Add nixos-unstable-small to temporarily override pyside6

Flake lock file updates:

• Updated input 'home-manager':
    'github:nix-community/home-manager/d37f154dba0d4c015f17a24314e89b77a7ba5ff3?narHash=sha256-abW1g8UKSn/44j6EA60u0TWqC/ar8%2BYM9Z8YdUmOCLg%3D' (2024-11-19)
  → 'github:nix-community/home-manager/a46e702093a5c46e192243edbd977d5749e7f294?narHash=sha256-qjEI64RKvDxRyEarY0jTzrZMa8ebezh2DEZmJJrpVdo%3D' (2024-11-19)

.envrc

@@ -0,0 +1 @@
+use flake

.git-blame-ignore-revs

@@ -0,0 +1,2 @@
+# nixfmt all
+90ccaa07bd0dc2235af7fdd37909e17f637e9cab

.github/workflows/actions-check.yaml

@@ -0,0 +1,33 @@
+name: Check actions
+on:
+  push:
+    paths:
+      - .github/workflows/*.yaml
+      - .github/workflows/*.yml
+  pull_request:
+    paths:
+      - .github/workflows/*.yaml
+      - .github/workflows/*.yml
+
+jobs:
+  check-actions-actionlint:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/catthehacker/ubuntu:runner-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v5
+        with:
+          go-version: '1.23'
+      - run: |
+          go install github.com/rhysd/actionlint/cmd/actionlint@latest
+          actionlint .github/workflows/*.yaml
+  check-actions-yamllint:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/catthehacker/ubuntu:runner-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-python@v5
+      - run: |
+          pipx run yamllint .github/workflows/*.yaml

.github/workflows/flake-check.yaml

@@ -0,0 +1,14 @@
+name: Run nix flake check
+on:
+  push:
+  pull_request:
+
+jobs:
+  flake-check:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/catthehacker/ubuntu:runner-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: cachix/install-nix-action@v27
+      - run: nix flake check

.github/workflows/flake-update.yaml

@@ -0,0 +1,36 @@
+---
+name: Periodic flake update
+on:  # yamllint disable-line rule:truthy
+  schedule:
+    - cron: "0 */2 * * *"
+
+permissions:
+  contents: write
+
+jobs:
+  flake-update:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/catthehacker/ubuntu:runner-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          ref: master
+      - uses: cachix/install-nix-action@v27
+      - name: configure git
+        env:
+          SSH_PRIVKEY: ${{ secrets.BOT_SSH_PRIVKEY }}
+          SSH_PUBKEY: ${{ secrets.BOT_SSH_PUBKEY }}
+        run: |
+          echo "$SSH_PRIVKEY" > "$RUNNER_TEMP/id_ed25519"
+          echo "$SSH_PUBKEY" > "$RUNNER_TEMP/id_ed25519.pub"
+          chmod -R 0600 "$RUNNER_TEMP/id_ed25519.pub" "$RUNNER_TEMP/id_ed25519"
+          git config --global user.name 'torjus-bot'
+          git config --global user.email 'torjus-bot@git.t-juice.club'
+          git config --global user.signingKey "$RUNNER_TEMP/id_ed25519.pub"
+          git config --global gpg.format ssh
+          git config --global commit.gpgsign true
+      - name: flake update
+        run: nix flake update --commit-lock-file
+      - name: push
+        run: git push

.github/workflows/pre-commit.yml

@@ -1,13 +0,0 @@
-name: pre-commit
-on:
-  push:
-  pull_request:
-
-jobs:
-  pre-commit:
-    runs-on: ubuntu-latest
-    container:
-      image: ghcr.io/catthehacker/ubuntu:act-latest
-    steps:
-      - uses: actions/checkout@v3
-      - uses: pre-commit/action@v3.0.1

.gitignore

@@ -0,0 +1,2 @@
+result
+.direnv/

.pre-commit-config.yaml

@@ -1,12 +0,0 @@
-repos:
-  - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v3.2.0
-    hooks:
-      - id: trailing-whitespace
-      - id: end-of-file-fixer
-      - id: check-yaml
-      - id: check-added-large-files
-  - repo: https://github.com/nix-community/nixpkgs-fmt
-    rev: v1.3.0
-    hooks:
-      - id: nixpkgs-fmt

.sops.yaml

@@ -0,0 +1,29 @@
+keys:
+  - &admin_torjus age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
+  - &server_gunter age1whxf34vjdndqzwgm7yyaexdm46gdnv9sf3nal7qqyjr0nyhhndlsrmc0g3
+  - &server_magicman age1stlqqspmt5fepyz35udrwr5avf9zuju79f787p26pu2d2j08yqps2q2t2c
+  - &server_prismo age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
+creation_rules:
+  - path_regex: secrets/[^/]+\.(yaml|json|env|ini|toml)
+    key_groups:
+      - age:
+        - *admin_torjus
+  - path_regex: secrets/gunter/[^/]+\.(yaml|json|env|ini|toml)
+    key_groups:
+      - age:
+        - *admin_torjus
+        - *server_gunter
+  - path_regex: secrets/magicman/[^/]+\.(yaml|json|env|ini|toml)
+    key_groups:
+      - age:
+        - *admin_torjus
+        - *server_magicman
+  - path_regex: secrets/prismo/[^/]+\.(yaml|json|env|ini|toml)
+    key_groups:
+      - age:
+        - *admin_torjus
+        - *server_prismo
+  - path_regex: secrets/torjus/[^/]+\.(yaml|json|env|ini|toml)
+    key_groups:
+      - age:
+        - *admin_torjus

README.md

@@ -1 +1,8 @@
-# My NixOS config
+# My nixos configurations
+
+Configurations for:
+
+* gunter
+* magicman
+* prismo
+

flake.lock

@@ -1,5 +1,98 @@
 {
   "nodes": {
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_3": {
+      "inputs": {
+        "systems": "systems_4"
+      },
+      "locked": {
+        "lastModified": 1726560853,
+        "narHash": "sha256-X6rJYSESBVr3hBoH0WbKE5KvhPU5bloyZ2L4K60/fPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "c1dfcf08411b08f6b8615f7d8971a2bfa81d5e8a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_4": {
+      "inputs": {
+        "systems": "systems_5"
+      },
+      "locked": {
+        "lastModified": 1726560853,
+        "narHash": "sha256-X6rJYSESBVr3hBoH0WbKE5KvhPU5bloyZ2L4K60/fPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "c1dfcf08411b08f6b8615f7d8971a2bfa81d5e8a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "ghettoptt": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1728602333,
+        "narHash": "sha256-sKbnng/g4ijuKcjShBi7oPxyUrCnMJDDy17U9W/TuMg=",
+        "ref": "master",
+        "rev": "84fcfdde62de9888d3af8bcb0d7134137b276b55",
+        "revCount": 23,
+        "type": "git",
+        "url": "https://git.t-juice.club/torjus/ghettoptt"
+      },
+      "original": {
+        "ref": "master",
+        "type": "git",
+        "url": "https://git.t-juice.club/torjus/ghettoptt"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -7,43 +100,114 @@
         ]
       },
       "locked": {
-        "lastModified": 1706981411,
-        "narHash": "sha256-cLbLPTL1CDmETVh4p0nQtvoF+FSEjsnJTFpTxhXywhQ=",
+        "lastModified": 1732025103,
+        "narHash": "sha256-qjEI64RKvDxRyEarY0jTzrZMa8ebezh2DEZmJJrpVdo=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "652fda4ca6dafeb090943422c34ae9145787af37",
+        "rev": "a46e702093a5c46e192243edbd977d5749e7f294",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-23.11",
         "repo": "home-manager",
         "type": "github"
       }
     },
+    "huecli": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "poetry2nix": "poetry2nix"
+      },
+      "locked": {
+        "lastModified": 1728336978,
+        "narHash": "sha256-7FX4K8QBH/9jiYyCMs2JyCTzlx1/D5Cw6upaFThSVg4=",
+        "ref": "master",
+        "rev": "700ece0bada9833fcfd3b6ce698cd74bc00e4493",
+        "revCount": 22,
+        "type": "git",
+        "url": "https://git.t-juice.club/torjus/huecli"
+      },
+      "original": {
+        "ref": "master",
+        "type": "git",
+        "url": "https://git.t-juice.club/torjus/huecli"
+      }
+    },
+    "nix-github-actions": {
+      "inputs": {
+        "nixpkgs": [
+          "huecli",
+          "poetry2nix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1703863825,
+        "narHash": "sha256-rXwqjtwiGKJheXB43ybM8NwWB8rO2dSRrEqes0S7F5Y=",
+        "owner": "nix-community",
+        "repo": "nix-github-actions",
+        "rev": "5163432afc817cf8bd1f031418d1869e4c9d5547",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nix-github-actions",
+        "type": "github"
+      }
+    },
+    "nix-github-actions_2": {
+      "inputs": {
+        "nixpkgs": [
+          "nixprstatus",
+          "poetry2nix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1720066371,
+        "narHash": "sha256-uPlLYH2S0ACj0IcgaK9Lsf4spmJoGejR9DotXiXSBZQ=",
+        "owner": "nix-community",
+        "repo": "nix-github-actions",
+        "rev": "622f829f5fe69310a866c8a6cd07e747c44ef820",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nix-github-actions",
+        "type": "github"
+      }
+    },
+    "nix-packages": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1728153756,
+        "narHash": "sha256-kNpO8yC2MioSRc2SNxNM5egVvFjA2Ox0b4SAs6GnM8w=",
+        "ref": "master",
+        "rev": "2fc840c15280d2dd3da1aba7272243b4aa11e611",
+        "revCount": 21,
+        "type": "git",
+        "url": "https://git.t-juice.club/torjus/nix-packages"
+      },
+      "original": {
+        "ref": "master",
+        "type": "git",
+        "url": "https://git.t-juice.club/torjus/nix-packages"
+      }
+    },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1709569716,
-        "narHash": "sha256-iOR44RU4jQ+YPGrn+uQeYAp7Xo7Z/+gT+wXJoGxxLTY=",
+        "lastModified": 1731676054,
+        "narHash": "sha256-OZiZ3m8SCMfh3B6bfGC/Bm4x3qc1m2SVEAlkV6iY7Yg=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "617579a787259b9a6419492eaac670a5f7663917",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixos-23.11",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs-unstable": {
-      "locked": {
-        "lastModified": 1709479366,
-        "narHash": "sha256-n6F0n8UV6lnTZbYPl1A9q1BS0p4hduAv1mGAP17CVd0=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "b8697e57f10292a6165a20f03d2f42920dfaf973",
+        "rev": "5e4fbfb6b3de1aa2872b76d49fafc942626e2add",
         "type": "github"
       },
       "original": {
@@ -53,11 +217,274 @@
         "type": "github"
       }
     },
+    "nixpkgs-small": {
+      "locked": {
+        "lastModified": 1732007104,
+        "narHash": "sha256-qaWPxgLAvtIHTDcm0qJuc+WNYjcy4ZKigOyn2ag4ihM=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "0705964c881cea8896474610188905ba41b59b08",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-unstable-small",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-stable": {
+      "locked": {
+        "lastModified": 1731755305,
+        "narHash": "sha256-v5P3dk5JdiT+4x69ZaB18B8+Rcu3TIOrcdG4uEX7WZ8=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "057f63b6dc1a2c67301286152eb5af20747a9cb4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-24.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixprstatus": {
+      "inputs": {
+        "flake-utils": "flake-utils_3",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "poetry2nix": "poetry2nix_2"
+      },
+      "locked": {
+        "lastModified": 1729118937,
+        "narHash": "sha256-7xYCJXTh92OpKwfshYYnxrWmfNjqaH9SzQ0stuBARVM=",
+        "ref": "master",
+        "rev": "58b113d934f5d62f27dc50439b89fece4eb621f5",
+        "revCount": 37,
+        "type": "git",
+        "url": "https://git.t-juice.club/torjus/nixprstatus"
+      },
+      "original": {
+        "ref": "master",
+        "type": "git",
+        "url": "https://git.t-juice.club/torjus/nixprstatus"
+      }
+    },
+    "poetry2nix": {
+      "inputs": {
+        "flake-utils": "flake-utils_2",
+        "nix-github-actions": "nix-github-actions",
+        "nixpkgs": [
+          "huecli",
+          "nixpkgs"
+        ],
+        "systems": "systems_3",
+        "treefmt-nix": "treefmt-nix"
+      },
+      "locked": {
+        "lastModified": 1724208502,
+        "narHash": "sha256-TCRcEPSfgAw/t7kClmlr23s591N06mQCrhzlAO7cyFw=",
+        "owner": "nix-community",
+        "repo": "poetry2nix",
+        "rev": "884b66152b0c625b8220b570a31dc7acc36749a3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "poetry2nix",
+        "type": "github"
+      }
+    },
+    "poetry2nix_2": {
+      "inputs": {
+        "flake-utils": "flake-utils_4",
+        "nix-github-actions": "nix-github-actions_2",
+        "nixpkgs": [
+          "nixprstatus",
+          "nixpkgs"
+        ],
+        "systems": "systems_6",
+        "treefmt-nix": "treefmt-nix_2"
+      },
+      "locked": {
+        "lastModified": 1729073785,
+        "narHash": "sha256-KaDC7emuamQblDdka+gkBUUdEjQf3YGYozMb+zomgSM=",
+        "owner": "nix-community",
+        "repo": "poetry2nix",
+        "rev": "795fddefc9f910671c1cf0752c29802ce27322d6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "poetry2nix",
+        "type": "github"
+      }
+    },
     "root": {
       "inputs": {
+        "ghettoptt": "ghettoptt",
         "home-manager": "home-manager",
+        "huecli": "huecli",
+        "nix-packages": "nix-packages",
         "nixpkgs": "nixpkgs",
-        "nixpkgs-unstable": "nixpkgs-unstable"
+        "nixpkgs-small": "nixpkgs-small",
+        "nixpkgs-stable": "nixpkgs-stable",
+        "nixprstatus": "nixprstatus",
+        "sops-nix": "sops-nix"
+      }
+    },
+    "sops-nix": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1731954233,
+        "narHash": "sha256-vvXx1m2Rsw7MkbKJdpcICzz4YPgZPApGKQGhNZfkhOI=",
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "rev": "e39947d0ee8e341fa7108bd02a33cdfa24a1360e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Mic92",
+        "repo": "sops-nix",
+        "type": "github"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "id": "systems",
+        "type": "indirect"
+      }
+    },
+    "systems_4": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_5": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_6": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "id": "systems",
+        "type": "indirect"
+      }
+    },
+    "treefmt-nix": {
+      "inputs": {
+        "nixpkgs": [
+          "huecli",
+          "poetry2nix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1719749022,
+        "narHash": "sha256-ddPKHcqaKCIFSFc/cvxS14goUhCOAwsM1PbMr0ZtHMg=",
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "rev": "8df5ff62195d4e67e2264df0b7f5e8c9995fd0bd",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "type": "github"
+      }
+    },
+    "treefmt-nix_2": {
+      "inputs": {
+        "nixpkgs": [
+          "nixprstatus",
+          "poetry2nix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1727984844,
+        "narHash": "sha256-xpRqITAoD8rHlXQafYZOLvUXCF6cnZkPfoq67ThN0Hc=",
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "rev": "4446c7a6fc0775df028c5a3f6727945ba8400e64",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "type": "github"
       }
     }
   },

flake.nix

@@ -2,46 +2,162 @@
   description = "Torjus nixos config flake";
 
   inputs = {
-    # nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-unstable";
-    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-23.11";
-    nixpkgs-unstable.url = "github:nixos/nixpkgs?ref=nixos-unstable";
+    nixpkgs-stable.url = "github:nixos/nixpkgs?ref=nixos-24.11";
+    #nixpkgs-master.url = "github:nixos/nixpkgs?ref=master";
+    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-unstable";
+    nixpkgs-small.url = "github:nixos/nixpkgs?ref=nixos-unstable-small";
     home-manager = {
-      url = "github:nix-community/home-manager?ref=release-23.11";
+      url = "github:nix-community/home-manager";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    sops-nix = {
+      url = "github:Mic92/sops-nix";
+      inputs.nixpkgs.follows = "nixpkgs";
+      #inputs.nixpkgs-stable.follows = "nixpkgs-stable";
+    };
+    ghettoptt = {
+      url = "git+https://git.t-juice.club/torjus/ghettoptt?ref=master";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    huecli = {
+      url = "git+https://git.t-juice.club/torjus/huecli?ref=master";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    nix-packages = {
+      url = "git+https://git.t-juice.club/torjus/nix-packages?ref=master";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    nixprstatus = {
+      url = "git+https://git.t-juice.club/torjus/nixprstatus?ref=master";
       inputs.nixpkgs.follows = "nixpkgs";
     };
   };
 
