Update Valinor and vscodium

flake.nix

@@ -36,31 +36,16 @@
     };
   };
 
-  outputs =
+  outputs = inputs:
-    inputs:
     let
       lib = inputs.nixpkgs.lib;
-      supportedSystems = [
+      linuxSystems = [ "x86_64-linux" "aarch64-linux" ];
-        "x86_64-linux"
+      supportedSystems = linuxSystems ++ [ "x86_64-darwin" "aarch64-darwin" ];
-        "aarch64-linux"
-        "x86_64-darwin"
-        "aarch64-darwin"
-      ];
-      linuxSystems = [
-        "x86_64-linux"
-        "aarch64-linux"
-      ];
-      forEachSystem = lib.genAttrs;
       overlays = import ./overlays { inherit inputs; };
-      mkPkgs =
+      mkPkgs = system:
-        system:
         import inputs.nixpkgs {
           inherit system;
-          overlays = overlays ++ [
+          inherit overlays;
-            (final: prev: {
-              custom = import ./packages { pkgs = final; };
-            })
-          ];
           config.allowUnfree = true;
         };
       gen = import ./generator.nix { inherit inputs mkPkgs supportedSystems; };
@@ -74,40 +59,14 @@
           && builtins.pathExists (systemsDir + "/${name}/cfg.nix")
         ) (builtins.readDir systemsDir)
       );
-      hostsByType =
+      hostsByType = systemType:
-        systemType:
+        lib.filter (host: ((import (systemsDir + "/${host}/cfg.nix")).syscfg.type or "nixos") == systemType) systemNames;
-        lib.filter (host: (import (systemsDir + "/${host}/cfg.nix")).syscfg.type == systemType) systemNames;
+      generateHosts = systemType:
-      generateHosts =
+        lib.genAttrs (hostsByType systemType) (host: gen.generate { inherit host; });
-        systemType: lib.genAttrs (hostsByType systemType) (host: gen.generate { inherit host; });
+    in {
-      flattenPackages =
-        prefix: attrs:
-        lib.concatMapAttrs (
-          name: value:
-          let
-            packageName = lib.concatStringsSep "-" (prefix ++ [ name ]);
-            defaultPackageName = lib.concatStringsSep "-" prefix;
-          in
-          if lib.isDerivation value then
-            {
-              "${if name == "default" && prefix != [ ] then defaultPackageName else packageName}" = value;
-            }
-          else if lib.isAttrs value then
-            flattenPackages (if name == "default" then prefix else prefix ++ [ name ]) value
-          else
-            { }
-        ) attrs;
-      mkPackages =
-        system:
-        let
-          pkgs = mkPkgs system;
-        in
-        lib.optionalAttrs pkgs.stdenv.isLinux (flattenPackages [ ] pkgs.custom);
-    in
-    {
-      packages = forEachSystem linuxSystems mkPackages;
       devShells = import ./shells {
         inherit inputs mkPkgs;
-        supportedSystems = linuxSystems;
+        systems = linuxSystems;
       };
 
       nixosConfigurations = generateHosts "nixos";

