install llm-agents from daily updating flake

custom-pkgs/crystal/default.nix

@@ -1 +0,0 @@
-{ util, ... }: util.package { }

custom-pkgs/crystal/package.nix

@@ -1,14 +0,0 @@
-{ pkgs, ... }:
-let
-  inherit (pkgs) crystal libffi;
-in
-crystal.overrideAttrs (oldAttrs: {
-  makeFlags = oldAttrs.makeFlags ++ [
-    "interpreter=1"
-  ];
-  buildInputs = oldAttrs.buildInputs ++ [
-    libffi
-  ];
-  FLAGS = [ "--single-module" ];
-  doCheck = false;
-})

flake.lock

@@ -23,6 +23,64 @@
         "type": "github"
       }
     },
+    "blueprint": {
+      "inputs": {
+        "nixpkgs": [
+          "llm-agents",
+          "nixpkgs"
+        ],
+        "systems": [
+          "llm-agents",
+          "systems"
+        ]
+      },
+      "locked": {
+        "lastModified": 1776249299,
+        "narHash": "sha256-Dt9t1TGRmJFc0xVYhttNBD6QsAgHOHCArqGa0AyjrJY=",
+        "owner": "numtide",
+        "repo": "blueprint",
+        "rev": "56131e8628f173d24a27f6d27c0215eff57e40dd",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "blueprint",
+        "type": "github"
+      }
+    },
+    "bun2nix": {
+      "inputs": {
+        "flake-parts": [
+          "llm-agents",
+          "flake-parts"
+        ],
+        "nixpkgs": [
+          "llm-agents",
+          "nixpkgs"
+        ],
+        "systems": [
+          "llm-agents",
+          "systems"
+        ],
+        "treefmt-nix": [
+          "llm-agents",
+          "treefmt-nix"
+        ]
+      },
+      "locked": {
+        "lastModified": 1778446047,
+        "narHash": "sha256-oQvcadh2BCkrog+SGrG6YffKJrveYpjj3TdQJWaKhaM=",
+        "owner": "nix-community",
+        "repo": "bun2nix",
+        "rev": "f2bc12af1a6369648aac41041ceeaa0b866599c6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "bun2nix",
+        "type": "github"
+      }
+    },
     "colmena": {
       "inputs": {
         "flake-compat": "flake-compat",
@@ -49,11 +107,11 @@
     },
     "crane": {
       "locked": {
-        "lastModified": 1771796463,
+        "lastModified": 1779130139,
-        "narHash": "sha256-9bCDuUzpwJXcHMQYMS1yNuzYMmKO/CCwCexpjWOl62I=",
+        "narHash": "sha256-BLrtr42azquO7MdGFU5a7KiMl3YpFlTeIXqy1fT5GlQ=",
         "owner": "ipetkov",
         "repo": "crane",
-        "rev": "3d3de3313e263e04894f284ac18177bd26169bad",
+        "rev": "edb38893982a3338972bb4a2ec7ce7c29ba10fd9",
         "type": "github"
       },
       "original": {
@@ -87,11 +145,11 @@
     "dnote": {
       "flake": false,
       "locked": {
-        "lastModified": 1772691105,
+        "lastModified": 1774496111,
-        "narHash": "sha256-RC18Gi3/dagBitZIRIuPwIokk6pwwv+ZpawLTXSJ18c=",
+        "narHash": "sha256-F7sP/QtZhfoNJX7LAZRmL/MjRByzJFNPUQBNpifSimQ=",
         "owner": "dnote",
         "repo": "dnote",
-        "rev": "f34a96abbe47e8b516ea7cac2bdec06c64c01493",
+        "rev": "1610b41e18a814b7aa7f4f784ba283794150853f",
         "type": "github"
       },
       "original": {
@@ -137,11 +195,11 @@
         "nixpkgs-lib": "nixpkgs-lib"
       },
       "locked": {
-        "lastModified": 1772408722,
+        "lastModified": 1778716662,
-        "narHash": "sha256-rHuJtdcOjK7rAHpHphUb1iCvgkU3GpfvicLMwwnfMT0=",
+        "narHash": "sha256-m1Yf0wZ8j1OHjTc2UwHwyQRSnNeSgLJOd7q5Y45hzi4=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "f20dc5d9b8027381c474144ecabc9034d6a839a3",
+        "rev": "f7c1a2d347e4c52d5fb8d10cb4d94b5884e546fb",
         "type": "github"
       },
       "original": {
@@ -186,6 +244,27 @@
         "type": "github"
       }
     },
+    "flake-parts_4": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "llm-agents",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1778716662,
+        "narHash": "sha256-m1Yf0wZ8j1OHjTc2UwHwyQRSnNeSgLJOd7q5Y45hzi4=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "f7c1a2d347e4c52d5fb8d10cb4d94b5884e546fb",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
     "flake-utils": {
       "locked": {
         "lastModified": 1659877975,
@@ -257,7 +336,7 @@
     },
     "flake-utils_5": {
       "inputs": {
-        "systems": "systems_5"
+        "systems": "systems_7"
       },
       "locked": {
         "lastModified": 1731533236,
@@ -275,7 +354,7 @@
     },
     "flake-utils_6": {
       "inputs": {
-        "systems": "systems_6"
+        "systems": "systems_8"
       },
       "locked": {
         "lastModified": 1731533236,
@@ -404,11 +483,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772633058,
+        "lastModified": 1779506708,
-        "narHash": "sha256-SO7JapRy2HPhgmqiLbfnW1kMx5rakPMKZ9z3wtRLQjI=",
+        "narHash": "sha256-QOD/CNm196nCJRheux/URi4/HE66fthdOMqCJoPP1Y0=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "080657a04188aca25f8a6c70a0fb2ea7e37f1865",
+        "rev": "3ee51fbdac8c8bdfe1e7e1fcaba6520a563f394f",
         "type": "github"
       },
       "original": {
@@ -458,16 +537,18 @@
     "lanzaboote": {
       "inputs": {
         "crane": "crane",
-        "nixpkgs": "nixpkgs_3",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
         "pre-commit": "pre-commit",
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1772216104,
+        "lastModified": 1779865172,
-        "narHash": "sha256-1TnGN26vnCEQk5m4AavJZxGZTb/6aZyphemRPRwFUfs=",
+        "narHash": "sha256-QZuox/4ww6vOmUu9lCpKlQbU3MER1kmgnJmXP1LO1K0=",
         "owner": "nix-community",
         "repo": "lanzaboote",
-        "rev": "dbe5112de965bbbbff9f0729a9789c20a65ab047",
+        "rev": "f42b84f9fb03db98dee2073e932010f3a76eeb9a",
         "type": "github"
       },
       "original": {
@@ -476,6 +557,121 @@
         "type": "github"
       }
     },
+    "llm-agents": {
+      "inputs": {
+        "blueprint": "blueprint",
+        "bun2nix": "bun2nix",
+        "flake-parts": "flake-parts_4",
+        "nixpkgs": [
+          "nixpkgs-unstable"
+        ],
+        "systems": "systems_5",
+        "treefmt-nix": "treefmt-nix"
+      },
+      "locked": {
+        "lastModified": 1780050433,
+        "narHash": "sha256-90mQY7VUvn6WoNh+m4LSqS+XTcofWOBLgYYmSJVyr98=",
+        "owner": "numtide",
+        "repo": "llm-agents.nix",
