feat: set up git hooks

Flake lock file updates:

• Updated input 'firefox-addons':
    'gitlab:rycee/nur-expressions/4f827ff035c6ddc58d04c45abe5b777d356b926a?dir=pkgs/firefox-addons&narHash=sha256-9Sqq/hxq8ZDLRSzu%2Bedn0OfWG%2BFAPWFpwMKaJobeLec%3D' (2026-02-03)
  → 'gitlab:rycee/nur-expressions/c7794d3f46304de5234008c31b5b28a9d5709184?dir=pkgs/firefox-addons&narHash=sha256-0iGDl/ct3rW%2Bh6%2BsLq4RZaze/U/aQo2L5sLLuyjuVTk%3D' (2026-02-04)
• Updated input 'home-manager':
    'github:nix-community/home-manager/984708c34d3495a518e6ab6b8633469bbca2f77a?narHash=sha256-gj1yP3spUb1vGtaF5qPhshd2j0cg4xf51pklDsIm19Q%3D' (2026-02-01)
  → 'github:nix-community/home-manager/04e5203db66417d548ae1ff188a9f591836dfaa7?narHash=sha256-R1WFtIvp38hS9x63dnijdJw1KyIiy30KGea6e6N7LHs%3D' (2026-02-05)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/cb369ef2efd432b3cdf8622b0ffc0a97a02f3137?narHash=sha256-VKS4ZLNx4PNrABoB0L8KUpc1fE7CLpQXQs985tGfaCU%3D' (2026-02-02)
  → 'github:nixos/nixpkgs/00c21e4c93d963c50d4c0c89bfa84ed6e0694df2?narHash=sha256-AYqlWrX09%2BHvGs8zM6ebZ1pwUqjkfpnv8mewYwAo%2BiM%3D' (2026-02-04)
• Updated input 'nvim':
    'path:./dots/.config/nvim'
  → 'path:./dots/.config/nvim'
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/f990b0a334e96d3ef9ca09d4bd92778b42fd84f9?narHash=sha256-NUVGVtYBTC96WhPh4Y3SVM7vf0o1z5W4uqRBn9v1pfo%3D' (2026-02-03)
  → 'github:Mic92/sops-nix/17eea6f3816ba6568b8c81db8a4e6ca438b30b7c?narHash=sha256-ktjWTq%2BD5MTXQcL9N6cDZXUf9kX8JBLLBLT0ZyOTSYY%3D' (2026-02-03)

.envrc

@@ -1 +0,0 @@
-use flake

.gitignore

@@ -9,5 +9,4 @@ result-*
 
 nixos-efi-vars.fd
 
-.direnv/
-.pre-commit-config.yaml
+/.pre-commit-config.yaml

.mcp.json

@@ -1,7 +0,0 @@
-{
-  "mcpServers": {
-    "nixos": {
-      "command": "mcp-nixos"
-    }
-  }
-}

README.md

@@ -1,27 +1,15 @@
-# ❄️ NixOS flake
+# NixOS flake
 
-## hosts
+## Set up virtual machine ([`disko`](https://github.com/nix-community/disko/blob/master/docs/interactive-vm.md))
 
-### NixOS
-
-```
-nixos-rebuild switch --flake .#<hostname>
-```
-
-### home manager
-
-```
-home-manager switch --flake .#work
-```
-
-### virtual machines
+1. Build the virtual machine
 
 ```
 nix build -L '.#nixosConfigurations.vm.config.system.build.vmWithDisko'
-./result/bin/disko-vm
 ```
 
-## docs
+2. Run the virtual machine
 
-* [deploy using colmena](./deploy/README.md)
-* [SD installer images](./images/README.md)
+```
+./result/bin/disko-vm
+```

deploy/colmena.nix

@@ -4,31 +4,29 @@
 }:
 
 let
-  inherit (inputs.nixpkgs) lib;
-  utils = import ../utils { inherit lib; };
-  hostDirNames = utils.dirNames ../hosts;
-
-  mkNode = hostname: meta: {
+  mkNode = hostname: tags: {
     imports = [ ../hosts/${hostname} ];
     deployment = {
-      inherit (meta.deployment) targetHost targetUser tags;
-      buildOnTarget = builtins.any (t: t != "local" && t != "arm") meta.deployment.tags;
+      targetHost = self.nixosConfigurations.${hostname}.config.ssh.publicHostname;
+      targetUser = self.nixosConfigurations.${hostname}.config.ssh.username;
+      buildOnTarget = builtins.any (t: t != "local") tags;
+      inherit tags;
     };
   };
+in
+inputs.colmena.lib.makeHive {
+  meta = {
+    nixpkgs = import inputs.nixpkgs {
+      system = "x86_64-linux";
+    };
 
-  nodes = lib.genAttrs hostDirNames (hostname: mkNode hostname (utils.hostMeta ../hosts/${hostname}));
-in
-inputs.colmena.lib.makeHive (
-  {
-    meta = {
-      nixpkgs = import inputs.nixpkgs { localSystem = "x86_64-linux"; };
-      specialArgs = {
-        inherit inputs;
-        outputs = self;
-        dotsPath = ../dots;
-        myUtils = utils;
-      };
+    nodeNixpkgs = builtins.mapAttrs (_: v: v.pkgs) self.nixosConfigurations;
+    nodeSpecialArgs = builtins.mapAttrs (_: v: v._module.specialArgs or { }) self.nixosConfigurations;
   };
+
+  astyanax = mkNode "astyanax" [ "local" ];
+  andromache = mkNode "andromache" [ "local" ];
+  vm = mkNode "vm" [ "local" ];
+  hecuba = mkNode "hecuba" [ "cloud" ];
+  eetion = mkNode "eetion" [ "arm" ];
 }
-  // nodes
-)

dots/.bash_aliases/all

@@ -27,6 +27,8 @@ alias ipa="ip -brief address"
 alias ipl="ip -brief link"
 alias ipr="ip route"
 
+alias clip="xclip -sel clip"
+
 alias df="df -kTh"
 alias fzfpac="pacman -Slq | fzf -m --preview 'pacman -Si {1}' | xargs -ro sudo pacman -S"
 alias path='echo -e ${PATH//:/\\n}' # Pretty print path variables

dots/.bashrc

@@ -103,6 +103,13 @@ if [[ -z "${SSH_CONNECTION}" ]]; then
 fi
 # }}}
 
+# pnpm
+export PNPM_HOME="/home/h/.local/share/pnpm"
+case ":$PATH:" in
+  *":$PNPM_HOME:"*) ;;
+  *) export PATH="$PNPM_HOME:$PATH" ;;
+esac
+# pnpm end
 
 # Codi
 # Usage: codi [filetype] [filename]

dots/.bashrc.d/editor

@@ -4,4 +4,3 @@
 # Set NeoVim as default editor
 export EDITOR=nvim
 export SUDO_EDITOR="$EDITOR"
-export SYSTEMD_EDITOR="$EDITOR"

dots/.bin/bak

@@ -1,32 +0,0 @@
-#!/usr/bin/env bash
-
-# back up a file by copying it to a new file with a .bak extension
-# reference: https://askubuntu.com/questions/962489/is-there-any-way-to-create-backup-copy-of-a-file-without-type-its-name-twice
-
-usage() {
-  echo "Usage: bak [-t|--timestamp] <file to back up>"
-  exit 1
-}
-
-timestamp=false
-
-while [[ $# -gt 0 ]]; do
-  case $1 in
-    -t|--timestamp)
-      timestamp=true
-      shift
-      ;;
-    *)
-      break
-      ;;
-  esac
-done
-
-[ $# -eq 1 ] || usage
-
-if $timestamp; then
-  date="$(date +%Y-%m-%d_%H-%M-%S)"
-  cp -vpn "$1"{,."$date".bak}
-else
-  cp -vpn "$1"{,.bak}
-fi

dots/.bin/git-cb

@@ -0,0 +1,221 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+readonly ALLOWED_MAIN_BRANCHES=("main" "master" "develop")
+readonly BRANCH_TYPES=(
+  "feat      For new features"
+  "hotfix    For urgent fixes"
+  "fix       For fixes"
+  "release   For preparing releases"
+  "chore     For non-code tasks"
+)
+
+error() {
+  echo "Error: $1" >&2
+  exit 1
+}
+
+warn() {
+  echo "Warning: $1" >&2
+}
+
+check_dependencies() {
+  local missing=()
+  for cmd in git fzf; do
+    if ! command -v "$cmd" &> /dev/null; then
+      missing+=("$cmd")
+    fi
+  done
+
+  if [[ ${#missing[@]} -gt 0 ]]; then
+    error "Missing required commands: ${missing[*]}"
+  fi
+}
+
+check_git_repo() {
+  if ! git rev-parse --git-dir &> /dev/null; then
+    error "Not in a git repository"
+  fi
+}
+
+check_current_branch() {
+  local current_branch
+  current_branch=$(git branch --show-current)
+
+  local is_main_branch=false
+  for branch in "${ALLOWED_MAIN_BRANCHES[@]}"; do
+    if [[ "$current_branch" == "$branch" ]]; then
+      is_main_branch=true
+      break
+    fi
+  done
+
+  if [[ "$is_main_branch" == false ]]; then
+    warn "Not branching from a main branch (current: $current_branch)"
+    read -rp "Continue anyway? [y/N] " response
+    if [[ ! "$response" =~ ^[Yy]$ ]]; then
+      exit 0
+    fi
+  fi
+}
+
+get_user_email() {
+  local email
+  email=$(git config --get user.email 2>/dev/null)
+
+  if [[ -z "$email" ]]; then
+    error "Git user email not configured. Run: git config user.email 'your@email.com'"
+  fi
+
+  echo "$email"
+}
+
+select_branch_type() {
+  local selected
+  selected=$(printf '%s\n' "${BRANCH_TYPES[@]}" | \
+    fzf --prompt="Select branch type: " \
+        --height=40% \
+        --border \
+        --info=inline) || error "Branch type selection cancelled"
+
+  echo "${selected%% *}"
+}
+
+select_jira_ticket() {
+  local email=$1
+
+  if ! command -v jira &> /dev/null; then
+    warn "Jira CLI not found. Proceeding without ticket ID."
+    return 0
+  fi
+
+  echo "Fetching Jira tickets for $email..." >&2
+  local jira_data
+  jira_data=$(jira issue list --assignee="$email" --order-by=priority --plain --no-headers 2>/dev/null) || {
+    warn "Could not fetch Jira tickets. Proceeding without ticket ID."
+    return 0
+  }
+
+  if [[ -z "$jira_data" ]]; then
+    warn "No Jira tickets found. Proceeding without ticket ID."
+    return 0
+  fi
+
+  echo "$jira_data" >&2
+  echo "" >&2
+
+  local formatted_tickets
+  formatted_tickets=$(echo "$jira_data" | awk '{
+    ticket_id = $2
+    $1 = $2 = ""
+    description = $0
+    gsub(/^[ \t]+/, "", description)
+    if (length(description) > 60) {
+      description = substr(description, 1, 57) "..."
+    }
+    print ticket_id " - " description
+  }')
+
+  if [[ -z "$formatted_tickets" ]]; then
+    warn "No tickets to display. Proceeding without ticket ID."
+    return 0
+  fi
+
+  local selected_ticket
+  selected_ticket=$(echo -e "SKIP - Create branch without ticket ID\n$formatted_tickets" | \
+    fzf --prompt="Select Jira ticket (or skip): " \
+        --height=40% \
+        --border \
+        --info=inline) || error "Ticket selection cancelled"
+
+  if [[ "$selected_ticket" != "SKIP"* ]]; then
+    echo "${selected_ticket%% -*}"
+  fi
+}
+
+get_branch_description() {
+  local ticket_id=$1
+  local editor="${EDITOR:-vi}"
+  local tmpfile
+  tmpfile=$(mktemp)
+
+  trap "rm -f '$tmpfile'" EXIT
+
+  if [[ -n "$ticket_id" ]]; then
+    cat > "$tmpfile" << EOF
+# Selected ticket: $ticket_id
+# Enter your branch description below in kebab-case (e.g., my-description):
+# The ticket ID will be automatically included in the branch name.
+# Lines starting with # will be ignored.
+
+EOF
+  else
+    cat > "$tmpfile" << 'EOF'
+# Enter your branch description below in kebab-case (e.g., my-description):
+# Lines starting with # will be ignored.
+
+EOF
+  fi
+  
+  "$editor" "$tmpfile" < /dev/tty > /dev/tty
+
+  local desc
+  desc=$(grep -v '^#' "$tmpfile" | tr -d '\n' | sed 's/^[[:space:]]*//;s/[[:space:]]*$//')
+
+  echo "$desc"
+}
+
+validate_description() {
+  local desc=$1
+
+  if [[ -z "$desc" ]]; then
+    error "No description provided"
+  fi
+
+  if [[ ! "$desc" =~ ^[a-z0-9]+(-[a-z0-9]+)*$ ]]; then
+    error "Invalid branch description format.\nUse lowercase letters, numbers, and hyphens only.\nNo trailing or consecutive hyphens allowed.\nExample: my-feature-description"
+  fi
+}
+
+create_branch() {
+  local type=$1
+  local ticket_id=$2
+  local desc=$3
+
+  local branch
+  if [[ -n "$ticket_id" ]]; then
+    branch="$type/$ticket_id-$desc"
+  else
+    branch="$type/$desc"
+  fi
+
+  if git show-ref --verify --quiet "refs/heads/$branch"; then
+    error "Branch '$branch' already exists"
+  fi
+
+  echo ""
+  echo "Creating branch: $branch"
+  git checkout -b "$branch"
+}
+
+main() {
+  check_dependencies
+  check_git_repo
+  check_current_branch
+
+  local email
+  email=$(get_user_email)
+
+  local type
+  type=$(select_branch_type)
+
+  echo "About to call select_jira_ticket" >&2
+  local ticket_id=""
+  ticket_id=$(select_jira_ticket "$email")
+  local desc
+  desc=$(get_branch_description "$ticket_id")
+  validate_description "$desc"
+  create_branch "$type" "$ticket_id" "$desc"
+}
+
+main "$@"

dots/.bin/save-home

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+
+# Back up my $HOME folder to OneDrive using `restic`.
+#
+# Adds extra flags needed for using `rclone` with sharepoint WebDav I.e. add
+# `--ignore-size --ignore-checksum --update` to the default `rclone.args`.
+#
+# Select directory in repo using -r rclone:<repo>:<directory>
+#
+# Runs `backup` command on $HOME and ignore what is listed in `.resticexclude`
+#
+# ```/etc/restic-env
+# export B2_ACCOUNT_ID=
+# export B2_ACCOUNT_KEY=
+# ```
+#
+# `restic -r b2:desktop-arch init`
+
+source /etc/restic-env
+restic -r "$RESTIC_REPOSITORY:$HOSTNAME" backup \
+  --tag "hektor" \
+  --one-file-system \
+  --files-from="$HOME/.resticinclude" \
+  --exclude-file="$HOME/.resticexclude" \
+  --exclude-if-present=".nobackup" \
+  --verbose=3

dots/.bin/save-zk

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+cd "$ZK_PATH" || echo "No zettelkasten directory found"
+git a . && git commit -m "Update" && git push

dots/.bin/sb-pomo

@@ -1,3 +1,3 @@
 #!/usr/bin/env bash
 
-[ -f "/home/h/.local/share/pomo" ] && cat /home/h/.local/share/pomo || echo ""
+[ -f "/tmp/pomo" ] && cat /tmp/pomo || echo ""

dots/.bin/setup-zk

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+if [ ! -d ~/.zk ]; then
+    echo "[zk] Setting up zettelkasten"
+    gh repo clone zk ~/.zk
+else
+    echo "[zk] Zettelkasten already set up."
+fi
+
+read -p "Would you like open your zettelkasten? [y/N] " -n 1 -r
+echo
+
+if [[ $REPLY =~ ^[Yy]$ ]]; then
+  if [ -x "$(command -v zk)" ]; then
+    zk
+  else
+    echo "Error: 'zk' command not found or not executable"
+    exit 1
+  fi
+fi

dots/.bin/update-vim

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+# Tiny Vim update helper
+
+nvim +PlugUpgrade +PlugUpdate +CocUpdate

dots/.bin/zk

@@ -1,6 +1,8 @@
-current_zettel_path="$(cat "$ZK_PATH/current-zettel.txt")"
+#!/usr/bin/env bash
 
