update

flake.lock

@@ -10,11 +10,11 @@
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1750173260,
+        "lastModified": 1762618334,
-        "narHash": "sha256-9P1FziAwl5+3edkfFcr5HeGtQUtrSdk/MksX39GieoA=",
+        "narHash": "sha256-wyT7Pl6tMFbFrs8Lk/TlEs81N6L+VSybPfiIgzU8lbQ=",
         "owner": "ryantm",
         "repo": "agenix",
-        "rev": "531beac616433bac6f9e2a19feb8e99a22a66baf",
+        "rev": "fcdea223397448d35d9b31f798479227e80183f6",
         "type": "github"
       },
       "original": {
@@ -29,7 +29,8 @@
           "devenv"
         ],
         "flake-compat": [
-          "devenv"
+          "devenv",
+          "flake-compat"
         ],
         "git-hooks": [
           "devenv",
@@ -41,11 +42,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1748883665,
+        "lastModified": 1760971495,
-        "narHash": "sha256-R0W7uAg+BLoHjMRMQ8+oiSbTq8nkGz5RDpQ+ZfxxP3A=",
+        "narHash": "sha256-IwnNtbNVrlZIHh7h4Wz6VP0Furxg9Hh0ycighvL5cZc=",
         "owner": "cachix",
         "repo": "cachix",
-        "rev": "f707778d902af4d62d8dd92c269f8e70de09acbe",
+        "rev": "c5bfd933d1033672f51a863c47303fc0e093c2d2",
         "type": "github"
       },
       "original": {
@@ -55,6 +56,27 @@
         "type": "github"
       }
     },
+    "copyparty": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1768598221,
+        "narHash": "sha256-09F+4yMnno3yI1us7t0Gt/wEbyZNk5U8EW9IE9HGXg8=",
+        "owner": "9001",
+        "repo": "copyparty",
+        "rev": "72c59405e7a49686389414913787245aa8e66164",
+        "type": "github"
+      },
+      "original": {
+        "owner": "9001",
+        "repo": "copyparty",
+        "type": "github"
+      }
+    },
     "darwin": {
       "inputs": {
         "nixpkgs": [
@@ -81,18 +103,20 @@
       "inputs": {
         "cachix": "cachix",
         "flake-compat": "flake-compat",
+        "flake-parts": "flake-parts",
         "git-hooks": "git-hooks",
         "nix": "nix",
+        "nixd": "nixd",
         "nixpkgs": [
           "nixpkgs"
         ]
       },
       "locked": {
-        "lastModified": 1752604051,
+        "lastModified": 1768597968,
-        "narHash": "sha256-cAvJMEsp2ZOfnbZcobyLjhZ7U0Z9qJcgmWaDBpxg3Lc=",
+        "narHash": "sha256-WdkoFB2QyMkZOmsi/08394clBRyEtNseH+jYGUs9eDU=",
         "owner": "cachix",
         "repo": "devenv",
-        "rev": "ee0fd5cd4d0d45650f8a41c7861c6599bd120e79",
+        "rev": "92ad9c70fad164e8f4a3656dec91717a5c42cd98",
         "type": "github"
       },
       "original": {
@@ -104,11 +128,11 @@
     "flake-compat": {
       "flake": false,
       "locked": {
-        "lastModified": 1747046372,
+        "lastModified": 1761588595,
-        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
+        "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",
         "owner": "edolstra",
         "repo": "flake-compat",
-        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
+        "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",
         "type": "github"
       },
       "original": {
@@ -137,16 +161,15 @@
       "inputs": {
         "nixpkgs-lib": [
           "devenv",
-          "nix",
           "nixpkgs"
         ]
       },
       "locked": {
-        "lastModified": 1733312601,
+        "lastModified": 1760948891,
-        "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",
+        "narHash": "sha256-TmWcdiUUaWk8J4lpjzu4gCGxWY6/Ok7mOK4fIFfBuU4=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",
+        "rev": "864599284fc7c0ba6357ed89ed5e2cd5040f0c04",
         "type": "github"
       },
       "original": {
@@ -155,7 +178,37 @@
         "type": "github"
       }
     },
+    "flake-root": {
+      "locked": {
+        "lastModified": 1723604017,
+        "narHash": "sha256-rBtQ8gg+Dn4Sx/s+pvjdq3CB2wQNzx9XGFq/JVGCB6k=",
+        "owner": "srid",
+        "repo": "flake-root",
+        "rev": "b759a56851e10cb13f6b8e5698af7b59c44be26e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "srid",
+        "repo": "flake-root",
+        "type": "github"
+      }
+    },
     "flake-utils": {
+      "locked": {
+        "lastModified": 1678901627,
+        "narHash": "sha256-U02riOqrKKzwjsxc/400XnElV+UtPUQWpANPlyazjH0=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "93a2b84fc4b70d9e089d029deacc3583435c2ed6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
       "locked": {
         "lastModified": 1649676176,
         "narHash": "sha256-OWKJratjt2RW151VUlJPRALb7OU2S5s+f0vLj4o1bHM=",
@@ -170,7 +223,7 @@
         "type": "github"
       }
     },
-    "flake-utils_2": {
+    "flake-utils_3": {
       "inputs": {
         "systems": "systems_3"
       },
@@ -188,7 +241,7 @@
         "type": "github"
       }
     },
-    "flake-utils_3": {
+    "flake-utils_4": {
       "inputs": {
         "systems": "systems_4"
       },
@@ -219,11 +272,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1750779888,
+        "lastModified": 1760663237,
-        "narHash": "sha256-wibppH3g/E2lxU43ZQHC5yA/7kIKLGxVEnsnVK1BtRg=",
+        "narHash": "sha256-BflA6U4AM1bzuRMR8QqzPXqh8sWVCNDzOdsxXEguJIc=",
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "16ec914f6fb6f599ce988427d9d94efddf25fe6d",
+        "rev": "ca5b894d3e3e151ffc1db040b6ce4dcc75d31c37",
         "type": "github"
       },
       "original": {
@@ -262,11 +315,11 @@
         "systems": "systems_2"
       },
       "locked": {
-        "lastModified": 1752499558,
+        "lastModified": 1766068170,
-        "narHash": "sha256-BnrGmH1GOvNLEXAhMtxTgL/E/WmGA0s9xaGxbK0MaL0=",
+        "narHash": "sha256-gsG+gYgr9GJX+RAAACK+46nWoJzcAtcrrjPZKd9mbbs=",
         "owner": "tailscale",
         "repo": "golink",
-        "rev": "6b857a337f16c6960e5511dd4dc1e1b638c8b350",
+        "rev": "e6795d11f3b2d7a90678e1ea471967e8137b36ef",
         "type": "github"
       },
       "original": {
@@ -303,11 +356,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1752603129,
+        "lastModified": 1768598210,
-        "narHash": "sha256-S+wmHhwNQ5Ru689L2Gu8n1OD6s9eU9n9mD827JNR+kw=",
+        "narHash": "sha256-kkgA32s/f4jaa4UG+2f8C225Qvclxnqs76mf8zvTVPg=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "e8c19a3cec2814c754f031ab3ae7316b64da085b",
+        "rev": "c47b2cc64a629f8e075de52e4742de688f930dc6",
         "type": "github"
       },
       "original": {
@@ -325,11 +378,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1743604125,
+        "lastModified": 1767104570,
-        "narHash": "sha256-ZD61DNbsBt1mQbinAaaEqKaJk2RFo9R/j+eYWeGMx7A=",
+        "narHash": "sha256-GKgwu5//R+cLdKysZjGqvUEEOGXXLdt93sNXeb2M/Lk=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "180fd43eea296e62ae68e079fcf56aba268b9a1a",
+        "rev": "e4e78a2cbeaddd07ab7238971b16468cc1d14daf",
         "type": "github"
       },
       "original": {
@@ -340,7 +393,7 @@
     },
     "i3utils": {
       "inputs": {
-        "flake-utils": "flake-utils",
+        "flake-utils": "flake-utils_2",
         "nixpkgs": [
           "nixpkgs"
         ]
@@ -366,7 +419,10 @@
           "devenv",
           "flake-compat"
         ],
-        "flake-parts": "flake-parts",
+        "flake-parts": [
+          "devenv",
+          "flake-parts"
+        ],
         "git-hooks-nix": [
           "devenv",
           "git-hooks"
@@ -383,33 +439,60 @@
         ]
       },
       "locked": {
-        "lastModified": 1752251701,
+        "lastModified": 1768491252,
-        "narHash": "sha256-fkkkwB7jz+14ZdIHAYCCNypO9EZDCKpj7LEQZhV6QJs=",
+        "narHash": "sha256-ZlIPlKCYXwQJsw9WYVeyCapF5Y8JZL2Hctf22+IbHqo=",
         "owner": "cachix",
         "repo": "nix",
-        "rev": "54df04f09cb084b9e58529c0ae6f53f0e50f1a19",
+        "rev": "9f0da1cd90b271569752a4c83f3ff700b8fcbe12",
         "type": "github"
       },
       "original": {
         "owner": "cachix",
-        "ref": "devenv-2.30",
+        "ref": "devenv-2.32",
         "repo": "nix",
         "type": "github"
       }
     },
+    "nixd": {
+      "inputs": {
+        "flake-parts": [
+          "devenv",
+          "flake-parts"
+        ],
+        "flake-root": "flake-root",
+        "nixpkgs": [
+          "devenv",
+          "nixpkgs"
+        ],
+        "treefmt-nix": "treefmt-nix"
+      },
+      "locked": {
+        "lastModified": 1763964548,
+        "narHash": "sha256-JTRoaEWvPsVIMFJWeS4G2isPo15wqXY/otsiHPN0zww=",
+        "owner": "nix-community",
+        "repo": "nixd",
+        "rev": "d4bf15e56540422e2acc7bc26b20b0a0934e3f5e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixd",
+        "type": "github"
+      }
+    },
     "nixgl": {
       "inputs": {
-        "flake-utils": "flake-utils_2",
+        "flake-utils": "flake-utils_3",
         "nixpkgs": [
           "nixpkgs"
         ]
       },
       "locked": {
-        "lastModified": 1752054764,
+        "lastModified": 1762090880,
-        "narHash": "sha256-Ob/HuUhANoDs+nvYqyTKrkcPXf4ZgXoqMTQoCK0RFgQ=",
+        "narHash": "sha256-fbRQzIGPkjZa83MowjbD2ALaJf9y6KMDdJBQMKFeY/8=",
         "owner": "guibou",
         "repo": "nixGL",
-        "rev": "a8e1ce7d49a149ed70df676785b07f63288f53c5",
+        "rev": "b6105297e6f0cd041670c3e8628394d4ee247ed5",
         "type": "github"
       },
       "original": {
@@ -420,11 +503,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1752480373,
+        "lastModified": 1768564909,
-        "narHash": "sha256-JHQbm+OcGp32wAsXTE/FLYGNpb+4GLi5oTvCxwSoBOA=",
+        "narHash": "sha256-Kell/SpJYVkHWMvnhqJz/8DqQg2b6PguxVWOuadbHCc=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "62e0f05ede1da0d54515d4ea8ce9c733f12d9f08",
+        "rev": "e4bae1bd10c9c57b2cf517953ab70060a828ee6f",
         "type": "github"
       },
       "original": {
@@ -468,6 +551,7 @@
     "root": {
       "inputs": {
         "agenix": "agenix",
+        "copyparty": "copyparty",
         "devenv": "devenv",
         "golink": "golink",
         "home-manager": "home-manager_2",
@@ -539,6 +623,28 @@
         "type": "github"
       }
     },
+    "treefmt-nix": {
+      "inputs": {
+        "nixpkgs": [
+          "devenv",
+          "nixd",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1734704479,
+        "narHash": "sha256-MMi74+WckoyEWBRcg/oaGRvXC9BVVxDZNRMpL+72wBI=",
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "rev": "65712f5af67234dad91a5a4baee986a8b62dbf8f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "type": "github"
+      }
+    },
     "zen-browser": {
       "inputs": {
         "home-manager": "home-manager_3",
@@ -547,11 +653,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1752584655,
+        "lastModified": 1768379550,
-        "narHash": "sha256-nPHrsq0vSh0+BqV2xAAVsfoVqzP9KYG7Zicc6oA0nfk=",
+        "narHash": "sha256-z94S29l5V86h11LZbPIMbHTJyksDG63aqISsZkTTuJY=",
         "owner": "0xc000022070",
         "repo": "zen-browser-flake",
-        "rev": "759a7860416dfd8c86f383d4ea4009bb034d869c",
+        "rev": "06f61b4e4f4f6ba8027c96a5611c63dc0db12b90",
         "type": "github"
       },
       "original": {
@@ -563,15 +669,15 @@
     "zig": {
       "inputs": {
         "flake-compat": "flake-compat_2",
-        "flake-utils": "flake-utils_3",
+        "flake-utils": "flake-utils_4",
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1752453549,
+        "lastModified": 1768565720,
-        "narHash": "sha256-3c6/4K+0I/zGC86mC+4FrWNl61/9D/HUYxrFb6nd7u4=",
+        "narHash": "sha256-PUDjT7pkY4WaKjS7flnjfwd8Q2piVsrNH/t/D+iYQ0g=",
         "owner": "mitchellh",
         "repo": "zig-overlay",
-        "rev": "fff2cca28feb0dc52cdcf0ba7d142f8dad435324",
+        "rev": "27fb45c107ca8c2eda2b6f255bdd33bb82f3026c",
         "type": "github"
       },
       "original": {