generator.nix

@@ -1,12 +1,6 @@
+{ inputs, mkPkgs, supportedSystems, ... }:
 {
-  inputs,
+  generate = { host }:
-  mkPkgs,
-  supportedSystems,
-  ...
-}:
-{
-  generate =
-    { host }:
     let
       syscfg = import ./systems/${host}/cfg.nix;
       nameValuePair = name: value: { inherit name value; };
@@ -18,85 +12,76 @@
           home = "x86_64-linux";
         }
         .${systemType} or (throw "Unsupported system type: ${systemType}");
-      system = syscfg.syscfg.system or defaultSystem;
+      requestedSystem = syscfg.syscfg.system or defaultSystem;
-      checkedSystem =
+      system =
-        if builtins.elem system supportedSystems then
+        if builtins.elem requestedSystem supportedSystems then
-          system
+          requestedSystem
         else
-          throw "Unsupported system '${system}' for host '${host}'";
+          throw "Unsupported system '${requestedSystem}' for host '${host}'";
-      pkgs = mkPkgs checkedSystem;
+      users = syscfg.syscfg.users or [ ];
+      mkLinuxHomeImports =
+        userConfig:
+        [
+          ./modules/shared/syscfg
+          ./modules/shared/colors
+          ./modules/home
+          syscfg
+          { usercfg = userConfig; }
+          inputs.nix-colors.homeManagerModule
+          inputs.sops-nix.homeManagerModules.sops
+        ];
+      mkDarwinHomeImports = [ inputs.nix-colors.homeManagerModule inputs.sops-nix.homeManagerModules.sops ];
+      mkHomeUsers = importsForUser:
+        builtins.listToAttrs (
+          map (userConfig: nameValuePair userConfig.username { imports = importsForUser userConfig; }) users
+        );
+      mkHomeManager = importsForUser: {
+        home-manager.useGlobalPkgs = true;
+        home-manager.useUserPackages = true;
+        home-manager.extraSpecialArgs = { inherit inputs; };
+        home-manager.users = mkHomeUsers importsForUser;
+      };
+      sharedModules = [
+        ./modules/shared/syscfg
+        ./modules/shared/sops
+        syscfg
+        ./systems/${host}
+      ];
+      defaultUser =
+        builtins.head (
+          builtins.filter (user: user.username == syscfg.syscfg.defaultUser) users
+          ++ [ { username = syscfg.syscfg.defaultUser; } ]
+        );
     in
     (
       {
         "nixos" = inputs.nixpkgs.lib.nixosSystem {
-          system = checkedSystem;
+          inherit system;
           specialArgs = { inherit inputs; };
-          modules = [
+          modules = sharedModules ++ [
-            ./modules/shared/syscfg
-            ./modules/shared/sops
             ./modules/nixos
-            syscfg
-            ./systems/${host}
             inputs.sops-nix.nixosModules.sops
             inputs.home-manager.nixosModules.home-manager
 
             inputs.nixos-wsl.nixosModules.wsl
             inputs.vscode-server.nixosModules.default
 
-            {
+            (mkHomeManager mkLinuxHomeImports)
-              home-manager.useGlobalPkgs = true;
-              home-manager.useUserPackages = true;
-              home-manager.extraSpecialArgs = { inherit inputs; };
-              home-manager.users = builtins.listToAttrs (
-                map (
-                  userConfig:
-                  nameValuePair userConfig.username {
-                    imports = [
-                      ./modules/shared/syscfg
-                      ./modules/shared/colors
-                      ./modules/home
-                      syscfg
-                      { usercfg = userConfig; }
-                      inputs.nix-colors.homeManagerModule
-                      inputs.sops-nix.homeManagerModules.sops
-                    ];
-                  }
-                ) (syscfg.syscfg.users or [ ])
-              );
-            }
           ];
         };
 
         "macos" = inputs.darwin.lib.darwinSystem {
-          system = checkedSystem;
+          inherit system;
-          modules = [
+          modules = sharedModules ++ [
-            ./modules/shared/syscfg
-            ./modules/shared/sops
-            syscfg
-            ./systems/${host}
             inputs.sops-nix.darwinModules.sops
             inputs.home-manager.darwinModules.home-manager
-            {
+            (mkHomeManager (_: mkDarwinHomeImports))
-              home-manager.useGlobalPkgs = true;
-              home-manager.useUserPackages = true;
-              home-manager.extraSpecialArgs = { inherit inputs; };
-              home-manager.users = builtins.listToAttrs (
-                map (
-                  userConfig:
-                  nameValuePair userConfig.username {
-                    imports = [
-                      inputs.nix-colors.homeManagerModule
-                      inputs.sops-nix.homeManagerModules.sops
-                    ];
-                  }
-                ) (syscfg.syscfg.users or [ ])
-              );
-            }
           ];
         };
         "home" = inputs.home-manager.lib.homeManagerConfiguration {
-          inherit pkgs;
+          pkgs = mkPkgs system;
-          modules = [ ./modules/home ];
+          extraSpecialArgs = { inherit inputs; };
+          modules = mkLinuxHomeImports defaultUser;
         };
         _ = throw "Unsupported system";
       }

