Lock file maintenance

Reviewed-on: #120

.gitea/workflows/build.yml

@@ -0,0 +1,38 @@
+name: Nix Build
+
+on: 
+  pull_request:
+  push:
+  workflow_run:
+    workflows: []
+    types: [completed]
+  workflow_dispatch:
+
+jobs:
+  build-nixos:
+    runs-on: ubuntu-latest
+    steps: 
+      - uses: actions/checkout@v4
+      
+      - name: "Install Nix ❄️"
+        uses: cachix/install-nix-action@v31
+
+    #  - uses: DeterminateSystems/nix-installer-action@v4
+      - uses: DeterminateSystems/magic-nix-cache-action@v13
+      - uses: DeterminateSystems/flake-checker-action@v12
+
+      - name: "Install Cachix ❄️"
+        uses: cachix/cachix-action@v16
+        with:
+          name: helcel
+          authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
+          
+
+      - name: "Build NixOS CI config ❄️"
+        run: |
+          nix build .#nixosConfigurations.ci.config.system.build.toplevel
+
+      - name: "Build NixOS Sandbox config ❄️"
+        run: |
+          nix build .#nixosConfigurations.sandbox.config.system.build.toplevel
+          

.gitea/workflows/update.yml

@@ -0,0 +1,30 @@
+name: update-flake-lock
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 2 * * 6,7'
+
+
+env:
+  USER: "runner"
+
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Install nix
+        uses: DeterminateSystems/nix-installer-action@v19
+        with:
+          github-token: ${{ secrets.GH_TOKEN_FOR_UPDATES }}
+          extra_nix_config: |
+            experimental-features = nix-command flakes            
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@v27
+        with:
+          token: ${{ secrets.GT_TOKEN_FOR_UPDATES }}
+          pr-title: "[chore] Update flake.lock"
+          pr-labels: |
+            dependencies
+            automated    

.gitignore

@@ -1,3 +1,4 @@
 result
 age-key.txt
 .decrypted~common.yaml
+.decrypted*

.sops.yaml

@@ -4,38 +4,55 @@ keys:
     - &sora 4E241635F8EDD2919D2FB44CA362EA0491E2EEA0
   # Hosts
   - &hosts:
+    - &ci age13qv9dn9806paqgpjwmmkwtdzvv4qpv0ulksq0epnn8ufaxeug5zskyas3z
     - &iriy age1ms8f0ysv6vakxepvt69fejczs6tddexepesdv4rkgtheehj3nu4sc6290s
     - &avalon age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
     - &valinor age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
     - &asgard age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
 
 creation_rules:
-  - path_regex: modules/nixos/system/security/sops/iriy.ya?ml$
+  - path_regex: modules/shared/sops/private/iriy.[a-z]+
     key_groups:
     - age:
       - *iriy
       pgp:
       - *sora
-  - path_regex: modules/nixos/system/security/sops/avalon.ya?ml$
+  - path_regex: modules/shared/sops/private/avalon.[a-z]+
     key_groups:
     - age:
       - *avalon
       pgp:
       - *sora
-  - path_regex: modules/nixos/system/security/sops/valinor.ya?ml$
+  - path_regex: modules/shared/sops/private/valinor.[a-z]+
     key_groups:
     - age:
       - *valinor
       pgp:
       - *sora
-  - path_regex: modules/nixos/system/security/sops/asgard.ya?ml$
+  - path_regex: modules/shared/sops/private/asgard.[a-z]+
     key_groups:
     - age:
       - *asgard
       pgp:
       - *sora
 
-  - path_regex: modules/nixos/system/security/sops/common.yaml$
+  - path_regex: modules/shared/sops/common.[a-z]+
+    key_groups:
+    - age:
+      - *valinor
+      - *iriy
+      - *avalon
+      - *asgard
+      pgp:
+      - *sora
+  
+  - path_regex: modules/shared/sops/mock.[a-z]+
+    key_groups:
+    - age:
+      - *ci
+
+
+  - path_regex: modules/server/sops/server.[a-z]+
     key_groups:
     - age:
       - *valinor

flake.lock

@@ -1,13 +1,35 @@
 {
   "nodes": {
+    "arion": {
+      "inputs": {
+        "flake-parts": "flake-parts",
+        "haskell-flake": "haskell-flake",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1745165725,
+        "narHash": "sha256-OnHV8Us04vRsWM0uL1cQez8DumhRi6yE+4K4VLtH6Ws=",
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "rev": "4f59059633b14364b994503b179a701f5e6cfb90",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "arion",
+        "type": "github"
+      }
+    },
     "base16-schemes": {
       "flake": false,
       "locked": {
-        "lastModified": 1689473676,
+        "lastModified": 1696158499,
-        "narHash": "sha256-L0RhUr9+W5EPWBpLcmkKpUeCEWRs/kLzVMF3Vao2ZU0=",
+        "narHash": "sha256-5yIHgDTPjoX/3oDEfLSQ0eJZdFL1SaCfb9d6M0RmOTM=",
         "owner": "tinted-theming",
         "repo": "base16-schemes",
-        "rev": "d95123ca6377cd849cfdce92c0a24406b0c6a789",
+        "rev": "a9112eaae86d9dd8ee6bb9445b664fba2f94037a",
         "type": "github"
       },
       "original": {
@@ -23,11 +45,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1703990467,
+        "lastModified": 1751313918,
-        "narHash": "sha256-LItEeQVwDfLnavNskwdfRnonbEdq8DYiJlWRtF+bwng=",
+        "narHash": "sha256-HsJM3XLa43WpG+665aGEh8iS8AfEwOIQWk3Mke3e7nk=",
         "owner": "lnl7",
         "repo": "nix-darwin",
-        "rev": "1a41453cba42a3a1af2fff003be455ddbd75386c",
+        "rev": "e04a388232d9a6ba56967ce5b53a8a6f713cdfcf",
         "type": "github"
       },
       "original": {
@@ -37,13 +59,55 @@
         "type": "github"
       }
     },
+    "flake-parts": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "arion",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733312601,
+        "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "nur",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1733312601,
+        "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
     "hardware": {
       "locked": {
-        "lastModified": 1704228290,
+        "lastModified": 1753122741,
-        "narHash": "sha256-M3y1ADeFVdPTV/bJXvO5QHDYFujzpJNblkfIgECTxGc=",
+        "narHash": "sha256-nFxE8lk9JvGelxClCmwuJYftbHqwnc01dRN4DVLUroM=",
         "owner": "nixos",
         "repo": "nixos-hardware",
-        "rev": "5bf829d72ccdc05be3343afd81bd922d5748ef4e",
+        "rev": "cc66fddc6cb04ab479a1bb062f4d4da27c936a22",
         "type": "github"
       },
       "original": {
@@ -52,6 +116,22 @@
         "type": "github"
       }
     },
+    "haskell-flake": {
+      "locked": {
+        "lastModified": 1675296942,
+        "narHash": "sha256-u1X1sblozi5qYEcLp1hxcyo8FfDHnRUVX3dJ/tW19jY=",
+        "owner": "srid",
+        "repo": "haskell-flake",
+        "rev": "c2cafce9d57bfca41794dc3b99c593155006c71e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "srid",
+        "ref": "0.1.0",
+        "repo": "haskell-flake",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -59,79 +139,31 @@
         ]
       },
       "locked": {
-        "lastModified": 1704100519,
+        "lastModified": 1753479839,
-        "narHash": "sha256-SgZC3cxquvwTN07vrYYT9ZkfvuhS5Y1k1F4+AMsuflc=",
+        "narHash": "sha256-E/rPVh7vyPMJUFl2NAew+zibNGfVbANr8BP8nLRbLkQ=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "6e91c5df192395753d8e6d55a0352109cb559790",
+        "rev": "0b9bf983db4d064764084cd6748efb1ab8297d1e",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
+        "ref": "release-25.05",
         "repo": "home-manager",
         "type": "github"
       }
     },
-    "hyprland": {
-      "inputs": {
-        "hyprland-protocols": "hyprland-protocols",
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "systems": "systems",
-        "wlroots": "wlroots",
-        "xdph": "xdph"
-      },
-      "locked": {
-        "lastModified": 1704230318,
-        "narHash": "sha256-aYjwKz4ybEEGqG45xFlnQbb0eN5GUxj9NMRcEYBPT3w=",
-        "owner": "hyprwm",
-        "repo": "Hyprland",
-        "rev": "1512b81126dd115f089fd21244692d92034c78f8",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "Hyprland",
-        "type": "github"
-      }
-    },
-    "hyprland-protocols": {
-      "inputs": {
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1691753796,
-        "narHash": "sha256-zOEwiWoXk3j3+EoF3ySUJmberFewWlagvewDRuWYAso=",
-        "owner": "hyprwm",
-        "repo": "hyprland-protocols",
-        "rev": "0c2ce70625cb30aef199cb388f99e19a61a6ce03",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprland-protocols",
-        "type": "github"
-      }
-    },
     "nix-colors": {
       "inputs": {
         "base16-schemes": "base16-schemes",
         "nixpkgs-lib": "nixpkgs-lib"
       },
       "locked": {
-        "lastModified": 1695388192,
+        "lastModified": 1707825078,
-        "narHash": "sha256-2jelpE7xK+4M7jZNyWL7QYOYegQLYBDQS5bvdo8XRUQ=",
+        "narHash": "sha256-hTfge2J2W+42SZ7VHXkf4kjU+qzFqPeC9k66jAUBMHk=",
         "owner": "misterio77",
         "repo": "nix-colors",
-        "rev": "37227f274b34a3b51649166deb94ce7fec2c6a4c",
+        "rev": "b01f024090d2c4fc3152cd0cf12027a7b8453ba1",
         "type": "github"
       },
       "original": {
@@ -140,13 +172,60 @@
         "type": "github"
       }
     },
-    "nixpkgs": {
+    "nixUnstable": {
       "locked": {
-        "lastModified": 1703961334,
+        "lastModified": 1753432016,
-        "narHash": "sha256-M1mV/Cq+pgjk0rt6VxoyyD+O8cOUiai8t9Q6Yyq4noY=",
+        "narHash": "sha256-cnL5WWn/xkZoyH/03NNUS7QgW5vI7D1i74g48qplCvg=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "b0d36bd0a420ecee3bc916c91886caca87c894e9",
+        "rev": "6027c30c8e9810896b92429f0092f624f7b1aace",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1753345091,
+        "narHash": "sha256-CdX2Rtvp5I8HGu9swBmYuq+ILwRxpXdJwlpg8jvN4tU=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "3ff0e34b1383648053bba8ed03f201d3466f90c9",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-25.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-lib": {
+      "locked": {
+        "lastModified": 1697935651,
+        "narHash": "sha256-qOfWjQ2JQSQL15KLh6D7xQhx0qgZlYZTYlcEiRuAMMw=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "e1e11fdbb01113d85c7f41cada9d2847660e3902",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1753429684,
+        "narHash": "sha256-9h7+4/53cSfQ/uA3pSvCaBepmZaz/dLlLVJnbQ+SJjk=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "7fd36ee82c0275fb545775cc5e4d30542899511d",
         "type": "github"
       },
       "original": {
@@ -156,28 +235,17 @@
         "type": "github"
       }
     },
-    "nixpkgs-lib": {
-      "locked": {
-        "lastModified": 1694911725,
-        "narHash": "sha256-8YqI+YU1DGclEjHsnrrGfqsQg3Wyga1DfTbJrN3Ud0c=",
-        "owner": "nix-community",
-        "repo": "nixpkgs.lib",
-        "rev": "819180647f428a3826bfc917a54449da1e532ce0",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "nixpkgs.lib",
-        "type": "github"
-      }
-    },
     "nur": {
+      "inputs": {
+        "flake-parts": "flake-parts_2",
+        "nixpkgs": "nixpkgs_2"
+      },
       "locked": {
-        "lastModified": 1704240709,
+        "lastModified": 1753562419,
-        "narHash": "sha256-M+vVCRJe+6QUUMRzVQJEjwL+yMfbnBbsPHByYutCIiM=",
+        "narHash": "sha256-hSutp1wLoj2DBGdhkFUCy8gJHu7YJ8Nt/OgsYrQ/O50=",
         "owner": "nix-community",
         "repo": "nur",
-        "rev": "54dbeb7fa6a0bd93c2d718f208475a917bef8583",
+        "rev": "294f62a0da32efbda589682cc1f038e773530959",
         "type": "github"
       },
       "original": {
@@ -188,11 +256,12 @@
     },
     "root": {
       "inputs": {
+        "arion": "arion",
         "darwin": "darwin",
         "hardware": "hardware",
         "home-manager": "home-manager",
-        "hyprland": "hyprland",
         "nix-colors": "nix-colors",
+        "nixUnstable": "nixUnstable",
         "nixpkgs": "nixpkgs",
         "nur": "nur",
         "sops-nix": "sops-nix"
@@ -202,17 +271,14 @@
       "inputs": {
         "nixpkgs": [
           "nixpkgs"
-        ],
-        "nixpkgs-stable": [
-          "nixpkgs"
         ]
       },
       "locked": {
-        "lastModified": 1703991717,
+        "lastModified": 1752544651,
-        "narHash": "sha256-XfBg2dmDJXPQEB8EdNBnzybvnhswaiAkUeeDj7fa/hQ=",
+        "narHash": "sha256-GllP7cmQu7zLZTs9z0J2gIL42IZHa9CBEXwBY9szT0U=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "cfdbaf68d00bc2f9e071f17ae77be4b27ff72fa6",
+        "rev": "2c8def626f54708a9c38a5861866660395bb3461",
         "type": "github"
       },
       "original": {
@@ -220,69 +286,6 @@
         "repo": "sops-nix",
         "type": "github"
       }
-    },
-    "systems": {
-      "locked": {
-        "lastModified": 1689347949,
-        "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
-        "owner": "nix-systems",
-        "repo": "default-linux",
-        "rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default-linux",
-        "type": "github"
-      }
-    },
-    "wlroots": {
-      "flake": false,
-      "locked": {
-        "host": "gitlab.freedesktop.org",
-        "lastModified": 1703963193,
-        "narHash": "sha256-ke8drv6PTrdQDruWbajrRJffP9A9PU6FRyjJGNZRTs4=",
-        "owner": "wlroots",
-        "repo": "wlroots",
-        "rev": "f81c3d93cd6f61b20ae784297679283438def8df",
-        "type": "gitlab"
-      },
-      "original": {
-        "host": "gitlab.freedesktop.org",
-        "owner": "wlroots",
-        "repo": "wlroots",
-        "rev": "f81c3d93cd6f61b20ae784297679283438def8df",
-        "type": "gitlab"
-      }
-    },
-    "xdph": {
-      "inputs": {
-        "hyprland-protocols": [
-          "hyprland",
-          "hyprland-protocols"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1703514399,
-        "narHash": "sha256-VRr5Xc4S/VPr/gU3fiOD3vSIL2+GJ+LUrmFTWTwnTz4=",
-        "owner": "hyprwm",
-        "repo": "xdg-desktop-portal-hyprland",
-        "rev": "0a318a7a217a6402b0b705837cd5b50b0e94b31b",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "xdg-desktop-portal-hyprland",
-        "type": "github"
-      }
     }
   },
   "root": "root",

flake.nix

@@ -1,13 +1,14 @@
 {
   description = "SoraFlake";
-
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    # Trick renovate into working: "github:NixOS/nixpkgs/nixpkgs-unstable"
+    nixUnstable.url = "github:nixos/nixpkgs/nixpkgs-unstable";
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-25.05";
     hardware.url = "github:nixos/nixos-hardware";
     nur.url = "github:nix-community/nur";
 
     home-manager = {
-      url = "github:nix-community/home-manager";
+      url = "github:nix-community/home-manager/release-25.05";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
@@ -16,66 +17,38 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
-    hyprland = {
+    # hyprland = {
-      url = "github:hyprwm/Hyprland";
+    #   url = "github:hyprwm/Hyprland";
-      inputs.nixpkgs.follows = "nixpkgs";
+    #   inputs.nixpkgs.follows = "nixpkgs";
-    };
+    # };
     sops-nix = {
       url = "github:Mic92/sops-nix";
       inputs.nixpkgs.follows = "nixpkgs";
-      inputs.nixpkgs-stable.follows = "nixpkgs";
     };
     nix-colors.url = "github:misterio77/nix-colors";
 
+    arion.url = "github:hercules-ci/arion";
+    arion.inputs.nixpkgs.follows = "nixpkgs";
+
   };
 
   outputs = inputs:
-
     let gen = import ./generator.nix { inherit inputs; };
     in {
       devShells = import ./shells { inherit inputs; };
 
       nixosConfigurations = {
-        valinor = gen.generate {
+        valinor = gen.generate { host = "valinor"; };
-          type = "nixos";
+        iriy = gen.generate { host = "iriy"; };
-          system = "x86_64-linux";
+        efir = gen.generate { host = "efir"; };
-          host = "valinor";
+        avalon = gen.generate { host = "avalon"; };
-        };
+        ci = gen.generate { host = "ci"; };
-        iriy = gen.generate {
+        sandbox = gen.generate { host = "sandbox"; };
-          type = "nixos";
-          system = "x86_64-linux";
-          host = "iriy";
-        };
-        efir = gen.generate {
-          type = "nixos";
-          system = "x86_64-linux";
-          host = "efir";
-        };
-        avalon = gen.generate {
-          type = "nixos";
-          system = "x86_64-linux";
-          host = "avalon";
-        };
-
-      };
-      darwinConfigurations = {
-        asgard = gen.generate {
-          type = "macos";
-          system = "x86_64-darwin";
-          host = "asgard";
-        };
       };
+      darwinConfigurations = { asgard = gen.generate { host = "asgard"; }; };
       homeConfigurations = {
-        yomi = gen.generate {
+        yomi = gen.generate { host = "example"; };
-          type = "home";
+        example = gen.generate { host = "example"; };
-          system = "arm-64";
-          host = "example";
-        };
-        example = gen.generate {
-          type = "home";
-          system = "-"; # supports any
-          host = "example";
-        };
       };
     };
 

generator.nix

@@ -1,51 +1,68 @@
 { inputs, ... }: {
-  generate = { type, system, host }:
+  generate = { host }:
-    ({
+    let
+      syscfg = import ./systems/${host}/cfg.nix;
+      nameValuePair = name: value: { inherit name value; };
+    in ({
       "nixos" = inputs.nixpkgs.lib.nixosSystem {
-        system = system;
+        system = syscfg.syscfg.system;
+        specialArgs = { inherit inputs; };
         modules = [
-          inputs.sops-nix.nixosModules.sops
+          ./modules/shared/syscfg
+          ./modules/shared/sops
           ./modules/nixos
+          syscfg
           ./systems/${host}
+          inputs.arion.nixosModules.arion
+          inputs.sops-nix.nixosModules.sops
           inputs.home-manager.nixosModules.home-manager
           {
             home-manager.useGlobalPkgs = true;
             home-manager.useUserPackages = true;
             home-manager.extraSpecialArgs = { inherit inputs; };
-            home-manager.users.sora = {
+            home-manager.users = builtins.listToAttrs (map (userConfig:
-              imports = [
+              nameValuePair userConfig.username {
-                ./modules/home
+                imports = [
-                inputs.nix-colors.homeManagerModule
+                  ./modules/shared/syscfg
-                inputs.hyprland.homeManagerModules.default
+                  ./modules/shared/colors
-                ./systems/${host}/home.nix
+                  ./modules/home
-              ];
+                  syscfg
-            };
+                  { usercfg = userConfig; }
+                  inputs.nix-colors.homeManagerModule
+                  # inputs.hyprland.homeManagerModules.default
+                  inputs.sops-nix.homeManagerModules.sops
+                ];
+              }) syscfg.syscfg.users);
           }
         ];
       };
+
       "macos" = inputs.darwin.lib.darwinSystem {
-        system = system;
+        system = syscfg.system;
         modules = [
-          inputs.sops-nix.nixosModules.sops
+          ./modules/shared/syscfg
+          ./modules/shared/sops
+          syscfg
           ./systems/${host}
+          inputs.sops-nix.nixosModules.sops
           inputs.home-manager.darwinModules.home-manager
           {
             home-manager.useGlobalPkgs = true;
             home-manager.useUserPackages = true;
             home-manager.extraSpecialArgs = { inherit inputs; };
-            home-manager.users.sora = {
+            home-manager.users = builtins.listToAttrs (map (userConfig:
-              imports = [
+              nameValuePair userConfig.username {
-                inputs.nix-colors.homeManagerModule
+                imports = [
-                inputs.hyprland.homeManagerModules.default
+                  inputs.nix-colors.homeManagerModule
-                ./systems/${host}/home.nix
+                  inputs.sops-nix.homeManagerModules.sops
-              ];
+                ];
-            };
+              }) syscfg.syscfg.users);
           }
         ];
       };
       "home" = inputs.home-manager.lib.homeManagerConfiguration {
-        modules = [ ./modules/home ./systems/${host}/home.nix ];
+        modules = [ ./modules/home ];
       };
       _ = throw "Unsupported system";
-    }.${type});
+    }.${syscfg.syscfg.type});
 }

modules/home/base/default.nix

@@ -1,12 +1,21 @@
 { lib, config, ... }: {
 
+  #environment.sessionVariables.SOPS_AGE_KEY_FILE = keyFilePath;
   systemd.user.startServices = "sd-switch";
   programs.home-manager.enable = true;
 
   home = {
-    username = "${config.homecfg.username}";
+    username = "${config.usercfg.username}";
-    homeDirectory = "/home/${config.homecfg.username}";
+    homeDirectory = "/home/${config.usercfg.username}";
 