flake.nix

@@ -9,6 +9,9 @@
     agenix.url = "github:ryantm/agenix";
     agenix.inputs.nixpkgs.follows = "nixpkgs";
 
+    copyparty.url = "github:9001/copyparty";
+    copyparty.inputs.nixpkgs.follows = "nixpkgs";
+
     devenv.url = "github:cachix/devenv";
     devenv.inputs.nixpkgs.follows = "nixpkgs";
 
@@ -34,6 +37,7 @@
     nixpkgs,
     nixpkgs-stable,
     agenix,
+    copyparty,
     devenv,
     golink,
     home-manager,
@@ -46,12 +50,10 @@
     system = "x86_64-linux";
 
     overlays = [
+      copyparty.overlays.default
       golink.overlays.default
       nixgl.overlay
       zig.overlays.default
-      (final: prev: {
-        zen-browser = zen-browser.packages.${prev.system}.default;
-      })
     ];
 
     pkgs =
@@ -104,6 +106,8 @@
 
           agenix.nixosModules.default
 
+          copyparty.nixosModules.default
+
           golink.nixosModules.default
 
           home-manager.nixosModules.home-manager
@@ -114,6 +118,7 @@
               extraSpecialArgs = {
                 inherit hostname;
                 inherit headless;
+                inherit inputs;
               };
             };
           }
@@ -161,6 +166,11 @@
         headless = false;
         np = nixpkgs;
       };
+      leviathan = hostSystem {
+        hostname = "leviathan";
+        headless = true;
+        np = nixpkgs;
+      };
     };
     homeConfigurations = {
       "deck" = deckSystem {

hosts/common/default.nix

@@ -11,7 +11,7 @@
     isNormalUser = true;
     home = "/home/${userName}";
     initialPassword = "password";
-    extraGroups = ["wheel" "networkmanager" "docker" "video" "syncthing"];
+    extraGroups = ["wheel" "networkmanager" "docker" "video" "syncthing" "audio" "media"];
     uid = uid;
     group = "users";
     shell = pkgs.zsh;
@@ -83,8 +83,6 @@ in {
     nnn
     ripgrep
     wget
-    zed-editor
-    zen-browser
     zsh
   ];
 
@@ -111,7 +109,7 @@ in {
     };
 
     tailscale = {
-      enable = true;
+      enable = lib.mkDefault true;
     };
   };
 }

hosts/common/graphical/default.nix

@@ -10,7 +10,7 @@
   hardware.graphics.enable32Bit = true;
   hardware.bluetooth.enable = true;
   services.pulseaudio.enable = false;
-  services.blueman.enable = true;
+  services.blueman.enable = lib.mkDefault true;
   programs.partition-manager.enable = true;
 
   networking = {
@@ -43,11 +43,11 @@
       fraunces
       noto-fonts
       noto-fonts-cjk-sans
-      noto-fonts-emoji
+      noto-fonts-color-emoji
       nerd-fonts.iosevka
       monocraft
       source-code-pro
-      ubuntu_font_family
+      ubuntu-classic
     ];
 
     fontDir.enable = true;
@@ -59,6 +59,8 @@
     steam = {
       enable = true;
     };
+
+    thunar.enable = true;
   };
 
   services = {
@@ -72,13 +74,17 @@
     };
 
     displayManager.sddm = {
-      enable = false;
+      enable = true;
-      package = pkgs.kdePackages.sddm;
+      package = lib.mkDefault pkgs.kdePackages.sddm;
       wayland.enable = true;
       # extraPackages = with pkgs; [(catppuccin-sddm.override {flavor = "macchiato";})];
       theme = "maldives";
     };
 
+    # desktopManager.plasma6 = {
+    #   enable = true;
+    # };
+
     pipewire = {
       enable = true;
       pulse.enable = true;
@@ -97,7 +103,7 @@
       ];
       extraRules = ''
         # Raspberry Pi Picoprobe
-        SUBSYSTEM="usb", ATTRS{idVendor}=="2e8a", ATTRS{idProduct}=="0003", MODE="0666"
+        # SUBSYSTEM="usb", ATTRS{idVendor}=="2e8a", ATTRS{idProduct}=="0003", MODE="0666"
       '';
     };
 

hosts/leviathan/configuration.nix

@@ -0,0 +1,181 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}: let
+  zfsCompatibleKernelPackages =
+    lib.filterAttrs (
+      name: kernelPackages:
+        (builtins.match "linux_[0-9]+_[0-9]+" name)
+        != null
+        && (builtins.tryEval kernelPackages).success
+        && (!kernelPackages.${config.boot.zfs.package.kernelModuleAttribute}.meta.broken)
+    )
+    pkgs.linuxKernel.packages;
+  latestKernelPackage = lib.last (
+    lib.sort (a: b: (lib.versionOlder a.kernel.version b.kernel.version)) (
+      builtins.attrValues zfsCompatibleKernelPackages
+    )
+  );
+in {
+  imports = [
+    # Include the results of the hardware scan.
+    ./hardware-configuration.nix
+
+    ../common
+    (import ../../modules).leviathan
+  ];
+
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.kernelPackages = lib.mkForce latestKernelPackage;
+  boot.supportedFilesystems = ["zfs"];
+
+  networking = {
+    useDHCP = false;
+    hostName = "leviathan";
+    hostId = "abcd1234";
+    interfaces.enp1s0.useDHCP = true;
+
+    nameservers = [
+      "1.1.1.1"
+    ];
+
+    firewall.allowedTCPPorts = [8000 8123 8095];
+  };
+
+  environment.systemPackages = with pkgs; [
+    helix
+    kitty # For terminfo
+    lazygit
+  ];
+
+  containers.radarr = {
+    autoStart = true;
+    bindMounts = {
+      "/data" = {
+        hostPath = "/store/media";
+        mountPoint = "/store/media";
+        isReadOnly = false;
+      };
+    };
+    config = {
+      config,
+      pkgs,
+      lib,
+      ...
+    }: {
+      services.radarr = {
+        enable = true;
+        user = "root";
+        group = "root";
+      };
+      system.stateVersion = "24.11";
+    };
+  };
+
+  services.openssh.settings.PermitRootLogin = "yes";
+
+  security.rtkit.enable = true;
+
+  users.groups."media".name = "media";
+
+  services = {
+    copyparty = {
+      enable = true;
+      settings = {
+        i = "100.64.214.3";
+      };
+      accounts = {
+      };
+      volumes = {
+        "/" = {
+          path = "/srv/copyparty";
+          access = {
+            rw = "*";
+          };
+        };
+      };
+    };
+
+    jellyfin = {
+      enable = true;
+      group = "media";
+    };
+
+    music-assistant = {
+      enable = true;
+      providers = [
+        "builtin_player"
+        "chromecast"
+        "hass"
+        "hass_players"
+        "soundcloud"
+        "spotify"
+        "spotify_connect"
+        "ytmusic"
+      ];
+    };
+
+    pipewire = {
+      enable = true;
+      pulse.enable = true;
+      alsa.enable = true;
+      alsa.support32Bit = true;
+      wireplumber.enable = true;
+    };
+  };
+
+  programs.virt-manager.enable = true;
+
+  virtualisation = {
+    libvirtd = {
+      enable = true;
+      allowedBridges = ["br0"];
+    };
+
+    oci-containers = {
+      backend = "podman";
+      containers.homeassistant = {
+        volumes = ["home-assistant:/config"];
+        environment.TZ = "Europe/Berlin";
+        image = "ghcr.io/home-assistant/home-assistant:2025.10.2";
+        extraOptions = [
+          # Use the host network namespace for all sockets
+          "--network=host"
+          # Pass devices into the container, so Home Assistant can discover and make use of them
+          "--device=/dev/ttyUSB0:/dev/ttyUSB0"
+        ];
+      };
+    };
+  };
+
+  # systemd.services.libvirt-default-network = {
+  #   description = "Start libvirt bridge network";
+  #   after = ["libvirtd.service"];
+  #   wantedBy = ["multi-user.target"];
+  #   serviceConfig = {
+  #     Type = "oneshot";
+  #     RemainAfterExit = true;
+  #     ExecStart = "${pkgs.libvirt}/bin/virsh net-start bridged-network";
+  #     ExecStop = "${pkgs.libvirt}/bin/virsh net-destroy bridged-network";
+  #     User = "root";
+  #   };
+  # };
+
+  # systemd.services.libvirt-home-assistant = {
+  #   description = "Start home assistant VM";
+  #   after = ["libvirt-default-network.service"];
+  #   wantedBy = ["multi-user.target"];
+  #   serviceConfig = {
+  #     Type = "oneshot";
+  #     RemainAfterExit = true;
+  #     ExecStart = "${pkgs.libvirt}/bin/virsh start hass";
+  #     ExecStop = "${pkgs.libvirt}/bin/virsh destroy hass";
+  #     User = "root";
+  #   };
+  # };
+
+  system.stateVersion = "25.05"; # Did you read the comment?
+}