-if [ -n "${TMUX:-}" ]; then
+current_zettel_path="$ZK_PATH/$(cat "$ZK_PATH/current-zettel.txt")"
+
+if [ "$TERM_PROGRAM" = tmux ]; then
   cd "$ZK_PATH" && $EDITOR "$current_zettel_path"
 else
   echo 'Not in tmux'
@@ -10,9 +12,13 @@ else
   read -r -p 'Enter your choice: ' choice
   case $choice in
     1)
-      if tmux has-session -t zk 2>/dev/null; then
-        tmux attach -t zk
+      # Check if a tmux session is running with a window named zk
+      if tmux list-windows -F '#{window_name}' | grep -q zk; then
+        # Attach to the session containing the 'zk' window
+        session="$(tmux list-windows -F '#{window_name} #{session_name}' | grep zk | head -n 1 | awk '{ print $2 }')"
+        tmux attach -t "$session"
       else
+        # Create session with a window named 'zk' and start nvim
         tmux new-session -s zk -n zk -d
         tmux send-keys -t zk:zk "cd $ZK_PATH && $EDITOR $current_zettel_path" Enter
         tmux attach -t zk

dots/.config/kitty/kitty.conf

@@ -163,4 +163,5 @@ map cmd+q
 
 #: }}}
 
+include ./themes/zenwritten_dark.conf
 include ./nvim.conf

dots/.config/kitty/themes/zenwritten_dark.conf

@@ -0,0 +1,49 @@
+# This file is auto-generated by shipwright.nvim
+# vim:ft=kitty
+## name: zenwritten_dark
+## author: Michael Chris Lopez
+## license: MIT
+## upstream: https://github.com/mcchrish/zenbones.nvim/raw/main/extras/kitty/zenwritten_dark.conf
+## blurb: A zenbones variant with zero hue and saturation.
+foreground                      #BBBBBB
+background                      #191919
+selection_foreground            #BBBBBB
+selection_background            #404040
+# Cursor colors
+cursor                          #C9C9C9
+cursor_text_color               #191919
+# URL underline color when hovering with mouse
+# kitty window border colors
+# OS Window titlebar colors
+# Tab bar colors
+active_tab_foreground           #BBBBBB
+active_tab_background           #65435E
+inactive_tab_foreground         #BBBBBB
+inactive_tab_background         #303030
+# Colors for marks (marked text in the terminal)
+# The basic 16 colors
+# black
+color0 #191919
+color8 #3D3839
+# red
+color1 #DE6E7C
+color9 #E8838F
+# green
+color2  #819B69
+color10 #8BAE68
+# yellow
+color3  #B77E64
+color11 #D68C67
+# blue
+color4  #6099C0
+color12 #61ABDA
+# magenta
+color5  #B279A7
+color13 #CF86C1
+# cyan
+color6  #66A5AD
+color14 #65B8C1
+# white
+color7  #BBBBBB
+color15 #8E8E8E
+# You can set the remaining 240 colors as color16 to color255.

dots/.config/kitty/themes/zenwritten_light.conf

@@ -0,0 +1,49 @@
+# This file is auto-generated by shipwright.nvim
+# vim:ft=kitty
+## name: zenwritten_light
+## author: Michael Chris Lopez
+## license: MIT
+## upstream: https://github.com/mcchrish/zenbones.nvim/raw/main/extras/kitty/zenwritten_light.conf
+## blurb: A zenbones variant with zero hue and saturation.
+foreground                      #353535
+background                      #EEEEEE
+selection_foreground            #353535
+selection_background            #D7D7D7
+# Cursor colors
+cursor                          #353535
+cursor_text_color               #EEEEEE
+# URL underline color when hovering with mouse
+# kitty window border colors
+# OS Window titlebar colors
+# Tab bar colors
+active_tab_foreground           #353535
+active_tab_background           #DEB9D6
+inactive_tab_foreground         #353535
+inactive_tab_background         #CFCFCF
+# Colors for marks (marked text in the terminal)
+# The basic 16 colors
+# black
+color0 #EEEEEE
+color8 #C6C3C3
+# red
+color1 #A8334C
+color9 #94253E
+# green
+color2  #4F6C31
+color10 #3F5A22
+# yellow
+color3  #944927
+color11 #803D1C
+# blue
+color4  #286486
+color12 #1D5573
+# magenta
+color5  #88507D
+color13 #7B3B70
+# cyan
+color6  #3B8992
+color14 #2B747C
+# white
+color7  #353535
+color15 #5C5C5C
+# You can set the remaining 240 colors as color16 to color255.

dots/.config/ncspot/config.toml

@@ -1,6 +1,5 @@
 default_keybindings = false
 flip_status_indicators = true
-library_tabs = ["tracks", "albums", "artists", "playlists", "browse"] # remove podcasts tab
 
 [keybindings]
 "Enter" = "play"
@@ -25,10 +24,11 @@ library_tabs = ["tracks", "albums", "artists", "playlists", "browse"] # remove p
 "c" = "clear"
 "=" = "volup 1"
 "-" = "voldown 1"
+"/" = "focus search"
+"Q" = "focus queue"
+# "L" = "focus library"
 "1" = "focus queue"
-"2" = "focus search"
-"3" = "focus library"
-"4" = "focus cover"
+"2" = "focus library"
 "h" = "move left 1"
 "j" = "move down 1"
 "k" = "move up 1"
@@ -41,5 +41,26 @@ library_tabs = ["tracks", "albums", "artists", "playlists", "browse"] # remove p
 "Y" = "share selected"
 "U" = "update"
 
+[theme]
+primary="#aaaaaa"
+secondary="#555555"
+background="1a1a1a"
+title="#cccccc"
+title_secondary="#aaaaaa"
+playing="#ffffff"
+playing_bg="1a1a1a"
+playing_selected="#ffffff"
+highlight="#cccccc"
+highlight_bg="#333333"
+error="#ffffff"
+error_bg="#333333"
+statusbar="#cccccc"
+statusbar_bg="#1a1a1a"
+statusbar_progress="#cccccc"
+statusbar_progress_bg="#1a1a1a"
+cmdline="#cccccc"
+cmdline_bg="#1a1a1a"
+search_match="#ffffff"
+
 backend="pipe"
 notify="false"

dots/.config/nvim/after/plugin/codecompanion.nvim.lua

@@ -13,7 +13,6 @@ if ok then
   cc_config.interactions = cc_config.interactions or {}
   cc_config.interactions.chat = cc_config.interactions.chat or {}
   cc_config.interactions.chat.tools = cc_config.interactions.chat.tools or {}
-  cc_config.interactions.chat.variables = cc_config.interactions.chat.variables or {}
 
   require("mcphub.extensions.codecompanion").setup({
     make_vars = true,

dots/.config/nvim/after/plugin/hydra.lua

@@ -1,35 +0,0 @@
-local hydra_repl = "hydra-repl"
-
-if not vim.fn.executable(hydra_repl) then
-  return
-end
-
-local function send(lines)
-  vim.system({ hydra_repl, table.concat(lines, "\n") })
-end
-
-local function get_paragraph(buf)
-  local start_ = vim.fn.search("^$", "bnW")
-  local end_ = vim.fn.search("^$", "nW") - 1
-  if end_ < vim.api.nvim_win_get_cursor(0)[1] then
-    end_ = vim.api.nvim_buf_line_count(buf)
-  end
-  return vim.api.nvim_buf_get_lines(buf, start_, end_, false)
-end
-
-local function get_selection(buf)
-  return vim.api.nvim_buf_get_lines(buf, vim.fn.line("'<") - 1, vim.fn.line("'>"), false)
-end
-
-vim.api.nvim_create_autocmd("FileType", {
-  pattern = "javascript",
-  callback = function(e)
-    if vim.fn.fnamemodify(vim.api.nvim_buf_get_name(e.buf), ":e") ~= "hydra" then
-      return
-    end
-
-    local buf = e.buf
-    vim.keymap.set("n", "<CR>", function() send(get_paragraph(buf)) end, { buffer = buf, desc = "hydra: send block" })
-    vim.keymap.set("v", "<CR>", function() send(get_selection(buf)) end, { buffer = buf, desc = "hydra: send selection" })
-  end,
-})

dots/.config/nvim/after/plugin/lspconfig.lua

@@ -85,8 +85,8 @@ local servers = {
       },
     },
   },
-  openscad_ls = {},
   pyright = {},
+  -- tsserver = {},
   svelte = {
     plugin = {
       svelte = {
@@ -95,6 +95,7 @@ local servers = {
     },
   },
   tailwindcss = {},
+  -- vtsls = {},
   ts_ls = {},
   -- vtsls = {
   --   maxTsServerMemory = 16384,

dots/.config/nvim/after/plugin/luasnip.lua

@@ -1,5 +1,23 @@
 local ls = require("luasnip")
 
+local s = ls.snippet
+local sn = ls.snippet_node
+local t = ls.text_node
+local i = ls.insert_node
+local f = ls.function_node
+local c = ls.choice_node
+local d = ls.dynamic_node
+local r = ls.restore_node
+local l = require("luasnip.extras").lambda
+local rep = require("luasnip.extras").rep
+local p = require("luasnip.extras").partial
+local m = require("luasnip.extras").match
+local n = require("luasnip.extras").nonempty
+local dl = require("luasnip.extras").dynamic_lambda
+local fmt = require("luasnip.extras.fmt").fmt
+local fmta = require("luasnip.extras.fmt").fmta
+local conds = require("luasnip.extras.expand_conditions")
+
 ls.config.set_config({
   history = true,
   update_events = "TextChanged,TextChangedI",
@@ -9,5 +27,287 @@ ls.config.set_config({
   store_selection_keys = "<Tab>",
 })
 
+local function copy(args)
+  return args[1]
+end
+
+local function bash(_, _, command)
+  local file = io.popen(command, "r")
+  local res = {}
+  if file then
+    for line in file:lines() do
+      table.insert(res, line)
+    end
+  end
+  return res
+end
+
+local date_input = function(args, snip, old_state, date_format)
+  print(args, snip, old_state)
+  return sn(nil, i(1, os.date(date_format or "%Y-%m-%d")))
+end
+
+-- -- FIXME: EXAMPLE
+-- ls.add_snippets("all", {
+--   -- arg1: trigger `fn`,
+--   -- arg2: nodes to insert into buffer on expansion.
+--   s("fn", {
+--     t("//Parameters: "),    -- Text.
+--     f(copy, 2),             -- 1: function, 2: placeholders to copy text from
+--     t({ "", "function " }), -- placeholder/insert.
+--     i(1),
+--     t("("),                 -- placeholder with initial text.
+--     i(2, "int foo"),        -- linebreak
+--     t({ ") {", "\t" }),     -- last placeholder, snippet exit point
+--     i(0),
+--     t({ "", "}" }),
+--   }),
+--   s("class", {
+--     -- Choice: Switch between two different Nodes, first parameter is its position, second a list of nodes.
+--     c(1, {
+--       t("public "),
+--       t("private "),
+--     }),
+--     t("class "),
+--     i(2),
+--     t(" "),
+--     c(3, {
+--       t("{"),
+--       -- sn: Nested Snippet. Instead of a trigger, it has a position, just like insert-nodes. !!! These don't expect a 0-node!!!!
+--       -- Inside Choices, Nodes don't need a position as the choice node is the one being jumped to.
+--       sn(nil, {
+--         t("extends "),
+--         -- restoreNode: stores and restores nodes.
+--         -- pass position, store-key and nodes.
+--         r(1, "other_class", i(1)),
+--         t(" {"),
+--       }),
+--       sn(nil, {
+--         t("implements "),
+--         -- no need to define the nodes for a given key a second time.
+--         r(1, "other_class"),
+--         t(" {"),
+--       }),
+--     }),
+--     t({ "", "\t" }),
+--     i(0),
+--     t({ "", "}" }),
+--   }),
+--   -- Alternative printf-like notation for defining snippets. It uses format
+--   -- string with placeholders similar to the ones used with Python's .format().
+--   s(
+--     "fmt1",
+--     fmt("To {title} {} {}.", {
+--       i(2, "Name"),
+--       i(3, "Surname"),
+--       title = c(1, { t("Mr."), t("Ms.") }),
+--     })
+--   ),
+--   -- To escape delimiters use double them, e.g. `{}` -> `{{}}`.
+--   -- Multi-line format strings by default have empty first/last line removed.
+--   -- Indent common to all lines is also removed. Use the third `opts` argument
+--   -- to control this behaviour.
+--   s(
+--     "fmt2",
+--     fmt(
+--       [[
+-- 		foo({1}, {3}) {{
+-- 			return {2} * {4}
+-- 		}}
+-- 		]],
+--       {
+--         i(1, "x"),
+--         rep(1),
+--         i(2, "y"),
+--         rep(2),
+--       }
+--     )
+--   ),
+--   -- Empty placeholders are numbered automatically starting from 1 or the last
+--   -- value of a numbered placeholder. Named placeholders do not affect numbering.
+--   s(
+--     "fmt3",
+--     fmt("{} {a} {} {1} {}", {
+--       t("1"),
+--       t("2"),
+--       a = t("A"),
+--     })
+--   ),
+--   -- The delimiters can be changed from the default `{}` to something else.
+--   s("fmt4", fmt("foo() { return []; }", i(1, "x"), { delimiters = "[]" })),
+--   -- `fmta` is a convenient wrapper that uses `<>` instead of `{}`.
+--   s("fmt5", fmta("foo() { return <>; }", i(1, "x"))),
+--   -- By default all args must be used. Use strict=false to disable the check
+--   s(
+--     "fmt6",
+--     fmt("use {} only", { t("this"), t("not this") }, { strict = false })
+--   ),
+--   -- Use a dynamic_node to interpolate the output of a
+--   -- function (see date_input above) into the initial
+--   -- value of an insert_node.
+--   s("novel", {
+--     t("It was a dark and stormy night on "),
+--     d(1, date_input, {}, { user_args = { "%A, %B %d of %Y" } }),
+--     t(" and the clocks were striking thirteen."),
+--   }),
+--   -- Parsing snippets: First parameter: Snippet-Trigger, Second: Snippet body.
+--   -- Placeholders are parsed into choices with 1. the placeholder text(as a snippet) and 2. an empty string.
+--   -- This means they are not SELECTed like in other editors/Snippet engines.
+--   ls.parser.parse_snippet(
+--     "lspsyn",
+--     "Wow! This ${1:Stuff} really ${2:works. ${3:Well, a bit.}}"
+--   ),
+
+--   -- When wordTrig is set to false, snippets may also expand inside other words.
+--   ls.parser.parse_snippet(
+--     { trig = "te", wordTrig = false },
+--     "${1:cond} ? ${2:true} : ${3:false}"
+--   ),
+
+--   -- When regTrig is set, trig is treated like a pattern, this snippet will expand after any number.
+--   ls.parser.parse_snippet({ trig = "%d", regTrig = true }, "A Number!!"),
+--   -- Using the condition, it's possible to allow expansion only in specific cases.
+--   s("cond", {
+--     t("will only expand in c-style comments"),
+--   }, {
+--     condition = function(line_to_cursor, matched_trigger, captures)
+--       -- optional whitespace followed by //
+--       return line_to_cursor:match("%s*//")
+--     end,
+--   }),
+--   -- there's some built-in conditions in "luasnip.extras.expand_conditions".
+--   s("cond2", {
+--     t("will only expand at the beginning of the line"),
+--   }, {
+--     condition = conds.line_begin,
+--   }),
+--   -- The last entry of args passed to the user-function is the surrounding snippet.
+--   s(
+--     { trig = "a%d", regTrig = true },
+--     f(function(_, snip)
+--       return "Triggered with " .. snip.trigger .. "."
+--     end, {})
+--   ),
+--   -- It's possible to use capture-groups inside regex-triggers.
+--   s(
+--     { trig = "b(%d)", regTrig = true },
+--     f(function(_, snip)
+--       return "Captured Text: " .. snip.captures[1] .. "."
+--     end, {})
+--   ),
+--   s({ trig = "c(%d+)", regTrig = true }, {
+--     t("will only expand for even numbers"),
+--   }, {
+--     condition = function(line_to_cursor, matched_trigger, captures)
+--       return tonumber(captures[1]) % 2 == 0
+--     end,
+--   }),
+--   -- Use a function to execute any shell command and print its text.
+--   s("bash", f(bash, {}, "ls")),
+--   -- Short version for applying String transformations using function nodes.
+--   s("transform", {
+--     i(1, "initial text"),
+--     t({ "", "" }),
+--     -- lambda nodes accept an l._1,2,3,4,5, which in turn accept any string transformations.
+--     -- This list will be applied in order to the first node given in the second argument.
+--     l(l._1:match("[^i]*$"):gsub("i", "o"):gsub(" ", "_"):upper(), 1),
+--   }),
+
+--   s("transform2", {
+--     i(1, "initial text"),
+--     t("::"),
+--     i(2, "replacement for e"),
+--     t({ "", "" }),
+--     -- Lambdas can also apply transforms USING the text of other nodes:
+--     l(l._1:gsub("e", l._2), { 1, 2 }),
+--   }),
+--   s({ trig = "trafo(%d+)", regTrig = true }, {
+--     -- env-variables and captures can also be used:
+--     l(l.CAPTURE1:gsub("1", l.TM_FILENAME), {}),
+--   }),
+--   -- Set store_selection_keys = "<Tab>" (for example) in your
+--   -- luasnip.config.setup() call to populate
+--   -- TM_SELECTED_TEXT/SELECT_RAW/SELECT_DEDENT.
+--   -- In this case: select a URL, hit Tab, then expand this snippet.
+--   s("link_url", {
+--     t('<a href="'),
+--     f(function(_, snip)
+--       -- TM_SELECTED_TEXT is a table to account for multiline-selections.
+--       -- In this case only the first line is inserted.
+--       return snip.env.TM_SELECTED_TEXT[1] or {}
+--     end, {}),
+--     t('">'),
+--     i(1),
+--     t("</a>"),
+--     i(0),
+--   }),
+--   -- Shorthand for repeating the text in a given node.
+--   s("repeat", { i(1, "text"), t({ "", "" }), rep(1) }),
+--   -- Directly insert the ouput from a function evaluated at runtime.
+--   s("part", p(os.date, "%Y")),
+--   -- use matchNodes (`m(argnode, condition, then, else)`) to insert text
+--   -- based on a pattern/function/lambda-evaluation.
+--   -- It's basically a shortcut for simple functionNodes:
+--   s("mat", {
+--     i(1, { "sample_text" }),
+--     t(": "),
+--     m(1, "%d", "contains a number", "no number :("),
+--   }),
+--   -- The `then`-text defaults to the first capture group/the entire
+--   -- match if there are none.
+--   s("mat2", {
+--     i(1, { "sample_text" }),
+--     t(": "),
+--     m(1, "[abc][abc][abc]"),
+--   }),
+--   -- It is even possible to apply gsubs' or other transformations
+--   -- before matching.
+--   s("mat3", {
+--     i(1, { "sample_text" }),
+--     t(": "),
+--     m(
+--       1,
+--       l._1:gsub("[123]", ""):match("%d"),
+--       "contains a number that isn't 1, 2 or 3!"
+--     ),
+--   }),
+--   -- `match` also accepts a function in place of the condition, which in
+--   -- turn accepts the usual functionNode-args.
+--   -- The condition is considered true if the function returns any
+--   -- non-nil/false-value.
+--   -- If that value is a string, it is used as the `if`-text if no if is explicitly given.
+--   s("mat4", {
+--     i(1, { "sample_text" }),
+--     t(": "),
+--     m(1, function(args)
+--       -- args is a table of multiline-strings (as usual).
+--       return (#args[1][1] % 2 == 0 and args[1]) or nil
+--     end),
+--   }),
+--   -- The nonempty-node inserts text depending on whether the arg-node is
+--   -- empty.
+--   s("nempty", {
+--     i(1, "sample_text"),
+--     n(1, "i(1) is not empty!"),
+--   }),
+--   -- dynamic lambdas work exactly like regular lambdas, except that they
+--   -- don't return a textNode, but a dynamicNode containing one insertNode.
+--   -- This makes it easier to dynamically set preset-text for insertNodes.
+--   s("dl1", {
+--     i(1, "sample_text"),
+--     t({ ":", "" }),
+--     dl(2, l._1, 1),
+--   }),
+--   -- Obviously, it's also possible to apply transformations, just like lambdas.
+--   s("dl2", {
+--     i(1, "sample_text"),
+--     i(2, "sample_text_2"),
+--     t({ "", "" }),
+--     dl(3, l._1:gsub("\n", " linebreak ") .. l._2, { 1, 2 }),
+--   }),
+-- }, {
+--   key = "all",
+-- })
+
 require("luasnip.loaders.from_lua").lazy_load({ paths = { "~/.config/nvim/snips" } })
 require("luasnip.loaders.from_vscode").lazy_load({ paths = { "~/.config/Code - Insiders/User/snippets" } })