-  outputs = { self, nixpkgs, nixpkgs-unstable, ... }@inputs:
+  outputs =
+    {
+      self,
+      nixpkgs,
+      # nixpkgs-master,
+      nixpkgs-stable,
+      nixpkgs-small,
+      nixprstatus,
+      sops-nix,
+      ghettoptt,
+      huecli,
+      nix-packages,
+      ...
+    }@inputs:
     let
       system = "x86_64-linux";
       user = "torjus";
-      overlay-unstable = final: prev: {
-        unstable = import nixpkgs-unstable {
+      overlay-stable = final: prev: {
+        stable = import nixpkgs-stable {
           inherit system;
           config.allowUnfree = true;
         };
       };
+      overlay-pyside6 =
+        final: prev:
+        let
+          small = import nixpkgs-small {
+            inherit system;
+            config.allowUnfree = true;
+          };
+        in
+        {
+          python312Packages = small.lib.warn "Using python312Packages from nixos-unstable-small #" small.python312Packages;
+        };
+      # overlay-master = final: prev: {
+      #   master = import nixpkgs-master {
+      #     inherit system;
+      #     config.allowUnfree = true;
+      #   };
+      # };
+      allSystems = [
+        "x86_64-linux"
+        "aarch64-linux"
+        "x86_64-darwin"
+        "aarch64-darwin"
+      ];
+      forAllSystems =
+        f: nixpkgs.lib.genAttrs allSystems (system: f { pkgs = import nixpkgs { inherit system; }; });
+      commonOverlays = [
+        overlay-stable
+        # overlay-master
+        overlay-pyside6
+        ghettoptt.overlays.default
+        huecli.overlays.default
+        nix-packages.overlays.default
+        nixprstatus.overlays.default
+      ];
     in
     {
       nixosConfigurations = {
         prismo = nixpkgs.lib.nixosSystem {
           inherit system;
-          specialArgs = { inherit inputs self user; };
-          modules = [ ./hosts/prismo ];
+          specialArgs = {
+            inherit inputs self user;
+          };
+          modules = [
+            (
+              { config, pkgs, ... }:
+              {
+                nixpkgs.overlays = commonOverlays;
+              }
+            )
+            ./hosts/prismo
+            sops-nix.nixosModules.sops
+          ];
         };
         magicman = nixpkgs.lib.nixosSystem {
           inherit system;
-          specialArgs = { inherit inputs self user; };
-          modules = [ ./hosts/magicman ];
+          specialArgs = {
+            inherit inputs self user;
+          };
+          modules = [
+            (
+              { config, pkgs, ... }:
+              {
+                nixpkgs.overlays = commonOverlays;
+              }
+            )
+            ./hosts/magicman
+            sops-nix.nixosModules.sops
+          ];
         };
         gunter = nixpkgs.lib.nixosSystem {
           inherit system;
-          specialArgs = { inherit inputs self user; };
+          specialArgs = {
+            inherit
+              inputs
+              self
+              user
+              sops-nix
+              ;
+          };
           modules = [
-            ({ config, pkgs, ... }: { nixpkgs.overlays = [ overlay-unstable ]; })
+            (
+              { config, pkgs, ... }:
+              {
+                nixpkgs.overlays = commonOverlays;
+              }
+            )
             ./hosts/gunter
+            sops-nix.nixosModules.sops
           ];
         };
       };
+      devShells = forAllSystems (
+        { pkgs }:
+        {
+          default = pkgs.mkShell {
+            packages = with pkgs; [
+              act
+              actionlint
+              yamllint
+            ];
+          };
+        }
+      );
     };
 }

home/default.nix

@@ -1,34 +0,0 @@
-{ pkgs, inputs, self, user, ... }: {
-  imports = [ inputs.home-manager.nixosModules.home-manager ];
-  home-manager = {
-    useUserPackages = true;
-    useGlobalPkgs = true;
-    extraSpecialArgs = { inherit pkgs inputs user; };
-    users.${user} = { pkgs, ... }: {
-      imports = [
-        ./editor/neovim
-        ./programs/firefox
-        ./programs/tmux
-        ./programs/dunst
-        ./programs/kitty
-        ./programs/rofi
-        ./programs/obs-studio
-        ./scripts
-        ./zsh
-        ./packages
-        ./hyprland
-        ./ssh
-        ./services/backup-home.nix
-      ];
-      firefox.enable = true;
-      tmux.enable = true;
-      hyprland.enable = true;
-      home = {
-        username = "${user}";
-        homeDirectory = "/home/${user}";
-        stateVersion = "23.11";
-      };
-      programs.home-manager.enable = true;
-    };
-  };
-}

home/editor/neovim/default.nix

@@ -1,4 +1,5 @@
-{ pkgs, ... }: {
+{ pkgs, ... }:
+{
   programs = {
     neovim = {
       enable = true;
@@ -31,6 +32,11 @@
           p.tree-sitter-bash
           p.tree-sitter-json
           p.tree-sitter-python
+          p.tree-sitter-c
+          p.tree-sitter-cmake
+          p.tree-sitter-cpp
+          p.tree-sitter-markdown
+          p.tree-sitter-markdown-inline
         ]))
       ];
       extraLuaConfig = ''
@@ -42,17 +48,20 @@
   };
   home.packages = with pkgs; [
     # nix stuff
-    nixpkgs-fmt
+    nixfmt-rfc-style
     statix
 
     # LSPs
     gopls
-    nodePackages.pyright
+    pyright
     nodePackages.typescript-language-server
     nodePackages.typescript
     nil
     yaml-language-server
     lua-language-server
+    clang-tools
+    zls
+    ruff
   ];
   home.sessionVariables.EDITOR = "nvim";
 }

home/editor/neovim/plugins.lua

@@ -17,7 +17,7 @@ lsp_zero.format_on_save({
 		['gopls'] = { 'go' },
 		['nil_ls'] = { 'nix' },
 		['lua_ls'] = { 'lua' },
-		['tsserver'] = { 'typescript', 'javascript' },
+		['ts_ls'] = { 'typescript', 'javascript' },
 	},
 })
 -- LSP: go
@@ -33,6 +33,8 @@ lspconfig.gopls.setup({
 		}
 	}
 })
+
+-- GO: Automatically organize imports on save
 vim.api.nvim_create_autocmd("BufWritePre", {
 	pattern = "*.go",
 	callback = function()
@@ -62,7 +64,7 @@ lspconfig.nil_ls.setup({
 	settings = {
 		['nil'] = {
 			formatting = {
-				command = { "nixpkgs-fmt" },
+				command = { "nixfmt" },
 			},
 		},
 	},
@@ -110,7 +112,7 @@ lspconfig.lua_ls.setup({
 })
 
 -- LSP: ts/js
-lspconfig.tsserver.setup({
+lspconfig.ts_ls.setup({
 	init_options = {
 		plugins = {
 		},
@@ -121,6 +123,61 @@ lspconfig.tsserver.setup({
 	},
 })
 
+-- LSP: rust
+
+lspconfig.rust_analyzer.setup {
+}
+
+-- LSP: python
+-- Ruff server
+lspconfig.ruff.setup({
+})
+
+-- Ruff: automatically format on save
+vim.api.nvim_create_autocmd("BufWritePre", {
+	pattern = "*.py",
+	callback = function()
+		vim.lsp.buf.format { async = false }
+	end,
+})
+
+-- Ruff: Disable hover capability
+vim.api.nvim_create_autocmd("LspAttach", {
+	group = vim.api.nvim_create_augroup('lsp_attach_disable_ruff_hover', { clear = true }),
+	callback = function(args)
+		local client = vim.lsp.get_client_by_id(args.data.client_id)
+		if client == nil then
+			return
+		end
+		if client.name == 'ruff' then
+			-- Disable hover in favor of Pyright
+			client.server_capabilities.hoverProvider = false
+		end
+	end,
+	desc = 'LSP: Disable hover capability from Ruff',
+})
+
+-- Pyright
+lspconfig.pyright.setup {
+	settings = {
+		pyright = {
+			-- Using Ruff's import organizer
+			disableOrganizeImports = true,
+		},
+		python = {
+			analysis = {
+				-- Ignore all files for analysis to exclusively use Ruff for linting
+				ignore = { '*' },
+			},
+		},
+	},
+}
+
+-- LSP: C/C++
+lspconfig.clangd.setup({})
+
+-- LSP: zig
+lspconfig.zls.setup({})
 
 -- Telescope
 require('telescope').setup({

home/gunter.nix

@@ -0,0 +1,49 @@
+{
+  pkgs,
+  inputs,
+  user,
+  ...
+}:
+{
+  imports = [ inputs.home-manager.nixosModules.home-manager ];
+  home-manager = {
+    useUserPackages = true;
+    useGlobalPkgs = true;
+    extraSpecialArgs = {
+      inherit pkgs inputs user;
+    };
+    users.${user} =
+      { pkgs, ... }:
+      {
+        imports = [
+          inputs.sops-nix.homeManagerModules.sops
+          ./editor/neovim
+          ./hyprland/gunter.nix
+          ./packages
+          ./programs/dunst
+          ./programs/git
+          ./programs/firefox
+          ./programs/kitty
+          ./programs/obs-studio
+          ./programs/rofi
+          ./programs/tmux
+          ./programs/vscode
+          ./scripts
+          ./services/backup-home.nix
+          ./services/ghettoptt.nix
+          ./sops
+          ./ssh
+          ./zsh
+        ];
+        firefox.enable = true;
+        tmux.enable = true;
+        hyprland.enable = true;
+        home = {
+          username = "${user}";
+          homeDirectory = "/home/${user}";
+          stateVersion = "23.11";
+        };
+        programs.home-manager.enable = true;
+      };
+  };
+}

home/hyprland/cursor.nix

@@ -1,9 +1,11 @@
-{ pkgs, ... }: {
+{ pkgs, ... }:
+{
   home.pointerCursor = {
     gtk.enable = true;
     # x11.enable = true;
     package = pkgs.catppuccin-cursors.macchiatoLavender;
-    name = "Catppuccin-Macchiato-Lavender-Cursors";
+    # name = "Catppuccin-Macchiato-Lavender-Cursors";
+    name = "catppuccin-macchiato-lavender-cursors";
     size = 32;
   };
 

home/hyprland/default.nix

@@ -1 +0,0 @@
-{ imports = [ ./hyprland.nix ./waybar ./xdg.nix ./cursor.nix ]; }

home/hyprland/gunter.nix

@@ -0,0 +1,8 @@
+{
+  imports = [
+    ./hyprland_gunter.nix
+    ./waybar
+    ./xdg.nix
+    ./cursor.nix
+  ];
+}

home/hyprland/hypridle.nix

@@ -0,0 +1,16 @@
+{
+  config,
+  osConfig,
+  pkgs,
+  ...
+}:
+{
+
+  home.packages = with pkgs; [ hypridle ];
+  xdg.configFile = {
+    "hypr/hypridle.conf" = {
+      source = config.lib.file.mkOutOfStoreSymlink ./. + "/hypridle_${osConfig.system.name}.conf";
+      target = "hypr/hypridle.conf";
+    };
+  };
+}

home/hyprland/hypridle_gunter.conf

@@ -0,0 +1,12 @@
+general {
+    lock_cmd = hyprlock          # dbus/sysd lock command (loginctl lock-session)
+    # unlock_cmd = notify-send "unlock!"      # same as above, but unlock
+    before_sleep_cmd = lockhelper # command ran before sleep
+    # after_sleep_cmd =   # command ran after sleep
+    ignore_dbus_inhibit = false             # whether to ignore dbus-sent idle-inhibit requests (used by e.g. firefox or steam)
+}
+
+listener {
+    timeout = 240                            # in seconds
+    on-timeout = lockhelper # command to run when timeout has passed
+}

home/hyprland/hypridle_magicman.conf

@@ -0,0 +1,19 @@
+general {
+    lock_cmd = lockhelper # dbus/sysd lock command (loginctl lock-session)
+    # unlock_cmd = notify-send "unlock!"      # same as above, but unlock
+    before_sleep_cmd = lockhelper # command ran before sleep
+    # after_sleep_cmd = lockhelper # command ran after sleep
+    ignore_dbus_inhibit = false             # whether to ignore dbus-sent idle-inhibit requests (used by e.g. firefox or steam)
+}
+
+listener {
+    timeout = 240                            # in seconds
+    on-timeout = lockhelper # command to run when timeout has passed
+    # on-resume = notify-send "Welcome back!"  # command to run when activity is detected after timeout has fired.
+}
+
+listener {
+    timeout = 900
+    on-timeout = systemctl suspend # command to run when timeout has passed
+    # on-resume = notify-send "Welcome back!"  # command to run when activity is detected after timeout has fired.
+}

home/hyprland/hyprland_gunter.nix

@@ -0,0 +1,230 @@
+{
+  inputs,
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+{
+  imports = [
+    ./hyprlock.nix
+    ./hypridle.nix
+  ];
+  options.hyprland.enable = lib.mkEnableOption "Hyprland";
+  config = {
+    home.packages = with pkgs; [
+      dunst
+      # hyprlock
+      hyprpaper
+      rofi-wayland
+      slurp
+      swww
+      waybar
+      wl-clipboard
+      catppuccin-cursors.macchiatoLavender
+      bibata-cursors
+      # For potentially fixing some issues
+      libsForQt5.qt5.qtwayland
+      libsForQt5.qt5ct
+    ];
+
+    wayland.windowManager.hyprland = {
+      enable = true;
+      package = pkgs.hyprland;
+      settings = {
+        "$mainMod" = "SUPER";
+        "$shiftMainMod" = "SUPER_SHIFT";
+        "$term" = "kitty";
+
+        # monitors
+        "$mon_top" = "desc:BNQ G2420HDBL T2B04424SL000";
+        "$mon_left" = "desc:Samsung Electric Company LS27A600U HNMT502389";
+        "$mon_center" = "desc:Acer Technologies XB271HU #ASPVEKfgZ8Dd";
+        "$mon_right" = "desc:Samsung Electric Company LS27A600U HNMT502390";
+
+        monitor = [
+          # "$mon_top,1920x1080@60,2560x0,1" # top T2B04424SL000
+          "DP-6,1920x1080@60,2560x0,1" # top T2B04424SL000 60
+          # "$mon_left,2560x1440@75,0x1080,1" # left
+          "DP-8,2560x1440@75,0x1080,1" # left 75hz
+          # "$mon_center,2560x1440@120,2560x1080,1" # main #ASPVEKfgZ8Dd
+          "DP-5,2560x1440@144,2560x1080,1" # main #ASPVEKfgZ8Dd 120hz
+          # "$mon_right,2560x1440@75,5120x1080,1" # right
+          "DP-7,2560x1440@75,5120x1080,1" # right 75hz
+        ];
+        input = {
+          kb_layout = "no";
+          follow_mouse = 1;
+        };
+
+        cursor = {
+          no_hardware_cursors = true;
+        };
+
+        env = [
+          "LIBVA_DRIVER_NAME,nvidia"
+          "XDG_SESSION_TYPE,wayland"
+          "GBM_BACKEND,nvidia-drm"
+          # "__GLX_VENDOR_LIBRARY_NAME,nvidia"
+          "WLR_NO_HARDWARE_CURSORS,1"
+        ];
+
+        decoration = {
+          rounding = 10;
+          drop_shadow = true;
+          shadow_range = 4;
+          shadow_render_power = 3;
+          blur = {
+            enabled = true;
+            size = 3;
+            passes = 1;
+            xray = true;
+          };
+        };
+
+        general = {
+          gaps_in = 4;
+          gaps_out = 10;
+          border_size = 2;
+          layout = "dwindle";
+        };
+
+        animations = {
+          enabled = true;
+          bezier = [
+            "myBezier, 0.05, 0.9, 0.1, 1.05"
+            "easeInB, 0.6, -0.28, 0.735, 0.045"
+          ];
+          animation = [
+            "windows, 1, 7, myBezier"
+            "windowsOut, 1, 7, default, popin 80%"
+            "border, 1, 10, default"
+            "borderangle, 1, 8, default"
+            "fade, 1, 7, default"
+            "workspaces, 1, 6, easeInB, slidefadevert"
+            "specialWorkspace, 1, 4, default, fade"
+          ];
+        };
+        dwindle = {
+          pseudotile = true;
+          preserve_split = true;
+          special_scale_factor = 0.85;
+        };
+        master = {
+          new_status = "master";
+        };
+        misc = {
+          force_default_wallpaper = 0;
+          disable_hyprland_logo = true;
+        };
+
+        windowrulev2 = [
+          "opacity 0.95 override 0.7 override,class:^(Alacritty)$"
+          "opacity 0.95 override 0.7 override,class:^(kitty)$"
+        ];
+
+        workspace = [
+          "name:T1, monitor:$mon_top, persistent:true, default:true"
+          "name:T2, monitor:$mon_top, persistent:true, default:false"
+          "name:L1, monitor:$mon_left, persistent:true, default:true"
+          "name:L2, monitor:$mon_left, persistent:true, default:false"
+          "name:R1, monitor:$mon_right, persistent:true, default:true"
+          "name:R2, monitor:$mon_right, persistent:true, default:false"
+          "name:c1, monitor:$mon_center, persistent:true, default:true"
+          "name:c2, monitor:$mon_center, persistent:true, default:false"
+          "name:c3, monitor:$mon_center, persistent:true, default:false"
+          "name:c4, monitor:$mon_center, persistent:true, default:false"
+          "special:special, on-created-empty:kitty, rounding:true, decorate:false, border:false"
+        ];
+
+        bindm = [
+          "$mainMod,mouse:272,movewindow"
+          "$shiftMainMod,mouse:272,resizewindow"
+        ];
+
+        bindr = [
+          # mumble ptt release
+          # ",code:202,exec,mumble rpc stoptalking"
+          # ",code:202,exec,pamixer --source 63 -m"
+          # ",code:202,exec,sleep 0.5 && pamixer --default-source -m"
+        ];
+
+        bind = [
+          # term
+          "$mainMod,Return,exec,$term"
+
+          # hyprlock
+          "$shiftMainMod,l,exec,lockhelper"
+
+          # rofi
+          "$mainMod,D,exec,rofi-launcher"
+          "$mainMod,P,exec,rofi-rbw"
+
+          # hyprland
+          "$mainMod,Q,killactive,"
+          "CTRLALT,Delete,exit,"
+          "$mainMod,Space,togglefloating,"
+          "$mainMod,F,fullscreen,"
+
+          # focus
+          "$mainMod,l,movefocus,l"
+          "$mainMod,h,movefocus,r"
+          "$mainMod,k,movefocus,u"
+          "$mainMod,j,movefocus,d"
+
+          # move
+          "$mainMod,h,movewindow,l"
+          "$mainMod,l,movewindow,r"
+          "$mainMod,k,movewindow,u"
+          "$mainMod,j,movewindow,d"
+
+          # Force opacity
+          "$shiftMainMod,o,exec, hl-no-opacity"
+
+          # grimblast
+          "$mainMod,Print,exec,grimblast save active ~/tmp/$(date -Iseconds).png"
+          "$shiftMainMod,Print,exec,grimblast copy area"
+          ",Print,exec,grimblast copy active"
+
+          # mumble ptt click
+          # ",code:202,exec,mumble rpc starttalking"
+          #",code:202,pass,^(info\.mumble\.Mumble)$"
+          # ",code:202,exec,pamixer --default-source -u"
+          ",code:202,pass,^discord$"
+
+          # Paste to wtype
+          "$mainMod,v,exec,sleep 0.5s && wl-paste | wtype -"
+
+          # worspace switching
+          "$mainMod,1,workspace,name:c1"
+          "$mainMod,2,workspace,name:c2"
+          "$mainMod,3,workspace,name:c3"
+          "$mainMod,4,workspace,name:c4"
+          "$mainMod,5,workspace,5"
+          "$mainMod,6,workspace,6"
+
+          # Move window to workspace
+          "$shiftMainMod,1,movetoworkspace,name:c1"
+          "$shiftMainMod,2,movetoworkspace,name:c2"
+          "$shiftMainMod,3,movetoworkspace,name:c3"
+          "$shiftMainMod,4,movetoworkspace,name:c4"
+          "$shiftMainMod,5,movetoworkspace,5"
+          "$shiftMainMod,6,movetoworkspace,6"
+
+          # Special workspace
+          "$mainMod,c,togglespecialworkspace"
+          "$shiftMainMod,c,movetoworkspace, special"
+        ];
+
+        exec-once = [
+          "waybar"
+          "hyprpaper & sleep 10 && randomwp"
+          "easyeffects --gapplication-service"
+          "hypridle"
+          "streamcontroller -b"
+          # "dunst"
+        ];
+      };
+    };
+  };
+}