-    stateVersion = "23.11";
+    stateVersion = "24.11";
   };
+
+
+  #SOPS
+  # sops.defaultSopsFile = ./sops/${config.usercfg.username}.yaml;
+  # sops.age.keyFile = "/var/lib/sops-nix/age-key.txt";
+  # sops.age.generateKey = true;
+  # sops.secrets."github_user_key" = { };
+  # sops.secrets."curse_forge_key" = { };
 }

modules/home/base/sops/sora.yaml

@@ -0,0 +1,69 @@
+curse_forge_key: ENC[AES256_GCM,data:PhhwPhUys/WDzXb40iFlrUcwFEJVzi49vDlm5Hpc7IUwbBiQI1Zvi6115THMvarnGESDyouPfoZP0wha,iv:x//EzR4QwdD0UxqV97yUepc39DopoqiDT21unpF9R2E=,tag:5jM1EibWo0wI+PS70+kb/Q==,type:str]
+github_user_key: ENC[AES256_GCM,data:RvBsQjWGd2qRCvBzcpMv8FIXGY/GiPd9o0x2Oq+NlbXxR2NMqNBNLw==,iv:99AcmOWFft7XQAn7YrGjZuCvz0M5wUkYeInsWwyeUFM=,tag:wkw2YQGi9j/8XtOFd8KhdQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraWFDRFUxQ2l5OWV1OXNK
+            UExEbWZkM0kzVk1rZG4yY3pBLzdMVWVJS0UwCnhlWFJ5T2lZUXJyNkg1ejQxaU1t
+            L3F2RUhldTY3N2xXL0hwczNKRzNjcncKLS0tIEkycHoxcDBGNyt2V3RDY29wNGVp
+            TGg5Rk05VkRsaXM1Q0NxMmtMajRORDAKqjFldiAYJKjmnkeDkwanjYvhL6645DZ5
+            dVXExjqO/DG733ge8HFyKzpfpkzRymV1giUwxBdII1dd0mJ2ncINeA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ms8f0ysv6vakxepvt69fejczs6tddexepesdv4rkgtheehj3nu4sc6290s
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3UkRjblIvYStZUzQyRHA1
+            ZGVXeHhrN0kyVkxZdms5U3gwVFlPMW12MVJjCjRkVURpZXBzb0tYenB4dGxKamh6
+            VXVBMmo1Ujkvd2VTRExyWE5MbVJaclUKLS0tIDVhRkYzZmEzUG00Q2IwOWZUMVVt
+            ODVIbytpcjN1cVMyaG1qVVdkRmtaMzQKNsvD9DpK/raDBob+IcuNk72tQDts36kJ
+            QhtoLy8MvUymi49PdEWrgyf68w5XwRO/U4iINhR0qzm0glg/XcyHjA==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJc3hKWkk3ckNOY2UyTVhG
+            MmtLaEd0K04yaGxiOUoxMXkzOEFnYis4VkhnCktDRFM2bS8vb05OWDdwa0RwRlNO
+            cmlZemtxVGZ6S0tNTDV1cmE1N0pVWnMKLS0tIE9EZllycHJpcEY2R1pwOFhOZEU3
+            L01IcytDd3BPb0VOTW9DQ2lUdUVJS0kKiD+C+3mK1b/eIwCEFanFgYGLNk3JNPQ7
+            i1UqzbHVxSd0q/YVwdKAcj0jA6EezGm275tgq7IVsy2sHkvRMaEDtQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAweVU3TkxFZzRnd2I2clN2
+            ZTlTWmhwQkhVc1hnOXFvZVVDSWpHMVh1TGtrCkc3M1pUTnZCMHpvYXB5ZVhreGxa
+            ZVY2cG5Ja2ltL3k2Q1VEalc5TTNFMXcKLS0tIGd5UWl0RGVXT211Zm51dlB6WFZ1
+            STRtTVpVTCtVZ1FUNENqWFFVNTNuaVUKN6HRiZjTdENeif8dJ29urBxPXDaosjjY
+            InN4Ko6YUaGfvB1DTrKIzrxOpsHS+XjisoGfT71tJwwEOoREklEO/A==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-12-23T18:05:22Z"
+    mac: ENC[AES256_GCM,data:YSi2xIwz50VxUDL3QzGVUwRWUgZhvudSLCKgwIbWm8gkuAJ/V2sVRhJNVQJ1YvLO44ob5hmrgR4wSnOdAbS7FrpbLcJuoYBjVUTDjy+j6otnIDxEcYeciHhZ1pV/OiydBmJC+lZ4+SRdWdokL2HaXRKgc9QT9e/MdAbFIzI1x90=,iv:8rj8yEqHTMgoGu31RVskYizmROB/5I0ajZJ/EcmlVfE=,tag:PILFCyXY8sXYGxCEHS7qCg==,type:str]
+    pgp:
+        - created_at: "2023-04-20T10:20:17Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            wcFMA6R3Y9nD7qMBAQ/8CVWQaYKfOzvPIllZyyWpUjHRLLXaR8MNJ8U5WI/tdwdN
+            9UScDYJFuYRW7Q9s4Mt961kBGpaHqe9MUZBxUDlYX59+EN3FbO/eMQ5OqI05ESmL
+            TvZB4+S9C5o73nuypSDNvYz+Lgq6DO25ZPhXdtPhx2DE4G31/wft/LpxhjalIjI8
+            MU0Dv22R4qC+glJbe4GIF2IJ8XoxnnzjiGeSqiyv0QIBM0SzOtA5sKwNohWBnW7g
+            7vxOTm5+kyzG0dDjt3tFApgPDaA1wjofzhRuuveF52VBsuIA2opFdpqkyICvK6rn
+            NB5kUaPlY6A0m+n0oHSfY5wm/AnHNE4Oob/ifumAaB0EAJVUTRauI5M8SeJF0ya1
+            U0IQ9N2lb7Y6q4pqHywIa6fnylsqCfxInAYKMuslRq8f9t/qakb4/MYcnPrwpzjw
+            73/naiNoJmG6NVTkM52qTtOqZAmsaQd5cigTuPW2Z2CJq1yLZEVGSSd1DUGUjBDK
+            nQGucpVVVpD+ifrIPz+Iqwy+5NoZZm/Oa9pKJGFzqXinnDNZaqtgpmTw9QxcSeaP
+            VvGZG9CDd89MtAm1VQyuqi1bQ2faq3G0xNrLl7xUsfmjx4ofW+JXR87OzvGfLPhu
+            Sjl3kS9j5/MEBRBg3n9gNkgSu5Sy3ilhckY3yjTgAT9Gw2giDhCiUXi1/7KrGprS
+            UQHPCSsjyWsyuYVa3lAP/WPdVclc4WOdfYcetUCXBVP7LQr0bq+IG+2J0nnY3mDt
+            Va5k4sP1qu6Ecrs2JioQ1V2H+VmcrRykBWnMXl1tDSWKMA==
+            =pS8X
+            -----END PGP MESSAGE-----
+          fp: 4E241635F8EDD2919D2FB44CA362EA0491E2EEA0
+    unencrypted_suffix: _unencrypted
+    version: 3.9.2

modules/home/cli/btop/default.nix

@@ -6,86 +6,86 @@
     # Theme generated from: ${config.colorScheme.slug}
 
     # Main background, empty for terminal default, need to be empty if you want transparent background
-    theme[main_bg]="#${config.colorScheme.colors.base00}"
+    theme[main_bg]="#${config.colorScheme.palette.base00}"
 
     # Main text color
-    theme[main_fg]="#${config.colorScheme.colors.base07}"
+    theme[main_fg]="#${config.colorScheme.palette.base07}"
 
     # Title color for boxes
-    theme[title]="#${config.colorScheme.colors.base07}"
+    theme[title]="#${config.colorScheme.palette.base07}"
 
     # Higlight color for keyboard shortcuts
-    theme[hi_fg]="#${config.colorScheme.colors.base0E}"
+    theme[hi_fg]="#${config.colorScheme.palette.base0E}"
 
     # Background color of selected item in processes box
-    theme[selected_bg]="#${config.colorScheme.colors.base0C}"
+    theme[selected_bg]="#${config.colorScheme.palette.base0C}"
 
     # Foreground color of selected item in processes box
-    theme[selected_fg]="#${config.colorScheme.colors.base00}"
+    theme[selected_fg]="#${config.colorScheme.palette.base00}"
 
     # Color of inactive/disabled text
-    theme[inactive_fg]="#${config.colorScheme.colors.base02}"
+    theme[inactive_fg]="#${config.colorScheme.palette.base02}"
 
     # Color of text appearing on top of graphs, i.e uptime and current network graph scaling
-    theme[graph_text]="#${config.colorScheme.colors.base05}"
+    theme[graph_text]="#${config.colorScheme.palette.base05}"
 
     # Misc colors for processes box including mini cpu graphs, details memory graph and details status text
-    theme[proc_misc]="#${config.colorScheme.colors.base0C}"
+    theme[proc_misc]="#${config.colorScheme.palette.base0C}"
 
     # Cpu box outline color
-    theme[cpu_box]="#${config.colorScheme.colors.base02}"
+    theme[cpu_box]="#${config.colorScheme.palette.base02}"
 
     # Memory/disks box outline color
-    theme[mem_box]="#${config.colorScheme.colors.base02}"
+    theme[mem_box]="#${config.colorScheme.palette.base02}"
 
     # Net up/down box outline color
-    theme[net_box]="#${config.colorScheme.colors.base02}"
+    theme[net_box]="#${config.colorScheme.palette.base02}"
 
     # Processes box outline color
-    theme[proc_box]="#${config.colorScheme.colors.base02}"
+    theme[proc_box]="#${config.colorScheme.palette.base02}"
 
     # Box divider line and small boxes line color
-    theme[div_line]="#${config.colorScheme.colors.base02}"
+    theme[div_line]="#${config.colorScheme.palette.base02}"
 
     # Temperature graph colors
-    theme[temp_start]="#${config.colorScheme.colors.base0D}"
+    theme[temp_start]="#${config.colorScheme.palette.base0D}"
     theme[temp_mid]=""
-    theme[temp_end]="#${config.colorScheme.colors.base0F}"
+    theme[temp_end]="#${config.colorScheme.palette.base0F}"
 
     # CPU graph colors
-    theme[cpu_start]="#${config.colorScheme.colors.base0C}"
+    theme[cpu_start]="#${config.colorScheme.palette.base0C}"
     theme[cpu_mid]=""
-    theme[cpu_end]="#${config.colorScheme.colors.base0C}"
+    theme[cpu_end]="#${config.colorScheme.palette.base0C}"
 
     # Mem/Disk free meter
-    theme[free_start]="#${config.colorScheme.colors.base0A}"
+    theme[free_start]="#${config.colorScheme.palette.base0A}"
     theme[free_mid]=""
-    theme[free_end]="#${config.colorScheme.colors.base0A}"
+    theme[free_end]="#${config.colorScheme.palette.base0A}"
 
     # Mem/Disk cached meter
-    theme[cached_start]="#${config.colorScheme.colors.base09}"
+    theme[cached_start]="#${config.colorScheme.palette.base09}"
     theme[cached_mid]=""
-    theme[cached_end]="#${config.colorScheme.colors.base09}"
+    theme[cached_end]="#${config.colorScheme.palette.base09}"
 
     # Mem/Disk available meter
-    theme[available_start]="#${config.colorScheme.colors.base0B}"
+    theme[available_start]="#${config.colorScheme.palette.base0B}"
     theme[available_mid]=""
-    theme[available_end]="#${config.colorScheme.colors.base0B}"
+    theme[available_end]="#${config.colorScheme.palette.base0B}"
 
     # Mem/Disk used meter
-    theme[used_start]="#${config.colorScheme.colors.base08}"
+    theme[used_start]="#${config.colorScheme.palette.base08}"
     theme[used_mid]=""
-    theme[used_end]="#${config.colorScheme.colors.base08}"
+    theme[used_end]="#${config.colorScheme.palette.base08}"
 
     # Download graph colors
-    theme[download_start]="#${config.colorScheme.colors.base02}"
+    theme[download_start]="#${config.colorScheme.palette.base02}"
     theme[download_mid]=""
-    theme[download_end]="#${config.colorScheme.colors.base0D}"
+    theme[download_end]="#${config.colorScheme.palette.base0D}"
 
     # Upload graph colors
-    theme[upload_start]="#${config.colorScheme.colors.base02}"
+    theme[upload_start]="#${config.colorScheme.palette.base02}"
     theme[upload_mid]=""
-    theme[upload_end]="#${config.colorScheme.colors.base0E}"
+    theme[upload_end]="#${config.colorScheme.palette.base0E}"
      
   '';
 }

modules/home/cli/git/default.nix

@@ -2,10 +2,10 @@
 
   programs.git = {
     enable = true;
-    userEmail = "${config.homecfg.git.email}";
+    userEmail = "${config.usercfg.git.email}";
-    userName = "${config.homecfg.git.username}";
+    userName = "${config.usercfg.git.username}";
     signing = {
-      key = "${config.homecfg.git.key}";
+      key = "${config.usercfg.git.key}";
       signByDefault = true;
     };
     ignores = [ "*result*" ".direnv" "node_modules" ];

modules/home/cli/kitty/default.nix

@@ -2,53 +2,53 @@
   programs.kitty = {
     enable = true;
     settings = {
-      foreground = "#${config.colorScheme.colors.base07}";
+      foreground = "#${config.colorScheme.palette.base07}";
-      background = "#${config.colorScheme.colors.base00}";
+      background = "#${config.colorScheme.palette.base00}";
-      selection_foreground = "#${config.colorScheme.colors.base07}";
+      selection_foreground = "#${config.colorScheme.palette.base07}";
-      selection_background = "#${config.colorScheme.colors.base03}";
+      selection_background = "#${config.colorScheme.palette.base03}";
       background_opacity = "0.9";
 
-      cursor = "#${config.colorScheme.colors.base05}";
+      cursor = "#${config.colorScheme.palette.base05}";
-      cursor_text_color = "#${config.colorScheme.colors.base01}";
+      cursor_text_color = "#${config.colorScheme.palette.base01}";
 
-      url_color = "#${config.colorScheme.colors.base05}";
+      url_color = "#${config.colorScheme.palette.base05}";
 
-      active_border_color = "#${config.colorScheme.colors.base05}";
+      active_border_color = "#${config.colorScheme.palette.base05}";
-      inactive_border_color = "#${config.colorScheme.colors.base03}";
+      inactive_border_color = "#${config.colorScheme.palette.base03}";
-      bell_border_color = "#${config.colorScheme.colors.base09}";
+      bell_border_color = "#${config.colorScheme.palette.base09}";
 
       wayland_titlebar_color = "system";
       macos_titlebar_color = "system";
 
-      active_tab_foreground = "#${config.colorScheme.colors.base0C}";
+      active_tab_foreground = "#${config.colorScheme.palette.base0C}";
-      active_tab_background = "#${config.colorScheme.colors.base01}";
+      active_tab_background = "#${config.colorScheme.palette.base01}";
-      inactive_tab_foreground = "#${config.colorScheme.colors.base06}";
+      inactive_tab_foreground = "#${config.colorScheme.palette.base06}";
-      inactive_tab_background = "#${config.colorScheme.colors.base00}";
+      inactive_tab_background = "#${config.colorScheme.palette.base00}";
-      tab_bar_background = "#${config.colorScheme.colors.base02}";
+      tab_bar_background = "#${config.colorScheme.palette.base02}";
 
-      mark1_foreground = "#${config.colorScheme.colors.base00}";
+      mark1_foreground = "#${config.colorScheme.palette.base00}";
-      mark1_background = "#${config.colorScheme.colors.base0C}";
+      mark1_background = "#${config.colorScheme.palette.base0C}";
-      mark2_foreground = "#${config.colorScheme.colors.base00}";
+      mark2_foreground = "#${config.colorScheme.palette.base00}";
-      mark2_background = "#${config.colorScheme.colors.base0E}";
+      mark2_background = "#${config.colorScheme.palette.base0E}";
-      mark3_foreground = "#${config.colorScheme.colors.base00}";
+      mark3_foreground = "#${config.colorScheme.palette.base00}";
-      mark3_background = "#${config.colorScheme.colors.base0A}";
+      mark3_background = "#${config.colorScheme.palette.base0A}";
 
-      color0 = "#${config.colorScheme.colors.base01}";
+      color0 = "#${config.colorScheme.palette.base01}";
-      color1 = "#${config.colorScheme.colors.base0F}";
+      color1 = "#${config.colorScheme.palette.base0F}";
-      color2 = "#${config.colorScheme.colors.base0A}";
+      color2 = "#${config.colorScheme.palette.base0A}";
-      color3 = "#${config.colorScheme.colors.base09}";
+      color3 = "#${config.colorScheme.palette.base09}";
-      color4 = "#${config.colorScheme.colors.base0C}";
+      color4 = "#${config.colorScheme.palette.base0C}";
-      color5 = "#${config.colorScheme.colors.base0D}";
+      color5 = "#${config.colorScheme.palette.base0D}";
-      color6 = "#${config.colorScheme.colors.base0B}";
+      color6 = "#${config.colorScheme.palette.base0B}";
-      color7 = "#${config.colorScheme.colors.base07}";
+      color7 = "#${config.colorScheme.palette.base07}";
-      color8 = "#${config.colorScheme.colors.base01}";
+      color8 = "#${config.colorScheme.palette.base01}";
-      color9 = "#${config.colorScheme.colors.base0F}";
+      color9 = "#${config.colorScheme.palette.base0F}";
-      color10 = "#${config.colorScheme.colors.base0A}";
+      color10 = "#${config.colorScheme.palette.base0A}";
-      color11 = "#${config.colorScheme.colors.base09}";
+      color11 = "#${config.colorScheme.palette.base09}";
-      color12 = "#${config.colorScheme.colors.base0C}";
+      color12 = "#${config.colorScheme.palette.base0C}";
-      color13 = "#${config.colorScheme.colors.base0D}";
+      color13 = "#${config.colorScheme.palette.base0D}";
-      color14 = "#${config.colorScheme.colors.base0B}";
+      color14 = "#${config.colorScheme.palette.base0B}";
-      color15 = "#${config.colorScheme.colors.base07}";
+      color15 = "#${config.colorScheme.palette.base07}";
 
       font_size = 12;
       window-padding-width = 15;

modules/home/cli/other/default.nix

@@ -12,7 +12,7 @@
     cbonsai
     pipes-rs
     cmatrix
-    cava
+    #cava
     sl
   ];
 }

modules/home/cli/starship/default.nix

@@ -10,36 +10,36 @@
     enableZshIntegration = true;
     settings = {
       format = lib.concatStrings [
-        "[░▒▓](#${config.colorScheme.colors.base06})"
+        "[░▒▓](#${config.colorScheme.palette.base06})"
         "$username"
         "$hostname"
-        "[](bg:#${config.colorScheme.colors.base05} fg:#${config.colorScheme.colors.base06})"
+        "[](bg:#${config.colorScheme.palette.base05} fg:#${config.colorScheme.palette.base06})"
         "$directory"
-        "[](bg:#${config.colorScheme.colors.base04} fg:#${config.colorScheme.colors.base05})"
+        "[](bg:#${config.colorScheme.palette.base04} fg:#${config.colorScheme.palette.base05})"
-        "[ ](bg:#${config.colorScheme.colors.base04})"
+        "[ ](bg:#${config.colorScheme.palette.base04})"
         "$env_var"
-        "[](bg:#${config.colorScheme.colors.base00} fg:#${config.colorScheme.colors.base04})"
+        "[](bg:#${config.colorScheme.palette.base00} fg:#${config.colorScheme.palette.base04})"
         " "
       ];
       username = {
         show_always = true;
         style_user =
-          "bg:#${config.colorScheme.colors.base06} fg:#${config.colorScheme.colors.base00}";
+          "bg:#${config.colorScheme.palette.base06} fg:#${config.colorScheme.palette.base00}";
         style_root =
-          "bg:#${config.colorScheme.colors.base06} fg:#${config.colorScheme.colors.base00}";
+          "bg:#${config.colorScheme.palette.base06} fg:#${config.colorScheme.palette.base00}";
         format = "[ $user]($style)";
       };
       hostname = {
         ssh_symbol = "";
         style =
-          "bg:#${config.colorScheme.colors.base06} fg:#${config.colorScheme.colors.base00}";
+          "bg:#${config.colorScheme.palette.base06} fg:#${config.colorScheme.palette.base00}";
         format = "[@$hostname]($style)";
         ssh_only = false;
         disabled = false;
       };
       directory = {
         style =
-          "bg:#${config.colorScheme.colors.base05} fg:#${config.colorScheme.colors.base00}";
+          "bg:#${config.colorScheme.palette.base05} fg:#${config.colorScheme.palette.base00}";
         format = "[ $path ]($style)";
         truncation_length = 3;
         truncation_symbol = "…/";
@@ -54,7 +54,7 @@
         variable = "SHELLENVTYPE";
         default = "";
         style =
-          "bg:#${config.colorScheme.colors.base04} fg:#${config.colorScheme.colors.base00}";
+          "bg:#${config.colorScheme.palette.base04} fg:#${config.colorScheme.palette.base00}";
         format = "[$env_value]($style)";
       };
     };

modules/home/cli/zsh/default.nix

@@ -14,5 +14,9 @@ in {
       "ssh" = "TERM=xterm-256color  ${pkgs.openssh}/bin/ssh";
       "top" = "btop";
     };
+    initContent = ''
+      sopsu() {nix-shell -p sops --run "sops updatekeys $1";}
+      sopsn() {nix-shell -p sops --run "sops $1";}
+    '';
   };
 }

modules/home/default.nix

@@ -1 +1 @@
-{ ... }: { imports = [ ./base ./cli ./gui ./homecfg ./wayland ./xdg ./xorg ]; }
+{ ... }: { imports = [ ./base ./cli ./gui ./wayland ./xdg ./xorg ]; }

modules/home/gui/apps/default.nix

@@ -1,3 +1,3 @@
 { ... }: {
-  imports = [ ./develop ./firefox ./images ./mpv ./pipewire ./vosk ./zathura ];
+  imports = [ ./develop ./firefox ./images ./mpv ./pipewire ./zathura ];
 }

modules/home/gui/apps/develop/default.nix

@@ -1,12 +1,7 @@
 { lib, config, pkgs, ... }: {
+  imports = [ ./vscodium ];
 
-    imports = [ ./vscodium ];
+  config = lib.mkIf (config.syscfg.make.develop) {
-
+    home.packages = with pkgs; [ blender godot_4 openscad-unstable bambu-studio ];
-  config = lib.mkIf (config.homecfg.make.develop) {
-
-    home.packages = with pkgs; [
-        blender
-        godot_4
-    ];
   };
 }

modules/home/gui/apps/develop/vscodium/default.nix

@@ -1,17 +1,19 @@
 { lib, config, pkgs, ... }: {
 
-  config = lib.mkIf (config.homecfg.make.develop) {
+  config = lib.mkIf (config.syscfg.make.develop) {
     programs.vscode = {
       enable = true;
       package = pkgs.vscodium;
-      extensions = with pkgs.vscode-extensions; [
+      #profiles.default = {
-        bbenoist.nix
+        profiles.default.extensions = with pkgs.vscode-extensions; [
-        esbenp.prettier-vscode
+          bbenoist.nix
-        golang.go
+          esbenp.prettier-vscode
-        ms-python.vscode-pylance
+          golang.go
-        ms-vscode.cpptools
+          ms-python.vscode-pylance
-        dbaeumer.vscode-eslint
+          ms-vscode.cpptools
-      ];
+          dbaeumer.vscode-eslint
+        ];
+      #};
     };
   };
 }

modules/home/gui/apps/firefox/default.nix

@@ -1,5 +1,5 @@
 { lib, config, ... }: {
-  config = lib.mkIf (config.homecfg.make.gui) {
+  config = lib.mkIf (config.syscfg.make.gui) {
     programs.firefox = {
       enable = true;
       profiles = {

modules/home/gui/apps/images/default.nix

@@ -1,6 +1,6 @@
 { lib, config, pkgs, ... }: {
 
-  config = lib.mkIf (config.homecfg.make.gui) {
+  config = lib.mkIf (config.syscfg.make.gui) {
     programs.imv.enable = true;
 
     programs.obs-studio.enable = true;

modules/home/gui/apps/mpv/default.nix

@@ -1,6 +1,6 @@
 { lib, config, pkgs, ... }: {
 
-  config = lib.mkIf (config.homecfg.make.gui) {
+  config = lib.mkIf (config.syscfg.make.gui) {
     programs.mpv = {
       enable = true;
       scripts = with pkgs; [ mpvScripts.mpris ];

modules/home/gui/apps/pipewire/default.nix

@@ -1,6 +1,6 @@
 { lib, config, ... }: {
 
-  config = lib.mkIf (config.homecfg.make.gui) {
+  config = lib.mkIf (config.syscfg.make.gui) {
     xdg.configFile."pipewire/pipewire-pulse.conf.d/desktop.conf".text = ''
       context.modules = [
         {   name = libpipewire-module-loopback

modules/home/gui/apps/vosk/default.nix

@@ -1,6 +1,6 @@
 { lib, config, pkgs, ... }: {
 
-  config = lib.mkIf (config.homecfg.make.gui) {
+  config = lib.mkIf (config.syscfg.make.gui) {
     home.packages = with pkgs; [
       custom.vosk.base
       jq

modules/home/gui/apps/zathura/default.nix

@@ -1,46 +1,46 @@
 { lib, config, ... }: {
 
-  config = lib.mkIf (config.homecfg.make.gui) {
+  config = lib.mkIf (config.syscfg.make.gui) {
     programs.zathura = {
       enable = true;
       extraConfig = ''
-        set default-fg                "#${config.colorScheme.colors.base06}"
+        set default-fg                "#${config.colorScheme.palette.base06}"
-        set default-bg 			          "#${config.colorScheme.colors.base00}"
+        set default-bg 			          "#${config.colorScheme.palette.base00}"
 
-        set completion-bg		          "#${config.colorScheme.colors.base02}"
+        set completion-bg		          "#${config.colorScheme.palette.base02}"
-        set completion-fg		          "#${config.colorScheme.colors.base06}"
+        set completion-fg		          "#${config.colorScheme.palette.base06}"
-        set completion-highlight-bg	  "#${config.colorScheme.colors.base03}"
+        set completion-highlight-bg	  "#${config.colorScheme.palette.base03}"
-        set completion-highlight-fg	  "#${config.colorScheme.colors.base06}"
+        set completion-highlight-fg	  "#${config.colorScheme.palette.base06}"
-        set completion-group-bg		    "#${config.colorScheme.colors.base01}"
+        set completion-group-bg		    "#${config.colorScheme.palette.base01}"
-        set completion-group-fg		    "#${config.colorScheme.colors.base0C}"
+        set completion-group-fg		    "#${config.colorScheme.palette.base0C}"
 