hosts/leviathan/hardware-configuration.nix

@@ -0,0 +1,67 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}: {
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+  ];
+
+  boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "usb_storage" "usbhid" "sd_mod"];
+  boot.initrd.kernelModules = [];
+  boot.kernelModules = ["kvm-intel"];
+  boot.extraModulePackages = [];
+
+  fileSystems."/" = {
+    device = "zpool/root";
+    fsType = "zfs";
+    options = ["zfsutil"];
+  };
+
+  fileSystems."/nix" = {
+    device = "zpool/nix";
+    fsType = "zfs";
+    options = ["zfsutil"];
+  };
+
+  fileSystems."/var" = {
+    device = "zpool/var";
+    fsType = "zfs";
+    options = ["zfsutil"];
+  };
+
+  fileSystems."/home" = {
+    device = "zpool/home";
+    fsType = "zfs";
+    options = ["zfsutil"];
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/95BF-1B15";
+    fsType = "vfat";
+    options = ["fmask=0022" "dmask=0022"];
+  };
+
+  swapDevices = [
+    {
+      device = "/dev/disk/by-partuuid/db6bcd05-29fb-470a-aeba-f9f2648564af";
+      randomEncryption = true;
+    }
+  ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp1s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlo1.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/pingbox/configuration.nix

@@ -26,12 +26,14 @@
     enable = true;
     extraPackages = with pkgs; [
       intel-media-driver
-      vaapiIntel
+      intel-vaapi-driver
     ];
   };
 
   programs.kdeconnect.enable = true;
 
+  programs.niri.enable = true;
+
   # programs.virt-manager.enable = true;
 
   # users.groups.libvirtd.members = ["daniel"];
@@ -45,6 +47,8 @@
     interfaces.wlp170s0.useDHCP = true;
   };
 
+  environment.pathsToLink = ["/share/xdg-desktop-portal" "/share/applications"];
+
   services = {
     fprintd.enable = true;
 
@@ -76,6 +80,13 @@
     logind = {
       lidSwitch = "suspend-then-hibernate";
     };
+
+    avahi = {
+      enable = true;
+      nssmdns4 = true;
+      openFirewall = true;
+    };
+    printing.enable = true;
   };
 
   systemd.sleep.extraConfig = ''

hosts/sidon/configuration.nix

@@ -38,6 +38,17 @@
     wlr-randr
   ];
 
+  specialisation = {
+    niri.configuration = {
+      programs.niri.enable = true;
+    };
+    plasma.configuration = {
+      boot.loader.systemd-boot.sortKey = "default";
+      services.blueman.enable = false;
+      services.desktopManager.plasma6.enable = true;
+    };
+  };
+
   security.pam.u2f = {
     enable = true;
   };

modules/backups/pingbox/default.nix

@@ -0,0 +1,58 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  age.secrets = {
+    pingbox_backup_s3_creds.file = ../../../secrets/pingbox_backup_s3_creds.age;
+    pingbox_backup_repo_password.file = ../../../secrets/pingbox_backup_repo_password.age;
+  };
+
+  services.restic.backups = {
+    "system" = {
+      initialize = true;
+      passwordFile = config.age.secrets.pingbox_backup_repo_password.path;
+      timerConfig = {
+        OnCalendar = "daily";
+        Persistent = true;
+        RandomizedDelaySec = "15m";
+      };
+      repository = "s3:s3.eu-central-003.backblazeb2.com/pingbox-backup";
+      environmentFile = config.age.secrets.pingbox_backup_s3_creds.path;
+      progressFps = 0.1;
+
+      paths = [
+        "/etc/ssh"
+        "/etc/NetworkManager/system-connections"
+
+        "/home"
+        "/var/backup"
+      ];
+
+      exclude = [
+        "/home/*/.cache"
+        "/home/*/.local/share/Trash"
+        "/var/cache"
+        "/var/tmp"
+
+        "/home/*/.nix-profile"
+        "/home/*/.nix-defexpr"
+
+        "/home/*/.rustup"
+        "/home/*/.cargo/registry"
+        "/home/*/.cargo/git"
+        "/home/*/.npm"
+        "/home/*/.bun"
+        "/home/*/.hex"
+        "/home/*/.go/pkg"
+        "/home/*/.android/avd"
+
+        "/home/*/.steam/root/steamapps"
+        "/home/*/.local/share/Steam/steamapps"
+        "/home/*/.steam/steam/steamapps"
+      ];
+      backupPrepareCommand = ''
+      '';
+    };
+  };
+}

modules/default.nix

@@ -24,6 +24,9 @@
   sidon = {};
 
   pingbox = {
+    imports = [
+      ./backups/pingbox
+    ];
   };
 
   ranni = {
@@ -31,4 +34,6 @@
       ./gitea
     ];
   };
+
+  leviathan = {};
 }

modules/gitea/default.nix

@@ -9,7 +9,6 @@
       owner = "gitea";
       group = "gitea";
     };
-
   };
 
   services.gitea = {

secrets/bigding_backup_repo_password.age

@@ -1,17 +1,17 @@
 age-encryption.org/v1
--> ssh-ed25519 eYYv1Q EAZDNmNVPn4csM/YdGJFlORxQDMMtO5Dn7x2XfFRaFU
+-> ssh-ed25519 eYYv1Q oXddewWnllLv73h4eMljoP35QKuQ1rUsAMoE6tu8XTg
-vuduGWTaLD//qz0GlOdArY7i4n3Uhwi4+nFr4jj8P3Y
+zgoOxEdZQ7feixPSzcLWKS5T+23wfGrCSr19s891sJc
--> ssh-ed25519 Bp5IaA XOy6sVXfaDVKhN81OZOtVlroHKIxpKgMwnJxcQ+i8Gs
+-> ssh-ed25519 Bp5IaA NxT+LEXxDV++CYL973CsB2Tt2pBFjkvs6kOnxmHQ+AQ
-dxXJCjBLmLru9L/sJEBmp8wA563MBc4nZYhXkE5P3zY
+AH1OmpmY899Ov3j4texm96/tIIxCYzdtb/HoZ1pXVuk
--> ssh-ed25519 T/DpgA XKdq7MGI+Gl+NYrwuMBPs0Wy4Z2/ewdItW3YhgEW/xY
+-> ssh-ed25519 T/DpgA FgKrOJEI+YlBfxagb9YOu1feBXtZvGUnescAP5pKITA
-SSeYZXSqY+FOv4A6+oxKgu2CzUI8DPEXiI2iMDXCkS4
+FAvD1d87Ne66a75LmkEIUG7UKV6bIsRs4an8IFeh3MQ
--> ssh-ed25519 qMgRFg 6uBriCnYizzXcQ9Sj+PBHHHKajsBICdErIAN/m5zCwM
+-> ssh-ed25519 qMgRFg Q5VNMErDZucmpQnLDKzssklxNpaGXBN4pfEOiheFL2Y
-HiNfRVS3omZA9UopFXXlK7KzaLU5q78/murhClxw3Hk
+cN4D/lzi44MdP5IsWG8o0fB5a06FCuJ8fUyF7fHLAao
--> ssh-ed25519 dMZXNw R7mVtYIYqYGRJ6T1u07eStvfXJPZRT/0yOc0a2haFAo
+-> ssh-ed25519 dMZXNw qqUxq8I5jwKflFaLQ3T2qyIM2eQKTTMxIqg+hmTYsXU
-JNzKXxhW+MxJKCSlI6lJqpCbR3QYI+FAHlnXUpzW5pk
+ezU+fnbRxzkwu1ws7YwYU+ZLERGeiqIXyBZPe786RaE
--> ssh-ed25519 +shbwg zIiwiExg9YyJ4ihqr10WPRv0deNFjj2on6EFFTnSFSU
+-> ssh-ed25519 +shbwg uIAE/ULfFSDjeCdw3Cfk/sov6prSBTsBT8SY7XHQhDU
-WYem7R3Mwi8OBZPOqd/m0v+A8k9HUC0+e7BwlTbdIQc
+umVDIXt7lDjUYMszoi2ti48la1Hqh3LfKgfXwx2rH8I
--> ssh-ed25519 70Nt2Q VacvBAJYuKDhLKpoDsdoFtPB9po/Bq/lC6EKG7C3oSg
+-> ssh-ed25519 70Nt2Q kyQVdOCOGR/IFyG67cQQyH2j3YPv8R5Y5JNb09XFuwU
-DrifwWRcqhHjt/yAcDrxKEPpY3ceL5VJy3BNPH7v4q8
+5mUcmoAiO3XgZXxHTqRg02IBz9eejCYro6O07uoflQc
---- vwailf0HFStDtxF94IGxV1jHWyhLjagTFAROxkCqnv4
+--- 3y+/TDRrG+APpNJSBYzci5s2WtjUHsc8lGvtISn/gcg
-<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>P<><1F>6<EFBFBD><36>i<EFBFBD>bɿ<62><C9BF>
\
+<EFBFBD>Jʯ<4A>f<EFBFBD>8uBj<42>F<0C>yU<79><55>W<EFBFBD>ZĆC<C486><43><EFBFBD>5M<>5S<35>iô<69>ߎ*<1B>S<1B>/<10>

