fix: smarten 'buildOnTarget' by using tags

.gitignore

@@ -8,5 +8,3 @@ result
 result-*
 
 nixos-efi-vars.fd
-
-/.pre-commit-config.yaml

README.md

@@ -1,27 +1,15 @@
 # NixOS flake
 
-## hosts
+## Set up virtual machine ([`disko`](https://github.com/nix-community/disko/blob/master/docs/interactive-vm.md))
 
-### NixOS
+1. Build the virtual machine
-
-```
-nixos-rebuild switch --flake .#<hostname>
-```
-
-### home manager
-
-```
-home-manager switch --flake .#work
-```
-
-### virtual machines
 
 ```
 nix build -L '.#nixosConfigurations.vm.config.system.build.vmWithDisko'
-./result/bin/disko-vm
 ```
 
-## docs
+2. Run the virtual machine
 
-* [deploy using colmena](./deploy/README.md)
+```
-* [SD installer images](./images/README.md)
+./result/bin/disko-vm
+```

deploy/colmena.nix

@@ -17,7 +17,7 @@ in
 inputs.colmena.lib.makeHive {
   meta = {
     nixpkgs = import inputs.nixpkgs {
-      localSystem = "x86_64-linux";
+      system = "x86_64-linux";
     };
 
     nodeNixpkgs = builtins.mapAttrs (_: v: v.pkgs) self.nixosConfigurations;

dots/.bashrc

@@ -103,6 +103,13 @@ if [[ -z "${SSH_CONNECTION}" ]]; then
 fi
 # }}}
 
+# pnpm
+export PNPM_HOME="/home/h/.local/share/pnpm"
+case ":$PATH:" in
+  *":$PNPM_HOME:"*) ;;
+  *) export PATH="$PNPM_HOME:$PATH" ;;
+esac
+# pnpm end
 
 # Codi
 # Usage: codi [filetype] [filename]

dots/.bin/bak

@@ -1,32 +0,0 @@
-#!/usr/bin/env bash
-
-# back up a file by copying it to a new file with a .bak extension
-# reference: https://askubuntu.com/questions/962489/is-there-any-way-to-create-backup-copy-of-a-file-without-type-its-name-twice
-
-usage() {
-  echo "Usage: bak [-t|--timestamp] <file to back up>"
-  exit 1
-}
-
-timestamp=false
-
-while [[ $# -gt 0 ]]; do
-  case $1 in
-    -t|--timestamp)
-      timestamp=true
-      shift
-      ;;
-    *)
-      break
-      ;;
-  esac
-done
-
-[ $# -eq 1 ] || usage
-
-if $timestamp; then
-  date="$(date +%Y-%m-%d_%H-%M-%S)"
-  cp -vpn "$1"{,."$date".bak}
-else
-  cp -vpn "$1"{,.bak}
-fi

dots/.bin/save-home

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+
+# Back up my $HOME folder to OneDrive using `restic`.
+#
+# Adds extra flags needed for using `rclone` with sharepoint WebDav I.e. add
+# `--ignore-size --ignore-checksum --update` to the default `rclone.args`.
+#
+# Select directory in repo using -r rclone:<repo>:<directory>
+#
+# Runs `backup` command on $HOME and ignore what is listed in `.resticexclude`
+#
+# ```/etc/restic-env
+# export B2_ACCOUNT_ID=
+# export B2_ACCOUNT_KEY=
+# ```
+#
+# `restic -r b2:desktop-arch init`
+
+source /etc/restic-env
+restic -r "$RESTIC_REPOSITORY:$HOSTNAME" backup \
+  --tag "hektor" \
+  --one-file-system \
+  --files-from="$HOME/.resticinclude" \
+  --exclude-file="$HOME/.resticexclude" \
+  --exclude-if-present=".nobackup" \
+  --verbose=3

dots/.bin/sb-pomo

@@ -1,3 +1,3 @@
 #!/usr/bin/env bash
 
-[ -f "/home/h/.local/share/pomo" ] && cat /home/h/.local/share/pomo || echo ""
+[ -f "/tmp/pomo" ] && cat /tmp/pomo || echo ""

dots/.bin/update-vim

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+# Tiny Vim update helper
+
+nvim +PlugUpgrade +PlugUpdate +CocUpdate

dots/.config/kitty/kitty.conf

@@ -163,4 +163,5 @@ map cmd+q
 
 #: }}}
 
+include ./themes/zenwritten_dark.conf
 include ./nvim.conf

dots/.config/kitty/themes/zenwritten_dark.conf

@@ -0,0 +1,49 @@
+# This file is auto-generated by shipwright.nvim
+# vim:ft=kitty
+## name: zenwritten_dark
+## author: Michael Chris Lopez
+## license: MIT
+## upstream: https://github.com/mcchrish/zenbones.nvim/raw/main/extras/kitty/zenwritten_dark.conf
+## blurb: A zenbones variant with zero hue and saturation.
+foreground                      #BBBBBB
+background                      #191919
+selection_foreground            #BBBBBB
+selection_background            #404040
+# Cursor colors
+cursor                          #C9C9C9
+cursor_text_color               #191919
+# URL underline color when hovering with mouse
+# kitty window border colors
+# OS Window titlebar colors
+# Tab bar colors
+active_tab_foreground           #BBBBBB
+active_tab_background           #65435E
+inactive_tab_foreground         #BBBBBB
+inactive_tab_background         #303030
+# Colors for marks (marked text in the terminal)
+# The basic 16 colors
+# black
+color0 #191919
+color8 #3D3839
+# red
+color1 #DE6E7C
+color9 #E8838F
+# green
+color2  #819B69
+color10 #8BAE68
+# yellow
+color3  #B77E64
+color11 #D68C67
+# blue
+color4  #6099C0
+color12 #61ABDA
+# magenta
+color5  #B279A7
+color13 #CF86C1
+# cyan
+color6  #66A5AD
+color14 #65B8C1
+# white
+color7  #BBBBBB
+color15 #8E8E8E
+# You can set the remaining 240 colors as color16 to color255.

dots/.config/kitty/themes/zenwritten_light.conf

@@ -0,0 +1,49 @@
+# This file is auto-generated by shipwright.nvim
+# vim:ft=kitty
+## name: zenwritten_light
+## author: Michael Chris Lopez
+## license: MIT
+## upstream: https://github.com/mcchrish/zenbones.nvim/raw/main/extras/kitty/zenwritten_light.conf
+## blurb: A zenbones variant with zero hue and saturation.
+foreground                      #353535
+background                      #EEEEEE
+selection_foreground            #353535
+selection_background            #D7D7D7
+# Cursor colors
+cursor                          #353535
+cursor_text_color               #EEEEEE
+# URL underline color when hovering with mouse
+# kitty window border colors
+# OS Window titlebar colors
+# Tab bar colors
+active_tab_foreground           #353535
+active_tab_background           #DEB9D6
+inactive_tab_foreground         #353535
+inactive_tab_background         #CFCFCF
+# Colors for marks (marked text in the terminal)
+# The basic 16 colors
+# black
+color0 #EEEEEE
+color8 #C6C3C3
+# red
+color1 #A8334C
+color9 #94253E
+# green
+color2  #4F6C31
+color10 #3F5A22
+# yellow
+color3  #944927
+color11 #803D1C
+# blue
+color4  #286486
+color12 #1D5573
+# magenta
+color5  #88507D
+color13 #7B3B70
+# cyan
+color6  #3B8992
+color14 #2B747C
+# white
+color7  #353535
+color15 #5C5C5C
+# You can set the remaining 240 colors as color16 to color255.

dots/.config/ncspot/config.toml

@@ -1,6 +1,5 @@
 default_keybindings = false
 flip_status_indicators = true
-library_tabs = ["tracks", "albums", "artists", "playlists", "browse"] # remove podcasts tab
 
 [keybindings]
 "Enter" = "play"
@@ -25,10 +24,11 @@ library_tabs = ["tracks", "albums", "artists", "playlists", "browse"] # remove p
 "c" = "clear"
 "=" = "volup 1"
 "-" = "voldown 1"
+"/" = "focus search"
+"Q" = "focus queue"
+"L" = "focus library"
 "1" = "focus queue"
-"2" = "focus search"
+"2" = "focus library"
-"3" = "focus library"
-"4" = "focus cover"
 "h" = "move left 1"
 "j" = "move down 1"
 "k" = "move up 1"
@@ -41,5 +41,26 @@ library_tabs = ["tracks", "albums", "artists", "playlists", "browse"] # remove p
 "Y" = "share selected"
 "U" = "update"
 
+[theme]
+primary="#aaaaaa"
+secondary="#555555"
+background="1a1a1a"
+title="#cccccc"
+title_secondary="#aaaaaa"
+playing="#ffffff"
+playing_bg="1a1a1a"
+playing_selected="#ffffff"
+highlight="#cccccc"
+highlight_bg="#333333"
+error="#ffffff"
+error_bg="#333333"
+statusbar="#cccccc"
+statusbar_bg="#1a1a1a"
+statusbar_progress="#cccccc"
+statusbar_progress_bg="#1a1a1a"
+cmdline="#cccccc"
+cmdline_bg="#1a1a1a"
+search_match="#ffffff"
+
 backend="pipe"
 notify="false"

dots/.config/ncspot/credentials.toml

@@ -0,0 +1,3 @@
+username = 'hektor.misplon@gmail.com'
+auth_type = 0
+auth_data = 'KDEzMzc9PXRydTMpPzo='

dots/.config/nvim/after/plugin/lspconfig.lua

@@ -85,7 +85,6 @@ local servers = {
       },
     },
   },
-  openscad_ls = {},
   pyright = {},
   -- tsserver = {},
   svelte = {

dots/.config/nvim/after/plugin/m_taskwarrior_d.nvim.lua

@@ -1,9 +1,9 @@
--- require("m_taskwarrior_d").setup()
+require("m_taskwarrior_d").setup()
---
+
--- vim.api.nvim_create_autocmd({ "BufEnter", "BufWritePost" }, {
+vim.api.nvim_create_autocmd({ "BufEnter", "BufWritePost" }, {
---   group = vim.api.nvim_create_augroup("TWTask", { clear = true }),
+  group = vim.api.nvim_create_augroup("TWTask", { clear = true }),
---   pattern = "*.md",
+  pattern = "*.md",
---   callback = function()
+  callback = function()
---     vim.cmd("TWSyncTasks")
+    vim.cmd("TWSyncTasks")
---   end,
+  end,
--- })
+})

dots/.config/nvim/flake.lock

@@ -42,11 +42,11 @@
     },
     "nixCats": {
       "locked": {
-        "lastModified": 1770584904,
+        "lastModified": 1769578476,
-        "narHash": "sha256-9Zaz8lbKF2W9pwXZEnbiGsicHdBoU+dHt3Wv3mCJoZ8=",
+        "narHash": "sha256-4+KbiBcC6hQ3sh0UbPXjy6TOfLh9yhskRlfPzyZ2FH4=",
         "owner": "BirdeeHub",
         "repo": "nixCats-nvim",
-        "rev": "538fdde784d2909700d97a8ef307783b33a86fb1",
+        "rev": "48f8be4bdafccfa19ceaaf08071a15eca36fdb1d",
         "type": "github"
       },
       "original": {
@@ -73,11 +73,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1770843696,
+        "lastModified": 1769740369,
-        "narHash": "sha256-LovWTGDwXhkfCOmbgLVA10bvsi/P8eDDpRudgk68HA8=",
+        "narHash": "sha256-xKPyJoMoXfXpDM5DFDZDsi9PHArf2k5BJjvReYXoFpM=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "2343bbb58f99267223bc2aac4fc9ea301a155a16",
+        "rev": "6308c3b21396534d8aaeac46179c14c439a89b8a",
         "type": "github"
       },
       "original": {
@@ -119,6 +119,22 @@
         "type": "github"
       }
     },
+    "plugins-m-taskwarrior-d-nvim": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767960157,
+        "narHash": "sha256-ov0qi4LhIlwqrBzSbTJ6APC5qjl2d/vlKWJfW5ZiDrg=",
+        "owner": "huantrinh1802",
+        "repo": "m_taskwarrior_d.nvim",
+        "rev": "107247387cd81823046bc2b8e71150c8edf041d3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "huantrinh1802",
+        "repo": "m_taskwarrior_d.nvim",
+        "type": "github"
+      }
+    },
     "plugins-mcphub-nvim": {
       "flake": false,
       "locked": {
@@ -190,6 +206,7 @@
         "nixpkgs": "nixpkgs_2",
         "plugins-beancount-nvim": "plugins-beancount-nvim",
         "plugins-helm-ls-nvim": "plugins-helm-ls-nvim",
+        "plugins-m-taskwarrior-d-nvim": "plugins-m-taskwarrior-d-nvim",
         "plugins-mcphub-nvim": "plugins-mcphub-nvim",
         "plugins-nvimkit-nvim": "plugins-nvimkit-nvim",
         "plugins-shipwright-nvim": "plugins-shipwright-nvim",

