feat(memory): declare 'memory' module

deploy/colmena.nix

@@ -5,20 +5,20 @@
 
 let
   inherit (inputs.nixpkgs) lib;
-  lib' = import ../lib { inherit lib; };
+  utils = import ../utils { inherit lib; };
   # exclude hosts that need auto rollback (until `colmena` supports it) for
   # now, we use `deploy-rs` (which has magic rollback) for those (also see ./deploy-rs.nix)
   #
   # see <https://github.com/nix-community/colmena/issues/38>
   #     <https://github.com/nix-community/colmena/issues/344>
   hostnames = lib.filter (
-    hostname: !((lib'.hostMeta hostname).deploy.autoRollback or false)
+    hostname: !((utils.hostMeta ../hosts/${hostname}).deploy.autoRollback or false)
-  ) lib'.nixosHosts;
+  ) (utils.dirNames ../hosts);
 
   mkNode =
     hostname:
     let
-      meta = lib'.hostMeta hostname;
+      meta = utils.hostMeta ../hosts/${hostname};
       isArm = meta.system == "aarch64-linux";
     in
     {
@@ -40,8 +40,13 @@ inputs.colmena.lib.makeHive (
     meta = {
       nixpkgs = import inputs.nixpkgs { localSystem = "x86_64-linux"; };
       specialArgs = {
-        inherit inputs lib';
+        inherit inputs;
         outputs = self;
+        myUtils = utils;
+        paths = {
+          dots = ../dots;
+          hosts = ../hosts;
+        };
       };
     };
   }

deploy/deploy-rs.nix

@@ -5,18 +5,18 @@
 
 let
   inherit (inputs.nixpkgs) lib;
-  lib' = import ../lib { inherit lib; };
+  utils = import ../utils { inherit lib; };
 
   # only include hosts that need auto rollback (until `colmena` supports it)
   # `colmena` is used for other hosts (see ./colmena.nix)
   hostnames = lib.filter (
-    hostname: (lib'.hostMeta hostname).deploy.autoRollback or false
+    hostname: (utils.hostMeta ../hosts/${hostname}).deploy.autoRollback or false
-  ) lib'.nixosHosts;
+  ) (utils.dirNames ../hosts);
 
   mkNode =
     hostname:
     let
-      meta = lib'.hostMeta hostname;
+      meta = utils.hostMeta ../hosts/${hostname};
     in
     {
       inherit hostname;

dots/.bin/README.md

@@ -0,0 +1,26 @@
+# Scripts
+
+Mostly tiny helper scripts \& experiments, some more useful than others.
+
+## Setup
+
+Make sure the scripts are in your `$PATH` and executable.
+
+To add the complete directory of scripts to your `$PATH`:
+
+```bash
+export PATH=~/.bin:$PATH
+```
+
+To make a any script `<script>` executable:
+```bash
+chmod +x <script>
+```
+
+## Notes
+
+Statusbar scripts are prefixed with `sb` under the assumption you're using
+`polybar` (scripts my need changes to be used with different statusbars).
+
+Some scripts have dependencies (e.g. `fzf`, `jq`, `xclip`, ...), make sure you
+have them installed.

dots/.bin/aurpac

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+
+# Tiny AUR clone helper
+# aurpac <package-name>
+
+git clone "https://aur.archlinux.org/$1.git"

dots/.bin/bak

@@ -1,3 +1,5 @@
+#!/usr/bin/env bash
+
 # back up a file by copying it to a new file with a .bak extension
 # reference: https://askubuntu.com/questions/962489/is-there-any-way-to-create-backup-copy-of-a-file-without-type-its-name-twice
 

dots/.bin/calc

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+ipython -i /home/h/.bin/calc.py

dots/.bin/cam

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+# Open webcam window
+
+ffplay -f v4l2 -x 640 -y 480 -i /dev/video0 >/dev/null 2>&1 & disown

dots/.bin/count-json-objects.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+
+const fs = require('fs')
+
+const objLength = obj => Object.keys(obj).length
+
+fs.readFile(process.argv[2], (err, data) => (err ? console.error(err) : console.log(objLength(JSON.parse(data)))))

dots/.bin/devdocs

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+xdg-open https://devdocs.io/offline

dots/.bin/fzf-bluetooth

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+options="Mouse\nHeadphones"
+
+selected="$(echo -e "$options" | fzf)"
+
+case "$selected" in
+  "Mouse")      toggle-bt-device E4:19:21:56:C8:70;;
+  "Headphones") toggle-bt-device 38:18:4C:D4:74:42;;
+esac

dots/.bin/fzf-book

@@ -1,8 +1,10 @@
+#!/usr/bin/env bash
+
 # Generate menu of book filenames and save paths
 # Preview window contains metadata
 
 function get_book_paths {
-  find "$HOME/doc/books/" -regex '.*\.\(pdf\|epub\|djvu\)' -type f | sort
+  find /home/h/doc/books/ -regex '.*\.\(pdf\|epub\|djvu\)' -type f | sort
 }
 
 function select_file {
@@ -19,8 +21,10 @@ function open {
   fi
 }
 
-case "${1:-}" in
+case "$1" in
   --open) open "$(select_file)" ;;
   --help) printf "open \n" >&2 ;;
   *) open "$(select_file)" ;;
 esac
+
+[[ -n "$selected" ]] && xdg-open "$selected" &> /dev/null & disown

dots/.bin/fzf-fontnames

@@ -1,3 +1,5 @@
+#!/usr/bin/env bash
+
 fn="/tmp/fontnames.txt"
 
 contains_dash() {
@@ -5,16 +7,16 @@ contains_dash() {
 }
 
 update() {
-  : > "$fn"
+  echo "" > "$fn"
 
   font_list=$(fc-list -f "%{fullname}\n")
 
-  echo "$font_list" | while read -r line ; do
+  echo "$font_list" | while read line ; do
 
     first="$(echo "$line" | cut -d',' -f1)"
     last="$(echo "$line" | cut -d',' -f2)"
 
-    if contains_dash "$first"; then
+    if $(contains_dash "$first"); then
       echo "$last" >> "$fn"
     else
       echo "$first" >> "$fn"
@@ -22,7 +24,7 @@ update() {
   done
 }
 
-case "${1:-}" in
+case "$1" in
   --update) update;;
-  *) sort -u "$fn" | awk 'NF' | fzf;;
+  *) cat "$fn" | sort | uniq | awk 'NF' | fzf;;
 esac

dots/.bin/fzf-ssh

@@ -1 +1,3 @@
+#!/usr/bin/env bash
+
 ssh "$(ssh-hosts | fzf)"

dots/.bin/get-anki-decks

@@ -1 +1,3 @@
+#!/usr/bin/env bash
+
 curl 127.0.0.1:8765 -X POST -d '{"action": "deckNames", "version": 6}' | jq '.result[]' -r

dots/.bin/get-anki-reviews-status

@@ -1,6 +1,8 @@
+#!/usr/bin/env bash
+
 # Get Anki review status from exit code
 
-num_reviews="$(cat "$ANKI_REVIEWS")"
+num_reviews="$(cat /tmp/anki-reviews)"
 
 if [ "$num_reviews" -ge "400" ]
 then

dots/.bin/jack-to-bt

@@ -0,0 +1,2 @@
+pactl load-module module-jack-source connect=0
+pactl load-module module-loopback source=jack_in

dots/.bin/json-to-yaml

@@ -0,0 +1,5 @@
+#!/usr/bin/env python
+
+import yaml, json, sys
+
+print(yaml.dump(json.load(open(sys.argv[1])), allow_unicode=True), end='')

dots/.bin/notify

@@ -1,6 +1,8 @@
+#!/usr/bin/env bash
+
 # Pipe into notify-send
 #
 # e.g. `echo "Hello world" | notify`
 
-read -r msg || true
+read -r msg
 notify-send "$msg" "$@"

dots/.bin/pacman-remove-unrequired

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+sudo pacman -Qtdq | sudo pacman -Rns -

dots/.bin/pdftitle

@@ -1 +1,3 @@
+#!/usr/bin/env bash
+
 pdfinfo "$1" | head -n 1 | awk '{for (i=2; i<NF; i++) printf $i " "; print $NF}'

dots/.bin/pomo

@@ -10,11 +10,11 @@ Pomodoro timer
 
 import atexit
 import os
-import signal
-import subprocess
 from argparse import ArgumentParser
 from time import sleep
 
+from plyer import notification
+
 POMO_PATH = os.path.join(
     os.getenv("XDG_DATA_HOME", os.path.expanduser("~/.local/share")), "pomo"
 )
@@ -30,28 +30,34 @@ def format_mins_secs(mins, secs):
     return f"{mins:02d}:{secs:02d}"
 
 
+def make_countdown():
     def countdown(duration):
         while duration != 0:
             mins = duration // 60
             secs = duration % 60
-        with open(POMO_PATH, "w") as f:
+            time_str = format_mins_secs(mins, secs)
-            f.write(format_mins_secs(mins, secs))
+            os.system(f'echo -n "{time_str}" > {POMO_PATH}')
             sleep(1)
             duration -= 1
 
+    return countdown
+
 
 def main(args):
     work_duration = args.work_duration * 60
     break_duration = args.break_duration * 60
     repeats = args.repeats
 
+    work_countdown = make_countdown()
+    break_countdown = make_countdown()
+
     while repeats != 0:
-        subprocess.run(["notify-send", "Get started"])
+        notification.notify(title="Get started")
-        countdown(work_duration)
+        work_countdown(work_duration)
         if break_duration != 0:
-            subprocess.run(["notify-send", "Time for a break"])
+            notification.notify(title="Time for a break")
-            countdown(break_duration)
+            break_countdown(break_duration)
-            subprocess.run(["notify-send", "Break is over, back to work"])
+            notification.notify(title="Break is over, back to work")
         repeats -= 1
 
 
@@ -78,10 +84,4 @@ if __name__ == "__main__":
 
     args = parser.parse_args()
 