home/hyprland/hyprland_magicman.nix

@@ -0,0 +1,171 @@
+{
+  inputs,
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+{
+  imports = [
+    ./hyprlock.nix
+    ./hypridle.nix
+  ];
+  options.hyprland.enable = lib.mkEnableOption "Hyprland";
+  config = {
+    home.packages = with pkgs; [
+      dunst
+      # hyprlock
+      hyprpaper
+      rofi-wayland
+      slurp
+      swww
+      waybar
+      wl-clipboard
+      catppuccin-cursors.macchiatoLavender
+      bibata-cursors
+      # For potentially fixing some issues
+      libsForQt5.qt5.qtwayland
+      libsForQt5.qt5ct
+    ];
+
+    wayland.windowManager.hyprland = {
+      enable = true;
+      package = pkgs.hyprland;
+      settings = {
+        "$mainMod" = "SUPER";
+        "$shiftMainMod" = "SUPER_SHIFT";
+        "$term" = "kitty";
+
+        monitor = [ "eDP-1,1920x1080@60,0x0,1" ];
+        input = {
+          kb_layout = "no";
+          follow_mouse = 1;
+        };
+
+        env = [ "XDG_SESSION_TYPE,wayland" ];
+
+        decoration = {
+          rounding = 10;
+          drop_shadow = true;
+          shadow_range = 4;
+          shadow_render_power = 3;
+          blur = {
+            enabled = true;
+            size = 3;
+            passes = 1;
+            xray = true;
+          };
+        };
+
+        general = {
+          gaps_in = 4;
+          gaps_out = 10;
+          border_size = 2;
+          layout = "dwindle";
+        };
+
+        animations = {
+          enabled = true;
+          bezier = "myBezier, 0.05, 0.9, 0.1, 1.05";
+          animation = [
+            "windows, 1, 7, myBezier"
+            "windowsOut, 1, 7, default, popin 80%"
+            "border, 1, 10, default"
+            "borderangle, 1, 8, default"
+            "fade, 1, 7, default"
+            "workspaces, 1, 6, default"
+            "specialWorkspace, 1, 4, default, fade"
+          ];
+        };
+        dwindle = {
+          pseudotile = true;
+          preserve_split = true;
+          special_scale_factor = 0.85;
+        };
+        master = {
+          new_status = "master";
+        };
+        misc = {
+          force_default_wallpaper = 0;
+          disable_hyprland_logo = true;
+        };
+
+        windowrulev2 = [
+          "opacity 0.95 override 0.7 override,class:^(Alacritty)$"
+          "opacity 0.95 override 0.7 override,class:^(kitty)$"
+        ];
+
+        workspace = [
+          "special:special, on-created-empty:kitty, rounding:true, decorate:false, border:false"
+        ];
+
+        bindm = [ "ALT,mouse:272,movewindow" ];
+
+        bindr = [
+          # mumble ptt release
+          # ",code:202,exec,mumble rpc stoptalking"
+          # ",code:202,exec,pamixer --source 63 -m"
+          # ",code:202,exec,sleep 0.5 && pamixer --default-source -m"
+        ];
+
+        bind = [
+          # term
+          "$mainMod,Return,exec,$term"
+
+          # rofi
+          "$mainMod,D,exec,rofi-launcher"
+          "$mainMod,P,exec,rofi-rbw"
+
+          # hyprlock
+          "$shiftMainMod,l,exec,lockhelper"
+
+          # hyprland
+          "$mainMod,Q,killactive,"
+          "CTRLALT,Delete,exit,"
+          "$mainMod,Space,togglefloating,"
+          "$mainMod,F,fullscreen,"
+
+          # focus
+          "$mainMod,l,movefocus,l"
+          "$mainMod,h,movefocus,r"
+          "$mainMod,k,movefocus,u"
+          "$mainMod,j,movefocus,d"
+
+          # move
+          "$mainMod,h,movewindow,l"
+          "$mainMod,l,movewindow,r"
+          "$mainMod,k,movewindow,u"
+          "$mainMod,j,movewindow,d"
+
+          # Force opacity
+          "$shiftMainMod,o,exec, hl-no-opacity"
+
+          # mumble ptt click
+          # ",code:202,exec,mumble rpc starttalking"
+          #",code:202,pass,^(info\.mumble\.Mumble)$"
+          # ",code:202,exec,pamixer --default-source -u"
+          # ",code:202,pass,^discord$"
+
+          # worspace switching
+          "$mainMod,1,workspace,1"
+          "$mainMod,2,workspace,2"
+          "$mainMod,3,workspace,3"
+          "$mainMod,4,workspace,4"
+          "$mainMod,5,workspace,5"
+          "$mainMod,6,workspace,6"
+
+          # Special workspace
+          "$mainMod,c,togglespecialworkspace"
+          "$shiftMainMod,c,movetoworkspace, special"
+        ];
+
+        exec-once = [
+          "waybar"
+          "hyprpaper & sleep 2 && randomwp"
+          "hypridle"
+          # "dunst"
+        ];
+      };
+    };
+  };
+}

home/hyprland/hyprland_prismo.nix

@@ -1,8 +1,14 @@
-{ inputs, pkgs, lib, config, ... }: {
+{
+  inputs,
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+{
   options.hyprland.enable = lib.mkEnableOption "Hyprland";
   config = {
     home.packages = with pkgs; [
-      cliphist
       dunst
       # hyprlock
       hyprpaper
@@ -20,40 +26,19 @@
 
     wayland.windowManager.hyprland = {
       enable = true;
-      package = pkgs.unstable.hyprland;
+      package = pkgs.hyprland;
       settings = {
         "$mainMod" = "SUPER";
         "$shiftMainMod" = "SUPER_SHIFT";
         "$term" = "kitty";
 
-        # monitors
-        "$mon_top" = "desc:BNQ G2420HDBL T2B04424SL000";
-        "$mon_left" = "desc:Samsung Electric Company LS27A600U HNMT502389";
-        "$mon_center" = "desc:Acer Technologies XB271HU #ASPVEKfgZ8Dd";
-        "$mon_right" = "desc:Samsung Electric Company LS27A600U HNMT502390";
-
-        monitor = [
-          # "$mon_top,1920x1080@60,2560x0,1" # top T2B04424SL000
-          "DP-6,1920x1080@60,2560x0,1" # top T2B04424SL000 60
-          # "$mon_left,2560x1440@75,0x1080,1" # left
-          "DP-8,2560x1440@75,0x1080,1" # left 75hz
-          # "$mon_center,2560x1440@120,2560x1080,1" # main #ASPVEKfgZ8Dd
-          "DP-5,2560x1440@120,2560x1080,1" # main #ASPVEKfgZ8Dd 120hz
-          # "$mon_right,2560x1440@75,5120x1080,1" # right
-          "DP-7,2560x1440@75,5120x1080,1" # right 75hz
-        ];
+        monitor = [ ];
         input = {
           kb_layout = "no";
           follow_mouse = 1;
         };
 
-        env = [
-          "LIBVA_DRIVER_NAME,nvidia"
-          "XDG_SESSION_TYPE,wayland"
-          "GBM_BACKEND,nvidia-drm"
-          # "__GLX_VENDOR_LIBRARY_NAME,nvidia"
-          "WLR_NO_HARDWARE_CURSORS,1"
-        ];
+        env = [ "XDG_SESSION_TYPE,wayland" ];
 
         decoration = {
           rounding = 0;
@@ -91,7 +76,9 @@
           pseudotile = true;
           preserve_split = true;
         };
-        master.new_is_master = true;
+        master = {
+          new_status = "master";
+        };
         misc.force_default_wallpaper = -1;
 
         windowrulev2 = [
@@ -107,15 +94,13 @@
           "name:main 2, monitor:$mon_center, persistent:true, default:true"
         ];
 
-        bindm = [
-          "ALT,mouse:272,movewindow"
-        ];
+        bindm = [ "ALT,mouse:272,movewindow" ];
 
         bindr = [
           # mumble ptt release
           # ",code:202,exec,mumble rpc stoptalking"
           # ",code:202,exec,pamixer --source 63 -m"
-          ",code:202,exec,pamixer --default-source -m"
+          # ",code:202,exec,sleep 0.5 && pamixer --default-source -m"
         ];
 
         bind = [
@@ -149,7 +134,9 @@
 
           # mumble ptt click
           # ",code:202,exec,mumble rpc starttalking"
-          ",code:202,exec,pamixer --default-source -u"
+          #",code:202,pass,^(info\.mumble\.Mumble)$"
+          # ",code:202,exec,pamixer --default-source -u"
+          ",code:202,pass,^discord$"
 
           # worspace switching
           "$mainMod,1,workspace,name:main 1"

home/hyprland/hyprlock.nix

@@ -0,0 +1,16 @@
+{
+  config,
+  osConfig,
+  pkgs,
+  ...
+}:
+{
+
+  home.packages = with pkgs; [ hyprlock ];
+  xdg.configFile = {
+    "hypr/hyprlock.conf" = {
+      source = config.lib.file.mkOutOfStoreSymlink ./. + "/hyprlock_${osConfig.system.name}.conf";
+      target = "hypr/hyprlock.conf";
+    };
+  };
+}

home/hyprland/hyprlock_gunter.conf

@@ -0,0 +1,91 @@
+# BACKGROUND
+background {
+    monitor = DP-5
+    path = /tmp/lockscreen/DP-5.png
+    blur_passes = 3
+    contrast = 0.8916
+    brightness = 0.8172
+    vibrancy = 0.1696
+    vibrancy_darkness = 0.0
+}
+
+background {
+    monitor = DP-6
+    path = /tmp/lockscreen/DP-6.png
+    blur_passes = 3
+    contrast = 0.8916
+    brightness = 0.8172
+    vibrancy = 0.1696
+    vibrancy_darkness = 0.0
+}
+background {
+    monitor = DP-7
+    path = /tmp/lockscreen/DP-7.png
+    blur_passes = 3
+    contrast = 0.8916
+    brightness = 0.8172
+    vibrancy = 0.1696
+    vibrancy_darkness = 0.0
+}
+background {
+    monitor = DP-8
+    path = /tmp/lockscreen/DP-8.png
+    blur_passes = 3
+    contrast = 0.8916
+    brightness = 0.8172
+    vibrancy = 0.1696
+    vibrancy_darkness = 0.0
+}
+
+# GENERAL
+general {
+    no_fade_in = false
+    grace = 0
+    disable_loading_bar = true
+}
+
+# INPUT FIELD
+input-field {
+    monitor =
+    size = 250, 60
+    outline_thickness = 2
+    dots_size = 0.2 # Scale of input-field height, 0.2 - 0.8
+    dots_spacing = 0.2 # Scale of dots' absolute size, 0.0 - 1.0
+    dots_center = true
+    outer_color = rgba(0, 0, 0, 0)
+    inner_color = rgba(0, 0, 0, 0.5)
+    font_color = rgb(200, 200, 200)
+    fade_on_empty = false
+    font_family = JetBrains Mono Nerd Font Mono
+    placeholder_text = <i><span foreground="##cdd6f4">Input Password...</span></i>
+    hide_input = false
+    position = 0, -120
+    halign = center
+    valign = center
+}
+
+# TIME
+label {
+    monitor =
+    text = cmd[update:2000] echo "$(date +"%b %d %H:%M")"
+    #color = $foreground
+    color = rgba(255, 255, 255, 0.6)
+    font_size = 120
+    font_family = JetBrains Mono Nerd Font Mono ExtraBold
+    position = 0, -300
+    halign = center
+    valign = top
+}
+
+## USER
+#label {
+#    monitor =
+#    text = Hi there, $USER
+#    color = $foreground
+#    #color = rgba(255, 255, 255, 0.6)
+#    font_size = 25
+#    font_family = JetBrains Mono Nerd Font Mono
+#    position = 0, -40
+#    halign = center
+#    valign = center
+#}

home/hyprland/hyprlock_magicman.conf

@@ -0,0 +1,78 @@
+source = ~/.cache/wal/colors-hyprland.conf
+# BACKGROUND
+background {
+    monitor =
+    path = /tmp/lockscreen/eDP-1.png
+    blur_passes = 3
+    contrast = 0.8916
+    brightness = 0.8172
+    vibrancy = 0.1696
+    vibrancy_darkness = 0.0
+}
+
+# GENERAL
+general {
+    no_fade_in = false
+    grace = 0
+    disable_loading_bar = true
+}
+
+# INPUT FIELD
+input-field {
+    monitor =
+    size = 250, 60
+    outline_thickness = 2
+    dots_size = 0.2 # Scale of input-field height, 0.2 - 0.8
+    dots_spacing = 0.2 # Scale of dots' absolute size, 0.0 - 1.0
+    dots_center = true
+    outer_color = rgba(0, 0, 0, 0)
+    inner_color = rgba(0, 0, 0, 0.5)
+    font_color = rgb(200, 200, 200)
+    fade_on_empty = false
+    font_family = JetBrains Mono Nerd Font Mono
+    placeholder_text = <i><span foreground="##cdd6f4">Input Password...</span></i>
+    hide_input = false
+    position = 0, -120
+    halign = center
+    valign = center
+}
+
+# TIME
+label {
+    monitor =
+    text = cmd[update:1000] echo "$(date +"%b %d %H:%M")"
+    color = $foreground
+    #color = rgba(255, 255, 255, 0.6)
+    font_size = 120
+    font_family = JetBrains Mono Nerd Font Mono ExtraBold
+    position = 0, -300
+    halign = center
+    valign = top
+}
+
+## USER
+#label {
+#    monitor =
+#    text = Hi there, $USER
+#    color = $foreground
+#    #color = rgba(255, 255, 255, 0.6)
+#    font_size = 25
+#    font_family = JetBrains Mono Nerd Font Mono
+#    position = 0, -40
+#    halign = center
+#    valign = center
+#}
+
+# Battery level
+label {
+    monitor =
+    text = cmd[update:1000] echo "$(batlvl)"
+    color = $foreground
+    #color = rgba(255, 255, 255, 0.6)
+    font_size = 18
+    # font_family = JetBrainsMono, Font Awesome 6 Free Solid
+    font_family = JetBrains Mono Nerd Font Mono
+    position = 0, -20
+    halign = center
+    valign = bottom
+}