dots/.config/nvim/flake.nix

@@ -8,10 +8,10 @@
       url = "github:rktjmp/shipwright.nvim";
       flake = false;
     };
-    # plugins-m-taskwarrior-d-nvim = {
+    plugins-m-taskwarrior-d-nvim = {
-    #   url = "github:huantrinh1802/m_taskwarrior_d.nvim";
+      url = "github:huantrinh1802/m_taskwarrior_d.nvim";
-    #   flake = false;
+      flake = false;
-    # };
+    };
     plugins-beancount-nvim = {
       url = "github:polarmutex/beancount.nvim";
       flake = false;
@@ -37,6 +37,7 @@
 
   outputs =
     {
+      self,
       nixpkgs,
       nixCats,
       ...
@@ -49,7 +50,7 @@
 
       mkDependencyOverlays = system: [
         (utils.standardPluginOverlay inputs)
-        (_final: _prev: {
+        (final: prev: {
           mcp-hub = inputs.mcp-hub.packages.${system}.default;
         })
       ];
@@ -163,7 +164,7 @@
               kitty-scrollback-nvim
               fidget-nvim
               rustaceanvim
-              # pkgs.neovimPlugins.m-taskwarrior-d-nvim
+              pkgs.neovimPlugins.m-taskwarrior-d-nvim
               claude-code-nvim
             ];
           };

dots/.config/nvim/lua/skeleton/init.lua

@@ -2,10 +2,10 @@ local autocmd = vim.api.nvim_create_autocmd
 
 autocmd("BufNewFile", {
   pattern = "shell.nix",
-  command = "0r ~/.config/nvim/skeletons/shell.nix.skeleton",
+  command = "0r ~/.config/nvim/skeletons/shell.nix",
 })
 
 autocmd("BufNewFile", {
   pattern = "flake.nix",
-  command = "0r ~/.config/nvim/skeletons/flake.nix.skeleton",
+  command = "0r ~/.config/nvim/skeletons/flake.nix",
 })

dots/.config/tmux/hooks/tmux.regular.conf

@@ -0,0 +1 @@
+set  -g status-style bg=default

dots/.config/tmux/hooks/tmux.ssh.conf

@@ -1 +1 @@
-set -g status-style bg=colour12,fg=colour0
+set  -g status-style bg=blue,fg=black;

dots/.config/tmux/themes/zenwritten_dark.tmux

@@ -0,0 +1,22 @@
+# This file is based on the one provided by shipwright.nvim
+set -g @FG '#dddddd'
+set -g @BG '#111111'
+
+set -g status-left ' #[fg=#{@FG},bold]#{s/root//:client_key_table} '
+set -g status-right '#[fg=#{@FG},bold] [#S]#[fg=#{@FG},bold] [%d/%m] #[fg=#{@FG},bold][%I:%M%p] '
+set -g status-style fg='#{@FG}',bg='#{@BG}'
+
+set -g window-status-current-style fg='#{@FG}',bg='#{@BG}',bold
+
+set -g pane-border-style fg='#{@FG}'
+set -g pane-active-border-style fg='#{@FG}'
+
+set -g message-style fg='#{@FG}',bg='#{@FG}'
+
+set -g display-panes-active-colour '#{@FG}'
+set -g display-panes-colour '#{@FG}'
+
+set -g clock-mode-colour '#{@FG}'
+
+set -g mode-style fg='#{@FG}',bg='#{@FG}'
+

dots/.config/tmux/themes/zenwritten_light.tmux

@@ -0,0 +1,22 @@
+# This file is based on the one provided by shipwright.nvim
+set -g @FG '#111111'
+set -g @BG '#dddddd'
+
+set -g status-left ' #[fg=#{@FG},bold]#{s/root//:client_key_table} '
+set -g status-right '#[fg=#{@FG},bold] [#S]#[fg=#{@FG},bold] [%d/%m] #[fg=#{@FG},bold][%I:%M%p] '
+set -g status-style fg='#{@FG}',bg='#{@BG}'
+
+set -g window-status-current-style fg='#{@FG}',bg='#{@BG}',bold
+
+set -g pane-border-style fg='#{@FG}'
+set -g pane-active-border-style fg='#{@FG}'
+
+set -g message-style fg='#{@FG}',bg='#{@FG}'
+
+set -g display-panes-active-colour '#{@FG}'
+set -g display-panes-colour '#{@FG}'
+
+set -g clock-mode-colour '#{@FG}'
+
+set -g mode-style fg='#{@FG}',bg='#{@FG}'
+

dots/.config/tmux/tmux.conf

@@ -68,7 +68,18 @@ set -g status-left '#h '
 set -g status-right '#(uptime | cut -f 4-5 -d " " | cut -f 1 -d ",") %a %l:%M:%S %p %Y-%m-%d'
 %endif
 
-set -g default-terminal "tmux-256color"
+# theming
+%if "#{==:#{host},desktop-arch}"
+set  -g default-terminal "tmux-256color"
+setw -g window-status-style fg=colour244,bg=default
+setw -g window-status-current-style fg=colour232,bg=default,bold
+set  -g message-style fg=colour232,bg=default
+setw -g clock-mode-colour colour235
+set  -g status-style bg=default
+set  -g pane-border-style fg=#cccccc
+set  -g pane-active-border-style fg=#555555
+set  -g message-style bg=#cccccc,fg=#000000
+%endif
 
 set-hook -g after-new-session 'if -F "#{==:#{session_name},ssh}" "source ${XDG_CONFIG_HOME}/tmux/hooks/tmux.ssh.conf" "source ${XDG_CONFIG_HOME}/tmux/hooks/tmux.regular.conf"'
 

dots/.config/tmux/tmux.regular.conf

@@ -0,0 +1 @@
+set  -g status-style bg=default

dots/.gitignore

@@ -84,9 +84,6 @@ dkms.conf
 
 # Dotenv
 .env
-.envrc
-.direnv/
-.pre-commit-config.yaml
 
 # Prevent module files from being ignored (e.g. NestJS)
 !*.module*

dots/.local/share/task/hooks/on-add.limit.py

@@ -1,29 +0,0 @@
-#!/usr/bin/env python3
-import sys
-import json
-
-SLOTS_FILE = "/home/h/.local/share/task/add_slots"
-
-def get_slots():
-    try:
-        with open(SLOTS_FILE, "r") as f:
-            return int(f.read().strip())
-    except:
-        return 0
-
-slots = get_slots()
-
-if slots <= 0:
-    print(f"Cannot add task: No slots available (0/{slots}).")
-    print("Delete or complete a task first to earn an add slot.")
-    sys.exit(1)
-
-with open(SLOTS_FILE, "w") as f:
-    f.write(str(slots - 1))
-
-print(f"Task added. Slots remaining: {slots - 1}")
-
-for line in sys.stdin:
-    task = json.loads(line)
-    print(json.dumps(task))
-    sys.exit(0)

dots/.local/share/task/hooks/on-modify.limit.py

@@ -1,34 +0,0 @@
-#!/usr/bin/env python3
-import sys
-import json
-
-SLOTS_FILE = "/home/h/.local/share/task/add_slots"
-
-def get_slots():
-    try:
-        with open(SLOTS_FILE, "r") as f:
-            return int(f.read().strip())
-    except:
-        return 0
-
-data = sys.stdin.read().strip().split("\n")
-if len(data) < 2:
-    for line in data:
-        if line:
-            print(line)
-    sys.exit(0)
-
-old_task = json.loads(data[0])
-new_task = json.loads(data[1])
-
-was_pending = old_task.get("status") == "pending"
-is_not_pending = new_task.get("status") in ("completed", "deleted")
-
-if was_pending and is_not_pending:
-    slots = get_slots() + 1
-    with open(SLOTS_FILE, "w") as f:
-        f.write(str(slots))
-    print(f"Slot earned! Total slots: {slots}")
-
-print(json.dumps(new_task))
-sys.exit(0)

dots/.resticexclude

@@ -0,0 +1,44 @@
+# Restic ignore
+
+# General
+.trash
+Trash
+.cache
+cache
+Cache
+CachedData
+CachedExtension
+CacheStorage
+__pycache__
+GPUCache
+ShaderCache
+build
+.git
+node_modules
+venv
+env
+
+# Specifics
+$HOME/.android
+$HOME/.atom
+$HOME/.build
+$HOME/.cabal
+$HOME/.cargo
+$HOME/.conda
+$HOME/.config/BraveSoftware/Brave-Browser/Default/Local Storage
+$HOME/.config/BraveSoftware/Brave-Browser/Default/Local Extension Settings
+$HOME/.config/nvm/versions
+$HOME/.config/devcert
+$HOME/.espressif
+$HOME/.local/share/torbrowser
+$HOME/.mozilla
+$HOME/.nvm
+$HOME/.npm
+$HOME/.nuget
+$HOME/.yarn
+$HOME/.config/yarn
+$HOME/doc/disk-images
+$HOME/.stremio-server
+$HOME/Games
+!$HOME/Games/*/drive_c/users/h/AppData
+!$HOME/Games/rhino