-    signal.signal(signal.SIGINT, handle_signal)
-    signal.signal(signal.SIGTERM, handle_signal)
-
-    if args.clear:
-        clear()
-    else:
     main(args)

dots/.bin/r5rs

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+session="r5rs"
+
+tmux attach-session -t "$session" || tmux new-session -s "$session" \; \
+  split-window -h -t $session \; \
+  send-keys -t 1 "nvim -c \"set ft=scheme\"" C-m \; \
+  send-keys -t 2 "plt-r5rs --no-prim" C-m \; \
+  select-pane -t 1

dots/.bin/remove-markdown-relative-link-prefix

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+sed -i -r 's/\[*\]\(\.\/([A-z-]*.md)/\]\(\1/g' *.md

dots/.bin/restore-passwddb

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+# Backup existing password databases and
+# database keys (using date in filename date -u
+# +%Y-%m-%d_%H-%M-%S)
+
+RCLONE_REMOTE="proton-drive"
+
+for f in "$HOME/doc"/*.{kdbx,kdbx.key}; do
+  [ -e "$f" ] || continue
+  echo "Backing up $f to $f-$(date -u +%Y-%m-%d_%H-%M-%S)"
+  cp "$f" "$f-$(date -u +%Y-%m-%d_%H-%M-%S)"
+done
+
+echo "Restoring KeePassXC databases and database keys"
+rclone copyto                         \
+  "$RCLONE_REMOTE:doc"/ "$HOME/doc/"  \
+  --progress                          \
+  --include "/*.{kdbx,kdbx.key}"

dots/.bin/reverse-tether-linux-android

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+function start() {
+  adb start-server
+  nohup gnirehtet autorun &> /dev/null &
+  printf "Started reverse tethering \n"
+}
+
+function stop() {
+  adb kill-server 
+  gnirehtet stop
+  pkill gnirehtet
+  printf "Stopped reverse tethering \n"
+}
+
+case "$1" in 
+  start) start ;;
+  stop) stop ;;
+  restart) stop; start ;;
+  *) printf "start | stop | restart \n" >&2
+  exit 1
+  ;;
+esac

dots/.bin/save-passwddb

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+
+# Save (encrypted) password database to cloud storage
+#
+# Usage:
+#   save-passwddb         - Save databases to cloud
+#   save-passwddb init    - Restore databases from cloud (with single backup archive)
+
+RCLONE_REMOTE="proton"
+SOURCE_DIR="$HOME/doc"
+TARGET_DIR="$RCLONE_REMOTE:doc"
+BACKUP_DIR="$HOME/doc/bak"
+
+function save_databases() {
+  if [ 0 -lt "$(ls $SOURCE_DIR/*.kdbx 2>/dev/null | wc -w)" ]; then
+    echo "[save] Saving KeePassXC databases and database keys"
+    rclone copy "$SOURCE_DIR" "$TARGET_DIR" \
+      --include "/*.{kdbx,kdbx.key}" \
+      --progress
+    echo "[save] Done"
+  else
+    echo "[save] No password database found, restore with:"
+    echo ""
+    echo "  $0 init"
+    exit 1
+  fi
+}
+
+function backup_existing() {
+  mkdir -p "$BACKUP_DIR"
+  local timestamp=$(date +%Y%m%d-%H%M%S)
+  local backup_file="$BACKUP_DIR/passwddb_backup_${timestamp}.tar.gz"
+
+  echo "[backup] Creating backup archive: ${backup_file}"
+  tar -czf "$backup_file" -C "$SOURCE_DIR" $(find "$SOURCE_DIR" -maxdepth 1 -type f \( -name "*.kdbx" -o -name "*.kdbx.key" \) -printf "%f ")
+  echo "[backup] Backup complete"
+}
+
+function restore_databases() {
+  echo "[init] Checking for existing files..."
+
+  local existing_files=$(find "$SOURCE_DIR" -maxdepth 1 -type f \( -name "*.kdbx" -o -name "*.kdbx.key" \) -print)
+
+  if [ -n "$existing_files" ]; then
+    echo "[init] Found existing database files:"
+    echo "$existing_files" | while read -r file; do
+      echo "  - $file"
+    done
+    read -p "[init] Create backup archive of existing files? [y/N] " -n 1 -r
+    echo
+    if [[ $REPLY =~ ^[Yy]$ ]]; then
+      backup_existing
+    fi
+  fi
+
+  echo "[init] Restoring KeePassXC databases and database keys"
+  mkdir -p "$SOURCE_DIR"
+  rclone copy "$TARGET_DIR" "$SOURCE_DIR" \
+    --include "*.{kdbx,kdbx.key}" \
+    --progress
+  echo "[init] Done"
+}
+
+case "$1" in
+  ""|save)
+    save_databases
+    ;;
+  init)
+    restore_databases
+    ;;
+  *)
+    echo "Usage: $0 [init|save]"
+    exit 1
+    ;;
+esac

dots/.bin/save-ssh-host

@@ -1,3 +1,5 @@
+#!/usr/bin/env bash
+
 selected_hosts="$(ssh-hosts | fzf -m)"
 
 for host in $selected_hosts; do

dots/.bin/sb-anki

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+# Anki review percentage for statusbar
+
+num_to_review=200
+
+# Get current card count from Anki
+count=$(curl -s 127.0.0.1:8765 -X POST -d '{"action": "getNumCardsReviewedToday", "version": 6}' | jq '.result')
+
+if [ -z "$count" ]
+then
+  if [ -s /tmp/anki-reviews ]; then
+    true
+  else
+    echo "-1" > /tmp/anki-reviews
+  fi
+else
+  echo "$count" > /tmp/anki-reviews
+fi
+
+num_reviews=$(cat /tmp/anki-reviews)
+echo -n -e " Reviews: $(python3 -c "print('{:.2%}'.format($num_reviews/$num_to_review))") "

dots/.bin/sb-battery

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+cap="$(cat /sys/class/power_supply/BAT0/capacity)"
+
+if [ "$cap" -ge 33 ];then
+  color="\x01"
+elif [ "$cap" -ge 10 ]; then
+  color="\x03"
+else
+  color="\x04"
+fi
+
+echo -n -e "$color $cap% \x01"

dots/.bin/sb-date

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+echo -n -e "Week $(date '+%V') $(date '+%a %d %b %H:%M') "

dots/.bin/sb-internet

@@ -0,0 +1,7 @@
+#!/bin/sh
+
+if grep -xq 'up' /sys/class/net/w*/operstate 2>/dev/null ; then
+	wifiicon="$(awk '/^\s*w/ { print "WiFi", int($3 * 100 / 70) "% " }' /proc/net/wireless)"
+fi
+
+printf " %s%s%s" "$wifiicon" "$(sed "s/down//;s/up/Ethernet/" /sys/class/net/e*/operstate 2>/dev/null)"

dots/.bin/sb-pomo

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+[ -f "/home/h/.local/share/pomo" ] && cat /home/h/.local/share/pomo || echo ""

dots/.bin/sb-project

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+# Render contents of $HOME/.project if present
+[ -f "$HOME/.project" ] && cat "$HOME/.project" || echo ""

dots/.bin/sb-tasks

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+num_done="$(task end.after:today status:completed count)"
+num_pending="$(($(task count status:pending) + $num_done))"
+num_waiting="$(($(task count status:waiting)))"
+
+echo -e "Tasks: $num_done/$num_pending+$num_waiting"

dots/.bin/sb-wg

@@ -0,0 +1,12 @@
+#!/usr/bin/env sh
+
+# Reference: https://github.com/mil-ad/polybar-wireguard
+
+connected_interfaces=$(networkctl | grep -P "\d+ .* wireguard routable" -o | cut -d" " -f2)
+
+if [ -n "$connected_interfaces" ];
+then
+    for interface in $connected_interfaces; do echo "$interface"; done
+else
+    exit 1
+fi

dots/.bin/script

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+
+# Script to create script
+
+if [ -z "$1" ]; then
+    echo "Usage: script <scriptname>"
+    exit
+fi
+
+path="$HOME/.bin/$1"
+
+# Prevent overwriting existing script
+set -o noclobber
+
+# Create script
+cat > "$path" << EOF
+#!/usr/bin/env bash
+
+
+EOF
+
+chmod +x "$path"
+
+# Open script in editor on line 3
+"$EDITOR" +3 "$path"

dots/.bin/setup

@@ -0,0 +1,208 @@
+#!/bin/bash
+
+pac_list=(
+at
+automake
+autopep8
+base
+base-devel
+bash-completion
+bash-language-server
+bc
+brightnessctl
+chromium
+dmidecode
+entr
+eslint_d
+feh
+firefox-developer-edition
+firefox-tridactyl
+firefox-tridactyl-native
+firefox-tridactyl-native-debug
+fzf
+gcc
+git
+haskell-language-server
+haskell-ormolu
+hsetroot
+htop
+httpie
+jq
+keepassxc
+kitty
+lua-language-server
+make
+man-db
+man-pages
+neovim
+nmap
+nodejs-lts-jod
+pacman-contrib
+pandoc-cli
+pandoc-crossref
+parallel
+pass
+pkgbuild-language-server
+pnpm
+ripgrep
+sshfs
+stylelint
+svelte-language-server
+tailwindcss-language-server
+task
+tldr
+tmux
+tmuxp
+tree
+tree-sitter-cli
+ts-node
+typescript-language-server
+unzip
+vim-language-server
+wget
+xclip
+yaml-language-server
+)
+
+aurpac_list=(
+hadolint-bin
+nvm
+nvimpager
+paru
+tmux-bash-completion-git
+ttf-iosevka-term-ss08
+vim-plug
+vtsls
+xbanish
+)
+
+install() {
+  local package="$1"
+  if pacman -Qi "$package" &> /dev/null; then
+    echo "$package is already installed"
+  else
+    echo "Installing " "$package"
+    sudo pacman -S --noconfirm --needed "$package"
+  fi
+}
+
+aurpac() {
+  git clone "https://aur.archlinux.org/$1.git" "$HOME/.build/$1"
+}
+
+install_packages() {
+  announce "Installing packages"
+  local count
+  for pac in "${pac_list[@]}" ; do
+    count=$((count+1))
+    install "$pac";
+  done
+  echo "$count packages installed"
+}
+
+install_dotfiles() {
+  announce "Installing dotfiles"
+  origin="https://git.hektormisplon.xyz/hektor/dots"
+  git clone "$origin" "$HOME/dots"
+  cp -r "$HOME/dots/.git" "$HOME/.git"
+  git --git-dir="$HOME/.git" config --local status.showUntrackedFiles no
+  git --git-dir="$HOME/.git" stash -m "[dots]"
+  git --git-dir="$HOME/.git" stash apply
+  git --git-dir="$HOME/.git" restore "$HOME"
+}
+
+install_aur_packages() {
+  announce "Installing AUR packages"
+  local count
+  for package in "${aurpac_list[@]}" ; do
+    if pacman -Qi "$1" &> /dev/null; then
+      echo "$1 is already installed"
+    else
+      count=$((count+1))
+      aurpac "$package" && makepkg -si -D "$HOME/.build/$package"
+    fi
+  done
+  echo "$count AUR packages installed"
+}
+
+setup_neovim() {
+  announce "Setting up NeoVim"
+  git clone --depth=1 https://github.com/savq/paq-nvim.git \
+      "${XDG_DATA_HOME:-$HOME/.local/share}"/nvim/site/pack/paqs/start/paq-nvim
+}
+
+setup_keyboard() {
+  announce "Setting up keyboard"
+  install "interception-tools"
+  install "interception-caps2esc"
+  udevmon_config_contents="\
+- JOB: intercept -g \$DEVNODE | caps2esc -m 1 | uinput -d \$DEVNODE
+  DEVICE:
+    EVENTS:
+      EV_KEY: [KEY_CAPSLOCK]"
+  if [ -f /etc/interception/udevmon.yaml ] && diff -q <(echo "$udevmon_config_contents") /etc/interception/udevmon.yaml; then
+    echo "udevmon config already exists"
+    echo "$udevmon_config_contents"
+  elif [ -f /etc/interception/udevmon.yaml ]; then
+    echo "interception udevmon.yaml already exists"
+    cat /etc/interception/udevmon.yaml
+    echo "verify if this config matches the one below"
+    echo "$udevmon_config_contents"
+  else
+    echo "interception udevmon.yaml does not exist, creating one"
+    sudo bash -c "echo '$udevmon_config_contents' > /etc/interception/udevmon.yaml"
+  fi
+
+  sudo systemctl enable --now udevmon.service
+
+  if pgrep -x caps2esc > /dev/null; then
+    echo "caps2esc is already running"
+  else
+    caps2esc -m 1
+  fi
+}
+
+configure_gnome() {
+  announce "Configuring Gnome"; setup-gnome
+}
+
+setup_firewall() {
+  announce "Configuring firewalld"
+  install firewalld
+  sudo systemctl enable --now firewalld
+}
+
+setup_docker() {
+  announce "Setting up Docker"
+  install docker
+  install docker-compose
+  sudo systemctl enable --now docker.socket
+  sudo usermod -aG docker "$USER"
+  echo "User added to docker group, please restart your session"
+}
+
+announce() {
+  local message="$1"
+  echo " "
+  echo "[dots] $message"
+  echo " "
+}
+
+confirm() {
+  local question="$1"
+  read -r -p "[dots] $question? [y/N]" -n 1
+  case "$REPLY" in y|Y ) "$2";; * ) echo "Skipping"; esac
+}
+
+printf '%s\n' "${pac_list[@]}"
+confirm "Install these packages? " install_packages
+printf '%s\n' "${aurpac_list[@]}"
+confirm "Install these AUR packages? " install_aur_packages
+confirm "Setup NeoVim? " setup_neovim
+confirm "Install dotfiles? " install_dotfiles
+confirm "Setup keyboard? " setup_keyboard
+if pacman -Qi "gdm" &> /dev/null; then
+  confirm "Configure Gnome? " configure_gnome
+fi
+confirm "Setup firewall? " setup_firewall
+confirm "Setup Docker? " setup_docker

