-pomo' script to match 'pomo' script	2026-02-22 12:11:58 +01:00
Hektor Misplon	3d36eb305e	docs: update readme	2026-02-22 00:28:39 +01:00
Hektor Misplon	0952bfd827	chore: remove unused vpn module	2026-02-21 22:07:06 +01:00
Hektor Misplon	c6671fea4e	fix: add 'lib' as default module	2026-02-21 22:02:57 +01:00
Hektor Misplon	55b3fde362	feat: add home manager audio module (pulsemixer)	2026-02-21 22:02:38 +01:00
hektor	18f2e4d93a	fix: add 'lib' module to astyanax host	2026-02-21 17:49:01 +01:00
hektor	dbac0fd1b9	fix: color niri workspaces in waybar	2026-02-21 14:31:44 +01:00
hektor	26760d27a4	chore: update lockfile	2026-02-21 13:52:12 +01:00