+        "rev": "0fb42103f93cd5c1152254856d7eccb3e91c8bf6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "llm-agents.nix",
+        "type": "github"
+      }
+    },
+    "models-dev": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1780068026,
+        "narHash": "sha256-OkMHzM1//oPQFbQTyi3a09HdTZyLstR+Lamhoje+tpU=",
+        "owner": "anomalyco",
+        "repo": "models.dev",
+        "rev": "277ac8577eb6d5543fc65193974228dcb0d021ef",
+        "type": "github"
+      },
+      "original": {
+        "owner": "anomalyco",
+        "repo": "models.dev",
+        "type": "github"
+      }
+    },
+    "niri-flake": {
+      "inputs": {
+        "niri-stable": "niri-stable",
+        "niri-unstable": "niri-unstable",
+        "nixpkgs": [
+          "nixpkgs-unstable"
+        ],
+        "nixpkgs-stable": "nixpkgs-stable",
+        "xwayland-satellite-stable": "xwayland-satellite-stable",
+        "xwayland-satellite-unstable": "xwayland-satellite-unstable"
+      },
+      "locked": {
+        "lastModified": 1780062130,
+        "narHash": "sha256-3XF+oy0PX4aajJw2RNB8rlMpyu0eXCG4pGH7fe94yBg=",
+        "owner": "sodiboo",
+        "repo": "niri-flake",
+        "rev": "3cb351d73c357a4e413f59c4551d219118791c14",
+        "type": "github"
+      },
+      "original": {
+        "owner": "sodiboo",
+        "repo": "niri-flake",
+        "type": "github"
+      }
+    },
+    "niri-stable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1756556321,
+        "narHash": "sha256-RLD89dfjN0RVO86C/Mot0T7aduCygPGaYbog566F0Qo=",
+        "owner": "YaLTeR",
+        "repo": "niri",
+        "rev": "01be0e65f4eb91a9cd624ac0b76aaeab765c7294",
+        "type": "github"
+      },
+      "original": {
+        "owner": "YaLTeR",
+        "ref": "v25.08",
+        "repo": "niri",
+        "type": "github"
+      }
+    },
+    "niri-unstable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1780056110,
+        "narHash": "sha256-t7lKVshV/srD0G06j4r5P5qj9zaDeZ9JYFCxHDGROZU=",
+        "owner": "YaLTeR",
+        "repo": "niri",
+        "rev": "f9f43d826ab4014a7c302be28d7da33e12f5be37",
+        "type": "github"
+      },
+      "original": {
+        "owner": "YaLTeR",
+        "repo": "niri",
+        "type": "github"
+      }
+    },
+    "nix-flatpak": {
+      "locked": {
+        "lastModified": 1767983141,
+        "narHash": "sha256-7ZCulYUD9RmJIDULTRkGLSW1faMpDlPKcbWJLYHoXcs=",
+        "owner": "gmodena",
+        "repo": "nix-flatpak",
+        "rev": "440818969ac2cbd77bfe025e884d0aa528991374",
+        "type": "github"
+      },
+      "original": {
+        "owner": "gmodena",
+        "ref": "latest",
+        "repo": "nix-flatpak",
+        "type": "github"
+      }
+    },
     "nix-github-actions": {
       "inputs": {
         "nixpkgs": [
@@ -498,12 +694,17 @@
       }
     },
     "nixos-hardware": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
       "locked": {
-        "lastModified": 1771969195,
+        "lastModified": 1780065812,
-        "narHash": "sha256-qwcDBtrRvJbrrnv1lf/pREQi8t2hWZxVAyeMo7/E9sw=",
+        "narHash": "sha256-SCSLUKBmwlSLGQ8Xbr8PjRFtiHNk0l9ktqkcmqdBkfE=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "41c6b421bdc301b2624486e11905c9af7b8ec68e",
+        "rev": "b76b5639c0593e0aeb0b5879ad62d4b30596c144",
         "type": "github"
       },
       "original": {
@@ -531,11 +732,11 @@
     },
     "nixpkgs-lib": {
       "locked": {
-        "lastModified": 1772328832,
+        "lastModified": 1777168982,
-        "narHash": "sha256-e+/T/pmEkLP6BHhYjx6GmwP5ivonQQn0bJdH9YrRB+Q=",
+        "narHash": "sha256-GOkGPcboWE9BmGCRMLX3worL4EMnsnG8MyKmXNeYuhQ=",
         "owner": "nix-community",
         "repo": "nixpkgs.lib",
-        "rev": "c185c7a5e5dd8f9add5b2f8ebeff00888b070742",
+        "rev": "f5901329dade4a6ea039af1433fb087bd9c1fe14",
         "type": "github"
       },
       "original": {
@@ -568,13 +769,29 @@
         "url": "https://github.com/NixOS/nixpkgs/archive/072a6db25e947df2f31aab9eccd0ab75d5b2da11.tar.gz"
       }
     },
-    "nixpkgs-unstable": {
+    "nixpkgs-stable": {
       "locked": {
-        "lastModified": 1772624091,
+        "lastModified": 1779796641,
-        "narHash": "sha256-QKyJ0QGWBn6r0invrMAK8dmJoBYWoOWy7lN+UHzW1jc=",
+        "narHash": "sha256-ZsIrKmhp4vbBXoXXmR/tBXA/UCsAQiJL9vsgZEduhVY=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "80bdc1e5ce51f56b19791b52b2901187931f5353",
+        "rev": "25f538306313eae3927264466c70d7001dcea1df",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-25.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-unstable": {
+      "locked": {
+        "lastModified": 1779560665,
+        "narHash": "sha256-tpyBcxPpcQb8ukyNF7DoCwfSY3VPsxHoYwj00Cayv5o=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "64c08a7ca051951c8eae34e3e3cb1e202fe36786",
         "type": "github"
       },
       "original": {
@@ -602,27 +819,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1771848320,
+        "lastModified": 1779796641,
-        "narHash": "sha256-0MAd+0mun3K/Ns8JATeHT1sX28faLII5hVLq0L3BdZU=",
+        "narHash": "sha256-ZsIrKmhp4vbBXoXXmR/tBXA/UCsAQiJL9vsgZEduhVY=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "2fc6539b481e1d2569f25f8799236694180c0993",
+        "rev": "25f538306313eae3927264466c70d7001dcea1df",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_4": {
-      "locked": {
-        "lastModified": 1772598333,
-        "narHash": "sha256-YaHht/C35INEX3DeJQNWjNaTcPjYmBwwjFJ2jdtr+5U=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "fabb8c9deee281e50b1065002c9828f2cf7b2239",
         "type": "github"
       },
       "original": {
@@ -632,6 +833,50 @@
         "type": "github"
       }
     },
+    "noctalia": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs-unstable"
+        ],
+        "noctalia-qs": "noctalia-qs"
+      },
+      "locked": {
+        "lastModified": 1779763713,
+        "narHash": "sha256-as2Vo4PitnWfXezfkQB2H3Rsr/DXJPp4Oe+dE+dZ0Xo=",
+        "owner": "noctalia-dev",
+        "repo": "noctalia-shell",
+        "rev": "272cd91408b5ff6e329e6397eed042fe422069e7",
+        "type": "github"
+      },
+      "original": {
+        "owner": "noctalia-dev",