dots/.config/nvim/after/plugin/m_taskwarrior_d.nvim.lua

@@ -0,0 +1,9 @@
+require("m_taskwarrior_d").setup()
+
+vim.api.nvim_create_autocmd({ "BufEnter", "BufWritePost" }, {
+  group = vim.api.nvim_create_augroup("TWTask", { clear = true }),
+  pattern = "*.md",
+  callback = function()
+    vim.cmd("TWSyncTasks")
+  end,
+})

dots/.config/nvim/after/plugin/nvim-highlight-colors.lua

@@ -1 +1,3 @@
+vim.opt.termguicolors = true
+
 require("nvim-highlight-colors").setup({})

dots/.config/nvim/after/plugin/nvim-lint.lua

@@ -28,6 +28,9 @@ require("lint").linters_by_ft = {
   yaml = { "yamllint" },
 }
 
+-- TODO: Wouldn't it be possible / nice to only try to load the linters when they are
+-- actually needed?
+
 vim.api.nvim_create_autocmd({ "BufEnter", "BufWritePost", "InsertLeave" }, {
   callback = function()
     require("lint").try_lint()

dots/.config/nvim/after/plugin/vim-tidal.vim.lua

@@ -1,28 +1,16 @@
-vim.g.tidal_default_config = { socket_name = "default", target_pane = "tidal:1.1" }
-vim.g.tidal_no_mappings = 1
+vim.cmd([[
+" Tidalcycles (sclang and vim-tidal)
+let g:tidal_default_config = {"socket_name": "default", "target_pane": "tidal:1.1"}
+let g:tidal_no_mappings = 1
 
-vim.api.nvim_create_autocmd("FileType", {
-  pattern = "tidal",
-  callback = function(e)
-    local buf = e.buf
-    vim.keymap.set("n", "<leader>ep", "<Plug>TidalParagraphSend", { buffer = buf, desc = "Tidal: send paragraph" })
-    vim.keymap.set("n", "<leader>ee", "<Plug>TidalLineSend", { buffer = buf, desc = "Tidal: send line" })
-    vim.keymap.set("n", "<leader>h", ":TidalHush<cr>", { buffer = buf, desc = "Tidal: hush" })
-    vim.api.nvim_buf_create_user_command(buf, "S", "TidalSilence <args>", { nargs = 1 })
-    vim.api.nvim_buf_create_user_command(buf, "P", "TidalPlay <args>", { nargs = 1 })
-    vim.api.nvim_buf_create_user_command(buf, "H", "TidalHush", { nargs = 0 })
-  end,
-})
+au FileType tidal nm <buffer> <leader>ep <Plug>TidalParagraphSend
+au FileType tidal nm <buffer> <leader>ee <Plug>TidalLineSend
+au FileType tidal nnoremap <buffer> <leader>h :TidalHush<cr>
+au FileType tidal com! -nargs=1 S :TidalSilence <args>
+au FileType tidal com! -nargs=1 P :TidalPlay <args>
+au FileType tidal com! -nargs=0 H :TidalHush
 
--- SuperCollider
-vim.api.nvim_create_autocmd({ "BufEnter", "BufWinEnter", "BufNewFile", "BufRead" }, {
-  pattern = { "*.sc", "*.scd" },
-  callback = function()
-    vim.bo.filetype = "supercollider"
-  end,
-})
-
-vim.api.nvim_create_autocmd("FileType", {
-  pattern = "supercollider",
-  command = "packadd scvim",
-})
+" SuperCollider
+au BufEnter,BufWinEnter,BufNewFile,BufRead *.sc,*.scd se filetype=supercollider
+au Filetype supercollider packadd scvim
+]])

dots/.config/nvim/after/plugin/wiki.vim.lua

@@ -1,8 +1,6 @@
-require("zk.utils")
-
 vim.cmd([[
 " Change local buffer to directory of current file after the plugin has loaded
-execute 'autocmd BufEnter' g:zk_path . '/*.md' 'silent lcd %:p:h'
+autocmd VimEnter * lcd %:p:h
 
 " " Override wiki index mapping to also cd into the wiki
 nm <leader>ww <plug>(wiki-index)
@@ -13,16 +11,11 @@ nm <leader>ww <plug>(wiki-index)
 " nm <leader>s <plug>(wiki-link-follow-split)
 " nm <leader>v <plug>(wiki-link-follow-vsplit)
 
-function! ZKContextualEcho()
-  let l:name = expand('%:t')
-  if l:name =~ '_' | echo 'hierarchical relation'
-  elseif l:name =~ '--' | echo 'relation'
-  elseif l:name =~ '<>' | echo 'dichotomy'
-  elseif l:name =~ 'my-' | echo 'personal file'
-  elseif l:name =~ 'project_' | echo 'project file'
-  endif
-endfunction
-execute 'autocmd BufEnter' g:zk_path . '/*.md' 'call ZKContextualEcho()'
+autocmd BufEnter *.md if expand('%:t') =~ '_' | echo 'hierarchical relation' | endif
+autocmd BufEnter *.md if expand('%:t') =~ '--' | echo 'relation' | endif
+autocmd BufEnter *.md if expand('%:t') =~ '<>' | echo 'dichotomy' | endif
+autocmd BufEnter *.md if expand('%:t') =~ 'my-' | echo 'personal file' | endif
+autocmd BufEnter *.md if expand('%:t') =~ 'project_' | echo 'project file' | endif
 
 " Only load wiki.vim for zk directory
 let g:wiki_index_name='index'
@@ -83,7 +76,7 @@ let g:wiki_templates = [
 "
 
 let g:wiki_filetypes=['md']
-let g:wiki_root=g:zk_path
+let g:wiki_root='~/.zk'
 let g:wiki_global_load=0
 let g:wiki_link_creation = {
       \ 'md': {

dots/.config/nvim/flake.lock

@@ -42,11 +42,11 @@
     },
     "nixCats": {
       "locked": {
-        "lastModified": 1777273601,
-        "narHash": "sha256-xBUa8Tl9V7IXI+VmLEuDc81La/EhoSn1C3EVSnJ3cfU=",
+        "lastModified": 1769578476,
+        "narHash": "sha256-4+KbiBcC6hQ3sh0UbPXjy6TOfLh9yhskRlfPzyZ2FH4=",
         "owner": "BirdeeHub",
         "repo": "nixCats-nvim",
-        "rev": "f69ea013e328841a7def7037ed59788a76be8816",
+        "rev": "48f8be4bdafccfa19ceaaf08071a15eca36fdb1d",
         "type": "github"
       },
       "original": {
@@ -73,11 +73,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1777270315,
-        "narHash": "sha256-yKB4G6cKsQsWN7M6rZGk6gkJPDNPIzT05y4qzRyCDlI=",
+        "lastModified": 1769740369,
+        "narHash": "sha256-xKPyJoMoXfXpDM5DFDZDsi9PHArf2k5BJjvReYXoFpM=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "6368eda62c9775c38ef7f714b2555a741c20c72d",
+        "rev": "6308c3b21396534d8aaeac46179c14c439a89b8a",
         "type": "github"
       },
       "original": {
@@ -106,11 +106,11 @@
     "plugins-helm-ls-nvim": {
       "flake": false,
       "locked": {
-        "lastModified": 1773934114,
-        "narHash": "sha256-8trqFsA7nTKSdtkiAL0Sa9bXjh5ONtAqN7XNE/B8ukM=",
+        "lastModified": 1768584652,
+        "narHash": "sha256-jnMc87OjURNcqsva0npYgVyUrWc5C6L7yHpNvt9eSmg=",
         "owner": "qvalentin",
         "repo": "helm-ls.nvim",
-        "rev": "20df43509b02a3ce3c6b3eee254d6e2bffa9a370",
+        "rev": "f0b9a1723890971a6d84890b50dbf5f40974ea1b",
         "type": "github"
       },
       "original": {
@@ -119,6 +119,22 @@
         "type": "github"
       }
     },
+    "plugins-m-taskwarrior-d-nvim": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767960157,
+        "narHash": "sha256-ov0qi4LhIlwqrBzSbTJ6APC5qjl2d/vlKWJfW5ZiDrg=",
+        "owner": "huantrinh1802",
+        "repo": "m_taskwarrior_d.nvim",
+        "rev": "107247387cd81823046bc2b8e71150c8edf041d3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "huantrinh1802",
+        "repo": "m_taskwarrior_d.nvim",
+        "type": "github"
+      }
+    },
     "plugins-mcphub-nvim": {
       "flake": false,
       "locked": {
@@ -190,6 +206,7 @@
         "nixpkgs": "nixpkgs_2",
         "plugins-beancount-nvim": "plugins-beancount-nvim",
         "plugins-helm-ls-nvim": "plugins-helm-ls-nvim",
+        "plugins-m-taskwarrior-d-nvim": "plugins-m-taskwarrior-d-nvim",
         "plugins-mcphub-nvim": "plugins-mcphub-nvim",
         "plugins-nvimkit-nvim": "plugins-nvimkit-nvim",
         "plugins-shipwright-nvim": "plugins-shipwright-nvim",

dots/.config/nvim/flake.nix

@@ -8,10 +8,10 @@
       url = "github:rktjmp/shipwright.nvim";
       flake = false;
     };
-    # plugins-m-taskwarrior-d-nvim = {
-    #   url = "github:huantrinh1802/m_taskwarrior_d.nvim";
-    #   flake = false;
-    # };
+    plugins-m-taskwarrior-d-nvim = {
+      url = "github:huantrinh1802/m_taskwarrior_d.nvim";
+      flake = false;
+    };
     plugins-beancount-nvim = {
       url = "github:polarmutex/beancount.nvim";
       flake = false;
@@ -37,6 +37,7 @@
 
   outputs =
     {
+      self,
       nixpkgs,
       nixCats,
       ...
@@ -45,38 +46,13 @@
       inherit (nixCats) utils;
       luaPath = ./.;
       forEachSystem = utils.eachSystem nixpkgs.lib.platforms.all;
-      extra_pkg_config = {
-        allowUnfreePredicate =
-          pkg:
-          builtins.elem (nixpkgs.lib.getName pkg) [
-            "vim-sandwich"
-            "jupytext.nvim"
-            "eyeliner.nvim"
-            "context_filetype.vim"
-            "editorconfig-vim"
-            "unicode.vim"
-            "quarto-nvim"
-            "vim-openscad"
-            "lsp_lines.nvim"
-            "nvim-highlight-colors"
-            "nvim-lint"
-          ];
-      };
+      extra_pkg_config = { };
 
       mkDependencyOverlays = system: [
         (utils.standardPluginOverlay inputs)
-        (_final: _prev: {
+        (final: prev: {
           mcp-hub = inputs.mcp-hub.packages.${system}.default;
         })
-        (_: prev: {
-          luajitPackages = prev.luajitPackages.overrideScope (
-            _: lprev: {
-              neotest = lprev.neotest.overrideAttrs (_: {
-                doCheck = false;
-              });
-            }
-          );
-        })
       ];
 
       categoryDefinitions =
@@ -87,11 +63,9 @@
         {
           lspsAndRuntimeDeps = with pkgs; {
             general = [
-              nodejs_24
               black
               clang
               clang-tools
-              curl # → plenary-nvim, mcp-hub
               delta
               emmet-language-server
               eslint_d
@@ -105,8 +79,8 @@
               mcp-hub
               nixd
               nixfmt
-              prettier
-              typescript-language-server
+              nodePackages.prettier
+              nodePackages.typescript-language-server
               ormolu
               prettierd
               rust-analyzer
@@ -115,8 +89,6 @@
               stylelint
               stylua
               tree-sitter
-              tailwindcss-language-server
-              typescript-language-server
               vscode-langservers-extracted
               vtsls
               yaml-language-server
@@ -192,7 +164,7 @@
               kitty-scrollback-nvim
               fidget-nvim
               rustaceanvim
-              # pkgs.neovimPlugins.m-taskwarrior-d-nvim
+              pkgs.neovimPlugins.m-taskwarrior-d-nvim
               claude-code-nvim
             ];
           };

dots/.config/nvim/ftplugin/json.lua

@@ -1,12 +1,15 @@
 local json_newline = function()
   local line = vim.api.nvim_get_current_line()
   if line == "" then
+    print("line is empty")
     return "o"
   elseif string.byte(line, -1) == string.byte(",") then
     return "o"
   elseif string.byte(line, -1) == string.byte("{") then
+    print("line ends with '{'")
     return "o"
   elseif string.byte(line, -1) == string.byte("}") then
+    print("line ends with '}'")
     return "o"
   else
     return "A,<CR>"

dots/.config/nvim/lua/base.lua

@@ -26,4 +26,5 @@ set lcs=trail:·,tab:→\ ,nbsp:␣         " Whitespace rendering
 set ar                                 " Autoread
 set spellsuggest+=5                    " Limit spell suggestions
 set wildignore+=*/node_modules/*,*/tmp/*,*.so,*.swp,*.zip
+" set thesaurus+=./thesaurus/mthesaur.txt " FIXME
 ]])

dots/.config/nvim/lua/ftdetect.lua

@@ -9,6 +9,5 @@ vim.filetype.add({
     ["%.env.*"] = "dotenv",
     ["%.pl$"] = "prolog",
     [".*.containerfile.*"] = "dockerfile",
-    ["%.hydra$"] = "javascript",
   },
 })