dots/.bin/ssh-hosts

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+ssh_hosts="$(grep -E 'Host [a-z0-9\-]*$' ~/.ssh/config | awk '{print $2}')"
+
+echo "$ssh_hosts"

dots/.bin/taskdeps

@@ -7,8 +7,12 @@ from collections import defaultdict
 
 
 def get_task_data():
-    command = ["task", "+PENDING", "or", "+WAITING", "-COMPLETED", "-DELETED", "export"]
+    command = (
-    return json.loads(subprocess.check_output(command))
+        "task +PENDING or +WAITING -COMPLETED -DELETED export | "
+        "jq '[.[] | {uuid: .uuid, id, depends: .depends, description: .description, status: .status }]'"
+    )
+    output = subprocess.check_output(command, shell=True)
+    return json.loads(output)
 
 
 def parse_task_data(data):
@@ -23,7 +27,8 @@ def parse_task_data(data):
             "description": task.get("description", "No description"),
             "status": task.get("status", "Unknown status"),
         }
-        for dependency in task.get("depends", []):
+        if task["depends"]:
+            for dependency in task["depends"]:
                 dependency_graph[dependency].append(task_id)
                 dependent_tasks.add(task_id)
 
@@ -31,6 +36,52 @@ def parse_task_data(data):
     return task_details, dependency_graph, root_tasks
 
 
+def get_all_parents(task_id, dependency_graph):
+    return [
+        parent for parent, children in dependency_graph.items() if task_id in children
+    ]
+
+
+def build_ascii_dag(
+    task_id,
+    task_details,
+    dependency_graph,
+    prefix="",
+    is_last=True,
+    show_id=True,
+    visited=None,
+):
+    if visited is None:
+        visited = set()
+
+    if task_id in visited:
+        return [f"{prefix}{'└── ' if is_last else '├── '}... (cycle detected)"]
+
+    visited.add(task_id)
+
+    task_info = task_details[task_id]
+    task_line = f"{prefix}{'└── ' if is_last else '├── '}{task_info['id'] + ': ' if show_id else ''}{task_info['description']} ({task_info['status']})"
+    lines = [task_line]
+
+    children = dependency_graph.get(task_id, [])
+    for idx, child in enumerate(children):
+        child_is_last = idx == len(children) - 1
+        child_prefix = prefix + ("    " if is_last else "│   ")
+        lines.extend(
+            build_ascii_dag(
+                child,
+                task_details,
+                dependency_graph,
+                child_prefix,
+                child_is_last,
+                show_id,
+                visited.copy(),
+            )
+        )
+
+    return lines
+
+
 def render_dependency_dag(task_details, dependency_graph, root_tasks, show_id):
     dag_lines = []
     global_visited = set()

dots/.bin/tidalcycles

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+
+set -euf -o pipefail
+
+VIM=${VIM:-"vim"}
+TMUX=${TMUX:-"tmux"}
+
+FILE=${FILE:-"$(date +%F).tidal"}
+SESSION=${SESSION:-"tidal"}
+
+TIDAL_BOOT_PATH=${TIDAL_BOOT_PATH:-""}
+GHCI=${GHCI:-""}
+
+args=${*:-$FILE}
+
+# attach if session else create
+$TMUX attach-session -t "$SESSION" || $TMUX new-session -s "$SESSION" \; \
+  split-window -h -t "$SESSION" \; \
+  send-keys -t 0 "$VIM $args" C-m \; \
+  send-keys -t 1 "TIDAL_BOOT_PATH=$TIDAL_BOOT_PATH GHCI=$GHCI tidal" C-m \; \
+  new-window -t "$SESSION":2 -n SuperDirt \; \
+  send-keys -t 0 "jack_control start && sclang ~/dev/live/scripts/start.scd" C-m \; \
+  select-window -t 1 \; \
+  resize-pane -t 1 -x 100 \; \
+  resize-pane -t 0 -x 125 \; \
+  select-pane -t 0

dots/.bin/tmux-workspace

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+session="main"
+
+tmux attach-session -t $session || tmux new-session -s $session \; \
+  rename-window task \; \
+  send-keys -t 1 "task" C-m \; \
+  new-window -n zk \; \
+  send-keys -t 2 "nvim $ZK_PATH/index.md" C-m \; \
+  new-window -n term \; \
+  new-window -n music \; \
+  send-keys -t 4 "echo 'TODO: open music player'" C-m \; \
+  select-window -t 1 \;

dots/.bin/toggle-bt-device

@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+status="$(bluetoothctl info "$1" | grep Connected | cut -f 2 -d ':' | cut -f 2 -d ' ')"
+
+if [ "$status" == "yes" ]
+then
+  bluetoothctl disconnect "$1"
+else
+  trust "$1"
+  bluetoothctl connect "$1"
+fi

dots/.bin/update

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+sudo pacman -Syu

dots/.config/Code/User/keybindings.json

@@ -0,0 +1 @@
+[{ "key": "ctrl+b", "command": "workbench.action.toggleSidebarVisibility" }]

dots/.config/Code/User/settings.json

@@ -0,0 +1,114 @@
+{
+  /* view */
+  "workbench.statusBar.visible": true,
+  "workbench.activityBar.visible": false,
+  "breadcrumbs.enabled": false,
+  "editor.minimap.enabled": false,
+  "window.menuBarVisibility": "hidden",
+  "workbench.editor.showTabs": false,
+  "workbench.editor.showIcons": false,
+
+  /* font */
+  "editor.fontSize": 20,
+  "editor.fontLigatures": true,
+  "editor.fontFamily": "Iosevka",
+  "terminal.integrated.fontSize": 20,
+
+  /* editor */
+  "editor.lineNumbers": "relative",
+  "editor.glyphMargin": false,
+  "terminal.integrated.allowMnemonics": false,
+  "workbench.colorCustomizations": {
+    "editorGroup.emptyBackground": "#0c0c0c",
+    "scrollbar.shadow": "#000",
+    "widget.shadow": "#000",
+    "editorWidget.background": "#0c0c0c",
+    "editor.background": "#0c0c0c",
+    "sideBar.background": "#0c0c0c",
+    "editorGroupHeader.noTabsBackground": "#0c0c0c",
+    "scrollbarSlider.background": "#222",
+    "scrollbarSlider.activeBackground": "#222",
+    "scrollbarSlider.hoverBackground": "#333",
+    "statusBar.noFolderBackground": "#0c0c0c",
+    "statusBar.border": "#0c0c0c",
+    "statusBar.background": "#0c0c0c",
+    "statusBar.foreground": "#555"
+  },
+
+  "editor.tokenColorCustomizations": {
+    "comments": "#555",
+    "functions": "#aaa",
+    "numbers": "#fff",
+    "strings": "#fff",
+    "types": "#aaa",
+    "variables": "#aaa",
+    "keywords": "#aaa"
+  },
+
+  /* vim keybindings */
+  "vim.incsearch": true,
+  "vim.hlsearch": true,
+  "vim.leader": "<space>",
+  "vim.normalModeKeyBindingsNonRecursive": [
+    /* quick quit */
+    {
+      "before": ["<leader>", "q"],
+      "commands": [":q"]
+    },
+    {
+      "before": ["<leader>", "w"],
+      "commands": [":w"]
+    },
+    {
+      "before": ["<leader>", "Q"],
+      "commands": [":q!"]
+    },
+    {
+      "before": ["<leader>", "W"],
+      "commands": [":w!"]
+    },
+    /* split */
+    {
+      "before": ["<leader>", "s", "s"],
+      "commands": [":sp"]
+    },
+    {
+      "before": ["<leader>", "s", "v"],
+      "commands": [":vs"]
+    },
+    /* clear search highlight */
+    {
+      "before": ["<leader>", "<leader>"],
+      "commands": [":nohl"]
+    }
+  ],
+
+  "vim.insertModeKeyBindings": [
+    /* quick exit insert */
+    {
+      "before": ["j", "j"],
+      "after": ["<Esc>"]
+    }
+  ],
+
+  "vim.handleKeys": {
+    "<C-a>": false,
+    "<C-f>": false
+  },
+
+  /* eslint & prettier */
+  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "editor.formatOnSave": true,
+  "[javascript]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode",
+    "editor.formatOnSave": true
+  },
+
+  "editor.codeActionsOnSave": {
+    "source.fixAll": true
+  },
+
+  "workbench.colorTheme": "Absolute Black",
+  "window.zoomLevel": 1,
+  "javascript.updateImportsOnFileMove.enabled": "always"
+}