+        "repo": "noctalia-shell",
+        "type": "github"
+      }
+    },
+    "noctalia-qs": {
+      "inputs": {
+        "nixpkgs": [
+          "noctalia",
+          "nixpkgs"
+        ],
+        "systems": "systems_6",
+        "treefmt-nix": "treefmt-nix_2"
+      },
+      "locked": {
+        "lastModified": 1779588472,
+        "narHash": "sha256-CVonDVo41DqdqS/kNeXFatwEuTltyXcppm9zkVOnrsM=",
+        "owner": "noctalia-dev",
+        "repo": "noctalia-qs",
+        "rev": "70fea8a39a908e395de63024a4dfdb829bff1ffe",
+        "type": "github"
+      },
+      "original": {
+        "owner": "noctalia-dev",
+        "repo": "noctalia-qs",
+        "type": "github"
+      }
+    },
     "pnpm2nix": {
       "inputs": {
         "flake-utils": "flake-utils_3",
@@ -661,11 +906,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1771858127,
+        "lastModified": 1778507602,
-        "narHash": "sha256-Gtre9YoYl3n25tJH2AoSdjuwcqij5CPxL3U3xysYD08=",
+        "narHash": "sha256-kTwur1wV+01SdqskVMSo6JMEpg71ps3HpbFY2GsflKs=",
         "owner": "cachix",
         "repo": "pre-commit-hooks.nix",
-        "rev": "49bbbfc218bf3856dfa631cead3b052d78248b83",
+        "rev": "61ab0e80d9c7ab14c256b5b453d8b3fb0189ba0a",
         "type": "github"
       },
       "original": {
@@ -686,11 +931,17 @@
         "ketchup": "ketchup",
         "ksoloti-pr": "ksoloti-pr",
         "lanzaboote": "lanzaboote",
+        "llm-agents": "llm-agents",
+        "models-dev": "models-dev",
+        "niri-flake": "niri-flake",
+        "nix-flatpak": "nix-flatpak",
         "nixos-hardware": "nixos-hardware",
-        "nixpkgs": "nixpkgs_4",
+        "nixpkgs": "nixpkgs_3",
         "nixpkgs-unstable": "nixpkgs-unstable",
+        "noctalia": "noctalia",
         "syntax-renderer": "syntax-renderer",
         "tonearm": "tonearm",
+        "tree_hugger": "tree_hugger",
         "turny": "turny",
         "voidauth": "voidauth",
         "voxtype": "voxtype",
@@ -705,11 +956,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1771988922,
+        "lastModified": 1779592685,
-        "narHash": "sha256-Fc6FHXtfEkLtuVJzd0B6tFYMhmcPLuxr90rWfb/2jtQ=",
+        "narHash": "sha256-p9d56GezhHRf4QfANxwa1d+fvwShvjB5XUhdIl7WEd0=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "f4443dc3f0b6c5e6b77d923156943ce816d1fcb9",
+        "rev": "3a58b199e7c83a80b85c28044f808085ba7e941c",
         "type": "github"
       },
       "original": {
@@ -826,6 +1077,36 @@
       }
     },
     "systems_6": {
+      "locked": {
+        "lastModified": 1689347949,
+        "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
+        "owner": "nix-systems",
+        "repo": "default-linux",
+        "rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default-linux",
+        "type": "github"
+      }
+    },
+    "systems_7": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_8": {
       "locked": {
         "lastModified": 1681028828,
         "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
@@ -859,6 +1140,69 @@
         "url": "https://codeberg.org/dergs/Tonearm/archive/v1.0.0.tar.gz"
       }
     },
+    "tree_hugger": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs-unstable"
+        ]
+      },
+      "locked": {
+        "lastModified": 1774531531,
+        "narHash": "sha256-v4zPHfGQw79uyOUeqWAlOE0A7ZjQVYhpfyibnsUe1k4=",
+        "ref": "refs/heads/main",
+        "rev": "af16fcdcfcfc17f2be03879b7d8e858976936619",
+        "revCount": 67,
+        "type": "git",
+        "url": "ssh://git@github.com/everii-Group/tree_hugger"
+      },
+      "original": {
+        "type": "git",
+        "url": "ssh://git@github.com/everii-Group/tree_hugger"
+      }
+    },
+    "treefmt-nix": {
+      "inputs": {
+        "nixpkgs": [
+          "llm-agents",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1775636079,
+        "narHash": "sha256-pc20NRoMdiar8oPQceQT47UUZMBTiMdUuWrYu2obUP0=",
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "rev": "790751ff7fd3801feeaf96d7dc416a8d581265ba",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "type": "github"
+      }
+    },
+    "treefmt-nix_2": {
+      "inputs": {
+        "nixpkgs": [
+          "noctalia",
+          "noctalia-qs",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1775636079,
+        "narHash": "sha256-pc20NRoMdiar8oPQceQT47UUZMBTiMdUuWrYu2obUP0=",
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "rev": "790751ff7fd3801feeaf96d7dc416a8d581265ba",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "treefmt-nix",
+        "type": "github"
+      }
+    },
     "turny": {
       "inputs": {
         "flake-parts": [
@@ -914,11 +1258,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772443545,
+        "lastModified": 1780001111,
-        "narHash": "sha256-oD3lameQXilKcgxQORR2l0+iDbnCO61+mjYD3MEVbuQ=",
+        "narHash": "sha256-zsOG1mBTXN4gdsTb1pUPKXATfhV5ZjgEsIUk07asaGo=",
         "owner": "peteonrails",
         "repo": "voxtype",
-        "rev": "d011f3ff074a6a14c14e75fefb375a408e9e8887",
+        "rev": "56b04aa142150f1d503e62f3c6125df38a42840f",
         "type": "github"
       },
       "original": {
@@ -946,6 +1290,39 @@
         "repo": "workout-sync",
         "type": "sourcehut"
       }
+    },
+    "xwayland-satellite-stable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1755491097,
+        "narHash": "sha256-m+9tUfsmBeF2Gn4HWa6vSITZ4Gz1eA1F5Kh62B0N4oE=",
+        "owner": "Supreeeme",
+        "repo": "xwayland-satellite",
+        "rev": "388d291e82ffbc73be18169d39470f340707edaa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Supreeeme",
+        "ref": "v0.7",
+        "repo": "xwayland-satellite",
+        "type": "github"
+      }
+    },
+    "xwayland-satellite-unstable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1779745227,
+        "narHash": "sha256-yqY7RtEJGJiENzR0GwL6q69tSAy6xAAmAcLuIhLjPf8=",
+        "owner": "Supreeeme",
+        "repo": "xwayland-satellite",
+        "rev": "5d1efbc9dc3ab1c10160b656e0247f3325daf0f2",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Supreeeme",
+        "repo": "xwayland-satellite",
+        "type": "github"
+      }
     }
   },
   "root": "root",