-        set statusbar-fg		          "#${config.colorScheme.colors.base06}"
+        set statusbar-fg		          "#${config.colorScheme.palette.base06}"
-        set statusbar-bg		          "#${config.colorScheme.colors.base01}"
+        set statusbar-bg		          "#${config.colorScheme.palette.base01}"
 
-        set notification-bg		        "#${config.colorScheme.colors.base01}"
+        set notification-bg		        "#${config.colorScheme.palette.base01}"
-        set notification-fg		        "#${config.colorScheme.colors.base06}"
+        set notification-fg		        "#${config.colorScheme.palette.base06}"
-        set notification-error-bg	    "#${config.colorScheme.colors.base01}"
+        set notification-error-bg	    "#${config.colorScheme.palette.base01}"
-        set notification-error-fg	    "#${config.colorScheme.colors.base0F}"
+        set notification-error-fg	    "#${config.colorScheme.palette.base0F}"
-        set notification-warning-bg	  "#${config.colorScheme.colors.base01}"
+        set notification-warning-bg	  "#${config.colorScheme.palette.base01}"
-        set notification-warning-fg	  "#${config.colorScheme.colors.base09}"
+        set notification-warning-fg	  "#${config.colorScheme.palette.base09}"
 
-        set inputbar-fg			          "#${config.colorScheme.colors.base06}"
+        set inputbar-fg			          "#${config.colorScheme.palette.base06}"
-        set inputbar-bg 		          "#${config.colorScheme.colors.base01}"
+        set inputbar-bg 		          "#${config.colorScheme.palette.base01}"
 
-        set recolor-lightcolor		    "#${config.colorScheme.colors.base00}"
+        set recolor-lightcolor		    "#${config.colorScheme.palette.base00}"
-        set recolor-darkcolor		      "#${config.colorScheme.colors.base06}"
+        set recolor-darkcolor		      "#${config.colorScheme.palette.base06}"
 
-        set index-fg			            "#${config.colorScheme.colors.base06}"
+        set index-fg			            "#${config.colorScheme.palette.base06}"
-        set index-bg			            "#${config.colorScheme.colors.base00}"
+        set index-bg			            "#${config.colorScheme.palette.base00}"
-        set index-active-fg		        "#${config.colorScheme.colors.base06}"
+        set index-active-fg		        "#${config.colorScheme.palette.base06}"
-        set index-active-bg		        "#${config.colorScheme.colors.base01}"
+        set index-active-bg		        "#${config.colorScheme.palette.base01}"
 
-        set render-loading-bg		      "#${config.colorScheme.colors.base00}"
+        set render-loading-bg		      "#${config.colorScheme.palette.base00}"
-        set render-loading-fg		      "#${config.colorScheme.colors.base06}"
+        set render-loading-fg		      "#${config.colorScheme.palette.base06}"
 
-        set highlight-color		        "#${config.colorScheme.colors.base04}"
+        set highlight-color		        "#${config.colorScheme.palette.base04}"
-        set highlight-fg              "#${config.colorScheme.colors.base0E}"
+        set highlight-fg              "#${config.colorScheme.palette.base0E}"
-        set highlight-active-color	  "#${config.colorScheme.colors.base0E}"
+        set highlight-active-color	  "#${config.colorScheme.palette.base0E}"
 
       '';
     };

modules/home/gui/base/default.nix

@@ -1,6 +1,6 @@
 { lib, config, pkgs, ... }: {
 
-  config = lib.mkIf (config.homecfg.make.gui) {
+  config = lib.mkIf (config.syscfg.make.gui) {
     services.nextcloud-client.enable = true;
 
     home.packages = with pkgs; [
@@ -10,9 +10,13 @@
       xfce.tumbler
 
       telegram-desktop
+      discord-canary
       pavucontrol
       keepassxc
+      nextcloud-client
+
       gramps
+      sweethome3d.application
     ];
   };
 }

modules/home/gui/games/default.nix

@@ -1,11 +1,10 @@
-{ lib, config, pkgs, ... }: {
+{ inputs, lib, config, pkgs, ... }: {
 
-  imports = [ ./openttd.nix ];
+  imports = [ ./openttd.nix ./wow.nix ];
 
-  config = lib.mkIf (config.homecfg.make.game) {
+  config = lib.mkIf (config.syscfg.make.game) {
 
     home.packages = with pkgs; [
-      # custom.simc
 
       #games
       steam
@@ -15,6 +14,9 @@
       prismlauncher
       openttd-jgrpp
       bottles
+      lutris
+      unstable.umu-launcher
+      wine
     ];
   };
 

modules/home/gui/games/openttd.nix

@@ -1,6 +1,6 @@
 { lib, config, ... }: {
 
-  config = lib.mkIf (config.homecfg.make.game) {
+  config = lib.mkIf (config.syscfg.make.game) {
     xdg.configFile."openttd/openttd.cfg".text = ''
       [misc]
       display_opt = SHOW_TOWN_NAMES|SHOW_STATION_NAMES|SHOW_SIGNS|FULL_ANIMATION|FULL_DETAIL|WAYPOINTS|SHOW_COMPETITOR_SIGNS

modules/home/gui/games/wow.nix

@@ -0,0 +1,81 @@
+{ pkgs, lib, config, sops, ... }: {
+
+  config = lib.mkIf (config.syscfg.make.game) {
+
+    home.packages = with pkgs;
+      [
+        # custom.simc
+      ];
+
+    # templates buggy currently
+    #xdg.configFile."instawow/config.json" = ''${config.sops.templates."instawow_config.json".path}'';
+    sops.templates."instawow_config.json".content = ''
+       {
+            "auto_update_check": true,
+            "access_tokens": {
+              "cfcore": "${config.sops.placeholder.curse_forge_key}",
+              "github": "${config.sops.placeholder.github_user_key}",
+              "wago_addons": null
+            }
+        }'';
+
+# curse:master-plan
+# curse:raretrackercore-rt
+# curse:raretrackerdragonflight-rtd
+# curse:raretrackermaw-rtmw
+# curse:raretrackermechagon-rtm
+# curse:raretrackerthewarwithin-rtww
+# curse:raretrackertimelessisle-rtti
+# curse:raretrackeruldum-rtu
+# curse:raretrackervale-rtv
+# curse:raretrackerworldbosses-rtwb
+# curse:raretrackerzerethmortis-rtz
+# curse:venture-plan
+# curse:war-plan
+# github:nevcairiel/bartender4
+# github:cidan/betterbags
+# github:bigwigsmods/bigwigs
+# github:bigwigsmods/bigwigs_battleforazeroth
+# github:bigwigsmods/bigwigs_burningcrusade
+# github:bigwigsmods/bigwigs_cataclysm
+# github:bigwigsmods/bigwigs_classic
+# github:bigwigsmods/bigwigs_dragonflight
+# github:bigwigsmods/bigwigs_legion
+# github:bigwigsmods/bigwigs_mistsofpandaria
+# github:bigwigsmods/bigwigs_shadowlands
+# github:bigwigsmods/bigwigs_warlordsofdraenor
+# github:bigwigsmods/bigwigs_wrathofthelichking
+# github:nezroy/demodal
+# github:curseforge-mirror/details
+# github:edusperoni/details_elitism
+# github:curseforge-mirror/elitismhelper
+# github:michaelnpsp/grid2
+# github:jods-gh/groupfinderrio
+# github:nevcairiel/handynotes
+# github:hekili/hekili
+# github:thekrowi/krowi_achievementfilter
+# github:bigwigsmods/littlewigs
+# github:nnoggie/mythicdungeontools
+# github:tullamods/omnicc
+# github:tercioo/plater-nameplates
+# github:curseforge-mirror/quest_completist
+# github:raiderio/raiderio-addon
+# github:wowrarity/rarity
+# github:nevcairiel/shadowedunitframes
+# github:simulationcraft/simc-addon
+# github:curseforge-mirror/tomcats
+# github:weakauras/weakauras2
+# github:kemayo/wow-handynotes-battleforazerothtreasures
+# github:kemayo/wow-handynotes-dragonflight
+# github:kemayo/wow-handynotes-legiontreasures
+# github:kemayo/wow-handynotes-longforgottenhippogryph
+# github:kemayo/wow-handynotes-lostandfound
+# github:kemayo/wow-handynotes-secretfish
+# github:kemayo/wow-handynotes-shadowlandstreasures
+# github:kemayo/wow-handynotes-stygia
+# github:kemayo/wow-handynotes-treasurehunter
+# github:kemayo/wow-handynotes-warwithin
+# wowi:7032-tomtom
+
+  };
+}

modules/home/gui/theme/default.nix

@@ -5,7 +5,7 @@ let
   wallpaperGen = import ./wallpaper-gen.nix { inherit pkgs config; };
 in {
 
-  config = lib.mkIf (config.homecfg.make.gui) {
+  config = lib.mkIf (config.syscfg.make.gui) {
     home.pointerCursor = {
       package = pkgs.bibata-cursors;
       name = "Bibata-Modern-Classic";
@@ -17,7 +17,7 @@ in {
     gtk = {
       enable = true;
       theme = {
-        name = "${config.colorscheme.slug}";
+        name = "${config.colorscheme.slug}-Dark";
         package = gtkThemeFromScheme;
       };
       iconTheme = {
@@ -28,7 +28,7 @@ in {
 
     qt = {
       enable = true;
-      platformTheme = "gtk";
+      platformTheme.name = "gtk";
     };
 
     home.packages = [ wallpaperGen pkgs.swww ];

modules/home/gui/theme/gtk-theme-gen.nix

@@ -9,60 +9,89 @@ let
 in pkgs.stdenv.mkDerivation rec {
   name = "generated-gtk-theme-${scheme.slug}";
   src = pkgs.fetchFromGitHub {
-    owner = "nana-4";
+    owner = "vinceliuice";
-    repo = "materia-theme";
+    repo = "Orchis-theme";
-    rev = "6e5850388a25f424b8193fe4523504d1dc364175";
+    rev = "5b73376721cf307101e22d7031c1f4b1344d1f63";
-    sha256 = "sha256-I6hpH0VTmftU4+/pRbztuTQcBKcOFBFbNZXJL/2bcgU=";
+    sha256 = "sha256-+2/CsgJ+rdDpCp+r5B/zys3PtFgtnu+ohTEUOtJNd1Y=";
   };
-  buildInputs = with pkgs; [
-    sassc
-    bc
-    which
-    rendersvg
-    meson
-    ninja
-    nodePackages.sass
-    gtk4.dev
-    optipng
-  ];
-  phases = [ "unpackPhase" "installPhase" ];
-  installPhase = ''
-    HOME=/build
-    chmod 777 -R .
-    patchShebangs .
-    mkdir -p $out/share/themes
-    mkdir bin
-    sed -e 's/handle-horz-.*//' -e 's/handle-vert-.*//' -i ./src/gtk-2.0/assets.txt
 
-    cat > /build/gtk-colors << EOF
+  nativeBuildInputs = with pkgs; [ gtk3 sassc ];
-      BG=${scheme.colors.base00}
+  buildInputs = with pkgs; [ gnome-themes-extra ];
-      FG=${scheme.colors.base07}
+  propagatedUserEnvPkgs = with pkgs; [ gtk-engine-murrine ];
-      HDR_BG=${scheme.colors.base00}
+
-      HDR_FG=${scheme.colors.base07}
+  preInstall = ''
-      SEL_BG=${scheme.colors.base03}
+    mkdir -p $out/share/themes
-      SEL_FG=${scheme.colors.base07}
+    cat > src/_sass/_color-palette-${scheme.slug}.scss << 'EOF'
-      TXT_BG=${scheme.colors.base01}
+      $red-light: #${scheme.palette.low0F};
-      TXT_FG=${scheme.colors.base07}
+      $red-dark: #${scheme.palette.high0F};
-      BTN_BG=${scheme.colors.base01}
+
-      BTN_FG=${scheme.colors.base07}
+      $pink-light: #${scheme.palette.low0E};
-      HDR_BTN_BG=${scheme.colors.base01}
+      $pink-dark: #${scheme.palette.high0E};
-      HDR_BTN_FG=${scheme.colors.base07}
+
-      MENU_BG=${scheme.colors.base00}
+      $purple-light: #${scheme.palette.low0D};
-      MENU_FG=${scheme.colors.base07}
+      $purple-dark: #${scheme.palette.high0D};
-      ACCENT_BG=${scheme.colors.base0C}
+
-      ACCENT_FG=${scheme.colors.base00}
+      $blue-light: #${scheme.palette.low0C};
-      MATERIA_SURFACE=${scheme.colors.base01}
+      $blue-dark: #${scheme.palette.high0C};
-      MATERIA_VIEW=${scheme.colors.base00}
+
-      WM_BORDER_FOCUS=${scheme.colors.base02}
+      $teal-light: #${scheme.palette.low0B};
-      WM_BORDER_UNFOCUS=${scheme.colors.base02}
+      $teal-dark: #${scheme.palette.high0B};
-      UNITY_DEFAULT_LAUNCHER_STYLE=False
+
-      ROUNDNESS=7
+      $green-light: #${scheme.palette.low0A};
-      NAME=${scheme.slug}
+      $green-dark: #${scheme.palette.high0A};
-      MATERIA_STYLE_COMPACT=True
+      $sea-light: #${scheme.palette.alt_low0B};
+      $sea-dark: #${scheme.palette.alt_high0B};
+
+      $yellow-light: #${scheme.palette.low09};
+      $yellow-dark: #${scheme.palette.low09};
+
+      $orange-light: #${scheme.palette.low08};
+      $orange-dark: #${scheme.palette.high08};
+
+      $grey-050: #${scheme.palette.base07};
+      $grey-100: #${scheme.palette.base07};
+      $grey-150: #${scheme.palette.base06};
+      $grey-200: #${scheme.palette.base06};
+      $grey-250: #${scheme.palette.base05};
+      $grey-300: #${scheme.palette.base05};
+      $grey-350: #${scheme.palette.base04};
+      $grey-400: #${scheme.palette.base04};
+      $grey-450: #${scheme.palette.base03};
+      $grey-500: #${scheme.palette.base03};
+      $grey-550: #${scheme.palette.base02};
+      $grey-600: #${scheme.palette.base02};
+      $grey-650: #${scheme.palette.base02};
+      $grey-700: #${scheme.palette.base01};
+      $grey-750: #${scheme.palette.base01};
+      $grey-800: #${scheme.palette.base01};
+      $grey-850: #${scheme.palette.base00};
+      $grey-900: #${scheme.palette.base00};
+      $grey-950: #${scheme.palette.base00};
+
+      $white: #${scheme.palette.base07};
+      $black: #${scheme.palette.base00};
+
+      $button-close: #${scheme.palette.base0F};
+      $button-max: #${scheme.palette.base0A};
+      $button-min: #${scheme.palette.base08};
     EOF
 
-    echo "Changing colours:"
+    sed -i "/\@import/s/color-palette-default/color-palette-${scheme.slug}/" src/_sass/_tweaks.scss
-    ./change_color.sh -o ${scheme.slug} /build/gtk-colors -i False -t "$out/share/themes"
+    sed -i "/\$colorscheme:/s/default/${scheme.slug}/" src/_sass/_tweaks.scss
-    chmod 555 -R .
+
   '';
+
+  installPhase = ''
+    runHook preInstall
+    bash install.sh -d $out/share/themes \
+      -t default \
+      -n ${scheme.slug} \
+      -c ${scheme.variant} \
+      -s standard \
+      --tweaks primary \
+      --round ${scheme.palette.border-radius}px
+
+    runHook postInstall
+  '';
+
 }

modules/home/gui/theme/wallpaper-gen.nix

@@ -2,7 +2,7 @@
 
 let
   scheme = config.colorScheme;
-  colors = scheme.colors;
+  colors = scheme.palette;
   dither =
     "atkinson"; # none | floyd-steinberg | atkinson | jjn | burkes | sierra | sierra-lite
 in pkgs.stdenv.mkDerivation rec {

modules/home/homecfg/default.nix

@@ -1,43 +0,0 @@
-{ inputs, lib, config, ... }:
-with lib; {
-  options.homecfg = {
-    username = mkOption { type = types.str; };
-    wm = mkOption {
-      type = types.enum [ "Wayland" "X11" ];
-      default = "Wayland";
-    };
-    make = {
-      cli = mkOption {
-        type = types.bool;
-        default = true;
-      };
-      gui = mkOption {
-        type = types.bool;
-        default = false;
-      };
-      develop = mkOption {
-        type = types.bool;
-        default = false;
-      };
-      game = mkOption {
-        type = types.bool;
-        default = false;
-      };
-      power = mkOption {
-        type = types.bool;
-        default = false;
-      };
-    };
-    git = {
-      username = mkOption { type = types.str; };
-      email = mkOption { type = types.str; };
-      key = mkOption { type = types.str; };
-    };
-  };
-
-  imports = with inputs; [
-    nix-colors.homeManagerModules.default
-    ../../shared/colors
-  ];
-
-}

modules/home/wayland/apps/dunst/default.nix

@@ -1,6 +1,6 @@
 { lib, config, pkgs, ... }: {
 
-  config = lib.mkIf (config.homecfg.wm == "Wayland") {
+  config = lib.mkIf (config.usercfg.wm == "Wayland") {
     home.packages = with pkgs; [ libnotify ];
     services.dunst = {
       enable = true;
@@ -12,8 +12,10 @@
           width = "350";
           scale = "0";
           origin = "top-right";
-          offset =
+          offset = "${
-            "${config.colorScheme.colors.gaps-bar}x${config.colorScheme.colors.gaps-screen}";
+              toString ((lib.strings.toInt config.colorScheme.palette.gaps-bar)
+                + (lib.strings.toInt config.colorScheme.palette.gaps-screen))
+            }x${config.colorScheme.palette.gaps-screen}";
           notification_limit = "0";
           progress_bar = "true";
           progress_bar_height = "10";
@@ -26,8 +28,8 @@
           padding = "12";
           horizontal_padding = "15";
           text_icon_padding = "0";
-          frame_width = "${config.colorScheme.colors.border-width}";
+          frame_width = "${config.colorScheme.palette.border-width}";
-          frame_color = "#${config.colorScheme.colors.base04}";
+          frame_color = "#${config.colorScheme.palette.base04}";
           separator_color = "auto";
           sort = "yes";
           font = "IBM Plex Mono 14";
@@ -57,7 +59,7 @@
           always_run_script = "true";
           title = "Dunst";
           class = "Dunst";
-          corner_radius = "${config.colorScheme.colors.border-radius}";
+          corner_radius = "${config.colorScheme.palette.border-radius}";
           ignore_dbusclose = "false";
           layer = "top";
           force_xwayland = "true";
@@ -69,25 +71,25 @@
 
         };
         urgency_low = {
-          background = "#${config.colorScheme.colors.base01}";
+          background = "#${config.colorScheme.palette.base01}";
-          foreground = "#${config.colorScheme.colors.base07}";
+          foreground = "#${config.colorScheme.palette.base07}";
-          frame_color = "#${config.colorScheme.colors.base03}";
+          frame_color = "#${config.colorScheme.palette.base03}";
           timeout = "3";
-          highlight = "#${config.colorScheme.colors.base0B}";
+          highlight = "#${config.colorScheme.palette.base0B}";
         };
         urgency_normal = {
-          background = "#${config.colorScheme.colors.base01}";
+          background = "#${config.colorScheme.palette.base01}";
-          foreground = "#${config.colorScheme.colors.base07}";
+          foreground = "#${config.colorScheme.palette.base07}";
-          frame_color = "#${config.colorScheme.colors.base04}";
+          frame_color = "#${config.colorScheme.palette.base04}";
           timeout = "5";
-          highlight = "#${config.colorScheme.colors.base0C}";
+          highlight = "#${config.colorScheme.palette.base0C}";
         };
         urgency_critical = {
-          background = "#${config.colorScheme.colors.base01}";
+          background = "#${config.colorScheme.palette.base01}";
-          foreground = "#${config.colorScheme.colors.base0F}";
+          foreground = "#${config.colorScheme.palette.base0F}";
-          frame_color = "#${config.colorScheme.colors.base0F}";
+          frame_color = "#${config.colorScheme.palette.base0F}";
           timeout = "10";
-          highlight = "#${config.colorScheme.colors.base0E}";
+          highlight = "#${config.colorScheme.palette.base0E}";
         };
       };
     };

modules/home/wayland/apps/eww/bar/css/_clock.scss

@@ -17,7 +17,8 @@ calendar {
     font-weight: bold;
   }
 
-  .button {
+  label {
+    font-size: 20pt;
     color: $base0C;
   }
 
@@ -35,9 +36,6 @@ calendar {
   margin-top: -4pt;
 }
 
-.minute, .hour, .day, .month {
-  font-size: 20pt;
-}
 
 .date {
   color: $base0C;
@@ -47,5 +45,4 @@ calendar {
 
 .datetime {
   padding: $gaps-window;
-  
 }

modules/home/wayland/apps/eww/bar/css/_systray.scss

@@ -0,0 +1,35 @@
+.tray * {
+    padding: $border-width 0px;
+}
+.tray menu {
+    background-color: $base01;
+    color: $base07;
+    @include border-radius;
+    @include border-active;
+
+
+	padding: 10px 0px;
+
+	>menuitem {
+        margin: 2px $border-width;
+		padding: 0px 10px;
+
+		&:disabled label {
+			color: $base04;
+		}
+
+		&:hover {
+			background-color: $base0C;
+		}
+	}
+
+	separator {
+		background-color: $base03;
+		padding-top: 1px;
+        margin:10px 0px;
+
+		&:last-child {
+			padding: unset;
+		}
+	}
+}

modules/home/wayland/apps/eww/bar/eww.scss

@@ -13,6 +13,8 @@
 }
 
 @mixin border-active {
+  border-width: $border-width;
+  border-style: solid;
   border-color: $base04;
 }
 
@@ -99,6 +101,9 @@ tooltip {
 }
 .modevent:hover {
   @include border-active;
+  border-right-style: none;
+  border-bottom-right-radius: 0;
+  border-top-right-radius: 0;
 }
 
 .modinner {
@@ -115,6 +120,7 @@ tooltip {
 @import 'css/clock';
 @import 'css/radio';
 @import 'css/powermenu';
+@import 'css/systray';
 
 
 /* BAR */

modules/home/wayland/apps/eww/bar/eww.yuck

@@ -2,6 +2,7 @@
 
 (include "modules/sys.yuck")
 (include "modules/net.yuck")
+(include "modules/systray.yuck")
 (include "modules/clock.yuck")
 
 (include "windows/calendar.yuck")
@@ -26,6 +27,7 @@
     :valign "end"
     (sys-mod)
     (net-mod)
+    (systray-mod)
     (clock-mod)))
 