dots/.resticinclude

@@ -0,0 +1,3 @@
+/etc
+/boot
+/home

flake.lock

@@ -1,73 +1,5 @@
 {
   "nodes": {
-    "base16": {
-      "inputs": {
-        "fromYaml": "fromYaml"
-      },
-      "locked": {
-        "lastModified": 1755819240,
-        "narHash": "sha256-qcMhnL7aGAuFuutH4rq9fvAhCpJWVHLcHVZLtPctPlo=",
-        "owner": "SenchoPens",
-        "repo": "base16.nix",
-        "rev": "75ed5e5e3fce37df22e49125181fa37899c3ccd6",
-        "type": "github"
-      },
-      "original": {
-        "owner": "SenchoPens",
-        "repo": "base16.nix",
-        "type": "github"
-      }
-    },
-    "base16-fish": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1765809053,
-        "narHash": "sha256-XCUQLoLfBJ8saWms2HCIj4NEN+xNsWBlU1NrEPcQG4s=",
-        "owner": "tomyun",
-        "repo": "base16-fish",
-        "rev": "86cbea4dca62e08fb7fd83a70e96472f92574782",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tomyun",
-        "repo": "base16-fish",
-        "rev": "86cbea4dca62e08fb7fd83a70e96472f92574782",
-        "type": "github"
-      }
-    },
-    "base16-helix": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1760703920,
-        "narHash": "sha256-m82fGUYns4uHd+ZTdoLX2vlHikzwzdu2s2rYM2bNwzw=",
-        "owner": "tinted-theming",
-        "repo": "base16-helix",
-        "rev": "d646af9b7d14bff08824538164af99d0c521b185",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "base16-helix",
-        "type": "github"
-      }
-    },
-    "base16-vim": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1732806396,
-        "narHash": "sha256-e0bpPySdJf0F68Ndanwm+KWHgQiZ0s7liLhvJSWDNsA=",
-        "owner": "tinted-theming",
-        "repo": "base16-vim",
-        "rev": "577fe8125d74ff456cf942c733a85d769afe58b7",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "base16-vim",
-        "rev": "577fe8125d74ff456cf942c733a85d769afe58b7",
-        "type": "github"
-      }
-    },
     "colmena": {
       "inputs": {
         "flake-compat": "flake-compat",
@@ -121,11 +53,11 @@
       },
       "locked": {
         "dir": "pkgs/firefox-addons",
-        "lastModified": 1771732978,
+        "lastModified": 1769745834,
-        "narHash": "sha256-o7gZh/eXFkEEmzwlBdIbgCJhmdlqQhOhVjudqgsIefg=",
+        "narHash": "sha256-/7EzWXFrHiF2LiuQPFUD1jhICcRa30QVa/uQCPu1Q/g=",
         "owner": "rycee",
         "repo": "nur-expressions",
-        "rev": "18226106e18bc40cce99d436ee741a946f1888f6",
+        "rev": "ec30ecfdee4b0df2325c2672db21684e806f4b69",
         "type": "gitlab"
       },
       "original": {
@@ -135,22 +67,6 @@
         "type": "gitlab"
       }
     },
-    "firefox-gnome-theme": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1764873433,
-        "narHash": "sha256-1XPewtGMi+9wN9Ispoluxunw/RwozuTRVuuQOmxzt+A=",
-        "owner": "rafaelmardojai",
-        "repo": "firefox-gnome-theme",
-        "rev": "f7ffd917ac0d253dbd6a3bf3da06888f57c69f92",
-        "type": "github"
-      },
-      "original": {
-        "owner": "rafaelmardojai",
-        "repo": "firefox-gnome-theme",
-        "type": "github"
-      }
-    },
     "flake-compat": {
       "flake": false,
       "locked": {
@@ -167,22 +83,6 @@
         "type": "github"
       }
     },
-    "flake-compat_2": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1767039857,
-        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
-        "owner": "NixOS",
-        "repo": "flake-compat",
-        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "repo": "flake-compat",
-        "type": "github"
-      }
-    },
     "flake-parts": {
       "inputs": {
         "nixpkgs-lib": [
@@ -205,27 +105,6 @@
         "type": "github"
       }
     },
-    "flake-parts_2": {
-      "inputs": {
-        "nixpkgs-lib": [
-          "stylix",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1767609335,
-        "narHash": "sha256-feveD98mQpptwrAEggBQKJTYbvwwglSbOv53uCfH9PY=",
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "rev": "250481aafeb741edfe23d29195671c19b36b6dca",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "type": "github"
-      }
-    },
     "flake-utils": {
       "locked": {
         "lastModified": 1659877975,
@@ -259,84 +138,6 @@
         "type": "github"
       }
     },
-    "fromYaml": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1731966426,
-        "narHash": "sha256-lq95WydhbUTWig/JpqiB7oViTcHFP8Lv41IGtayokA8=",
-        "owner": "SenchoPens",
-        "repo": "fromYaml",
-        "rev": "106af9e2f715e2d828df706c386a685698f3223b",
-        "type": "github"
-      },
-      "original": {
-        "owner": "SenchoPens",
-        "repo": "fromYaml",
-        "type": "github"
-      }
-    },
-    "git-hooks": {
-      "inputs": {
-        "flake-compat": "flake-compat_2",
-        "gitignore": "gitignore",
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1771857445,
-        "narHash": "sha256-NCrhxU9wq5+4jQG1fvRbyTnH8GSbH6LovreVoH2fOL4=",
-        "owner": "cachix",
-        "repo": "git-hooks.nix",
-        "rev": "3d7a52f678227930ab089f5d9b384f2d50f7d534",
-        "type": "github"
-      },
-      "original": {
-        "owner": "cachix",
-        "repo": "git-hooks.nix",
-        "type": "github"
-      }
-    },
-    "gitignore": {
-      "inputs": {
-        "nixpkgs": [
-          "git-hooks",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1709087332,
-        "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
-        "owner": "hercules-ci",
-        "repo": "gitignore.nix",
-        "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hercules-ci",
-        "repo": "gitignore.nix",
-        "type": "github"
-      }
-    },
-    "gnome-shell": {
-      "flake": false,
-      "locked": {
-        "host": "gitlab.gnome.org",
-        "lastModified": 1767737596,
-        "narHash": "sha256-eFujfIUQDgWnSJBablOuG+32hCai192yRdrNHTv0a+s=",
-        "owner": "GNOME",
-        "repo": "gnome-shell",
-        "rev": "ef02db02bf0ff342734d525b5767814770d85b49",
-        "type": "gitlab"
-      },
-      "original": {
-        "host": "gitlab.gnome.org",
-        "owner": "GNOME",
-        "ref": "gnome-49",
-        "repo": "gnome-shell",
-        "type": "gitlab"
-      }
-    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -344,11 +145,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1771851181,
+        "lastModified": 1769776025,
-        "narHash": "sha256-gFgE6mGUftwseV3DUENMb0k0EiHd739lZexPo5O/sdQ=",
+        "narHash": "sha256-70a1kVC08AMTvPc7iqQsJbbD4Y1fukakMVudz4oY9SM=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "9a4b494b1aa1b93d8edf167f46dc8e0c0011280c",
+        "rev": "0fba737f8d5571d41467f3d99a878e11b8c0f0f0",
         "type": "github"
       },
       "original": {
@@ -376,6 +177,29 @@
         "type": "github"
       }
     },
+    "nix-formatter-pack": {
+      "inputs": {
+        "nixpkgs": [
+          "nix-on-droid",
+          "nixpkgs"
+        ],
+        "nmd": "nmd",
+        "nmt": "nmt"
+      },
+      "locked": {
+        "lastModified": 1705252799,
+        "narHash": "sha256-HgSTREh7VoXjGgNDwKQUYcYo13rPkltW7IitHrTPA5c=",
+        "owner": "Gerschtli",
+        "repo": "nix-formatter-pack",
+        "rev": "2de39dedd79aab14c01b9e2934842051a160ffa5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Gerschtli",
+        "repo": "nix-formatter-pack",
+        "type": "github"
+      }
+    },
     "nix-github-actions": {
       "inputs": {
         "nixpkgs": [
@@ -397,13 +221,41 @@
         "type": "github"
       }
     },
+    "nix-on-droid": {
+      "inputs": {
+        "home-manager": [
+          "home-manager"
+        ],
+        "nix-formatter-pack": "nix-formatter-pack",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "nixpkgs-docs": "nixpkgs-docs",
+        "nixpkgs-for-bootstrap": "nixpkgs-for-bootstrap",
+        "nmd": "nmd_2"
+      },
+      "locked": {
+        "lastModified": 1720396533,
+        "narHash": "sha256-UFzk/hZWO1VkciIO5UPaSpJN8s765wsngUSvtJM6d5Q=",
+        "owner": "nix-community",
+        "repo": "nix-on-droid",
+        "rev": "f3d3b8294039f2f9a8fb7ea82c320f29c6b0fe25",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "release-24.05",
+        "repo": "nix-on-droid",
+        "type": "github"
+      }
+    },
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1770135527,
+        "lastModified": 1769114809,
-        "narHash": "sha256-Fup9LiyL6bDID3x+rAB2nP99Xv2o9Is5NkTDbmIy6o0=",
+        "narHash": "sha256-xRZeYJAq/AcEZqsevIn1POBswP4rFYhOsQxaJP6xxpM=",
         "ref": "main",
-        "rev": "521d144f8a8ff9fca8ccf492d7fbdd05d9a5fe37",
+        "rev": "b14f3b416336bf44343941322745d6144582560e",
         "shallow": true,
         "type": "git",
         "url": "ssh://git@github.com/hektor/nix-secrets"
@@ -417,11 +269,11 @@
     },
     "nixCats": {
       "locked": {
-        "lastModified": 1770584904,
+        "lastModified": 1769578476,
-        "narHash": "sha256-9Zaz8lbKF2W9pwXZEnbiGsicHdBoU+dHt3Wv3mCJoZ8=",
+        "narHash": "sha256-4+KbiBcC6hQ3sh0UbPXjy6TOfLh9yhskRlfPzyZ2FH4=",
         "owner": "BirdeeHub",
         "repo": "nixCats-nvim",
-        "rev": "538fdde784d2909700d97a8ef307783b33a86fb1",
+        "rev": "48f8be4bdafccfa19ceaaf08071a15eca36fdb1d",
         "type": "github"
       },
       "original": {
@@ -453,11 +305,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1771423359,
+        "lastModified": 1769302137,
-        "narHash": "sha256-yRKJ7gpVmXbX2ZcA8nFi6CMPkJXZGjie2unsiMzj3Ig=",
+        "narHash": "sha256-QEDtctEkOsbx8nlFh4yqPEOtr4tif6KTqWwJ37IM2ds=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "740a22363033e9f1bb6270fbfb5a9574067af15b",
+        "rev": "a351494b0e35fd7c0b7a1aae82f0afddf4907aa8",
         "type": "github"
       },
       "original": {
@@ -469,11 +321,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1771369470,
+        "lastModified": 1769461804,
-        "narHash": "sha256-0NBlEBKkN3lufyvFegY4TYv5mCNHbi5OmBDrzihbBMQ=",
+        "narHash": "sha256-msG8SU5WsBUfVVa/9RPLaymvi5bI8edTavbIq3vRlhI=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "0182a361324364ae3f436a63005877674cf45efb",
+        "rev": "bfc1b8a4574108ceef22f02bafcf6611380c100d",
         "type": "github"
       },
       "original": {
@@ -483,6 +335,38 @@
         "type": "github"
       }
     },
+    "nixpkgs-docs": {
+      "locked": {
+        "lastModified": 1705957679,
+        "narHash": "sha256-Q8LJaVZGJ9wo33wBafvZSzapYsjOaNjP/pOnSiKVGHY=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "9a333eaa80901efe01df07eade2c16d183761fa3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "release-23.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-for-bootstrap": {
+      "locked": {
+        "lastModified": 1720244366,
+        "narHash": "sha256-WrDV0FPMVd2Sq9hkR5LNHudS3OSMmUrs90JUTN+MXpA=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "49ee0e94463abada1de470c9c07bfc12b36dcf40",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "49ee0e94463abada1de470c9c07bfc12b36dcf40",
+        "type": "github"
+      }
+    },
     "nixpkgs_2": {
       "locked": {
         "lastModified": 1743689281,
@@ -499,29 +383,58 @@
         "type": "github"
       }
     },
-    "nur": {
+    "nmd": {
-      "inputs": {
+      "flake": false,
-        "flake-parts": [
-          "stylix",
-          "flake-parts"
-        ],
-        "nixpkgs": [
-          "stylix",
-          "nixpkgs"
-        ]
-      },
       "locked": {
-        "lastModified": 1767810917,
+        "lastModified": 1666190571,
-        "narHash": "sha256-ZKqhk772+v/bujjhla9VABwcvz+hB2IaRyeLT6CFnT0=",
+        "narHash": "sha256-Z1hc7M9X6L+H83o9vOprijpzhTfOBjd0KmUTnpHAVjA=",
-        "owner": "nix-community",
+        "owner": "rycee",
-        "repo": "NUR",
+        "repo": "nmd",
-        "rev": "dead29c804adc928d3a69dfe7f9f12d0eec1f1a4",
+        "rev": "b75d312b4f33bd3294cd8ae5c2ca8c6da2afc169",
-        "type": "github"
+        "type": "gitlab"
       },
       "original": {
-        "owner": "nix-community",
+        "owner": "rycee",
-        "repo": "NUR",
+        "repo": "nmd",
-        "type": "github"
+        "type": "gitlab"
+      }
+    },
+    "nmd_2": {
+      "inputs": {
+        "nixpkgs": [
+          "nix-on-droid",
+          "nixpkgs-docs"
+        ],
+        "scss-reset": "scss-reset"
+      },
+      "locked": {
+        "lastModified": 1705050560,
+        "narHash": "sha256-x3zzcdvhJpodsmdjqB4t5mkVW22V3wqHLOun0KRBzUI=",
+        "owner": "~rycee",
+        "repo": "nmd",
+        "rev": "66d9334933119c36f91a78d565c152a4fdc8d3d3",
+        "type": "sourcehut"
+      },
+      "original": {
+        "owner": "~rycee",
+        "repo": "nmd",
+        "type": "sourcehut"
+      }
+    },
+    "nmt": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1648075362,
+        "narHash": "sha256-u36WgzoA84dMVsGXzml4wZ5ckGgfnvS0ryzo/3zn/Pc=",
+        "owner": "rycee",
+        "repo": "nmt",
+        "rev": "d83601002c99b78c89ea80e5e6ba21addcfe12ae",
+        "type": "gitlab"
+      },
+      "original": {
+        "owner": "rycee",
+        "repo": "nmt",
+        "type": "gitlab"
       }
     },
     "nvim": {
@@ -533,6 +446,7 @@
         ],
         "plugins-beancount-nvim": "plugins-beancount-nvim",
         "plugins-helm-ls-nvim": "plugins-helm-ls-nvim",
+        "plugins-m-taskwarrior-d-nvim": "plugins-m-taskwarrior-d-nvim",
         "plugins-mcphub-nvim": "plugins-mcphub-nvim",
         "plugins-nvimkit-nvim": "plugins-nvimkit-nvim",
         "plugins-shipwright-nvim": "plugins-shipwright-nvim",
@@ -580,6 +494,22 @@
         "type": "github"
       }
     },
+    "plugins-m-taskwarrior-d-nvim": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767960157,
+        "narHash": "sha256-ov0qi4LhIlwqrBzSbTJ6APC5qjl2d/vlKWJfW5ZiDrg=",
+        "owner": "huantrinh1802",
+        "repo": "m_taskwarrior_d.nvim",
+        "rev": "107247387cd81823046bc2b8e71150c8edf041d3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "huantrinh1802",
+        "repo": "m_taskwarrior_d.nvim",
+        "type": "github"
+      }
+    },
     "plugins-mcphub-nvim": {
       "flake": false,
       "locked": {
@@ -649,15 +579,30 @@
         "colmena": "colmena",
         "disko": "disko",
         "firefox-addons": "firefox-addons",
-        "git-hooks": "git-hooks",
         "home-manager": "home-manager",
+        "nix-on-droid": "nix-on-droid",
         "nix-secrets": "nix-secrets",
         "nixgl": "nixgl",
         "nixos-hardware": "nixos-hardware",
         "nixpkgs": "nixpkgs",
         "nvim": "nvim",
-        "sops-nix": "sops-nix",
+        "sops-nix": "sops-nix"
-        "stylix": "stylix"
+      }
+    },
+    "scss-reset": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1631450058,
+        "narHash": "sha256-muDlZJPtXDIGevSEWkicPP0HQ6VtucbkMNygpGlBEUM=",
+        "owner": "andreymatin",
+        "repo": "scss-reset",
+        "rev": "0cf50e27a4e95e9bb5b1715eedf9c54dee1a5a91",
+        "type": "github"
+      },
+      "original": {
+        "owner": "andreymatin",
+        "repo": "scss-reset",
+        "type": "github"
       }
     },
     "sops-nix": {
@@ -667,11 +612,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1771735105,
+        "lastModified": 1769469829,
-        "narHash": "sha256-MJuVJeszZEziquykEHh/hmgIHYxUcuoG/1aowpLiSeU=",
+        "narHash": "sha256-wFcr32ZqspCxk4+FvIxIL0AZktRs6DuF8oOsLt59YBU=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "d7755d820f5fa8acf7f223309c33e25d4f92e74f",
+        "rev": "c5eebd4eb2e3372fe12a8d70a248a6ee9dd02eff",
         "type": "github"
       },
       "original": {
@@ -696,40 +641,6 @@
         "type": "github"
       }
     },
-    "stylix": {
-      "inputs": {
-        "base16": "base16",
-        "base16-fish": "base16-fish",
-        "base16-helix": "base16-helix",
-        "base16-vim": "base16-vim",
-        "firefox-gnome-theme": "firefox-gnome-theme",
-        "flake-parts": "flake-parts_2",
-        "gnome-shell": "gnome-shell",
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "nur": "nur",
-        "systems": "systems_2",
-        "tinted-foot": "tinted-foot",
-        "tinted-kitty": "tinted-kitty",
-        "tinted-schemes": "tinted-schemes",
-        "tinted-tmux": "tinted-tmux",
-        "tinted-zed": "tinted-zed"
-      },
-      "locked": {
-        "lastModified": 1771787992,
-        "narHash": "sha256-Vg4bGwwenNYI8p3nJTl9FRyeIyrjATeZrZr+GyUSDrw=",
-        "owner": "danth",
-        "repo": "stylix",
-        "rev": "30054cca073b49b42a71289edec858f535b27fe9",
-        "type": "github"
-      },
-      "original": {
-        "owner": "danth",
-        "repo": "stylix",
-        "type": "github"
-      }
-    },
     "systems": {
       "locked": {
         "lastModified": 1681028828,
@@ -744,102 +655,6 @@
         "repo": "default",
         "type": "github"
       }
-    },
-    "systems_2": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
-    "tinted-foot": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1726913040,
-        "narHash": "sha256-+eDZPkw7efMNUf3/Pv0EmsidqdwNJ1TaOum6k7lngDQ=",
-        "owner": "tinted-theming",
-        "repo": "tinted-foot",
-        "rev": "fd1b924b6c45c3e4465e8a849e67ea82933fcbe4",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "tinted-foot",
-        "rev": "fd1b924b6c45c3e4465e8a849e67ea82933fcbe4",
-        "type": "github"
-      }
-    },
-    "tinted-kitty": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1735730497,
-        "narHash": "sha256-4KtB+FiUzIeK/4aHCKce3V9HwRvYaxX+F1edUrfgzb8=",
-        "owner": "tinted-theming",
-        "repo": "tinted-kitty",
-        "rev": "de6f888497f2c6b2279361bfc790f164bfd0f3fa",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "tinted-kitty",
-        "type": "github"
-      }
-    },
-    "tinted-schemes": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1767710407,
-        "narHash": "sha256-+W1EB79Jl0/gm4JqmO0Nuc5C7hRdp4vfsV/VdzI+des=",
-        "owner": "tinted-theming",
-        "repo": "schemes",
-        "rev": "2800e2b8ac90f678d7e4acebe4fa253f602e05b2",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "schemes",
-        "type": "github"
-      }
-    },
-    "tinted-tmux": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1767489635,
-        "narHash": "sha256-e6nnFnWXKBCJjCv4QG4bbcouJ6y3yeT70V9MofL32lU=",
-        "owner": "tinted-theming",
-        "repo": "tinted-tmux",
-        "rev": "3c32729ccae99be44fe8a125d20be06f8d7d8184",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "tinted-tmux",
-        "type": "github"
-      }
-    },
-    "tinted-zed": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1767488740,
-        "narHash": "sha256-wVOj0qyil8m+ouSsVZcNjl5ZR+1GdOOAooAatQXHbuU=",
-        "owner": "tinted-theming",
-        "repo": "base16-zed",
-        "rev": "11abb0b282ad3786a2aae088d3a01c60916f2e40",
-        "type": "github"
-      },
-      "original": {
-        "owner": "tinted-theming",
-        "repo": "base16-zed",
-        "type": "github"
-      }
     }
   },
   "root": "root",