dots/.config/feh/keys

@@ -0,0 +1,12 @@
+prev_img      h
+next_img      l
+scroll_left   L
+scroll_right  H
+scroll_up     J
+scroll_down   K
+zoom_in       j
+zoom_out      k
+zoom_fit      z
+zoom_default  =
+mirror        bar
+close         q Q

dots/.config/feh/themes

@@ -0,0 +1,3 @@
+feh \
+-B black \
+--auto-zoom

dots/.config/flameshot/flameshot.ini

@@ -0,0 +1,36 @@
+[General]
+checkForUpdates=false
+disabledTrayIcon=true
+uiColor=#cccccc
+fontFamily=Inter
+drawColor=#ffffff
+savePath=/home/h/doc/clips
+copyPathAfterSave=true
+saveLastRegion=true
+saveAsFileExtension=png
+userColors=picker, #800000, #ff0000, #ffff00, #00ff00, #00ffff, #0000ff, #ffffff, #000000
+
+[Shortcuts]
+TYPE_ARROW=a
+TYPE_CIRCLE=o
+TYPE_CIRCLECOUNT=Shift+o
+TYPE_COMMIT_CURRENT_TOOL=Ctrl+Return
+TYPE_COPY=y
+TYPE_DELETE_CURRENT_TOOL=
+TYPE_DRAWER=l
+TYPE_EXIT=q
+TYPE_IMAGEUPLOADER=
+TYPE_MARKER=m
+TYPE_MOVESELECTION=Ctrl+M
+TYPE_MOVE_DOWN=j
+TYPE_MOVE_LEFT=h
+TYPE_MOVE_RIGHT=l
+TYPE_MOVE_UP=k
+TYPE_OPEN_APP=o
+TYPE_PENCIL=d
+TYPE_PIN=Enter
+TYPE_PIXELATE=p
+TYPE_RECTANGLE=r
+TYPE_REDO=Ctrl+r
+TYPE_RESIZE_DOWN=Shift+j
+TYPE_RESIZE_LEFT=Shift+h

dots/.config/gh/config.yml

@@ -0,0 +1,16 @@
+git_protocol: ssh
+prompt: enabled
+aliases:
+    co: pr checkout
+    c: repo clone
+    f: repo fork
+    rc: repo create
+    rv: repo view
+    re: repo edit
+    rm: repo remove
+    rn: repo rename
+    lr: repo list
+    li: issue list
+    al: alias
+    al-: alias delete
+version: "1"

dots/.config/gtk-3.0/settings.ini

@@ -0,0 +1,5 @@
+[Settings]
+gtk-font-name=Inter 12
+gtk-application-prefer-dark-theme=true
+gtk-icon-theme-name=Adwaita
+gtk-theme-name=Adwaita

dots/.config/keepassxc/keepassxc.ini

@@ -0,0 +1,32 @@
+[General]
+ConfigVersion=2
+
+[Browser]
+CustomProxyLocation=
+Enabled=true
+
+[GUI]
+ApplicationTheme=dark
+CompactMode=false
+HidePreviewPanel=false
+HideToolbar=false
+MinimizeOnClose=true
+MinimizeToTray=true
+ShowTrayIcon=true
+TrayIconAppearance=colorful
+
+[KeeShare]
+Active="<?xml version=\"1.0\"?><KeeShare><Active/></KeeShare>\n"
+Foreign="<?xml version=\"1.0\"?>\n<KeeShare xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">\n  <Foreign/>\n</KeeShare>\n"
+Own="<?xml version=\"1.0\"?><KeeShare><PrivateKey>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</PrivateKey><PublicKey><Signer>h</Signer><Key>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</Key></PublicKey></KeeShare>\n"
+QuietSuccess=true
+
+[PasswordGenerator]
+AdditionalChars=
+ExcludedChars=
+Length=40
+Logograms=true
+WordCount=9
+
+[SSHAgent]
+Enabled=true

dots/.config/mimeapps.list

@@ -0,0 +1,20 @@
+[Default Applications]
+inode/x-empty=nvim.desktop
+inode/directory=nvim.desktop
+text/plain=nvim.desktop
+text/html=firefoxdeveloperedition.desktop
+image/gif=feh.desktop
+image/jpeg=feh.desktop
+image/png=feh.desktop
+video/mp4=mpv.desktop
+video/webm=mpv.desktop
+model/stl=com.ultimaker.cura.desktop
+application/pdf=org.pwmt.zathura.desktop
+x-scheme-handler/msteams=teams-for-linux.desktop
+x-scheme-handler/web+stremio=firefox.desktop
+x-scheme-handler/http=firefoxdeveloperedition.desktop
+x-scheme-handler/https=firefoxdeveloperedition.desktop
+x-scheme-handler/chrome=firefoxdeveloperedition.desktop
+x-scheme-handler/sidequest=SideQuest.desktop
+x-scheme-handler/mailto=firefox.desktop
+x-scheme-handler/webcal=firefox.desktop

dots/.config/mpv/input.conf

@@ -0,0 +1,15 @@
+l seek +5
+h seek -5
+k seek +30
+j seek -30
+
++ add video-zoom   0.1
+- add video-zoom  -0.1
+= set video-zoom 0; set video-pan-x 0; set video-pan-y 0
+
+H add video-pan-x  0.01
+L add video-pan-x -0.01
+K add video-pan-y  0.01
+J add video-pan-y -0.01
+
+m cycle mute

dots/.config/mpv/mpv.conf

@@ -0,0 +1,16 @@
+vo=gpu
+profile=gpu-hq
+hwdec=auto
+
+msg-color=yes
+
+cursor-autohide=300
+cursor-autohide-fs-only=yes
+save-position-on-quit=yes
+keep-open=yes
+
+# Custom osc
+osc=no
+cursor-autohide=3500
+osd-bar=no
+osc-vidscale=no

dots/.config/pipewire/pipewire-pulse.conf

@@ -0,0 +1,60 @@
+context.properties = {}
+context.spa-libs = {
+    audio.convert.* = audioconvert/libspa-audioconvert
+    support.*       = support/libspa-support
+}
+context.modules = [
+    { name = libpipewire-module-rt
+        args = { nice.level   = -11 }
+        flags = [ ifexists nofail ]
+    }
+    { name = libpipewire-module-protocol-native }
+    { name = libpipewire-module-client-node }
+    { name = libpipewire-module-adapter }
+    { name = libpipewire-module-metadata }
+
+    { name = libpipewire-module-protocol-pulse
+        args = { }
+    }
+]
+
+context.exec = [
+    { path = "pactl"        args = "load-module module-always-sink" }
+    # Automatically switch to (bluetooth) headphones
+    { path = "pactl"        args = "load-module module-switch-on-connect" }
+]
+
+stream.properties = { }
+
+pulse.properties = {
+    server.address = [ "unix:native" ]
+    vm.overrides = { pulse.min.quantum = 1024/48000 }
+}
+
+pulse.rules = [
+    {
+        matches = [ { } ]
+        actions = { update-props = { } }
+    }
+    {
+        matches = [
+             { application.process.binary = "teams" }
+             { application.process.binary = "teams-insiders" }
+             { application.process.binary = "skypeforlinux" }
+        ]
+        actions = { quirks = [ force-s16-info ] }
+    }
+    {
+        matches = [ { application.process.binary = "firefox" } ]
+        actions = { quirks = [ remove-capture-dont-move ] }
+    }
+    {
+        matches = [ { application.name = "~speech-dispatcher*" } ]
+        actions = {
+            update-props = {
+                pulse.min.req          = 1024/48000     # 21ms
+                pulse.min.quantum      = 1024/48000     # 21ms
+            }
+        }
+    }
+]

dots/.config/rclone/rclone.conf.example

@@ -0,0 +1,11 @@
+[google-drive]
+type = drive
+scope = drive
+token =
+
+[onedrive-vub]
+type = webdav
+url =
+vendor = sharepoint
+user =
+pass =

dots/.config/solaar/config.json

@@ -0,0 +1,71 @@
+{
+  "101B:E2D1E989": {
+    "_name": "Marathon Mouse M705 (M-R0009)",
+    "side-scroll": true,
+    "smooth-scroll": true
+  },
+  "405E:C347528E": {
+    "_absent": [
+      "hi-res-scroll",
+      "lowres-smooth-scroll",
+      "smart-shift",
+      "thumb-scroll-mode",
+      "thumb-scroll-invert",
+      "onboard_profiles",
+      "report_rate",
+      "dpi",
+      "dpi-sliding",
+      "speed-change",
+      "backlight",
+      "backlight-timed",
+      "fn-swap",
+      "disable-keyboard-keys",
+      "divert-crown",
+      "crown-smooth",
+      "divert-gkeys",
+      "m-key-leds",
+      "mr-key-led",
+      "multiplatform",
+      "gesture2-gestures",
+      "gesture2-divert",
+      "gesture2-params"
+    ],
+    "_modelId": "B015405E0000",
+    "_name": "M720 Triathlon Multi-Device Mouse",
+    "_sensitive": {
+      "change-host": true,
+      "divert-keys": true,
+      "hires-smooth-invert": false,
+      "hires-smooth-resolution": false,
+      "mouse-gestures": false,
+      "pointer_speed": false,
+      "reprogrammable-keys": true
+    },
+    "_serial": "C347528E",
+    "_unitId": "F204EB17",
+    "divert-keys": {
+      "208": 0,
+      "215": 0,
+      "82": 0,
+      "83": 0,
+      "86": 0,
+      "91": 0,
+      "93": 0
+    },
+    "hires-smooth-invert": false,
+    "hires-smooth-resolution": false,
+    "mouse-gestures": 0,
+    "pointer_speed": 195,
+    "reprogrammable-keys": {
+      "208": 208,
+      "80": 80,
+      "81": 81,
+      "82": 82,
+      "83": 83,
+      "86": 86,
+      "91": 91,
+      "93": 93
+    }
+  },
+  "_version": "1.1.2"
+}

dots/.config/spotify/README.md

@@ -0,0 +1,4 @@
+# Spotify cache size
+
+The contents of `prefs.example` can be added to the `prefs` file in this
+directory to change the cache size to 1GB.