home/hyprland/magicman.nix

@@ -0,0 +1,8 @@
+{
+  imports = [
+    ./hyprland_magicman.nix
+    ./waybar
+    ./xdg.nix
+    ./cursor.nix
+  ];
+}

home/hyprland/prismo.nix

@@ -0,0 +1,8 @@
+{
+  imports = [
+    ./hyprland_prismo.nix
+    ./waybar
+    ./xdg.nix
+    ./cursor.nix
+  ];
+}

home/hyprland/waybar/arrhist.nix

@@ -0,0 +1,5 @@
+{ config, pkgs }:
+{
+  sops.secrets."sonarr_api_key" = { };
+  sops.secrets."radarr_api_key" = { };
+}

home/hyprland/waybar/arrhist.py

@@ -0,0 +1,71 @@
+#!/usr/bin/env python3
+import json
+import os
+import requests
+from datetime import datetime, date, timedelta
+
+SECRET_DIR = "/home/torjus/.config/sops-nix/secrets"
+
+def sonarr_url():
+    xdg_dir = os.environ["XDG_RUNTIME_DIR"]
+    if not xdg_dir:
+        raise Exception("XDG_RUNTIME_DIR not set")
+    with open(f"{SECRET_DIR}/sonarr_base_url") as f:
+        return f.read().strip()
+
+def radarr_url():
+    with open(f"{SECRET_DIR}/radarr_base_url") as f:
+        return f.read().strip()
+
+def make_header(api_key: str):
+    return {"X-Api-Key": api_key, "Accept": "application/json"}
+
+def get_sonarr_key():
+    with open(f"{SECRET_DIR}/sonarr_api_key") as f:
+        return f.read().strip()
+
+def get_radarr_key():
+    with open(f"{SECRET_DIR}/radarr_api_key") as f:
+        return f.read().strip()
+
+def get_sonarr_history(since: datetime|None=None):
+    api_key = get_sonarr_key()
+    if not since:
+        since = datetime.combine(date.today()-timedelta(days=1),datetime.min.time())
+    url = f"{sonarr_url()}/api/history/since"
+    url += f"?date={since.isoformat()}"
+    response = requests.get(url, headers=make_header(api_key))
+    response.raise_for_status()
+    data = response.json()
+
+    items = []
+    for item in data:
+        if item["eventType"] == "downloadFolderImported":
+            items.append(item["sourceTitle"])
+    return items
+
+def get_radarr_history(since: datetime|None=None):
+    api_key = get_radarr_key()
+    if not since:
+        since = datetime.combine(date.today()-timedelta(days=7),datetime.min.time())
+    url = f"{radarr_url()}/api/v3/history/since"
+    url += f"?date={since.isoformat()}"
+    response = requests.get(url, headers=make_header(api_key))
+    response.raise_for_status()
+    data = response.json()
+
+    items = []
+    for item in data:
+        if item["eventType"] == "downloadFolderImported":
+            items.append(item["sourceTitle"])
+    return items
+
+if __name__ == "__main__":
+    sonarr_items = get_sonarr_history()
+    radarr_items = get_radarr_history()
+
+    output = {
+        "text": f"Son: {len(sonarr_items)}|Rad: {len(radarr_items)}",
+        "tooltip": "Radarr: \n" + "\n".join(radarr_items) + "\n" + "Sonarr: \n" + "\n".join(sonarr_items)
+    }
+    print(json.dumps(output))

home/hyprland/waybar/default.nix

@@ -1,12 +1,45 @@
-{ pkgs, lib, ... }: {
-  xdg.configFile."waybar/macchiato.css" = {
-    source = pkgs.fetchFromGitHub
 {
+  pkgs,
+  lib,
+  osConfig,
+  ...
+}:
+let
+  flakestat = pkgs.writeShellApplication {
+    name = "flakestat";
+    runtimeInputs = with pkgs; [
+      git
+      jq
+    ];
+    text = builtins.readFile ./flakestat.sh;
+  };
+  arrhist = pkgs.stdenv.mkDerivation {
+    name = "arrhist";
+    propagatedBuildInputs = [
+      (pkgs.python3.withPackages (pythonPackages: with pythonPackages; [ requests ]))
+    ];
+    src = ./arrhist.py;
+    dontUnpack = true;
+    installPhase = "install -Dm755 ${./arrhist.py} $out/bin/arrhist";
+  };
+  withArrhist = if (osConfig.system.name == "gunter") then true else false;
+  withBattery = if (osConfig.system.name == "magicman") then true else false;
+in
+{
+  sops.secrets."sonarr_base_url" = { };
+  sops.secrets."sonarr_api_key" = { };
+  sops.secrets."radarr_base_url" = { };
+  sops.secrets."radarr_api_key" = { };
+
+  xdg.configFile."waybar/macchiato.css" = {
+    source =
+      pkgs.fetchFromGitHub {
         owner = "catppuccin";
         repo = "waybar";
         rev = "f74ab1eecf2dcaf22569b396eed53b2b2fbe8aff";
         sha256 = "WLJMA2X20E5PCPg0ZPtSop0bfmu+pLImP9t8A8V4QK8=";
-      } + "/themes/machiatto.css";
+      }
+      + "/themes/macchiato.css";
   };
 
   programs.waybar = {
@@ -16,18 +49,40 @@
       target = "graphical-session.target";
     };
     style = ''
+      @import "macchiato.css";
       * {
-        font-family: "FiraCodeNerdFont-Regular";
-        font-size: 14px;
-        font-weight: bold;
-        border-radius: 0px;
+        border: none;
+        font-family: "JetbrainsMono Nerd Font";
+        font-size: 15px;
         transition-property: background-color;
         transition-duration: 0.5s;
+        color: @text;
+        border-radius: 10px;
+        min-height: 10px;
       }
+
+      window#waybar {
+        background-color: @surface2;
+        border-radius: 0px;
+      }
+
+      window#waybar.hidden {
+        opacity: 0.2;
+      }
+
+      #window {
+        margin-top: 6px;
+        padding-left: 10px;
+        padding-right: 10px;
+        border-radius: 0px;
+        transition: none;
+        color: transparent;
+        background-color: @surface2;
+      }
+
       @keyframes blink_red {
         to {
-          background-color: rgb(242, 143, 173);
-          color: rgb(26, 24, 38);
+          background-color: @red;
         }
       }
       .warning,
@@ -39,49 +94,43 @@
         animation-iteration-count: infinite;
         animation-direction: alternate;
       }
-      window#waybar {
-        background-color: transparent;
-      }
-      window > box {
-        margin-left: 0px;
-        margin-right: 0px;
-        margin-top: 0px;
-        border-bottom: 2px solid @color1;
-        background-color: @background;
-      }
       #workspaces {
-        padding-left: 0px;
-        padding-right: 4px;
+        padding-left: 12px;
+        padding-right: 12px;
+        background-color: @base;
       }
       #workspaces button {
-        padding-top: 5px;
-        padding-bottom: 5px;
-        padding-left: 6px;
-        padding-right: 6px;
-        color: @color1;
+        padding-left: 12px;
+        padding-right: 12px;
       }
       #workspaces button.active {
-        background-color: @color1;
-        color: rgb(26, 24, 38);
+        background-color: @surface2;
       }
       #workspaces button.urgent {
-        color: rgb(26, 24, 38);
+        color: alpha(@red, 0.4);
       }
       #workspaces button:hover {
-        background-color: #b38dac;
-        color: rgb(26, 24, 38);
+        background-color: @surface2;
       }
       tooltip {
-        background: #3b4253;
+        background-color: @base;
       }
       tooltip label {
-        color: #e4e8ef;
+        color: @text;
       }
       #custom-launcher {
-        font-size: 20px;
-        padding-left: 8px;
-        padding-right: 6px;
-        color: #7ebae4;
+        font-size: 15px;
+        padding-left: 5px;
+        padding-right: 12px;
+        background-color: @base;
+      }
+      .modules-right {
+        background-color: @base;
+        border-radius: 10px 0px 0px 10px;
+      }
+      .modules-left {
+        background-color: @base;
+        border-radius: 0px 10px 10px 0px;
       }
       #mode,
       #clock,
@@ -96,59 +145,40 @@
       #network,
       #battery,
       #custom-powermenu,
-      #custom-cava-internal {
-        padding-left: 10px;
-        padding-right: 10px;
-        color: @color1;
-      }
-      #network.disconnected {
-        color: #cccccc;
+      #custom-flakestat,
+      #custom-arrhist {
+        padding-left: 12px;
+        padding-right: 12px;
       }
       #battery.charging,
       #battery.full,
       #battery.discharging {
-        color: #cf876f;
+        color: @maroon;
       }
       #battery.critical:not(.charging) {
-        color: #d6dce7;
-      }
-      #custom-powermenu {
-        color: #bd6069;
-      }
-      #tray {
-        padding-right: 8px;
-        padding-left: 10px;
-      }
-      #tray menu {
-        background: #3b4252;
-        color: #dee2ea;
-      }
-      #mpd.paused {
-        color: rgb(192, 202, 245);
-        font-style: italic;
-      }
-      #mpd.stopped {
-        background: transparent;
-      }
-      #mpd {
-        color: #e4e8ef;
-      }
-      #custom-cava-internal {
-        font-family: "Hack Nerd Font";
+        color: @red;
       }
     '';
-    settings = [{
+    settings = [
+      (
+        let
+          volInterval = if (osConfig.system.name == "gunter") then "5" else "1";
+        in
+        {
           "layer" = "top";
           "position" = "top";
-      modules-left = [ "custom/launcher" "hyprland/workspaces" ];
-      modules-center = [ "clock" ];
-      modules-right =
-        [ "pulseaudio" "pulseaudio#microphone" "memory" "cpu" "tray" ];
-      "custom/launcher" = {
-        "format" = " ";
-        "on-click" = "pkill rofi || ~/.config/rofi/launcher.sh";
-        "tooltip" = false;
-      };
+          modules-left = [ "custom/flakestat" ];
+          modules-center = [ "hyprland/workspaces" ];
+          modules-right = [
+            (lib.mkIf (withArrhist) "custom/arrhist")
+            "pulseaudio"
+            "pulseaudio#microphone"
+            "memory"
+            "cpu"
+            (lib.mkIf (withBattery) "battery")
+            "clock"
+            "tray"
+          ];
           "hyprland/workspaces" = {
             "format" = "{name}";
             "on-click" = "activate";
@@ -159,7 +189,15 @@
             "scroll-step" = 5;
             "format" = "{icon} {volume}%";
             "format-muted" = "";
-        "format-icons" = { "default" = [ "" "" "" ]; };
+            "format-icons" = {
+              "default" = [
+                ""
+                ""
+                ""
+              ];
+            };
+            "on-scroll-up" = "pamixer -i ${volInterval}";
+            "on-scroll-down" = "pamixer -d ${volInterval}";
             "on-click" = "pamixer -t";
           };
           "pulseaudio#microphone" = {
@@ -167,8 +205,8 @@
             "format-source" = " {volume}%";
             "format-source-muted" = "";
             "on-click" = "pamixer --default-source -t";
-        "on-scroll-up" = "pamixer --default-source -i 5";
-        "on-scroll-down" = "pamixer --default-source -d 5";
+            "on-scroll-up" = "pamixer --default-source -i ${volInterval}";
+            "on-scroll-down" = "pamixer --default-source -d ${volInterval}";
             "scroll-step" = 5;
             "on-click-right" = "pavucontrol";
           };
@@ -180,7 +218,9 @@
           "memory" = {
             "interval" = 3;
             "format" = " {percentage}%";
-        "states" = { "warning" = 85; };
+            "states" = {
+              "warning" = 85;
+            };
           };
           "cpu" = {
             "interval" = 3;
@@ -190,6 +230,36 @@
             "icon-size" = 15;
             "spacing" = 6;
           };
-    }];
+          "battery" = {
+            "interval" = 60;
+            "states" = {
+              "warning" = 20;
+              "critical" = 5;
+            };
+            "format" = "{icon} {capacity}%";
+            "format-icons" = [
+              ""
+              ""
+              ""
+              ""
+              ""
+            ];
+          };
+          "custom/flakestat" = {
+            "exec" = "${flakestat}/bin/flakestat";
+            "format" = "  {}";
+            "return-type" = "json";
+            "interval" = 600;
+          };
+        }
+        // lib.optionalAttrs (withArrhist) {
+          "custom/arrhist" = {
+            "exec" = "${arrhist}/bin/arrhist";
+            "return-type" = "json";
+            "interval" = 600;
+          };
+        }
+      )
+    ];
   };
 }

home/hyprland/waybar/flakestat.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+set -eo pipefail
+
+# Args:
+# $1 text
+# $2 tooltip
+# $3 error-code
+print_output() {
+    local text="$1"
+    local tooltip="$2"
+    local error_code="$3"
+
+    if [ -z "$error_code" ]; then
+        output=$(jq -n \
+            --arg text "$text" \
+            --arg tooltip "$tooltip" \
+            --unbuffered \
+            --compact-output \
+            '{text: $text, tooltip: $tooltip}')
+    else
+        output=$(jq -n \
+            --arg text "$text" \
+            --arg tooltip "$tooltip" \
+            --unbuffered \
+            --compact-output \
+            '{text: $text, tooltip: $tooltip}')
+    fi
+    
+    echo "$output"
+}
+
+FLAKE_DIR="/home/torjus/nixos"
+NIXPKGS_DIR="/home/torjus/git/nixpkgs"
+
+flake_metadata=$(nix flake metadata --json "$FLAKE_DIR" 2>/dev/null)
+
+unstable_input=$(echo "$flake_metadata" | jq '.locks.nodes.root.inputs.nixpkgs')
+unstable_rev=$(echo "$flake_metadata" | jq -r ".locks.nodes.$unstable_input.locked.rev")
+unstable_branch=$(echo "$flake_metadata" | jq -r ".locks.nodes.$unstable_input.original.ref")
+
+cd "$NIXPKGS_DIR" || print_output "?" "Could not find git repo dir" 1
+if ! git fetch -q --all; then
+    print_output "?" "Unable to fetch commits" 1
+    exit 1
+fi
+
+if ! unstable_commit_count=$(git rev-list --count "$unstable_rev..origin/$unstable_branch"); then
+    print_output "?" "Unable to list commits" 1
+    exit 1
+fi
+
+text="$unstable_commit_count"
+tooltip="${unstable_branch}: ${unstable_commit_count}"
+
+print_output "$text" "$tooltip" 0