flake.nix

@@ -3,10 +3,6 @@
     nixpkgs = {
       url = "github:nixos/nixpkgs/nixos-unstable";
     };
-    stylix = {
-      url = "github:danth/stylix";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
     nixos-hardware = {
       url = "github:NixOS/nixos-hardware/master";
     };
@@ -26,6 +22,11 @@
       url = "github:nix-community/home-manager";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    nix-on-droid = {
+      url = "github:nix-community/nix-on-droid/release-24.05";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.home-manager.follows = "home-manager";
+    };
     nixgl = {
       url = "github:nix-community/nixGL";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -42,10 +43,6 @@
       url = "github:zhaofengli/colmena";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    git-hooks = {
-      url = "github:cachix/git-hooks.nix";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
   };
 
   outputs =
@@ -53,8 +50,8 @@
       self,
       nixpkgs,
       home-manager,
+      nix-on-droid,
       nixgl,
-      git-hooks,
       ...
     }@inputs:
     let
@@ -64,10 +61,6 @@
       hostDirNames = utils.dirNames ./hosts;
       system = "x86_64-linux";
       dotsPath = ./dots;
-      gitHooks = import ./git-hooks.nix {
-        inherit nixpkgs git-hooks system;
-        src = ./.;
-      };
     in
     {
       nix.nixPath = [
@@ -77,36 +70,23 @@
         (lib.genAttrs hostDirNames (
           host:
           nixpkgs.lib.nixosSystem {
-            modules = [
+            system = import ./hosts/${host}/system.nix;
-              ./hosts/${host}
+            modules = [ ./hosts/${host} ];
-              { nixpkgs.hostPlatform = import ./hosts/${host}/system.nix; }
-            ];
             specialArgs = {
               inherit inputs outputs dotsPath;
             };
           }
         ))
         // {
-          sd-image-orange-pi-aarch64 = nixpkgs.lib.nixosSystem {
+          sd-image-aarch64 = nixpkgs.lib.nixosSystem {
+            system = "x86_64-linux";
             modules = [
               "${nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
-              ./images/sd-image-orange-pi-aarch64.nix
+              ./images/sd-image-aarch64.nix
               {
-                nixpkgs.buildPlatform = "x86_64-linux";
+                nixpkgs.crossSystem = {
-                nixpkgs.hostPlatform = "aarch64-linux";
+                  system = "aarch64-linux";
-              }
+                };
-            ];
-            specialArgs = {
-              inherit inputs outputs dotsPath;
-            };
-          };
-          sd-image-raspberry-pi-aarch64 = nixpkgs.lib.nixosSystem {
-            modules = [
-              "${nixpkgs}/nixos/modules/installer/sd-card/sd-image-aarch64.nix"
-              ./images/sd-image-raspberry-pi-aarch64.nix
-              {
-                nixpkgs.buildPlatform = "x86_64-linux";
-                nixpkgs.hostPlatform = "aarch64-linux";
               }
             ];
             specialArgs = {
@@ -114,7 +94,6 @@
             };
           };
         };
-
       homeConfigurations = {
         work = home-manager.lib.homeManagerConfiguration {
           pkgs = import nixpkgs {
@@ -127,25 +106,28 @@
           };
         };
       };
+      # https://github.com/nix-community/nix-on-droid/blob/master/templates/advanced/flake.nix
+      nixOnDroidConfigurations = {
+        pixel = nix-on-droid.lib.nixOnDroidConfiguration {
+          modules = [ ./phone ];
+          extraSpecialArgs = {
+            inherit inputs outputs dotsPath;
+          };
+          pkgs = import nixpkgs {
+            system = "aarch64-linux";
+            overlays = [ nix-on-droid.overlays.default ];
+          };
+          home-manager-path = home-manager.outPath;
+        };
+      };
 
-      apps.${system}.colmena = inputs.colmena.apps.${system}.default;
+      colmenaHive = import ./deploy/colmena.nix {
-
-      colmena = import ./deploy/colmena.nix {
         inherit
           self
           inputs
           ;
       };
 
-      checks.${system} = gitHooks.checks;
+      images.sd-image-aarch64 = self.nixosConfigurations.sd-image-aarch64.config.system.build.sdImage;
-      formatter.${system} = gitHooks.formatter;
-      devShells.${system} = gitHooks.devShells;
-
-      legacyPackages.${system} = {
-        sd-image-orange-pi-aarch64 =
-          self.nixosConfigurations.sd-image-orange-pi-aarch64.config.system.build.sdImage;
-        sd-image-raspberry-pi-aarch64 =
-          self.nixosConfigurations.sd-image-raspberry-pi-aarch64.config.system.build.sdImage;
-      };
     };
 }

git-hooks.nix

@@ -1,47 +0,0 @@
-{
-  nixpkgs,
-  git-hooks,
-  system,
-  src,
-}:
-let
-  pkgs = nixpkgs.legacyPackages.${system};
-
-  pre-commit-check = git-hooks.lib.${system}.run {
-    inherit src;
-    hooks = {
-      nixfmt = {
-        enable = true;
-        package = pkgs.nixfmt;
-      };
-      statix.enable = true;
-      deadnix.enable = true;
-    };
-  };
-in
-{
-  checks = {
-    inherit pre-commit-check;
-  };
-
-  formatter =
-    let
-      inherit (pre-commit-check) config;
-      inherit (config) package configFile;
-      script = ''
-        ${pkgs.lib.getExe package} run --all-files --config ${configFile}
-      '';
-    in
-    pkgs.writeShellScriptBin "pre-commit-run" script;
-
-  devShells = {
-    default =
-      let
-        inherit (pre-commit-check) shellHook enabledPackages;
-      in
-      pkgs.mkShell {
-        inherit shellHook;
-        buildInputs = enabledPackages;
-      };
-  };
-}

home/hosts/andromache/default.nix

@@ -1,5 +1,6 @@
 {
   lib,
+  inputs,
   config,
   pkgs,
   ...
@@ -10,20 +11,14 @@ let
 in
 {
   imports = [
-    ../../modules
-    ../../modules/ai-tools.nix
-    ../../modules/audio
     ../../modules/cloud
     ../../modules/comms
     ../../modules/desktop/niri
-    ../../modules/direnv
     ../../modules/3d
     ../../modules/git
     ../../modules/k8s/k9s.nix
     ../../modules/kitty.nix
-    ../../modules/music
     ../../modules/nvim.nix
-    ../../modules/pandoc.nix
     ../../modules/ssh.nix
     ../../modules/taskwarrior.nix
     ../../modules/keepassxc.nix
@@ -42,12 +37,10 @@ in
   xdg.userDirs.createDirectories = false;
   xdg.userDirs.download = "${config.home.homeDirectory}/dl";
 
-  ai-tools.opencode.enable = true;
   browser.primary = "librewolf";
   cloud.hetzner.enable = true;
   comms.signal.enable = true;
   github.enable = true;
-  pandoc.enable = true;
 
   shell.bash = {
     enable = true;

home/hosts/astyanax/default.nix

@@ -9,21 +9,15 @@ let
 in
 {
   imports = [
-    ../../modules
     ../../modules/ai-tools.nix
-    ../../modules/audio
     ../../modules/anki.nix
     ../../modules/cloud
     ../../modules/comms
-    ../../modules/direnv
     ../../modules/desktop/niri
     ../../modules/git
     ../../modules/k8s/k9s.nix
     ../../modules/kitty.nix
-    ../../modules/music
-    ../../modules/nfc
     ../../modules/nvim.nix
-    ../../modules/pandoc.nix
     ../../modules/ssh.nix
     ../../modules/taskwarrior.nix
     ../../modules/keepassxc.nix
@@ -40,13 +34,10 @@ in
   xdg.userDirs.createDirectories = false;
   xdg.userDirs.download = "${config.home.homeDirectory}/dl";
 
-  ai-tools.opencode.enable = true;
   browser.primary = "librewolf";
   cloud.hetzner.enable = true;
   comms.signal.enable = true;
   github.enable = true;
-  nfc.proxmark3.enable = true;
-  pandoc.enable = true;
 
   shell.bash = {
     enable = true;

home/hosts/packages.nix

@@ -6,12 +6,17 @@ with pkgs;
   entr
   feh
   fzf
+  haskellPackages.pandoc-crossref
   htop
   jq
+  nixfmt-rfc-style
   nmap
+  nodejs_24
   nvimpager
+  pandoc
   parallel
   pass
+  pnpm
   ripgrep
   silver-searcher
   sops

home/hosts/work/default.nix

@@ -11,31 +11,20 @@ in
 {
   imports = [
     inputs.sops-nix.homeManagerModules.sops
-    ../../modules
-    ../../modules/stylix.nix
     ../../modules/ai-tools.nix
     ../../modules/cloud
     ../../modules/comms
-    ../../modules/desktop/niri
     ../../modules/dconf.nix
-    ../../modules/direnv
     ../../modules/docker
     ../../modules/git
-    ../../modules/go
     ../../modules/k8s
-    ../../modules/k8s/k9s.nix
+    ../../modules/k9s.nix
     ../../modules/keepassxc.nix
     ../../modules/kitty.nix
     ../../modules/nvim.nix
-    ../../modules/pandoc.nix
     ../../modules/browser
     ../../modules/shell
-    ../../modules/music
-    ../../modules/nodejs.nix
     ../../modules/taskwarrior.nix
-    ../../modules/bruno.nix
-    ../../modules/pandoc.nix
-    ../../modules/vscode.nix
   ];
 
   sops = {
@@ -48,29 +37,14 @@ in
       taskwarrior_sync_encryption_secret = { };
       anki_sync_user = { };
       anki_sync_key = { };
-      opencode_api_key = { };
     };
 