secrets/caddy_porkbun_api_env.age

@@ -1,20 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 eYYv1Q HLv7VwiVXzh/uYmcwjMa0eZw7sJ+QDd1O2pKELLwi3s
+-> ssh-ed25519 eYYv1Q mCtMgzmP7HxB46ER6twUtUi3SJKK66DHQP77otrg2XU
-Gv05590x4magr/A8oi1yAwFrwEZ5VXK1jFl8ojLabng
+sTXftZwgeZk+KDP/l5fXR9Og/3AcYPLGBg1AzuVxkRw
--> ssh-ed25519 Bp5IaA yuIBqQ+wKpMH9tOOXG8sWF8dVrElBtAAtIFv27XiZlU
+-> ssh-ed25519 Bp5IaA czaqh5ZgiSd4h2Oe3PNIfDwsPWVft8ZP1Cc6o7fTRU0
-+LYw0xUKS8340E0e3B9z3ijydbM/EJk4jEXqToOl4Uk
+bQ6r4M37tDjhD4s9LcPonsmbLlU/cgO7nSQrUi+rUSk
--> ssh-ed25519 T/DpgA ZVI8HGiPa0L8ACjz3L/qCFjShimO2xlF1iEJ8D+VNUo
+-> ssh-ed25519 T/DpgA v1wZ6YO0cwtuN1mrxW8/axRKpAPa+V5g79KNMxrELWU
-jUqRKYaNLzNUAHj3U7lGEhJjHYp6Zge3pX9ogv7OTzs
+MS6NZMHViOzib4RT06Bz3TgL+/gJk/hUzdzMljqJhKQ
--> ssh-ed25519 qMgRFg kWK3YMixuoNaCLvfqvxkIyVt7X/Fe1RnTU+9LgxyH3I
+-> ssh-ed25519 qMgRFg BCzcZk3UlZV1EQQtP/na+Ed8lQ2mFKFIA29zX2Wsw3k
-lv4DI+XrKOU89bdR1VEFv7BtMMKOaQCVkG1ntENDhOQ
+psdMhWStulJ+heqvyFER4zpuXp8i84PJIJWZnKlEvrs
--> ssh-ed25519 dMZXNw +A8bV+j+yrc6PurfbawA1cXwJFoW+SK7IMZvE62TkH4
+-> ssh-ed25519 dMZXNw VabNLOAFFZK5bNzQ85co2/7NNHal5SjhktCWLoWWznY
-fvawY41qd1/mj6yvYcl3j0hOEhao+rCyCVSOki8Xh2E
+hHB671B0Q5gqktZ7BTq4Ny+KUXZ1EHQGuffzusJVSPI
--> ssh-ed25519 +shbwg kbmKDfoo+Vh5EBxENBHfrBjP1cW9YjOEhPnMSSrspQU
+-> ssh-ed25519 +shbwg UfJ2qk6tN65rOiSUIATVbPYD+kDCrJVKMrZBSeOtqlI
-2n0w1x/ZdpZBSJteCjNnleA3Am6xukaXGieBtfINYxk
+2CVDA0/ag1PS8ANLRXQ1WvX5Nzd8FLM7d4qX+jXCsZ8
--> ssh-ed25519 70Nt2Q F17IHEPl6iZKRIwRkZbtE9ekNobZf3uF8E47gZzM5QE
+-> ssh-ed25519 70Nt2Q ambd6Z2wkhMxyCFAuFZjtp+QSMPyeSrfyACJlxTh7EQ
-2poTmZo+Tkpsq0f5SigLajIaw3Ug+roWvkRZIJRd7vA
+ONURlDlrO9bdnCFm+We0733DgKBhfUyZRXwIOS5Jed8
--> ssh-ed25519 YAvvLw 33rh0onpSuvq5RBZIOdb9vHKqxqFBYMVZ9tRQlwB9A0
+-> ssh-ed25519 YAvvLw RWhx1m4FF5mMfx41RkatBH9HfBFcWCXTkmWCHGCWk2c
-FbALwt60o6hj4B/fPlVqBKOW9BPv04H+z2/mz+3pYK8
+lKmFwwsqtF0lL+EIDzwUW+P+gqEi/d4fd+qQZ5P8A1g
---- 1OPzsgbGklGa39hKcitpdDhUAhiy3U83PSh1OKNHP9Y
+--- FcmYlyW5nSD7yAY0lJYWnemJZIujuy0yRK25GJcG1M4
-9<EFBFBD>XM<>PH<05><1D>1<><31>Y<EFBFBD>,M<>L<EFBFBD><4C><EFBFBD><EFBFBD><EFBFBD><EFBFBD>b<><62>2<EFBFBD>ɍR<C98D><03><><EFBFBD>0<EFBFBD>3<EFBFBD><33>5<EFBFBD>^h⫍
+<0B><><EFBFBD>
-<EFBFBD><EFBFBD><EFBFBD>rix[d<><64>M<EFBFBD><0C>6<1B>l<EFBFBD><6C>;P,<2C>nX6@N~<7E><>iȃ<69>i2<69><32><16>o<EFBFBD><6F>

secrets/pingbox_backup_repo_password.age

@@ -0,0 +1,17 @@
+age-encryption.org/v1
+-> ssh-ed25519 eYYv1Q MOnAF1gIBzvuitiC6Nw4/SJppyOQff9j4gHPAcKmO1o
++G3RsKGN09DVOmQ7ma4lRoRFiYYCiCY2WoV6l5JKucM
+-> ssh-ed25519 Bp5IaA 1ftyP4x5WfRsZvOVYLUpiR5Q1hQgRU78j0Yuwv07OGw
+wtVAKEglVVu9B1yQwBp4AutzjDiTAAHbsrJJSMQPjLI
+-> ssh-ed25519 T/DpgA x/1vUD1VHZYBWwXzBO4c7P6WtLkTYu6KD8RglBtrsl8
+PRM6akgeJ64OHBV94jLojVJlHjwWiv0tLpJF2QnqXX4
+-> ssh-ed25519 qMgRFg fBlwYeWq+XwRgOclr/IK18QHbdwXr0kD+/b9HnQZ2yY
+52mokhUVu1AjcHBrWvJ3AS8Zr4o19ijhHxdo+tYQiuk
+-> ssh-ed25519 dMZXNw SobQAY/O2iJ4MKMtbDXyDEbwQpTvuoKvG8UKYWoEEF8
+eueMl+WoEMJOUSJ9hnt80w4lZXiWxPNJ1jXtGudFXVQ
+-> ssh-ed25519 +shbwg 0EPWn6B2GVHrw/eXWC9ugGIDFvXSCPfhFrg5F8GgeEA
+ql8+axPwSj9eQuGp4J9UjuK70TZqGsCXhFSczsQQUg8
+-> ssh-ed25519 RD8X/A nZXLx5Ujbu+h+odPK5kpLJUlegn117xQSEdiEDHWx14
+O/ftoh0wTit0RvlW+176vTE8r7yIrXK8GfL81pn1epk
+--- G1sqmtJfli22DKFmP90EzmGJNqkcxeFQlQ3WskR9dkQ
+<EFBFBD>쨺<EFBFBD>.<2E><><EFBFBD><14>D<<3C><>Q(JA<4A>}qOZ<4F><5A><EFBFBD>+t<>D<EFBFBD><44>im<69>]<5D>ޛj4<10>ڿ @s (EfF<18><>4#<23>dnޠ<6E><DEA0>4<EFBFBD><34><EFBFBD>n<EFBFBD>4eL{

secrets/pingbox_backup_s3_creds.age

@@ -0,0 +1,18 @@
+age-encryption.org/v1
+-> ssh-ed25519 eYYv1Q 4CKDsgu9sWc8ndynGaeVn5pGi00Q7MH1d10B+u/y6V4
+xoV29lRzNuiuUGb53LmAEtLAZqVPuasHhkAsYDV1vHI
+-> ssh-ed25519 Bp5IaA T/KQa0GccaU4+VWz6RkaJYy+xW64TtTrWmwTZaQhnSs
+M6Xeo00CnoTS2S0fxro3cR1jmMhhAgRYkUBvERVPDdg
+-> ssh-ed25519 T/DpgA RXD/DvpKiRAroiIHzeGvEvxu0Wqo9OTVEzGb7rALhQQ
+QMLi3YvEgcQnX3wbdvOMepxFFv8fVYV6gAT9xDgtlZk
+-> ssh-ed25519 qMgRFg gRd/ujAUy3cwfhOxqPG43g78C0JoanVeuTNgqkWdrGQ
+6jrqVbZVnJjfLt9Gty2W46uAXe1I1zRB8hZUYlT4f4U
+-> ssh-ed25519 dMZXNw Hi5EgfUVrLKEDk1X0dKw/E45wPnp/8m3AArlx6uVMAE
+cFNiWQc7l08OmyB92WEAiJBq81EwXrBahPF0Obra+iU
+-> ssh-ed25519 +shbwg HHQj8eV9/oX9bPfhdHGNqIs+/0PpdHZaqOtbddKqEV4
+cWja5Ik+cqWZEprdNsdYQX4bBLIr0SSlIvIq7E1Swa4
+-> ssh-ed25519 RD8X/A S0Ye1A3tg4oJxVOFYl7FCnx0M1WxV+KUYT2iJHvL7mA
+9eEP5uRWpkIfpnhzaAyYnXn7Mh6VlqsBVfbp+ojPOfk
+--- t8POWURQ6sCpE3t9cG6EdGlp4kymFepstZYyj07JWnI
+<EFBFBD>pj<EFBFBD><EFBFBD>t<EFBFBD>sr<><1E><><EFBFBD>T<EFBFBD><54>W<EFBFBD>PM<50><4D><EFBFBD><EFBFBD>]<0E><17><><EFBFBD>Nd7<64>&`<60><>bCɴ
+u<EFBFBD>a<EFBFBD><EFBFBD>)c9d<39><64>j<17>dɬK<C9AC><4B><EFBFBD>i@L<><4C><EFBFBD><EFBFBD><EFBFBD><EFBFBD>`<1D>`<60><>S<EFBFBD>zs<><73><EFBFBD>|<7C><>C0pG<70><13>.Ǭx<C7AC>e.<2E><>j