modules/home/base/default.nix

@@ -1,12 +1,16 @@
-{ lib, config, ... }: {
+{ lib, config, pkgs, ... }: {
 
   #environment.sessionVariables.SOPS_AGE_KEY_FILE = keyFilePath;
-  systemd.user.startServices = "sd-switch";
+  systemd.user.startServices = lib.mkIf pkgs.stdenv.isLinux "sd-switch";
   programs.home-manager.enable = true;
 
   home = {
     username = "${config.usercfg.username}";
-    homeDirectory = "/home/${config.usercfg.username}";
+    homeDirectory =
+      if pkgs.stdenv.isDarwin then
+        "/Users/${config.usercfg.username}"
+      else
+        "/home/${config.usercfg.username}";
 
     stateVersion = "26.05";
   };

modules/home/cli/fastfetch/default.nix

@@ -28,7 +28,7 @@ let
   logoColor1 = p.base07;
   logoColor2 = p.base07;
   # ─────────────────────────────────────────────────────────────────────────
-in {
+in lib.mkIf config.syscfg.make.gui {
   home.packages = with pkgs; [ fastfetch ];
   xdg.configFile."neofetch/config.conf".source = ./config.conf;
   xdg.configFile."fastfetch/logo.txt".source = ./logo.txt;

modules/home/cli/kitty/default.nix

@@ -1,5 +1,5 @@
-{ config, ... }: {
+{ config, lib, ... }: {
-  programs.kitty = {
+  programs.kitty = lib.mkIf config.syscfg.make.gui {
     enable = true;
     settings = {
       foreground = "#${config.colorScheme.palette.base07}";

modules/home/cli/other/default.nix

@@ -1,16 +1,16 @@
-{ pkgs, ... }: {
+{ config, lib, pkgs, ... }: {
   home.packages = with pkgs; [
     ripgrep
     unzip
 
     socat
 
-    appimage-run
-
     cbonsai
     pipes-rs
     cmatrix
     #cava
     sl
+  ] ++ lib.optionals (config.syscfg.make.gui || config.syscfg.make.develop) [
+    pkgs.appimage-run
   ];
 }

modules/home/gui/apps/develop/vscodium/default.nix

@@ -1,18 +1,22 @@
-{ lib, config, pkgs, ... }: {
+{ lib, config, pkgs, ... }: 
+let
+  exts = with pkgs.vscode-extensions; [
+    bbenoist.nix
+    esbenp.prettier-vscode
+
+    anthropic.claude-code
+    # openai.codex
+  ];
+in {
 
   config = lib.mkIf (config.syscfg.make.develop) {
     programs.vscodium = {
       enable = true;
-      #profiles.default = {
+      profiles.default.extensions = exts;
-        profiles.default.extensions = with pkgs.vscode-extensions; [
+    };
-          bbenoist.nix
+    programs.antigravity = {
-          esbenp.prettier-vscode
+      enable = true;
-          golang.go
+      profiles.default.extensions = exts;
-          ms-python.vscode-pylance
-          ms-vscode.cpptools
-          dbaeumer.vscode-eslint
-        ];
-      #};
     };
   };
 }

modules/home/gui/apps/images/default.nix

@@ -4,8 +4,9 @@
     programs.imv.enable = true;
 
     programs.obs-studio.enable = true;
+    services.jellyfin-mpv-shim.enable = true;
 