flake.nix

@@ -7,8 +7,14 @@
       url = "github:gtrackmap/gtrackmap";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    lanzaboote.url = "github:nix-community/lanzaboote";
+    lanzaboote = {
-    nixos-hardware.url = "github:NixOS/nixos-hardware/master";
+      url = "github:nix-community/lanzaboote";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    nixos-hardware = {
+      url = "github:NixOS/nixos-hardware/master";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     home-manager = {
       url = "github:nix-community/home-manager/release-25.11";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -60,6 +66,27 @@
       url = "github:peteonrails/voxtype";
       inputs.nixpkgs.follows = "nixpkgs-unstable";
     };
+    tree_hugger = {
+      url = "git+ssh://git@github.com/everii-Group/tree_hugger";
+      inputs.nixpkgs.follows = "nixpkgs-unstable";
+    };
+    models-dev = {
+      url = "github:anomalyco/models.dev";
+      flake = false;
+    };
+    noctalia = {
+      url = "github:noctalia-dev/noctalia-shell";
+      inputs.nixpkgs.follows = "nixpkgs-unstable";
+    };
+    niri-flake = {
+      url = "github:sodiboo/niri-flake";
+      inputs.nixpkgs.follows = "nixpkgs-unstable";
+    };
+    nix-flatpak.url = "github:gmodena/nix-flatpak/?ref=latest";
+    llm-agents = {
+      url = "github:numtide/llm-agents.nix";
+      inputs.nixpkgs.follows = "nixpkgs-unstable";
+    };
   };
   outputs =
     {