dots/.config/nvim/lua/keymaps.lua

@@ -1,57 +1,60 @@
-vim.g.mapleader = " "
-vim.g.maplocalleader = ";"
+vim.cmd([[
+" Leader keys
+let mapleader = " "
+let maplocalleader = ";"
+
+" Splits & navigation
+nm s <c-w>           " Split horizontal
+nm ss :sp<CR><c-w>w| " Split horizontal
+nm sv :vs<CR><c-w>w| " Split vertical
+nm sw <c-w>w|        " Navigate splits
+nm sh <c-w>h|        "
+nm sj <c-w>j|        "
+nm sk <c-w>k|        "
+nm sl <c-w>l|        "
+nn sH <c-w>8<|       " Resize splits
+nn sJ <c-w>8-|       "
+nn sK <c-w>8+|       "
+nn sL <c-w>8>|       "
+nn s= <c-w>=|        " Equalize splits
+
+" Open
+nn sb :Lex<cr>|          " File tree
+nn <leader><leader> :noh<cr> |"
+nn <leader>t :term<cr>| " Open terminal
+
+" Remaps
+ino <nowait> jj <esc>|   " Normal now
+nn  <left>  <nop>|       " Hard mode
+nn  <down>  <nop>|       " "
+nn  <up>    <nop>|       " "
+nn  <right> <nop>|       " "
+ino <left>  <nop>|       " "
+ino <down>  <nop>|       " "
+ino <up>    <nop>|       " "
+ino <right> <nop>|       " "
+
+" Search
+nn <c-_> :noh<cr>| " map 'ctrl + /'
+
+" Line numbers
+nn <leader>n :set nu! rnu!<cr>
+
+" Vim configuration
+nn <leader>ec :vs $MYVIMRC<cr>
+nn <leader>so :so %<cr>
+]])
 
 local set = vim.keymap.set
 
--- splits & navigation
-set("n", "s", "<c-w>", { desc = "window prefix" })
-set("n", "ss", ":sp<CR><c-w>w", { desc = "split horizontal" })
-set("n", "sv", ":vs<CR><c-w>w", { desc = "split vertical" })
-set("n", "sw", "<c-w>w", { desc = "navigate splits" })
-set("n", "sh", "<c-w>h", { desc = "focus left split" })
-set("n", "sj", "<c-w>j", { desc = "focus below split" })
-set("n", "sk", "<c-w>k", { desc = "focus above split" })
-set("n", "sl", "<c-w>l", { desc = "focus right split" })
-set("n", "sH", "<c-w>8<", { desc = "shrink split left" })
-set("n", "sJ", "<c-w>8-", { desc = "shrink split down" })
-set("n", "sK", "<c-w>8+", { desc = "grow split up" })
-set("n", "sL", "<c-w>8>", { desc = "grow split right" })
-set("n", "s=", "<c-w>=", { desc = "equalize splits" })
+set("n", "<leader>cx", "<cmd>!chmod +x %<CR>", { silent = true, desc = "Run `chmod +x` on current file" })
+set("n", "yp", "<cmd>let @+ = expand('%r')<CR>:p<CR>", { silent = true, desc = "Yank path" })
 
--- open
-set("n", "sb", ":Lex<cr>", { desc = "file tree" })
-set("n", "<leader><leader>", ":noh<cr>", { desc = "clear highlights" })
-set("n", "<leader>t", ":term<cr>", { desc = "open terminal" })
+-- Remap native NeoVim comment keymaps
+set({ "n", "x" }, "<leader>c", "gc", { remap = true, desc = "Toggle comment" })
+set("n", "<leader>cc", "gcc", { remap = true, desc = "Toggle comment line" })
+set("o", "<leader>c", "gc", { remap = true, desc = "Comment textobject" })
 
--- remaps
-set("i", "jj", "<esc>", { nowait = true, desc = "exit insert mode" })
-set("n", "<left>", "<nop>")
-set("n", "<down>", "<nop>")
-set("n", "<up>", "<nop>")
-set("n", "<right>", "<nop>")
-set("i", "<left>", "<nop>")
-set("i", "<down>", "<nop>")
-set("i", "<up>", "<nop>")
-set("i", "<right>", "<nop>")
-
--- search
-set("n", "<c-_>", ":noh<cr>", { desc = "clear search highlight" })
-
--- line numbers
-set("n", "<leader>n", ":set nu! rnu!<cr>", { desc = "toggle line numbers" })
-
--- vim configuration
-set("n", "<leader>ec", ":vs $MYVIMRC<cr>", { desc = "edit vimrc" })
-set("n", "<leader>so", ":so %<cr>", { desc = "source current file" })
-
-set("n", "<leader>cx", "<cmd>!chmod +x %<CR>", { silent = true, desc = "run `chmod +x` on current file" })
-set("n", "yp", "<cmd>let @+ = expand('%r')<CR>:p<CR>", { silent = true, desc = "yank path" })
-
--- remap native NeoVim comment keymaps
-set({ "n", "x" }, "<leader>c", "gc", { remap = true, desc = "toggle comment" })
-set("n", "<leader>cc", "gcc", { remap = true, desc = "toggle comment line" })
-set("o", "<leader>c", "gc", { remap = true, desc = "comment textobject" })
-
--- move lines
-set("v", "K", ": '<,'>move '<-2<cr>gv", { desc = "move selection up" })
-set("v", "J", ": '<,'>move '>+1<cr>gv", { desc = "move selection down" })
+-- Move lines
+set("v", "K", ": '<,'>move '<-2<cr>gv")
+set("v", "J", ": '<,'>move '>+1<cr>gv")

dots/.config/nvim/lua/skeleton/init.lua

@@ -2,10 +2,10 @@ local autocmd = vim.api.nvim_create_autocmd
 
 autocmd("BufNewFile", {
   pattern = "shell.nix",
-  command = "0r ~/.config/nvim/skeletons/shell.nix.skeleton",
+  command = "0r ~/.config/nvim/skeletons/shell.nix",
 })
 
 autocmd("BufNewFile", {
   pattern = "flake.nix",
-  command = "0r ~/.config/nvim/skeletons/flake.nix.skeleton",
+  command = "0r ~/.config/nvim/skeletons/flake.nix",
 })

dots/.config/nvim/lua/zk/cmp.lua

@@ -13,19 +13,13 @@ local function get_markdown_files(base)
   return items
 end
 
-function source:get_keyword_pattern()
-  return "[%w%./%-]*"
-end
-
 function source:complete(params, callback)
   local cursor_before_line = params.context.cursor_before_line
   local cursor_after_line = params.context.cursor_after_line or ""
 
-  if not cursor_before_line:match("%[[^%]]*%]%(") then
-    callback({})
-    return
-  end
+  local trigger = cursor_before_line:match("%[[^%]]*%]%(([^)]*)$")
 
+  if trigger ~= nil then
     local items = get_markdown_files(".")
     local next_char = cursor_after_line:sub(1, 1)
 
@@ -38,6 +32,9 @@ function source:complete(params, callback)
     end
 
     callback(items)
+  else
+    callback({})
+  end
 end
 
 function source:get_trigger_characters()

dots/.config/nvim/lua/zk/init.lua

@@ -1,10 +1,9 @@
 require("zk.cmp")
-require("zk.utils")
 
 vim.cmd([[
 let s:zk_preview_enabled = 0
 let s:live_server_job = -1
-execute 'au BufEnter' g:zk_path . '/*.md' 'silent exe "!echo %" ">" g:zk_path . "/current-zettel.txt"'
+au BufEnter /home/h/.zk/*.md silent exe '!echo "%" > /home/h/.zk/current-zettel.txt'
 function! ToggleZKPreview()
     if s:zk_preview_enabled == 1
         let s:zk_preview_enabled = 0
@@ -12,10 +11,10 @@ function! ToggleZKPreview()
         au! ZKPreview
     else
         let s:zk_preview_enabled = 1
-        let s:live_server_job = jobstart('live-server --watch=' . g:zk_path . '/current-zettel-content.html --open=current-zettel-content.html --port=8080')
+        let s:live_server_job = jobstart('live-server --watch=/home/h/.zk/current-zettel-content.html --open=current-zettel-content.html --port=8080')
         augroup ZKPreview
-          execute 'au BufEnter' g:zk_path . '/*.md' 'silent exe "!cat %:r.html" ">" g:zk_path . "/current-zettel-content.html"'
-          execute 'au BufWritePost' g:zk_path . '/*.md' 'silent exe "!make && cat %:r.html" ">" g:zk_path . "/current-zettel-content.html"'
+          au BufEnter /home/h/.zk/*.md silent exe '!cat "%:r.html" > /home/h/.zk/current-zettel-content.html'
+          au BufWritePost /home/h/.zk/*.md silent exe '!make && cat "%:r.html" > /home/h/.zk/current-zettel-content.html'
         augroup END
     endif
 endfunction

dots/.config/nvim/lua/zk/utils.lua

@@ -1,2 +0,0 @@
-vim.g.zk_path = os.getenv("ZK_PATH") or (os.getenv("HOME") .. "/.zk")
-return vim.g.zk_path

dots/.config/nvim/snips/all.lua

@@ -17,7 +17,7 @@ local LOCALHOST_IP = "127.0.0.1"
 
 return {
   s({ trig = "fn", desc = "Filename" }, { f(TM_FILENAME_BASE) }),
-  s({ trig = "fne", desc = "Filename (+extension)" }, { f(TM_FILENAME) }),
+  s({ trig = "fne", dscr = "Filename (+extension)" }, { f(TM_FILENAME) }),
   s({ trig = "hm" }, { t(NAME) }),
   s({ trig = "loho" }, { t(LOCALHOST) }),
   s({ trig = "lohoi" }, { t(LOCALHOST_IP) }),

dots/.config/nvim/snips/css.lua

@@ -5,112 +5,112 @@ local i = ls.insert_node
 
 return {
   -- Flex
-  s({ trig = "b1", desc = "Add 'border: 1px <color>;'" }, {
+  s({ trig = "b1", dscr = "Add 'border: 1px <color>;'" }, {
     t("border: 1px solid "),
     i(1),
     t(";"),
     i(0),
   }),
-  s({ trig = "dfl", desc = "Add 'display: flex;'" }, {
+  s({ trig = "dfl", dscr = "Add 'display: flex;'" }, {
     t("display: flex;"),
     i(0),
   }),
-  s({ trig = "flr", desc = "Add 'flex-direction: row;'" }, {
+  s({ trig = "flr", dscr = "Add 'flex-direction: row;'" }, {
     t("flex-direction: row;"),
     i(0),
   }),
-  s({ trig = "flc", desc = "Add 'flex-direction: column;'" }, {
+  s({ trig = "flc", dscr = "Add 'flex-direction: column;'" }, {
     t("flex-direction: column;"),
     i(0),
   }),
-  s({ trig = "flw", desc = "Add 'flex-wrap: wrap;'" }, {
+  s({ trig = "flw", dscr = "Add 'flex-wrap: wrap;'" }, {
     t("flex-wrap: wrap;"),
     i(0),
   }),
-  s({ trig = "dfc", desc = "Add 'flex-direction: column;'" }, {
+  s({ trig = "dfc", dscr = "Add 'flex-direction: column;'" }, {
     t("display: flex;"),
     t("flex-direction: column;"),
     i(0),
   }),
   -- Grid
-  s({ trig = "dg", desc = "Add 'display: grid;'" }, {
+  s({ trig = "dg", dscr = "Add 'display: grid;'" }, {
     t("display: grid;"),
     i(0),
   }),
   -- Block
-  s({ trig = "db", desc = "Add 'display: block;'" }, {
+  s({ trig = "db", dscr = "Add 'display: block;'" }, {
     t("display: block;"),
     i(0),
   }),
   -- None
-  s({ trig = "dn", desc = "Add 'display: none;'" }, {
+  s({ trig = "dn", dscr = "Add 'display: none;'" }, {
     t("display: none;"),
     i(0),
   }),
   -- CSS Variables
-  s({ trig = "v", desc = "Add CSS variable" }, {
+  s({ trig = "v", dscr = "Add CSS variable" }, {
     t("var(--"),
     i(1),
     t(")"),
     i(0),
   }),
   -- Margin
-  s({ trig = "m", desc = "Add 'margin: ;'" }, {
+  s({ trig = "m", dscr = "Add 'margin: ;'" }, {
     t("margin: "),
     i(1),
     t(";"),
     i(0),
   }),
-  s({ trig = "mt", desc = "Add 'margin-top: ;'" }, {
+  s({ trig = "mt", dscr = "Add 'margin-top: ;'" }, {
     t("margin-top: "),
     i(1),
     t(";"),
     i(0),
   }),
-  s({ trig = "mr", desc = "Add 'margin-right: ;'" }, {
+  s({ trig = "mr", dscr = "Add 'margin-right: ;'" }, {
     t("margin-right: "),
     i(1),
     t(";"),
     i(0),
   }),
-  s({ trig = "mb", desc = "Add 'margin-bottom: ;'" }, {
+  s({ trig = "mb", dscr = "Add 'margin-bottom: ;'" }, {
     t("margin-bottom: "),
     i(1),
     t(";"),
     i(0),
   }),
-  s({ trig = "ml", desc = "Add 'margin-left: ;'" }, {
+  s({ trig = "ml", dscr = "Add 'margin-left: ;'" }, {
     t("margin-left: "),
     i(1),
     t(";"),
     i(0),
   }),
   -- Padding
-  s({ trig = "p", desc = "Add 'padding: ;'" }, {
+  s({ trig = "p", dscr = "Add 'padding: ;'" }, {
     t("padding: "),
     i(1),
     t(";"),
     i(0),
   }),
-  s({ trig = "pt", desc = "Add 'padding-top: ;'" }, {
+  s({ trig = "pt", dscr = "Add 'padding-top: ;'" }, {
     t("padding-top: "),
     i(1),
     t(";"),
     i(0),
   }),
-  s({ trig = "pr", desc = "Add 'padding-right: ;'" }, {
+  s({ trig = "pr", dscr = "Add 'padding-right: ;'" }, {
     t("padding-right: "),
     i(1),
     t(";"),
     i(0),
   }),
-  s({ trig = "pb", desc = "Add 'padding-bottom: ;'" }, {
+  s({ trig = "pb", dscr = "Add 'padding-bottom: ;'" }, {
     t("padding-bottom: "),
     i(1),
     t(";"),
     i(0),
   }),
-  s({ trig = "pl", desc = "Add 'padding-left: ;'" }, {
+  s({ trig = "pl", dscr = "Add 'padding-left: ;'" }, {
     t("padding-left: "),
     i(1),
     t(";"),

dots/.config/nvim/snips/javascript.lua

@@ -4,19 +4,19 @@ local t = ls.text_node
 local i = ls.insert_node
 
 return {
-  s({ trig = "clg", desc = "console.log" }, {
+  s({ trig = "clg", dscr = "console.log" }, {
     t("console.log("),
     i(1),
     t(")"),
     i(0),
   }),
-  s({ trig = "Js", desc = "JSON.stringify" }, {
+  s({ trig = "Js", dscr = "JSON.stringify" }, {
     t("JSON.stringify("),
     i(1),
     t(")"),
     i(0),
   }),
-  s({ trig = "Jsf", desc = "JSON.stringify (formatted)" }, {
+  s({ trig = "Jsf", dscr = "JSON.stringify (formatted)" }, {
     t("JSON.stringify("),
     i(1),
     t(", 0, 2)"),

dots/.config/nvim/snips/pandoc.lua

@@ -915,21 +915,21 @@ end
 
 return {
   s(
-    { trig = "^h", regTrig = true, desc = "Markdown header" },
+    { trig = "^h", regTrig = true, dscr = "Markdown header" },
     fmta("# <><>", {
       d(1, get_visual),
       i(0),
     })
   ),
   s(
-    { trig = "^sec", regTrig = true, desc = "Markdown header" },
+    { trig = "^sec", regTrig = true, dscr = "Markdown header" },
     fmta("## <><>", {
       d(1, get_visual),
       i(0),
     })
   ),
   s(
-    { trig = "^ssec", regTrig = true, desc = "Markdown header" },
+    { trig = "^ssec", regTrig = true, dscr = "Markdown header" },
     fmta("### <><>", {
       d(1, get_visual),
       i(0),

dots/.config/nvim/vscode.lua

@@ -1,5 +1,11 @@
+local cmd = vim.cmd
 local map = vim.keymap.set
 
+cmd([[
+source ~/.vim/init/base.vim
+source ~/.vim/init/mappings.vim
+]])
+
 require("keymaps")
 
 map({ "n", "v" }, "<leader>p", '<cmd>call VSCodeNotify("workbench.action.quickOpen")<cr>')

dots/.config/tmux/hooks/tmux.regular.conf

@@ -0,0 +1 @@
+set  -g status-style bg=default

dots/.config/tmux/hooks/tmux.ssh.conf

@@ -0,0 +1 @@
+set  -g status-style bg=blue,fg=black;

dots/.config/tmux/themes/zenwritten_dark.tmux

@@ -0,0 +1,22 @@
+# This file is based on the one provided by shipwright.nvim
+set -g @FG '#dddddd'
+set -g @BG '#111111'
+
+set -g status-left ' #[fg=#{@FG},bold]#{s/root//:client_key_table} '
+set -g status-right '#[fg=#{@FG},bold] [#S]#[fg=#{@FG},bold] [%d/%m] #[fg=#{@FG},bold][%I:%M%p] '
+set -g status-style fg='#{@FG}',bg='#{@BG}'
+
+set -g window-status-current-style fg='#{@FG}',bg='#{@BG}',bold
+
+set -g pane-border-style fg='#{@FG}'
+set -g pane-active-border-style fg='#{@FG}'
+
+set -g message-style fg='#{@FG}',bg='#{@FG}'
+
+set -g display-panes-active-colour '#{@FG}'
+set -g display-panes-colour '#{@FG}'
+
+set -g clock-mode-colour '#{@FG}'
+
+set -g mode-style fg='#{@FG}',bg='#{@FG}'
+

dots/.config/tmux/themes/zenwritten_light.tmux

@@ -0,0 +1,22 @@
+# This file is based on the one provided by shipwright.nvim
+set -g @FG '#111111'
+set -g @BG '#dddddd'
+
+set -g status-left ' #[fg=#{@FG},bold]#{s/root//:client_key_table} '
+set -g status-right '#[fg=#{@FG},bold] [#S]#[fg=#{@FG},bold] [%d/%m] #[fg=#{@FG},bold][%I:%M%p] '
+set -g status-style fg='#{@FG}',bg='#{@BG}'
+
+set -g window-status-current-style fg='#{@FG}',bg='#{@BG}',bold
+
+set -g pane-border-style fg='#{@FG}'
+set -g pane-active-border-style fg='#{@FG}'
+
+set -g message-style fg='#{@FG}',bg='#{@FG}'
+
+set -g display-panes-active-colour '#{@FG}'
+set -g display-panes-colour '#{@FG}'
+
+set -g clock-mode-colour '#{@FG}'
+
+set -g mode-style fg='#{@FG}',bg='#{@FG}'
+

dots/.config/tmux/tmux.conf

@@ -68,7 +68,20 @@ set -g status-left '#h '
 set -g status-right '#(uptime | cut -f 4-5 -d " " | cut -f 1 -d ",") %a %l:%M:%S %p %Y-%m-%d'
 %endif
 