 (defwidget center []

modules/home/wayland/apps/eww/bar/modules/clock.yuck

@@ -5,28 +5,30 @@
     (eventbox
       :onhover "${EWW_CMD} update date_rev=true"
       :onhoverlost "${EWW_CMD} update date_rev=false"
+      :onclick "(sleep 0.1 && ${EWW_CMD} open --toggle calendar)"
+      :onrightclick "(sleep 0.1 && ${EWW_CMD} open --toggle powermenu)"
       (box
         :class "datetime"
         (overlay
           (box
             :orientation "v"
-            (button
+            (label :show-truncated false 
-              :class "hour" hour)
+              :class "hour" 
-            (button
+              :text {hour})
-              :class "minute" minute))
+            (label :show-truncated false
+            :class "minute"
+              :text {minute}))
           (revealer
             :reveal date_rev
             (box
               :class "date"
               :orientation "v"
-              (button
+              (label :show-truncated "false" 
-                :onclick "${EWW_CMD} open --toggle calendar"
+                :class "day"
-                :onrightclick "${EWW_CMD} open --toggle powermenu"
+                :text {day})
-                :class "day" day)
+              (label :show-truncated "false"
-              (button
+                :class "month" 
-                :onclick "${EWW_CMD} open --toggle calendar"
+                :text {month}))
-                :onrightclick "${EWW_CMD} open --toggle powermenu"
-                :class "month" month))
           )
         )
       )

modules/home/wayland/apps/eww/bar/modules/sys.yuck

@@ -6,23 +6,21 @@
 
 (defwidget sys-mod []
   (module
-    (button
+    (eventbox
-      :class "module"
+      :onclick "(sleep 0.1 && ${EWW_CMD} open --toggle sys)"
-      :onclick "${EWW_CMD} open --toggle sys"
       (box
-      :orientation "v"
+        :orientation "v"
-        (circular-progress
+          (circular-progress
-          :value {EWW_CPU.avg}
+            :value {EWW_CPU.avg}
-          :class "cpubar"
+            :class "cpubar"
-          :thickness 6
+            :thickness 6
-          (label :class "icon-text" :text "C"))
+            (label :class "icon-text" :text "C"))
-
-        (circular-progress
-          :value {gpu.devices[0].GRBM2?.CommandProcessor-Graphics?.value?:0}
-          :class "gpubar"
-          :thickness 6
-          (label :class "icon-text" :text "G"))
 
+          (circular-progress
+            :value {gpu.devices[0].GRBM2?.CommandProcessor-Graphics?.value?:0}
+            :class "gpubar"
+            :thickness 6
+            (label :class "icon-text" :text "G"))
         (circular-progress
           :value {100*memory.used/memory.total}
           :class "membar"
@@ -36,6 +34,7 @@
           :visible {battery.visible}
           :style "color: ${battery.color};"
           :thickness 6
+          :tooltip "${battery.status} @ ${battery.wattage}"
           (label :class "icon-text" :text "B"))
       )
     )

modules/home/wayland/apps/eww/bar/modules/systray.yuck

@@ -0,0 +1,15 @@
+
+(defwidget systray-mod []
+  (module
+    (box
+      :orientation "v"
+      (systray
+        :class "tray"
+        :space-evenly "true"
+        :orientation "v"
+        :icon-size 20
+        :prepend-new "false"
+        )
+    )
+  )
+)

modules/home/wayland/apps/eww/bar/modules/workspaces.yuck

@@ -11,6 +11,7 @@
 					(button
 						:onclick "hyprctl dispatch workspace ${ws.number}"
 						(label 
+							:show-truncated false
 							:class "icon-text  ${ws.color}"
 							:text `${ws.focused ? "󰜗" : "󰝥"}`
 						)

modules/home/wayland/apps/eww/bar/scripts/net/net

@@ -1,4 +1,4 @@
-#!/usr/bin/env bash
+#!/usr/bin/env zsh
 
 function get_time_ms {
   date -u +%s%3N
@@ -26,7 +26,8 @@ function gen_wifi() {
   icon=${icons[$level]}
   ip="-"
   class="net-connected"
-  name=$(wpa_cli status | grep \^ssid= | sed 's/ssid=//g')
+  name_raw=$(wpa_cli status | grep \^ssid= | sed 's/ssid=//g')
+  name=$(printf "%s" $name_raw)
 }
 
 function gen_ethernet() {

modules/home/wayland/apps/eww/bar/scripts/radio

@@ -1,108 +1,108 @@
-#!/usr/bin/env bash
+#!/usr/bin/env bash
-
+
-function get_time_ms {
+get_time_ms() {
-  date -u +%s%3N
+  date -u +%s%3N
-}
+}
-
+
-URL_BASE="https://www.radiorecord.ru/api"
+URL_BASE="https://www.radiorecord.ru/api"
-
+
-MPV_PID_FILE="/tmp/mpv_radio_pid"
+MPV_PID_FILE="/tmp/mpv_radio_pid"
-RADIO_ID_FILE="/tmp/radio_id"
+RADIO_ID_FILE="/tmp/radio_id"
-
+
-STATIONS="[]"
+STATIONS="[]"
-
+
-PID=$( [ -e "$MPV_PID_FILE" ] && cat "$MPV_PID_FILE" || echo 0 )
+PID=$( [ -e "$MPV_PID_FILE" ] && cat "$MPV_PID_FILE" || echo 0 )
-RADIO_ID=$( [ -e "$RADIO_ID_FILE" ] && cat "$RADIO_ID_FILE" || echo 0 )
+RADIO_ID=$( [ -e "$RADIO_ID_FILE" ] && cat "$RADIO_ID_FILE" || echo 0 )
-RADIO_URL=""
+RADIO_URL=""
-INFO='{"id":null,"artist":null,"song":null,"image600":null}'
+INFO='{"id":null,"artist":null,"song":null,"image600":null}'
-PAUSED=$(( $PID == 0 || $RADIO_ID == 0 ? 1 : 0 ))
+PAUSED=$(( $PID == 0 || $RADIO_ID == 0 ? 1 : 0 ))
-STATUS="{}"
+STATUS="{}"
-
+
-get_radio() {
+get_radio() {
-  echo "$STATIONS" | jq -r --argjson sel_id "$RADIO_ID" 'map(select(.id == $sel_id)).[0]'
+  echo "$STATIONS" | jq -r --argjson sel_id "$RADIO_ID" 'map(select(.id == $sel_id)).[0]'
-}
+}
-
+
-get_song() {
+get_song() {
-  echo $(curl -s "$URL_BASE/station/history/?id=$RADIO_ID" | jq '.result.history[0] | ({id, artist, song, image600})')
+  echo $(curl -s "$URL_BASE/station/history/?id=$RADIO_ID" | jq '.result.history[0] | ({id, artist, song, image600})')
-}
+}
-
+
-
+
-update() {
+update() {
-  PID=$( [ -e "$MPV_PID_FILE" ] && cat "$MPV_PID_FILE" || echo 0 )
+  PID=$( [ -e "$MPV_PID_FILE" ] && cat "$MPV_PID_FILE" || echo 0 )
-  RADIO_ID=$( [ -e "$RADIO_ID_FILE" ] && cat "$RADIO_ID_FILE" || echo 0 )
+  RADIO_ID=$( [ -e "$RADIO_ID_FILE" ] && cat "$RADIO_ID_FILE" || echo 0 )
-  PAUSED=$(( $PID == 0 && $RADIO_ID > 0 ? 1 : 0 ))
+  PAUSED=$(( $PID == 0 && $RADIO_ID > 0 ? 1 : 0 ))
-}
+}
-
+
-start() {
+start() {
-  STATIONS=$(curl -s "$URL_BASE/stations/" | jq --argjson ids '[507,522,523,536,537,42532,42602]' '.result.stations | map(select(.id | IN($ids[]))) | map({id, title, stream_hls, icon_fill_white})')
+  STATIONS=$(curl -s "$URL_BASE/stations/" | jq --argjson ids '[507,522,523,536,537,42532,42602]' '.result.stations | map(select(.id | IN($ids[]))) | map({id, title, stream_hls, icon_fill_white})')
-  RADIO_URL=$(get_radio | jq -r '.stream_hls')
+  RADIO_URL=$(get_radio | jq -r '.stream_hls')
-  if [ "$PAUSED" = 0 ]; then
+  if [ "$PAUSED" = 0 ]; then
-    kill -9 $PID
+    kill -9 $PID
-  fi
+  fi
-  mpv "$RADIO_URL" & echo $! > "$MPV_PID_FILE"
+  mpv "$RADIO_URL" & echo $! > "$MPV_PID_FILE"
-  echo $RADIO_ID > "$RADIO_ID_FILE"
+  echo $RADIO_ID > "$RADIO_ID_FILE"
-}
+}
-
+
-
+
-toggle() {
+toggle() {
-  if [ "$PAUSED" = 1 ]; then
+  if [ "$PAUSED" = 1 ]; then
-    echo $RADIO_ID $PID
+    echo $RADIO_ID $PID
-    start
+    start
-  else
+  else
-    kill -9 "$PID"
+    kill -9 "$PID"
-    rm -f $MPV_PID_FILE
+    rm -f $MPV_PID_FILE
-  fi
+  fi
-}
+}
-
+
-status() {
+status() {
-  echo $(jq -cnr --argjson pid "$PID" --argjson stations "$STATIONS" --argjson radio_id "$RADIO_ID" --argjson is_paused "$PAUSED" --argjson info "$INFO" '{"is_paused": $is_paused, "song": $info, "radio": $radio_id, "stations": $stations}')
+  echo $(jq -cnr --argjson pid "$PID" --argjson stations "$STATIONS" --argjson radio_id "$RADIO_ID" --argjson is_paused "$PAUSED" --argjson info "$INFO" '{"is_paused": $is_paused, "song": $info, "radio": $radio_id, "stations": $stations}')
-}
+}
-
+
-
+
-status_loop() {
+status_loop() {
-  STATUS=$(status)
+  STATUS=$(status)
-  echo $STATUS
+  echo $STATUS
-  STATIONS=$(curl -s "$URL_BASE/stations/" | jq --argjson ids '[507,522,523,536,537,42532,42602]' '.result.stations | map(select(.id | IN($ids[]))) | map({id, title, stream_hls, icon_fill_white})')
+  STATIONS=$(curl -s "$URL_BASE/stations/" | jq --argjson ids '[507,522,523,536,537,42532,42602]' '.result.stations | map(select(.id | IN($ids[]))) | map({id, title, stream_hls, icon_fill_white})')
-  last_time_info=0
+  last_time_info=0
-  last_time=0
+  last_time=0
-  while true; do
+  while true; do
-    current_time=$(get_time_ms)
+    current_time=$(get_time_ms)
-    delta=$((current_time - last_time))
+    delta=$((current_time - last_time))
-    delta_i=$((current_time - last_time_info))
+    delta_i=$((current_time - last_time_info))
-    if [[ $delta -gt 1000 ]]; then
+    if [[ $delta -gt 1000 ]]; then
-      PID=$( [ -e "$MPV_PID_FILE" ] && cat "$MPV_PID_FILE" || echo 0 )
+      PID=$( [ -e "$MPV_PID_FILE" ] && cat "$MPV_PID_FILE" || echo 0 )
-      RADIO_ID=$( [ -e "$RADIO_ID_FILE" ] && cat "$RADIO_ID_FILE" || echo 0 )
+      RADIO_ID=$( [ -e "$RADIO_ID_FILE" ] && cat "$RADIO_ID_FILE" || echo 0 )
-      PAUSED=$(( $PID == 0 && $RADIO_ID > 0 ? 1 : 0 ))
+      PAUSED=$(( $PID == 0 && $RADIO_ID > 0 ? 1 : 0 ))
-      NEW_STATUS=$(status)
+      NEW_STATUS=$(status)
-      if [[ "$NEW_STATUS" != "$STATUS" ]]; then
+      if [[ "$NEW_STATUS" != "$STATUS" ]]; then
-        STATUS=$NEW_STATUS
+        STATUS=$NEW_STATUS
-        echo $STATUS
+        echo $STATUS
-      fi
+      fi
-      last_time=$current_time
+      last_time=$current_time
-    fi
+    fi
-    if [[ $delta_i -gt 15000 ]]; then
+    if [[ $delta_i -gt 15000 ]]; then
-      if [ "$PAUSED" = 1 ]; then
+      if [ "$PAUSED" = 1 ]; then
-        INFO="{\"id\":null,\"artist\":null,\"song\":null,\"image600\": \"$(get_radio | jq -r '.icon_fill_white')\"}"
+        INFO="{\"id\":null,\"artist\":null,\"song\":null,\"image600\": \"$(get_radio | jq -r '.icon_fill_white')\"}"
-      else
+      else
-        INFO=$(echo "$INFO" "$(get_song)" | jq -s ' reduce .[] as $item ( {}; . + (
+        INFO=$(echo "$INFO" "$(get_song)" | jq -s ' reduce .[] as $item ( {}; . + (
-            reduce ($item | to_entries[]) as $entry ( {}; if $entry.value != null then .[$entry.key] = $entry.value else . end
+            reduce ($item | to_entries[]) as $entry ( {}; if $entry.value != null then .[$entry.key] = $entry.value else . end
-          )) )')
+          )) )')
-      fi
+      fi
-      last_time_info=$current_time
+      last_time_info=$current_time
-    fi
+    fi
-  done
+  done
-}
+}
-
+
-# Main script
+# Main script
-case "$1" in
+case "$1" in
-  "start")
+  "start")
-    RADIO_ID=$2
+    RADIO_ID=$2
-    start
+    start
-    ;;
+    ;;
-  "toggle")
+  "toggle")
-    toggle
+    toggle
-    ;;
+    ;;
-  *)
+  *)
-    status_loop
+    status_loop
-    ;;
+    ;;
-esac
+esac

modules/home/wayland/apps/eww/bar/scripts/sys/battery

@@ -1,4 +1,4 @@
-#!/usr/bin/env bash
+#!/usr/bin/env zsh
 
 icons=("󰂎" "󰁺" "󰁻" "󰁼" "󰁽" "󰁾" "󰁿" "󰂀" "󰂁" "󰂂" "󰁹")
 num_icons=$(awk -v n="${#icons[@]}" 'BEGIN{print 100 / n}')
@@ -11,7 +11,7 @@ geticon() {
 
 status() {
   if [ "$STATE" = "Charging" ]; then
-    echo -n "charging"
+    echo -n "Charging"
 
     if [ "$RATE" -gt 0 ]; then
       echo ", $(gettime) left"
@@ -21,7 +21,7 @@ status() {
   elif [ "$STATE" = "Discharging" ]; then
     echo "$(gettime)h left"
   else
-    echo "fully charged"
+    echo "Fully Charged"
   fi
 }
 
@@ -39,9 +39,9 @@ gettime() {
 
   if [ "$RATE" -gt 0 ]; then
     if [ "$STATE" = "Discharging" ]; then
-      EX="$NOW / $RATE"
+      EX=$(( ($NOW*1.0) / $RATE))
     else
-      EX="($FULL - $NOW) / $RATE"
+      EX=$(( (($FULL - $NOW)*1.0) / $RATE))
     fi
     date -u -d@"$(awk -v ex="$EX" 'BEGIN{print ex * 3600}')" +%H:%M
   fi

modules/home/wayland/apps/eww/bar/scripts/sys/cpu

@@ -1 +1 @@
-#!/usr/bin/env bash
+#!/usr/bin/env zsh

modules/home/wayland/apps/eww/bar/scripts/sys/gpu

@@ -1,3 +1,3 @@
-#!/usr/bin/env bash
+#!/usr/bin/env zsh
 
 amdgpu_top -J -s 5000 | sed 's/ //g' 

modules/home/wayland/apps/eww/bar/scripts/sys/memory

@@ -1,4 +1,4 @@
-#!/usr/bin/env bash
+#!/usr/bin/env zsh
 
 total="$(free --si | rg Mem | awk '{print $2}')"
 

modules/home/wayland/apps/eww/bar/scripts/workspaces

@@ -64,7 +64,7 @@ done
 generate
 
 # main loop
-socat -u UNIX-CONNECT:/tmp/hypr/"$HYPRLAND_INSTANCE_SIGNATURE"/.socket2.sock - | rg --line-buffered "workspace|mon(itor)?" | while read -r line; do
+socat -u UNIX-CONNECT:$XDG_RUNTIME_DIR/hypr/"$HYPRLAND_INSTANCE_SIGNATURE"/.socket2.sock - | rg --line-buffered "workspace|mon(itor)?" | while read -r line; do
   case ${line%>>*} in
   "workspace")
     focusedws=${line#*>>}

modules/home/wayland/apps/eww/bar/windows/radio.yuck

@@ -100,8 +100,11 @@
     (box
       :orientation "v"
       (button
-        :onclick "${EWW_CMD} open --toggle --no-daemonize radio"
+        :onclick "(sleep 0.1 && ${EWW_CMD} open --toggle --no-daemonize radio)"
-        (label :class "icon-text" :text "󰝚")
+        (label 
+          :show-truncated false
+          :class "icon-text" 
+          :text "󰝚")
       )
     )
   )

modules/home/wayland/apps/eww/default.nix

@@ -1,7 +1,7 @@
 { lib, config, pkgs, ... }: {
 
-  config = lib.mkIf (config.homecfg.wm == "Wayland") {
+  config = lib.mkIf (config.usercfg.wm == "Wayland") {
-    home.packages = with pkgs; [ eww-wayland jaq custom.amdgpu_top ];
+    home.packages = with pkgs; [ eww jq jaq custom.amdgpu_top ];
 
     xdg.configFile."eww" = {
       source = lib.cleanSourceWith {
@@ -16,22 +16,22 @@
 
     # colors file
     xdg.configFile."eww/css/_colors.scss".text = ''
-      $base00: #${config.colorScheme.colors.base00};
+      $base00: #${config.colorScheme.palette.base00};
-      $base01: #${config.colorScheme.colors.base01};
+      $base01: #${config.colorScheme.palette.base01};
-      $base02: #${config.colorScheme.colors.base02};
+      $base02: #${config.colorScheme.palette.base02};
-      $base03: #${config.colorScheme.colors.base03};
+      $base03: #${config.colorScheme.palette.base03};
-      $base04: #${config.colorScheme.colors.base04};
+      $base04: #${config.colorScheme.palette.base04};
-      $base05: #${config.colorScheme.colors.base05};
+      $base05: #${config.colorScheme.palette.base05};
-      $base06: #${config.colorScheme.colors.base06};
+      $base06: #${config.colorScheme.palette.base06};
-      $base07: #${config.colorScheme.colors.base07};
+      $base07: #${config.colorScheme.palette.base07};
-      $base08: #${config.colorScheme.colors.base08};
+      $base08: #${config.colorScheme.palette.base08};
-      $base09: #${config.colorScheme.colors.base09};
+      $base09: #${config.colorScheme.palette.base09};
-      $base0A: #${config.colorScheme.colors.base0A};
+      $base0A: #${config.colorScheme.palette.base0A};
-      $base0B: #${config.colorScheme.colors.base0B};
+      $base0B: #${config.colorScheme.palette.base0B};
-      $base0C: #${config.colorScheme.colors.base0C};
+      $base0C: #${config.colorScheme.palette.base0C};
-      $base0D: #${config.colorScheme.colors.base0D};
+      $base0D: #${config.colorScheme.palette.base0D};
-      $base0E: #${config.colorScheme.colors.base0E};
+      $base0E: #${config.colorScheme.palette.base0E};
-      $base0F: #${config.colorScheme.colors.base0F};
+      $base0F: #${config.colorScheme.palette.base0F};
 
 
       $fg: $base07;
@@ -40,11 +40,11 @@
 
       $border-color: $base03;
       $border-color-focus: $base04;
-      $border-radius: ${config.colorScheme.colors.border-radius}px;
+      $border-radius: ${config.colorScheme.palette.border-radius}px;
-      $border-width: ${config.colorScheme.colors.border-width}px;
+      $border-width: ${config.colorScheme.palette.border-width}px;
 
-      $gaps-screen: ${config.colorScheme.colors.gaps-screen}px;
+      $gaps-screen: ${config.colorScheme.palette.gaps-screen}px;
-      $gaps-window: ${config.colorScheme.colors.gaps-window}px;
+      $gaps-window: ${config.colorScheme.palette.gaps-window}px;
     '';
   };
 }

modules/home/wayland/apps/kanshi/default.nix

@@ -1,93 +1,101 @@
-{ ... }: {
+{ config, lib, ... }: {
 
-  services.kanshi = {
+  config = lib.mkIf (config.usercfg.wm == "Wayland") {
-    enable = true;
+    services.kanshi = {
-    systemdTarget = "graphical-session.target";
+      enable = true;
-    profiles = {
+      systemdTarget = "graphical-session.target";
-      tower_0 = {
+      settings = [
-        outputs = [{
+        {
-          criteria = "CEX CX133 0x00000001";
+          profile.name = "tower_0";
-          mode = "1920x1200@59.972";
+          profile.outputs = [{
-          position = "0,0";
-          scale = 1.0;
-          status = "enable";
-        }];
-      };
-      tower_1 = {
-        outputs = [{
-          criteria = "AOC 16G3 1DDP7HA000348";
-          mode = "1920x1080@144.000";
-          position = "0,0";
-          status = "enable";
-          scale = 1.0;
-          adaptiveSync = true;
-        }];
-      };
-      tower_2 = {
-        outputs = [
-          {
-            criteria = "AOC 16G3 1DDP7HA000348";
-            mode = "1920x1080@144.000";
-            position = "0,0";
-            status = "enable";
-            scale = 1.0;
-            adaptiveSync = true;
-          }
-          {
             criteria = "CEX CX133 0x00000001";
             mode = "1920x1200@59.972";
-            position = "0,1080";
-            scale = 1.0;
-            status = "enable";
-          }
-        ];
-      };
-      laptop_0 = {
-        outputs = [{
-          criteria = "LG Display 0x060A Unknown";
-          mode = "1920x1080@60.020";
-          position = "0,0";
-          scale = 1.0;
-          status = "enable";
-        }];
-      };
-      laptop_1 = {
-        outputs = [
-          {
-            criteria = "CEX CX133 0x00000001";
-            mode = "2560x1600@59.972";
             position = "0,0";
             scale = 1.0;
             status = "enable";
-          }
+          }];
-          {
+        }
-            criteria = "LG Display 0x060A Unknown";
+        {
-            mode = "1920x1080@60.020";
+          profile.name = "tower_1";
-            position = "2560,0";
+          profile.outputs = [{
-            scale = 1.0;
-            status = "enable";
-          }
-        ];
-      };
-      laptop_2 = {
-        outputs = [
-          {
             criteria = "AOC 16G3 1DDP7HA000348";
             mode = "1920x1080@144.000";
             position = "0,0";
             status = "enable";
             scale = 1.0;
             adaptiveSync = true;
-          }
+          }];
-          {
+        }
+        {
+          profile.name = "tower_2";
+          profile.outputs = [
+            {
+              criteria = "AOC 16G3 1DDP7HA000348";
+              mode = "1920x1080@144.000";
+              position = "0,0";
+              status = "enable";
+              scale = 1.0;
+              adaptiveSync = true;
+            }
+            {
+              criteria = "CEX CX133 0x00000001";
+              mode = "1920x1200@59.972";
+              position = "0,1080";
+              scale = 1.0;
+              status = "enable";
+            }
+          ];
+        }
+        {
+          profile.name = "laptop_0";
+          profile.outputs = [{
             criteria = "LG Display 0x060A Unknown";
             mode = "1920x1080@60.020";
-            position = "1920,0";
+            position = "0,0";
             scale = 1.0;
             status = "enable";
-          }
+          }];
-        ];
+        }
-      };
+        {
+          profile.name = "laptop_1";
+          profile.outputs = [
+            {
+              criteria = "CEX CX133 0x00000001";
+              mode = "2560x1600@59.972";
+              position = "0,0";
+              scale = 1.0;
+              status = "enable";
+            }
+            {
+              criteria = "LG Display 0x060A Unknown";
+              mode = "1920x1080@60.020";
+              position = "2560,0";
+              scale = 1.0;
+              status = "enable";
+            }
+          ];
+        }
+        {
+          profile.name = "laptop_2";
+          profile.outputs = [
+            {
+              criteria = "AOC 16G3 1DDP7HA000348";
+              mode = "1920x1080@144.000";
+              position = "0,0";
+              status = "enable";
+              scale = 1.0;
+              adaptiveSync = true;
+            }
+            {
+              criteria = "LG Display 0x060A Unknown";
+              mode = "1920x1080@60.020";
+              position = "1920,0";
+              scale = 1.0;
+              status = "enable";
+            }
+          ];
+        }
+      ];
     };
   };
 }

modules/home/wayland/apps/waybar/default.nix

@@ -17,7 +17,7 @@ let
       ''
     }/bin/waybar-${name}";
 in {
-  config = lib.mkIf (config.homecfg.wm == "Wayland") {
+  config = lib.mkIf (config.usercfg.wm == "Wayland") {
 
     home.packages = [ pkgs.custom.amdgpu_top pkgs.jq ];
 