home/hyprland/waybar/waybar.nix

@@ -1,185 +0,0 @@
-{ pkgs, ... }: {
-  programs.waybar = {
-    enable = true;
-    systemd = {
-      enable = false; # disable it,autostart it in hyprland conf
-      target = "graphical-session.target";
-    };
-    style = ''
-      * {
-        font-family: "FiraCodeNerdFont-Regular";
-        font-size: 14px;
-        font-weight: bold;
-        border-radius: 0px;
-        transition-property: background-color;
-        transition-duration: 0.5s;
-      }
-      @keyframes blink_red {
-        to {
-          background-color: rgb(242, 143, 173);
-          color: rgb(26, 24, 38);
-        }
-      }
-      .warning,
-      .critical,
-      .urgent {
-        animation-name: blink_red;
-        animation-duration: 1s;
-        animation-timing-function: linear;
-        animation-iteration-count: infinite;
-        animation-direction: alternate;
-      }
-      window#waybar {
-        background-color: transparent;
-      }
-      window > box {
-        margin-left: 0px;
-        margin-right: 0px;
-        margin-top: 0px;
-        border-bottom: 2px solid @color1;
-        background-color: @background;
-      }
-      #workspaces {
-        padding-left: 0px;
-        padding-right: 4px;
-      }
-      #workspaces button {
-        padding-top: 5px;
-        padding-bottom: 5px;
-        padding-left: 6px;
-        padding-right: 6px;
-        color: @color1;
-      }
-      #workspaces button.active {
-        background-color: @color1;
-        color: rgb(26, 24, 38);
-      }
-      #workspaces button.urgent {
-        color: rgb(26, 24, 38);
-      }
-      #workspaces button:hover {
-        background-color: #b38dac;
-        color: rgb(26, 24, 38);
-      }
-      tooltip {
-        background: #3b4253;
-      }
-      tooltip label {
-        color: #e4e8ef;
-      }
-      #custom-launcher {
-        font-size: 20px;
-        padding-left: 8px;
-        padding-right: 6px;
-        color: #7ebae4;
-      }
-      #mode,
-      #clock,
-      #memory,
-      #temperature,
-      #cpu,
-      #mpd,
-      #custom-wall,
-      #temperature,
-      #backlight,
-      #pulseaudio,
-      #network,
-      #battery,
-      #custom-powermenu,
-      #custom-cava-internal {
-        padding-left: 10px;
-        padding-right: 10px;
-        color: @color1;
-      }
-      #network.disconnected {
-        color: #cccccc;
-      }
-      #battery.charging,
-      #battery.full,
-      #battery.discharging {
-        color: #cf876f;
-      }
-      #battery.critical:not(.charging) {
-        color: #d6dce7;
-      }
-      #custom-powermenu {
-        color: #bd6069;
-      }
-      #tray {
-        padding-right: 8px;
-        padding-left: 10px;
-      }
-      #tray menu {
-        background: #3b4252;
-        color: #dee2ea;
-      }
-      #mpd.paused {
-        color: rgb(192, 202, 245);
-        font-style: italic;
-      }
-      #mpd.stopped {
-        background: transparent;
-      }
-      #mpd {
-        color: #e4e8ef;
-      }
-      #custom-cava-internal {
-        font-family: "Hack Nerd Font";
-      }
-    '';
-    settings = [{
-      "layer" = "top";
-      "position" = "top";
-      modules-left = [ "custom/launcher" "hyprland/workspaces" ];
-      modules-center = [ "clock" ];
-      modules-right =
-        [ "pulseaudio" "pulseaudio#microphone" "memory" "cpu" "tray" ];
-      "custom/launcher" = {
-        "format" = " ";
-        "on-click" = "pkill rofi || ~/.config/rofi/launcher.sh";
-        "tooltip" = false;
-      };
-      "hyprland/workspaces" = {
-        "format" = "{name}";
-        "on-click" = "activate";
-        "on-scroll-up" = "hyprctl dispatch workspace e+1";
-        "on-scroll-down" = "hyprctl dispatch workspace e-1";
-      };
-      "pulseaudio" = {
-        "scroll-step" = 5;
-        "format" = "{icon} {volume}%";
-        "format-muted" = "";
-        "format-icons" = { "default" = [ "" "" "" ]; };
-        "on-click" = "pamixer -t";
-      };
-      "pulseaudio#microphone" = {
-        "format" = "{format_source}";
-        "format-source" = " {volume}%";
-        "format-source-muted" = "";
-        "on-click" = "pamixer --default-source -t";
-        "on-scroll-up" = "pamixer --default-source -i 5";
-        "on-scroll-down" = "pamixer --default-source -d 5";
-        "scroll-step" = 5;
-        "on-click-right" = "pavucontrol";
-      };
-      "clock" = {
-        "interval" = 1;
-        "format" = "{:%H:%M %A %b %d}";
-        "tooltip" = true;
-      };
-      "memory" = {
-        "interval" = 3;
-        "format" = " {percentage}%";
-        "states" = { "warning" = 85; };
-      };
-      "cpu" = {
-        "interval" = 3;
-        "format" = " {usage}%";
-      };
-      "tray" = {
-        "icon-size" = 15;
-        "spacing" = 6;
-      };
-    }];
-  };
-}

home/hyprland/xdg.nix

@@ -1,4 +1,5 @@
-{ config, ... }: {
+{ config, ... }:
+{
   xdg.configFile = {
     "hypr/hyprpaper.conf" = {
       source = config.lib.file.mkOutOfStoreSymlink ./. + "/hyprpaper.conf";

home/i3/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 let
   mod = "Mod4";
 in

home/magicman.nix

@@ -0,0 +1,49 @@
+{
+  pkgs,
+  inputs,
+  user,
+  ...
+}:
+{
+  imports = [ inputs.home-manager.nixosModules.home-manager ];
+  home-manager = {
+    useUserPackages = true;
+    useGlobalPkgs = true;
+    extraSpecialArgs = {
+      inherit pkgs inputs user;
+    };
+    users.${user} =
+      { pkgs, ... }:
+      {
+        imports = [
+          inputs.sops-nix.homeManagerModules.sops
+          ./sops
+          ./editor/neovim
+          ./programs/firefox
+          ./programs/tmux
+          ./programs/dunst
+          ./programs/kitty
+          ./programs/rofi
+          ./programs/obs-studio
+          ./programs/vscode
+          ./programs/pywal
+          ./programs/zellij
+          ./scripts
+          ./scripts/batlvl.nix
+          ./zsh
+          ./packages
+          ./hyprland/magicman.nix
+          ./ssh
+        ];
+        firefox.enable = true;
+        tmux.enable = true;
+        hyprland.enable = true;
+        home = {
+          username = "${user}";
+          homeDirectory = "/home/${user}";
+          stateVersion = "23.11";
+        };
+        programs.home-manager.enable = true;
+      };
+  };
+}

home/packages/default.nix

@@ -1,25 +1,41 @@
-{ pkgs, ... }: {
+{ pkgs, osConfig, ... }:
+let
+  withCuda = if (osConfig.system.name == "gunter") then true else false;
+in
+{
+  imports = [
+    ./zoom.nix
+  ];
   home.packages = with pkgs; [
-    # Generic tools
+    # CLI utils
+    act
     age
-    alacritty
-    unstable.btop
+    bat
     bzip2
     croc
+    devenv
+    distrobox
+    dust
     easyeffects
+    eza
     fd
     ffmpeg
     file
-    go-task
+    fzf
     glib
+    grimblast
+    ijq
+    incus
     jq
     kitty
     kubectl
+    lazygit
+    lf
     ncdu
+    nvd
+    nurl
     nwg-look
-    mumble
-    mpv
-    pamixer
+    most
     pinentry
     pre-commit
     pulseaudio
@@ -27,23 +43,37 @@
     rbw
     restic
     ripgrep
-    rofi-rbw-wayland
-    spotify
-    spicetify-cli
+    sops
     sshfs
-    talosctl
-
-    # steam
-    # steam-run
-    # steamcmd
-    # gamescope
+    tea
+    tldr
     tokei
     unzip
-    yt-dlp
-    unstable.zoom-us
+    ventoy
+    wtype
 
-    # Editors
-    vscode
+    # Non-CLI stuff
+    alacritty
+    discord
+    feh
+    krita
+    mpv
+    mumble
+    pamixer
+    rofi-rbw-wayland
+    spicetify-cli
+    spotify
+    virt-manager
+    vmware-horizon-client
+    yt-dlp
+
+    # k8s tools
+    cilium-cli
+    cmctl
+    k9s
+    krew
+    kubernetes-helm
+    talosctl
 
     # Go stuff
     go
@@ -56,13 +86,33 @@
     typescript
 
     # Py stuff
-    (unstable.python312.withPackages (p: with p; [
+    (python312.withPackages (
+      p: with p; [
         requests
-    ]))
+        ipython
+      ]
+    ))
     poetry
     ruff
 
-    # Rust
-    rustup
+    # rust stuff
+    rustc
+    cargo
+    rust-analyzer
+
+    # Homemade shit
+    ghettoptt
+    huecli
+    nixprstatus
+
+    # Stuff with overrides
+    # Btop
+    (btop.override { cudaSupport = withCuda; })
+    # PrismLauncher
+    prismlauncher
+
+    # From nix-packages flake
+    path-of-building-beta
+    awakened-poe-trade
   ];
 }

home/packages/zoom.nix

@@ -0,0 +1,16 @@
+{ pkgs, lib, ... }:
+let
+  version = "6.2.6.2503";
+  zoom-override = pkgs.zoom-us.overrideAttrs (old: {
+    inherit version;
+    src = pkgs.fetchurl {
+      url = "https://zoom.us/client/${version}/zoom_x86_64.pkg.tar.xz";
+      hash = "sha256-qhymegXkXSl9fK/5klSi5uRPwFVN88QH/5EVGaBUbfc=";
+    };
+  });
+in
+{
+  home.packages = [
+    (lib.warn "Using overridden zoom version" zoom-override)
+  ];
+}

home/prismo.nix

@@ -0,0 +1,48 @@
+{
+  pkgs,
+  inputs,
+  user,
+  ...
+}:
+{
+  imports = [ inputs.home-manager.nixosModules.home-manager ];
+  home-manager = {
+    useUserPackages = true;
+    useGlobalPkgs = true;
+    extraSpecialArgs = {
+      inherit pkgs inputs user;
+    };
+    users.${user} =
+      { pkgs, ... }:
+      {
+        imports = [
+          inputs.sops-nix.homeManagerModules.sops
+          ./sops
+          ./editor/neovim
+          ./programs/firefox
+          ./programs/tmux
+          ./programs/dunst
+          ./programs/kitty
+          ./programs/rofi
+          ./programs/obs-studio
+          ./programs/vscode
+          ./scripts
+          ./zsh
+          ./packages
+          ./hyprland/hyprland_prismo.nix
+          ./ssh
+          ./services/backup-home.nix
+          ./services/ghettoptt.nix
+        ];
+        firefox.enable = true;
+        tmux.enable = true;
+        hyprland.enable = true;
+        home = {
+          username = "${user}";
+          homeDirectory = "/home/${user}";
+          stateVersion = "23.11";
+        };
+        programs.home-manager.enable = true;
+      };
+  };
+}

home/programs/dunst/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 
 {
   services.dunst = {
@@ -11,7 +16,7 @@
       global = {
         rounded = "yes";
         origin = "top-right";
-        monitor = "3";
+        monitor = "4";
         alignment = "left";
         vertical_alignment = "center";
         width = "400";
@@ -57,7 +62,9 @@
         browser = "/usr/bin/env firefox -new-tab";
       };
 
-      fullscreen_delay_everything = { fullscreen = "delay"; };
+      fullscreen_delay_everything = {
+        fullscreen = "delay";
+      };
 
       urgency_critical = {
         background = "#d64e4e";

home/programs/firefox/default.nix

@@ -1,6 +1,17 @@
-{ pkgs, config, lib, inputs, user, ... }: {
+{
+  pkgs,
+  config,
+  lib,
+  inputs,
+  user,
+  ...
+}:
+{
   options.firefox.enable = lib.mkEnableOption "Firefox";
 
-  config =
-    lib.mkIf config.firefox.enable { programs.firefox = { enable = true; }; };
+  config = lib.mkIf config.firefox.enable {
+    programs.firefox = {
+      enable = true;
+    };
+  };
 }

home/programs/git/default.nix

@@ -0,0 +1,23 @@
+{ pkgs, ... }:
+{
+  programs.git = {
+    enable = true;
+    userName = "Torjus Håkestad";
+    userEmail = "torjus@usit.uio.no";
+
+    lfs.enable = true;
+
+    signing = {
+      key = "~/.ssh/id_ed25519.pub";
+      signByDefault = true;
+    };
+
+    includes = [
+      {
+        contents = {
+          gpg.format = "ssh";
+        };
+      }
+    ];
+  };
+}

home/programs/kitty/default.nix

@@ -1,24 +1,27 @@
-{ config, pkgs, ... }: {
+{ config, pkgs, ... }:
+{
   xdg.configFile."kitty/kitty.conf" = {
     source = config.lib.file.mkOutOfStoreSymlink ./. + "/kitty.conf";
     target = "kitty/kitty.conf";
   };
   xdg.configFile."kitty/themes/macchiato.conf" = {
-    source = pkgs.fetchFromGitHub
-      {
+    source =
+      pkgs.fetchFromGitHub {
         owner = "catppuccin";
         repo = "kitty";
         rev = "d7d61716a83cd135344cbb353af9d197c5d7cec1";
         sha256 = "mRFa+40fuJCUrR1o4zMi7AlgjRtFmii4fNsQyD8hIjM=";
-      } + "/themes/macchiato.conf";
+      }
+      + "/themes/macchiato.conf";
   };
   xdg.configFile."kitty/themes/latte.conf" = {
-    source = pkgs.fetchFromGitHub
-      {
+    source =
+      pkgs.fetchFromGitHub {
         owner = "catppuccin";
         repo = "kitty";
         rev = "d7d61716a83cd135344cbb353af9d197c5d7cec1";
         sha256 = "mRFa+40fuJCUrR1o4zMi7AlgjRtFmii4fNsQyD8hIjM=";
-      } + "/themes/latte.conf";
+      }
+      + "/themes/latte.conf";
   };
 }

home/programs/kitty/kitty.conf

@@ -20,4 +20,8 @@ font_size 14.0
 # Window padding
 window_padding_width 10
 
+# Zoom mapping
+map ctrl+kp_add change_font_size all +2.0
+map ctrl+kp_minus change_font_size all -2.0
+
 include themes/macchiato.conf

home/programs/obs-studio/default.nix

@@ -1,8 +1,46 @@
-{ pkgs, ... }: {
+{
+  pkgs,
+  lib,
+  osConfig,
+  ...
+}:
+let
+  withCuda = osConfig.system.name == "gunter";
+
+  onnxruntime-gpu = (pkgs.onnxruntime.override { cudaSupport = withCuda; }).overrideAttrs (old: {
+    # TODO: Remove when fixed in nixpkgs
+    # https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/libraries/onnxruntime/default.nix#L154
+    buildInputs = old.buildInputs ++ [ pkgs.cudaPackages.nccl ];
+  });
+
+  obs-backgrounremoval-gpu = (
+    (pkgs.obs-studio-plugins.obs-backgroundremoval.override { onnxruntime = onnxruntime-gpu; })
+    .overrideAttrs
+      (old: {
+        version = "1.1.14-beta";
+        src = pkgs.fetchFromGitHub {
+          owner = "occ-ai";
+          repo = "obs-backgroundremoval";
+          rev = "012a7f45fe4cb5363abee654d05c5cba4235feb5";
+          hash = "sha256-ud9RfnbMXfOaIhkUYG7zyR4SxZhj3rZd9b4+8P4jBYs=";
+        };
+        cmakeFlags =
+          if withCuda then
+            (lib.lists.remove "-DDISABLE_ONNXRUNTIME_GPU=ON" old.cmakeFlags)
+          else
+            old.cmakeFlags;
+      })
+  );
+in
+{
   programs.obs-studio = {
     enable = true;
-    plugins = with pkgs.obs-studio-plugins; [
-      obs-backgroundremoval
-    ];
+    plugins =
+      with pkgs.obs-studio-plugins;
+      [
+        obs-pipewire-audio-capture
+        obs-shaderfilter
+      ]
+      ++ lib.optionals withCuda [ obs-backgrounremoval-gpu ];
   };
 }

home/programs/pywal/default.nix

@@ -0,0 +1,29 @@
+{ config, pkgs, ... }:
+{
+  programs.pywal.enable = true;
+
+  xdg.configFile = {
+    "wal/templates/colors-hyprland.conf" = {
+      text = ''
+        $foreground = 0xff{foreground.strip}
+        $background = 0xff{background.strip}
+        $color0 = 0xff{color0.strip}
+        $color1 = 0xff{color1.strip}
+        $color2 = 0xff{color2.strip}
+        $color3 = 0xff{color3.strip}
+        $color4 = 0xff{color4.strip}
+        $color5 = 0xff{color5.strip}
+        $color6 = 0xff{color6.strip}
+        $color7 = 0xff{color7.strip}
+        $color8 = 0xff{color8.strip}
+        $color9 = 0xff{color9.strip}
+        $color10 = 0xff{color10.strip}
+        $color11 = 0xff{color11.strip}
+        $color12 = 0xff{color12.strip}
+        $color13 = 0xff{color13.strip}
+        $color14 = 0xff{color14.strip}
+        $color15 = 0xff{color15.strip}
+      '';
+    };
+  };
+}

home/programs/rofi/default.nix

@@ -1,24 +1,27 @@
-{ config, pkgs, ... }: {
+{ config, pkgs, ... }:
+{
   xdg.configFile."rofi/config.rasi" = {
     source = ./config.rasi;
   };
 
   xdg.configFile."rofi/macchiato.rasi" = {
-    source = pkgs.fetchFromGitHub
-      {
+    source =
+      pkgs.fetchFromGitHub {
         owner = "catppuccin";
         repo = "rofi";
         rev = "5350da41a11814f950c3354f090b90d4674a95ce";
         sha256 = "DNorfyl3C4RBclF2KDgwvQQwixpTwSRu7fIvihPN8JY=";
-      } + "/basic/.local/share/rofi/themes/catppuccin-macchiato.rasi";
+      }
+      + "/basic/.local/share/rofi/themes/catppuccin-macchiato.rasi";
   };
   xdg.configFile."rofi/latte.rasi" = {
-    source = pkgs.fetchFromGitHub
-      {
+    source =
+      pkgs.fetchFromGitHub {
         owner = "catppuccin";
         repo = "rofi";
         rev = "5350da41a11814f950c3354f090b90d4674a95ce";
         sha256 = "DNorfyl3C4RBclF2KDgwvQQwixpTwSRu7fIvihPN8JY=";
-      } + "/basic/.local/share/rofi/themes/catppuccin-latte.rasi";
+      }
+      + "/basic/.local/share/rofi/themes/catppuccin-latte.rasi";
   };
 }