-    home.packages = with pkgs; [ jellyfin-mpv-shim krita gimp darktable ];
+    home.packages = with pkgs; [ krita gimp darktable ];
   };
 
 }

modules/home/gui/apps/mpv/default.nix

@@ -6,13 +6,11 @@ in{
   config = lib.mkIf (config.syscfg.make.gui) {
     programs.mpv = {
       enable = true;
-      scripts = with pkgs.mpvScripts; [ mpris modernz ];
+      scripts = with pkgs.mpvScripts; [ mpris ];
       config = {
         hwdec ="auto";
         profile ="high-quality";
         ytdl-format = "bestvideo+bestaudio";
-        osc ="no";
-
       };
 
       bindings =

modules/home/wayland/apps/kanshi/default.nix

@@ -18,7 +18,7 @@ let
   aocT = "AOC 24E1W1 GNSKCHA086899";
   aocB = "AOC 24E1W1 GNSKBHA080346";
   lgM = "LG Electronics LG ULTRAGEAR+ 511NTDVGC194";
-
+  valinorM = "Lenovo Group Limited *";
 in {
 
   config = lib.mkIf (config.usercfg.wm == "Wayland") {
@@ -42,17 +42,9 @@ in {
           mode = "1920x1080@60.000";
         };}
         {output = baseOutput//{
-          criteria = "LG UNKNOWN_TBD";
+          criteria = "Lenovo Group Limited *";
-          mode = "1920x1080@144.000";
-        };}
-        {output = baseOutput//{
-          criteria = "LG Display 0x060A Unknown";
           mode = "1920x1080@60.020";
         };}
-        {output = baseOutput//{
-          criteria = "CEX CX133 0x00000001";
-          mode = "2560x1600@59.972";
-        };}
         {output = baseOutput//{
           criteria = "AOC 16G3 1DDP7HA000348";
           mode = "1920x1080@144.000";
@@ -99,7 +91,7 @@ in {
           ];
         };}
         {profile = {
-          name = "tower_0";
+          name = "tower_01";
           outputs = [
             {
               criteria = "AOC 24E1W1 GNSKCHA086899";
@@ -134,54 +126,33 @@ in {
            ];
         };}
         {profile = {
-          name = "tower_1";
+          name = "valinor00";
           outputs = [
             {
-              criteria = "AOC 24E1W1 GNSKCHA086899";
+              criteria = "Lenovo Group Limited *";
-              position = "0,0";
-            }
-            {
-              criteria = "AOC 24E1W1 GNSKBHA080346";
-              position = "0,0";
-            }
-            {
-              criteria = "LG UNKNOWN_TBD";
               position = "0,0";
             }
           ];
-        };}
+          exec = [
-        {profile = {
+            "${pkgs.writeShellScript "kanshi-hyprland-init" ''
-          name = "laptop_0";
+              #!/usr/bin/env bash
-          outputs = [{
+              ${pkgs.hyprland}/bin/hyprctl eval '
-            criteria = "LG Display 0x060A Unknown";
+                hl.workspace_rule({ workspace = "1", monitor = "eDP-1", default = true })
-            position = "0,0";
+                hl.workspace_rule({ workspace = "2", monitor = "eDP-1", default = true })
-          }];
+                hl.workspace_rule({ workspace = "3", monitor = "eDP-1", default = true })
-        };}
+                hl.workspace_rule({ workspace = "4", monitor = "eDP-1", default = true })
-        {profile = {
+                hl.workspace_rule({ workspace = "5", monitor = "eDP-1", default = true })
-          name = "laptop_1";
+                hl.workspace_rule({ workspace = "6", monitor = "eDP-1", default = true })
-          outputs = [
+                hl.workspace_rule({ workspace = "7", monitor = "eDP-1", default = true })
-            {
+                hl.workspace_rule({ workspace = "8", monitor = "eDP-1", default = true })
-              criteria = "CEX CX133 0x00000001";
+                hl.workspace_rule({ workspace = "9", monitor = "eDP-1", default = true })
-              position = "0,0";
+              '
-            }
+              ${pkgs.hyprland}/bin/hyprctl eval 'hl.dispatch(hl.dsp.focus({ monitor = "eDP-1" })); hl.dispatch(hl.dsp.focus({ workspace = "1" }));'
-            {
+          
-              criteria = "LG Display 0x060A Unknown";
+            ''}"
-              position = "2560,0";
+            "${pkgs.awww}/bin/awww restore"
-            }
+            (moveOrOpenBar 0)
-          ];
+           ];
-        };}
-        {profile = {
-          name = "laptop_2";
-          outputs = [
-            {
-              criteria = "AOC 16G3 1DDP7HA000348";
-              position = "0,0";
-            }
-            {
-              criteria = "LG Display 0x060A Unknown";
-              position = "1920,0";
-            }
-          ];
         };}
       ];
     };