home/common/default.nix

@@ -1,6 +1,5 @@
 {
   config,
-  osConfig,
   lib,
   pkgs,
   pkgs-unstable,
@@ -8,6 +7,20 @@
   self,
   ...
 }:
+let
+  noctalia-package = inputs.noctalia.packages.${pkgs.stdenv.hostPlatform.system}.default.override {
+    calendarSupport = true;
+  };
+  ns = lib.getExe noctalia-package;
+  ns-ipc =
+    args:
+    [
+      ns
+      "ipc"
+      "call"
+    ]
+    ++ args;
+in
 {
   imports = [
     ../gnome
@@ -19,6 +32,9 @@
     inputs.hastebin.nixosModules.hm
     inputs.agenix.homeManagerModules.default
     inputs.voxtype.homeManagerModules.default
+    inputs.noctalia.homeModules.default
+    inputs.niri-flake.homeModules.niri
+    inputs.nix-flatpak.homeManagerModules.nix-flatpak
   ];
 
   # This value determines the Home Manager release that your configuration is
@@ -33,6 +49,8 @@
   home.packages =
     with pkgs;
     [
+      atool
+      unzip
       htop
       gnupg
       pkgs-unstable.yubioath-flutter
@@ -95,12 +113,9 @@
           xargs ${lib.getExe rbw} get "$@" | ${lib.getExe' wl-clipboard "wl-copy"}
       '')
       (google-fonts.override { fonts = [ "Tajawal" ]; })
-      pkgs-unstable.opencode
       (writeShellScriptBin "nr" ''
         ${lib.getExe nix} run "nixpkgs#''${1}" "$@"
       '')
-      pkgs-unstable.tidal-hifi
-      inputs.tonearm.packages.${pkgs.stdenv.hostPlatform.system}.tonearm
       blueman
       pavucontrol
       (writeShellScriptBin "voxtoggle" ''
@@ -115,84 +130,134 @@
           kill -SIGUSR1 "$pid"
         fi
       '')
-    ]
+      (writeShellScriptBin "scrot" ''
-    ++ lib.optional osConfig.programs.niri.enable (
+        set -eo pipefail
-      pkgs.writeShellScriptBin "handle-lid-close" ''
-        alias niri=${lib.getExe osConfig.programs.niri.package}
 
-        output_count=$(niri outputs | ${lib.getExe jq} -r 'length')
+        ${lib.getExe grim} -t ppm -g "$(${lib.getExe slurp} -o -d -F monospace)" - | ${lib.getExe gradia}
-        if [ "$output_count" -eq 1 ]; then
+      '')
-          niri msg action spawn hyprlock
+      inputs.tree_hugger.packages.${stdenv.hostPlatform.system}.default
-          systemctl suspend
+      (writeShellScriptBin "ns" "${lib.join " " (ns-ipc [ ''"$@"'' ])}")
-        fi
+    ]
-      ''
+    ++ (with inputs.llm-agents.packages.${pkgs.stdenv.hostPlatform.system}; [
-    );
+      pi
+      opencode
+      crush
+    ]);
 
   programs = {
-    ashell = {
+    noctalia-shell = {
       enable = true;
-      package = pkgs-unstable.ashell;
-      systemd = {
-        enable = true;
-        target = "graphical-session.target";
-      };
       settings = {
-        modules = {
+        bar = {
-          left = [ "Workspaces" ];
+          density = "compact";
-          center = [ "WindowTitle" ];
+          position = "top";
-          right = [
+          showCapsule = false;
-            "CustomNotifications"
+          widgets = {
-            "SystemInfo"
+            left = [
-            [
-              "Clock"
-              "Privacy"
-              "Settings"
-            ]
-          ];
-        };
-        settings = {
-          lock_cmd = "hyprlock &";
-          logout_cmd = "niri msg action quit";
-          audio_sinks_more_cmd = "pavucontrol -t 3";
-          audio_sources_more_cmd = "pavucontrol -t 4";
-          bluetooth_more_cmd = "blueman-manager";
-          CustomButton =
-            let
-              isDark = lib.getExe (
-                pkgs.writeShellScriptBin "is-dark" ''
-                  gsettings get org.gnome.desktop.interface color-scheme | grep -q dark
-                ''
-              );
-              toggleDark = lib.getExe (
-                pkgs.writeShellScriptBin "toggle-dark" ''
-                  if ${isDark}; then
-                    gsettings set org.gnome.desktop.interface color-scheme 'prefer-light'
-                  else
-                    gsettings set org.gnome.desktop.interface color-scheme 'prefer-dark'
-                  fi
-                ''
-              );
-            in
-            [
               {
-                name = "Dark Mode";
+                id = "Workspace";
-                icon = " ";
+                hideUnoccupied = true;
-                command = toggleDark;
+                labelMode = "none";
-                status_command = isDark;
               }
             ];
+            center = [
+              {
+                id = "Clock";
+                formatHorizontal = "HH:mm";
+                formatVertical = "HH mm";
+                usePrimaryColor = true;
+              }
+            ];
+            right = [
+              {
+                id = "plugin:privacy-indicator";
+              }
+              {
+                id = "Battery";
+                warningThreshold = 20;
+              }
+              {
+                id = "NotificationHistory";
+              }
+              {
+                id = "Network";
+              }
+              {
+                id = "Bluetooth";
+              }
+              {
+                id = "VPN";
+              }
+              {
+                id = "ControlCenter";
+                useDistroLogo = true;
+              }
+            ];
+          };
         };
-        CustomModule = [
+
-          {
+        audio.visualizerType = "linear";
-            name = "CustomNotifications";
+
-            type = "Button";
+        wallpaper = {
-            icon = " ";
+          overviewEnabled = true;
-            command = "swaync-client -t -sw";
+          directory = "~/Pictures/Wallpapers";
-            listen_cmd = "swaync-client -swb";
+          automationEnabled = true;
-            icons."dnd.*" = " ";
+        };
-            alert = ".*notification";
+
-          }
+        controlCenter.shortcuts = {
-        ];
+          right = [
+            { id = "PowerProfile"; }
+            { id = "KeepAwake"; }
+            { id = "NightLight"; }
+            { id = "DarkMode"; }
+          ];
+        };
+
+        sessionMenu = {
+          countdownDuration = 5000;
+          powerOptions =
+            let
+              powerOption =
+                action: options:
+                {
+                  inherit action;
+                  enabled = true;
+                }
+                // options;
+            in
+            [
+              (powerOption "lock" {
+                keybind = "1";
+                countdownEnabled = false;
+              })
+              (powerOption "suspend" {
+                keybind = "2";
+                countdownEnabled = false;
+              })
+              (powerOption "hibernate" { keybind = "3"; })
+              (powerOption "reboot" { keybind = "4"; })
+              (powerOption "logout" { keybind = "5"; })
+              (powerOption "shutdown" { keybind = "6"; })
+              (powerOption "rebootToUefi" { keybind = "7"; })
+            ];
+        };
+
+        colorSchemes.useWallpaperColors = true;
+        nightLight.enabled = true;
+        idle.enabled = true;
+        general = {
+          avatarImage = "~/.face";
+          radiusRatio = 0.2;
+          clockStyle = "analog";
+        };
+        location = {
+          monthBeforeDay = false;
+          analogClockInCalendar = true;
+          firstDayOfWeek = 0;
+          showWeekNumberInCalendar = true;
+          autoLocate = true;
+        };
+        package = noctalia-package;
       };
     };
 