home/programs/tmux/default.nix

@@ -1,7 +1,14 @@
-{ pkgs, lib, config, ... }:
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}:
 with lib;
-let cfg = config.tmux.enable;
-in {
+let
+  cfg = config.tmux.enable;
+in
+{
   options.tmux.enable = mkEnableOption "tmux";
   config = mkIf cfg {
     programs.tmux = {

home/programs/vscode/default.nix

@@ -0,0 +1,20 @@
+{ pkgs, lib, ... }:
+{
+  programs.vscode = {
+    enable = true;
+    enableUpdateCheck = true;
+    enableExtensionUpdateCheck = true;
+    extensions = with pkgs.vscode-extensions; [
+      catppuccin.catppuccin-vsc
+      catppuccin.catppuccin-vsc-icons
+      golang.go
+      vscodevim.vim
+      ms-python.python
+      ms-vscode-remote.remote-ssh
+      bbenoist.nix
+    ];
+    userSettings = {
+      "window.titleBarStyle" = "custom";
+    };
+  };
+}

home/programs/zellij/default.nix

@@ -0,0 +1,8 @@
+{ ... }:
+{
+  programs.zellij = {
+    enable = true;
+    # enableZshIntegration = true;
+    settings = { };
+  };
+}

home/scripts/batlvl.nix

@@ -0,0 +1,11 @@
+{ config, pkgs, ... }:
+let
+  batlvl = pkgs.writeShellApplication {
+    name = "batlvl";
+    runtimeInputs = [ ];
+    text = builtins.readFile ./batlvl.sh;
+  };
+in
+{
+  home.packages = [ batlvl ];
+}

home/scripts/batlvl.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+ac_status=$(cat /sys/class/power_supply/AC/online)
+bat_status=$(cat /sys/class/power_supply/BAT0/status)
+bat_lvl=$(cat /sys/class/power_supply/BAT0/capacity)
+if (("$ac_status" == 0)); then
+    echo "$bat_status - $bat_lvl%"
+else
+    if [ "$bat_lvl" -lt "90" ]; then
+        echo "$bat_status - $bat_lvl%"
+    fi
+fi

home/scripts/default.nix

@@ -1,4 +1,6 @@
-{ pkgs, config, ... }: {
+{ pkgs, config, ... }:
+{
+  imports = [ ./lockhelper.nix ];
   home.file.".local/bin/hl-no-opacity" = {
     source = ./hl-no-opacity.sh;
     executable = true;

home/scripts/lockhelper.nix

@@ -0,0 +1,14 @@
+{ pkgs, ... }:
+let
+  lockhelper = pkgs.writeShellApplication {
+    name = "lockhelper";
+    runtimeInputs = with pkgs; [
+      grim
+      jq
+    ];
+    text = (builtins.readFile ./lockhelper.sh);
+  };
+in
+{
+  home.packages = [ lockhelper ];
+}

home/scripts/lockhelper.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+set -eo pipefail
+
+mkdir -p /tmp/lockscreen || true
+
+monitors=$(hyprctl monitors -j | jq -r '.[] | select( .name | contains ("DP")) | .name')
+
+while IFS= read -r m; do
+    grim -o "$m" "/tmp/lockscreen/$m.png" || true
+done <<< "$monitors"
+
+# Only lock if not already running
+if [ -z "$(pgrep hyprlock)" ] 
+then 
+    exec hyprlock
+else
+    echo "Already locked"
+fi 

home/scripts/randomwp.sh

@@ -10,7 +10,16 @@ if ! [ -d "$WALLPAPER_DIR" ]; then
     exit 1
 fi
 
-wallpaper_path=$(find "$WALLPAPER_DIR" -mindepth 1 | sort -R | tail -n 1)
+if [ "$#" -eq 1 ]; then
+    wallpaper_path="$1"
+    ext=$(file --extension "$wallpaper_path" | cut -d" " -f2)
+    if ! [ "$ext" == "png" ]; then
+        echo "$wallpaper_path is an invalid wallpaper"
+    fi
+else
+    wallpaper_path=$(find "$WALLPAPER_DIR" -mindepth 1 | grep png| grep -v current| sort -R | tail -n 1)
+fi
+
 
 if [ -z "$wallpaper_path" ]; then
     echo "Unable to find wallpaper"
@@ -26,6 +35,13 @@ echo "setting $wallpaper_path as wallpaper"
 hyprctl hyprpaper unload all
 hyprctl hyprpaper preload "$wallpaper_path"
 
+if command -v wal &> /dev/null; then
+    wal -i "$wallpaper_path"
+fi
+
+unlink "$WALLPAPER_DIR/current.png" || true
+ln -s "$wallpaper_path" "$WALLPAPER_DIR/current.png"
+
 for monitor in $(hyprctl monitors | grep 'Monitor' | awk '{ print $2 }'); do
     hyprctl hyprpaper wallpaper "$monitor,$wallpaper_path"
 done

home/services/backup-home.nix

@@ -1,72 +1,108 @@
-{ pkgs, ... }:
+{ pkgs, config, ... }:
 let
   # Backup home script
-  backup-home = pkgs.writeShellScriptBin "backup-home.sh"
-    ''
+  backup-home = pkgs.writeShellApplication {
+    name = "backup-home";
+    runtimeInputs = with pkgs; [
+      coreutils
+      curl
+      jq
+      libnotify
+      restic
+    ];
+    text = ''
+      echo "========== BACKUP HOME STARTING =========="
       export RESTIC_PASSWORD="gunter.home.2rjus.net"
       export RESTIC_REPOSITORY="rest:http://10.69.12.52:8000/gunter.home.2rjus.net"
+      SECRET_PATH="$XDG_CONFIG_HOME/sops-nix/secrets/gotify_backup_home"
+
+      if ! [ -f "$SECRET_PATH" ]; then
+        notify-send -u critical "Backup issue" "Secret file for gotify token does not exist"
+      else
+        GOTIFY_TOKEN=$(<"$SECRET_PATH")
+        if [ -z "$GOTIFY_TOKEN" ]; then
+          notify-send -u critical "Backup issue" "No Gotify token found"
+        fi
+      fi
 
       # Send start notification
-      ${pkgs.libnotify}/bin/notify-send -e -t 3000 "Backup started" "Backup of /home/torjus started"
+      notify-send -e -t 3000 "Backup started" "Backup of /home/torjus started"
       retval=$?
       if [ $retval -ne 0 ]; then
           echo "Failed to send notification"
       fi
 
       # Do the backup
+      echo "========== BACKUP TASK STARTING =========="
       SECONDS=0
-      ${pkgs.restic}/bin/restic backup /home/torjus \
+      restic backup /home/torjus \
           --exclude '/home/torjus/.cache' \
           --exclude '/home/torjus/.local/share/Steam' \
           --exclude '/home/torjus/.local/share/containers' \
+          --exclude '/home/torjus/.var' \
+          --exclude '/home/torjus/.local/share/lutris' \
+          --exclude '/home/torjus/.npm' \
+          --exclude '/home/torjus/.factorio/mods' \
+          --exclude '/home/torjus/.zoom' \
           --exclude '/home/torjus/git/nixpkgs'
       retval=$?
       if [ $retval -ne 0 ]; then
-          ${pkgs.libnotify}/bin/notify-send -u critical "Backup failed" "Backup of /home/torjus failed"
+          notify-send -u critical "Backup failed" "Backup of /home/torjus failed"
           retval=$?
           if [ $retval -ne 0 ]; then
-            # TODO: put token in sops
-            ${pkgs.curl}/bin/curl "https://gotify.t-juice.club/message?token=ABgV8XT62bxyCzF" \
+            curl "https://gotify.t-juice.club/message?token=$GOTIFY_TOKEN" \
               -F "title=Backup of home@gunter failed!" \
               -F "message=Please check status of backup-home service"
           fi
       fi
+      BACKUP_DURATION="$SECONDS"
+      echo "========== BACKUP TASK COMPLETE =========="
 
       # Remove old snapshots and prune
-      ${pkgs.restic}/bin/restic forget -d 7 -w 4 -m 6 --keep-within 1d --prune
-
+      echo "========== PRUNE TASK STARTING =========="
+      restic forget -d 7 -w 4 -m 6 --keep-within 1d --prune
+      echo "========== PRUNE TASK COMPLETE =========="
       # Gather statistics
-      stats=$(${pkgs.restic}/bin/restic stats --json)
-      stats_raw=$(${pkgs.restic}/bin/restic stats --mode=raw-data --json)
+      echo "========== STATS TASK STARTING =========="
+      stats=$(restic stats --json)
+      stats_raw=$(restic stats --mode=raw-data --json)
 
-      raw_size=$(${pkgs.jq}/bin/jq -r '.total_size' <<< $stats_raw \
-          | ${pkgs.coreutils}/bin/numfmt --to=iec --suffix=B --format="%.2f")
-      total_size=$(${pkgs.jq}/bin/jq -r '.total_size' <<< $stats \
-          | ${pkgs.coreutils}/bin/numfmt --to=iec --suffix=B --format="%.2f")
-      total_files=$(${pkgs.jq}/bin/jq -r '.total_file_count' <<< $stats \
-          | ${pkgs.coreutils}/bin/numfmt --to=iec)
-      total_snapshots=$(${pkgs.jq}/bin/jq -r '.snapshots_count' <<< $stats)
+      raw_size=$(jq -r '.total_size' <<< "$stats_raw" \
+          | numfmt --to=iec --suffix=B --format="%.2f")
+      total_size=$(jq -r '.total_size' <<< "$stats" \
+          | numfmt --to=iec --suffix=B --format="%.2f")
+      total_files=$(jq -r '.total_file_count' <<< "$stats" \
+          | numfmt --to=iec)
+      total_snapshots=$(jq -r '.snapshots_count' <<< "$stats")
       message="$total_files files\n$total_snapshots snapshots\n$raw_size ($total_size)"
+      echo "========== STATS TASK COMPLETE =========="
 
       # Send completion notification
-      ${pkgs.libnotify}/bin/notify-send -i checkmark -e -t 10000 \
-          "Backup of /home/torjus completed in ''${SECONDS}s" "$message"
+      notify-send -i checkmark -e -t 10000 \
+          "Backup of /home/torjus completed in ''${BACKUP_DURATION}s (''${SECONDS}s total)" "$message"
       retval=$?
       if [ $retval -ne 0 ]; then
           echo "Failed to send notification"
           exit $retval
       fi
+      echo "========== BACKUP HOME COMPLETE =========="
     '';
+  };
 in
 {
+  sops.secrets."gotify_backup_home" = { };
+
   systemd.user.services.backup-home = {
     Unit = {
       Description = "Backup home directory";
-      After = [ "network.target" ];
+      After = [
+        "network.target"
+        "sops-nix.service"
+      ];
     };
     Service = {
       Type = "oneshot";
-      ExecStart = "${backup-home}/bin/backup-home.sh";
+      ExecStart = "${backup-home}/bin/backup-home";
     };
   };
   systemd.user.timers.backup-home = {
@@ -79,7 +115,10 @@ in
       Persistent = true;
     };
     Install = {
-      WantedBy = [ "timers.target" ];
+      WantedBy = [
+        "timers.target"
+        "graphical-session.target"
+      ];
     };
   };
 }

home/services/ghettoptt.nix

@@ -0,0 +1,15 @@
+{ pkgs, config, ... }:
+{
+  systemd.user.services.ghettoptt = {
+    Unit = {
+      Description = "Run ghettoptt";
+    };
+    Service = {
+      Type = "simple";
+      ExecStart = "${pkgs.ghettoptt}/bin/ghettoptt";
+    };
+    Install = {
+      WantedBy = [ "graphical-session.target" ];
+    };
+  };
+}

home/sops/default.nix

@@ -0,0 +1,7 @@
+{ user, ... }:
+{
+  sops = {
+    age.keyFile = "/home/${user}/.config/sops/age/keys.txt";
+    defaultSopsFile = ../../secrets/torjus/secret.yaml;
+  };
+}

home/ssh/config.nix

@@ -0,0 +1,44 @@
+{
+  pkgs,
+  lib,
+  osConfig,
+  ...
+}:
+let
+  eduroam-active = pkgs.writeShellApplication {
+    name = "eduroam-active";
+    runtimeInputs = with pkgs; [
+      networkmanager
+    ];
+    text = ''
+      nmcli -g GENERAL.STATE c s interface|grep -q -E '\bactiv'
+    '';
+  };
+in
+{
+  programs.ssh = {
+    enable = true;
+    controlMaster = "auto";
+
+    matchBlocks = {
+      "bmo.uio.no-on-eduroam" = (
+        lib.mkIf (osConfig.system.name == "magicman") (
+          lib.hm.dag.entryBefore [ "bmo.uio.no" ] {
+            match = "host bmo.uio.no exec \"nmcli -g GENERAL.STATE c s eduroam|grep -q -E '\\bactiv'\"";
+            hostname = "bmo.uio.no";
+            forwardAgent = false;
+          }
+        )
+      );
+
+      "bmo.uio.no" = {
+        setEnv = {
+          # TERM = "xterm-256color";
+        };
+        hostname = "bmo.uio.no";
+        forwardAgent = false;
+        proxyJump = "torjus@rlogin.uio.no";
+      };
+    };
+  };
+}

home/ssh/default.nix

@@ -1 +1 @@
-{ imports = [ ./gunter.nix ]; }
+{ imports = [ ./config.nix ]; }

home/ssh/gunter.nix

@@ -1,15 +0,0 @@
-{ pkgs, ... }: {
-  programs.ssh = {
-    enable = true;
-    controlMaster = "auto";
-
-    matchBlocks."bmo.uio.no" = {
-      setEnv = {
-        # TERM = "xterm-256color";
-      };
-      hostname = "bmo.uio.no";
-      forwardAgent = false;
-      proxyJump = "torjus@rlogin.uio.no";
-    };
-  };
-}

home/zsh/default.nix

@@ -1,17 +1,54 @@
-{ user, pkgs, ... }: {
+{ user, pkgs, ... }:
+{
   home.packages = with pkgs; [ fd ];
+  programs.direnv = {
+    enable = true;
+    enableZshIntegration = true;
+    package = pkgs.direnv;
+    nix-direnv = {
+      enable = true;
+      package = pkgs.nix-direnv;
+    };
+  };
+  programs.zoxide = {
+    enable = true;
+    enableZshIntegration = true;
+  };
   programs.zsh = {
     enable = true;
     autocd = false;
-    enableAutosuggestions = true;
     enableCompletion = true;
+    autosuggestion.enable = true;
     syntaxHighlighting.enable = true;
     shellAliases = {
       nrebuild = "sudo nixos-rebuild switch --flake /home/${user}/nixos";
+      ndiffbuild = "sudo nixos-rebuild build --flake /home/${user}/nixos && nvd diff /run/current-system /home/${user}/nixos/result";
     };
     initExtra = ''
       bindkey -v
       bindkey '^R' history-incremental-search-backward
+
+      # Prompt stuff
+      autoload -Uz promptinit
+      promptinit
+      prompt pure
+      export PATH="''${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
+
+      # Aliases
+      alias ls=eza
     '';
+    zplug = {
+      enable = true;
+      plugins = [
+        ({
+          name = "plugins/git";
+          tags = [ "from:oh-my-zsh" ];
+        })
+        ({
+          name = "modules/prompt";
+          tags = [ "from:prezto" ];
+        })
+      ];
+    };
   };
 }

hosts/gunter/configuration.nix

@@ -1,40 +1,67 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  inputs,
+  pkgs,
+  ...
+}:
 
 {
-  imports = [ ./hardware-configuration.nix ];
+  imports = [
+    ./hardware-configuration.nix
+    ../../system/monitoring.nix
+  ];
+
+  # Sops stuff
+  sops.defaultSopsFile = ../../secrets/gunter/secrets.yaml;
+  sops.age.keyFile = "/var/lib/sops-nix/key.txt";
+  sops.age.generateKey = true;
+  sops.secrets."gotify_tokens/backup-home" = { };
+
+  # Enable microcode updates
+  hardware.enableRedistributableFirmware = true;
 
   # Bootloader stuff
-  boot.kernelParams = [
+  boot = {
+    # Kernel stuff
+    # kernelPackages = pkgs.linuxPackages_xanmod_latest;
+    kernelPackages = pkgs.linuxPackages_latest;
+    # kernelPackages = lib.warn "Pinned to kernel 6.10 due to nvidia fbdev trouble!" pkgs.linuxPackages_6_10;
+    kernelParams = [
       "quiet"
       "splash"
       "rd.systemd.show_status=false"
     ];
 