dots/.config/spotify/prefs.example

@@ -0,0 +1 @@
+storage.size=1024

dots/.config/systemd/user/save-passwddb.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=Save KeypassXC password database to cloud
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/home/h/.bin/save-passwddb
+
+[Install]
+WantedBy=multi-user.target

dots/.config/systemd/user/save-passwddb.timer

@@ -0,0 +1,10 @@
+[Unit]
+Description=Save Keepass password database to cloud daily
+
+[Timer]
+OnCalendar=daily
+RandomizedDelaySec=12h
+Persistent=true
+
+[Install]
+WantedBy=timers.target

dots/.config/user-dirs.conf

@@ -0,0 +1 @@
+enabled=False

dots/.config/user-dirs.dirs

@@ -0,0 +1,15 @@
+# This file is written by xdg-user-dirs-update
+# If you want to change or add directories, just edit the line you're
+# interested in. All local changes will be retained on the next run.
+# Format is XDG_xxx_DIR="$HOME/yyy", where yyy is a shell-escaped
+# homedir-relative path, or XDG_xxx_DIR="/yyy", where /yyy is an
+# absolute path. No other format is supported.
+# 
+XDG_DESKTOP_DIR="$HOME/"
+XDG_DOWNLOAD_DIR="$HOME/dl"
+XDG_DOCUMENTS_DIR="$HOME/doc"
+XDG_PUBLICSHARE_DIR="$HOME/"
+XDG_MUSIC_DIR="$HOME/"
+XDG_PICTURES_DIR="$HOME/"
+XDG_TEMPLATES_DIR="$HOME/"
+XDG_VIDEOS_DIR="$HOME/"

dots/.config/yamllint/config

@@ -0,0 +1,6 @@
+---
+
+extends: default
+rules:
+  document-start: disable
+  comments-indentation: disable

dots/.vortex-core/README.md

@@ -0,0 +1,19 @@
+# Keyboard configuration
+
+Keyboard configuration for the Vortex Core 40% keyboard.
+
+Generated using [TsFreddie's MPC tool](https://tsdo.in/much-programming-core/).
+
+Note: this is assuming `Caps lock` is remapped to `Esc` on press and `Ctrl` on hold (e.g. using `caps2esc`).
+
+## Layer 0
+
+Macros are mainly used for shift, ctrl & alt modifiers.
+
+![](l0.png)
+
+## Layer 1
+
+Lighting configuration layer with some macros for workspaces.
+
+![](l1.png)

dots/.zotero/bbt.json

@@ -0,0 +1,101 @@
+{
+  "config": {
+    "options": {},
+    "preferences": {
+      "ascii": "",
+      "asciiBibLaTeX": false,
+      "asciiBibTeX": true,
+      "autoAbbrev": false,
+      "autoExport": "immediate",
+      "autoExportDelay": 5,
+      "autoExportIdleWait": 10,
+      "autoExportPathReplaceDiacritics": false,
+      "autoExportPathReplaceDirSep": "-",
+      "autoExportPathReplaceSpace": " ",
+      "automaticTags": true,
+      "auxImport": false,
+      "baseAttachmentPath": "/home/h/doc/readings",
+      "biblatexExtendedDateFormat": true,
+      "biblatexExtendedNameFormat": true,
+      "biblatexExtractEprint": true,
+      "biblatexUsePrefix": true,
+      "bibtexEditionOrdinal": false,
+      "bibtexParticleNoOp": false,
+      "bibtexURL": "off",
+      "cache": true,
+      "cacheDelete": false,
+      "charmap": "",
+      "chinese": false,
+      "chineseSplitName": true,
+      "citeCommand": "cite",
+      "citekeyCaseInsensitive": true,
+      "citekeyFold": true,
+      "citekeyFormat": "zotero.clean",
+      "citekeyFormatEditing": "zotero.clean",
+      "citekeySearch": false,
+      "citekeyUnsafeChars": "\\\"#%'(),={}~",
+      "csquotes": "",
+      "DOIandURL": "both",
+      "exportBibTeXStrings": "off",
+      "exportBraceProtection": true,
+      "exportSort": "citekey",
+      "exportTitleCase": true,
+      "extraMergeCitekeys": false,
+      "extraMergeCSL": false,
+      "extraMergeTeX": false,
+      "fillKeyAfter": 1,
+      "git": "config",
+      "import": true,
+      "importBibTeXStrings": true,
+      "importCaseProtection": "as-needed",
+      "importCitationKey": true,
+      "importDetectURLs": true,
+      "importExtra": true,
+      "importJabRefAbbreviations": true,
+      "importJabRefStrings": true,
+      "importNoteToExtra": "",
+      "importPlaceEvent": "inproceedings,conference,presentation,talk",
+      "importSentenceCase": "on+guess",
+      "importSentenceCaseQuoted": true,
+      "importUnknownTexCommand": "ignore",
+      "itemObserverDelay": 5,
+      "jabrefFormat": 0,
+      "japanese": false,
+      "keyScope": "global",
+      "language": "langid",
+      "logEvents": false,
+      "mapMath": "",
+      "mapText": "",
+      "packages": "",
+      "parseParticles": true,
+      "patchDates": "dateadded=dateAdded, date-added=dateAdded, datemodified=dateModified, date-modified=dateModified",
+      "platform": "lin",
+      "postscript": "",
+      "postscriptOverride": "",
+      "preferencesOverride": "",
+      "qualityReport": false,
+      "quickCopyEta": "",
+      "quickCopyMode": "citekeys",
+      "quickCopyOrgMode": "zotero",
+      "quickCopyPandocBrackets": false,
+      "quickCopySelectLink": "zotero",
+      "rawImports": false,
+      "rawLaTag": "#LaTeX",
+      "relativeFilePaths": false,
+      "remigrate": false,
+      "resetKeyOnChange": false,
+      "scrubDatabase": false,
+      "separatorList": "and",
+      "separatorNames": "and",
+      "skipFields": "",
+      "skipWords": "a,ab,aboard,about,above,across,after,against,al,along,amid,among,an,and,anti,around,as,at,before,behind,below,beneath,beside,besides,between,beyond,but,by,d,da,das,de,del,dell,dello,dei,degli,della,dell,delle,dem,den,der,des,despite,die,do,down,du,during,ein,eine,einem,einen,einer,eines,el,en,et,except,for,from,gli,i,il,in,inside,into,is,l,la,las,le,les,like,lo,los,near,nor,of,off,on,onto,or,over,past,per,plus,round,save,since,so,some,sur,than,the,through,to,toward,towards,un,una,unas,under,underneath,une,unlike,uno,unos,until,up,upon,versus,via,von,while,with,within,without,yet,zu,zum",
+      "startupProgress": "popup",
+      "strings": "",
+      "stringsOverride": "",
+      "testing": false,
+      "verbatimFields": "url,doi,file,pdf,ids,eprint,/^verb[a-z]$/,groups,/^citeulike-linkout-[0-9]+$/, /^bdsk-url-[0-9]+$/",
+      "warnBulkModify": 10,
+      "warnTitleCased": false
+    }
+  }
+}

dots/README.md

@@ -0,0 +1,13 @@
+# My dotfiles
+
+To get started, run the following:
+
+```
+bash <(curl -s https://git.hektormisplon.xyz/hektor/dots/raw/branch/master/.bin/setup)
+```
+
+Note: will not set up *everything* (e.g. `/etc` configs, dependencies...), but
+should get you up and running.
+
+2025-10-04: I am migrating from Arch Linux to NixOS. For this transition, these
+dotfiles are currently included as a subtree in my [NixOS repository](https://git.hektormisplon.xyz/hektor/nix).