@@ -400,6 +465,11 @@
                 gh pr checkout {{.Form.pr | quote}}
               '';
             }
+            {
+              key = "D";
+              context = "localBranches";
+              command = "th prune {{.SelectedLocalBranch.Name}}";
+            }
           ];
         };
       };
@@ -525,37 +595,6 @@
       enable = true;
       defaultEditor = true;
     };
-    hyprlock = {
-      enable = true;
-      package = pkgs-unstable.hyprlock;
-      settings = {
-        general = {
-          hide_cursor = true;
-          ignore_empty_input = true;
-        };
-        background = {
-          monitor = "";
-          path = "screenshot";
-          blur_passes = 3;
-        };
-        input-field = {
-          size = "20%, 5%";
-          monitor = "";
-          dots_center = true;
-          fade_on_empty = false;
-          rounding = 15;
-          shadow_passes = 2;
-          outline_thickness = 2;
-          placeholder_text = "Password...";
-          fail_text = "$PAMFAIL";
-          dots_spacing = "0.3";
-          position = "0, -20";
-          halign = "center";
-          valign = "center";
-        };
-      };
-    };
-
     voxtype = {
       enable = true;
       package = inputs.voxtype.packages.${pkgs.stdenv.hostPlatform.system}.vulkan;
@@ -578,23 +617,23 @@
           prompts = [
             {
               title = "Clean up";
-              instructions = "Clean up this dictation. Remove filler words, fix grammar and punctuation. Output ONLY the cleaned text";
+              instructions = "First identify what language this is, then respond in that language. Clean up: remove filler words, fix grammar and punctuation. Preserve all nuances of the original dictation. Output ONLY the cleaned text";
             }
             {
               title = "Make a title";
-              instructions = "Make a concise and descriptive title for this dictation. Output ONLY the title";
+              instructions = "First identify what language this is, then respond in that language. Create a concise and descriptive title";
             }
             {
               title = "Summarize";
-              instructions = "Summarize this dictation in a few sentences. Output ONLY the summary";
+              instructions = "First identify what language this is, then respond in that language. Summarize in a few sentences";
             }
             {
               title = "Commit message";
-              instructions = "Write a concise and descriptive git commit message for this dictation. Output ONLY the commit message";
+              instructions = "Write a concise and descriptive git commit message for this dictation in English";
             }
             {
               title = "Translate to English";
-              instructions = "Translate this dictation to English. Remove filler words, fix grammar and punctuation. Output ONLY the translation";
+              instructions = "Translate this dictation. Remove filler words, fix grammar and punctuation. Output ONLY the translation";
             }
           ];
         };
@@ -755,6 +794,7 @@
     MANPAGER = "sh -c 'col -bx | bat -l man -p'";
     MANROFFOPT = "-c";
     DO_NOT_TRACK = 1;
+    DOCKER_HOST = "unix://$XDG_RUNTIME_DIR/podman/podman.sock";
   };
 
   systemd.user.sessionVariables = lib.mapAttrs (_: v: toString v) config.home.sessionVariables;
@@ -771,47 +811,6 @@
   };
 
   services = {
-    swaync = {
-      enable = true;
-      package = pkgs-unstable.swaynotificationcenter;
-      settings = {
-        scripts = {
-          focus-window =
-            let
-              jq = lib.getExe pkgs.jq;
-              niri = lib.getExe osConfig.programs.niri.package;
-              script = pkgs.writeShellScriptBin "swaync-focus-window" ''
-                set -e
-
-                APP_NAME="''${SWAYNC_APP_NAME:-}"
-                DESKTOP_ENTRY="''${SWAYNC_DESKTOP_ENTRY:-}"
-
-                APP_ID=""
-                if [[ -n "$DESKTOP_ENTRY" ]]; then
-                  APP_ID="$DESKTOP_ENTRY"
-                elif [[ -n "$APP_NAME" ]]; then
-                  APP_ID=$(echo "$APP_NAME" | tr '[:upper:]' '[:lower:]' | sed 's/ //g')
-                fi
-
-                [[ -z "$APP_ID" ]] && exit
-
-                # Find window ID for this app in niri and focus it
-                ${jq} -r --arg app_id "$APP_ID" '.[] | select(.app_id | ascii_downcase | contains($app_id)) | .id' \
-                  <(${niri} msg --json windows 2>/dev/null) | head -n1 | while read -r WINDOW_ID; do
-                  if [[ -n "$WINDOW_ID" && "$WINDOW_ID" != "null" ]]; then
-                    ${niri} msg action focus-window --id "$WINDOW_ID"
-                  fi
-                done
-              '';
-            in
-            {
-              exec = lib.getExe script;
-              run-on = "action";
-            };
-        };
-      };
-    };
-
     gpg-agent = with pkgs; {
       enable = true;
       enableSshSupport = true;
@@ -819,6 +818,14 @@
     };
   };
 
+  services.flatpak = {
+    update.onActivation = true;
+
+    packages = [
+      "dev.diegovsky.Riff"
+    ];
+  };
+
   services.walker = {
     enable = true;
     package = pkgs.symlinkJoin {
@@ -876,10 +883,10 @@
 
   xdg.configFile."opencode/opencode.jsonc".text = builtins.toJSON {
     "$schema" = "https://opencode.ai/config.json";
-    model = "opencode-go/glm-5";
+    model = "firepass/accounts/fireworks/routers/kimi-k2p6-turbo";
-    small_model = "opencode-go/kimi-k2.5";
+    small_model = "firepass/accounts/fireworks/routers/kimi-k2p6-turbo";
     agent = {
-      explore.model = "opencode-go/kimi-k2.5";
+      explore.model = "firepass/accounts/fireworks/routers/kimi-k2p6-turbo";
     };
     theme = "system";
     lsp = {
@@ -956,7 +963,432 @@
     };
   };
 