modules/home/wayland/hyprland/config.nix

@@ -31,7 +31,6 @@
     sleep 2
     keepassxc &
     firefox &
-    jellyfin-mpv-shim &
     easyeffects --gapplication-service &
 
     sleep 2

modules/home/xorg/bspwm/config.nix

@@ -109,7 +109,6 @@
 
       telegram-desktop &
       nextcloud &
-      jellyfin-mpv-shim &
       #flameshot &
 
       sleep 2

modules/nixos/system/default.nix

@@ -1,5 +1,5 @@
 { config, lib, ... }: {
-  imports = [ ./dbus ./fonts ./hw ./locale ./network ./nix ./security ./xdg ];
+  imports = [ ./dbus ./docs ./fonts ./hw ./locale ./network ./nix ./security ./xdg ];
 
   services.journald.extraConfig = ''
     SystemMaxUse=512M

modules/nixos/system/docs/default.nix

@@ -0,0 +1,14 @@
+{ config, lib, ... }:
+let
+  cfg = config.syscfg.make;
+  withDocs = cfg.gui || cfg.develop || cfg.serverExtras;
+in
+{
+  documentation = lib.mkIf (!withDocs) {
+    enable = false;
+    man.enable = false;
+    info.enable = false;
+    doc.enable = false;
+    nixos.enable = false;
+  };
+}

modules/nixos/system/fonts/default.nix

@@ -1,6 +1,6 @@
-{ pkgs, ... }: {
+{ config, lib, pkgs, ... }: {
 
-  fonts = {
+  fonts = lib.mkIf (config.syscfg.make.gui || config.syscfg.make.serverExtras) {
     enableDefaultPackages = false;
     fontDir.enable = true;
 

modules/nixos/system/hw/base/default.nix

@@ -1,5 +1,5 @@
-{ lib, ... }: {
+{ config, lib, ... }: {
-  services.fwupd.enable = true;
+  services.fwupd.enable = lib.mkDefault (config.syscfg.make.gui || config.syscfg.make.power);
   hardware.enableAllFirmware = false;
-  services.power-profiles-daemon.enable = lib.mkDefault true;
+  services.power-profiles-daemon.enable = lib.mkDefault config.syscfg.make.gui;
 }

modules/nixos/system/hw/fs/default.nix

@@ -1,6 +1,9 @@
-{ pkgs, ... }: {
+{ config, lib, pkgs, ... }:
+let
+  hasNfsFileSystems = lib.any (fs: fs.fsType == "nfs" || fs.fsType == "nfs4") (lib.attrValues config.fileSystems);
+in {
   services.fstrim.enable = true; # Improves SSD life
-  services.gvfs.enable = true; # User Mounted FS
+  services.gvfs.enable = config.syscfg.make.gui; # User Mounted FS
 