secrets/rclone_password1.age

@@ -1,19 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 eYYv1Q DqaKeDDz87lxpd5vMK4bcnq/3S7V116rZ6TdWMHNMjI
+-> ssh-ed25519 eYYv1Q 6vOBCYYulq/yMgZcE4pKNSWpkO615wAyBqCDcCvS7Qc
-XUe76IIiS6vZ+WuX/geMimGr6VBQvZCU0xgGV+Juhh8
+rX/Kw5qtZFSpAncxWVhG/LUzFuFiuEOuHcYUdBfkst8
--> ssh-ed25519 Bp5IaA T1I5f0biigGMBg4YXGZF3WiY1X1N+3fh1zbwo/8UuHM
+-> ssh-ed25519 Bp5IaA EtR1cN2DPBgy+r6hpat+jKSisbdCuLRm1gTLDE1KM0c
-oksdQ76Ag6LpXy8cfezQPOxxvy/qZkzhmTy9sqNItqw
+EVaQdf804QSqpAXrV82kL2XwHmqNXihLT42bzv5uIVo
--> ssh-ed25519 T/DpgA 9qc1fni0oFqFeE3l0pCAdHyMtn+pPOnH23rn8qVbPFE
+-> ssh-ed25519 T/DpgA nKRA3fgCa2+8SdLVqI4m6untb8aBlAuNf3zKJmQBAkY
-2POXvcfNW2zXzBu7QCbGEw4pqGj8aTrHIfczPWl5RpI
+MEd6efWFuqUtDJPDBgZqkTG2neZQZwA5HzIC7uElyIU
--> ssh-ed25519 qMgRFg q9M8wnO9MsaWpM941pwVaFF2RwKeON2cW+n8s8uRDBA
+-> ssh-ed25519 qMgRFg sAuPesGJ54EnRowUbFhAPRgOQxDr/TBPyqsJNcJ3j0A
-R9fwzp6S4L8cFXaFi5Du+GcQickV0+SOU/b7Q8Nyrfc
+DgEouiS8UjzAaQSVKFDObfxM0WijQtCQLzsSu7pFRwM
--> ssh-ed25519 dMZXNw Aphy90he30P6uyIJdvpiegBncnBNIoMpahg2XYrOPCU
+-> ssh-ed25519 dMZXNw DBchChRMA5hszqtjJvwvsNGZk9Z0HlvmNHMdx+OFVV4
-1BroEQo4SHy11PwVcTluq7XM7DZql+LfZX4DxWCPHBY
+U+LIDwbuKFGvuULEDuOPhyiTIcEjwpY9EA+HBes/Y6o
--> ssh-ed25519 +shbwg XX8o4B57nZ5teIicWs1LJysdM/irTe3wUpegSia2P2E
+-> ssh-ed25519 +shbwg hgFratZl3KxZDK08F1CWIMv7JwlDVNIByMAG/JJbjyI
-Wh+vzzl2f+vO7KNIex/UY4wcEtmq7NG0z4I5OtUfiGM
+YBnnlVasOTVYJmes/vchGK9FEWLGe/SS4ZHdwGcE79k
--> ssh-ed25519 GzHGXw 5rV4pXv5FpnOAGUkLcmFUnUwJv2xqh6NkbNUsPOhtlE
+-> ssh-ed25519 GzHGXw lHxuRl5gM+DPABDkiDhaArSgRFkNWV4qbsa+0HGzKU0
-wMHuKNeCXcz8e3zG1RaLQA6hKo7Cg/E6h7FfLUkQKuQ
+8nZbH5sJI6CGFD7K51xJ2MKr8DHqRrGEe+lQVH4plWY
--> ssh-ed25519 70Nt2Q N3MFptnU524HZBZrmzsHtATJWT/H2xegBQMr+0NS134
+-> ssh-ed25519 70Nt2Q 45n/rUffOJu3bzrTBymPToB8aTXcvQWOeFPVmLzB9WY
-Ta1AszHsbQhzqqPfCePaOB8fT1OJQMzpoPCAKDM9J2E
+QyewneIRy7KXqCXWZpzt9bTL65dtM41BPDx8bedZcUU
---- VkzSldNpvwIE4KGzPt+CVOHsXylmJ/L3KdjMlPgVfVI
+--- LWbHHVWdceA60roQicg72sJxBWPNvu4s8K1WNcorMpU
-<EFBFBD><EFBFBD><EFBFBD>X<EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ae<08><11><>?
0<><30><EFBFBD><EFBFBD>h<EFBFBD><15>zT<7A><54>x"<22><> <20>l<EFBFBD>P<EFBFBD><12><><02><><EFBFBD>Ӄ<EFBFBD><D383><EFBFBD>Q`<60><><EFBFBD>C<EFBFBD><43><EFBFBD>p<1D>2<EFBFBD><32>#35<33><35>
+<EFBFBD>CP?̮<>Dͳ˚<CDB3>V<EFBFBD><56>d<EFBFBD>{<16>-<2D><><0C><>fk9<6B><39>"<22><>٢'<27>\<5C>#̊<>eN`Ẉ
+<EFBFBD><EFBFBD><03>.1<EFBFBD><EFBFBD>
+<EFBFBD><EFBFBD><EFBFBD>I<EFBFBD>z<07><>

secrets/rclone_password2.age

@@ -1,20 +1,19 @@
 age-encryption.org/v1
--> ssh-ed25519 eYYv1Q RIMmsWmolEIOQUGgoIQRlmjTWqDLQYInJbPVeB7f/wU
+-> ssh-ed25519 eYYv1Q x9YHnQrHk/+xuNB3Dgds2YXl6snJw0BF/vy7h6+0USk
-06vZZhfXi1zqHznmbub9/wqsE8XvTlULe181cCz1oFc
+b3VaHkqpDOJlAahOx6zaKLaTouJqJ45tubz/jf05s38
--> ssh-ed25519 Bp5IaA LdaP3AOLKqGe3ala1UGFf0e7EThr9ptn4qUYzYSktz8
+-> ssh-ed25519 Bp5IaA Vz/hj6Ghlec3tRUY5tZ3is/uE+AT9GMPl93o0LppBiw
-c/6py1I4vJOtmoNRjm/99nlWax+J5pdMhh1GUzpIsMQ
+guTE7llA2Y4MT+v6bHT7nmqrKdxDeyvAdJMfbk4aUXM
--> ssh-ed25519 T/DpgA xvmg2ZQwPzUM9J6C0ggBPoRbW5R0w92unR3+W6dyo0M
+-> ssh-ed25519 T/DpgA tWDjI6k2AcEFPqX8K4Zwf5jtpvRDDCVSM4g+12cZOEI
-lNDyhV3PBS56HDXrTECTdcHUVb2rSNA3GsirYdxjhN4
+bqq3UGc0tHm0OO8Y+rmUX38iN685BKz0F719DZo/plA
--> ssh-ed25519 qMgRFg OLu/nzVnSnB6PdI5ZO0Nfp0Ga8ekWa5sWmqXhwYQ5VQ
+-> ssh-ed25519 qMgRFg fRuc+LYFQnHG9zhu6uK4aGdWu/crjXl27tnTE98bLiA
-x2LlyRBvB0Pw2yYi43KXeHUgJQ25OQEIX65L8wmcXz4
+JFkTAqDWygs8UXnYeZ05MXJ35lgtRy4LTOLLS0STkXQ
--> ssh-ed25519 dMZXNw m3ydHsFKsxmbA3e6jcLVoZV60Y+OLmoOb4d05DQQsDU
+-> ssh-ed25519 dMZXNw sdLzOdQ7R+0AFpjb3CSH2djvdT7qedS1io7LxcbHeCM
-MDOCsqlPc9rR3d0+sDbv0tPxr+hX3Kpc+E2HfZo87uo
+tPWjCR+sim3lJmIBbRBdjZ/5WCQWZ5OlMA8Rere2GHY
--> ssh-ed25519 +shbwg eQnubQCP4+mjipTkxIrIEZ8rboOy2A/T5MWLe4Txz0w
+-> ssh-ed25519 +shbwg JzFxfwYd2EHJklt1edx21IKPkBwNIEXekVPm0CtFTXw
-Y6GEm6UZDegoPuUXxbK/LkrqZBY86rHt475anCnoFxg
+SVYAq6wZm+HqL+zRLkkQETaUrgaq6UCKmai1+AIQ2mU
--> ssh-ed25519 GzHGXw Z8Ut75VgG0ttf2LLjgfUb9TbxpW8nfSTLvx7FJoXDA0
+-> ssh-ed25519 GzHGXw G8XbVaclLKQmpg0rcz5NjJoREpBqkfZSIJ1BXmUOwQ0
-pjfgN5XokETssMCbolQ0nr2+4sTa1C0+oxg4IUIEgVw
+xNwiO1Mo6WdfCEgAYtUHbC9oRhaKzXCuARazCHc93gU
--> ssh-ed25519 70Nt2Q Vmm5Dw+N8OVT9JawsVnYoC1FIOX7bKEb54Gb1cYMFC8
+-> ssh-ed25519 70Nt2Q WNZK+p/no7glfDohKMmi6fGXC2TikrnyvvkvBORRXyw
-/FNGoN4CbLahBtxj8zaNRjE7wM/3hXVJSFsfP0AJxc8
+7Gu0e2jzECq21S8djgW1YRTK98EmU03Gk0cRtF0/pgo
---- HOnH0WA6bQZ0y9HEjgzmOo+P3hRosz1fM5tRVrYZ09A
+--- 14oASxLoERqbPTjBVECRCgo6bTG5MXb1WR5NTGB41UU
-<EFBFBD>,<2C>
+<EFBFBD>.ÝVi<11><>f\<5C><>7<EFBFBD><14>Z<EFBFBD><5A>i	<09><07>rVayZ"<22>p<EFBFBD>Խ<EFBFBD>fp<66>a<18><><EFBFBD>ji<08><><EFBFBD>
-<EFBFBD>9<EFBFBD><1A><03>Or4<72><34><EFBFBD><EFBFBD>ǔխ<17>H<>ě7<C49B>pkR<1E>+m<><0B>w<16>RS<02>)<29>&

secrets/secrets.nix

@@ -37,4 +37,6 @@ in {
   "danflix_env_file.age".publicKeys = users ++ [system4 system5];
   "danflix_rclone_config.age".publicKeys = users ++ [system4 system5];
   "caddy_porkbun_api_env.age".publicKeys = users ++ [system4 system5];
+  "pingbox_backup_s3_creds.age".publicKeys = users ++ [system3];
+  "pingbox_backup_repo_password.age".publicKeys = users ++ [system3];
 }

users/configs/desktop/default.nix

@@ -3,9 +3,13 @@
     # ./i3
     # ./i3status-rust
     # ./polybar
+    ./fuzzel
+    ./niri
     ./river
     ./sway
     ./tofi
     ./waybar
   ];
+
+  programs.zen-browser.enable = true;
 }

users/configs/desktop/fuzzel/default.nix

@@ -0,0 +1,19 @@
+{pkgs, ...}: {
+  programs.fuzzel = {
+    enable = true;
+    settings = {
+      main = {
+        include = "${./green.ini}";
+
+        font = "Iosevka Nerd Font Propo:size=16";
+
+        width = 60;
+        lines = 15;
+      };
+      border = {
+        width = 3;
+        radius = 15;
+      };
+    };
+  };
+}

users/configs/desktop/fuzzel/green.ini

@@ -0,0 +1,12 @@
+[colors]
+background=24273add
+text=cad3f5ff
+prompt=b8c0e0ff
+placeholder=8087a2ff
+input=cad3f5ff
+match=a6da95ff
+selection=5b6078ff
+selection-text=cad3f5ff
+selection-match=a6da95ff
+counter=8087a2ff
+border=a6da95ff