@@ -28,23 +28,23 @@ in {
       style = ''
          * {
           border: none;
-          border-radius: ${config.colorScheme.colors.border-radius}pt;
+          border-radius: ${config.colorScheme.palette.border-radius}pt;
           font-family:'Monospace','Material Design Icons','Openmoji';
           font-size: 13pt;
-          color: #${config.colorScheme.colors.base07};
+          color: #${config.colorScheme.palette.base07};
         }
 
         window#waybar {
           background: transparent;
-          padding-top: ${config.colorScheme.colors.gaps-screen}pt;
+          padding-top: ${config.colorScheme.palette.gaps-screen}pt;
-          padding-bottom: ${config.colorScheme.colors.gaps-screen}pt;
+          padding-bottom: ${config.colorScheme.palette.gaps-screen}pt;
         }
 
         tooltip {
-          background: #${config.colorScheme.colors.base01};
+          background: #${config.colorScheme.palette.base01};
-          border-radius: ${config.colorScheme.colors.border-radius}pt;
+          border-radius: ${config.colorScheme.palette.border-radius}pt;
-          border-color: #${config.colorScheme.colors.base03};
+          border-color: #${config.colorScheme.palette.base03};
-          border-width: ${config.colorScheme.colors.border-width}pt;
+          border-width: ${config.colorScheme.palette.border-width}pt;
           border-style: solid;
           font-size: 13pt;
         }
@@ -64,19 +64,19 @@ in {
         }
 
         #workspaces button.focused {
-          color: #${config.colorScheme.colors.base0C};
+          color: #${config.colorScheme.palette.base0C};
         }
 
         #workspaces button.active {
-          color: #${config.colorScheme.colors.base0C};
+          color: #${config.colorScheme.palette.base0C};
         }
 
         #workspaces button.urgent {
-          color: #${config.colorScheme.colors.base08};
+          color: #${config.colorScheme.palette.base08};
         }
 
         #workspaces button:hover icon {
-          color: #${config.colorScheme.colors.base04};
+          color: #${config.colorScheme.palette.base04};
         }
 
         #workspaces,
@@ -88,16 +88,16 @@ in {
         #custom-powermenu,
         #clock, #clock.date, #clock.time
         { 
-          background: #${config.colorScheme.colors.base01};
+          background: #${config.colorScheme.palette.base01};
-          margin-bottom: ${config.colorScheme.colors.gaps-window}pt;
+          margin-bottom: ${config.colorScheme.palette.gaps-window}pt;
           padding-top: 2px;
           padding-left: 2px;
           padding-bottom: 2px;
           border-top-right-radius: 0px;
           border-bottom-right-radius: 0px;
-          border-top: ${config.colorScheme.colors.border-width}px solid #${config.colorScheme.colors.base03};
+          border-top: ${config.colorScheme.palette.border-width}px solid #${config.colorScheme.palette.base03};
-          border-left: ${config.colorScheme.colors.border-width}px solid #${config.colorScheme.colors.base03};
+          border-left: ${config.colorScheme.palette.border-width}px solid #${config.colorScheme.palette.base03};
-          border-bottom: ${config.colorScheme.colors.border-width}px solid #${config.colorScheme.colors.base03};
+          border-bottom: ${config.colorScheme.palette.border-width}px solid #${config.colorScheme.palette.base03};
         }
 
         #custom-powermenu {          

modules/home/wayland/apps/waylock/default.nix

@@ -1,10 +1,12 @@
 { lib, pkgs, config, ... }: {
-  config = lib.mkIf (config.homecfg.wm == "Wayland") {
+  config = lib.mkIf (config.usercfg.wm == "Wayland") {
 
     home.packages = with pkgs; [ swayidle swaylock-effects ];
 
     xdg.configFile."swaylock/config".text = ''
       screenshots
+      grace-no-mouse
+      grace-no-touch
       grace=5
       effect-pixelate=5
       fade-in=0.2
@@ -12,43 +14,43 @@
       ignore-empty-password
       font=IBM Plex Mono
 
-      color=${config.colorscheme.colors.base00}00
+      color=${config.colorScheme.palette.base00}00
 
       indicator-radius=100
       indicator-thickness=30
 
-      separator-color=${config.colorscheme.colors.base00}00
+      separator-color=${config.colorScheme.palette.base00}00
 
-      inside-color=${config.colorscheme.colors.base0C}00
+      inside-color=${config.colorScheme.palette.base0C}00
-      inside-clear-color=${config.colorscheme.colors.base08}FF
+      inside-clear-color=${config.colorScheme.palette.base08}FF
-      inside-caps-lock-color=${config.colorscheme.colors.base09}00
+      inside-caps-lock-color=${config.colorScheme.palette.base09}00
-      inside-ver-color=${config.colorscheme.colors.base0C}FF
+      inside-ver-color=${config.colorScheme.palette.base0C}FF
-      inside-wrong-color=${config.colorscheme.colors.base0F}FF
+      inside-wrong-color=${config.colorScheme.palette.base0F}FF
 
 
-      ring-color=${config.colorscheme.colors.base00}00
+      ring-color=${config.colorScheme.palette.base00}00
-      ring-clear-color=${config.colorscheme.colors.base00}00
+      ring-clear-color=${config.colorScheme.palette.base00}00
-      ring-caps-lock-color=${config.colorscheme.colors.base00}00
+      ring-caps-lock-color=${config.colorScheme.palette.base00}00
-      ring-ver-color=${config.colorscheme.colors.base00}00
+      ring-ver-color=${config.colorScheme.palette.base00}00
-      ring-wrong-color=${config.colorscheme.colors.base00}00
+      ring-wrong-color=${config.colorScheme.palette.base00}00
 
-      line-color=${config.colorscheme.colors.base00}00
+      line-color=${config.colorScheme.palette.base00}00
-      line-clear-color=${config.colorscheme.colors.base00}00
+      line-clear-color=${config.colorScheme.palette.base00}00
-      line-caps-lock-color=${config.colorscheme.colors.base00}00
+      line-caps-lock-color=${config.colorScheme.palette.base00}00
-      line-ver-color=${config.colorscheme.colors.base00}00
+      line-ver-color=${config.colorScheme.palette.base00}00
-      line-wrong-color=${config.colorscheme.colors.base00}00
+      line-wrong-color=${config.colorScheme.palette.base00}00
 
-      text-color=${config.colorscheme.colors.base00}00
+      text-color=${config.colorScheme.palette.base00}00
-      text-clear-color=${config.colorscheme.colors.base00}00
+      text-clear-color=${config.colorScheme.palette.base00}00
-      text-caps-lock-color=${config.colorscheme.colors.base00}00
+      text-caps-lock-color=${config.colorScheme.palette.base00}00
-      text-ver-color=${config.colorscheme.colors.base00}00
+      text-ver-color=${config.colorScheme.palette.base00}00
-      text-wrong-color=${config.colorscheme.colors.base00}00
+      text-wrong-color=${config.colorScheme.palette.base00}00
 
 
-      key-hl-color=${config.colorscheme.colors.base0C}FF
+      key-hl-color=${config.colorScheme.palette.base0C}FF
-      bs-hl-color=${config.colorscheme.colors.base08}FF
+      bs-hl-color=${config.colorScheme.palette.base08}FF
-      caps-lock-key-hl-color=${config.colorscheme.colors.base09}FF
+      caps-lock-key-hl-color=${config.colorScheme.palette.base09}FF
-      caps-lock-bs-hl-color=${config.colorscheme.colors.base09}FF
+      caps-lock-bs-hl-color=${config.colorScheme.palette.base09}FF
     '';
   };
 }

modules/home/wayland/apps/wofi/default.nix

@@ -1,6 +1,6 @@
 { lib, config, pkgs, ... }: {
 
-  config = lib.mkIf (config.homecfg.wm == "Wayland") {
+  config = lib.mkIf (config.usercfg.wm == "Wayland") {
     home.packages = with pkgs; [ wofi ];
     xdg.configFile."wofi/config".text = ''
       width=280
@@ -23,8 +23,8 @@
     xdg.configFile."wofi/style.css".text = ''
       window {
         margin: 0px;
-        border-radius: ${config.colorscheme.colors.border-radius}px;
+        border-radius: ${config.colorScheme.palette.border-radius}px;
-        background-color: #${config.colorscheme.colors.base00};
+        background-color: #${config.colorScheme.palette.base00};
       }
 
       #input {
@@ -33,14 +33,14 @@
         padding: 4px 10px;
         margin: 4px;
         border: none;
-        color: #${config.colorscheme.colors.base07};
+        color: #${config.colorScheme.palette.base07};
         font-weight: bold;
-        background-color: #${config.colorscheme.colors.base01};
+        background-color: #${config.colorScheme.palette.base01};
-        outline: #${config.colorscheme.colors.base04};
+        outline: #${config.colorScheme.palette.base04};
       }
 
       #input:selected {
-        color: #${config.colorscheme.colors.base0C};
+        color: #${config.colorScheme.palette.base0C};
       }
 
       #inner-box {
@@ -51,19 +51,19 @@
       #outer-box {
         margin: 0px;
         padding: 3px;
-        border-radius: ${config.colorscheme.colors.border-radius}px;
+        border-radius: ${config.colorScheme.palette.border-radius}px;
-        border-width: ${config.colorscheme.colors.border-width}px;
+        border-width: ${config.colorScheme.palette.border-width}px;
-        border-color: #${config.colorscheme.colors.base04};
+        border-color: #${config.colorScheme.palette.base04};
         border-style: solid;
       }
 
       #text:selected {
-        color: #${config.colorscheme.colors.base00};
+        color: #${config.colorScheme.palette.base00};
         background-color: transparent;
       }
 
       #entry:selected {
-        background-color: #${config.colorscheme.colors.base07};
+        background-color: #${config.colorScheme.palette.base07};
       }
     '';
   };

modules/home/wayland/base/default.nix

@@ -11,7 +11,7 @@ let
     '';
   };
 in {
-  config = lib.mkIf (config.homecfg.wm == "Wayland") {
+  config = lib.mkIf (config.usercfg.wm == "Wayland") {
 
     home.packages = with pkgs; [
       dbus-hyprland-environment
@@ -29,7 +29,7 @@ in {
 
       glib
 
-      brillo
+      brightnessctl
       swww
     ];
 
@@ -42,6 +42,8 @@ in {
           [ "discord-402572971681644545.desktop" ];
         "x-scheme-handler/discord-696343075731144724" =
           [ "discord-696343075731144724.desktop" ];
+        "x-scheme-handler/tg" = [ "org.telegram.desktop.desktop" ];
+        "x-scheme-handler/tonsite" = [ "org.telegram.desktop.desktop" ];
         "x-scheme-handler/http" = [ "firefox.desktop" ];
         "x-scheme-handler/https" = [ "firefox.desktop" ];
         "x-scheme-handler/chrome" = [ "firefox.desktop" ];

modules/home/wayland/hyprland/config.nix

@@ -1,11 +1,12 @@
 { lib, config, pkgs, ... }: {
-  config = lib.mkIf (config.homecfg.wm == "Wayland") {
+  config = lib.mkIf (config.usercfg.wm == "Wayland") {
+
     wayland.windowManager.hyprland = {
       enable = true;
       xwayland.enable = true;
       extraConfig = ''
         monitor=,preferred,auto,auto
-
+        env=bitdepth,10
         input {
             kb_layout = us, ru
             kb_variant = intl, phonetic
@@ -13,7 +14,7 @@
 
             follow_mouse = 1
 
-            sensitivity = 0 # -0.5 # -1.0 - 1.0, 0 means no modification.
+            sensitivity = 0
                         
             touchpad {
                 natural_scroll=no
@@ -33,18 +34,18 @@
         }
                         
         general {
-            gaps_in = ${config.colorScheme.colors.gaps-window}
+            gaps_in = ${config.colorScheme.palette.gaps-window}
-            gaps_out = ${config.colorScheme.colors.gaps-screen}
+            gaps_out = ${config.colorScheme.palette.gaps-screen}
-            border_size = ${config.colorScheme.colors.border-width}
+            border_size = ${config.colorScheme.palette.border-width}
                                       
-            col.active_border = rgb(${config.colorScheme.colors.base04})
+            col.active_border = rgb(${config.colorScheme.palette.base04})
-            col.inactive_border = rgb(${config.colorScheme.colors.base03})
+            col.inactive_border = rgb(${config.colorScheme.palette.base03})
                           
             layout = dwindle
         }
                         
         decoration {
-            rounding = ${config.colorScheme.colors.border-radius}
+            rounding = ${config.colorScheme.palette.border-radius}
                           
             blur {
                 enabled = true
@@ -60,10 +61,10 @@
             fullscreen_opacity = 1.0
                                       
             # shadow
-            drop_shadow = no
+            # drop_shadow = no
-            shadow_range = 60
+            # shadow_range = 60
-            shadow_offset = 0 5
+            # shadow_offset = 0 5
-            shadow_render_power = 4
+            # shadow_render_power = 4
             #col.shadow = rgba(00000099)
         }
                         
@@ -85,7 +86,7 @@
         }
 
         master {
-            new_is_master = true
+            new_status = master
         }
 
         gestures {
@@ -137,14 +138,19 @@
         windowrulev2 = float,title:^(File Operation Progress)$
         windowrulev2 = float,class:^(firefox)$,title:^(Picture-in-Picture)$
         windowrulev2 = pin,class:^(firefox)$,title:^(Picture-in-Picture)$
-        windowrulev2 = nofullscreenrequest,class:^(firefox)$,title:^(Picture-in-Picture)$
+        windowrulev2 = suppressevent fullscreen,class:^(firefox)$,title:^(Picture-in-Picture)$
         windowrulev2 = float,class:^(firefox)$,title:^(Firefox — Sharing Indicator)$
-        windowrulev2 = nofullscreenrequest,class:^(firefox)$,title:^(Firefox — Sharing Indicator)$
+        windowrulev2 = suppressevent fullscreen,class:^(firefox)$,title:^(Firefox — Sharing Indicator)$
         windowrulev2 = float,class:^(firefox)$,title:^(Extension:.* Mozilla Firefox)$
-        windowrulev2 = nofullscreenrequest,class:^(firefox)$,title:^(Extension:.* Mozilla Firefox)$
+        windowrulev2 = suppressevent fullscreen,class:^(firefox)$,title:^(Extension:.* Mozilla Firefox)$
         windowrulev2 = float,class:^(org.telegram.desktop)$,title:^(Media viewer)$
         windowrulev2 = center,class:^(org.telegram.desktop)$,title:^(Media viewer)$
 
+        #SPECIAL NO SLEEP
+        windowrulev2 = idleinhibit fullscreen, class:^(.*)
+        windowrulev2 = idleinhibit focus, class:^(steam_app_.*)$
+        windowrulev2 = idleinhibit focus, class:^(mpv)$
+
         layerrule = blur,^(eww-blur)
 
         #binds
@@ -202,8 +208,8 @@
         bind = , XF86AudioRaiseVolume, exec, amixer -q sset 'Master' 5%+
         bind = , XF86AudioLowerVolume, exec, amixer -q sset 'Master' 5%-
         bind = , XF86AudioMute, exec, amixer -q sset 'Master' toggle
-        bind = , XF86MonBrightnessUp, exec, brillo -A 5
+        bind = , XF86MonBrightnessUp, exec, brightnessctl s 5%+
-        bind = , XF86MonBrightnessDown, exec, brillo -U 5
+        bind = , XF86MonBrightnessDown, exec, brightnessctl s 5%-
 
         exec-once = [workspace special silent] kitty --title flying_kitty
         exec-once = sh ~/.config/startup.sh

modules/home/wayland/hyprland/default.nix

@@ -1,6 +1,6 @@
 { lib, config, pkgs, ... }: {
   imports = [ ./config.nix ];
-  config = lib.mkIf (config.homecfg.wm == "Wayland") {
+  config = lib.mkIf (config.usercfg.wm == "Wayland") {
     wayland.windowManager.hyprland = { enable = true; };
   };
 }

modules/home/xorg/bspwm/config.nix

@@ -1,5 +1,5 @@
 { lib, config, ... }: {
-  config = lib.mkIf (config.homecfg.wm == "X11") {
+  config = lib.mkIf (config.usercfg.wm == "X11") {
     xsession.windowManager.bspwm.extraConfig = ''
           #! /bin/bash
 

modules/home/xorg/bspwm/default.nix

@@ -2,7 +2,7 @@
 
   imports = [ ./config.nix ./script.nix ./xressources.nix ];
 
-  config = lib.mkIf (config.homecfg.wm == "X11") {
+  config = lib.mkIf (config.usercfg.wm == "X11") {
     xsession.windowManager.bspwm = { enable = true; };
     services.sxhkd = { enable = true; };
     home.packages = with pkgs; [ xrandr arandr flameshot xtrlock i3lock ];

modules/home/xorg/bspwm/script.nix

@@ -1,5 +1,5 @@
 { lib, config, ... }: {
-  config = lib.mkIf (config.homecfg.wm == "X11") {
+  config = lib.mkIf (config.usercfg.wm == "X11") {
     xdg.configFile."script/lock.sh".text = ''
       #!/bin/bash
       TMPBG=/tmp/screen.png

modules/home/xorg/bspwm/xressources.nix

@@ -1,29 +1,29 @@
 { lib, config, ... }: {
-  config = lib.mkIf (config.homecfg.wm == "X11") {
+  config = lib.mkIf (config.usercfg.wm == "X11") {
     xresources.extraConfig = ''
 
       #define white #ffffff
       #define black #000000
-      #define cFG #${config.colorScheme.colors.base07}
+      #define cFG #${config.colorScheme.palette.base07}
-      #define cBG #${config.colorScheme.colors.base00}
+      #define cBG #${config.colorScheme.palette.base00}
-      #define cP #${config.colorScheme.colors.base07}
+      #define cP #${config.colorScheme.palette.base07}
-      #define cH #${config.colorScheme.colors.base0C}
+      #define cH #${config.colorScheme.palette.base0C}
-      #define c0 #${config.colorScheme.colors.base00}
+      #define c0 #${config.colorScheme.palette.base00}
-      #define c1 #${config.colorScheme.colors.base01}
+      #define c1 #${config.colorScheme.palette.base01}
-      #define c2 #${config.colorScheme.colors.base02}
+      #define c2 #${config.colorScheme.palette.base02}
-      #define c3 #${config.colorScheme.colors.base03}
+      #define c3 #${config.colorScheme.palette.base03}
-      #define c4 #${config.colorScheme.colors.base04}
+      #define c4 #${config.colorScheme.palette.base04}
-      #define c5 #${config.colorScheme.colors.base05}
+      #define c5 #${config.colorScheme.palette.base05}
-      #define c6 #${config.colorScheme.colors.base06}
+      #define c6 #${config.colorScheme.palette.base06}
-      #define c7 #${config.colorScheme.colors.base07}
+      #define c7 #${config.colorScheme.palette.base07}
-      #define c8 #${config.colorScheme.colors.base08}
+      #define c8 #${config.colorScheme.palette.base08}
-      #define c9 #${config.colorScheme.colors.base09}
+      #define c9 #${config.colorScheme.palette.base09}
-      #define cA #${config.colorScheme.colors.base0A}
+      #define cA #${config.colorScheme.palette.base0A}
-      #define cB #${config.colorScheme.colors.base0B}
+      #define cB #${config.colorScheme.palette.base0B}
-      #define cC #${config.colorScheme.colors.base0C}
+      #define cC #${config.colorScheme.palette.base0C}
-      #define cD #${config.colorScheme.colors.base0D}
+      #define cD #${config.colorScheme.palette.base0D}
-      #define cE #${config.colorScheme.colors.base0E}
+      #define cE #${config.colorScheme.palette.base0E}
-      #define cF #${config.colorScheme.colors.base0F}
+      #define cF #${config.colorScheme.palette.base0F}
 
       Xft.dpi: 96
 

modules/nixos/default.nix

@@ -1 +1 @@
-{ ... }: { imports = [ ./cli ./gui ./hostcfg ./system ./tools ./users ]; }
+{ ... }: { imports = [ ./cli ./gui ./system ./tools ./users ]; }

modules/nixos/gui/audio/default.nix

@@ -1,10 +1,10 @@
 { lib, config, pkgs, ... }:
-let cfg = config.hostcfg.make.gui;
+let cfg = config.syscfg.make.gui;
 in {
   config = lib.mkIf cfg {
-    sound.enable = true;
+    # sound.enable = true;
-    hardware.pulseaudio.enable = false;
     security.rtkit.enable = true;
+    services.pulseaudio.enable = false; #25.05 change to services
     services.pipewire = {
       enable = true;
       alsa.enable = true;
@@ -13,6 +13,6 @@ in {
       # wireplumber.enable = true;
     };
 
-    environment.systemPackages = with pkgs; [ easyeffects ];
+    environment.systemPackages = with pkgs; [ easyeffects alsa-utils ];
   };
 }

modules/nixos/gui/games/default.nix

@@ -1,5 +1,5 @@
 { lib, config, pkgs, ... }:
-let cfg = config.hostcfg.make.game;
+let cfg = config.syscfg.make.game;
 in {
   config = lib.mkIf cfg {
     programs.steam = {

modules/nixos/gui/greet/default.nix

@@ -1,14 +1,12 @@
-{ lib, config, pkgs, ... }:
+{ lib, config, pkgs, ... }: {
-let cfg = config.hostcfg.make.gui;
+  config = lib.mkIf (config.syscfg.make.gui) {
-in {
-  config = lib.mkIf cfg {
 
     services.greetd = {
       enable = true;
       settings = rec {
         initial_session = {
           command = "zsh";
-          user = "${config.hostcfg.username}";
+          user = "${config.syscfg.defaultUser}";
         };
         default_session = initial_session;
       };

modules/nixos/gui/xserver/default.nix

@@ -1,12 +1,13 @@
-{ lib, config, pkgs, ... }:
+{ lib, config, pkgs, ... }: {
-let cfg = config.hostcfg.make.gui;
+  config = lib.mkIf (config.syscfg.make.gui) {
-in {
+    programs.xwayland.enable = true;
-  config = lib.mkIf cfg {
     services.xserver = {
       enable = true;
       videoDrivers = [ "amd" ];
-      layout = "us";
+      xkb = {
-      xkbVariant = "intl";
+        layout = "us";
+        variant = "intl";
+      };
       excludePackages = [ pkgs.xterm ];
       exportConfiguration = true;
       #  libinput.touchpad.tapping = false;

modules/nixos/hostcfg/default.nix

@@ -1,44 +0,0 @@
-{ lib, config, ... }:
-with lib; {
-  options.hostcfg = {
-    hostname = mkOption { type = types.str; };
-    username = mkOption { type = types.str; };
-    make = {
-      cli = mkOption {
-        type = types.bool;
-        default = true;
-      };
-      gui = mkOption {
-        type = types.bool;
-        default = false;
-      };
-      virt = mkOption {
-        type = types.bool;
-        default = true;
-      };
-      power = mkOption {
-        type = types.bool;
-        default = false;
-      };
-      game = mkOption {
-        type = types.bool;
-        default = false;
-      };
-    };
-    net = {
-      wlp = {
-        enable = mkOption { type = types.bool; };
-        nif = mkOption { type = types.str; };
-      };
-      wg = {
-        enable = mkOption {
-          type = types.bool;
-          default = true;
-        };
-        ip4 = mkOption { type = types.str; };
-        ip6 = mkOption { type = types.str; };
-        pk = mkOption { type = types.str; };
-      };
-    };
-  };
-}

modules/nixos/system/hw/base/default.nix

@@ -1,4 +1,4 @@
 { ... }: {
-  services.fwupd.enable = false; # Note: run inside a nix-shell
+  services.fwupd.enable = true;
   hardware.enableAllFirmware = true;
 }

modules/nixos/system/hw/boot/default.nix

@@ -1,12 +1,16 @@
-{ ... }: {
+{ lib, config, ... }:
-  boot.loader = {
+let isSANDBOX = builtins.elem config.syscfg.hostname [ "sandbox" ];
-    systemd-boot = {
+in {
-      enable = true;
+  config = lib.mkIf (!isSANDBOX) {
-      configurationLimit = 8;
+    boot.loader = {
-    };
+      systemd-boot = {
-    efi = {
+        enable = true;
-      canTouchEfiVariables = true;
+        configurationLimit = 8;
-      efiSysMountPoint = "/boot/efi";
+      };
+      efi = {
+        canTouchEfiVariables = true;
+        efiSysMountPoint = "/boot/efi";
+      };
     };
   };
 }

modules/nixos/system/hw/default.nix

@@ -1 +1 @@
-{ ... }: { imports = [ ./base ./boot ./fs ./opengl ./power ./udev ./virt ]; }
+{ ... }: { imports = [ ./base ./boot ./fs ./graphics ./power ./udev ./virt ]; }

modules/nixos/system/hw/graphics/default.nix

@@ -0,0 +1,4 @@
+{ ... }: {
+  hardware.graphics.enable = true;
+  hardware.graphics.enable32Bit = true;
+}

modules/nixos/system/hw/opengl/default.nix

@@ -1,5 +0,0 @@
-{ ... }: {
-  hardware.opengl.enable = true;
-  hardware.opengl.driSupport = true;
-  hardware.opengl.driSupport32Bit = true;
-}

modules/nixos/system/hw/power/default.nix

@@ -1,7 +1,5 @@
-{ lib, config, pkgs, ... }:
+{ lib, config, pkgs, ... }: {
-let cfg = config.hostcfg.make.power;
+  config = lib.mkIf (config.syscfg.make.power) {
-in {
-  config = lib.mkIf cfg {
     services.tlp = {
       enable = true;
       settings = {
@@ -9,8 +7,24 @@ in {
         STOP_CHARGE_THRESH_BAT0 = 90;
         CPU_SCALING_GOVERNOR_ON_AC = "performance";
         CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
+        MEM_SLEEP_ON_BAT = "deep";
       };
     };
+    
+    powerManagement.enable = true;
+    # suspend to RAM (deep) rather than `s2idle`
+    boot.kernelParams = [ "mem_sleep_default=deep" ];
+    # suspend-then-hibernate
+    systemd.sleep.extraConfig = ''
+      HibernateDelaySec=30m
+      SuspendState=mem
+    '';
+
+    services.logind.lidSwitch = "suspend-then-hibernate";
+    # Hibernate on power button pressed
+    services.logind.powerKey = "hibernate";
+    services.logind.powerKeyLongPress = "poweroff";
+
 
     systemd.user.services.battery_monitor = {
       wants = [ "display-manager.service" ];

modules/nixos/system/hw/udev/default.nix

@@ -1,13 +1,16 @@
 { ... }: {
   systemd.services.systemd-udevd.restartIfChanged = false;
 