-  environment.systemPackages = with pkgs; [ nfs-utils ];
+  environment.systemPackages = lib.optionals hasNfsFileSystems [ pkgs.nfs-utils ];
 }

modules/nixos/system/hw/graphics/default.nix

@@ -1,4 +1,4 @@
-{ ... }: {
+{ config, ... }: {
-  hardware.graphics.enable = true;
+  hardware.graphics.enable = config.syscfg.make.gui || config.syscfg.make.serverExtras || config.syscfg.make.game;
-  hardware.graphics.enable32Bit = true;
+  hardware.graphics.enable32Bit = config.syscfg.make.game;
 }

modules/nixos/system/nix/default.nix

@@ -1,14 +1,10 @@
-{ inputs, pkgs, ... }: {
+{ config, inputs, lib, pkgs, ... }: {
   nixpkgs.config = {
     permittedInsecurePackages = [ ];
     allowUnfree = true;
     android_sdk.accept_license = true;
-    packageOverrides = pkgs: rec {
-      custom = import ../../../../packages { inherit pkgs; };
-    };
-
   };
-  nixpkgs.overlays = import ../../../../overlays { inherit inputs pkgs; };
+  nixpkgs.overlays = import ../../../../overlays { inherit inputs; };
   nix = {
     package = pkgs.nixVersions.stable;
     extraOptions = ''
@@ -37,7 +33,9 @@
       ];
     };
   };
-  programs.nix-ld = {
+  programs.nix-ld = lib.mkIf (
+    config.syscfg.make.gui || config.syscfg.make.develop || config.syscfg.make.serverExtras
+  ) {
     enable = true;
     libraries = with pkgs; [
       libx11 libxcb libxi libxext libxkbfile xcbutilcursor

modules/nixos/system/security/polkit/default.nix

@@ -1,10 +1,12 @@
-{ pkgs, ... }: {
+{ config, lib, pkgs, ... }: {
-  security.polkit.enable = true;
+  config = lib.mkIf config.syscfg.make.gui {
-  security.pam.services.hyprlock = { #swaylock
+    security.polkit.enable = true;
-    text = ''
+    security.pam.services.hyprlock = { #swaylock
-      auth include login
+      text = ''
-    '';
+        auth include login
-  };
+      '';
+    };
 
-  environment.systemPackages = with pkgs; [ polkit_gnome ];
+    environment.systemPackages = [ pkgs.polkit_gnome ];
+  };
 }

modules/nixos/tools/debug/default.nix

@@ -3,6 +3,7 @@
   config = lib.mkIf (config.syscfg.make.develop) {
 
     programs.wireshark.enable = true;
+    programs.dconf.enable = true;
 
     environment.systemPackages = with pkgs; [ wget dconf wireshark mtr android-tools ];
   };

modules/nixos/tools/default.nix

@@ -1,5 +1,5 @@
-{ pkgs, ... }: {
+{ config, lib, pkgs, ... }: {
   imports = [ ./debug ./develop ./telegraf ];
 
-  environment.systemPackages = with pkgs; [ pkgs.engrampa ];
+  environment.systemPackages = lib.optionals config.syscfg.make.gui [ pkgs.engrampa ];
 }

modules/server/containers/apps/miniflux.nix

@@ -0,0 +1,2 @@
+{ name, ... }:
+throw "Container app `${name}` is not implemented yet."

modules/server/containers/apps/trmnl.nix

@@ -1,3 +1,2 @@
-{...}:{
+{ name, ... }:
-    
+throw "Container app `${name}` is not implemented yet."
-}

modules/server/containers/builder.nix

@@ -37,7 +37,9 @@ let
       environment = {
         TZ = config.time.timeZone;
       } // extraEnv;
-
+      autoRemoveOnStop = false;
+      autoStart = true;
+      pull = "newer";
       labels = (if subdomain!=null then ({
         "traefik.enable" = "true";
         "traefik.http.routers.${routerName}.entrypoints" = "web-secure";