-  boot.loader.systemd-boot = {
+    extraModprobeConfig = ''
+      options v4l2loopback exclusive_caps=1 card_label="Virtual Camera"
+    '';
+
+    # Bootloader stuff
+    loader.systemd-boot = {
       enable = true;
       configurationLimit = 10;
     };
-  boot.supportedFilesystems = [ "nfs" ];
-
-  boot.loader.efi = { canTouchEfiVariables = true; };
-
-  boot.extraModprobeConfig = ''
-    options nvidia NVreg_RegistryDwords="PowerMizerEnable=0x1; PerfLevelSrc=0x2222; PowerMizerLevel=0x3; PowerMizerDefault=0x3; PowerMizerDefaultAC=0x3"
-    options v4l2loopback exclusive_caps=1 card_label="Virtual Camera"
-  '';
+    loader.efi = {
+      canTouchEfiVariables = true;
+    };
+    supportedFilesystems = [ "nfs" ];
+  };
 
   # Networking stuff
   networking.hostName = "gunter"; # Define your hostname.
   networking.networkmanager.enable = true;
+  networking.nftables.enable = true;
+  networking.firewall = {
+    enable = true;
+  };
 
   # Set time stuff
   time.timeZone = "Europe/Oslo";
 
-  # Enable opengl
-  hardware.opengl = {
+  # Enable graphics
+  hardware.graphics = {
     enable = true;
-    driSupport = true;
-    driSupport32Bit = true;
     extraPackages = with pkgs; [
       vaapiVdpau
       nvidia-vaapi-driver
@@ -46,10 +73,18 @@
     modesetting.enable = true;
     powerManagement.enable = false;
     powerManagement.finegrained = false;
-    open = false;
-    nvidiaSettings = true;
+    open = true;
+    nvidiaSettings = false;
 
-    package = config.boot.kernelPackages.nvidiaPackages.stable;
+    package = config.boot.kernelPackages.nvidiaPackages.latest;
+    # package = config.boot.kernelPackages.nvidiaPackages.mkDriver {
+    #   version = "560.28.03";
+    #   sha256_64bit = "sha256-martv18vngYBJw1IFUCAaYr+uc65KtlHAMdLMdtQJ+Y=";
+    #   sha256_aarch64 = lib.fakeHash;
+    #   openSha256 = "sha256-asGpqOpU0tIO9QqceA8XRn5L27OiBFuI9RZ1NjSVwaM=";
+    #   settingsSha256 = lib.fakeHash;
+    #   persistencedSha256 = lib.fakeSha256;
+    # };
   };
 
   # Setup hyprland
@@ -69,7 +104,7 @@
   programs.hyprland = {
     enable = true;
     xwayland.enable = true;
-    portalPackage = pkgs.unstable.xdg-desktop-portal-hyprland;
+    portalPackage = pkgs.xdg-desktop-portal-hyprland;
   };
 
   # Setup common XDG env vars
@@ -86,14 +121,30 @@
   xdg.portal = {
     enable = true;
     xdgOpenUsePortal = true;
-    extraPortals = (with pkgs; [
+    extraPortals = (
+      with pkgs;
+      [
         # unstable.xdg-desktop-portal-hyprland
         xdg-desktop-portal-gtk
-    ]);
+      ]
+    );
   };
 
   # Enable flakes
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings = {
+    experimental-features = [
+      "nix-command"
+      "flakes"
+    ];
+    trusted-users = [
+      "root"
+      "torjus"
+    ];
+    substituters = [ "https://cuda-maintainers.cachix.org" ];
+    trusted-public-keys = [
+      "cuda-maintainers.cachix.org-1:0dq3bujKpuEPMCX6U4WylrUDZ9JyUG0VpVZa7CNfq5E="
+    ];
+  };
 
   nixpkgs.config.allowUnfree = true;
   # Install system-wide packages
@@ -105,6 +156,8 @@
     vim
     wget
     v4l-utils
+    nmap
+    (lib.mkIf (config.system.name == "gunter") pciutils)
 
     # X shit
     # xorg.xorgserver

hosts/gunter/default.nix

@@ -1,10 +1,18 @@
-{ inputs, self, pks, ... }: {
+{
+  inputs,
+  self,
+  pks,
+  ...
+}:
+{
   imports = [
     ./configuration.nix
     ./hardware-configuration.nix
     ./steamuser.nix
     ./nfs.nix
+    ./ollama.nix
+    ./streamdeck.nix
     ../../system
-    ../../home
+    ../../home/gunter.nix
   ];
 }

hosts/gunter/hardware-configuration.nix

@@ -1,37 +1,45 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
 
 {
-  imports =
-    [
-      (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
-  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.availableKernelModules = [
+    "nvme"
+    "xhci_pci"
+    "ahci"
+    "usbhid"
+    "usb_storage"
+    "sd_mod"
+  ];
   boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ "kvm-amd" "v4l2loopback" ];
-  boot.extraModulePackages = with config.boot.kernelPackages; [
-    v4l2loopback
+  boot.kernelModules = [
+    "kvm-amd"
+    "v4l2loopback"
   ];
+  boot.extraModulePackages = with config.boot.kernelPackages; [ v4l2loopback ];
 
-  fileSystems."/" =
-    {
+  fileSystems."/" = {
     device = "/dev/disk/by-uuid/a7d4b697-fffa-4bcb-9dd7-cbbd6121a50c";
     fsType = "xfs";
   };
 
   boot.initrd.luks.devices."root".device = "/dev/disk/by-uuid/be82b184-3cc7-483b-9069-f7797f51c853";
 
-  fileSystems."/boot" =
-    {
+  fileSystems."/boot" = {
     device = "/dev/disk/by-uuid/DC0C-AAB3";
     fsType = "vfat";
   };
 
-  swapDevices =
-    [{ device = "/dev/disk/by-uuid/2284e9c6-c168-4d4f-ba6a-d270f1ae245d"; }];
+  swapDevices = [ { device = "/dev/disk/by-uuid/2284e9c6-c168-4d4f-ba6a-d270f1ae245d"; } ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/gunter/nfs.nix

@@ -1,22 +1,25 @@
-{ pkgs, ... }: {
-  environment.systemPackages = with pkgs; [
-    nfs-utils
-  ];
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [ nfs-utils ];
   services.rpcbind.enable = true;
-  systemd.mounts = [{
+  systemd.mounts = [
+    {
       type = "nfs";
       mountConfig = {
         Options = "rw,soft,noatime";
       };
       what = "nas.home.2rjus.net:/mnt/hdd-pool/media";
       where = "/mnt/nas/media";
-  }];
+    }
+  ];
 
-  systemd.automounts = [{
+  systemd.automounts = [
+    {
       wantedBy = [ "multi-user.target" ];
       automountConfig = {
         TimeoutIdleSec = "5min";
       };
       where = "/mnt/nas/media";
-  }];
+    }
+  ];
 }

hosts/gunter/ollama.nix

@@ -0,0 +1,17 @@
+{ pkgs, lib, ... }:
+{
+  services.ollama = {
+    enable = true;
+    acceleration = "cuda";
+  };
+  services.open-webui = {
+    enable = true;
+    environment = {
+      DO_NOT_TRACK = "True";
+      SCARF_NO_ANALYTICS = "True";
+      OLLAMA_API_BASE_URL = "http://127.0.0.1:11434";
+      WEBUI_AUTH = "False";
+    };
+    port = 11444;
+  };
+}

hosts/gunter/steamuser.nix

@@ -1,9 +1,10 @@
-{ pkgs, ... }: {
+{ pkgs, ... }:
+{
   environment.shells = with pkgs; [ zsh ];
 
   services.xserver.desktopManager.xfce.enable = true;
   programs.steam.enable = true;
-
+  programs.gamemode.enable = true;
   services.flatpak.enable = true;
 
   users.users.steam = {

hosts/gunter/streamdeck.nix

@@ -0,0 +1,4 @@
+{ pkgs, ... }:
+{
+  programs.streamcontroller.enable = true;
+}

hosts/magicman/configuration.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 
 {
   imports = [ ./hardware-configuration.nix ];
@@ -8,19 +13,44 @@
     "quiet"
     "splash"
     "rd.systemd.show_status=false"
+    "acpi_backlight=native"
+    "video=efifb:nobgrt"
+    "loglevel=3"
+    "rd.udev.log_level=3"
   ];
-  boot.loader.systemd-boot = { enable = true; };
-  boot.loader.efi = { canTouchEfiVariables = true; };
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+
+  boot.loader.systemd-boot = {
+    enable = true;
+    configurationLimit = 3;
+  };
+  boot.loader.efi = {
+    canTouchEfiVariables = true;
+  };
+
+  boot.initrd.systemd.enable = true;
+  boot.plymouth = {
+    enable = true;
+    themePackages = with pkgs; [ catppuccin-plymouth ];
+    theme = "catppuccin-macchiato";
+    extraConfig = ''
+      UseFirmwareBackground=false
+    '';
+  };
 
   # Networking stuff
   networking.hostName = "magicman"; # Define your hostname.
   networking.networkmanager.enable = true;
+  networking.nftables.enable = true;
+  networking.firewall = {
+    enable = true;
+  };
 
   # Set time stuff
   time.timeZone = "Europe/Oslo";
 
   # Enable opengl
-  hardware.opengl = {
+  hardware.graphics = {
     enable = true;
     extraPackages = with pkgs; [
       intel-media-driver
@@ -29,14 +59,44 @@
     ];
   };
 
+  # Bluetooth stuff
+  services.blueman.enable = true;
+  hardware.bluetooth.enable = true;
+  services.pipewire.wireplumber.extraConfig = {
+    "monitor.bluez.properties" = {
+      "bluez5.enable-sbc-xq" = true;
+      "bluez5.enable-msbc" = true;
+      "bluez5.enable-hw-volume" = true;
+      "bluez5.roles" = [
+        "hsp_hs"
+        "hsp_ag"
+        "hfp_hf"
+        "hfp_ag"
+      ];
+    };
+  };
+
   # Setup hyprland
   services.xserver.enable = true;
+  services.xserver.displayManager = {
+    gdm.wayland = true;
+    lightdm.enable = false;
+  };
   programs.hyprland = {
     enable = true;
     xwayland.enable = true;
     portalPackage = pkgs.xdg-desktop-portal-hyprland;
   };
 
+  # TRIM
+  services.fstrim.enable = true;
+
+  # TLP
+  services.tlp.enable = true;
+
+  # Brillo
+  hardware.brillo.enable = true;
+
   # Setup common XDG env vars
   environment.sessionVariables = rec {
     XDG_CACHE_HOME = "$HOME/.cache";
@@ -51,14 +111,26 @@
   xdg.portal = {
     enable = true;
     xdgOpenUsePortal = true;
-    extraPortals = (with pkgs; [
-      xdg-desktop-portal-hyprland
+    extraPortals = (
+      with pkgs;
+      [
+        # xdg-desktop-portal-hyprland
         xdg-desktop-portal-gtk
-    ]);
+      ]
+    );
   };
 
+  programs.steam.enable = true;
+
   # Enable flakes
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+  nix.settings.trusted-users = [
+    "root"
+    "torjus"
+  ];
 
   nixpkgs.config.allowUnfree = true;
   # Install system-wide packages

hosts/magicman/default.nix

@@ -1,8 +1,14 @@
-{ inputs, self, pks, ... }: {
+{
+  inputs,
+  self,
+  pks,
+  ...
+}:
+{
   imports = [
     ./configuration.nix
     ./hardware-configuration.nix
     ../../system
-    ../../home
+    ../../home/magicman.nix
   ];
 }

hosts/magicman/hardware-configuration.nix

@@ -0,0 +1,51 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
+
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
+
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "thunderbolt"
+    "nvme"
+    "usb_storage"
+    "sd_mod"
+    "sdhci_pci"
+  ];
+  boot.initrd.kernelModules = [ "i915" ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/31b20f4c-24bb-4fd1-9a3e-8ccc19fe3d64";
+    fsType = "xfs";
+  };
+
+  boot.initrd.luks.devices."root".device = "/dev/disk/by-uuid/4bbadd2c-94dd-4d80-94bf-9332d24b57bd";
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/7FF3-B061";
+    fsType = "vfat";
+  };
+
+  swapDevices = [ { device = "/dev/disk/by-uuid/6f2c4906-ad88-4d7e-88ec-61cdda41ce28"; } ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp0s31f6.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp0s20f3.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/prismo/configuration.nix

@@ -1,8 +1,19 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 
 {
   imports = [ ./hardware-configuration.nix ];
 
+  # Sops stuff
+  sops.defaultSopsFile = ../../secrets/prismo/secrets.yaml;
+  sops.age.keyFile = "/var/lib/sops-nix/key.txt";
+  sops.age.generateKey = true;
+  sops.secrets."gotify_tokens/backup-home" = { };
+
   # Bootloader stuff
   boot.kernelParams = [
     "quiet"
@@ -13,17 +24,23 @@
     enable = true;
     configurationLimit = 10;
   };
-  boot.loader.efi = { canTouchEfiVariables = true; };
+  boot.loader.efi = {
+    canTouchEfiVariables = true;
+  };
 
   # Networking stuff
   networking.hostName = "prismo"; # Define your hostname.
   networking.networkmanager.enable = true;
+  networking.nftables.enable = true;
+  networking.firewall = {
+    enable = true;
+  };
 
   # Set time stuff
   time.timeZone = "Europe/Oslo";
 
   # Enable opengl
-  hardware.opengl = {
+  hardware.graphics = {
     enable = true;
     extraPackages = with pkgs; [
       intel-media-driver
@@ -54,14 +71,20 @@
   xdg.portal = {
     enable = true;
     xdgOpenUsePortal = true;
-    extraPortals = (with pkgs; [
+    extraPortals = (
+      with pkgs;
+      [
         xdg-desktop-portal-hyprland
         xdg-desktop-portal-gtk
-    ]);
+      ]
+    );
   };
 
   # Enable flakes
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
 
   nixpkgs.config.allowUnfree = true;
   # Install system-wide packages

hosts/prismo/default.nix

@@ -1,8 +1,14 @@
-{ inputs, self, pks, ... }: {
+{
+  inputs,
+  self,
+  pks,
+  ...
+}:
+{
   imports = [
     ./configuration.nix
     ./hardware-configuration.nix
     ../../system
-    ../../home
+    ../../home/prismo.nix
   ];
 }

hosts/prismo/hardware-configuration.nix

@@ -1,19 +1,29 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
 
 {
   imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
   boot = {
     initrd = {
-      availableKernelModules =
-        [ "xhci_pci" "ahci" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
+      availableKernelModules = [
+        "xhci_pci"
+        "ahci"
+        "usb_storage"
+        "sd_mod"
+        "rtsx_pci_sdmmc"
+      ];
       kernelModules = [ ];
 
-      luks.devices."cryptroot".device =
-        "/dev/disk/by-uuid/f71b0ace-f38f-435f-a07a-007f9cfe4919";
+      luks.devices."cryptroot".device = "/dev/disk/by-uuid/f71b0ace-f38f-435f-a07a-007f9cfe4919";
     };
     kernelModules = [ "kvm-intel" ];
     extraModulePackages = [ ];
@@ -29,8 +39,7 @@
     fsType = "vfat";
   };
 