-    templates = {
+    templates."taskrc.d/sync" = {
-      "taskrc.d/sync" = {
+      content = ''
-        content = ''
+        sync.server.url=${config.sops.placeholder.taskwarrior_sync_server_url}
-          sync.server.url=${config.sops.placeholder.taskwarrior_sync_server_url}
+        sync.server.client_id=${config.sops.placeholder.taskwarrior_sync_server_client_id}
-          sync.server.client_id=${config.sops.placeholder.taskwarrior_sync_server_client_id}
+        sync.encryption_secret=${config.sops.placeholder.taskwarrior_sync_encryption_secret}
-          sync.encryption_secret=${config.sops.placeholder.taskwarrior_sync_encryption_secret}
+      '';
-        '';
-      };
-
-      "opencode/auth.json" = {
-        path = "${config.home.homeDirectory}/.local/share/opencode/auth.json";
-        content = ''
-          {
-            "zai-coding-plan": {
-              "type": "api",
-              "key": "${config.sops.placeholder.opencode_api_key}"
-            }
-          }
-        '';
-      };
     };
   };
 
@@ -92,13 +66,8 @@ in
   cloud.azure.enable = true;
   comms.signal.enable = true;
   comms.teams.enable = true;
-  ai-tools = {
-    claude-code.enable = true;
-    opencode.enable = true;
-  };
   github.enable = true;
   gitlab.enable = true;
-  pandoc.enable = true;
 
   shell.bash.enable = true;
   starship.enable = true;

home/modules/ai-tools.nix

@@ -1,89 +1,40 @@
 {
-  lib,
-  config,
   pkgs,
   ...
 }:
-let
-  cfg = config.ai-tools;
-  rtk-version = "0.18.1";
-in
 {
-  options.ai-tools = {
+  config = {
-    claude-code.enable = lib.mkEnableOption "claude code with rtk and ccline";
+    home.packages = with pkgs; [
-    opencode.enable = lib.mkEnableOption "opencode";
+      aider-chat
-  };
+      (pkgs.stdenv.mkDerivation {
-
+        name = "ccline";
-  config = lib.mkMerge [
+        src = pkgs.fetchurl {
-    (lib.mkIf cfg.claude-code.enable {
+          url = "https://github.com/Haleclipse/CCometixLine/releases/download/v1.0.8/ccline-linux-x64.tar.gz";
-      home.packages = with pkgs; [
+          hash = "sha256-Joe3Dd6uSMGi66QT6xr2oY/Tz8rA5RuKa6ckBVJIzI0=";
-        claude-code
-        (pkgs.stdenv.mkDerivation {
-          name = "ccline";
-          src = pkgs.fetchurl {
-            url = "https://github.com/Haleclipse/CCometixLine/releases/download/v1.0.8/ccline-linux-x64.tar.gz";
-            hash = "sha256-Joe3Dd6uSMGi66QT6xr2oY/Tz8rA5RuKa6ckBVJIzI0=";
-          };
-
-          unpackPhase = ''
-            tar xzf $src
-          '';
-
-          installPhase = ''
-            mkdir -p $out/bin
-            cp ccline $out/bin/
-            chmod +x $out/bin/ccline
-          '';
-
-          meta = with pkgs.lib; {
-            description = "CCometixLine Linux x64 CLI (Claude Code statusline)";
-            homepage = "https://github.com/Haleclipse/CCometixLine";
-            license = licenses.mit;
-            platforms = [ "x86_64-linux" ];
-          };
-        })
-        (pkgs.stdenv.mkDerivation {
-          name = "rtk-${rtk-version}";
-          version = rtk-version;
-          src = pkgs.fetchurl {
-            url = "https://github.com/rtk-ai/rtk/releases/download/v${rtk-version}/rtk-x86_64-unknown-linux-gnu.tar.gz";
-            hash = "sha256-XoTia5K8b00OzcKYCufwx8ApkAS31DxUCpGSU0jFs2Q=";
-          };
-
-          unpackPhase = ''
-            tar xzf $src
-          '';
-
-          installPhase = ''
-            mkdir -p $out/bin
-            cp rtk $out/bin/
-            chmod +x $out/bin/rtk
-          '';
-
-          meta = with pkgs.lib; {
-            description = "RTK - AI coding tool enhancer";
-            homepage = "https://www.rtk-ai.app";
-            license = licenses.mit;
-            platforms = [ "x86_64-linux" ];
-          };
-        })
-        mcp-nixos
-      ];
-    })
-    (lib.mkIf cfg.opencode.enable {
-      home.packages = with pkgs; [
-        opencode
-      ];
-      home.file.".config/opencode/opencode.json".text = builtins.toJSON {
-        "$schema" = "https://opencode.ai/config.json";
-        permission = {
-          external_directory = {
-            "/run/secrets/" = "deny";
-            "~/.config/sops/age/keys.txt" = "deny";
-          };
         };
-        plugin = [ "@mohak34/opencode-notifier@latest" ];
+
-      };
+        unpackPhase = ''
-    })
+          tar xzf $src
-  ];
+        '';
+
+        installPhase = ''
+          mkdir -p $out/bin
+          cp ccline $out/bin/
+          chmod +x $out/bin/ccline
+        '';
+
+        meta = with pkgs.lib; {
+          description = "CCometixLine Linux x64 CLI (Claude Code statusline)";
+          homepage = "https://github.com/Haleclipse/CCometixLine";
+          license = licenses.mit;
+          platforms = [ "x86_64-linux" ];
+        };
+      })
+      # claude-code
+      # (config.lib.nixGL.wrap code-cursor)
+      # github-copilot-cli
+      mcp-nixos
+      opencode
+    ];
+  };
 }

home/modules/audio/default.nix

@@ -1,5 +0,0 @@
-{ pkgs, ... }:
-
-{
-  home.packages = with pkgs; [ pulsemixer ];
-}

home/modules/browser/firefox-base.nix

@@ -1,22 +1,13 @@
-{
+{ inputs, pkgs }:
-  config,
-  inputs,
-  lib,
-  pkgs,
-  ...
-}:
 
 let
   bookmarks = import ./bookmarks.nix;
 in
 
 {
-  nativeMessagingHosts =
+  nativeMessagingHosts = with pkgs; [
-    with pkgs;
+    tridactyl-native
-    [
+  ];
-      tridactyl-native
-    ]
-    ++ lib.optionals config.programs.keepassxc.enable [ keepassxc ];
   profiles = {
     default = {
       settings = {
@@ -25,10 +16,8 @@ in
         "extensions.autoDisableScopes" = 0;
       };
       extensions = {
-        force = true;
+        packages = with inputs.firefox-addons.packages.${pkgs.system}; [
-        packages = with inputs.firefox-addons.packages.${pkgs.stdenv.hostPlatform.system}; [
           duckduckgo-privacy-essentials
-          firefox-color
           istilldontcareaboutcookies
           libredirect
           keepassxc-browser

home/modules/browser/firefox.nix

@@ -1,23 +1,10 @@
-{
+{ config, lib, inputs, pkgs, ... }:
-  config,
-  lib,
-  inputs,
-  pkgs,
-  ...
-}:
 
 {
   config = lib.mkIf (config.browser.primary == "firefox" || config.browser.secondary == "firefox") {
     programs.firefox = {
       enable = true;
     }
-    // (import ./firefox-base.nix {
+    // (import ./firefox-base.nix { inherit inputs pkgs; });
-      inherit
-        config
-        inputs
-        lib
-        pkgs
-        ;
-    });
   };
 }

home/modules/browser/librewolf.nix

@@ -1,10 +1,4 @@
-{
+{ config, lib, inputs, pkgs, ... }:
-  config,
-  lib,
-  inputs,
-  pkgs,
-  ...
-}:
 
 {
   config =
@@ -13,13 +7,6 @@
         programs.librewolf = {
           enable = true;
         }
-        // (import ./firefox-base.nix {
+        // (import ./firefox-base.nix { inherit inputs pkgs; });
-          inherit
-            config
-            inputs
-            lib
-            pkgs
-            ;
-        });
       };
 }

home/modules/bruno.nix

@@ -1,7 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  config = {
-    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.bruno "--no-sandbox")) ];
-  };
-}

home/modules/comms/signal.nix

@@ -4,9 +4,10 @@
   pkgs,
   ...
 }:
-
 {
   config = lib.mkIf config.comms.signal.enable {
-    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.signal-desktop "--no-sandbox")) ];
+    home.packages = with pkgs; [
+      (if config.lib ? nixGL then config.lib.nixGL.wrap signal-desktop else signal-desktop)
+    ];
   };
 }

home/modules/comms/teams.nix

@@ -7,6 +7,8 @@
 
 {
   config = lib.mkIf config.comms.teams.enable {
-    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.teams-for-linux "--no-sandbox")) ];
+    home.packages = with pkgs; [
+      (if config.lib ? nixGL then config.lib.nixGL.wrap teams-for-linux else teams-for-linux)
+    ];
   };
 }

home/modules/default.nix

@@ -1,24 +0,0 @@
-{ config, lib, ... }:
-
-{
-  options.nixgl.wrap = lib.mkOption {
-    type = lib.types.functionTo lib.types.package;
-    default = if config.lib ? nixGL then config.lib.nixGL.wrap else lib.id;
-    readOnly = true;
-  };
-
-  options.wrapApp = lib.mkOption {
-    type = lib.types.raw;
-    default =
-      pkg: flags:
-      if config.lib ? nixGL then
-        pkg.overrideAttrs (old: {
-          postInstall = (old.postInstall or "") + ''
-            wrapProgram $out/bin/${pkg.meta.mainProgram} --add-flags "${flags}"
-          '';
-        })
-      else
-        pkg;
-    readOnly = true;
-  };
-}

home/modules/desktop/niri/config.kdl

@@ -48,7 +48,8 @@ layout {
     }
 }
 
-
+spawn-at-startup "wlsunset -l 51.05 -L 3.72"
+spawn-at-startup "waybar"
 
 hotkey-overlay {
     skip-at-startup

home/modules/desktop/niri/default.nix

@@ -11,7 +11,6 @@
   home = {
     file.".config/niri/config.kdl".source = ./config.kdl;
     packages = with pkgs; [
-      brightnessctl
       wl-clipboard
       wlsunset
     ];

home/modules/direnv/default.nix

@@ -1,7 +0,0 @@
-{
-  programs.direnv = {
-    enable = true;
-    enableBashIntegration = true;
-    nix-direnv.enable = true;
-  };
-}

home/modules/fuzzel/default.nix

@@ -3,9 +3,22 @@
     enable = true;
     settings = {
       main = {
+        font = "Iosevka Term SS08";
         horizontal-pad = 0;
         vertical-pad = 0;
       };
+      colors = {
+        background = "ccccccff";
+        text = "111111ff";
+        prompt = "ccccccff";
+        placeholder = "aaaaaaff";
+        input = "111111ff";
+        selection = "eeeeeeff";
+        selection-text = "111111ff";
+        selection-match = "333333ff";
+        counter = "111111ff";
+        border = "111111ff";
+      };
       border = {
         width = 2;
         radius = 0;

home/modules/git/default.nix

@@ -21,6 +21,6 @@
     };
 
     programs.gh.enable = config.github.enable;
-    home.packages = lib.optionals config.gitlab.enable [ pkgs.glab ];
+    home.packages = with pkgs; lib.optionals (config.gitlab.enable) [ glab ];
   };
 }

home/modules/go/default.nix

@@ -1,18 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-{
-  options.go = {
-    enable = lib.mkEnableOption "go language";
-  };
-
-  config = lib.mkIf config.go.enable {
-    home.packages = with pkgs; [
-      go
-      gopls
-    ];
-  };
-}

home/modules/k8s/default.nix

@@ -7,19 +7,12 @@
     k3d
     kubectl
     kubernetes
+    kubernetes-helm
     kustomize
     minikube
     opentofu
     upbound
   ];
 
-  programs.kubecolor = {
+  imports = [ ./k9s.nix ];
-    enable = true;
-    enableAlias = true;
-  };
-
-  imports = [
-    ./helm.nix
-    ./k9s.nix
-  ];
 }

home/modules/k8s/helm.nix

@@ -1,15 +0,0 @@
-{ pkgs, ... }:
-
-{
-  home.packages = with pkgs; [
-    (wrapHelm kubernetes-helm {
-      plugins = with kubernetes-helmPlugins; [
-        helm-diff
-        helm-git
-        helm-schema
-        helm-secrets
-        helm-unittest
-      ];
-    })
-  ];
-}

home/modules/keepassxc.nix

@@ -1,3 +1,5 @@
+{ pkgs, ... }:
+
 {
   programs.keepassxc = {
     enable = true;
@@ -5,4 +7,5 @@
       Browser.Enabled = true;
     };
   };
+  # programs.firefox.nativeMessagingHosts = [ pkgs.keepassxc ]; # FIXME: Resolve 'Access error for config file $HOME/.config/keepassxc/keepassxc.ini' error
 }

home/modules/kitty.nix

@@ -1,22 +1,23 @@
-{
+{ pkgs, config, lib, dotsPath, ... }:
-  pkgs,
-  config,
-  dotsPath,
-  ...
-}:
 