flake.lock

@@ -226,20 +226,6 @@
         "type": "github"
       }
     },
-    "flake-compat_3": {
-      "locked": {
-        "lastModified": 1733328505,
-        "narHash": "sha256-NeCCThCEP3eCl2l/+27kNNK7QrwZB1IJCrXfrbv5oqU=",
-        "rev": "ff81ac966bb2cae68946d5ed5fc4994f96d0ffec",
-        "revCount": 69,
-        "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/edolstra/flake-compat/1.1.0/01948eb7-9cba-704f-bbf3-3fa956735b52/source.tar.gz"
-      },
-      "original": {
-        "type": "tarball",
-        "url": "https://flakehub.com/f/edolstra/flake-compat/1.tar.gz"
-      }
-    },
     "flake-parts": {
       "inputs": {
         "nixpkgs-lib": [
@@ -262,24 +248,6 @@
       }
     },
     "flake-parts_2": {
-      "inputs": {
-        "nixpkgs-lib": "nixpkgs-lib"
-      },
-      "locked": {
-        "lastModified": 1778716662,
-        "narHash": "sha256-m1Yf0wZ8j1OHjTc2UwHwyQRSnNeSgLJOd7q5Y45hzi4=",
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "rev": "f7c1a2d347e4c52d5fb8d10cb4d94b5884e546fb",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "type": "github"
-      }
-    },
-    "flake-parts_3": {
       "inputs": {
         "nixpkgs-lib": [
           "stylix",
@@ -393,19 +361,19 @@
     "hecuba-services": {
       "flake": false,
       "locked": {
-        "lastModified": 1793511960,
+        "lastModified": 1792706746,
-        "narHash": "sha256-TvzuWcQVL4u2g8UhYdnfOwphDJ8bg1l/T31yFbKQbvc=",
+        "narHash": "sha256-k6M11PtciFz+upo0jx6l9BuLVNN35vs1eyc1QmisboU=",
         "ref": "main",
-        "rev": "16c8c8d4a1f96b83ba7d2440fde98ab7093f2556",
+        "rev": "e94b1340b3675291a94d4ed9198d5ef9bf48ac6a",
         "shallow": true,
         "type": "git",
-        "url": "ssh://git@github.com/hektor-org/hecuba-services"
+        "url": "ssh://git@github.com/hektor/hecuba-services"
       },
       "original": {
-        "ref": "main",
-        "shallow": true,
         "type": "git",
-        "url": "ssh://git@github.com/hektor-org/hecuba-services"
+        "url": "ssh://git@github.com/hektor/hecuba-services",
+        "ref": "main",
+        "shallow": true
       }
     },
     "home-manager": {
@@ -449,44 +417,22 @@
         "type": "github"
       }
     },
-    "nix-mineral": {
-      "inputs": {
-        "flake-compat": "flake-compat_3",
-        "flake-parts": "flake-parts_2",
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1792339378,
-        "narHash": "sha256-2GSp02yOdG9BSvb0c9SW1nsMnUpjR1/WBKskGz0D+8g=",
-        "owner": "cynicsketch",
-        "repo": "nix-mineral",
-        "rev": "bcd361bb18fccc4297d668aa5e0d5e4ebd4918ce",
-        "type": "github"
-      },
-      "original": {
-        "owner": "cynicsketch",
-        "repo": "nix-mineral",
-        "type": "github"
-      }
-    },
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1792706177,
+        "lastModified": 1792360606,
-        "narHash": "sha256-MdLYOxV0xXvCtBU6mld3gL4iH7Mr+jGXH+ytAojVie8=",
+        "narHash": "sha256-+aCQal5q6VtwlH1J2UXhzyY4AGqek6wvLXJzLioXdz4=",
         "ref": "main",
-        "rev": "1d855a9725603034b66b6f007b553f7347d101bc",
+        "rev": "6d7541fa4585a8c450721b22254c166ade7a7c15",
         "shallow": true,
         "type": "git",
-        "url": "ssh://git@github.com/hektor-org/nix-secrets"
+        "url": "ssh://git@github.com/hektor/nix-secrets"
       },
       "original": {
         "ref": "main",
         "shallow": true,
         "type": "git",
-        "url": "ssh://git@github.com/hektor-org/nix-secrets"
+        "url": "ssh://git@github.com/hektor/nix-secrets"
       }
     },
     "nixCats": {
@@ -557,21 +503,6 @@
         "url": "https://channels.nixos.org/nixos-unstable/nixexprs.tar.xz"
       }
     },
-    "nixpkgs-lib": {
-      "locked": {
-        "lastModified": 1777168982,
-        "narHash": "sha256-GOkGPcboWE9BmGCRMLX3worL4EMnsnG8MyKmXNeYuhQ=",
-        "owner": "nix-community",
-        "repo": "nixpkgs.lib",
-        "rev": "f5901329dade4a6ea039af1433fb087bd9c1fe14",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "nixpkgs.lib",
-        "type": "github"
-      }
-    },
     "nixpkgs_2": {
       "locked": {
         "lastModified": 1792210252,
@@ -619,8 +550,9 @@
         "nixpkgs": [
           "nixpkgs"
         ],
-        "plugins-atlas-nvim": "plugins-atlas-nvim",
         "plugins-beancount-nvim": "plugins-beancount-nvim",
+        "plugins-diffview-nvim": "plugins-diffview-nvim",
+        "plugins-nvimkit-nvim": "plugins-nvimkit-nvim",
         "plugins-shipwright-nvim": "plugins-shipwright-nvim",
         "plugins-tailwind-fold-nvim": "plugins-tailwind-fold-nvim"
       },
@@ -634,22 +566,6 @@
       },
       "parent": []
     },
-    "plugins-atlas-nvim": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1793732433,
-        "narHash": "sha256-z9Mnw/wU5ceuaMiIPJgtXDhw93w0y6MayWQtIYrlqaY=",
-        "owner": "emrearmagan",
-        "repo": "atlas.nvim",
-        "rev": "f78cfc45930d070e93be6d00e500292dfcc263c8",
-        "type": "github"
-      },
-      "original": {
-        "owner": "emrearmagan",
-        "repo": "atlas.nvim",
-        "type": "github"
-      }
-    },
     "plugins-beancount-nvim": {
       "flake": false,
       "locked": {
@@ -666,6 +582,38 @@
         "type": "github"
       }
     },
+    "plugins-diffview-nvim": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1787574526,
+        "narHash": "sha256-twlMCrNKlkuoT3aQtZHVAZNw5zv1Y9McFYBt8+KgHZ4=",
+        "owner": "dlyongemallo",
+        "repo": "diffview.nvim",
+        "rev": "30afab604a0abe02dfd19e6fbb9153fd26fd2eb3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "dlyongemallo",
+        "repo": "diffview.nvim",
+        "type": "github"
+      }
+    },
+    "plugins-nvimkit-nvim": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1721393835,
+        "narHash": "sha256-MdmrhLHMxrn6upu1chjKyitPZ5WkCQtpI465AKJXDOA=",
+        "owner": "jamesblckwell",
+        "repo": "nvimkit.nvim",
+        "rev": "af363d22699760f66988e8d36539a5753039217a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "jamesblckwell",
+        "repo": "nvimkit.nvim",
+        "type": "github"
+      }
+    },
     "plugins-shipwright-nvim": {
       "flake": false,
       "locked": {
@@ -708,7 +656,6 @@
         "git-hooks": "git-hooks",
         "hecuba-services": "hecuba-services",
         "home-manager": "home-manager",
-        "nix-mineral": "nix-mineral",
         "nix-secrets": "nix-secrets",
         "nixgl": "nixgl",
         "nixos-hardware": "nixos-hardware",
@@ -784,7 +731,7 @@
         "base16-helix": "base16-helix",
         "base16-vim": "base16-vim",
         "firefox-gnome-theme": "firefox-gnome-theme",
-        "flake-parts": "flake-parts_3",
+        "flake-parts": "flake-parts_2",
         "gnome-shell": "gnome-shell",
         "nixpkgs": [
           "nixpkgs"

flake.nix

@@ -6,10 +6,6 @@
     nixos-hardware = {
       url = "github:NixOS/nixos-hardware/master";
     };
-    nix-mineral = {
-      url = "github:cynicsketch/nix-mineral";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
     disko = {
       url = "github:nix-community/disko/latest";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -19,7 +15,7 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
     nix-secrets = {
-      url = "git+ssh://git@github.com/hektor-org/nix-secrets?shallow=1&ref=main";
+      url = "git+ssh://git@github.com/hektor/nix-secrets?shallow=1&ref=main";
       flake = false;
     };
     colmena = {
@@ -35,7 +31,7 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
     hecuba-services = {
-      url = "git+ssh://git@github.com/hektor-org/hecuba-services?shallow=1&ref=main";
+      url = "git+ssh://git@github.com/hektor/hecuba-services?shallow=1&ref=main";
       flake = false;
     };
     git-hooks = {
@@ -78,9 +74,15 @@
       ...
     }@inputs:
     let
+      inherit (self) outputs;
       inherit (inputs.nixpkgs) lib;
-      lib' = import ./lib { inherit lib; };
+      myUtils = import ./utils { inherit lib; };
+      hostDirNames = myUtils.dirNames ./hosts;
       system = "x86_64-linux";
+      paths = {
+        dots = ./dots;
+        hosts = ./hosts;
+      };
       gitHooks = import ./git-hooks.nix {
         inherit nixpkgs git-hooks system;
         src = ./.;
@@ -88,20 +90,22 @@
     in
     {
       nixosConfigurations =
-        (lib.genAttrs lib'.nixosHosts (
+        (lib.genAttrs hostDirNames (
           host:
           nixpkgs.lib.nixosSystem {
             modules = [
               ./hosts/${host}
               {
-                nixpkgs.hostPlatform = (lib'.hostMeta host).system;
+                nixpkgs.hostPlatform = (myUtils.hostMeta ./hosts/${host}).system;
                 host.name = host;
               }
             ];
             specialArgs = {
               inherit
                 inputs
-                lib'
+                outputs
+                paths
+                myUtils
                 ;
             };
           }
@@ -119,7 +123,9 @@
             specialArgs = {
               inherit
                 inputs
-                lib'
+                outputs
+                paths
+                myUtils
                 ;
             };
           };
@@ -135,7 +141,9 @@
             specialArgs = {
               inherit
                 inputs
-                lib'
+                outputs
+                paths
+                myUtils
                 ;
             };
           };
@@ -152,7 +160,9 @@
             osConfig = null;
             inherit
               inputs
-              lib'
+              outputs
+              paths
+              myUtils
               ;
           };
         };

git-hooks.nix

@@ -9,9 +9,6 @@ let
 
   pre-commit-check = git-hooks.lib.${system}.run {
     inherit src;
-
-    default_stages = [ "pre-commit" ];
-
     hooks = {
       nixfmt = {
         enable = true;
@@ -19,24 +16,32 @@ let
       };
       statix.enable = true;
       deadnix.enable = true;
-
-      flake-check = {
-        enable = true;
-        entry = "${pkgs.lib.getExe pkgs.nix} flake check";
-        stages = [ "pre-push" ];
-        pass_filenames = false;
-        always_run = true;
-      };
     };
   };
 in
 {
-  checks.pre-commit-check = pre-commit-check;
+  checks = {
+    inherit pre-commit-check;
+  };
 
-  formatter = pkgs.nixfmt-tree;
+  formatter =
+    let
+      inherit (pre-commit-check) config;
+      inherit (config) package configFile;
+      script = ''
+        ${pkgs.lib.getExe package} run --all-files --config ${configFile}
+      '';
+    in
+    pkgs.writeShellScriptBin "pre-commit-run" script;
 
-  devShells.default = pkgs.mkShell {
+  devShells = {
-    inherit (pre-commit-check) shellHook;
+    default =
-    packages = pre-commit-check.enabledPackages;
+      let
+        inherit (pre-commit-check) shellHook enabledPackages;
+      in
+      pkgs.mkShell {
+        inherit shellHook;
+        buildInputs = enabledPackages;
+      };
   };
 }

home/hosts/andromache/default.nix

@@ -16,7 +16,13 @@
     homeDirectory = "/home/${config.host.username}";
   };
 
-  modules."3d".printing.enable = true;
+  xdg.userDirs.createDirectories = false;
+  xdg.userDirs.download = "${config.home.homeDirectory}/dl";
+
+  modules."3d" = {
+    printing.enable = true;
+    modeling.enable = true;
+  };
   ai-tools = {
     claude-code.enable = true;
     codex.enable = true;
@@ -24,7 +30,6 @@
   };
   anki.enable = true;
   audio.enable = true;
-  bin.enable = true;
   browser.primary = "librewolf";
   cloud.hetzner.enable = true;
   comms.signal.enable = true;
@@ -32,21 +37,14 @@
   desktop.niri.enable = true;
   devenv.enable = true;
   direnv.enable = true;
-  docker.enable = true;
   gaming.enable = true;
   git = {
     enable = true;
     gitea.enable = true;
     github.enable = true;
   };
-  k8s = {
+  k8s.k9s.enable = true;
-    enable = true;
-    k9s.enable = true;
-    talos.enable = true;
-  };
-  keyboard.vortexCore.enable = true;
   keepassxc.enable = true;
-  mpv.enable = true;
   music.enable = true;
   newsboat.enable = true;
   nvim.enable = true;
@@ -58,12 +56,12 @@
   shell = {
     enable = true;
     bash.aliases.lang-js = true;
+    bash.addBinToPath = true;
   };
   ssh.enable = true;
   taskwarrior.enable = true;
   terminal.enable = true;
   torrenting.enable = true;
-  my.xdg.enable = true;
   my.yubikey.enable = true;
   zk.enable = true;
 

home/hosts/astyanax/default.nix

@@ -15,6 +15,11 @@
     homeDirectory = "/home/${config.host.username}";
   };
 