+# theming
+%if "#{==:#{host},desktop-arch}"
 set  -g default-terminal "tmux-256color"
+setw -g window-status-style fg=colour244,bg=default
+setw -g window-status-current-style fg=colour232,bg=default,bold
+set  -g message-style fg=colour232,bg=default
+setw -g clock-mode-colour colour235
+set  -g status-style bg=default
+set  -g pane-border-style fg=#cccccc
+set  -g pane-active-border-style fg=#555555
+set  -g message-style bg=#cccccc,fg=#000000
+%endif
+
+set-hook -g after-new-session 'if -F "#{==:#{session_name},ssh}" "source ${XDG_CONFIG_HOME}/tmux/hooks/tmux.ssh.conf" "source ${XDG_CONFIG_HOME}/tmux/hooks/tmux.regular.conf"'
 
 # Vi copypaste mode
 if-shell "test '\( #{$TMUX_VERSION_MAJOR} -eq 2 -a #{$TMUX_VERSION_MINOR} -ge 4 \)'" 'bind-key -Tcopy-mode-vi v send -X begin-selection; bind-key -Tcopy-mode-vi y send -X copy-selection-and-cancel'

dots/.config/tmux/tmux.regular.conf

@@ -0,0 +1 @@
+set  -g status-style bg=default

dots/.gitconfig

@@ -93,6 +93,3 @@
 
 [includeIf "gitdir:~/work/"]
   path = ~/.gitconfig.work
-
-[includeIf "gitdir:~/nix-dev-shells/"]
-  path = ~/.gitconfig.work

dots/.gitignore

@@ -86,7 +86,6 @@ dkms.conf
 .env
 .envrc
 .direnv/
-.pre-commit-config.yaml
 
 # Prevent module files from being ignored (e.g. NestJS)
 !*.module*

dots/.resticexclude

@@ -0,0 +1,44 @@
+# Restic ignore
+
+# General
+.trash
+Trash
+.cache
+cache
+Cache
+CachedData
+CachedExtension
+CacheStorage
+__pycache__
+GPUCache
+ShaderCache
+build
+.git
+node_modules
+venv
+env
+
+# Specifics
+$HOME/.android
+$HOME/.atom
+$HOME/.build
+$HOME/.cabal
+$HOME/.cargo
+$HOME/.conda
+$HOME/.config/BraveSoftware/Brave-Browser/Default/Local Storage
+$HOME/.config/BraveSoftware/Brave-Browser/Default/Local Extension Settings
+$HOME/.config/nvm/versions
+$HOME/.config/devcert
+$HOME/.espressif
+$HOME/.local/share/torbrowser
+$HOME/.mozilla
+$HOME/.nvm
+$HOME/.npm
+$HOME/.nuget
+$HOME/.yarn
+$HOME/.config/yarn
+$HOME/doc/disk-images
+$HOME/.stremio-server
+$HOME/Games
+!$HOME/Games/*/drive_c/users/h/AppData
+!$HOME/Games/rhino

dots/.resticinclude

@@ -0,0 +1,3 @@
+/etc
+/boot
+/home

flake.lock

@@ -1,73 +1,5 @@
 {
   "nodes": {
-    "base16": {
-      "inputs": {
-        "fromYaml": "fromYaml"
-      },
-      "locked": {
-        "lastModified": 1755819240,
-        "narHash": "sha256-qcMhnL7aGAuFuutH4rq9fvAhCpJWVHLcHVZLtPctPlo=",
-        "owner": "SenchoPens",
-        "repo": "base16.nix",
-        "rev": "75ed5e5e3fce37df22e49125181fa37899c3ccd6",
-        "type": "github"
-      },
-      "original": {
-        "owner": "SenchoPens",
-        "repo": "base16.nix",
-        "type": "github"
-      }
-    },
-    "base16-fish": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1765809053,
-        "narHash": "sha256-XCUQLoLfBJ8saWms2HCIj4NEN+xNsWBlU1NrEPcQG4s=",
-        "owner": "tomyun",
-        "repo": "base16-fish",
-        "rev": "86cbea4dca62e08fb7fd83a70e96472f92574782",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tomyun",
-        "repo": "base16-fish",
-        "rev": "86cbea4dca62e08fb7fd83a70e96472f92574782",
-        "type": "github"
-      }
-    },
-    "base16-helix": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1776754714,
-        "narHash": "sha256-E3OAK27smtATTmX45uoTSRsVD+Y+ZiVVfgM/tjpbtYg=",
-        "owner": "tinted-theming",
-        "repo": "base16-helix",
-        "rev": "4d508123037e7851ad36ebf7d9c48b0e9e1eb581",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "base16-helix",
-        "type": "github"
-      }
-    },
-    "base16-vim": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1732806396,
-        "narHash": "sha256-e0bpPySdJf0F68Ndanwm+KWHgQiZ0s7liLhvJSWDNsA=",
-        "owner": "tinted-theming",
-        "repo": "base16-vim",
-        "rev": "577fe8125d74ff456cf942c733a85d769afe58b7",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "base16-vim",
-        "rev": "577fe8125d74ff456cf942c733a85d769afe58b7",
-        "type": "github"
-      }
-    },
     "colmena": {
       "inputs": {
         "flake-compat": "flake-compat",
@@ -121,11 +53,11 @@
       },
       "locked": {
         "dir": "pkgs/firefox-addons",
-        "lastModified": 1778040175,
-        "narHash": "sha256-SSXJp3BMjO2LrW/VLjNdGGcjd3RFEyV4FemYA6OGrYw=",
+        "lastModified": 1770177820,
+        "narHash": "sha256-0iGDl/ct3rW+h6+sLq4RZaze/U/aQo2L5sLLuyjuVTk=",
         "owner": "rycee",
         "repo": "nur-expressions",
-        "rev": "3bd76b0f41e65661866bddcac57ebe83aeadb581",
+        "rev": "c7794d3f46304de5234008c31b5b28a9d5709184",
         "type": "gitlab"
       },
       "original": {
@@ -135,22 +67,6 @@
         "type": "gitlab"
       }
     },
-    "firefox-gnome-theme": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1776136500,
-        "narHash": "sha256-r0gN2brVWA351zwMV0Flmlcd6SGMvYqFbvC3DfKFM8Y=",
-        "owner": "rafaelmardojai",
-        "repo": "firefox-gnome-theme",
-        "rev": "0f8ba203d475587f477e7ae12661bd8459e225b7",
-        "type": "github"
-      },
-      "original": {
-        "owner": "rafaelmardojai",
-        "repo": "firefox-gnome-theme",
-        "type": "github"
-      }
-    },
     "flake-compat": {
       "flake": false,
       "locked": {
@@ -205,27 +121,6 @@
         "type": "github"
       }
     },
-    "flake-parts_2": {
-      "inputs": {
-        "nixpkgs-lib": [
-          "stylix",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1775087534,
-        "narHash": "sha256-91qqW8lhL7TLwgQWijoGBbiD4t7/q75KTi8NxjVmSmA=",
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "rev": "3107b77cd68437b9a76194f0f7f9c55f2329ca5b",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "type": "github"
-      }
-    },
     "flake-utils": {
       "locked": {
         "lastModified": 1659877975,
@@ -259,22 +154,6 @@
         "type": "github"
       }
     },
-    "fromYaml": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1731966426,
-        "narHash": "sha256-lq95WydhbUTWig/JpqiB7oViTcHFP8Lv41IGtayokA8=",
-        "owner": "SenchoPens",
-        "repo": "fromYaml",
-        "rev": "106af9e2f715e2d828df706c386a685698f3223b",
-        "type": "github"
-      },
-      "original": {
-        "owner": "SenchoPens",
-        "repo": "fromYaml",
-        "type": "github"
-      }
-    },
     "git-hooks": {
       "inputs": {
         "flake-compat": "flake-compat_2",
@@ -284,11 +163,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1776796298,
-        "narHash": "sha256-PcRvlWayisPSjd0UcRQbhG8Oqw78AcPE6x872cPRHN8=",
+        "lastModified": 1769939035,
+        "narHash": "sha256-Fok2AmefgVA0+eprw2NDwqKkPGEI5wvR+twiZagBvrg=",
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "3cfd774b0a530725a077e17354fbdb87ea1c4aad",
+        "rev": "a8ca480175326551d6c4121498316261cbb5b260",
         "type": "github"
       },
       "original": {
@@ -318,23 +197,6 @@
         "type": "github"
       }
     },
-    "gnome-shell": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1767737596,
-        "narHash": "sha256-eFujfIUQDgWnSJBablOuG+32hCai192yRdrNHTv0a+s=",
-        "owner": "GNOME",
-        "repo": "gnome-shell",
-        "rev": "ef02db02bf0ff342734d525b5767814770d85b49",
-        "type": "github"
-      },
-      "original": {
-        "owner": "GNOME",
-        "repo": "gnome-shell",
-        "rev": "ef02db02bf0ff342734d525b5767814770d85b49",
-        "type": "github"
-      }
-    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -342,11 +204,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1778009629,
-        "narHash": "sha256-nUoQtf4Zq7DRYJrfv904hjrxjAlWVP6a1pNNFKx3FCg=",
+        "lastModified": 1770263241,
+        "narHash": "sha256-R1WFtIvp38hS9x63dnijdJw1KyIiy30KGea6e6N7LHs=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "00ed86e58bb6979a7921859fd1615d19382eac5c",
+        "rev": "04e5203db66417d548ae1ff188a9f591836dfaa7",
         "type": "github"
       },
       "original": {
@@ -374,6 +236,29 @@
         "type": "github"
       }
     },
+    "nix-formatter-pack": {
+      "inputs": {
+        "nixpkgs": [
+          "nix-on-droid",
+          "nixpkgs"
+        ],
+        "nmd": "nmd",
+        "nmt": "nmt"
+      },
+      "locked": {
+        "lastModified": 1705252799,
+        "narHash": "sha256-HgSTREh7VoXjGgNDwKQUYcYo13rPkltW7IitHrTPA5c=",
+        "owner": "Gerschtli",
+        "repo": "nix-formatter-pack",
+        "rev": "2de39dedd79aab14c01b9e2934842051a160ffa5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Gerschtli",
+        "repo": "nix-formatter-pack",
+        "type": "github"
+      }
+    },
     "nix-github-actions": {
       "inputs": {
         "nixpkgs": [
@@ -395,13 +280,41 @@
         "type": "github"
       }
     },
+    "nix-on-droid": {
+      "inputs": {
+        "home-manager": [
+          "home-manager"
+        ],
+        "nix-formatter-pack": "nix-formatter-pack",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "nixpkgs-docs": "nixpkgs-docs",
+        "nixpkgs-for-bootstrap": "nixpkgs-for-bootstrap",
+        "nmd": "nmd_2"
+      },
+      "locked": {
+        "lastModified": 1720396533,
+        "narHash": "sha256-UFzk/hZWO1VkciIO5UPaSpJN8s765wsngUSvtJM6d5Q=",
+        "owner": "nix-community",
+        "repo": "nix-on-droid",
+        "rev": "f3d3b8294039f2f9a8fb7ea82c320f29c6b0fe25",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "release-24.05",
+        "repo": "nix-on-droid",
+        "type": "github"
+      }
+    },
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1776723456,
-        "narHash": "sha256-GBbbm05oXYqSZ2EgxQPsNpTKl16wNhvrlUxdmv0FbSU=",
+        "lastModified": 1770135527,
+        "narHash": "sha256-Fup9LiyL6bDID3x+rAB2nP99Xv2o9Is5NkTDbmIy6o0=",
         "ref": "main",
-        "rev": "135b681d24af6ee4508bbf7c657982d7be8743d4",
+        "rev": "521d144f8a8ff9fca8ccf492d7fbdd05d9a5fe37",
         "shallow": true,
         "type": "git",
         "url": "ssh://git@github.com/hektor/nix-secrets"
@@ -415,11 +328,11 @@
     },
     "nixCats": {
       "locked": {
-        "lastModified": 1777273601,
-        "narHash": "sha256-xBUa8Tl9V7IXI+VmLEuDc81La/EhoSn1C3EVSnJ3cfU=",
+        "lastModified": 1769578476,
+        "narHash": "sha256-4+KbiBcC6hQ3sh0UbPXjy6TOfLh9yhskRlfPzyZ2FH4=",
         "owner": "BirdeeHub",
         "repo": "nixCats-nvim",
-        "rev": "f69ea013e328841a7def7037ed59788a76be8816",
+        "rev": "48f8be4bdafccfa19ceaaf08071a15eca36fdb1d",
         "type": "github"
       },
       "original": {
@@ -451,11 +364,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1777917524,
-        "narHash": "sha256-k+LVe9YaO2BEPB9AaCtTtOMCeGi4dxDo6gt4Un3qoPY=",
+        "lastModified": 1769302137,
+        "narHash": "sha256-QEDtctEkOsbx8nlFh4yqPEOtr4tif6KTqWwJ37IM2ds=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "df7783100babf59001340a7a874ba3824e441ecb",
+        "rev": "a351494b0e35fd7c0b7a1aae82f0afddf4907aa8",
         "type": "github"
       },
       "original": {
@@ -467,11 +380,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1777954456,
-        "narHash": "sha256-hGdgeU2Nk87RAuZyYjyDjFL6LK7dAZN5RE9+hrDTkDU=",
+        "lastModified": 1770197578,
+        "narHash": "sha256-AYqlWrX09+HvGs8zM6ebZ1pwUqjkfpnv8mewYwAo+iM=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "549bd84d6279f9852cae6225e372cc67fb91a4c1",
+        "rev": "00c21e4c93d963c50d4c0c89bfa84ed6e0694df2",
         "type": "github"
       },
       "original": {
@@ -481,6 +394,38 @@
         "type": "github"
       }
     },
+    "nixpkgs-docs": {
+      "locked": {
+        "lastModified": 1705957679,
+        "narHash": "sha256-Q8LJaVZGJ9wo33wBafvZSzapYsjOaNjP/pOnSiKVGHY=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "9a333eaa80901efe01df07eade2c16d183761fa3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "release-23.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-for-bootstrap": {
+      "locked": {
+        "lastModified": 1720244366,
+        "narHash": "sha256-WrDV0FPMVd2Sq9hkR5LNHudS3OSMmUrs90JUTN+MXpA=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "49ee0e94463abada1de470c9c07bfc12b36dcf40",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "49ee0e94463abada1de470c9c07bfc12b36dcf40",
+        "type": "github"
+      }
+    },
     "nixpkgs_2": {
       "locked": {
         "lastModified": 1743689281,
@@ -497,29 +442,58 @@
         "type": "github"
       }
     },
-    "nur": {
-      "inputs": {
-        "flake-parts": [
-          "stylix",
-          "flake-parts"
-        ],
-        "nixpkgs": [
-          "stylix",
-          "nixpkgs"
-        ]
-      },
+    "nmd": {
+      "flake": false,
       "locked": {
-        "lastModified": 1777598946,
-        "narHash": "sha256-X239dAGaU1+gfDj8jKH8GzlqKMcxaVfXOio+uzBOkeE=",
-        "owner": "nix-community",
-        "repo": "NUR",
-        "rev": "5d55af01c0f86be583931fe99207fc56c14134b3",
-        "type": "github"
+        "lastModified": 1666190571,
+        "narHash": "sha256-Z1hc7M9X6L+H83o9vOprijpzhTfOBjd0KmUTnpHAVjA=",
+        "owner": "rycee",
+        "repo": "nmd",
+        "rev": "b75d312b4f33bd3294cd8ae5c2ca8c6da2afc169",
+        "type": "gitlab"
       },
       "original": {
-        "owner": "nix-community",
-        "repo": "NUR",
-        "type": "github"
+        "owner": "rycee",
+        "repo": "nmd",
+        "type": "gitlab"
+      }
+    },
+    "nmd_2": {
+      "inputs": {
+        "nixpkgs": [
+          "nix-on-droid",
+          "nixpkgs-docs"
+        ],
+        "scss-reset": "scss-reset"
+      },
+      "locked": {
+        "lastModified": 1705050560,
+        "narHash": "sha256-x3zzcdvhJpodsmdjqB4t5mkVW22V3wqHLOun0KRBzUI=",
+        "owner": "~rycee",
+        "repo": "nmd",
+        "rev": "66d9334933119c36f91a78d565c152a4fdc8d3d3",
+        "type": "sourcehut"
+      },
+      "original": {
+        "owner": "~rycee",
+        "repo": "nmd",
+        "type": "sourcehut"
+      }
+    },
+    "nmt": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1648075362,
+        "narHash": "sha256-u36WgzoA84dMVsGXzml4wZ5ckGgfnvS0ryzo/3zn/Pc=",
+        "owner": "rycee",
+        "repo": "nmt",
+        "rev": "d83601002c99b78c89ea80e5e6ba21addcfe12ae",
+        "type": "gitlab"
+      },
+      "original": {
+        "owner": "rycee",
+        "repo": "nmt",
+        "type": "gitlab"
       }
     },
     "nvim": {
@@ -531,6 +505,7 @@
         ],
         "plugins-beancount-nvim": "plugins-beancount-nvim",
         "plugins-helm-ls-nvim": "plugins-helm-ls-nvim",
+        "plugins-m-taskwarrior-d-nvim": "plugins-m-taskwarrior-d-nvim",
         "plugins-mcphub-nvim": "plugins-mcphub-nvim",
         "plugins-nvimkit-nvim": "plugins-nvimkit-nvim",
         "plugins-shipwright-nvim": "plugins-shipwright-nvim",
@@ -565,11 +540,11 @@
     "plugins-helm-ls-nvim": {
       "flake": false,
       "locked": {
-        "lastModified": 1773934114,
-        "narHash": "sha256-8trqFsA7nTKSdtkiAL0Sa9bXjh5ONtAqN7XNE/B8ukM=",
+        "lastModified": 1768584652,
+        "narHash": "sha256-jnMc87OjURNcqsva0npYgVyUrWc5C6L7yHpNvt9eSmg=",
         "owner": "qvalentin",
         "repo": "helm-ls.nvim",
-        "rev": "20df43509b02a3ce3c6b3eee254d6e2bffa9a370",
+        "rev": "f0b9a1723890971a6d84890b50dbf5f40974ea1b",
         "type": "github"
       },
       "original": {
@@ -578,6 +553,22 @@
         "type": "github"
       }
     },
+    "plugins-m-taskwarrior-d-nvim": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767960157,
+        "narHash": "sha256-ov0qi4LhIlwqrBzSbTJ6APC5qjl2d/vlKWJfW5ZiDrg=",
+        "owner": "huantrinh1802",
+        "repo": "m_taskwarrior_d.nvim",
+        "rev": "107247387cd81823046bc2b8e71150c8edf041d3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "huantrinh1802",
+        "repo": "m_taskwarrior_d.nvim",
+        "type": "github"
+      }
+    },
     "plugins-mcphub-nvim": {
       "flake": false,
       "locked": {
@@ -649,13 +640,29 @@
         "firefox-addons": "firefox-addons",
         "git-hooks": "git-hooks",
         "home-manager": "home-manager",
+        "nix-on-droid": "nix-on-droid",
         "nix-secrets": "nix-secrets",
         "nixgl": "nixgl",
         "nixos-hardware": "nixos-hardware",
         "nixpkgs": "nixpkgs",
         "nvim": "nvim",
-        "sops-nix": "sops-nix",
-        "stylix": "stylix"
+        "sops-nix": "sops-nix"
+      }
+    },
+    "scss-reset": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1631450058,
+        "narHash": "sha256-muDlZJPtXDIGevSEWkicPP0HQ6VtucbkMNygpGlBEUM=",
+        "owner": "andreymatin",
+        "repo": "scss-reset",
+        "rev": "0cf50e27a4e95e9bb5b1715eedf9c54dee1a5a91",
+        "type": "github"
+      },
+      "original": {
+        "owner": "andreymatin",
+        "repo": "scss-reset",
+        "type": "github"
       }
     },
     "sops-nix": {
@@ -665,11 +672,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1777944972,
-        "narHash": "sha256-VfGRo1qTBKOe3s2gOv8LSoA6Fk19PvBlwQ1ECN0Evn8=",
+        "lastModified": 1770145881,
+        "narHash": "sha256-ktjWTq+D5MTXQcL9N6cDZXUf9kX8JBLLBLT0ZyOTSYY=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "c591bf665727040c6cc5cb409079acb22dcce33c",
+        "rev": "17eea6f3816ba6568b8c81db8a4e6ca438b30b7c",
         "type": "github"
       },
       "original": {
@@ -694,39 +701,6 @@
         "type": "github"
       }
     },
-    "stylix": {
-      "inputs": {
-        "base16": "base16",
-        "base16-fish": "base16-fish",
-        "base16-helix": "base16-helix",
-        "base16-vim": "base16-vim",
-        "firefox-gnome-theme": "firefox-gnome-theme",
-        "flake-parts": "flake-parts_2",
-        "gnome-shell": "gnome-shell",
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "nur": "nur",
-        "systems": "systems_2",
-        "tinted-kitty": "tinted-kitty",
-        "tinted-schemes": "tinted-schemes",
-        "tinted-tmux": "tinted-tmux",
-        "tinted-zed": "tinted-zed"
-      },
-      "locked": {
-        "lastModified": 1777835090,
-        "narHash": "sha256-VLH8zPweblCOvpnQXp4fVs7f6Q79YhXF5XFKlOrvIFk=",
-        "owner": "danth",
-        "repo": "stylix",
-        "rev": "7989a1054b01153212dede6005abfd1576b8328c",
-        "type": "github"
-      },
-      "original": {
-        "owner": "danth",
-        "repo": "stylix",
-        "type": "github"
-      }
-    },
     "systems": {
       "locked": {
         "lastModified": 1681028828,
@@ -741,85 +715,6 @@
         "repo": "default",
         "type": "github"
       }
-    },
-    "systems_2": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
-    "tinted-kitty": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1735730497,
-        "narHash": "sha256-4KtB+FiUzIeK/4aHCKce3V9HwRvYaxX+F1edUrfgzb8=",
-        "owner": "tinted-theming",
-        "repo": "tinted-kitty",
-        "rev": "de6f888497f2c6b2279361bfc790f164bfd0f3fa",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "tinted-kitty",
-        "type": "github"
-      }
-    },
-    "tinted-schemes": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1777041405,
-        "narHash": "sha256-BAGZ7ObFV/9Z61OJZun7ifPyhkuHqNuW1QIhQ8LuzCo=",
-        "owner": "tinted-theming",
-        "repo": "schemes",
-        "rev": "5f868b3a338b6904c47f3833b9c411be641983a8",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "schemes",
-        "type": "github"
-      }
-    },
-    "tinted-tmux": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1777169200,
-        "narHash": "sha256-h7dDbIzP5hDr9v97w9PL6jdAgXawmj6krcH+959rqpU=",
-        "owner": "tinted-theming",
-        "repo": "tinted-tmux",
-        "rev": "f798c2dce44ef815bb6b8f05a82135c7942d35ac",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "tinted-tmux",
-        "type": "github"
-      }
-    },
-    "tinted-zed": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1777463218,
-        "narHash": "sha256-Bhkozqtq3BKLqWTlmKm8uAptfX4aRGI8QX3eEL54Vpc=",
-        "owner": "tinted-theming",
-        "repo": "base16-zed",
-        "rev": "5768d08ed2e7944a26a958868cdb073cb8856dae",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "base16-zed",
-        "type": "github"
-      }
     }
   },
   "root": "root",