users/configs/desktop/niri/config.kdl

@@ -0,0 +1,539 @@
+// This config is in the KDL format: https://kdl.dev
+// "/-" comments out the following node.
+// Check the wiki for a full description of the configuration:
+// https://github.com/YaLTeR/niri/wiki/Configuration:-Overview
+
+// Input device configuration.
+// Find the full list of options on the wiki:
+// https://github.com/YaLTeR/niri/wiki/Configuration:-Input
+input {
+    keyboard {
+        xkb {
+            // You can set rules, model, layout, variant and options.
+            // For more information, see xkeyboard-config(7).
+
+            // For example:
+            // layout "us,ru"
+            // options "grp:win_space_toggle,compose:ralt,ctrl:nocaps"
+            layout "gb"
+            options "caps:escape"
+        }
+    }
+
+    // Next sections include libinput settings.
+    // Omitting settings disables them, or leaves them at their default values.
+    touchpad {
+        // off
+        tap
+        // dwt
+        // dwtp
+        natural-scroll
+        scroll-factor 0.5
+        accel-speed 0.4
+        accel-profile "flat"
+        // scroll-method "two-finger"
+        // disabled-on-external-mouse
+    }
+
+    mouse {
+        // off
+        // natural-scroll
+        accel-speed 0.2
+        accel-profile "flat"
+        // scroll-method "no-scroll"
+    }
+
+    trackpoint {
+        // off
+        // natural-scroll
+        // accel-speed 0.2
+        // accel-profile "flat"
+        // scroll-method "on-button-down"
+        // scroll-button 273
+        // middle-emulation
+    }
+
+    // Uncomment this to make the mouse warp to the center of newly focused windows.
+    // warp-mouse-to-focus
+
+    // Focus windows and outputs automatically when moving the mouse into them.
+    // Setting max-scroll-amount="0%" makes it work only on windows already fully on screen.
+    focus-follows-mouse max-scroll-amount="0%"
+}
+
+// You can configure outputs by their name, which you can find
+// by running `niri msg outputs` while inside a niri instance.
+// The built-in laptop monitor is usually called "eDP-1".
+// Find more information on the wiki:
+// https://github.com/YaLTeR/niri/wiki/Configuration:-Outputs
+// Remember to uncomment the node by removing "/-"!
+output "eDP-1" {
+    // Uncomment this line to disable this output.
+    // off
+
+    // Resolution and, optionally, refresh rate of the output.
+    // The format is "<width>x<height>" or "<width>x<height>@<refresh rate>".
+    // If the refresh rate is omitted, niri will pick the highest refresh rate
+    // for the resolution.
+    // If the mode is omitted altogether or is invalid, niri will pick one automatically.
+    // Run `niri msg outputs` while inside a niri instance to list all outputs and their modes.
+    // mode "1920x1080@120.030"
+
+    // You can use integer or fractional scale, for example use 1.5 for 150% scale.
+    scale 1.33
+
+    // Transform allows to rotate the output counter-clockwise, valid values are:
+    // normal, 90, 180, 270, flipped, flipped-90, flipped-180 and flipped-270.
+    transform "normal"
+
+    // Position of the output in the global coordinate space.
+    // This affects directional monitor actions like "focus-monitor-left", and cursor movement.
+    // The cursor can only move between directly adjacent outputs.
+    // Output scale and rotation has to be taken into account for positioning:
+    // outputs are sized in logical, or scaled, pixels.
+    // For example, a 3840×2160 output with scale 2.0 will have a logical size of 1920×1080,
+    // so to put another output directly adjacent to it on the right, set its x to 1920.
+    // If the position is unset or results in an overlap, the output is instead placed
+    // automatically.
+    // position x=1280 y=0
+}
+
+output "DP-3" {
+    scale 1.33
+    position x=0 y=600
+}
+
+output "HDMI-A-1" {
+    scale 1.33
+    transform "90"
+    position x=2880 y=0
+}
+
+// Settings that influence how windows are positioned and sized.
+// Find more information on the wiki:
+// https://github.com/YaLTeR/niri/wiki/Configuration:-Layout
+layout {
+    // Set gaps around windows in logical pixels.
+    gaps 12
+
+    // When to center a column when changing focus, options are:
+    // - "never", default behavior, focusing an off-screen column will keep at the left
+    //   or right edge of the screen.
+    // - "always", the focused column will always be centered.
+    // - "on-overflow", focusing a column will center it if it doesn't fit
+    //   together with the previously focused column.
+    center-focused-column "never"
+
+    // You can customize the widths that "switch-preset-column-width" (Mod+R) toggles between.
+    preset-column-widths {
+        // Proportion sets the width as a fraction of the output width, taking gaps into account.
+        // For example, you can perfectly fit four windows sized "proportion 0.25" on an output.
+        // The default preset widths are 1/3, 1/2 and 2/3 of the output.
+        proportion 0.33333
+        proportion 0.5
+        proportion 0.66667
+
+        // Fixed sets the width in logical pixels exactly.
+        // fixed 1920
+    }
+
+    // You can also customize the heights that "switch-preset-window-height" (Mod+Shift+R) toggles between.
+    // preset-window-heights { }
+
+    // You can change the default width of the new windows.
+    default-column-width { proportion 0.5; }
+    // If you leave the brackets empty, the windows themselves will decide their initial width.
+    // default-column-width {}
+
+    // By default focus ring and border are rendered as a solid background rectangle
+    // behind windows. That is, they will show up through semitransparent windows.
+    // This is because windows using client-side decorations can have an arbitrary shape.
+    //
+    // If you don't like that, you should uncomment `prefer-no-csd` below.
+    // Niri will draw focus ring and border *around* windows that agree to omit their
+    // client-side decorations.
+    //
+    // Alternatively, you can override it with a window rule called
+    // `draw-border-with-background`.
+
+    // You can change how the focus ring looks.
+    focus-ring {
+        // Uncomment this line to disable the focus ring.
+        // off
+
+        // How many logical pixels the ring extends out from the windows.
+        width 6
+
+        // Colors can be set in a variety of ways:
+        // - CSS named colors: "red"
+        // - RGB hex: "#rgb", "#rgba", "#rrggbb", "#rrggbbaa"
+        // - CSS-like notation: "rgb(255, 127, 0)", rgba(), hsl() and a few others.
+
+        // Color of the ring on the active monitor.
+        // active-color "#7fc8ff"
+
+        // Color of the ring on inactive monitors.
+        // inactive-color "#505050"
+
+        // You can also use gradients. They take precedence over solid colors.
+        // Gradients are rendered the same as CSS linear-gradient(angle, from, to).
+        // The angle is the same as in linear-gradient, and is optional,
+        // defaulting to 180 (top-to-bottom gradient).
+        // You can use any CSS linear-gradient tool on the web to set these up.
+        // Changing the color space is also supported, check the wiki for more info.
+        //
+        active-gradient from="#f00f" to="#0f0f" angle=45 in="oklch longer hue"
+
+        // You can also color the gradient relative to the entire view
+        // of the workspace, rather than relative to just the window itself.
+        // To do that, set relative-to="workspace-view".
+        //
+        // inactive-gradient from="#505050" to="#808080" angle=45 relative-to="workspace-view"
+    }
+
+    // You can also add a border. It's similar to the focus ring, but always visible.
+    border {
+        // The settings are the same as for the focus ring.
+        // If you enable the border, you probably want to disable the focus ring.
+        off
+
+        width 4
+        active-color "#ffc87f"
+        inactive-color "#505050"
+
+        // active-gradient from="#ffbb66" to="#ffc880" angle=45 relative-to="workspace-view"
+        // inactive-gradient from="#505050" to="#808080" angle=45 relative-to="workspace-view"
+    }
+
+    // Struts shrink the area occupied by windows, similarly to layer-shell panels.
+    // You can think of them as a kind of outer gaps. They are set in logical pixels.
+    // Left and right struts will cause the next window to the side to always be visible.
+    // Top and bottom struts will simply add outer gaps in addition to the area occupied by
+    // layer-shell panels and regular gaps.
+    struts {
+        // left 64
+        // right 64
+        // top 64
+        // bottom 64
+    }
+}
+
+// Add lines like this to spawn processes at startup.
+// Note that running niri as a session supports xdg-desktop-autostart,
+// which may be more convenient to use.
+// See the binds section below for more spawn examples.
+// spawn-at-startup "alacritty" "-e" "fish"
+spawn-at-startup "dbus-update-activation-environment" "--systemd" "DISPLAY" "WAYLAND_DISPLAY" "XDG_CURRENT_DESKTOP"
+spawn-at-startup "systemctl" "--user" "import-environment" "PATH" "DISPLAY" "WAYLAND_DISPLAY"
+
+spawn-at-startup "waybar"
+spawn-at-startup "xwayland-satellite"
+
+environment {
+    DISPLAY ":0"
+}
+
+// Uncomment this line to ask the clients to omit their client-side decorations if possible.
+// If the client will specifically ask for CSD, the request will be honored.
+// Additionally, clients will be informed that they are tiled, removing some client-side rounded corners.
+// This option will also fix border/focus ring drawing behind some semitransparent windows.
+// After enabling or disabling this, you need to restart the apps for this to take effect.
+// prefer-no-csd
+
+// You can change the path where screenshots are saved.
+// A ~ at the front will be expanded to the home directory.
+// The path is formatted with strftime(3) to give you the screenshot date and time.
+screenshot-path "~/Pictures/Screenshots/Screenshot from %Y-%m-%d %H-%M-%S.png"
+
+// You can also set this to null to disable saving screenshots to disk.
+// screenshot-path null
+
+// Animation settings.
+// The wiki explains how to configure individual animations:
+// https://github.com/YaLTeR/niri/wiki/Configuration:-Animations
+animations {
+    // Uncomment to turn off all animations.
+    // off
+
+    // Slow down all animations by this factor. Values below 1 speed them up instead.
+    // slowdown 3.0
+}
+
+// Window rules let you adjust behavior for individual windows.
+// Find more information on the wiki:
+// https://github.com/YaLTeR/niri/wiki/Configuration:-Window-Rules
+
+// Work around WezTerm's initial configure bug
+// by setting an empty default-column-width.
+window-rule {
+    // This regular expression is intentionally made as specific as possible,
+    // since this is the default config, and we want no false positives.
+    // You can get away with just app-id="wezterm" if you want.
+    match app-id=r#"^org\.wezfurlong\.wezterm$"#
+    default-column-width {}
+}
+
+// Open the Firefox picture-in-picture player as floating by default.
+window-rule {
+    // This app-id regular expression will work for both:
+    // - host Firefox (app-id is "firefox")
+    // - Flatpak Firefox (app-id is "org.mozilla.firefox")
+    match app-id=r#"firefox$"# title="^Picture-in-Picture$"
+    open-floating true
+}
+
+// Example: block out two password managers from screen capture.