-  swapDevices =
-    [{ device = "/dev/disk/by-uuid/67da36a8-69df-4541-88cd-cba7cbc40b4c"; }];
+  swapDevices = [ { device = "/dev/disk/by-uuid/67da36a8-69df-4541-88cd-cba7cbc40b4c"; } ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
@@ -41,6 +50,5 @@
   # networking.interfaces.wlp2s0.useDHCP = lib.mkDefault true;
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-  hardware.cpu.intel.updateMicrocode =
-    lib.mkDefault config.hardware.enableRedistributableFirmware;
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
 }

packages/open-pomodoro.nix

@@ -0,0 +1,48 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  installShellFiles,
+}:
+
+buildGoModule rec {
+  pname = "openpomodoro-cli";
+  version = "0.3.0";
+
+  src = fetchFromGitHub {
+    owner = "open-pomodoro";
+    repo = "openpomodoro-cli";
+    rev = "v${version}";
+    hash = "sha256-h/o4yxrZ8ViHhN2JS0ZJMfvcJBPCsyZ9ZQw9OmKnOfY=";
+  };
+
+  vendorHash = "sha256-BR9d/PMQ1ZUYWSDO5ID2bkTN+A+VbaLTlz5t0vbkO60=";
+
+  ldflags = [
+    "-s"
+    "-w"
+  ];
+
+  GOWORK = "off";
+
+  subPackages = [ "cmd/pomodoro" ];
+
+  nativeBuildInputs = [ installShellFiles ];
+
+  # postInstall = ''
+  #   installShellCompletion --cmd talosctl \
+  #     --bash <($out/bin/talosctl completion bash) \
+  #     --fish <($out/bin/talosctl completion fish) \
+  #     --zsh <($out/bin/talosctl completion zsh)
+  # '';
+
+  doCheck = false; # no tests
+
+  meta = with lib; {
+    description = "A command-line Pomodoro tracker which uses the Open Pomodoro Format";
+    mainProgram = "pomodoro";
+    homepage = "https://github.com/open-pomodoro/openpomodoro-cli";
+    license = licenses.mit;
+    # maintainers = with maintainers; [ flokli ];
+  };
+}

scripts/update-pob.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+set -eo pipefail
+# set -x
+
+# TODO: Update pobfrontend as well?
+
+if [ -z "$1" ]; then
+    nurl_output=$(nurl -j https://github.com/PathOfBuildingCommunity/PathOfBuilding 2>/dev/null)
+    rev=$(jq '.args.rev' <<< "$nurl_output")
+else
+    nurl_output=$(nurl -j https://github.com/PathOfBuildingCommunity/PathOfBuilding "$1" 2>/dev/null)
+fi
+
+hash=$(jq '.args.hash' <<< "$nurl_output" | sed 's/\//\\\//g')
+echo "Updating pob to $rev"
+
+# Find lines to replace
+rev_line_numbers=$(grep -Fn "rev =" packages/pob.nix| cut -d":" -f1)
+rev_line_data=$(head -n1 <<< "$rev_line_numbers")
+sed -i "${rev_line_data}s/.*/  rev = $rev;/" packages/pob.nix
+
+hash_line_numbers=$(grep -Fn "hash =" packages/pob.nix| cut -d":" -f1)
+hash_line_data=$(head -n1 <<< "$hash_line_numbers")
+sed -i "${hash_line_data}s/.*/  hash = $hash;/" packages/pob.nix
+
+nixfmt packages/pob.nix

secrets/gunter/secrets.yaml

@@ -0,0 +1,31 @@
+gotify_tokens:
+    backup-home: ENC[AES256_GCM,data:sq5ijJ0/jms=,iv:r+hobBUbO3wOp+Xx22yff2sXc44XrCXVDhbD/IS3Rtg=,tag:ypOiz21arspX3TGYeGtgxg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwNm9vK1k0ODFwVTVDUEIw
+            VXVIdllUZnJEUUVHdGY1VzV4d2grekFRNTJVCjR3MkJwQ1p2TDdDUzJEV3psQ0VR
+            S3ZwNXhPK01MREJaOTJPKzcvYXh5NXMKLS0tIEU2b05pUXlKNHdqVHYzWFJrL0NO
+            eUNJUHNxR1JQVUozc3ZBVVN2TVM2bjAK7BZLtjEEefxf53xPRbw2xeXNke/JK99u
+            xj1FtTTnQhNAQ0jgR2N4jtwJ1L2+1usjSF1Lq16Y5TqZ/wO6368XOw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1whxf34vjdndqzwgm7yyaexdm46gdnv9sf3nal7qqyjr0nyhhndlsrmc0g3
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnTmdSdWZESDI2WE9CU0Uy
+            SzhWNXlpV2QyK3JGQ0FHWVh3TEZqM3Fzbm44CnRNbGlmaVBiZURJSFUvdDVZWnIw
+            RU53Uk9KRGZKeE9mRHQxRTFjdVM2WWMKLS0tIEZjWkxKYnBFb0pYTitvdVZBckht
+            NElxU2dyQ3l2RmpERXZPcHJZVEJuTDAKEDpzlk5kOQ8ZYduWVy+2g8f/r4XEtcL5
+            32tNuXEaM+qS49Ef6g84uuwKyQ2ju1UJUtC4XcoRn6nQ9yUkMVWtMQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-03-06T19:27:51Z"
+    mac: ENC[AES256_GCM,data:IrgIp2evBmZYQGvo29kkIFfNsECVlqU3ZyksxKapK/yY45DWLlxtz5TBn6wpDZ8grygCz8SCJR8Ug4Yik7TTJRCgdSGtNjp3gvt3aUF+K9aJQgSQCsh/Uk0S+ZYK2YxZDmrgRo2I5unSdEtFV3X0Rp/aGmzCptLa2ZMnxrbgsis=,iv:nRXCllfgJ8QkBFC7FC9QLaKFLLFyUQe8NKmgGG+waGI=,tag:vXOw1nNMoJa7PSPvoNsYRQ==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1

secrets/magicman/secrets.yaml

@@ -0,0 +1,30 @@
+test: ENC[AES256_GCM,data:hEW/,iv:23IEALBiMHgXZedT7tHFsxF8UenCLqESJ3DkbUCWMxI=,tag:p7haTXzRt/eCa9ueNrbQcw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2dHNNR0pyZ1hDcmxwdFRV
+            UzlSSm5nN0xkdk41dE1zbmZTa1FYVUl6d1RVCmpueUptV1NFVC9FR3g1djl6M1Za
+            K0ZYd3dhWHRBSkdONmlDaFl2RHk1TUEKLS0tIFFqRFd5K0YxaFRKdFVCOFpvODBu
+            L1V4MDV6WVFzVXhPcHNnNXJLVGx5WlkKBTUY5W4+h3VaKidz+a++hs5J0J3GhfXP
+            0NWAVIjiQQsEhfEyZcCsrdnOL038HCANaS1EWOCfyY+D7GPCzj6DUQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1stlqqspmt5fepyz35udrwr5avf9zuju79f787p26pu2d2j08yqps2q2t2c
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNNDY4cnBIb2h3aUNuNkdk
+            aWdjV3hFK3A5T05vQWtYc0VyY3BTSm12VzFNCkpIekF4Y3pKbEtaY3ZRNUI4eUlM
+            azhvelZjOWM0ZkFrRzlEenNJSG1KS2MKLS0tIE1Oek1oSUVZdm5maE9uSlJqN0lR
+            SGkzUkFuSUpzcWNsWVJRYW1RbTI5TGMKCirJOv9CxOjwiuORC0XTH3SwaMz37jC/
+            wITW1GrMnbt1QM0cF08ybu7IKpMo8CzH1iyPduaVLG7AyniaNTlDFQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-10-07T20:32:06Z"
+    mac: ENC[AES256_GCM,data:RGLh077dYLkltn82+iTzKe00gwlodeL40OHm/66ZHemE8tYqFJ+A971R37sEJA3QLAm8MtN9glaNz9PZvBwwimIW4ZrkZhSREYaM83WQyDoceqbiv5J79elq35OsMwJPelmW5kKdW1d6r+aPTP6QyR1qq8L3x7ncoK690tnbtA8=,iv:mbXVZQ5FasPuN6I8VN26KPcews7fYUxL5VB+q+WI/NI=,tag:pFku2TL4CPfpetG2ebgbxA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0

secrets/prismo/secrets.yaml

@@ -0,0 +1,21 @@
+test: ENC[AES256_GCM,data:MtSN,iv:ag/LDkk0DgE6QPjB/08RhEw3LzQHDOkRH0/4OBn8KUU=,tag:FeiJfjtbd4MCwNmCezH44A==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhaGtaL0tkVFFuTk9ka0Rz
+            bHRpN0UyZFQxTG1ZSTRxSmI4eHJhbVM1ZWs0Cmx5UkdrSFNsRGU1eWRyU0hEcElH
+            WWJLWHdNTVR4RVpGYlcwMlJ4b2J5eHcKLS0tIGkrTWpNdVdERHpvaHZRdGxHN1Mr
+            WDJGWFA1M2kxQ1hHKzRwRTY4WUZwN2MKQIT//FEdXYWfEkI1knDD3uN+KMaIDtmR
+            H64031YMvAh67fVGekRv72S5DWzrft/Zr2libKpsN7T4G9fxGihhEw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-10-02T20:56:45Z"
+    mac: ENC[AES256_GCM,data:WQKHFMPmEvDTHS4eYYVcpsX7j8Xef9SV0VKNAbQh0hnZPMJEll4jtzR8sub2tUEt9/I1PvngXMWz6pPmINwOKRI+L3+gTSdg9QgPiikjE6wDA2qbpv9pd14uH22ABmCjkTeEZ9R+b9KbBl0GtMQof1sdTL9nUDrr9Fyfrr/UXs4=,iv:4DgDhwb2ksh2THtR/H5PiO57vF4yKSZ6FyCjWBqCQQI=,tag:dczk4ZAI8k6dareobGmt/w==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.0

secrets/torjus/secret.yaml

@@ -0,0 +1,25 @@
+gotify_backup_home: ENC[AES256_GCM,data:DV22pltF1db7mP8dK4fb,iv:487nKwVToOX2KSBmz3pp1T0wwi2JTMZzwH2arp8DatA=,tag:uVmONZ1fznTXDxySh+xXvA==,type:str]
+sonarr_api_key: ENC[AES256_GCM,data:mg19hxs+DY6wsLjt4FupjavwmnmMJAP2Us5i1Rt/yyk=,iv:6thnP4JSsi51IdEdKXX60OeT2Xr5qMplwsKlk8XTOg8=,tag:cAkhxe2Fjdudzy/WZ6bNqg==,type:str]
+sonarr_base_url: ENC[AES256_GCM,data:0HiHIX4KcPEE62Ti1fLH230rC1A7xYg=,iv:mkAnl6t2H5xP9RPjTsbSZkfbrgli/7XKnPE5aGuZpTo=,tag:P2osFM60Jk8qkXJgLaGpjg==,type:str]
+radarr_api_key: ENC[AES256_GCM,data:Db1ISKTF+m2H1on55/4vdGticfqBdxfIzKHBxC9LAx4=,iv:NhiG4SmsRYIunW1ljFbxeHvRoi9fOVE+9DJn6kmZ6oI=,tag:DoJzo56CW3kJlySYmB8NYQ==,type:str]
+radarr_base_url: ENC[AES256_GCM,data:3UgOPQMblYhm0ysRB6VVosvZToIM5IA=,iv:o/s0bVBrjrma2Df2LlCCFL5Ks80063/4mABc6vzDrYg=,tag:eHKntLPM9yRRkMfIWSpIdg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDdDRDc0UvaWY4U0loZzQ0
+            bDZCMitGbGVYaGJyUXNrZGpnZHJlWHRkK3drCnJ2TlovSUI0OEVrV2FBbVdlSm1z
+            OE9lYXNMSXpCS0NMSkZDcjhtWENOUTAKLS0tIEZFMnVqcktwWkR5VHBGQXdobXlp
+            Q3gxalhGVjNlS3B3YlFsK0VQMUFITEUKE87+RpOG6ucXHHQ0DMQ9F3yo0n1aXbv7
+            OX5ibHU7RroUQwFmDj87u59VUTvpWRQjsBW4c4WrZRk9KcjwinZZZQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-04-25T19:19:54Z"
+    mac: ENC[AES256_GCM,data:VGBiDi71DHAXLhi7XC0XSTqnSwcJXv1Lj53qriFER7BXXZNPUdbeknlYR+KMdL3hgKGiK+ElWK5foDAy6jpl1H3U7Y9B4d40pVZSzEoN+fCwUgfP+yym1HwKZZoJok2ksXZIL4MZyZSNS+ONjDeFEcyHobIx8pRThxic3CcvptI=,iv:QwnFcYeIWibx5q8C/ur1eE8F9vbyGHg5raInDHBoyVs=,tag:JJWEYAyVhfny4hWrKBAKig==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1

system/default.nix

@@ -1 +1,14 @@
-{ imports = [ ./podman.nix ./fonts.nix ./users.nix ./services.nix ./security.nix ]; }
+{
+  imports = [
+    ./fonts.nix
+    ./fwupd.nix
+    ./git.nix
+    ./greetd.nix
+    ./libvirt.nix
+    ./podman.nix
+    ./security.nix
+    ./services.nix
+    ./users.nix
+    ./label.nix
+  ];
+}

system/fonts.nix

@@ -1,15 +1,23 @@
-{ pkgs, ... }: {
+{ pkgs, ... }:
+{
   environment.systemPackages = with pkgs; [ twemoji-color-font ];
   fonts.packages = with pkgs; [
     fira-code
     fira-code-symbols
-    nerdfonts
+    font-awesome
+    (nerdfonts.override {
+      fonts = [
+        "JetBrainsMono"
+        "FiraCode"
+        "DroidSansMono"
+        "DejaVuSansMono"
+      ];
+    })
     noto-fonts
-    noto-fonts-cjk
+    noto-fonts-cjk-sans
     noto-fonts-emoji
     noto-fonts-monochrome-emoji
     source-sans-pro
     twemoji-color-font
-    font-awesome
   ];
 }

system/fwupd.nix

@@ -0,0 +1,6 @@
+{ pkgs, ... }:
+{
+  services.fwupd = {
+    enable = true;
+  };
+}

system/git.nix

@@ -0,0 +1,7 @@
+{ ... }:
+{
+  programs.git = {
+    enable = true;
+    lfs.enable = true;
+  };
+}

system/greetd.nix

@@ -0,0 +1,12 @@
+{ pkgs, ... }:
+{
+  services.greetd = {
+    enable = true;
+    settings = {
+      default_session = {
+        command = "${pkgs.greetd.tuigreet}/bin/tuigreet --time --cmd \"dbus-run-session Hyprland\"";
+        user = "greeter";
+      };
+    };
+  };
+}

system/label.nix

@@ -0,0 +1,19 @@
+{
+  self,
+  ...
+}:
+let
+  flakeRev = if (self ? shortRev) then self.shortRev else "dirty";
+  flakeMod = if (self ? lastModifiedDate) then self.lastModifiedDate else "";
+  flakeRevCount = if (self ? revCount) then builtins.toString self.revCount else "";
+  tagGit = "rev:" + flakeRev + ":" + flakeRevCount;
+  tagMod = "mod:" + flakeMod;
+  label = flakeRevCount + "-" + flakeRev;
+in
+{
+  system.nixos.tags = [
+    tagGit
+    tagMod
+  ];
+  system.nixos.label = label;
+}

system/libvirt.nix

@@ -0,0 +1,14 @@
+{ pkgs, ... }:
+{
+  virtualisation.libvirtd = {
+    enable = true;
+    qemu = {
+      package = pkgs.qemu_kvm;
+      runAsRoot = true;
+      swtpm.enable = true;
+      ovmf = {
+        enable = true;
+      };
+    };
+  };
+}

system/monitoring.nix

@@ -0,0 +1,37 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    prometheus-node-exporter
+    prometheus-systemd-exporter
+  ];
+
+  systemd.services."node-exporter" = {
+    enable = true;
+    unitConfig = {
+      Description = "Prometheus Node Exporter";
+      After = [ "network.target" ];
+    };
+    serviceConfig = {
+      ExecStart = "${pkgs.prometheus-node-exporter}/bin/node_exporter";
+    };
+    wantedBy = [ "multi-user.target" ];
+  };
+
+  systemd.services."systemd-exporter" = {
+    enable = true;
+    unitConfig = {
+      Description = "Prometheus Systemd Exporter";
+      After = [ "network.target" ];
+    };
+    serviceConfig = {
+      ExecStart = "${pkgs.prometheus-systemd-exporter}/bin/systemd_exporter";
+    };
+    wantedBy = [ "multi-user.target" ];
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    9100
+    9558
+    8989
+  ];
+}

system/podman.nix

@@ -2,9 +2,11 @@
 
 {
   virtualisation = {
+    containers.enable = true;
     podman = {
       enable = true;
       dockerCompat = true;
+      defaultNetwork.settings.dns_enabled = true;
     };
   };
 }

system/security.nix

@@ -1,7 +1,14 @@
-{ pkgs, ... }: {
+{ pkgs, ... }:
+{
   # Enable sudo
   security.sudo = {
     enable = true;
     wheelNeedsPassword = false;
   };
+
+  # Enable polkit
+  security.polkit.enable = true;
+
+  # Enable rtkit
+  security.rtkit.enable = true;
 }

system/services.nix

@@ -1,4 +1,5 @@
-{ pkgs, ... }: {
+{ pkgs, ... }:
+{
   services = {
     dbus.enable = true;
     pipewire = {
@@ -7,5 +8,11 @@
       alsa.support32Bit = true;
       pulse.enable = true;
     };
+
+    locate = {
+      enable = true;
+      package = pkgs.plocate;
+      localuser = null;
+    };
   };
 }

system/users.nix

@@ -8,12 +8,20 @@
   users.users.torjus = {
     isNormalUser = true;
     initialPassword = "password";
+    linger = true;
     home = "/home/torjus";
     description = "Torjus";
     shell = pkgs.zsh;
-    extraGroups = [ "wheel" "networkmanager" ];
-    # Install some user packages
-    packages = with pkgs; [
+    extraGroups = [
+      "wheel"
+      "input"
+      "networkmanager"
+      "video"
+      "gamemode"
+      "libvirtd"
+      "podman"
     ];
+    # Install some user packages
+    packages = with pkgs; [ ];
   };
 }