 {
   config = {
+    home.packages = [
+      (if config.lib ? nixGL
+        then config.lib.nixGL.wrap pkgs.kitty
+        else pkgs.kitty)
+    ];
     programs.bash.shellAliases = {
       icat = "kitty +kitten icat";
     };
 
-    programs.kitty = {
+    home.file = {
-      enable = true;
+      ".config/kitty/kitty.conf".source = dotsPath + "/.config/kitty/kitty.conf";
-      package = config.nixgl.wrap pkgs.kitty;
+      ".config/kitty/nvim.conf".source = dotsPath + "/.config/kitty/nvim.conf";
-      extraConfig = builtins.readFile (dotsPath + "/.config/kitty/kitty.conf");
+      ".config/kitty/themes/zenwritten_light.conf".source =
+        dotsPath + "/.config/kitty/themes/zenwritten_light.conf";
+      ".config/kitty/themes/zenwritten_dark.conf".source =
+        dotsPath + "/.config/kitty/themes/zenwritten_dark.conf";
     };
-
-    home.file.".config/kitty/nvim.conf".source = dotsPath + "/.config/kitty/nvim.conf";
   };
 }

home/modules/music/default.nix

@@ -1,27 +0,0 @@
-{
-  dotsPath,
-  pkgs,
-  ...
-}:
-
-let
-  spotifyWithWayland = pkgs.symlinkJoin {
-    name = "spotify";
-    paths = [ pkgs.spotify ];
-    buildInputs = [ pkgs.makeWrapper ];
-    postBuild = ''
-      wrapProgram $out/bin/spotify \
-        --add-flags "--enable-features=UseOzonePlatform --ozone-platform=wayland"
-    '';
-  };
-in
-{
-  home.packages = with pkgs; [
-    spotifyWithWayland
-  ];
-
-  programs.ncspot = {
-    enable = true;
-    settings = builtins.fromTOML (builtins.readFile (dotsPath + "/.config/ncspot/config.toml"));
-  };
-}

home/modules/nfc/default.nix

@@ -1,5 +0,0 @@
-{
-  imports = [
-    ./proxmark3.nix
-  ];
-}

home/modules/nfc/proxmark3.nix

@@ -1,21 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-let
-  cfg = config.nfc.proxmark3;
-in
-{
-  options.nfc.proxmark3 = {
-    enable = lib.mkEnableOption "proxmark3 (iceman fork)";
-  };
-
-  config = lib.mkIf cfg.enable {
-    home.packages = [
-      (pkgs.proxmark3.override { withGeneric = true; })
-    ];
-  };
-}

home/modules/nodejs.nix

@@ -1,26 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-{
-  options.nodejs = {
-    enable = lib.mkEnableOption "nodejs (and related packages)";
-    package = lib.mkOption {
-      type = lib.types.package;
-      default = pkgs.nodejs_24;
-    };
-  };
-
-  config = lib.mkIf config.nodejs.enable {
-    home.packages = with pkgs; [
-      config.nodejs.package
-      pnpm
-      yarn
-      biome
-      tsx
-    ];
-  };
-}

home/modules/nvim.nix

@@ -3,7 +3,7 @@
 {
   config = {
     home.packages = [
-      inputs.nvim.packages.${pkgs.stdenv.hostPlatform.system}.nvim
+      inputs.nvim.packages.${pkgs.system}.nvim
     ];
   };
 }

home/modules/pandoc.nix

@@ -1,19 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-{
-  options.pandoc = {
-    enable = lib.mkEnableOption "pandoc";
-  };
-
-  config = lib.mkIf config.pandoc.enable {
-    home.packages = with pkgs; [
-      haskellPackages.pandoc-crossref
-      pandoc
-      texliveSmall
-    ];
-  };
-}

home/modules/shell/bash.nix

@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  pkgs,
   dotsPath,
   ...
 }:

home/modules/shell/prompt.nix

@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  pkgs,
   ...
 }:
 {

home/modules/ssh.nix

@@ -18,25 +18,20 @@ in
     enable = true;
     enableDefaultConfig = false;
 
-    matchBlocks =
+    matchBlocks = lib.genAttrs hostsWithKeys (
-      lib.genAttrs hostsWithKeys (
+      hostname:
-        hostname:
+      let
-        let
+        hostConfig = outputs.nixosConfigurations.${hostname}.config;
-          hostConfig = outputs.nixosConfigurations.${hostname}.config;
+        publicHostname = hostConfig.ssh.publicHostname;
-          inherit (hostConfig.ssh) publicHostname username;
+        targetUser = hostConfig.ssh.username;
-        in
+      in
-        {
+      {
-          host = hostname;
+        host = hostname;
-          user = username;
+        user = targetUser;
-        }
+      }
-        // lib.optionalAttrs (publicHostname != "") {
+      // lib.optionalAttrs (publicHostname != "") {
-          hostname = publicHostname;
+        hostname = publicHostname;
-        }
+      }
-      )
+    );
-      // {
-        "*" = {
-          addKeysToAgent = "yes";
-        };
-      };
   };
 }

home/modules/stylix.nix

@@ -1,45 +0,0 @@
-{
-  config,
-  inputs,
-  pkgs,
-  ...
-}:
-
-let
-  theme = import ../../modules/stylix/theme.nix { inherit pkgs; };
-in
-{
-  imports = [ inputs.stylix.homeModules.stylix ];
-
-  stylix = {
-    enable = true;
-    inherit (theme)
-      polarity
-      base16Scheme
-      override
-      image
-      ;
-    fonts = {
-      monospace = theme.monospaceFont;
-      serif = config.stylix.fonts.monospace;
-      sansSerif = config.stylix.fonts.monospace;
-      emoji = config.stylix.fonts.monospace;
-    };
-    targets = {
-      firefox = {
-        profileNames = [ "default" ];
-        colorTheme.enable = true;
-      };
-      librewolf = {
-        profileNames = [ "default" ];
-        colorTheme.enable = true;
-      };
-      gnome.enable = false;
-      gtk.enable = false;
-      kitty = {
-        variant256Colors = true;
-      };
-      nixvim.enable = false;
-    };
-  };
-}

home/modules/taskwarrior.nix

@@ -39,14 +39,6 @@ in
     ".local/share/task/hooks/on-exit.sync.py" = {
       source = dotsPath + "/.local/share/task/hooks/on-exit.sync.py";
     };
-    ".local/share/task/hooks/on-add.limit.py" = {
-      source = dotsPath + "/.local/share/task/hooks/on-add.limit.py";
-      executable = true;
-    };
-    ".local/share/task/hooks/on-modify.limit.py" = {
-      source = dotsPath + "/.local/share/task/hooks/on-modify.limit.py";
-      executable = true;
-    };
     ".local/share/task/scripts/sync-and-notify.sh" = {
       source = dotsPath + "/.local/share/task/scripts/sync-and-notify.sh";
       executable = true;

home/modules/tmux.nix

@@ -1,19 +1,25 @@
-{ pkgs, dotsPath, ... }:
+{
-
+  pkgs,
+  dotsPath,
+  ...
+}:
 {
   config = {
     home.packages = with pkgs; [
+      tmux
       tmuxp
       reptyr
     ];
 
-    programs.tmux = {
-      enable = true;
-      extraConfig = builtins.readFile (dotsPath + "/.config/tmux/tmux.conf");
-    };
-
     home.file = {
+      ".config/tmux/tmux.conf".source = dotsPath + "/.config/tmux/tmux.conf";
+      ".config/tmux/tmux.regular.conf".source = dotsPath + "/.config/tmux/tmux.regular.conf";
+      ".config/tmux/themes/zenwritten_light.tmux".source =
+        dotsPath + "/.config/tmux/themes/zenwritten_light.tmux";
+      ".config/tmux/themes/zenwritten_dark.tmux".source =
+        dotsPath + "/.config/tmux/themes/zenwritten_dark.tmux";
       ".config/tmux/hooks/tmux.ssh.conf".source = dotsPath + "/.config/tmux/hooks/tmux.ssh.conf";
+      ".config/tmux/hooks/tmux.regular.conf".source = dotsPath + "/.config/tmux/hooks/tmux.regular.conf";
     };
   };
 }

home/modules/vscode.nix

@@ -1,7 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  config = {
-    home.packages = [ (config.nixgl.wrap (config.wrapApp pkgs.vscode "--disable-gpu-sandbox")) ];
-  };
-}

home/modules/waybar/config.jsonc

@@ -0,0 +1,57 @@
+[
+  {
+    "height": 16,
+    "spacing": 4,
+    "modules-left": ["niri/workspaces"],
+    "modules-right": [
+      "pulseaudio",
+      "memory",
+      "cpu",
+      "network",
+      "clock",
+      "battery",
+    ],
+    "clock": {
+      "format": "W{:%V %d %b %H:%M}",
+      "tooltip-format": "{calendar}",
+      "format-alt": "{:%Y-%m-%d %H:%M:%S}",
+    },
+    "battery": {
+      "bat": "BAT0",
+      "adapter": "ADP1",
+      "interval": 5,
+      "full-at": 99,
+      "states": {
+        "good": 80,
+        "warning": 20,
+        "critical": 10,
+      },
+      "format": "{capacity}%--",
+      "format-charging": "{capacity}%++",
+      "format-plugged": "{capacity}%",
+      "format-alt": "{time} {power}W",
+    },
+    "pulseaudio": {
+      "format": "VOL {volume}%",
+      "format-muted": "muted",
+      "on-click": "pavucontrol",
+    },
+    "memory": {
+      "interval": 2,
+      "format": "RAM {percentage}%",
+      "format-alt": "RAM {used:0.1f}G/{total:0.1f}G",
+    },
+    "cpu": {
+      "interval": 2,
+      "format": "CPU {usage}%",
+      "format-alt": "CPU {avg_frequency}GHz",
+    },
+    "network": {
+      "interval": 5,
+      "format-wifi": "{ifname} {ipaddr} {essid}",
+      "format-ethernet": "{ifname} {ipaddr}",
+      "format-disconnected": "{ifname} disconnected",
+      "tooltip-format": "{ifname}: {ipaddr}/{cidr}",
+    },
+  },
+]

home/modules/waybar/default.nix

@@ -1,68 +1,8 @@
-{
-  lib,
-  ...
-}:
-
 {
   programs.waybar = {
     enable = true;
-    settings = [
-      {
-        height = 16;
-        spacing = 4;
-        modules-left = [ "niri/workspaces" ];
-        modules-right = [
-          "pulseaudio"
-          "memory"
-          "cpu"
-          "network"
-          "clock"
-          "battery"
-        ];
-        clock = {
-          format = "W{:%V %d %b %H:%M}";
-          tooltip-format = "{calendar}";
-          format-alt = "{:%Y-%m-%d %H:%M:%S}";
-        };
-        battery = {
-          bat = "BAT0";
-          adapter = "ADP1";
-          interval = 5;
-          full-at = 99;
-          states = {
-            good = 80;
-            warning = 20;
-            critical = 10;
-          };
-          format = "{capacity}%--";
-          format-charging = "{capacity}%++";
-          format-plugged = "{capacity}%";
-          format-alt = "{time} {power}W";
-        };
-        pulseaudio = {
-          format = "VOL {volume}%";
-          format-muted = "muted";
-          on-click = "pavucontrol";
-        };
-        memory = {
-          interval = 2;
-          format = "RAM {percentage}%";
-          format-alt = "RAM {used:0.1f}G/{total:0.1f}G";
-        };
-        cpu = {
-          interval = 2;
-          format = "CPU {usage}%";
-          format-alt = "CPU {avg_frequency}GHz";
-        };
-        network = {
-          interval = 5;
-          format-wifi = "{ifname} {ipaddr} {essid}";
-          format-ethernet = "{ifname} {ipaddr}";
-          format-disconnected = "{ifname} disconnected";
-          tooltip-format = "{ifname}: {ipaddr}/{cidr}";
-        };
-      }
-    ];
-    style = lib.readFile ./style.css;
   };
+
+  home.file.".config/waybar/config.jsonc".source = ./config.jsonc;
+  home.file.".config/waybar/style.css".source = ./style.css;
 }

home/modules/waybar/style.css

@@ -1,4 +1,8 @@
 * {
+  font-family:
+    Iosevka Term SS08,
+    monospace;
+  font-size: 12px;
   border-radius: 0px;
 }
 
@@ -18,22 +22,21 @@ window#waybar.hidden {
 }
 
 #workspaces button {
-  color: @base07;
   padding: 0;
   background-color: transparent;
 }
 
 #workspaces button:hover {
-  background: @base00;
+  background: #000000;
 }
 
 #workspaces button.focused,
 #workspaces button.active {
-  background-color: @base01;
+  background-color: #111111;
 }
 
 #workspaces button.urgent {
-  background-color: @base08;
+  background-color: #eb4d4b;
 }
 
 #clock,
@@ -43,8 +46,8 @@ window#waybar.hidden {
 #cpu,
 #network {
   padding: 0 4px;
-  color: @base07;
+  color: #ffffff;
-  background-color: @base01;
+  background-color: #111111;
 }
 