-  services.udev.extraRules = ''
+  services.udev = {
-    SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0127", GROUP="plugdev", TAG+="uaccess"
+    packages = [ ];
-    SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0118", GROUP="plugdev", TAG+="uaccess"
+    extraRules = ''
-    SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0106", GROUP="plugdev", TAG+="uaccess"
+      SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0127", GROUP="plugdev", TAG+="uaccess"
-    SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0128", GROUP="plugdev", TAG+="uaccess"
+      SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0118", GROUP="plugdev", TAG+="uaccess"
-    SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="010a", GROUP="plugdev", TAG+="uaccess"
+      SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0106", GROUP="plugdev", TAG+="uaccess"
-    SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0102", GROUP="plugdev", TAG+="uaccess"
+      SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0128", GROUP="plugdev", TAG+="uaccess"
-    SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0313", GROUP="plugdev", TAG+="uaccess"
+      SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="010a", GROUP="plugdev", TAG+="uaccess"
-  '';
+      SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0102", GROUP="plugdev", TAG+="uaccess"
+      SUBSYSTEM=="usb", ATTRS{idVendor}=="2104", ATTRS{idProduct}=="0313", GROUP="plugdev", TAG+="uaccess"
+    '';
+  };
 }

modules/nixos/system/hw/virt/default.nix

@@ -1,16 +1,19 @@
-{ lib, config, ... }:
+{ lib, config, pkgs, ... }: {
-let cfg = config.hostcfg.make.virt;
+  config = lib.mkIf (config.syscfg.make.virt) {
-in {
+    #environment.systemPackages = [ pkgs.qemu ];
-  config = lib.mkIf cfg {
     virtualisation = {
-      # libvirtd.enable = true;
+      #libvirtd.enable = true;
       # waydroid.enable = true;
       # lxd.enable = true;
-      docker = {
+      docker.enable = false;
+      podman = {
         enable = true;
-        rootless = {
+        dockerSocket.enable = true;
-          enable = true;
+        dockerCompat = true;
-          setSocketVariable = true;
+        defaultNetwork.settings = {
+          dnsname.enable = true;
+          internal = true;
+          name = "internal";
         };
       };
     };

modules/nixos/system/network/base/default.nix

@@ -1,6 +1,6 @@
 { config, ... }: {
   networking = {
-    hostName = config.hostcfg.hostname;
+    hostName = config.syscfg.hostname;
     useDHCP = true;
     nameservers = [ "1.1.1.1" "9.9.9.9" ];
 

modules/nixos/system/network/bluetooth/default.nix

@@ -1,5 +1,7 @@
-{ pkgs, ... }: {
+{ config, lib, pkgs, ... }: {
-  hardware.bluetooth.enable = true;
+  config = lib.mkIf (config.syscfg.net.ble.enable) {
-  services.blueman.enable = true;
+    hardware.bluetooth.enable = true;
-  environment.systemPackages = with pkgs; [ bluez bluez-tools ];
+    services.blueman.enable = true;
+    environment.systemPackages = with pkgs; [ bluez bluez-tools ];
+  };
 }

modules/nixos/system/network/wifi/default.nix

@@ -1,9 +1,7 @@
-{ lib, config, ... }:
+{ lib, config, ... }: {
-let cfg = config.hostcfg.net.wlp;
+  config = lib.mkIf (config.syscfg.net.wlp.enable) {
-in {
-  config = lib.mkIf cfg.enable {
     networking.supplicant = {
-      "${cfg.nif}" = {
+      "${config.syscfg.net.wlp.nif}" = {
         configFile.path = config.sops.secrets.wifi.path;
         extraConf = ''
           network={

modules/nixos/system/network/wireguard/default.nix

@@ -1,18 +1,21 @@
-{ config, ... }: {
+{ config, lib, ... }: {
-  networking.wireguard = {
+  config = lib.mkIf (config.syscfg.net.wg.enable) {
-    enable = true;
+    networking.wireguard = {
-    interfaces = {
+      enable = true;
-      wg0 = {
+      interfaces = {
-        ips = [ config.hostcfg.net.wg.ip4 config.hostcfg.net.wg.ip6 ];
+        wg0 = {
-        privateKeyFile = config.hostcfg.net.wg.pk;
+          ips = [ config.syscfg.net.wg.ip4 config.syscfg.net.wg.ip6 ];
-        listenPort = 1515;
+          privateKeyFile =
-        mtu = 1340;
+            config.sops.secrets."${config.syscfg.hostname}_wg_priv".path;
-        peers = [{
+          listenPort = 1515;
-          allowedIPs = [ "10.10.1.0/24" "fd10:10:10::0/64" ];
+          mtu = 1340;
-          endpoint = "vpn.helcel.net:1515";
+          peers = [{
-          publicKey = "NFBJvYXZC+bd62jhrKnM7/pugidWhgR6+C5qIiUiq3Q=";
+            allowedIPs = [ "10.10.1.0/24" "fd10:10:10::0/64" ];
-          persistentKeepalive = 30;
+            endpoint = "vpn.helcel.net:1515";
-        }];
+            publicKey = "NFBJvYXZC+bd62jhrKnM7/pugidWhgR6+C5qIiUiq3Q=";
+            persistentKeepalive = 30;
+          }];
+        };
       };
     };
   };

modules/nixos/system/nix/default.nix

@@ -1,15 +1,16 @@
-{ pkgs, ... }: {
+{ inputs, pkgs, ... }: {
   nixpkgs.config = {
     permittedInsecurePackages = [ ];
     allowUnfree = true;
+    android_sdk.accept_license = true;
     packageOverrides = pkgs: rec {
       custom = import ../../../../packages { inherit pkgs; };
     };
 
   };
-  nixpkgs.overlays = import ../../../../overlays { inherit pkgs; };
+  nixpkgs.overlays = import ../../../../overlays { inherit inputs pkgs; };
   nix = {
-    package = pkgs.nixFlakes;
+    package = pkgs.nixVersions.stable;
     extraOptions = ''
       experimental-features = nix-command flakes
       warn-dirty = false
@@ -24,13 +25,17 @@
     settings = {
       auto-optimise-store = true;
       builders-use-substitutes = true;
-      substituters =
+      substituters = [
-        [ "https://hyprland.cachix.org" "https://cache.nixos.org" ];
+        "https://hyprland.cachix.org"
+        "https://cache.nixos.org"
+        "https://helcel.cachix.org"
+      ];
       trusted-public-keys = [
         "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
         "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
+        "helcel.cachix.org-1:95s8D+N2xIHwzmkuu7jMUp9t3rtN4EimafR73jO7GLg="
       ];
     };
   };
-  system.stateVersion = "23.11";
+  system.stateVersion = "24.11";
 }

modules/nixos/system/security/default.nix

@@ -1 +1 @@
-{ ... }: { imports = [ ./gpg ./polkit ./sops ./ssh ]; }
+{ ... }: { imports = [ ./gpg ./polkit ./ssh ]; }

modules/nixos/system/security/sops/common.yaml

@@ -1,93 +0,0 @@
-valinor_ssh_priv: ENC[AES256_GCM,data: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,iv:pTQbb6nLHJ8BXTIYdiSe4vc5+1hpNuHhQhDkIAsZ9HI=,tag:jyO99VXSsCQlQD+Hh+gtvg==,type:str]
-valinor_ssh_pub: ENC[AES256_GCM,data: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,iv:YT0ZN/Rt6CbMSFU1wZDbrenlwXCh7e4C06YbVL5J/VU=,tag:BqVtzOC1ViEkHHTXbgDJHw==,type:str]
-valinor_wg_priv: ENC[AES256_GCM,data:1izZF+6G2Uc2MRBH56A07lexZEkyOiiFI4zltyoZco0+Y9EPhH1nJ4sWzs0=,iv:OIBIQvMsrq93/o0r8V6eSzfU63xtCzgQFf8NKXsjRk0=,tag:wdcQOfdaoxe7Vw0QWmngwA==,type:str]
-valinor_wg_pub: ENC[AES256_GCM,data:noAhVF91HUwpU3lHl4knlmGkV0Zjbuc4TQhFhF7HjCbv1hdSycO17TDfgcw=,iv:82v169pOoCOwnOaqPTOMvtvOUJJEcXjPI9BzogC+UaI=,tag:NHIcOYD5mSnZ6kwZBAnXGg==,type:str]
-iriy_ssh_priv: ENC[AES256_GCM,data:tLViFTWE62aJ7sCHVs2OxqewFI4QQVEoMdWV6l26FBFlbP9sQC0IWhtwkYVeQ7yFRlEjiB2RWcxG9KkLZm55JqAG6dX6AocG341u68PPWgcWYxYxI2056e/NYN2dlNE9SX0ImkT41/zQIG4b/7xRsFlBKJ0LUpbzWg6Bmo1Giu66NZhLLIkVRPqH7KzvUlyBiCAiIuMlVIBomxKwmeNn3SnaVDrfCbqhXwiJvGHZE09mtZnZMVd9vIo89+4PReykVUjEI04QhnSzv+ET62yw1AOk4k7yBWykhMi+KirlNL8qoHY/HSOaqndQpHc/GzCjClcWHeBjsouTnqx7YjZ77WpiVKuFIVNK18fZIwxIqW0cwftJpfMTlOfGIhfAjIebxOc1G7tAON7BWSZQNBtM9aQ5qmF5wwYKj1m2NxtqzD6Vwhd2XubgzFPCssYs/WZcF4NeJwYE9077NrMeLjE+kP8d7IJKwDuXTA0zldFaRURzKCy+NFnHIle/Bw5V08w/FeJsWAT7SeJM2V9yGYaysBTly2eh0YtW0vHdoijhZQ95jAD9ixfHiZ2Uz60F5L2s8DJ58i46OShT6ItJ98NeSxFT/cOIZQ7jd7mxmgZdQc4uXBk2ly9zlF86gti9MLdvbugkfLKnrCoHLec/g5wWyowRfriDgqzFgzcj0tGshhLr/Y7GsIj6ZzMCbHPhEz9oEqUR7tVmBXfyEisCBdujYaUByl9EgTnLx505LpuaqYJuiPq7YULCndye3EHdQWSiVQA6ncPpcqnKgAyqsBlRXa/2dsr4XJmdIOHTRQ11m+8jJ9R6gmiGIdjj7hq/kr9tCZWPSF/Idz2ml04nw9zjlroeq2CmiPAVskKmJohpWvrD+J5tz6pQSITbiQWnq+W2/7BT5LvkIewwegyckP2hvCpnsHvT1llD6gzf5kNkoNvHnrFOjPa83WLPUO20rykyuD1+5s04vw4j2+tcKEll54kB757yWUdn7af+vs7uvthc2Wen1vXXPHoZnDVDddO2vDsNMRCl1w6NE9Ey+bsLhgZ5hwvwi+i/cGg6XHoFtRMS8PKk7kpRqS5oTMxbhI6uVy2BLz2Mtot6VxA29NV9fngxoD6VU8bcen8P6Tt+QJs9FqN5Pik3mLuaZEp8xiarSe8vDoLHv+UZVLFgDc+6LegYUttM0vHf3oKBHSX8qduJOZrZ2UlgcU4b2AKfGkpRVg4tKb73kCZi8D9R9aMA3grMK2mEPGKjqoT0DbOa+CCpC3DGUg2LkZl4jvFMfX82lU86cQscnHNh0ajFgmxmmmrDiLVpZLRroslEntuvXmj3lQgZmsyrGdQ3Wy7W2TvcbqcEt095hU9jJu1dlj73ofP+ltxxF706//OU1ToTqKOoPXhwQNmGhHLdBOflyXy/SMF5Ymvelc6FI6ct9h7y8P955ZyX/IFurX0/XUvuxtDqb8xq5Jm378W8Wuh9Zq0FRwfcagEUMo8auqzVOSHx9yB60qsLoi3WEH54/CClwOelvDhD1nCQ9Dxr4oYmfIiRUcvYDlCvgwc8ZKWb+8eTTA7+aVEZ9HhIhV2yovykYcWE8hPFUITA6lUhdEtUotq4T9UofJ8S79U6DFCUX1BdMYGKSMxOPuQ0liviVh2pnXIN+4DH0OOz828dGmb21ClkwT+kvA/80XeSxrU59XT1IGRoNjPCRxZzuLnsfCA5rrIarz8y3gbL+CFY4rsoPTWfqWR8HUg7pUapdG/FiW4HCfK+BwtLowaxyF0Kj+eTf+1EPx7ReYiHo6Yzes3XVPJid0e/DRkKqpEHSv/xQssQlq3Zqxfjg6DsTQ/dpA05VSZowe4VxouVpV2kib0HZQt77AtR1y9bznED7BDM4X2f95PiRMeYKvSqCHkhakrMCmPlboFJn5vpsvlf/k3v3zpADfwvx5DZWhRYg9WfmG2XSEXrdIHKcDqQME4Ka/yHNBvYuI3SYvrUusZcxjqPXctSRCGGEd9zfGbkA01BQ2anA/xLvWQMzgnKDHRLpQ2cQcEUi3nrrODHaYu/myo5XJDMncPVUidfC/XrnqlalnI3MD1o58fBV7UA4AO2aLEZf/59Qp6NtdUQBppdNiFqXBP3841hAg6W991Lau24S8Z5e7zAjfu/16JYA/M1NeqSkLQOFVibs6SJRIkPm4JPw+sBAwPLmZyjvlbYdk6686vRa4Ibnl3WkaozIqpioyLyujwNfv2OAK6dN26PT+xM7L/3s5xhP0K5TFDKyzqvjjI0uFP07h+xiXZuEl7nP3EfzWT8/il4aSr284vZ9Aqd0FsgfuNPuo+A12aUBmSUjuy/ComwB+/vxbkNlWtMPvkCfdS1eXImigxm5IVQ30Ba3gNTmPQhUUw0AkQPd68g5PZDN0iIx4APhXOowBUEAy/YNTGC2MHUDGo3lWNXEBbE457x/Kq/CleDlHHG2lBAPBHBC+HxdsnyvaF15cmg69IIM5YU08cILY1sxQVDXhIWBlKg9pjZU9BJVR6cdRAXccL6XXRD3P5rJUkyBS6SmTmkXnQetrrQVt07lzfApSErslPqaIGEAuPTT7brQFylvi0eWo2mXDF9oBr1BGTUEGaswz8q8DUuBXA0U3apJoFoDQbJk0uRwv0CrdK9kjGHzf4wntf3qNc6fH0foEvpMaLxsBUyvL2+2WZYNz2+rDjgOtNO5yAd4ILL4JqZKcNr1zymEtFU4WGTOHUeT7no345NZjoTn88Y+12ApWd1NtPkLfpAkuogAJOUK6LCgLPRDQIkzagGCWjDmfbc18LM2MV/4Us1TdfBzENmTHCsLDhIy7Y6fIwteJ5oUuWhTeB+MdFSO/WBhS/v1rjHfE75GXvQBZrlkknKaDwS1sJaet/0OBSWK61Sk2821V9E6qSS6U0qSNQbwlVjG4JMCXsNITICTR+uTa2cUk+PiDe6uZohu3M2B8FiiH9/XNKpyywxhCWjz9K+rt59tiHO7MbPCG7Lzi86BtEIZ2B6fFfhCdooZTE4oelhitnH3R4LXUc8kiJ6KPFINbf6yEGnskYP+aEy/3XfR1Miw3LG6+FVTvldDy5EmInPv7Dw8K074imghLYkvcuWtj6qMo+EI4rGoH39OPhqyd3tDgKVDEWOHKE3Ictt2Ci4cxedS/NieqxZf5tUHiO3YZoYyylJcJ5mU0HoVFhtfmg/GsK5mywmt6B20x8XyMBMLolcWYNMzdWgPQ1ieKb87tCgNRIOnPuwZcUGq+L+cLpRR4yhfSYPPao4dG0dxsEQJiSHnRDea71bR7URhJeo6aanwnulYwsuhji+3+XFoY+2e8wrEoJG38se1tafnd1dQHpvfiEYKTSCYuHG3uZWHvlHW06YrAwnrQrMOs+dquuQhMLK4wlsjg0MzsEZRkZ/JopxVRkjS0N1UVDQuzIZMqf6gKoiUVaC5BsjhTwcYQrMx/DFhAnhL2iGwJfuEQrrIjNVz7FLPQ==,iv:cM6fDDPdHQ0Xamv41gKvCQ3Oh70hCRaijXLA8n2rEEA=,tag:7CsbqkiNGv7W5lCrPK3CmQ==,type:str]
-iriy_ssh_pub: ENC[AES256_GCM,data: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,iv:nWWm3vecA7c5pv8bYrjjZk3VLHjKJI7c7ZPkK+pUqU4=,tag:Gfa5Izk6I3s/spA3GkXufQ==,type:str]
-iriy_wg_priv: ENC[AES256_GCM,data:inng2niJrTXF3ld2T5Xs9t/64oDC8haJhpK1Iajpc60hMHWbenpqGRis7NM=,iv:E/cW6iwjbC3iKulvgBD5vXsjxh9A6nGO7Acr2DXAQps=,tag:CfHqE8u87xGDkzArZg3BnA==,type:str]
-iriy_wg_pub: ENC[AES256_GCM,data:/4yPr9+NKyU/84L1heVhVa5Mzu6/9bTRciL4V8v31J99Fh5ratZDufNt8AY=,iv:1PzTUsgt1YQPQAywSQqBUVm08++EA9rTdQF/puRJMs8=,tag:ew+bmkZmlj74/mzdBPiSDA==,type:str]
-avalon_ssh_priv: ENC[AES256_GCM,data:wTAQKXU=,iv:7x+5AnmbNde6lsr+y5MlkR7KoaOUSCGTCVwLECYxPHI=,tag:DkrosVUFtURFBuqQI0LxaQ==,type:bool]
-avalon_ssh_pub: ENC[AES256_GCM,data:22S09ak=,iv:Q5SU6BQw9j4HMyohQorIeNwGL0xLx8erm10gvPpHmCc=,tag:o02ZcLBSz35sqY9INyOMRw==,type:bool]
-avalon_wg_priv: ENC[AES256_GCM,data:Urf0hCzMoyo3IiV+0zhiHGhh3vfinrMAFbX9JwFgkXiW+3+AXN2b1b785JE=,iv:TV0zwPssXOEVSxiVo0jZwFCmZJiTSXXXctFXFX0H97s=,tag:YDNaw6dRBcbyMSjXTRIJmw==,type:str]
-avalon_wg_pub: ENC[AES256_GCM,data:Lc8LIn3UX6mpN8WWum18OVI5LWjBLoW2Qles4Bv/cKP6yOfKTLXPkAYzmFU=,iv:P3UJr5aHkW07HVH0oy500HdsumZpcwwuRdRKx/Efgjo=,tag:U9G9Ja+7mS1x6no+MVptiQ==,type:str]
-asgard_ssh_priv: ENC[AES256_GCM,data:PflBgd0=,iv:OvKG6iGAtvcx7Nw/CT3mJos69ECG0k5CasZMzg/xWo8=,tag:X9iQY/nDBb5Dz9a+rnN9Rg==,type:bool]
-asgard_ssh_pub: ENC[AES256_GCM,data:+M50sSY=,iv:fWVBRPlz/ACENHhOJ5zabu0eqOAAH/AH9+HBqUZZQU8=,tag:UPdE0aLWnhj/zlXpKbdoGw==,type:bool]
-asgard_wg_priv: ENC[AES256_GCM,data:YxlKrwQ=,iv:1xnNKjzkJ0KPglLQy35i3FZ6kaJIgf7u0vT4aciDQI8=,tag:Jg5a/215Ifxj/XXMkSHwMg==,type:bool]
-asgard_wg_pub: ENC[AES256_GCM,data:7ojknU8=,iv:Rk2otESlMbnVItBS0Xo2JeoSjOiDusUnsMVMw9/4oU4=,tag:FD0S6AfDfvVgvgy0coF/Uw==,type:bool]
-efir_ssh_priv: ENC[AES256_GCM,data:lfC0LrU=,iv:QCNZWYj1bokbZwVbPanuWzljwTv8k1yRvJJYzXiffRw=,tag:1r0myqf+wk0paT3ODStB6A==,type:bool]
-efir_ssh_pub: ENC[AES256_GCM,data:s2CtFco=,iv:5ckMLWh/OrANzuN7dChi87jJqp8ulbTuhefteVijVeU=,tag:0Ojvf/u6Vs0tKiPzLnaHuQ==,type:bool]
-efir_wg_priv: ENC[AES256_GCM,data:jxmtVME=,iv:4SJC/lexF/oxgZp4QDAA+MhLU50K6G7g4IgQmbXl81s=,tag:wC7h+uCgBfGFynIZlyaOng==,type:bool]
-efir_wg_pub: ENC[AES256_GCM,data:lYCUem4=,iv:FmIo/U0Zo9O2pbiehLLbTe9bWKzRRjEJHP53zXPvhAU=,tag:nQKx887kvTKaoKIXTR+/EA==,type:bool]
-vpn_ssh_priv: ENC[AES256_GCM,data:RQhNAZg=,iv:PHdobW9HIEITGaIq86YbOFhyf7OTeTzhgjWVKo0YgNs=,tag:EhSAJz8N2OAuHC7sbvBj+w==,type:bool]
-vpn_ssh_pub: ENC[AES256_GCM,data:K7+ZMxQ=,iv:xp1ghLqP5sk91feAIxC1JpHOkCzBfYBO9rHW9ghfqAM=,tag:eX8s7hGITevnerFo1VpfRg==,type:bool]
-vpn_wg_priv: ENC[AES256_GCM,data:YS2NMqSZdH6gTQq89sWNLna6sLFIzR+uDFurFP1s+3Pe1+QP/SAiX81PZfc=,iv:Ovm3ir8ia5793yYPsKrscpqc4A6B6r270hpx9pWmR1o=,tag:asWYQrENr5ip8kHdb2mkYw==,type:str]
-vpn_wg_pub: ENC[AES256_GCM,data:orLTPlTD5Y6bimDcc+BFJytQFER2POfgcOFEk6zcKkvuq/GyU8bKgKLxuyM=,iv:TVHw+yVhlDJFz/8HYqI3qT85hGzgx+3Bj7mT0mr3dFE=,tag:EKDs8gE8RJMGQVfcYLj9Jw==,type:str]
-pgp_key: ENC[AES256_GCM,data:nEMur/Uq,iv:2KXW/AAAWDX09Ich2S6LQ7618ZBAY61KZcGkIabqCLs=,tag:Q7o8fz3dFFuqeMpzu9U/Fg==,type:str]
-wifi: ENC[AES256_GCM,data:LBDjdh4/Kny4cz7WZ5EGeFH7k0PGdERBq0/2wAWHdZtAhC2avlVNRfV8n/DsRodaUVm/6/tCXmXGOfqkzRgC9drQmDxeJWe5IhjJpOOOAXvLA/BCgzwu/Poi4b2KiXdZ1BgznMBV9+EBNFR55+KAb+GjjEIR96G15wGTfk3D0hPs9sE238OcfKFLv5L7ptUN7qnmAH6M4AIEKk0gv+J9dyu3UAw7qfdr6uiuPsYOoQ95A2q1OpERh7VnfsI6zjJ8vKSKbG/yb0VOhcCOlM1oijqSw+fUIMBlOQ9wWyWN2brqkhACqqIiBWxrqfPHQT2mobMTgE4vw1BruzTnhBrqtCeGG8yHEZnL/8NU4z3NQDG3FfYScVNDAvMrW+06HHKRi43vJ1Zz7HMb6ik8ZOKFI4CvsYingNSD1cAXt3FMet5PvVFfWErsrpO3dST7A0ZSb56N+fXrfBcB8jdxsOZBopfksFpx81J/VLLdAoO0aXtYhZlMM11nuCjkgTFPvwkxy2e/+gZVqPbWEaDeJ5j2bEB7lJ1DpMX88FN9g0zhA6cufVbSanaLCvCDCdxTslZVauO0mlmOBh0GMPD7Oi/l8hdCX74PqjSx0kmH4RWRL6Jei2PPnAEW4scWrhUOKxMaagFsLFyKvy3HYAnTqevlEi8FXmS2hglQzsN3H7343kaV+OSTy50uOG9wr7T3rbztcKDOf9dp1CM4JVk933wOmMdg7nXBrU16ELVYlWuBHgswHiBtZQXVvQBPhxp7giFjduhXlg92wvmV2ZEcVOSiDJp4nJsiIaGmwbq6PsO/1Xy5sIJ0/jh1aJwAnp507xEXl0tvcBXSdaXpHdUnKnBPw9q8Gt9Td+UoLgEb13Dy1op9Fs9iA9LMX1EMQe6d,iv:rxAs2PD9EWNONqU0Hh9DJfECJ93nnRMrbUCwormAwxw=,tag:+n0iICniidi4H0Zv9pCDfA==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBraWFDRFUxQ2l5OWV1OXNK
-            UExEbWZkM0kzVk1rZG4yY3pBLzdMVWVJS0UwCnhlWFJ5T2lZUXJyNkg1ejQxaU1t
-            L3F2RUhldTY3N2xXL0hwczNKRzNjcncKLS0tIEkycHoxcDBGNyt2V3RDY29wNGVp
-            TGg5Rk05VkRsaXM1Q0NxMmtMajRORDAKqjFldiAYJKjmnkeDkwanjYvhL6645DZ5
-            dVXExjqO/DG733ge8HFyKzpfpkzRymV1giUwxBdII1dd0mJ2ncINeA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1ms8f0ysv6vakxepvt69fejczs6tddexepesdv4rkgtheehj3nu4sc6290s
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3UkRjblIvYStZUzQyRHA1
-            ZGVXeHhrN0kyVkxZdms5U3gwVFlPMW12MVJjCjRkVURpZXBzb0tYenB4dGxKamh6
-            VXVBMmo1Ujkvd2VTRExyWE5MbVJaclUKLS0tIDVhRkYzZmEzUG00Q2IwOWZUMVVt
-            ODVIbytpcjN1cVMyaG1qVVdkRmtaMzQKNsvD9DpK/raDBob+IcuNk72tQDts36kJ
-            QhtoLy8MvUymi49PdEWrgyf68w5XwRO/U4iINhR0qzm0glg/XcyHjA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJc3hKWkk3ckNOY2UyTVhG
-            MmtLaEd0K04yaGxiOUoxMXkzOEFnYis4VkhnCktDRFM2bS8vb05OWDdwa0RwRlNO
-            cmlZemtxVGZ6S0tNTDV1cmE1N0pVWnMKLS0tIE9EZllycHJpcEY2R1pwOFhOZEU3
-            L01IcytDd3BPb0VOTW9DQ2lUdUVJS0kKiD+C+3mK1b/eIwCEFanFgYGLNk3JNPQ7
-            i1UqzbHVxSd0q/YVwdKAcj0jA6EezGm275tgq7IVsy2sHkvRMaEDtQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAweVU3TkxFZzRnd2I2clN2
-            ZTlTWmhwQkhVc1hnOXFvZVVDSWpHMVh1TGtrCkc3M1pUTnZCMHpvYXB5ZVhreGxa
-            ZVY2cG5Ja2ltL3k2Q1VEalc5TTNFMXcKLS0tIGd5UWl0RGVXT211Zm51dlB6WFZ1
-            STRtTVpVTCtVZ1FUNENqWFFVNTNuaVUKN6HRiZjTdENeif8dJ29urBxPXDaosjjY
-            InN4Ko6YUaGfvB1DTrKIzrxOpsHS+XjisoGfT71tJwwEOoREklEO/A==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-05T09:52:06Z"
-    mac: ENC[AES256_GCM,data:lIY0q/K772KOiRZ24QgPtWqN67FqOdKScfJ/G8tY/VOe+KquGSIIIIyXZoIjvjEnVZpKleQfqGpcbssZR491r09xDazhadCOtEfY3YGtNUYSDcWfgHjYOYm22Pa/8YK90aAwc/2BAY6X0mXR/zPPTpdALvzIGYaS5EYVLdcdcxI=,iv:kMAgc7e8ATA2ZGRXKt1XdVWlc17OIccnCndBzKVw4T4=,tag:pR+xVV5bnE2nP/7fGWSm3Q==,type:str]
-    pgp:
-        - created_at: "2023-04-20T10:20:17Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            wcFMA6R3Y9nD7qMBAQ/8CVWQaYKfOzvPIllZyyWpUjHRLLXaR8MNJ8U5WI/tdwdN
-            9UScDYJFuYRW7Q9s4Mt961kBGpaHqe9MUZBxUDlYX59+EN3FbO/eMQ5OqI05ESmL
-            TvZB4+S9C5o73nuypSDNvYz+Lgq6DO25ZPhXdtPhx2DE4G31/wft/LpxhjalIjI8
-            MU0Dv22R4qC+glJbe4GIF2IJ8XoxnnzjiGeSqiyv0QIBM0SzOtA5sKwNohWBnW7g
-            7vxOTm5+kyzG0dDjt3tFApgPDaA1wjofzhRuuveF52VBsuIA2opFdpqkyICvK6rn
-            NB5kUaPlY6A0m+n0oHSfY5wm/AnHNE4Oob/ifumAaB0EAJVUTRauI5M8SeJF0ya1
-            U0IQ9N2lb7Y6q4pqHywIa6fnylsqCfxInAYKMuslRq8f9t/qakb4/MYcnPrwpzjw
-            73/naiNoJmG6NVTkM52qTtOqZAmsaQd5cigTuPW2Z2CJq1yLZEVGSSd1DUGUjBDK
-            nQGucpVVVpD+ifrIPz+Iqwy+5NoZZm/Oa9pKJGFzqXinnDNZaqtgpmTw9QxcSeaP
-            VvGZG9CDd89MtAm1VQyuqi1bQ2faq3G0xNrLl7xUsfmjx4ofW+JXR87OzvGfLPhu
-            Sjl3kS9j5/MEBRBg3n9gNkgSu5Sy3ilhckY3yjTgAT9Gw2giDhCiUXi1/7KrGprS
-            UQHPCSsjyWsyuYVa3lAP/WPdVclc4WOdfYcetUCXBVP7LQr0bq+IG+2J0nnY3mDt
-            Va5k4sP1qu6Ecrs2JioQ1V2H+VmcrRykBWnMXl1tDSWKMA==
-            =pS8X
-            -----END PGP MESSAGE-----
-          fp: 4E241635F8EDD2919D2FB44CA362EA0491E2EEA0
-    unencrypted_suffix: _unencrypted
-    version: 3.7.3