flake.nix

@@ -3,10 +3,6 @@
     nixpkgs = {
       url = "github:nixos/nixpkgs/nixos-unstable";
     };
-    stylix = {
-      url = "github:danth/stylix";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
     nixos-hardware = {
       url = "github:NixOS/nixos-hardware/master";
     };
@@ -26,6 +22,11 @@
       url = "github:nix-community/home-manager";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    nix-on-droid = {
+      url = "github:nix-community/nix-on-droid/release-24.05";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.home-manager.follows = "home-manager";
+    };
     nixgl = {
       url = "github:nix-community/nixGL";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -53,6 +54,7 @@
       self,
       nixpkgs,
       home-manager,
+      nix-on-droid,
       nixgl,
       git-hooks,
       ...
@@ -60,8 +62,8 @@
     let
       inherit (self) outputs;
       inherit (inputs.nixpkgs) lib;
-      myUtils = import ./utils { inherit lib; };
-      hostDirNames = myUtils.dirNames ./hosts;
+      utils = import ./utils { inherit lib; };
+      hostDirNames = utils.dirNames ./hosts;
       system = "x86_64-linux";
       dotsPath = ./dots;
       gitHooks = import ./git-hooks.nix {
@@ -70,66 +72,37 @@
       };
     in
     {
+      nix.nixPath = [
+        "nixpkgs=${inputs.nixpkgs}"
+      ]; # <https://github.com/nix-community/nixd/blob/main/nixd/docs/configuration.md>
       nixosConfigurations =
         (lib.genAttrs hostDirNames (
           host:
           nixpkgs.lib.nixosSystem {
-            modules = [
-              ./hosts/${host}
-              {
-                nixpkgs.hostPlatform = (myUtils.hostMeta ./hosts/${host}).system;
-                host.name = host;
-              }
-            ];
+            system = import ./hosts/${host}/system.nix;
+            modules = [ ./hosts/${host} ];
             specialArgs = {
-              inherit
-                inputs
-                outputs
-                dotsPath
-                myUtils
-                ;
+              inherit inputs outputs dotsPath;
             };
           }
         ))
         // {
-          sd-image-orange-pi-aarch64 = nixpkgs.lib.nixosSystem {
+          sd-image-aarch64 = nixpkgs.lib.nixosSystem {
+            system = "x86_64-linux";
             modules = [
               "${nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
-              ./images/sd-image-orange-pi-aarch64.nix
+              ./images/sd-image-aarch64.nix
               {
-                nixpkgs.buildPlatform = "x86_64-linux";
-                nixpkgs.hostPlatform = "aarch64-linux";
+                nixpkgs.crossSystem = {
+                  system = "aarch64-linux";
+                };
               }
             ];
             specialArgs = {
-              inherit
-                inputs
-                outputs
-                dotsPath
-                myUtils
-                ;
-            };
-          };
-          sd-image-raspberry-pi-aarch64 = nixpkgs.lib.nixosSystem {
-            modules = [
-              "${nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
-              ./images/sd-image-raspberry-pi-aarch64.nix
-              {
-                nixpkgs.buildPlatform = "x86_64-linux";
-                nixpkgs.hostPlatform = "aarch64-linux";
-              }
-            ];
-            specialArgs = {
-              inherit
-                inputs
-                outputs
-                dotsPath
-                myUtils
-                ;
+              inherit inputs outputs dotsPath;
             };
           };
         };
-
       homeConfigurations = {
         work = home-manager.lib.homeManagerConfiguration {
           pkgs = import nixpkgs {
@@ -138,17 +111,24 @@
           };
           modules = [ ./home/hosts/work ];
           extraSpecialArgs = {
-            inherit
-              inputs
-              outputs
-              dotsPath
-              myUtils
-              ;
+            inherit inputs outputs dotsPath;
           };
         };
       };
-
-      apps.${system}.colmena = inputs.colmena.apps.${system}.default;
+      # https://github.com/nix-community/nix-on-droid/blob/master/templates/advanced/flake.nix
+      nixOnDroidConfigurations = {
+        pixel = nix-on-droid.lib.nixOnDroidConfiguration {
+          modules = [ ./phone ];
+          extraSpecialArgs = {
+            inherit inputs outputs dotsPath;
+          };
+          pkgs = import nixpkgs {
+            system = "aarch64-linux";
+            overlays = [ nix-on-droid.overlays.default ];
+          };
+          home-manager-path = home-manager.outPath;
+        };
+      };
 
       colmenaHive = import ./deploy/colmena.nix {
         inherit
@@ -161,11 +141,6 @@
       formatter.${system} = gitHooks.formatter;
       devShells.${system} = gitHooks.devShells;
 
-      legacyPackages.${system} = {
-        sd-image-orange-pi-aarch64 =
-          self.nixosConfigurations.sd-image-orange-pi-aarch64.config.system.build.sdImage;
-        sd-image-raspberry-pi-aarch64 =
-          self.nixosConfigurations.sd-image-raspberry-pi-aarch64.config.system.build.sdImage;
-      };
+      images.sd-image-aarch64 = self.nixosConfigurations.sd-image-aarch64.config.system.build.sdImage;
     };
 }

git-hooks.nix

@@ -10,10 +10,7 @@ let
   pre-commit-check = git-hooks.lib.${system}.run {
     inherit src;
     hooks = {
-      nixfmt = {
-        enable = true;
-        package = pkgs.nixfmt;
-      };
+      nixfmt.enable = true;
       statix.enable = true;
       deadnix.enable = true;
     };

home/hosts/andromache/default.nix

@@ -1,64 +1,53 @@
 {
   lib,
+  inputs,
   config,
   pkgs,
   ...
 }:
 
+let
+  username = "h";
+in
 {
   imports = [
-    ../../modules
-    ../../modules/3d
-    ../../modules/ai-tools
-    ../../modules/anki
-    ../../modules/audio
-    ../../modules/browser
     ../../modules/cloud
     ../../modules/comms
     ../../modules/desktop/niri
-    ../../modules/devenv
     ../../modules/direnv
+    ../../modules/3d
     ../../modules/git
     ../../modules/k8s/k9s.nix
-    ../../modules/keepassxc
+    ../../modules/kitty.nix
     ../../modules/music
-    ../../modules/nvim
-    ../../modules/pandoc
+    ../../modules/nvim.nix
+    ../../modules/ssh.nix
+    ../../modules/taskwarrior.nix
+    ../../modules/keepassxc.nix
+    ../../modules/anki.nix
     ../../modules/photography
-    ../../modules/secrets
+    ../../modules/browser
     ../../modules/shell
-    ../../modules/ssh
-    ../../modules/taskwarrior
-    ../../modules/terminal
-    ../../modules/zk
-    ../../modules/torrenting
   ];
 
   home = {
     stateVersion = "25.05";
-    inherit (config.host) username;
-    homeDirectory = "/home/${config.host.username}";
+    inherit username;
+    homeDirectory = "/home/${username}";
   };
 
   xdg.userDirs.createDirectories = false;
   xdg.userDirs.download = "${config.home.homeDirectory}/dl";
 
-  modules."3d" = {
-    printing.enable = true;
-    modeling.enable = true;
-  };
-  ai-tools = {
-    claude-code.enable = true;
-    opencode.enable = true;
-  };
   browser.primary = "librewolf";
   cloud.hetzner.enable = true;
   comms.signal.enable = true;
-  git.github.enable = true;
-  shell.bash.aliases.lang-js = true;
-  shell.bash.addBinToPath = true;
-  torrenting.enable = true;
-  zk.enable = true;
+  github.enable = true;
+
+  shell.bash = {
+    enable = true;
+    aliases.lang-js = true;
+  };
 
   programs = {
     home-manager.enable = true;

home/hosts/astyanax/default.nix

@@ -4,55 +4,49 @@
   ...
 }:
 