+// (This example rule is commented out with a "/-" in front.)
+/-window-rule {
+    match app-id=r#"^org\.keepassxc\.KeePassXC$"#
+    match app-id=r#"^org\.gnome\.World\.Secrets$"#
+
+    block-out-from "screen-capture"
+
+    // Use this instead if you want them visible on third-party screenshot tools.
+    // block-out-from "screencast"
+}
+
+// Example: enable rounded corners for all windows.
+// (This example rule is commented out with a "/-" in front.)
+window-rule {
+    geometry-corner-radius 12
+    clip-to-geometry true
+}
+
+binds {
+    // Keys consist of modifiers separated by + signs, followed by an XKB key name
+    // in the end. To find an XKB name for a particular key, you may use a program
+    // like wev.
+    //
+    // "Mod" is a special modifier equal to Super when running on a TTY, and to Alt
+    // when running as a winit window.
+    //
+    // Most actions that you can bind here can also be invoked programmatically with
+    // `niri msg action do-something`.
+
+    // Mod-Shift-/, which is usually the same as Mod-?,
+    // shows a list of important hotkeys.
+    Mod+Shift+Slash { show-hotkey-overlay; }
+
+    // Suggested binds for running programs: terminal, app launcher, screen locker.
+    Mod+T { spawn "ghostty"; }
+    // Mod+D { spawn "tofi-drun" "--drun-launch=true"; }
+    Mod+D { spawn "fuzzel"; }
+    Mod+Escape { spawn "swaylock" "-i" "~/wallpapers/lock.png"; }
+
+    // You can also use a shell. Do this if you need pipes, multiple commands, etc.
+    // Note: the entire command goes as a single argument in the end.
+    // Mod+T { spawn "bash" "-c" "notify-send hello && exec alacritty"; }
+
+    // Example volume keys mappings for PipeWire & WirePlumber.
+    // The allow-when-locked=true property makes them work even when the session is locked.
+    XF86AudioRaiseVolume allow-when-locked=true { spawn "wpctl" "set-volume" "@DEFAULT_AUDIO_SINK@" "5%+"; }
+    XF86AudioLowerVolume allow-when-locked=true { spawn "wpctl" "set-volume" "@DEFAULT_AUDIO_SINK@" "5%-"; }
+    XF86AudioMute        allow-when-locked=true { spawn "wpctl" "set-mute" "@DEFAULT_AUDIO_SINK@" "toggle"; }
+    XF86AudioMicMute     allow-when-locked=true { spawn "wpctl" "set-mute" "@DEFAULT_AUDIO_SOURCE@" "toggle"; }
+    XF86AudioPrev        allow-when-locked=true { spawn "playerctl" "previous"; }
+    XF86AudioPlay        allow-when-locked=true { spawn "playerctl" "play-pause"; }
+    XF86AudioNext        allow-when-locked=true { spawn "playerctl" "next"; }
+
+    XF86MonBrightnessUp   allow-when-locked=true { spawn "xbacklight" "-inc" "10"; }
+    XF86MonBrightnessDown allow-when-locked=true { spawn "xbacklight" "-dec" "10"; }
+
+    Mod+Q { close-window; }
+
+    Mod+Left  { focus-column-left; }
+    Mod+Down  { focus-window-down; }
+    Mod+Up    { focus-window-up; }
+    Mod+Right { focus-column-right; }
+    Mod+H     { focus-column-left; }
+    Mod+J     { focus-window-down; }
+    Mod+K     { focus-window-up; }
+    Mod+L     { focus-column-right; }
+
+    Mod+Ctrl+Left  { move-column-left; }
+    Mod+Ctrl+Down  { move-window-down; }
+    Mod+Ctrl+Up    { move-window-up; }
+    Mod+Ctrl+Right { move-column-right; }
+    Mod+Ctrl+H     { move-column-left; }
+    Mod+Ctrl+J     { move-window-down; }
+    Mod+Ctrl+K     { move-window-up; }
+    Mod+Ctrl+L     { move-column-right; }
+
+    // Alternative commands that move across workspaces when reaching
+    // the first or last window in a column.
+    // Mod+J     { focus-window-or-workspace-down; }
+    // Mod+K     { focus-window-or-workspace-up; }
+    // Mod+Ctrl+J     { move-window-down-or-to-workspace-down; }
+    // Mod+Ctrl+K     { move-window-up-or-to-workspace-up; }
+
+    Mod+Home { focus-column-first; }
+    Mod+End  { focus-column-last; }
+    Mod+Ctrl+Home { move-column-to-first; }
+    Mod+Ctrl+End  { move-column-to-last; }
+
+    Mod+Shift+Left  { focus-monitor-left; }
+    Mod+Shift+Down  { focus-monitor-down; }
+    Mod+Shift+Up    { focus-monitor-up; }
+    Mod+Shift+Right { focus-monitor-right; }
+    Mod+Shift+H     { focus-monitor-left; }
+    Mod+Shift+J     { focus-monitor-down; }
+    Mod+Shift+K     { focus-monitor-up; }
+    Mod+Shift+L     { focus-monitor-right; }
+
+    Mod+Shift+Ctrl+Left  { move-column-to-monitor-left; }
+    Mod+Shift+Ctrl+Down  { move-column-to-monitor-down; }
+    Mod+Shift+Ctrl+Up    { move-column-to-monitor-up; }
+    Mod+Shift+Ctrl+Right { move-column-to-monitor-right; }
+    Mod+Shift+Ctrl+H     { move-column-to-monitor-left; }
+    Mod+Shift+Ctrl+J     { move-column-to-monitor-down; }
+    Mod+Shift+Ctrl+K     { move-column-to-monitor-up; }
+    Mod+Shift+Ctrl+L     { move-column-to-monitor-right; }
+
+    // Alternatively, there are commands to move just a single window:
+    // Mod+Shift+Ctrl+Left  { move-window-to-monitor-left; }
+    // ...
+
+    // And you can also move a whole workspace to another monitor:
+    // Mod+Shift+Ctrl+Left  { move-workspace-to-monitor-left; }
+    // ...
+
+    Mod+Page_Down      { focus-workspace-down; }
+    Mod+Page_Up        { focus-workspace-up; }
+    Mod+U              { focus-workspace-down; }
+    Mod+I              { focus-workspace-up; }
+    Mod+Ctrl+Page_Down { move-column-to-workspace-down; }
+    Mod+Ctrl+Page_Up   { move-column-to-workspace-up; }
+    Mod+Ctrl+U         { move-column-to-workspace-down; }
+    Mod+Ctrl+I         { move-column-to-workspace-up; }
+
+    // Alternatively, there are commands to move just a single window:
+    // Mod+Ctrl+Page_Down { move-window-to-workspace-down; }
+    // ...
+
+    Mod+Shift+Page_Down { move-workspace-down; }
+    Mod+Shift+Page_Up   { move-workspace-up; }
+    Mod+Shift+U         { move-workspace-down; }
+    Mod+Shift+I         { move-workspace-up; }
+
+    // You can bind mouse wheel scroll ticks using the following syntax.
+    // These binds will change direction based on the natural-scroll setting.
+    //
+    // To avoid scrolling through workspaces really fast, you can use
+    // the cooldown-ms property. The bind will be rate-limited to this value.
+    // You can set a cooldown on any bind, but it's most useful for the wheel.
+    Mod+WheelScrollDown      cooldown-ms=150 { focus-workspace-down; }
+    Mod+WheelScrollUp        cooldown-ms=150 { focus-workspace-up; }
+    Mod+Ctrl+WheelScrollDown cooldown-ms=150 { move-column-to-workspace-down; }
+    Mod+Ctrl+WheelScrollUp   cooldown-ms=150 { move-column-to-workspace-up; }
+
+    Mod+WheelScrollRight      { focus-column-right; }
+    Mod+WheelScrollLeft       { focus-column-left; }
+    Mod+Ctrl+WheelScrollRight { move-column-right; }
+    Mod+Ctrl+WheelScrollLeft  { move-column-left; }
+
+    // Usually scrolling up and down with Shift in applications results in
+    // horizontal scrolling; these binds replicate that.
+    Mod+Shift+WheelScrollDown      { focus-column-right; }
+    Mod+Shift+WheelScrollUp        { focus-column-left; }
+    Mod+Ctrl+Shift+WheelScrollDown { move-column-right; }
+    Mod+Ctrl+Shift+WheelScrollUp   { move-column-left; }
+
+    // Similarly, you can bind touchpad scroll "ticks".
+    // Touchpad scrolling is continuous, so for these binds it is split into
+    // discrete intervals.
+    // These binds are also affected by touchpad's natural-scroll, so these
+    // example binds are "inverted", since we have natural-scroll enabled for
+    // touchpads by default.
+    // Mod+TouchpadScrollDown { spawn "wpctl" "set-volume" "@DEFAULT_AUDIO_SINK@" "0.02+"; }
+    // Mod+TouchpadScrollUp   { spawn "wpctl" "set-volume" "@DEFAULT_AUDIO_SINK@" "0.02-"; }
+
+    // You can refer to workspaces by index. However, keep in mind that
+    // niri is a dynamic workspace system, so these commands are kind of
+    // "best effort". Trying to refer to a workspace index bigger than
+    // the current workspace count will instead refer to the bottommost
+    // (empty) workspace.
+    //
+    // For example, with 2 workspaces + 1 empty, indices 3, 4, 5 and so on
+    // will all refer to the 3rd workspace.
+    Mod+1 { focus-workspace 1; }
+    Mod+2 { focus-workspace 2; }
+    Mod+3 { focus-workspace 3; }
+    Mod+4 { focus-workspace 4; }
+    Mod+5 { focus-workspace 5; }
+    Mod+6 { focus-workspace 6; }
+    Mod+7 { focus-workspace 7; }
+    Mod+8 { focus-workspace 8; }
+    Mod+9 { focus-workspace 9; }
+    Mod+Ctrl+1 { move-column-to-workspace 1; }
+    Mod+Ctrl+2 { move-column-to-workspace 2; }
+    Mod+Ctrl+3 { move-column-to-workspace 3; }
+    Mod+Ctrl+4 { move-column-to-workspace 4; }
+    Mod+Ctrl+5 { move-column-to-workspace 5; }
+    Mod+Ctrl+6 { move-column-to-workspace 6; }
+    Mod+Ctrl+7 { move-column-to-workspace 7; }
+    Mod+Ctrl+8 { move-column-to-workspace 8; }
+    Mod+Ctrl+9 { move-column-to-workspace 9; }
+
+    // Alternatively, there are commands to move just a single window:
+    // Mod+Ctrl+1 { move-window-to-workspace 1; }
+
+    // Switches focus between the current and the previous workspace.
+    // Mod+Tab { focus-workspace-previous; }
+
+    // The following binds move the focused window in and out of a column.
+    // If the window is alone, they will consume it into the nearby column to the side.
+    // If the window is already in a column, they will expel it out.
+    Mod+BracketLeft  { consume-or-expel-window-left; }
+    Mod+BracketRight { consume-or-expel-window-right; }
+
+    // Consume one window from the right to the bottom of the focused column.
+    Mod+Comma  { consume-window-into-column; }
+    // Expel the bottom window from the focused column to the right.
+    Mod+Period { expel-window-from-column; }
+
+    Mod+R { switch-preset-column-width; }
+    Mod+Shift+R { switch-preset-window-height; }
+    Mod+Ctrl+R { reset-window-height; }
+    Mod+F { maximize-column; }
+    Mod+Shift+F { fullscreen-window; }
+    Mod+C { center-column; }
+
+    // Finer width adjustments.
+    // This command can also:
+    // * set width in pixels: "1000"
+    // * adjust width in pixels: "-5" or "+5"
+    // * set width as a percentage of screen width: "25%"
+    // * adjust width as a percentage of screen width: "-10%" or "+10%"
+    // Pixel sizes use logical, or scaled, pixels. I.e. on an output with scale 2.0,
+    // set-column-width "100" will make the column occupy 200 physical screen pixels.
+    Mod+Minus { set-column-width "-10%"; }
+    Mod+Equal { set-column-width "+10%"; }
+
+    // Finer height adjustments when in column with other windows.
+    Mod+Shift+Minus { set-window-height "-10%"; }
+    Mod+Shift+Equal { set-window-height "+10%"; }
+
+    // Move the focused window between the floating and the tiling layout.
+    Mod+V       { toggle-window-floating; }
+    Mod+Shift+V { switch-focus-between-floating-and-tiling; }
+
+    // Actions to switch layouts.
+    // Note: if you uncomment these, make sure you do NOT have
+    // a matching layout switch hotkey configured in xkb options above.
+    // Having both at once on the same hotkey will break the switching,
+    // since it will switch twice upon pressing the hotkey (once by xkb, once by niri).
+    // Mod+Space       { switch-layout "next"; }
+    // Mod+Shift+Space { switch-layout "prev"; }
+
+    Print { screenshot; }
+    Ctrl+Print { screenshot-screen; }
+    Alt+Print { screenshot-window; }
+
+    // The quit action will show a confirmation dialog to avoid accidental exits.
+    Mod+Shift+E { quit; }
+    Ctrl+Alt+Delete { quit; }
+
+    // Powers off the monitors. To turn them back on, do any input like
+    // moving the mouse or pressing any other key.
+    Mod+Shift+P { power-off-monitors; }
+}