 #window,

hosts/andromache/default.nix

@@ -1,11 +1,11 @@
 {
   lib,
   inputs,
+  outputs,
   config,
   pkgs,
   ...
 }:
-
 let
   username = "h";
   hostName = "andromache";
@@ -26,9 +26,7 @@ in
       device = "/dev/nvme1n1";
     })
     ../../modules/desktops/niri
-    ../../modules/backups
     ../../modules/bluetooth
-    ../../modules/gaming
     ../../modules/keyboard
     (import ../../modules/networking { inherit hostName; })
     ../../modules/users
@@ -36,12 +34,8 @@ in
     ../../modules/localization
     ../../modules/fonts
     ../../modules/ssh/hardened-openssh.nix
-    ../../modules/storage
-    ../../modules/stylix
     (import ../../modules/secrets { inherit lib inputs config; })
     ../../modules/docker
-    ../../modules/syncthing
-    ../../modules/nvidia
   ];
 
   home-manager.users.${username} = import ../../home/hosts/andromache {
@@ -83,24 +77,57 @@ in
     };
   };
 
-  hardware.cpu.intel.updateMicrocode = true;
+  hardware = {
+    cpu.intel.updateMicrocode = true;
+    graphics.enable = true;
+    nvidia = {
+      modesetting.enable = true;
+      powerManagement.enable = true;
+      powerManagement.finegrained = false;
+      open = true;
+      nvidiaSettings = true;
+      package = config.boot.kernelPackages.nvidiaPackages.stable;
+    };
+  };
 
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
 
   environment.systemPackages = [
-    inputs.colmena.packages.${pkgs.stdenv.hostPlatform.system}.colmena
+    inputs.colmena.packages.${pkgs.system}.colmena
   ];
 
+
   services = {
-    locate = {
+    xserver = {
-      enable = true;
+      videoDrivers = [ "nvidia" ];
-      package = pkgs.plocate;
     };
 
     openssh = {
       enable = true;
       harden = true;
     };
+
+    syncthing = {
+      enable = true;
+      openDefaultPorts = true;
+      settings = {
+        devices = {
+          # "device1" = {
+          #   id = "DEVICE-ID-GOES-HERE";
+          # };
+        };
+        folders = {
+          "/home/${username}/sync" = {
+            id = "sync";
+            devices = [ ];
+          };
+        };
+      };
+    };
+    locate = {
+      enable = true;
+      package = pkgs.plocate;
+    };
   };
 
   networking = {

hosts/andromache/hard.nix

@@ -4,6 +4,7 @@
 {
   config,
   lib,
+  pkgs,
   modulesPath,
   ...
 }:

hosts/astyanax/default.nix

@@ -1,6 +1,7 @@
 {
   lib,
   inputs,
+  outputs,
   config,
   pkgs,
   ...
@@ -25,21 +26,17 @@ in
       device = "/dev/nvme0n1";
     })
     ../../modules/desktops/niri
-    ../../modules/audio
-    ../../modules/audio-automation
-    ../../modules/backups
     ../../modules/bluetooth
     ../../modules/keyboard
     (import ../../modules/networking { inherit hostName; })
     ../../modules/users
+    ../../modules/audio
     ../../modules/localization
     ../../modules/fonts
     ../../modules/ssh/hardened-openssh.nix
-    ../../modules/storage
+    # ../../modules/vpn/wireguard.nix
-    ../../modules/stylix
     (import ../../modules/secrets { inherit lib inputs config; })
     ../../modules/docker
-    ../../modules/nfc
   ];
 
   home-manager.users.${username} = import ../../home/hosts/astyanax {
@@ -58,8 +55,6 @@ in
 
   secrets.username = username;
   docker.user = username;
-  nfc.user = username;
-  desktop.ly.enable = true;
 
   nix.settings.secret-key-files = [ config.sops.secrets.nix_signing_key_astyanax.path ];
 
@@ -81,7 +76,7 @@ in
   };
 
   environment.systemPackages = [
-    inputs.colmena.packages.${pkgs.stdenv.hostPlatform.system}.colmena
+    inputs.colmena.packages.${pkgs.system}.colmena
     (pkgs.writeShellApplication {
       name = "wol-andromache";
       runtimeInputs = [ pkgs.wakeonlan ];
@@ -104,24 +99,24 @@ in
       enable = true;
       harden = true;
     };
+    syncthing = {
+      enable = true;
+      openDefaultPorts = true;
+      folders = {
+        "/home/h/sync" = {
+          id = "sync";
+          devices = [ ];
+        };
+      };
+      devices = {
+        # "device1" = {
+        #   id = "DEVICE-ID-GOES-HERE";
+        # };
+      };
+    };
     locate = {
       enable = true;
       package = pkgs.plocate;
     };
-    tlp = {
-      enable = true;
-      settings = {
-        CPU_SCALING_GOVERNOR_ON_AC = "performance";
-        CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
-
-        CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
-        CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
-
-        CPU_MIN_PERF_ON_AC = 0;
-        CPU_MAX_PERF_ON_AC = 100;
-        CPU_MIN_PERF_ON_BAT = 0;
-        CPU_MAX_PERF_ON_BAT = 20;
-      };
-    };
   };
 }

hosts/astyanax/hard.nix

@@ -4,6 +4,7 @@
 {
   config,
   lib,
+  pkgs,
   modulesPath,
   ...
 }:

hosts/eetion-02/default.nix

@@ -1,86 +0,0 @@
-{ pkgs, ... }:
-
-# Raspberry Pi 3
-# See <https://nixos.wiki/wiki/NixOS_on_ARM/Raspberry_Pi_3>
-
-let
-  username = "h";
-  hostName = "eetion-02";
-in
-{
-  imports = [
-    ./hard.nix
-    ../../modules/ssh/hardened-openssh.nix
-  ];
-
-  ssh = {
-    inherit username;
-    publicHostname = "eetion-02";
-    authorizedHosts = [
-      "andromache"
-      "astyanax"
-    ];
-  };
-
-  boot = {
-    kernelParams = [
-      "console=ttyS1,115200n8"
-    ];
-
-    kernel.sysctl."net.ipv4.ip_forward" = 1;
-
-    loader = {
-      grub.enable = false;
-      generic-extlinux-compatible.enable = true;
-    };
-  };
-
-  hardware.enableRedistributableFirmware = true;
-
-  networking = {
-    inherit hostName;
-    networkmanager.enable = true;
-    firewall = {
-      enable = true;
-      allowedTCPPorts = [
-        80
-        443
-      ];
-    };
-  };
-
-  users.users = {
-    root.hashedPassword = "!";
-    ${username} = {
-      isNormalUser = true;
-      extraGroups = [ "wheel" ];
-    };
-  };
-
-  security.sudo.wheelNeedsPassword = false;
-
-  services = {
-    openssh = {
-      enable = true;
-      harden = true;
-    };
-  };
-
-  environment.systemPackages = with pkgs; [
-    vim
-    git
-  ];
-
-  nix.settings = {
-    experimental-features = [
-      "nix-command"
-      "flakes"
-    ];
-    trusted-users = [
-      "root"
-      "@wheel"
-    ];
-  };
-
-  system.stateVersion = "26.05";
-}

hosts/eetion-02/hard.nix

@@ -1,24 +0,0 @@
-{ lib, modulesPath, ... }:
-
-{
-  imports = [
-    (modulesPath + "/installer/scan/not-detected.nix")
-  ];
-
-  boot = {
-    initrd.availableKernelModules = [ ];
-    initrd.kernelModules = [ ];
-    kernelModules = [ ];
-    extraModulePackages = [ ];
-  };
-
-  fileSystems."/" = {
-    device = "/dev/disk/by-label/NIXOS_SD";
-    fsType = "ext4";
-    options = [ "noatime" ];
-  };
-
-  swapDevices = [ ];
-
-  nixpkgs.hostPlatform = lib.mkDefault "aarch64-linux";
-}

hosts/eetion-02/system.nix

@@ -1 +0,0 @@
-"aarch64-linux"

hosts/eetion/default.nix

@@ -13,34 +13,28 @@ in
     ../../modules/ssh/hardened-openssh.nix
   ];
 
-  ssh = {
+  ssh.username = username;
-    inherit username;
+  ssh.publicHostname = "eetion";
-    publicHostname = "eetion";
+  ssh.authorizedHosts = [
-    authorizedHosts = [
+    "andromache"
-      "andromache"
+    "astyanax"
-      "astyanax"
+  ];
-    ];
-  };
 
   boot.loader = {
     grub.enable = false;
     generic-extlinux-compatible.enable = true;
   };
 
-  networking = {
+  networking.hostName = hostName;
-    inherit hostName;
+  networking.networkmanager.enable = true;
-    networkmanager.enable = true;
+  networking.firewall = {
-    firewall = {
+    enable = true;
-      enable = true;
+    allowedTCPPorts = [
-      allowedTCPPorts = [
+      80
-        80
+      443
-        443
+    ];
-      ];
-    };
   };
 
-  boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
-
   users.users = {
     root.hashedPassword = "!";
     ${username} = {
@@ -51,54 +45,48 @@ in
 
   security.sudo.wheelNeedsPassword = false;
 
-  services = {
+  services.openssh = {
-    openssh = {
+    enable = true;
-      enable = true;
+    harden = true;
-      harden = true;
+  };
+
+  environment.etc."paperless-admin-pass".text = "admin";
+
+  services.paperless = {
+    enable = true;
+    passwordFile = "/etc/paperless-admin-pass";
+    settings = {
+      PAPERLESS_URL = "http://paperless.eetion";
     };
+  };
 
-    paperless = {
+  # added (OPNSense) domain override to make this work on LAN
-      enable = true;
+  #
-      passwordFile = "/etc/paperless-admin-pass";
+  # host: eetion
-      settings = {
+  # domain: <domain (e.g. lan)>
-        PAPERLESS_URL = "http://paperless.eetion";
+  # ip address: <eetion-ip> (covers *.eetion)
-      };
+  services.nginx = {
-    };
+    enable = true;
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
 
-    # added (OPNSense) domain override to make this work on LAN
+    virtualHosts = {
-    #
+      "eetion" = {
-    # host: eetion
+        default = true;
-    # domain: <domain (e.g. lan)>
+        locations."/" = {
-    # ip address: <eetion-ip>
+          proxyPass = "http://127.0.0.1:5006";
-    #
-    # host: paperless
-    # domain: eetion
-    # ip address: <eetion-ip>
-    nginx = {
-      enable = true;
-      recommendedGzipSettings = true;
-      recommendedOptimisation = true;
-      recommendedProxySettings = true;
-      recommendedTlsSettings = true;
-
-      virtualHosts = {
-        "eetion" = {
-          default = true;
-          locations."/" = {
-            proxyPass = "http://127.0.0.1:5006";
-          };
         };
-        "paperless.eetion" = {
+      };
-          locations."/" = {
+      "paperless.eetion" = {
-            proxyPass = "http://127.0.0.1:28981";
+        locations."/" = {
-          };
+          proxyPass = "http://127.0.0.1:28981";
         };
       };
     };
   };
 
-  environment.etc."paperless-admin-pass".text = "admin";
-
   virtualisation = {
     podman.enable = true;
     oci-containers = {

hosts/eetion/hard.nix

@@ -5,12 +5,10 @@
     (modulesPath + "/installer/scan/not-detected.nix")
   ];
 
-  boot = {
+  boot.initrd.availableKernelModules = [ ];
-    initrd.availableKernelModules = [ ];
+  boot.initrd.kernelModules = [ ];
-    initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
-    kernelModules = [ ];
+  boot.extraModulePackages = [ ];
-    extraModulePackages = [ ];
-  };
 
   fileSystems."/" = {
     device = "/dev/disk/by-label/NIXOS_SD";

hosts/hecuba/default.nix

@@ -1,5 +1,8 @@
 {
+  lib,
   inputs,
+  outputs,
+  config,
   pkgs,
   ...
 }:
@@ -17,23 +20,18 @@ in
     ./hard.nix
     ../../modules/ssh/hardened-openssh.nix
     ../../modules/docker
-    ../../modules/uptime-kuma
   ];
 
   networking.hostName = hostName;
-  ssh = {
+  ssh.username = username;
-    inherit username;
+  ssh.publicHostname = "server.hektormisplon.xyz";
-    publicHostname = "server.hektormisplon.xyz";
+  ssh.authorizedHosts = [
-    authorizedHosts = [
+    "andromache"
-      "andromache"
+    "astyanax"
-      "astyanax"
+  ];
-    ];
-  };
 
   docker.user = username;
 