-  xdg.configFile."niri/config.kdl".source = ./dotfiles/niri.kdl;
+  programs.niri =
+    let
+      bind =
+        {
+          modifiers,
+          key,
+          action,
+          args ? [ ],
+        }:
+        {
+          ${lib.join "+" (modifiers ++ [ key ])}.action.${action} = args;
+        };
+    in
+    {
+      enable = true;
+      package = pkgs-unstable.niri;
+      settings = {
+        input = {
+          keyboard = {
+            xkb = {
+              layout = "us";
+              variant = "altgr-intl";
+            };
+            numlock = true;
+          };
+
+          touchpad = {
+            tap = true;
+            dwt = true;
+            dwtp = true;
+            natural-scroll = true;
+          };
+
+          focus-follows-mouse = {
+            enable = true;
+            max-scroll-amount = "10%";
+          };
+        };
+
+        outputs = {
+          "eDP-1" = {
+            scale = 1.5;
+          };
+          "DP-5" = {
+            scale = 1.0;
+          };
+          "DP-3" = {
+            scale = 1.2;
+          };
+        };
+
+        layout = {
+          gaps = 5;
+          center-focused-column = "never";
+
+          preset-column-widths = [
+            { proportion = 1.0 / 3.0; }
+            { proportion = 1.0 / 2.0; }
+            { proportion = 2.0 / 3.0; }
+          ];
+
+          default-column-width = {
+            proportion = 1.0 / 2.0;
+          };
+
+          focus-ring = {
+            enable = true;
+            width = 4;
+            active.color = "#7fc8ff";
+            inactive.color = "#505050";
+          };
+
+          border = {
+            enable = false;
+            width = 4;
+            active.color = "#ffc87f";
+            inactive.color = "#505050";
+            urgent.color = "#9b0000";
+          };
+
+          shadow = {
+            enable = true;
+            softness = 30;
+            spread = 5;
+            offset = {
+              x = 0;
+              y = 5;
+            };
+            color = "#0007";
+          };
+        };
+
+        spawn-at-startup = [
+          { argv = [ ns ]; }
+        ];
+
+        hotkey-overlay.skip-at-startup = true;
+        screenshot-path = "~/Pictures/Screenshots/Screenshot from %Y-%m-%d %H-%M-%S.png";
+        debug.honor-xdg-activation-with-invalid-serial = true;
+
+        layer-rules = [
+          {
+            matches = [ { namespace = "^noctalia-overview*"; } ];
+            place-within-backdrop = true;
+          }
+        ];
+
+        window-rules = [
+          {
+            matches = [
+              {
+                app-id = "firefox$";
+                title = "^Picture-in-Picture$";
+              }
+            ];
+            open-floating = true;
+          }
+          {
+            geometry-corner-radius = {
+              top-left = 14.;
+              top-right = 14.;
+              bottom-left = 14.;
+              bottom-right = 14.;
+            };
+            clip-to-geometry = true;
+          }
+          #{
+          #  background-effect = {
+          #    blur = true;
+          #    xray = false;
+          #  };
+          #}
+        ];
+
+        binds = lib.foldl' (acc: x: acc // x) { } (
+          [
+            {
+              "Mod+Shift+Slash" = {
+                action.show-hotkey-overlay = [ ];
+              };
+              "Mod+Return" = {
+                hotkey-overlay.title = "Open a Terminal: kitty";
+                action.spawn = "kitty";
+              };
+              "Mod+Z" = {
+                hotkey-overlay.title = "Open a launcher: walker";
+                action.spawn = "walker";
+              };
+              "Mod+Space" = {
+                action.spawn = "voxtoggle";
+              };
+              "Mod+Alt+L" = {
+                hotkey-overlay.title = "Lock the Screen: hyprlock";
+                action.spawn = ns-ipc [
+                  "lockScreen"
+                  "lock"
+                ];
+              };
+              "XF86AudioRaiseVolume" = {
+                allow-when-locked = true;
+                action.spawn = ns-ipc [
+                  "volume"
+                  "increase"
+                ];
+              };
+              "XF86AudioLowerVolume" = {
+                allow-when-locked = true;
+                action.spawn = ns-ipc [
+                  "volume"
+                  "decrease"
+                ];
+              };
+              "XF86AudioMute" = {
+                allow-when-locked = true;
+                action.spawn = ns-ipc [
+                  "volume"
+                  "muteOutput"
+                ];
+              };
+              "XF86AudioMicMute" = {
+                allow-when-locked = true;
+                action.spawn = ns-ipc [
+                  "volume"
+                  "muteInput"
+                ];
+              };
+              "XF86AudioPlay" = {
+                allow-when-locked = true;
+                action.spawn = ns-ipc [
+                  "media"
+                  "playPause"
+                ];
+              };
+              "XF86AudioPrev" = {
+                allow-when-locked = true;
+                action.spawn = ns-ipc [
+                  "media"
+                  "previous"
+                ];
+              };
+              "XF86AudioNext" = {
+                allow-when-locked = true;
+                action.spawn = ns-ipc [
+                  "media"
+                  "next"
+                ];
+              };
+              "XF86MonBrightnessUp" = {
+                allow-when-locked = true;
+                action.spawn = ns-ipc [
+                  "brightness"
+                  "increase"
+                ];
+              };
+              "XF86MonBrightnessDown" = {
+                allow-when-locked = true;
+                action.spawn = ns-ipc [
+                  "brightness"
+                  "decrease"
+                ];
+              };
+              "Mod+O" = {
+                repeat = false;
+                action.toggle-overview = [ ];
+              };
+              "Mod+Backspace" = {
+                repeat = false;
+                action.close-window = [ ];
+              };
+              "Mod+BracketLeft".action.consume-or-expel-window-left = [ ];
+              "Mod+BracketRight".action.consume-or-expel-window-right = [ ];
+              "Mod+Comma".action.consume-window-into-column = [ ];
+              "Mod+Period".action.expel-window-from-column = [ ];
+              "Mod+R".action.switch-preset-column-width = [ ];
+              "Mod+Ctrl+R".action.switch-preset-window-height = [ ];
+              "Mod+Shift+R".action.reset-window-height = [ ];
+              "Mod+F".action.maximize-column = [ ];
+              "Mod+Shift+F".action.fullscreen-window = [ ];
+              "Mod+M".action.maximize-window-to-edges = [ ];
+              "Mod+Ctrl+F".action.expand-column-to-available-width = [ ];
+              "Mod+C".action.center-column = [ ];
+              "Mod+Ctrl+C".action.center-visible-columns = [ ];
+              "Mod+Minus".action.set-column-width = "-10%";
+              "Mod+Equal".action.set-column-width = "+10%";
+              "Mod+Shift+Minus".action.set-window-height = "-10%";
+              "Mod+Shift+Equal".action.set-window-height = "+10%";
+              "Mod+V".action.toggle-window-floating = [ ];
+              "Mod+Shift+V".action.switch-focus-between-floating-and-tiling = [ ];
+              "Mod+W".action.toggle-column-tabbed-display = [ ];
+              "Print".action.spawn = "scrot";
+              "Mod+Escape" = {
+                allow-inhibiting = true;
+                action.toggle-keyboard-shortcuts-inhibit = [ ];
+              };
+              "Mod+Shift+E".action.quit = [ ];
+              "Ctrl+Alt+Delete".action.quit = [ ];
+              "Mod+Shift+P".action.power-off-monitors = [ ];
+            }
+          ]
+          ++ (map
+            (
+              {
+                dir,
+                keys,
+              }:
+              (lib.mergeAttrsList (
+                map
+                  (
+                    { modifiers, action }: (lib.mergeAttrsList (map (key: bind { inherit modifiers key action; }) keys))
+                  )
+                  [
+                    {
+                      modifiers = [ "Mod" ];
+                      action = "focus-column-${dir}";
+                    }
+                    {
+                      modifiers = [
+                        "Mod"
+                        "Shift"
+                      ];
+                      action = "move-column-${dir}";
+                    }
+                    {
+                      modifiers = [
+                        "Mod"
+                        "Ctrl"
+                      ];
+                      action = "focus-monitor-${dir}";
+                    }
+                    {
+                      modifiers = [
+                        "Mod"
+                        "Shift"
+                        "Ctrl"
+                      ];
+                      action = "move-column-to-monitor-${dir}";
+                    }
+                  ]
+              ))
+            )
+            [
+              {
+                dir = "left";
+                keys = [
+                  "Left"
+                  "H"
+                ];
+              }
+              {
+                dir = "right";
+                keys = [
+                  "Right"
+                  "L"
+                ];
+              }
+            ]
+          )
+          ++ (map
+            (
+              {
+                dir,
+                keys,
+              }:
+              (lib.mergeAttrsList (
+                map
+                  (
+                    { modifiers, action }: (lib.mergeAttrsList (map (key: bind { inherit modifiers key action; }) keys))
+                  )
+                  [
+                    {
+                      modifiers = [ "Mod" ];
+                      action = "focus-window-or-workspace-${dir}";
+                    }
+                    {
+                      modifiers = [
+                        "Mod"
+                        "Shift"
+                      ];
+                      action = "move-window-${dir}-or-to-workspace-${dir}";
+                    }
+                    {
+                      modifiers = [
+                        "Mod"
+                        "Ctrl"
+                      ];
+                      action = "focus-monitor-${dir}";
+                    }
+                    {
+                      modifiers = [
+                        "Mod"
+                        "Shift"
+                        "Ctrl"
+                      ];
+                      action = "move-column-to-monitor-${dir}";
+                    }
+                  ]
+              ))
+            )
+            [
+              {
+                dir = "up";
+                keys = [
+                  "Up"
+                  "K"
+                ];
+              }
+              {
+                dir = "down";
+                keys = [
+                  "Down"
+                  "J"
+                ];
+              }
+            ]
+          )
+          ++ [
+            {
+              "Mod+Home".action.focus-column-first = [ ];
+              "Mod+End".action.focus-column-last = [ ];
+              "Mod+Shift+Home".action.move-column-to-first = [ ];
+              "Mod+Shift+End".action.move-column-to-last = [ ];
+              "Mod+Page_Down".action.focus-workspace-down = [ ];
+              "Mod+Page_Up".action.focus-workspace-up = [ ];
+              "Mod+U".action.focus-workspace-down = [ ];
+              "Mod+I".action.focus-workspace-up = [ ];
+              "Mod+Ctrl+Page_Down".action.move-column-to-workspace-down = [ ];
+              "Mod+Ctrl+Page_Up".action.move-column-to-workspace-up = [ ];
+              "Mod+Ctrl+U".action.move-column-to-workspace-down = [ ];
+              "Mod+Ctrl+I".action.move-column-to-workspace-up = [ ];
+              "Mod+Shift+Page_Down".action.move-workspace-down = [ ];
+              "Mod+Shift+Page_Up".action.move-workspace-up = [ ];
+              "Mod+Shift+U".action.move-workspace-down = [ ];
+              "Mod+Shift+I".action.move-workspace-up = [ ];
+              "Mod+WheelScrollDown" = {
+                cooldown-ms = 150;
+                action.focus-workspace-down = [ ];
+              };
+              "Mod+WheelScrollUp" = {
+                cooldown-ms = 150;
+                action.focus-workspace-up = [ ];
+              };
+              "Mod+Ctrl+WheelScrollDown" = {
+                cooldown-ms = 150;
+                action.move-column-to-workspace-down = [ ];
+              };
+              "Mod+Ctrl+WheelScrollUp" = {
+                cooldown-ms = 150;
+                action.move-column-to-workspace-up = [ ];
+              };
+              "Mod+WheelScrollRight".action.focus-column-right = [ ];
+              "Mod+WheelScrollLeft".action.focus-column-left = [ ];
+              "Mod+Ctrl+WheelScrollRight".action.move-column-right = [ ];
+              "Mod+Ctrl+WheelScrollLeft".action.move-column-left = [ ];
+              "Mod+Shift+WheelScrollDown".action.focus-column-right = [ ];
+              "Mod+Shift+WheelScrollUp".action.focus-column-left = [ ];
+              "Mod+Ctrl+Shift+WheelScrollDown".action.move-column-right = [ ];
+              "Mod+Ctrl+Shift+WheelScrollUp".action.move-column-left = [ ];
+            }
+          ]
+          ++ (map (number: {
+            "Mod+${toString number}".action.focus-workspace = number;
+            "Mod+Shift+${toString number}".action.move-column-to-workspace = number;
+          }) (lib.range 1 9))
+        );
+      };
+    };
 