users/configs/desktop/niri/default.nix

@@ -0,0 +1,5 @@
+{...}: {
+  home.file = {
+    ".config/niri/config.kdl".source = ./config.kdl;
+  };
+}

users/configs/desktop/sway/default.nix

@@ -23,6 +23,9 @@ in {
 
   wayland.windowManager.sway = {
     enable = true;
+    extraConfigEarly = ''
+      exec systemctl --user import-environment PATH
+    '';
     config = {
       startup = [
         {command = "swaybg -i ~/wallpapers/wallpaper.jpg";}
@@ -52,34 +55,36 @@ in {
           natural_scroll = "enabled";
         };
       };
-      output = if hostname == "sidon"
+      output =
-      then {
+        if hostname == "sidon"
-        DP-3 = {
+        then {
-          position = "0 600";
+          DP-3 = {
-          scale = "1.33";
+            position = "0 600";
+            scale = "1.33";
+          };
+          HDMI-A-1 = {
+            position = "2880 0";
+            scale = "1.33";
+            transform = "270";
+          };
+        }
+        else {
+          eDP-1 = {
+            scale = "1.33";
+          };
+          DP-3 = {
+            position = "0 0";
+            scale = "1.33";
+          };
+          DP-4 = {
+            position = "2880 0";
+            scale = "1.33";
+          };
+          HDMI-A-1 = {
+            position = "2880 0";
+            scale = "1.33";
+          };
         };
-        HDMI-A-1 = {
-          position = "2880 0";
-          scale = "1.33";
-          transform = "270";
-        };
-      } else {
-        eDP-1 = {
-          scale = "1.33";
-        };
-        DP-3 = {
-          position = "0 0";
-          scale = "1.33";
-        };
-        DP-4 = {
-          position = "2880 0";
-          scale = "1.33";
-        };
-        HDMI-A-1 = {
-          position = "2880 0";
-          scale = "1.33";
-        };
-      };
       workspaceOutputAssign = [
         {
           output = "HDMI-A-1";
@@ -98,6 +103,7 @@ in {
         "${hyper}+Return" = "exec ghostty";
         "${hyper}+q" = "kill";
         "${hyper}+d" = "exec tofi-drun --drun-launch=true";
+        "${mod}+Delete" = "exit";
 
         "${mod}+Shift+s" = "exec grim -g \"$(slurp)\"";
 

users/configs/desktop/waybar/config.json

@@ -1,6 +1,7 @@
 {
 	"layer": "top",
 	"modules-left": [
+		"niri/workspaces",
 		"sway/workspaces",
 		"sway/window"
 	],

users/configs/system/ghostty/config

@@ -1,33 +0,0 @@
-font-family = Iosevka Nerd Font
-font-size = 12
-
-theme = catppuccin-macchiato
-
-cursor-style = block
-
-shell-integration-features = no-cursor
-
-window-theme = ghostty
-window-decoration = false
-working-directory = home
-
-unfocused-split-opacity = 1
-
-keybind = ctrl+shift+enter>ctrl+shift+h=new_split:left
-keybind = ctrl+shift+enter>ctrl+shift+l=new_split:right
-keybind = ctrl+shift+enter>ctrl+shift+k=new_split:up
-keybind = ctrl+shift+enter>ctrl+shift+j=new_split:down
-keybind = ctrl+shift+enter>h=new_split:left
-keybind = ctrl+shift+enter>l=new_split:right
-keybind = ctrl+shift+enter>k=new_split:up
-keybind = ctrl+shift+enter>j=new_split:down
-
-keybind = ctrl+shift+f=toggle_split_zoom
-keybind = ctrl+shift+h=goto_split:left
-keybind = ctrl+shift+l=goto_split:right
-keybind = ctrl+shift+k=goto_split:top
-keybind = ctrl+shift+j=goto_split:bottom
-
-keybind = ctrl+shift+m=toggle_tab_overview
-
-keybind = ctrl+shift+alt+r=reset

users/configs/system/ghostty/default.nix

@@ -4,11 +4,47 @@
   hostname,
   ...
 }: {
-  home.file.".config/ghostty/config" = {
-    source = ./config;
-  };
-
   programs.ghostty = {
     enable = true;
+    settings = {
+      font-family = "Iosevka Nerd Font";
+      font-size = 12;
+
+      theme = "Catppuccin Macchiato";
+
+      cursor-style = "block";
+
+      shell-integration-features = "no-cursor";
+      window-theme = "ghostty";
+      window-decoration =
+        if hostname == "pingbox"
+        then "none"
+        else "auto";
+      working-directory = "home";
+
+      unfocused-split-opacity = 1;
+
+      keybind = [
+        "ctrl+shift+enter>ctrl+shift+h=new_split:left"
+        "ctrl+shift+enter>ctrl+shift+l=new_split:right"
+        "ctrl+shift+enter>ctrl+shift+k=new_split:up"
+        "ctrl+shift+enter>ctrl+shift+j=new_split:down"
+        "ctrl+shift+enter>h=new_split:left"
+        "ctrl+shift+enter>l=new_split:right"
+        "ctrl+shift+enter>k=new_split:up"
+        "ctrl+shift+enter>j=new_split:down"
+
+        "ctrl+shift+f=toggle_split_zoom"
+        "alt+enter=toggle_split_zoom"
+        "ctrl+shift+h=goto_split:left"
+        "ctrl+shift+l=goto_split:right"
+        "ctrl+shift+k=goto_split:top"
+        "ctrl+shift+j=goto_split:bottom"
+
+        "ctrl+shift+m=toggle_tab_overview"
+
+        "ctrl+shift+alt+r=reset"
+      ];
+    };
   };
 }

users/daniel/default.nix

@@ -4,15 +4,16 @@
   fetchurl,
   hostname,
   headless,
+  inputs,
   ...
 }: let
   cliPackages = with pkgs; [
     age
     direnv
-    elixir_1_17
+    elixir
     elixir-ls
     entr
-    erlang_26
+    erlang
     gnumake
     go
     gopls
@@ -46,7 +47,6 @@
     _1password-cli
     _1password-gui
     calibre
-    deadbeef
     discord
     feh
     fraunces
@@ -69,7 +69,9 @@
     wezterm
     wl-clipboard
     xclip
+    xwayland-satellite
     zathura
+    zed-editor
   ];
 
   defaultUser = "daniel";
@@ -79,6 +81,7 @@ in {
       ../configs/system
     ]
     ++ lib.optionals (!headless) [
+      inputs.zen-browser.homeModules.beta
       ../configs/desktop
     ]
     ++ lib.optionals (builtins.pathExists ./host-specific/${hostname}) [
@@ -92,6 +95,10 @@ in {
       "$HOME/go/bin"
     ];
 
+    sessionVariables = {
+      NIXOS_OZONE_WL = "1";
+    };
+
     file = {
       ".icons/default".source = "${pkgs.capitaine-cursors}/share/icons/capitaine-cursors";
 
@@ -118,6 +125,27 @@ in {
     stateVersion = "21.05";
   };
 
+  xdg.portal = {
+    enable = true;
+    extraPortals = with pkgs; [
+      xdg-desktop-portal-gtk
+      xdg-desktop-portal-wlr
+      xdg-desktop-portal-gnome
+    ];
+    xdgOpenUsePortal = true;
+    config = {
+      common = {
+        default = "gtk";
+        "org.freedesktop.impl.portal.Screencast" = "wlr";
+        "org.freedesktop.impl.portal.Screenshot" = "wlr";
+      };
+    };
+  };
+
+  services.udiskie = {
+    enable = true;
+  };
+
   programs = {
     # Let Home Manager install and manage itself.
     home-manager.enable = true;
@@ -133,10 +161,11 @@ in {
 
     git = {
       enable = true;
+      lfs.enable = true;
       package = pkgs.gitFull;
-      userName = "Daniel Patterson";
+      settings = {
-      userEmail = "me@danielpatterson.dev";
+        user.name = "Daniel Patterson";
-      extraConfig = {
+        user.email = "me@danielpatterson.dev";
         pull.rebase = true;
         init.defaultBranch = "main";
         format.signOff = "yes";

users/daniel/host-specific/leviathan/default.nix

@@ -0,0 +1,21 @@
+{pkgs, ...}: let
+  # librespot = pkgs.callPackage ../../../../packages/librespot.nix {
+  #   withPulseAudio = true;
+  #   withRodio = true;
+  # };
+in {
+  services.librespot = {
+    enable = true;
+
+    # package = librespot;
+
+    settings = {
+      # "zeroconf-port" = 12345;
+      # "verbose" = true;
+      "name" = "Ships Comms";
+      # "bitrate" = "320";
+      # "format" = "S32";
+      "disable-credential-cache" = true;
+    };
+  };
+}