modules/nixos/system/security/sops/default.nix

@@ -1,26 +0,0 @@
-{ config, pkgs, ... }:
-let keyFilePath = "/var/lib/sops-nix/age-key.txt";
-in {
-  sops.defaultSopsFile = ./common.yaml;
-  sops.age.keyFile = keyFilePath;
-  sops.age.generateKey = true;
-
-  sops.secrets.wifi = { };
-
-  sops.secrets."${config.hostcfg.hostname}_ssh_priv" = {
-    mode = "0400";
-    owner = config.users.users.sora.name;
-    group = config.users.users.sora.group;
-  };
-  sops.secrets."${config.hostcfg.hostname}_ssh_pub" = {
-    mode = "0400";
-    owner = config.users.users.sora.name;
-    group = config.users.users.sora.group;
-  };
-  sops.secrets."${config.hostcfg.hostname}_wg_priv" = { };
-  sops.secrets."${config.hostcfg.hostname}_wg_pub" = { };
-
-  environment.systemPackages = with pkgs; [ sops ];
-  environment.sessionVariables.OPS_AGE_KEY_FILE = keyFilePath;
-
-}

modules/nixos/system/security/ssh/default.nix

@@ -2,7 +2,7 @@
   programs.ssh = {
     extraConfig = ''
       IdentityFile ${
-        config.sops.secrets."${config.hostcfg.hostname}_ssh_priv".path
+        config.sops.secrets."${config.syscfg.hostname}_ssh_priv".path
       }
     '';
   };

modules/nixos/system/xdg/default.nix

@@ -1,60 +1,68 @@
-{ pkgs, ... }: {
+{ config, lib, pkgs, ... }: {
+  config = lib.mkMerge [
+    (lib.mkIf (config.syscfg.make.gui) {
+      xdg.portal = {
+        enable = true;
+        # wlr.enable = true;
+        extraPortals = with pkgs; [
+          xdg-desktop-portal-hyprland
+          xdg-desktop-portal-gtk
+        ];
+        config.common.default = [ "hyprland" "gtk" ];
+      };
 
-  xdg.portal = {
+      environment.sessionVariables = rec {
-    enable = true;
+        GBM_BACKEND = "amd-drm";
-    # wlr.enable = true;
+        __GL_GSYNC_ALLOWED = "0";
-    extraPortals = with pkgs; [
+        __GL_VRR_ALLOWED = "1";
-      xdg-desktop-portal-hyprland
+        __GLX_VENDOR_LIBRARY_NAME = "amd";
-      xdg-desktop-portal-gtk
+        WLR_DRM_NO_ATOMIC = "1";
-    ];
+        _JAVA_AWT_WM_NONREPARENTING = "1";
-    config.common.default = [ "hyprland" "gtk" ];
+        QT_QPA_PLATFORM = "wayland";
-  };
+        QT_WAYLAND_DISABLE_WINDOWDECORATION = "1";
+        # GDK_BACKEND = "wayland";
+        WLR_NO_HARDWARE_CURSORS = "1";
+        MOZ_ENABLE_WAYLAND = "1";
+        # WLR_BACKEND = "vulkan";
+        # WLR_RENDERER = "vulkan";
+        XCURSOR_SIZE = "24";
+        NIXOS_OZONE_WL = "1";
+      };
+    })
+    ({
 
-  environment.sessionVariables = rec {
+      environment.sessionVariables = rec {
-    GBM_BACKEND = "amd-drm";
+        PATH = [ "$HOME/.local/bin/:$PATH" ];
-    __GL_GSYNC_ALLOWED = "0";
+        XDG_CACHE_HOME = "$HOME/.cache";
-    __GL_VRR_ALLOWED = "1";
+        XDG_CONFIG_HOME = "$HOME/.config";
-    WLR_DRM_NO_ATOMIC = "1";
+        XDG_DATA_HOME = "$HOME/.local/share";
-    __GLX_VENDOR_LIBRARY_NAME = "amd";
+        XDG_STATE_HOME = "$HOME/.local/state";
-    _JAVA_AWT_WM_NONREPARENTING = "1";
+        XDG_BIN_HOME = "$HOME/.local/bin";
-    QT_QPA_PLATFORM = "wayland";
+        XDG_DESKTOP_DIR = "$HOME/desktop";
-    QT_WAYLAND_DISABLE_WINDOWDECORATION = "1";
+        XDG_DOCUMENTS_DIR = "$HOME/files";
-    GDK_BACKEND = "wayland";
+        XDG_DOWNLOAD_DIR = "$HOME/download";
-    WLR_NO_HARDWARE_CURSORS = "1";
+        XDG_MUSIC_DIR = "$HOME/media/music";
-    MOZ_ENABLE_WAYLAND = "1";
+        XDG_PICTURES_DIR = "$HOME/media/photo";
-    WLR_BACKEND = "vulkan";
+        XDG_PUBLICSHARE_DIR = "$HOME/pub";
-    WLR_RENDERER = "vulkan";
+        XDG_TEMPLATES_DIR = "$HOME/media/templates";
-    XCURSOR_SIZE = "24";
+        XDG_VIDEOS_DIR = "$HOME/media/video";
-    NIXOS_OZONE_WL = "1";
+      };
-    PATH = [ "$HOME/.local/bin/:$PATH" ];
-    XDG_CACHE_HOME = "$HOME/.cache";
-    XDG_CONFIG_HOME = "$HOME/.config";
-    XDG_DATA_HOME = "$HOME/.local/share";
-    XDG_STATE_HOME = "$HOME/.local/state";
-    XDG_BIN_HOME = "$HOME/.local/bin";
-    XDG_DESKTOP_DIR = "$HOME/desktop";
-    XDG_DOCUMENTS_DIR = "$HOME/files";
-    XDG_DOWNLOAD_DIR = "$HOME/download";
-    XDG_MUSIC_DIR = "$HOME/media/music";
-    XDG_PICTURES_DIR = "$HOME/media/photo";
-    XDG_PUBLICSHARE_DIR = "$HOME/pub";
-    XDG_TEMPLATES_DIR = "$HOME/media/templates";
-    XDG_VIDEOS_DIR = "$HOME/media/video";
-  };
 
-  environment.etc."xdg/user-dirs.defaults".text = ''
+      environment.etc."xdg/user-dirs.defaults".text = ''
-    XDG_CACHE_HOME="$HOME/.cache"
+        XDG_CACHE_HOME="$HOME/.cache"
-    XDG_CONFIG_HOME="$HOME/.config"
+        XDG_CONFIG_HOME="$HOME/.config"
-    XDG_DATA_HOME="$HOME/.local/share"
+        XDG_DATA_HOME="$HOME/.local/share"
-    XDG_STATE_HOME="$HOME/.local/state"
+        XDG_STATE_HOME="$HOME/.local/state"
-    XDG_BIN_HOME="$HOME/.local/bin"
+        XDG_BIN_HOME="$HOME/.local/bin"
-    XDG_DESKTOP_DIR="$HOME/desktop"
+        XDG_DESKTOP_DIR="$HOME/desktop"
-    XDG_DOCUMENTS_DIR="$HOME/files"
+        XDG_DOCUMENTS_DIR="$HOME/files"
-    XDG_DOWNLOAD_DIR="$HOME/download"
+        XDG_DOWNLOAD_DIR="$HOME/download"
-    XDG_MUSIC_DIR="$HOME/media/music"
+        XDG_MUSIC_DIR="$HOME/media/music"
-    XDG_PICTURES_DIR="$HOME/media/photo"
+        XDG_PICTURES_DIR="$HOME/media/photo"
-    XDG_PUBLICSHARE_DIR="$HOME/pub"
+        XDG_PUBLICSHARE_DIR="$HOME/pub"
-    XDG_TEMPLATES_DIR="$HOME/media/templates"
+        XDG_TEMPLATES_DIR="$HOME/media/templates"
-    XDG_VIDEOS_DIR="$HOME/media/video"
+        XDG_VIDEOS_DIR="$HOME/media/video"
-  '';
+      '';
+    })
+  ];
 }

modules/nixos/tools/debug/default.nix

@@ -1,6 +1,9 @@
-{ pkgs, ... }: {
+{ pkgs, config, lib, ... }: {
-  programs.adb.enable = true;
-  programs.wireshark.enable = true;
 
-  environment.systemPackages = with pkgs; [ wget dconf ];
+  config = lib.mkIf (config.syscfg.make.develop) {
+    programs.adb.enable = true;
+    programs.wireshark.enable = true;
+
+    environment.systemPackages = with pkgs; [ wget dconf wireshark ];
+  };
 }

modules/nixos/tools/default.nix

@@ -1 +1,64 @@
-{ ... }: { imports = [ ./debug ./devel ]; }
+{ pkgs, ... }: {
+  imports = [ ./debug ./develop ];
+
+  # services.telegraf = {
+  #     enable = true;
+  #     extraConfig = {
+  #         agent = {
+  #             interval = "10s";
+  #             round_interval = true;
+  #             metric_batch_size = 1000;
+  #             metric_buffer_limit = 10000;
+  #             collection_jitter = "0s";
+  #             flush_interval = "10s";
+  #             flush_jitter = "0s";
+  #             precision = "";
+  #             hostname = "valinor";
+  #             omit_hostname = false;
+  #         };
+
+  #         inputs.cpu = {
+  #             percpu = true;
+  #             totalcpu = true;
+  #             collect_cpu_time = false;
+  #             report_active = false;
+  #         };
+
+  #         inputs.mem = {};
+  #         inputs.swap = {};
+  #         inputs.system = {};
+  #         inputs.disk = {
+  #             ignore_fs = ["tmpfs" "devtmpfs" "devfs"];
+  #         };
+
+  #         inputs.net = {};
+  #         inputs.netstat = {};
+
+  #         inputs.ping = {
+  #             urls = ["8.8.8.8" "8.8.4.4"];
+  #             count = 4;
+  #             interval = "60s";
+  #             binary = "${pkgs.iputils.out}/bin/ping";
+  #         };
+
+  #         inputs.internet_speed = {
+  #             interval = "2m";
+  #         };
+
+  #         inputs.net_response = {
+  #             protocol = "tcp";
+  #             address = "google.com:80";
+  #             timeout = "5s";
+  #             read_timeout = "5s";
+  #             interval = "30s";
+  #         };
+
+  #         outputs.influxdb_v2 = {
+  #             urls = [""];
+  #             token = "";
+  #             organization = "";
+  #             bucket = "";
+  #         };
+  #     };
+  # };
+}

modules/nixos/tools/devel/default.nix

@@ -1,4 +0,0 @@
-{ ... }:
-{
-
-}

modules/nixos/tools/develop/default.nix

@@ -0,0 +1,16 @@
+{ lib, config, pkgs, ... }:
+let
+  android_env = pkgs.androidenv.composeAndroidPackages {
+    platformVersions = [ "34" ];
+    abiVersions = [ "x86" "x86_64" ];
+    includeEmulator = false;
+  };
+in {
+  config = lib.mkIf (config.syscfg.make.develop) {
+    environment.systemPackages = with pkgs;
+      [
+        # android-tools
+        # androidStudioPackages.canary
+      ];
+  };
+}

modules/nixos/users/default.nix

@@ -1,21 +1,28 @@
-{ config, pkgs, ... }: {
+{ config, pkgs, lib, ... }:
+let nameValuePair = name: value: { inherit name value; };
+in {
   programs.zsh.enable = true;
   users = {
     defaultUserShell = pkgs.zsh;
-    users.${config.hostcfg.username} = {
+    users = builtins.listToAttrs (map (userConfig:
-      isNormalUser = true;
+      nameValuePair userConfig.username {
-      description = "${config.hostcfg.username}";
+        isNormalUser = true;
-      extraGroups = [
+        description = "${userConfig.username}";
-        "networkmanager"
+        extraGroups = [
-        "wheel"
+          "networkmanager"
-        "vboxsf"
+          "wheel"
-        "adbusers"
+          "dialout"
-        "lp"
+          "vboxsf"
-        "audio"
+          "adbusers"
-        "video"
+          "libvirtd"
-        "docker"
+          "kvm"
-        "wireshark"
+          "lp"
-      ];
+          "audio"
-    };
+          "video"
+          "docker"
+          "podman"
+          "wireshark"
+        ];
+      }) config.syscfg.users);
   };
 }

modules/server/default.nix

@@ -0,0 +1,15 @@
+{ config, pkgs, lib, ... }:
+let
+in {
+  imports = [ ./sops ];
+  environment.systemPackages = with pkgs; [ arion ];
+  virtualisation.arion = {
+    backend = "podman-socket";
+    projects = {
+      cloud.settings = import ./docker/cloud.nix { inherit config pkgs lib; };
+      authentik.settings =
+        import ./docker/authentik.nix { inherit config pkgs lib; };
+    };
+  };
+
+}

modules/server/docker/authentik.nix

@@ -1,18 +1,17 @@
-{ pkgs, ... }:
+{ config, pkgs, lib, ... }:
-let
+let serverCfg = config.syscfg.server;
-  HOST_DOMAIN = "helcel.net";
-  MAIL_HOST_DOMAIN = "norereply.${HOST_DOMAIN}";
-  MAIL_SERVER_DOMAIN = "mail.infomaniak.com";
-  DATA_PATH = "/media/data/";
 in {
-  project.name = "Authentik";
+  project.name = "authentik";
 
   networks = {
     internal = {
+      name = lib.mkForce "internal";
       internal = true;
-      external = false;
     };
-    external = { external = true; };
+    external = {
+      name = lib.mkForce "external";
+      internal = false;
+    };
   };
 