+  xdg.userDirs = {
+    enable = false;
+    createDirectories = false;
+  };
+
   modules."3d".printing.enable = true;
   ai-tools = {
     claude-code.enable = true;
@@ -23,7 +28,6 @@
   anki.enable = true;
   archiving.enable = true;
   audio.enable = true;
-  bin.enable = true;
   browser.enable = true;
   browser.primary = "librewolf";
   cloud.hetzner.enable = true;
@@ -31,7 +35,6 @@
   desktop.niri.enable = true;
   devenv.enable = true;
   direnv.enable = true;
-  docker.enable = true;
   git = {
     enable = true;
     gitea.enable = true;
@@ -39,24 +42,23 @@
   };
   k8s.k9s.enable = true;
   keepassxc.enable = true;
-  mpv.enable = true;
   music.enable = true;
   newsboat.enable = true;
-  my.xdg.enable = true;
   my.yubikey.enable = true;
   nfc.enable = true;
   nvim.enable = true;
   pandoc.enable = true;
-  reference-manager.enable = true;
   secrets.enable = true;
   shell = {
     enable = true;
     bash.aliases.lang-js = true;
+    bash.addBinToPath = true;
   };
   ssh.enable = true;
   deploy.enable = true;
   taskwarrior.enable = true;
   terminal.enable = true;
+  reference-manager.enable = true;
 
   programs = {
     home-manager.enable = true;

home/hosts/packages.nix

@@ -15,6 +15,7 @@ with pkgs;
   parallel
   pass
   ripgrep
+  sops
   tldr
   tree
   wget

home/hosts/work/default.nix

@@ -16,7 +16,13 @@
 
   nixpkgs.config.allowUnfree = true;
 
-  xdg.systemDirs.config = [ "/etc/xdg" ];
+  xdg = {
+    systemDirs.config = [ "/etc/xdg" ];
+    userDirs = {
+      createDirectories = false;
+      download = "${config.home.homeDirectory}/dl";
+    };
+  };
 
   home = {
     stateVersion = "25.05";
@@ -64,22 +70,11 @@
   k8s.enable = true;
   keepassxc.enable = true;
   music.enable = true;
-  my = {
+  my.dconf.enable = true;
-    dconf.enable = true;
+  my.stylix.enable = true;
-    stylix.enable = true;
-    xdg.enable = true;
-  };
   nvim = {
     enable = true;
     colorscheme = "vscode";
-    # note: non-exhaustive (these are the ones that are not inferred from home
-    # module options atm)
-    languages = {
-      css = true;
-      html = true;
-      json = true;
-      tailwind = true;
-    };
   };
   pandoc.enable = true;
   shell.enable = true;

home/modules/3d/default.nix

@@ -6,18 +6,7 @@
       enable = lib.mkEnableOption "3D printing tools";
     };
     modeling = {
-      blender = {
+      enable = lib.mkEnableOption "3D modeling tools";
-        enable = lib.mkOption {
-          default = false;
-          type = lib.types.bool;
-        };
-      };
-      openscad = {
-        enable = lib.mkOption {
-          default = false;
-          type = lib.types.bool;
-        };
-      };
     };
   };
 

home/modules/3d/modeling.nix

@@ -6,13 +6,10 @@
 }:
 
 {
-  config = {
+  config = lib.mkIf config.modules."3d".modeling.enable {
-    home.packages =
+    home.packages = with pkgs; [
-      with pkgs;
-      lib.optionals config.modules."3d".modeling.blender.enable [
       blender
-      ]
+      openscad-lsp
-      ++ lib.optionals config.modules."3d".modeling.openscad.enable [
       openscad-unstable
     ];
   };

home/modules/ai-tools/claude-code.nix

@@ -6,33 +6,52 @@
 }:
 let
   cfg = config.ai-tools.claude-code;
+  rtk-version = "0.18.1";
 in
 {
   config = lib.mkIf cfg.enable {
     programs.claude-code.enable = true;
 
     home.packages = with pkgs; [
-      (rustPlatform.buildRustPackage (finalAttrs: {
+      (stdenv.mkDerivation {
-        pname = "ccometixline";
+        name = "ccline";
-        version = "2.0.1";
+        src = fetchurl {
-        src = fetchFromGitHub {
+          url = "https://github.com/Haleclipse/CCometixLine/releases/download/v1.0.8/ccline-linux-x64.tar.gz";
-          owner = "Haleclipse";
+          hash = "sha256-Joe3Dd6uSMGi66QT6xr2oY/Tz8rA5RuKa6ckBVJIzI0=";
-          repo = "CCometixLine";
-          tag = "v${finalAttrs.version}";
-          hash = "sha256-tzEo+8M86C6EdN31rDVqt8+SCYqeEXRCVFsbtbW41XY=";
         };
-        cargoHash = "sha256-dTsuyklpaiYqp5Rq1Q7YUBrmQUH42ve2UY+MwUqF7Ek=";
+        unpackPhase = "tar xzf $src";
-        checkFlags = [ "--skip=git::tests::detects_repositories_without_spawning_git" ];
+        installPhase = ''
-        postInstall = "mv $out/bin/ccometixline $out/bin/ccline";
+          mkdir -p $out/bin
+          cp ccline $out/bin/
+          chmod +x $out/bin/ccline
+        '';
         meta = {
-          description = "CCometixLine (ccline) - Claude Code statusline tool";
+          description = "CCometixLine Linux x64 CLI (Claude Code statusline)";
           homepage = "https://github.com/Haleclipse/CCometixLine";
           license = lib.licenses.mit;
-          mainProgram = "ccline";
+          platforms = [ "x86_64-linux" ];
-          platforms = lib.platforms.unix;
         };
-      }))
+      })
-      rtk
+      (stdenv.mkDerivation {
+        name = "rtk-${rtk-version}";
+        version = rtk-version;
+        src = fetchurl {
+          url = "https://github.com/rtk-ai/rtk/releases/download/v${rtk-version}/rtk-x86_64-unknown-linux-gnu.tar.gz";
+          hash = "sha256-XoTia5K8b00OzcKYCufwx8ApkAS31DxUCpGSU0jFs2Q=";
+        };
+        unpackPhase = "tar xzf $src";
+        installPhase = ''
+          mkdir -p $out/bin
+          cp rtk $out/bin/
+          chmod +x $out/bin/rtk
+        '';
+        meta = {
+          description = "RTK - AI coding tool enhancer";
+          homepage = "https://www.rtk-ai.app";
+          license = lib.licenses.mit;
+          platforms = [ "x86_64-linux" ];
+        };
+      })
       mcp-nixos
     ];
   };

home/modules/ai-tools/opencode.nix

@@ -2,18 +2,25 @@
   config,
   lib,
   pkgs,
+  myUtils,
+  osConfig ? null,
+  inputs ? null,
   ...
 }:
 
 let
-  authReady = config.secrets.templatePath ? "opencode/auth.json";
+  sops = myUtils.sopsAvailability config osConfig;
+  standalone = osConfig == null;
 in
 {
-  config = lib.mkIf config.ai-tools.opencode.enable {
+  config = lib.mkIf config.ai-tools.opencode.enable (
-    secrets.files.opencode = [ "api-key" ];
+    lib.optionalAttrs standalone {
-
+      sops = {
-    secrets.templates."opencode/auth.json" = {
+        secrets = myUtils.mkSopsSecrets "${toString inputs.nix-secrets}/secrets" {
-      path = ".local/share/opencode/auth.json";
+          opencode = [ "api-key" ];
+        };
+        templates."opencode/auth.json" = {
+          path = "${config.home.homeDirectory}/.local/share/opencode/auth.json";
           content = builtins.toJSON {
             zai-coding-plan = {
               type = "api";
@@ -21,10 +28,12 @@ in
             };
           };
         };
-
+      };
+    }
+    // {
       warnings =
-      lib.optional (!authReady)
+        lib.optional (!sops.available)
-        "opencode is enabled but its auth template is unavailable. the opencode API key will not be configured.";
+          "opencode is enabled, but sops templates are not available. the opencode API key will not be configured.";
 
       home.packages = [ pkgs.opencode ];
       home.file.".config/opencode/opencode.json".text = builtins.toJSON {
@@ -48,5 +57,6 @@ in
         };
         plugin = [ "@mohak34/opencode-notifier@latest" ];
       };
-  };
+    }
+  );
 }

home/modules/anki/default.nix

@@ -2,29 +2,33 @@
   config,
   lib,
   pkgs,
+  myUtils,
+  osConfig ? null,
+  inputs ? null,
   ...
 }:
 
 let
   cfg = config.anki;
-  syncReady = config.secrets.path ? "anki/sync-user" && config.secrets.path ? "anki/sync-key";
+  sops = myUtils.sopsAvailability config osConfig;
+  standalone = osConfig == null;
 in
 {
   options.anki.enable = lib.mkEnableOption "Anki";
-  options.anki.reviewsCache = lib.mkOption {
-    default = "/tmp/anki-reviews";
-    type = lib.types.str;
-  };
 
-  config = lib.mkIf cfg.enable {
+  config = lib.mkIf cfg.enable (
-    secrets.files.anki = [
+    lib.optionalAttrs standalone {
+      sops.secrets = myUtils.mkSopsSecrets "${toString inputs.nix-secrets}/secrets" {
+        anki = [
           "sync-user"
           "sync-key"
         ];
-
+      };
+    }
+    // {
       warnings = lib.optional (
-      !syncReady
+        !sops.available
-    ) "anki is enabled but its secrets are unavailable. anki sync will not be configured.";
+      ) "anki is enabled but sops secrets are not available. anki sync will not be configured.";
 
       programs.anki = {
         enable = true;
@@ -44,13 +48,14 @@ in
           puppy-reinforcement
           review-heatmap
         ];
-      profiles."User 1".sync = lib.mkIf syncReady {
+        profiles."User 1".sync = lib.mkIf sops.available {
-        usernameFile = config.secrets.path."anki/sync-user";
+          usernameFile = "${sops.secrets."anki/sync-user".path}";
-        keyFile = config.secrets.path."anki/sync-key";
+          keyFile = "${sops.secrets."anki/sync-key".path}";
         };
       };
 