+let
+  username = "h";
+in
 {
   imports = [
-    ../../modules
-    ../../modules/3d
-    ../../modules/ai-tools
-    ../../modules/anki
-    ../../modules/audio
-    ../../modules/browser
+    ../../modules/ai-tools.nix
+    ../../modules/anki.nix
     ../../modules/cloud
     ../../modules/comms
-    ../../modules/desktop/niri
-    ../../modules/devenv
     ../../modules/direnv
+    ../../modules/desktop/niri
     ../../modules/git
     ../../modules/k8s/k9s.nix
-    ../../modules/keepassxc
+    ../../modules/kitty.nix
     ../../modules/music
     ../../modules/nfc
-    ../../modules/nvim
-    ../../modules/pandoc
-    ../../modules/secrets
+    ../../modules/nvim.nix
+    ../../modules/ssh.nix
+    ../../modules/taskwarrior.nix
+    ../../modules/keepassxc.nix
+    ../../modules/browser
     ../../modules/shell
-    ../../modules/ssh
-    ../../modules/taskwarrior
-    ../../modules/terminal
   ];
 
   home = {
     stateVersion = "25.05";
-    inherit (config.host) username;
-    homeDirectory = "/home/${config.host.username}";
+    inherit username;
+    homeDirectory = "/home/${username}";
   };
 
-  xdg.userDirs = {
-    enable = false;
-    createDirectories = false;
-  };
+  xdg.userDirs.createDirectories = false;
+  xdg.userDirs.download = "${config.home.homeDirectory}/dl";
 
-  modules."3d".printing.enable = true;
-  ai-tools = {
-    claude-code.enable = true;
-    opencode.enable = true;
-  };
   browser.primary = "librewolf";
   cloud.hetzner.enable = true;
   comms.signal.enable = true;
-  git.github.enable = true;
-  shell.bash.aliases.lang-js = true;
-  shell.bash.addBinToPath = true;
+  github.enable = true;
+  nfc.proxmark3.enable = true;
+
+  shell.bash = {
+    enable = true;
+    aliases.lang-js = true;
+  };
 
   programs = {
     home-manager.enable = true;

home/hosts/packages.nix

@@ -6,17 +6,24 @@ with pkgs;
   entr
   feh
   fzf
+  haskellPackages.pandoc-crossref
   htop
   jq
+  nixfmt-rfc-style
   nmap
+  nodejs_24
   nvimpager
+  pandoc
   parallel
   pass
+  pnpm
   ripgrep
   silver-searcher
   sops
+  sshfs
   tldr
   tree
   unzip
+  vimPlugins.vim-plug
   wget
 ]

home/hosts/work/default.nix

@@ -5,57 +5,57 @@
   ...
 }:
 
+let
+  username = "hektor";
+in
 {
   imports = [
     inputs.sops-nix.homeManagerModules.sops
-    ../../modules
-    ../../modules/ai-tools
-    ../../modules/anki
-    ../../modules/browser
-    ../../modules/bruno
+    ../../modules/ai-tools.nix
     ../../modules/cloud
     ../../modules/comms
-    ../../modules/database
-    ../../modules/dconf
-    ../../modules/desktop/niri
-    ../../modules/devenv
+    ../../modules/dconf.nix
     ../../modules/direnv
     ../../modules/docker
     ../../modules/git
-    ../../modules/go
-    ../../modules/infra
     ../../modules/k8s
-    ../../modules/k8s/k9s.nix
-    ../../modules/keepassxc
-    ../../modules/music
-    ../../modules/nodejs
-    ../../modules/nvim
-    ../../modules/pandoc
-    ../../modules/secrets
+    ../../modules/k9s.nix
+    ../../modules/keepassxc.nix
+    ../../modules/kitty.nix
+    ../../modules/nvim.nix
+    ../../modules/browser
     ../../modules/shell
-    ../../modules/stylix
-    ../../modules/taskwarrior
-    ../../modules/ticketing
-    ../../modules/terminal
-    ../../modules/vscode
+    ../../modules/music
+    ../../modules/taskwarrior.nix
   ];
 
-  sops.age.keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
+  sops = {
+    age.keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
+    defaultSopsFile = "${inputs.nix-secrets}/secrets.yaml";
+
+    secrets = {
+      taskwarrior_sync_server_url = { };
+      taskwarrior_sync_server_client_id = { };
+      taskwarrior_sync_encryption_secret = { };
+      anki_sync_user = { };
+      anki_sync_key = { };
+    };
+
+    templates."taskrc.d/sync" = {
+      content = ''
+        sync.server.url=${config.sops.placeholder.taskwarrior_sync_server_url}
+        sync.server.client_id=${config.sops.placeholder.taskwarrior_sync_server_client_id}
+        sync.encryption_secret=${config.sops.placeholder.taskwarrior_sync_encryption_secret}
+      '';
+    };
+  };
 
   nixpkgs.config.allowUnfree = true;
 
-  xdg = {
-    systemDirs.config = [ "/etc/xdg" ];
-    userDirs = {
-      createDirectories = false;
-      download = "${config.home.homeDirectory}/dl";
-    };
-  };
-
   home = {
     stateVersion = "25.05";
-    username = "hektor";
-    homeDirectory = "/home/${config.home.username}";
+    inherit username;
+    homeDirectory = "/home/${username}";
   };
 
   targets.genericLinux.nixGL = {
@@ -68,19 +68,11 @@
   cloud.azure.enable = true;
   comms.signal.enable = true;
   comms.teams.enable = true;
-  ai-tools = {
-    claude-code.enable = true;
-    tirith.enable = true;
-    opencode.enable = true;
-  };
-  database = {
-    mssql.enable = true;
-    postgresql.enable = true;
-    redis.enable = true;
-  };
-  git.github.enable = true;
-  git.gitlab.enable = true;
-  secrets.vault.enable = true;
+  github.enable = true;
+  gitlab.enable = true;
+
+  shell.bash.enable = true;
+  starship.enable = true;
 
   programs = {
     gh.enable = true;

home/modules/3d/default.nix

@@ -1,32 +1,11 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
+{ pkgs, ... }:
 
-let
-  cfg = config.modules."3d";
-in
 {
-  options.modules."3d" = {
-    printing.enable = lib.mkEnableOption "3D printing tools";
-    modeling.enable = lib.mkEnableOption "3D modeling tools";
-  };
-
-  config = lib.mkMerge [
-    (lib.mkIf cfg.printing.enable {
   home.packages = with pkgs; [
     bambu-studio
-        orca-slicer
-      ];
-    })
-    (lib.mkIf cfg.modeling.enable {
-      home.packages = with pkgs; [
     blender
     openscad-lsp
     openscad-unstable
-      ];
-    })
+    orca-slicer
   ];
 }

home/modules/ai-tools.nix

@@ -0,0 +1,40 @@
+{
+  pkgs,
+  ...
+}:
+{
+  config = {
+    home.packages = with pkgs; [
+      aider-chat
+      (pkgs.stdenv.mkDerivation {
+        name = "ccline";
+        src = pkgs.fetchurl {
+          url = "https://github.com/Haleclipse/CCometixLine/releases/download/v1.0.8/ccline-linux-x64.tar.gz";
+          hash = "sha256-Joe3Dd6uSMGi66QT6xr2oY/Tz8rA5RuKa6ckBVJIzI0=";
+        };
+
+        unpackPhase = ''
+          tar xzf $src
+        '';
+
+        installPhase = ''
+          mkdir -p $out/bin
+          cp ccline $out/bin/
+          chmod +x $out/bin/ccline
+        '';
+
+        meta = with pkgs.lib; {
+          description = "CCometixLine Linux x64 CLI (Claude Code statusline)";
+          homepage = "https://github.com/Haleclipse/CCometixLine";
+          license = licenses.mit;
+          platforms = [ "x86_64-linux" ];
+        };
+      })
+      # claude-code
+      # (config.lib.nixGL.wrap code-cursor)
+      # github-copilot-cli
+      mcp-nixos
+      opencode
+    ];
+  };
+}

home/modules/ai-tools/claude-code.nix

@@ -1,60 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}:
-let
-  cfg = config.ai-tools.claude-code;
-  rtk-version = "0.18.1";
-in
-{
-  options.ai-tools.claude-code.enable = lib.mkEnableOption "claude code with rtk and ccline";
-
-  config = lib.mkIf cfg.enable {
-    programs.claude-code.enable = true;
-
-    home.packages = with pkgs; [
-      (stdenv.mkDerivation {
-        name = "ccline";
-        src = fetchurl {
-          url = "https://github.com/Haleclipse/CCometixLine/releases/download/v1.0.8/ccline-linux-x64.tar.gz";
-          hash = "sha256-Joe3Dd6uSMGi66QT6xr2oY/Tz8rA5RuKa6ckBVJIzI0=";
-        };
-        unpackPhase = "tar xzf $src";
-        installPhase = ''
-          mkdir -p $out/bin
-          cp ccline $out/bin/
-          chmod +x $out/bin/ccline
-        '';
-        meta = {
-          description = "CCometixLine Linux x64 CLI (Claude Code statusline)";
-          homepage = "https://github.com/Haleclipse/CCometixLine";
-          license = lib.licenses.mit;
-          platforms = [ "x86_64-linux" ];
-        };
-      })
-      (stdenv.mkDerivation {
-        name = "rtk-${rtk-version}";
-        version = rtk-version;
-        src = fetchurl {
-          url = "https://github.com/rtk-ai/rtk/releases/download/v${rtk-version}/rtk-x86_64-unknown-linux-gnu.tar.gz";
-          hash = "sha256-XoTia5K8b00OzcKYCufwx8ApkAS31DxUCpGSU0jFs2Q=";
-        };
-        unpackPhase = "tar xzf $src";
-        installPhase = ''
-          mkdir -p $out/bin
-          cp rtk $out/bin/
-          chmod +x $out/bin/rtk
-        '';
-        meta = {
-          description = "RTK - AI coding tool enhancer";
-          homepage = "https://www.rtk-ai.app";
-          license = lib.licenses.mit;
-          platforms = [ "x86_64-linux" ];
-        };
-      })
-      mcp-nixos
-    ];
-  };
-}

home/modules/ai-tools/default.nix

@@ -1,8 +0,0 @@
-{
-  imports = [
-    ./claude-code.nix
-    ./opencode.nix
-    ./skills.nix
-    ./tirith.nix
-  ];
-}

home/modules/ai-tools/opencode.nix

@@ -1,40 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}:
-let
-  cfg = config.ai-tools.opencode;
-in
-{
-  options.ai-tools.opencode = {
-    enable = lib.mkEnableOption "opencode";
-  };
-
-  config = lib.mkIf cfg.enable {
-    home.packages = [ pkgs.opencode ];
-
-    home.file.".config/opencode/opencode.json".text = builtins.toJSON {
-      "$schema" = "https://opencode.ai/config.json";
-      permission = {
-        external_directory = {
-          "/run/secrets/" = "deny";
-          "~/.config/sops/age/keys.txt" = "deny";
-          "~/.ssh/id_rsa" = "deny";
-          "~/.ssh/id_ed25519" = "deny";
-          "~/.ssh/id_ecdsa" = "deny";
-          "~/.ssh/id_dsa" = "deny";
-          "/etc/ssh/ssh_host_rsa_key" = "deny";
-          "/etc/ssh/ssh_host_ed25519_key" = "deny";
-          "/etc/ssh/ssh_host_ecdsa_key" = "deny";
-          "/etc/ssh/ssh_host_dsa_key" = "deny";
-        };
-        command = {
-          sops = "deny";
-        };
-      };
-      plugin = [ "@mohak34/opencode-notifier@latest" ];
-    };
-  };
-}

home/modules/ai-tools/skills.nix

@@ -1,49 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}:
-let
-  cfg = config.ai-tools.claude-code;
-
-  skillType = lib.types.submodule {
-    options = {
-      owner = lib.mkOption { type = lib.types.str; };
-      repo = lib.mkOption { type = lib.types.str; };
-      rev = lib.mkOption { type = lib.types.str; };
-      hash = lib.mkOption { type = lib.types.str; };
-      skill = lib.mkOption { type = lib.types.str; };
-    };
-  };
-
-  fetchSkill =
-    skill:
-    let
-      src = pkgs.fetchFromGitHub {
-        inherit (skill)
-          owner
-          repo
-          rev
-          hash
-          ;
-      };
-    in
-    {
-      name = ".claude/skills/${skill.skill}";
-      value = {
-        source = "${src}/${skill.skill}";
-        recursive = true;
-      };
-    };
-in
-{
-  options.ai-tools.claude-code.skills = lib.mkOption {
-    type = lib.types.listOf skillType;
-    default = [ ];
-  };
-
-  config = lib.mkIf cfg.enable {
-    home.file = builtins.listToAttrs (map fetchSkill cfg.skills);
-  };
-}

home/modules/ai-tools/tirith-check.py

@@ -1,190 +0,0 @@
-#!/usr/bin/env python3
-"""Claude Code PreToolUse hook — runs tirith check on Bash tool calls.
-
-Reads JSON from stdin (Claude Code hook protocol), extracts the command,
-and delegates to `tirith check --json` for security analysis.
-
-Exit codes:
-  0 — hook completed successfully (decision in stdout JSON)
-  Non-zero — hook error (fail-closed by default; set TIRITH_FAIL_OPEN=1 for fail-open)
-
-Output (stdout, only for deny):
-  {
-    "hookSpecificOutput": {
-      "hookEventName": "PreToolUse",
-      "permissionDecision": "deny",
-      "permissionDecisionReason": "..."
-    }
-  }
-
-Environment:
-  TIRITH_BIN              — path to tirith binary (default: "tirith")
-  TIRITH_HOOK_WARN_ACTION — "deny" (default) or "allow"
-"""
-
-import json
-import os
-import shutil
-import subprocess
-import sys
-
-
-def get(data, *keys):
-    """Return the first matching key from data (supports dual-case fields)."""
-    for k in keys:
-        if k in data:
-            return data[k]
-    return None
-
-
-def deny(reason):
-    """Print a deny decision using hookSpecificOutput and exit 0."""
-    print(
-        json.dumps(
-            {
-                "hookSpecificOutput": {
-                    "hookEventName": "PreToolUse",
-                    "permissionDecision": "deny",
-                    "permissionDecisionReason": reason,
-                }
-            }
-        )
-    )
-    sys.exit(0)
-
-
-def fail_action():
-    """Return the fail action: deny (default, fail-closed) or allow (fail-open via env)."""
-    return "allow" if os.environ.get("TIRITH_FAIL_OPEN") == "1" else "deny"
-
-
-def fail_closed(reason):
-    """Deny or allow based on TIRITH_FAIL_OPEN, for error/missing-binary paths."""
-    action = fail_action()
-    if action == "deny":
-        deny(reason)
-    else:
-        sys.exit(0)
-
-
-def main():
-    try:
-        raw = sys.stdin.read()
-        if not raw.strip():
-            # Empty input — cannot determine command, fail-closed
-            fail_closed("tirith: empty hook input — blocked for safety")
-            return
-        data = json.loads(raw)
-    except (json.JSONDecodeError, OSError):
-        fail_closed("tirith: failed to parse hook input — blocked for safety")
-        return
-
-    if not isinstance(data, dict):
-        fail_closed("tirith: invalid hook input format — blocked for safety")
-        return
-
-    # Dual-case field extraction (camelCase and snake_case)
-    event = get(data, "hook_event_name", "hookEventName")
-    tool = get(data, "tool_name", "toolName")
-    tool_input = get(data, "tool_input", "toolInput") or {}
-
-    # Only intercept PreToolUse + Bash
-    if event != "PreToolUse" or tool != "Bash":
-        sys.exit(0)
-
-    if not isinstance(tool_input, dict):
-        fail_closed("tirith: invalid tool_input format — blocked for safety")
-        return
-
-    command = tool_input.get("command")
-    if not isinstance(command, str) or not command.strip():
-        fail_closed("tirith: no command found in hook input — blocked for safety")
-        return
-
-    # Locate tirith binary
-    tirith_bin = os.environ.get("TIRITH_BIN") or shutil.which("tirith") or "tirith"
-
-    try:
-        result = subprocess.run(
-            [
-                tirith_bin,
-                "check",
-                "--json",
-                "--non-interactive",
-                "--shell",
-                "posix",
-                "--",
-                command,
-            ],
-            capture_output=True,
-            text=True,
-            timeout=10,
-        )
-    except FileNotFoundError:
-        fail_closed(f"tirith: {tirith_bin} not found — install tirith or set TIRITH_FAIL_OPEN=1")
-        return
-    except subprocess.TimeoutExpired:
-        fail_closed("tirith: check timed out — blocked for safety")
-        return
-    except OSError as e:
-        fail_closed(f"tirith: OS error running check — {e}")
-        return
-
-    # Unexpected exit code — fail-closed
-    if result.returncode not in (0, 1, 2):
-        fail_closed(f"tirith: unexpected exit code {result.returncode} — blocked for safety")
-        return
-    if result.returncode != 0 and not result.stdout.strip():
-        fail_closed("tirith: check returned non-zero with no output — blocked for safety")
-        return
-
-    # Exit 0 = clean, allow
-    if result.returncode == 0:
-        sys.exit(0)
-
-    # Exit 2 = warn — check TIRITH_HOOK_WARN_ACTION
-    if result.returncode == 2:
-        warn_action = os.environ.get("TIRITH_HOOK_WARN_ACTION", "deny").lower()
-        if warn_action == "allow":
-            sys.exit(0)
-
-    # Exit 1 = block, Exit 2 + deny = block
-    # Build reason from tirith JSON output
-    reason = "Tirith security check failed"
-    if result.stdout.strip():
-        try:
-            verdict = json.loads(result.stdout)
-            findings = verdict.get("findings", [])
-            if findings:
-                parts = []
-                for f in findings:
-                    title = f.get("title", f.get("rule_id", "unknown"))
-                    severity = f.get("severity", "")
-                    parts.append(f"[{severity}] {title}" if severity else title)
-                reason = "Tirith: " + "; ".join(parts)
-        except json.JSONDecodeError:
-            reason = result.stdout.strip()[:500]
-
-    deny(reason)
-
-
-if __name__ == "__main__":
-    try:
-        main()
-    except Exception:
-        # Fail-closed on unexpected errors (respects TIRITH_FAIL_OPEN)
-        if os.environ.get("TIRITH_FAIL_OPEN") == "1":
-            sys.exit(0)
-        # Deny — print structured output so Claude Code shows a message
-        print(
-            json.dumps(
-                {
-                    "hookSpecificOutput": {
-                        "hookEventName": "PreToolUse",
-                        "permissionDecision": "deny",
-                        "permissionDecisionReason": "tirith: unexpected hook error — blocked for safety",
-                    }
-                }
-            )
-        )
-        sys.exit(0)