   services = {
@@ -46,8 +45,8 @@ in {
       restart = "unless-stopped";
       networks = [ "internal" "external" ];
       volumes = [
-        "${DATA_PATH}/authentik/media:/media"
+        "${serverCfg.dataPath}/authentik/media:/media"
-        "${DATA_PATH}/authentik/templates:/templates"
+        "${serverCfg.dataPath}/authentik/templates:/templates"
       ];
       environment = {
         "AUTHENTIK_REDIS__HOST" = "auth_redis";
@@ -56,25 +55,25 @@ in {
         "AUTHENTIK_POSTGRESQL__NAME" = "authentik";
         "AUTHENTIK_POSTGRESQL__PASSWORD" = "AUTHENTIK_DB_PASSWORD";
         "AUTHENTIK_SECRET_KEY" = "AUTHENTIK_SECRET_KEY";
-        "AUTHENTIK_EMAIL__HOST" = "${MAIL_SERVER_DOMAIN}";
+        "AUTHENTIK_EMAIL__HOST" = "${serverCfg.mailDomain}";
         "AUTHENTIK_EMAIL__PORT" = "587";
-        "AUTHENTIK_EMAIL__USERNAME" = "noreply@${MAIL_HOST_DOMAIN}";
+        "AUTHENTIK_EMAIL__USERNAME" = "noreply@${serverCfg.hostDomain}";
         "AUTHENTIK_EMAIL__PASSWORD" = "AUTHENTIK_EMAIL_PASSWORD";
         "AUTHENTIK_EMAIL__USE_TLS" = "true";
         "AUTHENTIK_EMAIL__USE_SSL" = "false";
         "AUTHENTIK_EMAIL__TIMEOUT" = "10";
-        "AUTHENTIK_EMAIL__FROM" = "sso@noreply.${MAIL_HOST_DOMAIN}";
+        "AUTHENTIK_EMAIL__FROM" = "sso@noreply.${serverCfg.hostDomain}";
       };
       labels = {
         "traefik.enable" = "true";
         "traefik.http.routers.sso.entrypoints" = "web-secure";
-        "traefik.http.routers.sso.rule" = "Host(`sso.${HOST_DOMAIN}`)";
+        "traefik.http.routers.sso.rule" = "Host(`sso.${serverCfg.hostDomain}`)";
         "traefik.http.routers.sso.tls" = "true";
         "traefik.http.services.sso.loadbalancer.server.port" = "9000";
         "traefik.docker.network" = "external";
       };
       command = "server";
-      service.ports = [
+      ports = [
         "9999:9000" # host:container
       ];
     };
@@ -85,8 +84,8 @@ in {
       restart = "unless-stopped";
       networks = [ "internal" ];
       volumes = [
-        "${DATA_PATH}/authentik/media:/media"
+        "${serverCfg.dataPath}/authentik/media:/media"
-        "${DATA_PATH}/authentik/templates:/templates"
+        "${serverCfg.dataPath}/authentik/templates:/templates"
         "/var/run/docker.sock:/var/run/docker.sock"
       ];
       environment = {

modules/server/docker/cloud.nix

@@ -1,20 +1,17 @@
-{ pkgs, ... }:
+{ config, pkgs, lib, ... }:
-let
+let serverCfg = config.syscfg.server;
-  HOST_DOMAIN = "helcel.net";
-  DB_HOST = "10.10.1.2";
-  DB_PORT = "3306";
-  MAIL_HOST_DOMAIN = "norereply.${HOST_DOMAIN}";
-  MAIL_SERVER_DOMAIN = "mail.infomaniak.com";
-  DATA_PATH = "/media/data/";
 in {
-  project.name = "Cloud";
+  project.name = "cloud";
 
   networks = {
     internal = {
+      name = lib.mkForce "internal";
       internal = true;
-      external = false;
     };
-    external = { external = true; };
+    external = {
+      name = lib.mkForce "external";
+      internal = false;
+    };
   };
 
   services = {
@@ -25,16 +22,17 @@ in {
       restart = "unless-stopped";
       networks = [ "external" ];
       volumes = [
-        "${DATA_PATH}/data/nextcloud:/var/www/html"
+        "${serverCfg.configPath}/data/nextcloud:/var/www/html"
-        "${DATA_PATH}/data/music:/media/music"
+        "${serverCfg.dataPath}/data/music:/media/music"
-        "${DATA_PATH}/data/video:/media/video"
+        "${serverCfg.dataPath}/data/video:/media/video"
-        "${DATA_PATH}/data/photo:/media/photo"
+        "${serverCfg.dataPath}/data/photo:/media/photo"
       ];
       tmpfs = [ "/tmp" ];
       labels = {
         "traefik.enable" = "true";
         "traefik.http.routers.nextcloud.entrypoints" = "web-secure";
-        "traefik.http.routers.nextcloud.rule" = "Host(`cloud.${HOST_DOMAIN}`)";
+        "traefik.http.routers.nextcloud.rule" =
+          "Host(`cloud.${serverCfg.hostDomain}`)";
         "traefik.http.routers.nextcloud.tls" = "true";
         "traefik.http.routers.nextcloud.middlewares" =
           "sts_headers,nextcloud-caldav";
@@ -60,21 +58,22 @@ in {
       environment = {
         username = "COLLABORA_USER";
         password = "COLLABORA_PASSWORD";
-        aliasgroup1 = "https://cloud.${HOST_DOMAIN}";
+        aliasgroup1 = "https://cloud.${serverCfg.hostDomain}";
-        server_name = "office.${HOST_DOMAIN}";
+        server_name = "office.${serverCfg.hostDomain}";
-        VIRTUAL_HOST = "office.${HOST_DOMAIN}";
+        VIRTUAL_HOST = "office.${serverCfg.hostDomain}";
         VIRTUAL_PORT = "9980";
         VIRTUAL_PROTO = "http";
         DONT_GEN_SSL_CERT = "true";
         RESOLVE_TO_PROXY_IP = "true";
         NETWORK_ACCESS = "internal";
         extra_params = "--o:ssl.enable=false --o:ssl.termination=true";
-        dictionaries = "en fr de jp no";
+        dictionaries = "en fr de jp";
       };
       labels = {
         "traefik.enable" = "true";
         "traefik.http.routers.collabora.entrypoints" = "web-secure";
-        "traefik.http.routers.collabora.rule" = "Host(`office.${HOST_DOMAIN}`)";
+        "traefik.http.routers.collabora.rule" =
+          "Host(`office.${serverCfg.hostDomain}`)";
         "traefik.http.routers.collabora.tls" = "true";
       };
     };
@@ -85,15 +84,15 @@ in {
       restart = "unless-stopped";
       networks = [ "external" ];
       volumes = [
-        "${DATA_PATH}/ether/etherpad/data:/opt/etherpad-lite/var"
+        "${serverCfg.dataPath}/ether/etherpad/data:/opt/etherpad-lite/var"
-        "/${DATA_PATH}/ether/etherpad/APIKEY.txt:/opt/etherpad-lite/APIKEY.txt"
+        "${serverCfg.dataPath}/ether/etherpad/APIKEY.txt:/opt/etherpad-lite/APIKEY.txt"
       ];
       environment = {
         NODE_ENV = "production";
         TITLE = "Helcel-Pad";
         DB_TYPE = "mysql";
-        DB_HOST = DB_HOST;
+        DB_HOST = serverCfg.dbHost;
-        DB_PORT = DB_PORT;
+        DB_PORT = serverCfg.dbPort;
         DB_NAME = "etherpad";
         DB_USER = "ETHERPAD_DB_USER";
         DB_PASS = "ETHERPAD_DB_PASSWORD";
@@ -107,7 +106,8 @@ in {
       labels = {
         "traefik.enable" = "true";
         "traefik.http.routers.etherpad.entrypoints" = "web-secure";
-        "traefik.http.routers.etherpad.rule" = "Host(`pad.${HOST_DOMAIN}`)";
+        "traefik.http.routers.etherpad.rule" =
+          "Host(`pad.${serverCfg.hostDomain}`)";
         "traefik.http.routers.etherpad.tls" = "true";
       };
     };
@@ -118,13 +118,13 @@ in {
       restart = "unless-stopped";
       networks = [ "external" "internal" ];
       volumes = [
-        "${DATA_PATH}/ether/etherpad/data:/opt/etherpad-lite/var"
+        "${serverCfg.dataPath}/ether/etherpad/data:/opt/etherpad-lite/var"
-        "/${DATA_PATH}/ether/etherpad/APIKEY.txt:/opt/etherpad-lite/APIKEY.txt"
+        "${serverCfg.dataPath}/ether/etherpad/APIKEY.txt:/opt/etherpad-lite/APIKEY.txt"
       ];
       environment = {
         NODE_ENV = "production";
         TITLE = "Helcel-Calc";
-        REDIS_PORT_6379_TCP_ADDR = "redis";
+        REDIS_PORT_6379_TCP_ADDR = "ethercalc-redis";
         REDIS_PORT_6379_TCP_PORT = "6379";
         ADMIN_PASSWORD = "ETHERPAD_ADMIN_PASSWORD";
         SKIN_VARIANTS = "super-dark-toolbar light-editor dark-background";
@@ -132,7 +132,8 @@ in {
       labels = {
         "traefik.enable" = "true";
         "traefik.http.routers.ethercalc.entrypoints" = "web-secure";
-        "traefik.http.routers.ethercalc.rule" = "Host(`calc.${HOST_DOMAIN}`)";
+        "traefik.http.routers.ethercalc.rule" =
+          "Host(`calc.${serverCfg.hostDomain}`)";
         "traefik.http.routers.ethercalc.tls" = "true";
       };
     };
@@ -142,7 +143,7 @@ in {
       container_name = "ethercalc-redis";
       restart = "unless-stopped";
       networks = [ "internal" ];
-      volumes = [ "${DATA_PATH}/ether/ethercalc/redis:/data" ];
+      volumes = [ "${serverCfg.dataPath}/ether/ethercalc/redis:/data" ];
       environment = { };
       labels = { "traefik.enable" = "false"; };
     };

modules/server/docker/sample.nix

@@ -1,20 +1,17 @@
-{ pkgs, ... }:
+{ config, pkgs, lib, ... }:
-let
+let serverCfg = config.syscfg.server;
-  HOST_DOMAIN = "helcel.net";
-  DB_HOST = "10.10.1.2";
-  DB_PORT = "3306";
-  MAIL_HOST_DOMAIN = "norereply.${HOST_DOMAIN}";
-  MAIL_SERVER_DOMAIN = "mail.infomaniak.com";
-  DATA_PATH = "/media/data/";
 in {
-  project.name = "NEW";
+  project.name = "name";
 
   networks = {
     internal = {
+      name = lib.mkForce "internal";
       internal = true;
-      external = false;
     };
-    external = { external = true; };
+    external = {
+      name = lib.mkForce "external";
+      internal = false;
+    };
   };
 
   services = {

modules/server/docker/traefik.nix

@@ -0,0 +1,81 @@
+{ config, pkgs, ... }: {
+  project.name = "traefik";
+
+  networks = {
+    internal = {
+      name = lib.mkForce "internal";
+      internal = true;
+    };
+    external = {
+      name = lib.mkForce "external";
+      internal = false;
+    };
+  };
+
+  services = {
+
+    traefik.service = {
+      image = "traefik:latest";
+      container_name = "traefik";
+      restart = "unless-stopped";
+      networks = [ "internal" "external" ];
+      command = [
+        "--api"
+        "--providers.docker=true"
+        "--entrypoints.web.address=:80"
+        "--entrypoints.web-secure.address=:443"
+      ];
+      port = [ "443" "80" ];
+      volumes = [
+        "/var/run/docker.sock:/var/run/docker.sock:ro"
+        "${serverCfg.configPath}/traefik/traefik.yaml:/etc/traefik/traefik.yaml"
+        "${serverCfg.configPath}/traefik/access.log:/etc/traefik/access.log"
+        "${serverCfg.configPath}/traefik/acme.json:/acme.json"
+      ];
+      environment = {
+        "INFOMANIAK_ACCESS_TOKEN" = config.sops.secrets.INFOMANIAK_API_KEY.path;
+      };
+      labels = { "traefik.enable" = "false"; };
+    };
+
+    matomo.service = {
+      image = "matomo:latest";
+      container_name = "matomo";
+      restart = "unless-stopped";
+      networks = [ "external" ];
+      volumes = [
+        "/etc/localtime:/etc/localtime:ro"
+        "${serverCfg.configPath}/matomo:/var/www/html/config:rw"
+        "${serverCfg.configPath}/traefik/access.log:/var/log/taccess.log:ro"
+      ];
+      environment = { };
+      labels = {
+        "traefik.http.routers.matomo.rule" =
+          "Host(`matomo.${serverCfg.hostDomain}`)";
+        "traefik.http.routers.matomo.entrypoints" = "web-secure";
+        "traefik.http.routers.matomo.tls" = "true";
+      };
+    };
+
+    searx.service = {
+      image = "searxng/searxng:latest";
+      container_name = "searx";
+      restart = "unless-stopped";
+      networks = [ "external" ];
+      volumes = [ "/etc/localtime:/etc/localtime:ro" ];
+      environment = {
+        "BASE_URL" = "https://searx.${serverCfg.hostDomain}";
+        "AUTOCOMPLETE" = "true";
+        "INSTANCE_NAME" = "searx${serverCfg.shortName}";
+      };
+      labels = {
+        "traefik.http.routers.matomo.rule" =
+          "Host(`searx.${serverCfg.hostDomain}`)";
+        "traefik.http.routers.matomo.entrypoints" = "web-secure";
+        "traefik.http.routers.matomo.tls" = "true";
+      };
+    };
+
+  };
+}
+

modules/server/sops/default.nix

@@ -0,0 +1,10 @@
+{ config, pkgs, ... }: {
+  sops.secrets.INFOMANIAK_API_KEY = { sopsFile = ./server.yaml; };
+  sops.secrets."${config.syscfg.hostname}_ssh_pub" = {
+    mode = "0400";
+    owner = config.users.users.${config.syscfg.defaultUser}.name;
+    group = config.users.users.${config.syscfg.defaultUser}.group;
+  };
+  sops.secrets."${config.syscfg.hostname}_wg_priv" = { };
+  sops.secrets."${config.syscfg.hostname}_wg_pub" = { };
+}

modules/server/sops/server.yaml

@@ -0,0 +1,68 @@
+INFOMANIAK_API_KEY: ENC[AES256_GCM,data:QhjQoCMxogXAPtvUbf/EWkqsFAndn73LBuTqj5essjruekynH287D/CYN/cwfcnDqZoh6Z4A9p08uUmXzqmTiralAhsCoc+Ljb/monmsruc=,iv:8rMGNc9398jnFXZm34fOht6fMNDAcDZ68B1jwoQPn2Q=,tag:ZlQnPaxkCktpwiC6HzmFVg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpZk1VY3NEZmRkS0J6dU03
+            OUtETWpHL2hLN09kRytNUEhmVnA5WW9yVXlNCmZaZnQ2YUlMMmlrZ2dEZDVFMHA5
+            OUpqOTJJbHVVREtpSFUyaDJDbXltaTgKLS0tIFY0ZkF3Ym5oeHViN3J4eW4vSVYz
+            QkhuU0NLWElyVXpZd2ZpOHhwam04R28KFuaI35e8pB25M2dlP19gApso12ZYJ3ld
+            BpMnp97ShX0I8bZRIYxSHpSrB/J+tt1V4pfGdJq7uWZM7XacPy666A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ms8f0ysv6vakxepvt69fejczs6tddexepesdv4rkgtheehj3nu4sc6290s
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuZXNjRzJsdFpTdDZhSkRB
+            eW1qSStnZHN5Tzh3bFA1azZIRk42V1RzSTJJCi9MV0k5ZXNQOWJFYnlXdnB3azBL
+            NzNldkFLWlEyT01MeWlFU3RKODU4dWcKLS0tIFJXL1ZsNDgydTgxVGRMYWxyQTNT
+            K1M0TDd1eGd1V3pOcjl1M1VrdDUvbG8KpsWlrr14MOh/8mG+rXpswPPFE3VnpKGt
+            03DWUII3+MMEWLJPLxkNJ9BzCm4Kl1QNHSbJ7Ex6df0b7nB6Ed6Hvw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5U1VjTjlIMTdLRFQ5R1Av
+            SVBLMFZtV3ppK2VXWjdYelNGTGFOZUJaMndBCjYyZ0IveXFiVDlSUEtNOXk2L3g3
+            UmFIRE1GMEs2QVhUcFJkTHpCWmhhbG8KLS0tIG94NStMUnFZRTRsK2w4cDd4Rms5
+            M1MwTEtJNEFDdjRLVFRseThxNGJUQ0kKKN7QX9qUojNQBknbInaXslaKsAAhEj5y
+            QMXAU6TxlHMv+wZy2RQwMe/zE7RP24TypnX894iV0usTHujyxvfk3w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1sxzuhh2fcd4pmaz4mdqq95t683d32ft22w9t2r7pk258u0s8wymsqdj7lg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrUHFYMWdVczRPdEFSbFR5
+            VmcxeEU4YWxwRTlDUkRkNVY0dFh5cjVUNjNnCkRSblNaS214dkdrd3JnNE5rZnR3
+            S0JVeXova1h2VnB2ODY0SUYxZm45TjAKLS0tIFN1QXFyTkt3SmV0UVhGMlMxTmpN
+            VW83cnd2TnQwWlVCUnpzZ29NRE1SekUKBGVCaijugxR6eSxvk19nncR9X6bmSSUq
+            VoxtHBkJbz/4mcQ/SUb4Wv1Rt5875tLWygS7qKmh8jzoP7JI4E9qWQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-05-08T16:05:46Z"
+    mac: ENC[AES256_GCM,data:X6AUVWJRcwH45W9NoQxI8Lp6l+5RFpgCNB6cdUZZODHDdTUMt9a6wr9YfU56C7QkdlxXdj6xCOCscJtw/WY2Y+XchWXaUVZZsoZ9xUo28aksUtHSyE9WJBHCeSqss79IW6k/GeDPiDOfz4om+udDvtdpyKbtvbw2a+K5st+62d4=,iv:REGTavU8DkalUbfO1J2+VccYnRRrOqstSFq/RU7Co5Q=,tag:2t8mwqa76kVQyeWS85zXsA==,type:str]
+    pgp:
+        - created_at: "2024-05-08T15:46:52Z"
+          enc: |-
+            -----BEGIN PGP MESSAGE-----
+
+            hQIMA6R3Y9nD7qMBAQ//bYK5gdxv8fNvG6P4GrD27gQRQXhLGF2+hS54sqEqjeN8
+            NZpHVbNNRR3AggOkT7QY1JO8bOhWscefH1vvBmBuODzh5Fw42t4zNPEDjWZEetxa
+            rClbLEvo7Kz8UKCNb9JIeYx7cr8sPWCmg4GvV1wGjhjr+u5ovuheORnHl+qoLsqv
+            P12PV7VzwC52v92GWiu9LRJqfqZra5GjUXGVXzBcZ9i6CnUDejzssWjhO/fmzKum
+            GbGIi9sf3RmVYsUASDgRBmVAZC3KF7RLi0L6WY0etRocAaWSAgnU1lZ04E8ZtLjk
+            DlCtIpreJ1H0Ym+5EXB94PG0KZjayxKc20YDQ+yYwwSmiCVaUCLlYX2BOoncUYFF
+            MxVgWYwn14R5jyGbh4NyiBxPGHvIUx5RCIo70pMgS6W5ALZYTcNDLF82mj1xTOTy
+            bcuaa7FCuXJif457LCe5TcAa5WYDgKX8pUKzFRhWIckcGwgFCUB0Z7+L9L7F0yt/
+            YZd71cY0Lxlwi61CnWgZZMx2FFpHyBCEmF1A180KUtB1jSkS/AVmlM2z9I0QsR62
+            fTFIaqimPMjUzbuTs0QjUXf8OJZo0/cwo9XeGyCBtJTg7cLdsOFouqfvXhvkdCrR
+            xCLE2Ke5jwmoPKs1t+YpwMMzB57j/rluZCgiz45w7YDXKf4gEp2ra9siFiC/y9PS
+            XgEPymUiDZY0w9S5oGr94cNc6LQId16Zgt1vWHLzgg8QZqkxLTBjUXXc7aoCISQp
+            AwUE62KJucVvWjB3kcgDbNvaDWWC5O48zUavmzkmmP1sqKf0gO/XG52PDG/DF3Y=
+            =cs0r
+            -----END PGP MESSAGE-----
+          fp: 4E241635F8EDD2919D2FB44CA362EA0491E2EEA0
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1

modules/shared/colors/default.nix

@@ -1,9 +1,9 @@
 { config, ... }: {
-  imports = [ ./sorahiro_soft.nix ];
+  imports = [ ./sorahiro.nix ];
 
-  colorScheme.colors.border-radius = "#8";
+  colorScheme.palette.border-radius = "#8";
-  colorScheme.colors.border-width = "#2";
+  colorScheme.palette.border-width = "#2";
-  colorScheme.colors.gaps-screen = "#8";
+  colorScheme.palette.gaps-screen = "#8";
-  colorScheme.colors.gaps-window = "#4";
+  colorScheme.palette.gaps-window = "#4";
-  colorScheme.colors.gaps-bar = "#32";
+  colorScheme.palette.gaps-bar = "#32";
 }

modules/shared/colors/sorahiro.nix

@@ -0,0 +1,67 @@
+{ nix-colors, ... }: 
+let use_pastelle = true;
+in{
+  # usage:  a = "#${config.colorScheme.palette.base00}";
+
+  colorScheme = {
+    slug = "sorahiro";
+    name = "sorahiro";
+    author = "Soraefir @ Helcel";
+    variant = "dark";
+    palette = rec {
+      # Format: Name, Pantone, RAL
+      base00 = "#000000"; # Black / 419C / 9005
+      base01 = "#060a0f"; # Rich Black / 532C / 9005
+      base02 = "#212c38"; # Yankees Blue / 433C / 5011
+      base03 = "#3f5268"; # Police Blue  / 432C / 5000
+      base04 = "#617b9a"; # Slate Gray  / 5415C / 5014
+      base05 = "#90a7c1"; # Pewter Blue / 535C / 5024
+      base06 = "#c9d3df"; # Columbia Blue / 538C / 7047
+      base07 = "#fcfcfc"; # Lotion / 663C / 9016
+      alt00 = "#000000"; # Black / 419C / 9005
+      alt01 = "#0c0906"; # Vampire Black  / 419C / 9005
+      alt02 = "#312920"; # Pine Tree / 440C / 6022
+      alt03 = "#5b4e3e"; # Olive Drab Camouflage / 411C / 7013
+      alt04 = "#887660"; # Shadow / 404C / 7002
+      alt05 = "#b8a083"; # Pale Taupe / 480C / 1019
+      alt06 = "#e1cfb9"; # Desert Sand / 482C / 1015
+      alt07 = "#fcfcfc"; # Lotion / 663C / 9016
+
+      base08 = if use_pastelle then low08 else high08;
+      base09 = if use_pastelle then low09 else high09;
+      base0A = if use_pastelle then low0A else high0A;
+      base0B = if use_pastelle then low0B else high0B;
+      base0C = if use_pastelle then low0C else high0C;
+      base0D = if use_pastelle then low0D else high0D;
+      base0E = if use_pastelle then low0E else high0E;
+      base0F = if use_pastelle then low0F else high0F;
+
+      high08 = "#f09732"; # Deep Saffron / 804C / 1033
+      high09 = "#f2d831"; # Dandelion / 114C / 1016
+      high0A = "#98f12f"; # Green Lizard  / 375C / 6038
+      high0B = "#34f4f0"; # Fluorescent Blue  / 3252C / 6027
+      high0C = "#3193f5"; # Brilliant Azure / 2727C / 5015
+      high0D = "#c156f6"; # Blue-Violet / 2592C / 4006
+      high0E = "#f62ac0"; # Royal Pink / 807C / 4010
+      high0F = "#f42060"; # Deep Carmine Pink / 1925C / 3018
+      alt_high08 = "#f66824"; # Orange-Red / 165C / 2008
+      alt_high0B = "#41f3a4"; # Eucalyptus / 3395C / 6037
+      alt_high0C = "#2abef8"; # Spiro Disco Ball / 298C / 5012
+      alt_high0D = "#837ff5"; # Violets Are Blue / 814C / 4005
+
+      low08 = "#ffac56"; # Rajah  / 150C / 1017
+      low09 = "#feea74"; # Shandy  / 127C / 1016
+      low0A = "#bffe8a"; # Menthol  / 374C / 6018
+      low0B = "#4cfefa"; # Electric Blue / 3252C / 6027
+      low0C = "#62acfd"; # Blue Jeans / 279C / 5012
+      low0D = "#9b9bfd"; # Maximum Blue Purple  / 2715C / 4005
+      low0E = "#fe9bda"; # Lavender Rose / 223C / 4003
+      low0F = "#fc8999"; # Tulip / 1775C / 3014
+      alt_low08 = "#fe946a"; # Atomic Tangerine / 811C / 1034
+      alt_low0B = "#87febf"; # Aquamarine / 353C / 6019
+      alt_low0C = "#38c3fd"; # Picton Blue / 298C / 5012
+      alt_low0D = "#dca2ff"; # Mauve / 2572C / 4005
+
+    };
+  };
+}