       # allow Anki to write prefs
       home.file."${config.xdg.dataHome}/Anki2/prefs21.db".enable = lib.mkForce false;
-  };
+    }
+  );
 }

home/modules/bin/default.nix

@@ -1,87 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-let
-  script =
-    name: args:
-    pkgs.writeShellApplication (
-      {
-        inherit name;
-        text = builtins.readFile ./scripts/${name};
-      }
-      // args
-    );
-  pythonScript =
-    name: runtimeInputs:
-    pkgs.writeShellApplication {
-      inherit name runtimeInputs;
-      text = ''exec ${lib.getExe pkgs.python3} ${pkgs.writeTextDir name (builtins.readFile ./scripts/${name})}/${name} "$@"'';
-    };
-  ssh-hosts = script "ssh-hosts" {
-    runtimeInputs = with pkgs; [
-      gnugrep
-      gawk
-    ];
-  };
-  scripts = with pkgs; {
-    bak.runtimeInputs = [ coreutils ];
-    notify.runtimeInputs = [ libnotify ];
-    pdftitle.runtimeInputs = [
-      poppler-utils
-      gawk
-      coreutils
-    ];
-    fzf-book.runtimeInputs = [
-      findutils
-      fzf
-      coreutils
-    ];
-    fzf-ssh.runtimeInputs = [
-      ssh-hosts
-      fzf
-    ];
-    save-ssh-host = {
-      runtimeInputs = [
-        ssh-hosts
-        fzf
-      ];
-      excludeShellChecks = [ "SC2029" ];
-    };
-    fzf-fontnames.runtimeInputs = [
-      fontconfig
-      fzf
-      gawk
-      coreutils
-    ];
-    get-anki-decks.runtimeInputs = [
-      curl
-      jq
-    ];
-    get-anki-reviews-status = {
-      runtimeInputs = [ coreutils ];
-      runtimeEnv.ANKI_REVIEWS = config.anki.reviewsCache;
-    };
-  };
-  pythonScripts = with pkgs; {
-    pomo = [ libnotify ];
-    taskdeps = [ ];
-  };
-in
-{
-  options.bin.enable = lib.mkOption {
-    default = false;
-    type = lib.types.bool;
-  };
-
-  config = lib.mkIf config.bin.enable {
-    home.packages = [
-      ssh-hosts
-    ]
-    ++ lib.mapAttrsToList script scripts
-    ++ lib.mapAttrsToList pythonScript pythonScripts;
-  };
-}

home/modules/bin/scripts/ssh-hosts

@@ -1 +0,0 @@
-grep -E 'Host [a-z0-9\-]*$' ~/.ssh/config | awk '{print $2}'

home/modules/browser/default.nix

@@ -9,7 +9,6 @@
     ./firefox.nix
     ./librewolf.nix
     ./chromium.nix
-    ./tridactyl.nix
   ];
 
   options.browser = {

home/modules/browser/firefox-base.nix

@@ -53,10 +53,6 @@ in
   };
   policies = {
     DefaultDownloadDirectory = "\${home}/dl";
-    "3rdparty".Extensions."keepassxc-browser@keepassxc.org".settings = {
-      defaultGroup = "browser";
-      defaultPasskeyGroup = "browser";
-    };
     ExtensionSettings = {
       "jid1-ZAdIEUB7XOzOJw@jetpack" = {
         default_area = "navbar";

home/modules/browser/tridactyl.nix

@@ -1,17 +0,0 @@
-{
-  config,
-  lib,
-  ...
-}:
-
-let
-  browsers = [
-    config.browser.primary
-    config.browser.secondary
-  ];
-in
-{
-  config = lib.mkIf (lib.elem "firefox" browsers || lib.elem "librewolf" browsers) {
-    xdg.configFile."tridactyl/tridactylrc".source = ./tridactylrc;
-  };
-}

home/modules/default.nix

@@ -2,14 +2,14 @@
   config,
   lib,
   pkgs,
-  lib',
+  myUtils,
   ...
 }:
 
 {
   imports =
     let
-      dirs = lib'.dirNames ./.;
+      dirs = myUtils.dirNames ./.;
       hasDef = name: builtins.pathExists ./${name}/default.nix;
     in
     map (name: ./${name}) (builtins.filter hasDef dirs);
@@ -20,11 +20,6 @@
       default = config.home.username;
     };
 
-    readings.path = lib.mkOption {
-      default = "${config.home.homeDirectory}/doc/readings";
-      type = lib.types.str;
-    };
-
     nixgl.wrap = lib.mkOption {
       type = lib.types.functionTo lib.types.package;
       default = if config.lib ? nixGL then config.lib.nixGL.wrap else lib.id;

home/modules/deploy/default.nix

@@ -3,22 +3,23 @@
   lib,
   pkgs,
   inputs,
-  lib',
+  myUtils,
+  paths,
   ...
 }:
 
 let
   cfg = config.deploy;
 
-  inherit (lib') hostNames;
+  hostNames = myUtils.dirNames paths.hosts;
   hostsWithKeys = lib.filter (
-    hostname: builtins.pathExists (lib'.hostsPath + "/${hostname}/ssh_host.pub")
+    hostname: builtins.pathExists (paths.hosts + "/${hostname}/ssh_host.pub")
   ) hostNames;
 
   colmena = inputs.colmena.packages.${pkgs.stdenv.hostPlatform.system}.colmena;
   deployRs = inputs.deploy-rs.packages.${pkgs.stdenv.hostPlatform.system}.default;
 
-  hostTags = hostname: (lib'.hostMeta hostname).tags;
+  hostTags = hostname: (myUtils.hostMeta (paths.hosts + "/${hostname}")).tags;
   nodeTagsDecl = ''
     declare -A _colmena_node_tags=(
     ${lib.concatMapStringsSep "\n" (

home/modules/git/default.nix

@@ -1,24 +1,22 @@
 {
   config,
+  inputs,
   lib,
+  myUtils,
+  osConfig ? null,
   ...
 }:
 
 let
   cfg = config.git;
-  identities = [
+  sops = myUtils.sopsAvailability config osConfig;
-    "personal"
+  standalone = osConfig == null;
-    "work"
-  ];
 
-  emailTemplate = key: ".gitconfig.${key}.email";
+  personalEmail = sops.templates.".gitconfig.email".path;
-  emailInclude =
+  workEmail = sops.templates.".gitconfig.work.email".path;
-    key:
-    lib.optionalAttrs (config.secrets.templatePath ? ${emailTemplate key}) {
-      include.path = config.secrets.templatePath.${emailTemplate key};
-    };
 
-  workSettings = emailInclude "work" // {
+  workSettings = {
+    include.path = workEmail;
     core.longpaths = true;
     user = {
       name = "Hektor Misplon";
@@ -49,19 +47,29 @@ in
     ./gitlab.nix
   ];
 
-  config = lib.mkIf cfg.enable {
+  config = lib.mkIf cfg.enable (
-    secrets.files.email = identities;
+    lib.optionalAttrs standalone {
+      sops = {
+        secrets = myUtils.mkSopsSecrets "${toString inputs.nix-secrets}/secrets" {
+          email = [
+            "personal"
+            "work"
+          ];
+        };
 
-    secrets.templates = lib.genAttrs' identities (
+        templates = {
-      key:
+          ".gitconfig.email".content = ''
-      lib.nameValuePair (emailTemplate key) {
-        content = ''
             [user]
-            email = ${config.sops.placeholder."email/${key}"}
+              email = ${config.sops.placeholder."email/personal"}
           '';
+          ".gitconfig.work.email".content = ''
+            [user]
+              email = ${config.sops.placeholder."email/work"}
+          '';
+        };
+      };
     }
-    );
+    // {
-
       warnings = lib.optional (
         !config.nvim.enable
       ) "'git.enable' is enabled without 'nvim.enable' (not using 'nvimdiff')";
@@ -154,11 +162,8 @@ in
           })
         ];
 
-      includes =
+        includes = [
-        lib.optional (config.secrets.templatePath ? ${emailTemplate "personal"}) {
+          { path = personalEmail; }
-          path = config.secrets.templatePath.${emailTemplate "personal"};
-        }
-        ++ [
           {
             condition = "gitdir:~/work/";
             contents = workSettings;
@@ -171,5 +176,6 @@ in
           }
         ];
       };
-  };
+    }
+  );
 }

home/modules/git/github.nix

@@ -6,26 +6,6 @@
 
 {
   config = lib.mkIf (config.git.enable && config.git.github.enable) {
-    programs.gh = {
+    programs.gh.enable = true;
-      enable = true;
-      settings = {
-        git_protocol = "ssh";
-        prompt = "enabled";
-        aliases = {
-          co = "pr checkout";
-          c = "repo clone";
-          f = "repo fork";
-          rc = "repo create";
-          rv = "repo view";
-          re = "repo edit";
-          rm = "repo remove";
-          rn = "repo rename";
-          lr = "repo list";
-          li = "issue list";
-          al = "alias";
-          al- = "alias delete";
-        };
-      };
-    };
   };
 }

home/modules/go/default.nix

@@ -13,7 +13,10 @@
   config = lib.mkIf config.go.enable {
     home = {
       sessionVariables.GOPATH = "${config.xdg.dataHome}/go";
-      packages = with pkgs; [ go ];
+      packages = with pkgs; [
+        go
+        gopls
+      ];
     };
   };
 }

home/modules/k8s/crossplane.nix

@@ -1,12 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-{
-  config = lib.mkIf config.k8s.crossplane.enable {
-    home.packages = [ pkgs.upbound ];
-  };
-}

home/modules/k8s/default.nix

@@ -18,25 +18,11 @@ in
     k9s = {
       enable = lib.mkEnableOption "k9s";
     };
-    crossplane = {
-      enable = lib.mkOption {
-        default = false;
-        type = lib.types.bool;
-      };
-    };
-    talos = {
-      enable = lib.mkOption {
-        default = false;
-        type = lib.types.bool;
-      };
-    };
   };
 
   imports = [
-    ./crossplane.nix
     ./helm.nix
     ./k9s.nix
-    ./talos.nix
   ];
 
   config = lib.mkIf cfg.enable {
@@ -50,6 +36,7 @@ in
       kubectl
       kustomize
       opentofu
+      upbound
     ];
 
     programs.kubecolor = {

home/modules/k8s/talos.nix

@@ -1,12 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-{
-  config = lib.mkIf config.k8s.talos.enable {
-    home.packages = [ pkgs.talosctl ];
-  };
-}