-  my.uptime-kuma.enable = false;
-
   fileSystems."/" = {
     device = "/dev/disk/by-label/nixos";
     fsType = "ext4";
@@ -83,4 +81,15 @@ in
     enable = true;
     harden = true;
   };
+
+  nix.settings = {
+    trusted-public-keys = [
+      "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
+      "astyanax:JY2qJkZUFSax47R3c1nq53AZ8GnLfNqz6mSnJ60cLZ4="
+      "andromache:XM4VLrEw63RB/3v/56OxzH/Yw+kKXKMBLKCb7UGAXzo="
+    ];
+    auto-optimise-store = true;
+    keep-derivations = false;
+    keep-outputs = false;
+  };
 }

hosts/hecuba/hard.nix

@@ -2,7 +2,9 @@
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
 {
+  config,
   lib,
+  pkgs,
   modulesPath,
   ...
 }:

hosts/vm/default.nix

@@ -1,6 +1,7 @@
 {
   lib,
   inputs,
+  outputs,
   config,
   pkgs,
   ...
@@ -25,7 +26,6 @@ in
     ../../modules/x
     ../../modules/fonts
     ../../modules/ssh/hardened-openssh.nix
-    ../../modules/storage
     (import ../../modules/secrets {
       inherit lib inputs config;
     })

hosts/vm/hard.nix

@@ -2,7 +2,9 @@
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
 {
+  config,
   lib,
+  pkgs,
   modulesPath,
   ...
 }:

images/README.md

@@ -1,15 +0,0 @@
-# building SD Images
-
-## Raspberry Pi 3B+
-
-```bash
-nix build .#images.sd-image-raspberry-pi-aarch64
-nix-shell -p zstd --run "zstdcat result/sd-image/*.img.zst | sudo dd of=/dev/sdX bs=4M status=progress conv=fsync"
-```
-
-## Orange Pi Zero2 H616
-```bash
-nix build .#images.sd-image-orange-pi-aarch64
-nix-shell -p zstd --run "zstdcat result/sd-image/*.img.zst | sudo dd of=/dev/sdX bs=4M status=progress conv=fsync"
-sudo dd if=~/dl/u-boot-sunxi-with-spl.bin of=/dev/sdX bs=1024 seek=8
-```

images/sd-image-raspberry-pi-aarch64.nix

@@ -1,73 +0,0 @@
-# see <https://nixos.wiki/wiki/NixOS_on_ARM#Build_your_own_image_natively>
-# see <https://nixos.wiki/wiki/NixOS_on_ARM/Raspberry_Pi_3>
-# ```
-# nix build .#images.sd-image-raspberry-pi-aarch64
-# nix-shell -p zstd --run "zstdcat result/sd-image/*.img.zst | sudo dd of=/dev/sdX bs=4M status=progress conv=fsync"
-# ```
-
-{ pkgs, ... }:
-
-let
-  username = "h";
-in
-{
-  imports = [
-    ../modules/ssh/hardened-openssh.nix
-  ];
-
-  ssh.username = username;
-  ssh.authorizedHosts = [
-    "andromache"
-    "astyanax"
-  ];
-
-  boot.kernelParams = [
-    "console=ttyS1,115200n8"
-  ];
-
-  boot.kernelModules = [
-    "bcm2835-v4l2"
-  ];
-
-  hardware.enableRedistributableFirmware = true;
-
-  services.pulseaudio.enable = true;
-
-  networking.wireless.enable = true;
-
-  systemd.services.btattach = {
-    before = [ "bluetooth.service" ];
-    after = [ "dev-ttyAMA0.device" ];
-    wantedBy = [ "multi-user.target" ];
-    serviceConfig = {
-      ExecStart = "${pkgs.bluez}/bin/btattach -B /dev/ttyAMA0 -P bcm -S 3000000";
-    };
-  };
-
-  nix.settings.experimental-features = [
-    "nix-command"
-    "flakes"
-  ];
-
-  users.users = {
-    root.initialPassword = "nixos";
-    ${username} = {
-      isNormalUser = true;
-      extraGroups = [ "wheel" ];
-      initialPassword = "nixos";
-    };
-  };
-
-  security.sudo.wheelNeedsPassword = false;
-
-  services.openssh = {
-    enable = true;
-    harden = true;
-  };
-
-  environment.systemPackages = with pkgs; [
-    libraspberrypi
-  ];
-
-  system.stateVersion = "26.05";
-}

modules/audio-automation/default.nix

@@ -1,17 +0,0 @@
-{ pkgs, ... }:
-
-{
-  environment.systemPackages = [ pkgs.libnotify ];
-
-  services.udev.extraRules = ''
-    SUBSYSTEM=="power_supply", ATTR{online}=="0", ACTION=="change", TAG+="systemd", ENV{SYSTEMD_USER_WANTS}+="mute-audio.service"
-  '';
-
-  systemd.user.services.mute-audio = {
-    description = "mute audio when switching to battery power";
-    serviceConfig = {
-      Type = "oneshot";
-      ExecStart = "${pkgs.bash}/bin/bash -c '${pkgs.pulseaudio}/bin/pactl set-sink-mute $(${pkgs.pulseaudio}/bin/pactl get-default-sink) true && ${pkgs.libnotify}/bin/notify-send \"audio Muted\" \"switched to battery power\"'";
-    };
-  };
-}

modules/audio/default.nix

@@ -1,9 +1,6 @@
-{
+_:
-  nixpkgs.allowedUnfree = [
-    "spotify"
-    "spotify-unwrapped"
-  ];
 
+{
   security.rtkit.enable = true;
   services = {
     pulseaudio.enable = false;

modules/backups/default.nix

@@ -1,65 +0,0 @@
-{
-  lib,
-  config,
-  ...
-}:
-
-let
-  cfg = config.restic-backup;
-in
-{
-  options = {
-    restic-backup = {
-      repository = lib.mkOption {
-        type = lib.types.str;
-        default = "b2:${config.sops.placeholder."b2_bucket_name"}:${config.networking.hostName}";
-      };
-
-      passwordFile = lib.mkOption {
-        type = lib.types.str;
-        default = config.sops.secrets."restic_password".path;
-      };
-
-      paths = lib.mkOption {
-        type = lib.types.listOf lib.types.str;
-        default = [ "/home" ];
-      };
-    };
-  };
-
-  config = {
-    sops = {
-      secrets.b2_bucket_name = { };
-
-      templates."restic/repo-${config.networking.hostName}" = {
-        content = "b2:${config.sops.placeholder."b2_bucket_name"}:${config.networking.hostName}";
-      };
-
-      templates."restic/b2-env-${config.networking.hostName}" = {
-        content = ''
-          B2_ACCOUNT_ID=${config.sops.placeholder."b2_account_id"}
-          B2_ACCOUNT_KEY=${config.sops.placeholder."b2_account_key"}
-        '';
-      };
-    };
-
-    services.restic.backups.home = {
-      repositoryFile = config.sops.templates."restic/repo-${config.networking.hostName}".path;
-      inherit (cfg) passwordFile;
-      inherit (cfg) paths;
-      timerConfig = {
-        OnCalendar = "daily";
-        Persistent = true;
-      };
-      initialize = true;
-      extraBackupArgs = [ "--one-file-system" ];
-      pruneOpts = [
-        "--keep-daily 7"
-        "--keep-weekly 4"
-        "--keep-monthly 6"
-        "--keep-yearly 1"
-      ];
-      environmentFile = config.sops.templates."restic/b2-env-${config.networking.hostName}".path;
-    };
-  };
-}

modules/bluetooth/default.nix

@@ -1,5 +1,3 @@
-{ pkgs, ... }:
-
 {
   hardware.bluetooth = {
     enable = true;
@@ -14,14 +12,4 @@
       };
     };
   };
-
-  systemd.user.services.mpris-proxy = {
-    description = "Mpris proxy";
-    after = [
-      "network.target"
-      "sound.target"
-    ];
-    wantedBy = [ "default.target" ];
-    serviceConfig.ExecStart = "${pkgs.bluez}/bin/mpris-proxy";
-  };
 }

modules/common/default.nix

@@ -2,66 +2,54 @@
   inputs,
   outputs,
   dotsPath,
-  config,
   ...
 }:
 
-let
-  inherit (inputs.nixpkgs) lib;
-in
 {
   imports = [
     inputs.home-manager.nixosModules.default
   ];
 
-  options.nixpkgs.allowedUnfree = lib.mkOption {
+  system.stateVersion = "25.05";
-    type = lib.types.listOf lib.types.str;
+
-    default = [ ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+
+  nixpkgs.config.allowUnfree = true;
+
+  home-manager = {
+    useGlobalPkgs = true;
+    useUserPackages = true;
+    extraSpecialArgs = {
+      inherit inputs outputs dotsPath;
+    };
   };
 
-  config = {
+  nix = {
-    system.stateVersion = "25.05";
+    optimise = {
-
+      automatic = true;
-    nix = {
+      dates = [ "05:00" ];
-      optimise = {
-        automatic = true;
-        dates = [ "05:00" ];
-      };
-      gc = {
-        automatic = true;
-        dates = "weekly";
-        options = "--delete-older-than 30d";
-      };
-      settings.experimental-features = [
-        "nix-command"
-        "flakes"
-      ];
     };
-
+    gc = {
-    system.autoUpgrade = {
+      automatic = true;
-      enable = true;
+      dates = "weekly";
-      flags = [
+      options = "--delete-older-than 30d";
-        "--recreate-lock-file"
-        "--commit-lock-file"
-        "--print-build-logs"
-        "--refresh"
-      ];
-      dates = "05:00";
-      randomizedDelaySec = "45min";
-      allowReboot = false;
     };
+  };
 
-    nixpkgs.config.allowUnfreePredicate =
+  system.autoUpgrade = {
-      pkg: builtins.elem (lib.getName pkg) config.nixpkgs.allowedUnfree;
+    enable = true;
-
+    flake = inputs.self.outPath;
-    environment.defaultPackages = lib.mkForce [ ];
+    operation = "switch";
-
+    flags = [
-    home-manager = {
+      "--recreate-lock-file"
-      useGlobalPkgs = true;
+      "--commit-lock-file"
-      useUserPackages = true;
+      "--print-build-logs"
-      extraSpecialArgs = {
+    ];
-        inherit inputs outputs dotsPath;
+    dates = "05:00";
-      };
+    randomizedDelaySec = "45min";
-    };
+    allowReboot = false;
   };
 }

modules/desktops/gnome.nix

@@ -1,3 +1,5 @@
+{ config, pkgs, ... }:
+
 {
   services.xserver = {
     displayManager.gdm.enable = true;

modules/desktops/niri/default.nix

@@ -1,32 +1,16 @@
-{ config, lib, ... }:
-
-let
-  cfg = config.desktop;
-in
 {
-  options.desktop = {
+  programs.niri.enable = true;
-    ly = {
+
-      enable = lib.mkOption {
+  services = {
-        type = lib.types.bool;
+    dbus.enable = true;
-        default = false;
+    logind.settings.Login = {
-      };
+      HandleLidSwitch = "suspend";
+      IdleAction = "suspend";
+      IdleActionSec = 1800;
     };
-  };
 
-  config = {
+    displayManager.ly = {
-    programs.niri.enable = true;
+      enable = true;
-
-    services = {
-      dbus.enable = true;
-      logind.settings.Login = {
-        HandleLidSwitch = "suspend";
-        IdleAction = "suspend";
-        IdleActionSec = 1800;
-      };
-
-      displayManager.ly = lib.mkIf cfg.ly.enable {
-        enable = true;
-      };
     };
   };
 }

modules/gaming/default.nix

@@ -1,12 +0,0 @@
-{
-  nixpkgs.allowedUnfree = [
-    "steam"
-    "steam-unwrapped"
-  ];
-
-  programs.steam = {
-    enable = true;
-    remotePlay.openFirewall = false;
-    dedicatedServer.openFirewall = false;
-  };
-}

modules/keyboard/default.nix

@@ -1,16 +1,13 @@
 { pkgs, ... }:
 
-with pkgs;
-let
-  tools = interception-tools;
-  inherit (interception-tools-plugins) caps2esc;
-in
 {
   services.interception-tools = {
     enable = true;
-    plugins = [ caps2esc ];
+    plugins = [
+      pkgs.interception-tools-plugins.caps2esc
+    ];
     udevmonConfig = ''
-      - JOB: ${tools}/bin/intercept -g $DEVNODE | ${caps2esc}/bin/caps2esc -m 1 | ${tools}/bin/uinput -d $DEVNODE
+      - JOB: ${pkgs.interception-tools}/bin/intercept -g $DEVNODE | ${pkgs.interception-tools-plugins.caps2esc}/bin/caps2esc -m 1 | ${pkgs.interception-tools}/bin/uinput -d $DEVNODE
         DEVICE:
           EVENTS:
             EV_KEY: [KEY_CAPSLOCK]

modules/nfc/default.nix

@@ -1,16 +0,0 @@
-{ config, lib, ... }:
-
-let
-  cfg = config.nfc;
-in
-{
-  options.nfc = {
-    user = lib.mkOption {
-      type = lib.types.nullOr lib.types.str;
-      default = null;
-    };
-  };
-  config = lib.mkIf (cfg.user != null) {
-    users.users.${cfg.user}.extraGroups = [ "dialout" ];
-  };
-}

modules/nvidia/default.nix

@@ -1,22 +0,0 @@
-{ config, ... }:
-
-{
-  nixpkgs.allowedUnfree = [
-    "nvidia-x11"
-    "nvidia-persistenced"
-    "nvidia-settings"
-  ];
-
-  hardware.graphics.enable = true;
-
-  hardware.nvidia = {
-    modesetting.enable = true;
-    powerManagement.enable = true;
-    powerManagement.finegrained = false;
-    open = true;
-    nvidiaSettings = true;
-    package = config.boot.kernelPackages.nvidiaPackages.stable;
-  };
-
-  services.xserver.videoDrivers = [ "nvidia" ];
-}