modules/server/containers/default.nix

@@ -16,7 +16,9 @@ let
   basePathConfigs =
     lib.mapAttrsToList (_: cfg: cfg) (lib.filterAttrs (name: _: name != "config" && name != "data") serverCfg.path);
   runtimePathConfigs = concatRuntimeLists "paths";
-  allSetupConfigs = map (app: ({ name = app.name; envFile = ""; } // app.runtime.setup)) appsList;
+  allSetupConfigs = builtins.filter
+    (setup: setup.script != null)
+    (map (app: ({ name = app.name; envFile = [ ]; } // app.runtime.setup)) appsList);
   allCronsConfigs = concatRuntimeLists "cron";
   allVMConfigs = builtins.filter (app: app.runtime.vm != null) appsList;
   mkPathSetup = cfg:
@@ -88,7 +90,7 @@ in {
         value = {
           description = "Run ${e.name} setup";
           after = [ "podman-${e.name}-${e.trigger}.service" ];
-          wants = [ "podman-${e.name}-${e.trigger}.service" ];
+          # wants = [ "podman-${e.name}-${e.trigger}.service" ];
           partOf = [ "podman-${e.name}-${e.trigger}.service" ];
           wantedBy = [ "multi-user.target" ];
           restartTriggers = [ e.script ];
@@ -96,7 +98,8 @@ in {
             Type = "simple";
             Restart = "on-failure";
             RestartSec = "15s";
-            TimeoutStartSec = "360s";
+            # TimeoutStartSec = "360s";
+            TimeoutStartSec = "30s"; 
             EnvironmentFile = e.envFile;
             ExecStart = e.script;
             RemainAfterExit = true;

modules/server/sops/default.nix

@@ -3,7 +3,9 @@ let
   listNames = config.syscfg.server.db;
   containerNames = lib.concatMap (app: app.requires.secrets) (builtins.attrValues config.syscfg.server.loadedContainers);
   allApps = lib.unique (listNames ++ containerNames);
+  needsServerSops = config.syscfg.server.loadedContainers != {} || allApps != [];
 in{
+  config = lib.mkIf needsServerSops {
     sops.secrets = {
       CUSTOM = { 
         mode = "0444";
@@ -13,4 +15,5 @@ in{
       mode = "0444";
       sopsFile = ./server.yaml;
     }));
+  };
 }

modules/shared/syscfg/default.nix

@@ -1,11 +1,15 @@
-{ inputs, lib, ... }:
+{ lib, ... }:
 let
   systemsDir = ../../../systems;
-  systemNames = lib.attrNames (lib.filterAttrs 
+  isIgnoredSystemDir = name: lib.hasPrefix "_" name || lib.hasPrefix "." name;
-    (name: type: type == "directory" && builtins.pathExists (systemsDir + "/${name}/cfg.nix")) 
+  systemNames = lib.attrNames (
-    (builtins.readDir systemsDir));
+    lib.filterAttrs
-
+      (name: type:
-
+        type == "directory"
+        && !isIgnoredSystemDir name
+        && builtins.pathExists (systemsDir + "/${name}/cfg.nix"))
+      (builtins.readDir systemsDir)
+  );
 in with lib; {
   options.usercfg = import ./user.nix  {inherit lib;};
   options.syscfg = {

modules/shared/syscfg/extra.nix

@@ -6,6 +6,6 @@ with lib; {
         domain = mkOption { type = types.str; default = ""; };
         port = mkOption { type = types.str; default = ""; };
         noProxy = mkOption { type = types.str; default = ""; };
-        cert = mkOption { type = types.path; default = null; };
+        cert = mkOption { type = types.nullOr types.path; default = null; };
     };
 }

modules/shared/syscfg/make.nix

@@ -2,6 +2,7 @@
 with lib; {
     cli = mkOption { type = types.bool; default = true; };
     gui = mkOption { type = types.bool; default = false; };
+    serverExtras = mkOption { type = types.bool; default = false; };
     virt = mkOption { type = types.bool; default = false; };
     power = mkOption { type = types.bool; default = false; };
     game = mkOption { type = types.bool; default = false; };