home/modules/ai-tools/tirith.nix

@@ -1,30 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}:
-let
-  cfg = config.ai-tools.tirith;
-in
-{
-  options.ai-tools.tirith = {
-    enable = lib.mkEnableOption "tirith shell security guard";
-  };
-
-  config = lib.mkMerge [
-    (lib.mkIf cfg.enable {
-      home.packages = [ pkgs.tirith ];
-    })
-    (lib.mkIf (cfg.enable && config.ai-tools.claude-code.enable) {
-      home.file.".claude/hooks/tirith-check.py" = {
-        source = ./tirith-check.py;
-        executable = true;
-      };
-
-      home.activation.tirith-claude-code = lib.hm.dag.entryAfter [ "writeBoundary" ] ''
-        ${pkgs.tirith}/bin/tirith setup claude-code --with-mcp --scope user --force 2>/dev/null || true
-      '';
-    })
-  ];
-}

home/modules/anki.nix

@@ -0,0 +1,33 @@
+{
+  config,
+  lib,
+  pkgs,
+  osConfig ? null,
+  ...
+}:
+
+let
+  hmSopsAvailable = config ? sops && config.sops ? secrets;
+  osSopsAvailable = osConfig != null && osConfig ? sops && osConfig.sops ? secrets;
+  sopsAvailable = hmSopsAvailable || osSopsAvailable;
+
+  sopsSecrets = if hmSopsAvailable then config.sops.secrets else osConfig.sops.secrets;
+in
+{
+  warnings = lib.optional (
+    !sopsAvailable && config.programs.anki.enable
+  ) "anki is enabled but sops secrets are not available. anki sync will not be configured.";
+
+  programs.anki = {
+    enable = true;
+    addons = with pkgs.ankiAddons; [
+      anki-connect
+      puppy-reinforcement
+      review-heatmap
+    ];
+    sync = lib.mkIf sopsAvailable {
+      usernameFile = "${sopsSecrets."anki_sync_user".path}";
+      keyFile = "${sopsSecrets."anki_sync_key".path}";
+    };
+  };
+}

home/modules/anki/default.nix

@@ -1,41 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  myUtils,
-  osConfig ? null,
-  inputs ? null,
-  ...
-}:
-
-let
-  sops = myUtils.sopsAvailability config osConfig;
-  standalone = osConfig == null;
-in
-lib.optionalAttrs standalone {
-  sops.secrets = myUtils.mkSopsSecrets "${toString inputs.nix-secrets}/secrets" null {
-    anki = [
-      "sync-user"
-      "sync-key"
-    ];
-  };
-}
-// {
-  warnings = lib.optional (
-    !sops.available && config.programs.anki.enable
-  ) "anki is enabled but sops secrets are not available. anki sync will not be configured.";
-
-  programs.anki = {
-    enable = true;
-    package = config.nixgl.wrap pkgs.anki;
-    addons = with pkgs.ankiAddons; [
-      anki-connect
-      puppy-reinforcement
-      review-heatmap
-    ];
-    profiles."User 1".sync = lib.mkIf sops.available {
-      usernameFile = "${sops.secrets."anki/sync-user".path}";
-      keyFile = "${sops.secrets."anki/sync-key".path}";
-    };
-  };
-}

home/modules/audio/default.nix

@@ -1,7 +0,0 @@
-{ osConfig, pkgs, ... }:
-
-{
-  home.packages = with pkgs; [ pulsemixer ];
-
-  services.mpris-proxy.enable = osConfig.hardware.bluetooth.enable or false;
-}

home/modules/browser/default.nix

@@ -1,4 +1,4 @@
-{ config, lib, ... }:
+{ lib, ... }:
 
 {
   options.browser = {
@@ -23,8 +23,6 @@
     };
   };
 
-  config.home.sessionVariables.BROWSER = config.browser.primary;
-
   imports = [
     ./firefox.nix
     ./librewolf.nix

home/modules/browser/firefox-base.nix

@@ -1,9 +1,7 @@
 {
   config,
   inputs,
-  lib,
   pkgs,
-  ...
 }:
 
 let
@@ -25,10 +23,8 @@ in
         "extensions.autoDisableScopes" = 0;
       };
       extensions = {
-        force = true;
-        packages = with inputs.firefox-addons.packages.${pkgs.stdenv.hostPlatform.system}; [
+        packages = with inputs.firefox-addons.packages.${pkgs.system}; [
           duckduckgo-privacy-essentials
-          firefox-color
           istilldontcareaboutcookies
           libredirect
           keepassxc-browser

home/modules/browser/firefox.nix

@@ -11,13 +11,6 @@
     programs.firefox = {
       enable = true;
     }
-    // (import ./firefox-base.nix {
-      inherit
-        config
-        inputs
-        lib
-        pkgs
-        ;
-    });
+    // (import ./firefox-base.nix { inherit config inputs pkgs; });
   };
 }

home/modules/browser/librewolf.nix

@@ -13,13 +13,6 @@
         programs.librewolf = {
           enable = true;
         }
-        // (import ./firefox-base.nix {
-          inherit
-            config
-            inputs
-            lib
-            pkgs
-            ;
-        });
+        // (import ./firefox-base.nix { inherit config inputs pkgs; });
       };
 }

home/modules/bruno/default.nix

@@ -1,7 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  config = {
-    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.bruno "--no-sandbox")) ];
-  };
-}

home/modules/clipboard/default.nix

@@ -1,7 +0,0 @@
-{ pkgs, ... }:
-
-{
-  home.packages = with pkgs; [
-    wl-clipboard
-  ];
-}

home/modules/cloud/hetzner.nix

@@ -14,7 +14,8 @@ in
     warnings =
       lib.optional (!isNixOS)
         "hcloud module requires NixOS host configuration. This module will not work with standalone home-manager.";
-
-    home.packages = with pkgs; [ hcloud ];
+    home = {
+      packages = with pkgs; [ hcloud ];
+    };
   };
 }

home/modules/comms/signal.nix

@@ -4,9 +4,10 @@
   pkgs,
   ...
 }:
-
 {
   config = lib.mkIf config.comms.signal.enable {
-    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.signal-desktop "--no-sandbox")) ];
+    home.packages = with pkgs; [
+      (if config.lib ? nixGL then config.lib.nixGL.wrap signal-desktop else signal-desktop)
+    ];
   };
 }

home/modules/comms/teams.nix

@@ -7,6 +7,8 @@
 
 {
   config = lib.mkIf config.comms.teams.enable {
-    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.teams-for-linux "--no-sandbox")) ];
+    home.packages = with pkgs; [
+      (if config.lib ? nixGL then config.lib.nixGL.wrap teams-for-linux else teams-for-linux)
+    ];
   };
 }

home/modules/database/default.nix

@@ -1,26 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-{
-  options.database = {
-    mssql.enable = lib.mkEnableOption "MSSQL";
-    postgresql.enable = lib.mkEnableOption "PostgreSQL";
-    redis.enable = lib.mkEnableOption "Redis";
-  };
-
-  config = lib.mkMerge [
-    (lib.mkIf config.database.mssql.enable {
-      home.packages = with pkgs; [ (config.nixgl.wrap dbeaver-bin) ];
-    })
-    (lib.mkIf config.database.postgresql.enable {
-      home.packages = with pkgs; [ (config.nixgl.wrap pgadmin4-desktopmode) ];
-    })
-    (lib.mkIf config.database.postgresql.enable {
-      home.packages = with pkgs; [ redis ];
-    })
-  ];
-}

home/modules/dconf.nix

@@ -3,7 +3,6 @@
 let
   terminal = "kitty";
   browser = config.browser.primary;
-  font = "${config.stylix.fonts.monospace.name} ${toString config.stylix.fonts.sizes.applications}";
 in
 {
   dconf.settings = {
@@ -41,9 +40,9 @@ in
       clock-show-weekday = true;
       color-scheme = "prefer-dark";
       enable-hot-corners = false;
-      # font-name = font;
+      font-name = "Iosevka Term SS08 12";
       locate-pointer = true;
-      monospace-font-name = font;
+      monospace-font-name = "Iosevka Term SS08 12";
     };
 
     "org/gnome/desktop/wm/keybindings" = {

home/modules/default.nix

@@ -1,37 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-{
-  options = {
-    host.username = lib.mkOption {
-      type = lib.types.str;
-      default = config.home.username;
-    };
-
-    nixgl.wrap = lib.mkOption {
-      type = lib.types.functionTo lib.types.package;
-      default = if config.lib ? nixGL then config.lib.nixGL.wrap else lib.id;
-      readOnly = true;
-    };
-
-    wrapApp = lib.mkOption {
-      type = lib.types.raw;
-      default =
-        pkg: flags:
-        if config.lib ? nixGL then
-          pkg.overrideAttrs (old: {
-            nativeBuildInputs = (old.nativeBuildInputs or [ ]) ++ [ pkgs.makeWrapper ];
-            postInstall = (old.postInstall or "") + ''
-              wrapProgram $out/bin/${pkg.meta.mainProgram} --add-flags "${flags}"
-            '';
-          })
-        else
-          pkg;
-      readOnly = true;
-    };
-  };
-}

home/modules/desktop/niri/default.nix

@@ -2,7 +2,6 @@
 
 {
   imports = [
-    ../../clipboard
     ../../fuzzel
     ../../mako
     ../../shikane
@@ -13,6 +12,7 @@
     file.".config/niri/config.kdl".source = ./config.kdl;
     packages = with pkgs; [
       brightnessctl
+      wl-clipboard
       wlsunset
     ];
   };

home/modules/devenv/default.nix

@@ -1,4 +0,0 @@
-{ pkgs, ... }:
-{
-  home.packages = [ pkgs.devenv ];
-}

home/modules/docker/default.nix

@@ -1,7 +1,9 @@
 { pkgs, ... }:
 
 {
+  config = {
     home.packages = with pkgs; [
       dive
     ];
+  };
 }

home/modules/fuzzel/default.nix

@@ -3,9 +3,22 @@
     enable = true;
     settings = {
       main = {
+        font = "Iosevka Term SS08";
         horizontal-pad = 0;
         vertical-pad = 0;
       };
+      colors = {
+        background = "ccccccff";
+        text = "111111ff";
+        prompt = "ccccccff";
+        placeholder = "aaaaaaff";
+        input = "111111ff";
+        selection = "eeeeeeff";
+        selection-text = "111111ff";
+        selection-match = "333333ff";
+        counter = "111111ff";
+        border = "111111ff";
+      };
       border = {
         width = 2;
         radius = 0;

home/modules/git/default.nix

@@ -7,7 +7,7 @@
 }:
 
 {
-  options.git = {
+  options = {
     github.enable = lib.mkEnableOption "Github CLI";
     gitlab.enable = lib.mkEnableOption "Gitlab CLI";
   };
@@ -20,7 +20,7 @@
       ".gitignore".source = dotsPath + "/.gitignore";
     };
 
-    programs.gh.enable = config.git.github.enable;
-    home.packages = lib.optionals config.git.gitlab.enable [ pkgs.glab ];
+    programs.gh.enable = config.github.enable;
+    home.packages = lib.optionals config.gitlab.enable [ pkgs.glab ];
   };
 }

home/modules/go/default.nix

@@ -1,7 +0,0 @@
-{ pkgs, ... }:
-{
-  home.packages = with pkgs; [
-    go
-    gopls
-  ];
-}

home/modules/infra/default.nix

@@ -1,10 +0,0 @@
-{ pkgs, ... }:
-
-{
-  config = {
-    home.packages = with pkgs; [
-      opentofu
-      upbound
-    ];
-  };
-}

home/modules/k8s/default.nix

@@ -13,15 +13,6 @@
     upbound
   ];
 
-  programs.kubecolor = {
-    enable = true;
-    enableAlias = true;
-  };
-
-  home.shellAliases = {
-    k = "kubectl";
-  };
-
   imports = [
     ./helm.nix
     ./k9s.nix

home/modules/keepassxc.nix

@@ -1,3 +1,5 @@
+{ pkgs, ... }:
+
 {
   programs.keepassxc = {
     enable = true;

home/modules/kitty.nix

@@ -0,0 +1,23 @@
+{ pkgs, config, lib, dotsPath, ... }:
+
+{
+  config = {
+    home.packages = [
+      (if config.lib ? nixGL
+        then config.lib.nixGL.wrap pkgs.kitty
+        else pkgs.kitty)
+    ];
+    programs.bash.shellAliases = {
+      icat = "kitty +kitten icat";
+    };
+
+    home.file = {
+      ".config/kitty/kitty.conf".source = dotsPath + "/.config/kitty/kitty.conf";
+      ".config/kitty/nvim.conf".source = dotsPath + "/.config/kitty/nvim.conf";
+      ".config/kitty/themes/zenwritten_light.conf".source =
+        dotsPath + "/.config/kitty/themes/zenwritten_light.conf";
+      ".config/kitty/themes/zenwritten_dark.conf".source =
+        dotsPath + "/.config/kitty/themes/zenwritten_dark.conf";
+    };
+  };
+}

home/modules/music/default.nix

@@ -4,24 +4,13 @@
   ...
 }:
 
-let
-  spotifyWithWayland = pkgs.symlinkJoin {
-    name = "spotify";
-    paths = [ pkgs.spotify ];
-    buildInputs = [ pkgs.makeWrapper ];
-    postBuild = ''
-      wrapProgram $out/bin/spotify \
-        --add-flags "--enable-features=UseOzonePlatform --ozone-platform=wayland"
-    '';
-  };
-in
 {
   home.packages = with pkgs; [
-    spotifyWithWayland
+    ncspot
+    # (if config.lib ? nixGL then config.lib.nixGL.wrap spotify else spotify)
   ];
 
-  programs.ncspot = {
-    enable = true;
-    settings = builtins.fromTOML (builtins.readFile (dotsPath + "/.config/ncspot/config.toml"));
+  home.file = {
+    ".config/ncspot/config.toml".source = dotsPath + "/.config/ncspot/config.toml";
   };
 }

home/modules/nfc/proxmark3.nix

@@ -1,6 +1,21 @@
-{ pkgs, ... }:
 {
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+let
+  cfg = config.nfc.proxmark3;
+in
+{
+  options.nfc.proxmark3 = {
+    enable = lib.mkEnableOption "proxmark3 (iceman fork)";
+  };
+
+  config = lib.mkIf cfg.enable {
     home.packages = [
       (pkgs.proxmark3.override { withGeneric = true; })
     ];
+  };
 }

home/modules/nodejs/default.nix

@@ -1,23 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-{
-  options.nodejs.package = lib.mkOption {
-    type = lib.types.package;
-    default = pkgs.nodejs_24;
-  };
-
-  config = {
-    home.packages = with pkgs; [
-      config.nodejs.package
-      pnpm
-      yarn
-      biome
-      tsx
-    ];
-  };
-}

home/modules/nvim.nix

@@ -0,0 +1,9 @@
+{ pkgs, inputs, ... }:
+
+{
+  config = {
+    home.packages = [
+      inputs.nvim.packages.${pkgs.system}.nvim
+    ];
+  };
+}