overlays/default.nix

@@ -5,6 +5,7 @@
     #yarn-berry = import ./yarn-berry { inherit final prev; };
     #eww = import ./eww { inherit final prev; };
     # ags =  import ./ags { inherit final prev; };
+    custom = import ../packages { pkgs = final; };
     wine = final.unstable.wineWow64Packages.unstableFull;
     unstable = import inputs.nixUnstable {
       system = final.stdenv.hostPlatform.system;

packages/default.nix

@@ -5,12 +5,4 @@
   repalette = pkgs.callPackage ./repalette { };
 
   vosk = pkgs.callPackage ./vosk { };
-
-  pythonPackages = {
-
-  };
-
-  nodePackages = {
-
-  };
 }

shells/default.nix

@@ -1,18 +1,8 @@
-{
+{ inputs, mkPkgs, systems, ... }:
-  inputs,
+inputs.nixpkgs.lib.genAttrs systems (
-  mkPkgs,
-  supportedSystems,
-  ...
-}:
-let
-  forEachSystem = inputs.nixpkgs.lib.genAttrs supportedSystems;
-in
-forEachSystem (
   system:
-  let
+  let pkgs = mkPkgs system;
-    pkgs = mkPkgs system;
+  in {
-  in
-  {
     default = import ./devsh { inherit pkgs; };
     devsh = import ./devsh { inherit pkgs; };
   }

systems/gateway/default.nix

@@ -17,4 +17,9 @@
     10.10.1.2     avalon.helcel.net
   '';
 
+  swapDevices = [ {
+    device = "/swapfile";
+    size = 2 * 1024; # Size in megabytes (4 GB)
+  } ];
+
 }

systems/gateway/hardware.nix

@@ -5,10 +5,12 @@
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
 
   boot.loader.systemd-boot.enable = lib.mkForce false;
+  boot.loader.efi.canTouchEfiVariables = lib.mkForce false;
   boot.loader.grub = {
     enable = true;
     device = "/dev/sda";
     efiSupport = true;
+    efiInstallAsRemovable = true;
   };
 
   boot.initrd.availableKernelModules =

systems/sandbox/cfg.nix

@@ -32,6 +32,7 @@
         # ===== BASE =====
         traefik.subdomain = "traefik";
         traefik.extra={provider="infomaniak";};
+        robotstxt.extra = {};
         umami.subdomain = "umami";
         authentik.subdomain = "sso";
         searxng.subdomain = "searx";
@@ -42,14 +43,19 @@
         collabora.subdomain = "office";
         etherpad.subdomain = "pad";
         # ethercalc.subdomain = "calc";
+        drawio.subdomain = "draw";
         immich.subdomain = "pic";
         # ===== FLIX =====
         # invidious.subdomain = "yt";
         # jellyfin.subdomain = "flix";
+        # suwayomi.subdomain = "manga";
+        # calibre.subdomain = "books";
+        # ===== ARR =====
         # servarr.subdomain = "arr";
         # servarr.extra.modules = ["prowlarr" "sonarr" "radarr" "flaresolverr" ];
         # transmission = { subdomain = "arr"; subpath = "transmission"; };
         # handbrake = { subdomain = "arr"; subpath = "hb"; };
+        # selfmark = { subdomain = "arr"; subpath = "selfmark"; };
         # ===== DEV =====
         gitea.subdomain = "git";
         # ===== HOME =====
@@ -58,9 +64,6 @@
         influx.subdomain = "metrum";
 
         freshrss.subdomain = "rss";
-        suwayomi.subdomain = "manga";
-        calibre.subdomain = "books";
-        selfmark = { subdomain = "arr"; subpath = "selfmark"; };
 
         favicon.extra = {
           mappings = {