   gnome.automaticTimeZone = true;
   gtk.enable = true;

home/common/dotfiles/niri.kdl

@@ -1,641 +0,0 @@
-// This config is in the KDL format: https://kdl.dev
-// "/-" comments out the following node.
-// Check the wiki for a full description of the configuration:
-// https://niri-wm.github.io/niri/Configuration:-Introduction
-
-// Input device configuration.
-// Find the full list of options on the wiki:
-// https://niri-wm.github.io/niri/Configuration:-Input
-input {
-    keyboard {
-        xkb {
-            // You can set rules, model, layout, variant and options.
-            // For more information, see xkeyboard-config(7).
-
-            layout "us"
-            variant "altgr-intl"
-            // For example:
-            // layout "us,ru"
-            // options "grp:win_space_toggle,compose:ralt,ctrl:nocaps"
-
-            // If this section is empty, niri will fetch xkb settings
-            // from org.freedesktop.locale1. You can control these using
-            // localectl set-x11-keymap.
-        }
-
-        // Enable numlock on startup, omitting this setting disables it.
-        numlock
-    }
-
-    // Next sections include libinput settings.
-    // Omitting settings disables them, or leaves them at their default values.
-    // All commented-out settings here are examples, not defaults.
-    touchpad {
-        // off
-        tap
-        dwt
-        dwtp
-        // drag false
-        // drag-lock
-        natural-scroll
-        // accel-speed 0.2
-        // accel-profile "flat"
-        // scroll-method "two-finger"
-        // disabled-on-external-mouse
-    }
-
-    mouse {
-        // off
-        // natural-scroll
-        // accel-speed 0.2
-        // accel-profile "flat"
-        // scroll-method "no-scroll"
-    }
-
-    trackpoint {
-        // off
-        // natural-scroll
-        // accel-speed 0.2
-        // accel-profile "flat"
-        // scroll-method "on-button-down"
-        // scroll-button 273
-        // scroll-button-lock
-        // middle-emulation
-    }
-
-    // Uncomment this to make the mouse warp to the center of newly focused windows.
-    // warp-mouse-to-focus
-
-    // Focus windows and outputs automatically when moving the mouse into them.
-    // Setting max-scroll-amount="0%" makes it work only on windows already fully on screen.
-    focus-follows-mouse max-scroll-amount="10%"
-}
-
-// You can configure outputs by their name, which you can find
-// by running `niri msg outputs` while inside a niri instance.
-// The built-in laptop monitor is usually called "eDP-1".
-// Find more information on the wiki:
-// https://niri-wm.github.io/niri/Configuration:-Outputs
-// Remember to uncomment the node by removing "/-"!
-output "eDP-1" {
-    // Uncomment this line to disable this output.
-    // off
-
-    // Resolution and, optionally, refresh rate of the output.
-    // The format is "<width>x<height>" or "<width>x<height>@<refresh rate>".
-    // If the refresh rate is omitted, niri will pick the highest refresh rate
-    // for the resolution.
-    // If the mode is omitted altogether or is invalid, niri will pick one automatically.
-    // Run `niri msg outputs` while inside a niri instance to list all outputs and their modes.
-    // mode "1920x1080@120.030"
-
-    // You can use integer or fractional scale, for example use 1.5 for 150% scale.
-    scale 1.5
-
-    // Transform allows to rotate the output counter-clockwise, valid values are:
-    // normal, 90, 180, 270, flipped, flipped-90, flipped-180 and flipped-270.
-    // transform "normal"
-
-    // Position of the output in the global coordinate space.
-    // This affects directional monitor actions like "focus-monitor-left", and cursor movement.
-    // The cursor can only move between directly adjacent outputs.
-    // Output scale and rotation has to be taken into account for positioning:
-    // outputs are sized in logical, or scaled, pixels.
-    // For example, a 3840×2160 output with scale 2.0 will have a logical size of 1920×1080,
-    // so to put another output directly adjacent to it on the right, set its x to 1920.
-    // If the position is unset or results in an overlap, the output is instead placed
-    // automatically.
-    // position x=1280 y=0
-}
-
-output "DP-5" {
-    scale 1
-}
-
-output "DP-3" {
-    scale 1.2
-}
-
-// Settings that influence how windows are positioned and sized.
-// Find more information on the wiki:
-// https://niri-wm.github.io/niri/Configuration:-Layout
-layout {
-    // Set gaps around windows in logical pixels.
-    gaps 5
-
-    // When to center a column when changing focus, options are:
-    // - "never", default behavior, focusing an off-screen column will keep at the left
-    //   or right edge of the screen.
-    // - "always", the focused column will always be centered.
-    // - "on-overflow", focusing a column will center it if it doesn't fit
-    //   together with the previously focused column.
-    center-focused-column "never"
-
-    // You can customize the widths that "switch-preset-column-width" (Mod+R) toggles between.
-    preset-column-widths {
-        // Proportion sets the width as a fraction of the output width, taking gaps into account.
-        // For example, you can perfectly fit four windows sized "proportion 0.25" on an output.
-        // The default preset widths are 1/3, 1/2 and 2/3 of the output.
-        proportion 0.33333
-        proportion 0.5
-        proportion 0.66667
-
-        // Fixed sets the width in logical pixels exactly.
-        // fixed 1920
-    }
-
-    // You can also customize the heights that "switch-preset-window-height" (Mod+Shift+R) toggles between.
-    // preset-window-heights { }
-
-    // You can change the default width of the new windows.
-    default-column-width { proportion 0.5; }
-    // If you leave the brackets empty, the windows themselves will decide their initial width.
-    // default-column-width {}
-
-    // By default focus ring and border are rendered as a solid background rectangle
-    // behind windows. That is, they will show up through semitransparent windows.
-    // This is because windows using client-side decorations can have an arbitrary shape.
-    //
-    // If you don't like that, you should uncomment `prefer-no-csd` below.
-    // Niri will draw focus ring and border *around* windows that agree to omit their
-    // client-side decorations.
-    //
-    // Alternatively, you can override it with a window rule called
-    // `draw-border-with-background`.
-
-    // You can change how the focus ring looks.
-    focus-ring {
-        // Uncomment this line to disable the focus ring.
-        // off
-
-        // How many logical pixels the ring extends out from the windows.
-        width 4
-
-        // Colors can be set in a variety of ways:
-        // - CSS named colors: "red"
-        // - RGB hex: "#rgb", "#rgba", "#rrggbb", "#rrggbbaa"
-        // - CSS-like notation: "rgb(255, 127, 0)", rgba(), hsl() and a few others.
-
-        // Color of the ring on the active monitor.
-        active-color "#7fc8ff"
-
-        // Color of the ring on inactive monitors.
-        //
-        // The focus ring only draws around the active window, so the only place
-        // where you can see its inactive-color is on other monitors.
-        inactive-color "#505050"
-
-        // You can also use gradients. They take precedence over solid colors.
-        // Gradients are rendered the same as CSS linear-gradient(angle, from, to).
-        // The angle is the same as in linear-gradient, and is optional,
-        // defaulting to 180 (top-to-bottom gradient).
-        // You can use any CSS linear-gradient tool on the web to set these up.
-        // Changing the color space is also supported, check the wiki for more info.
-        //
-        // active-gradient from="#80c8ff" to="#c7ff7f" angle=45
-
-        // You can also color the gradient relative to the entire view
-        // of the workspace, rather than relative to just the window itself.
-        // To do that, set relative-to="workspace-view".
-        //
-        // inactive-gradient from="#505050" to="#808080" angle=45 relative-to="workspace-view"
-    }
-
-    // You can also add a border. It's similar to the focus ring, but always visible.
-    border {
-        // The settings are the same as for the focus ring.
-        // If you enable the border, you probably want to disable the focus ring.
-        off
-
-        width 4
-        active-color "#ffc87f"
-        inactive-color "#505050"
-
-        // Color of the border around windows that request your attention.
-        urgent-color "#9b0000"
-
-        // Gradients can use a few different interpolation color spaces.
-        // For example, this is a pastel rainbow gradient via in="oklch longer hue".
-        //
-        // active-gradient from="#e5989b" to="#ffb4a2" angle=45 relative-to="workspace-view" in="oklch longer hue"
-
-        // inactive-gradient from="#505050" to="#808080" angle=45 relative-to="workspace-view"
-    }
-
-    // You can enable drop shadows for windows.
-    shadow {
-        // Uncomment the next line to enable shadows.
-        // on
-
-        // By default, the shadow draws only around its window, and not behind it.
-        // Uncomment this setting to make the shadow draw behind its window.
-        //
-        // Note that niri has no way of knowing about the CSD window corner
-        // radius. It has to assume that windows have square corners, leading to
-        // shadow artifacts inside the CSD rounded corners. This setting fixes
-        // those artifacts.
-        //
-        // However, instead you may want to set prefer-no-csd and/or
-        // geometry-corner-radius. Then, niri will know the corner radius and
-        // draw the shadow correctly, without having to draw it behind the
-        // window. These will also remove client-side shadows if the window
-        // draws any.
-        //
-        // draw-behind-window true
-
-        // You can change how shadows look. The values below are in logical
-        // pixels and match the CSS box-shadow properties.
-
-        // Softness controls the shadow blur radius.
-        softness 30
-
-        // Spread expands the shadow.
-        spread 5
-
-        // Offset moves the shadow relative to the window.
-        offset x=0 y=5
-
-        // You can also change the shadow color and opacity.
-        color "#0007"
-    }
-
-    // Struts shrink the area occupied by windows, similarly to layer-shell panels.
-    // You can think of them as a kind of outer gaps. They are set in logical pixels.
-    // Left and right struts will cause the next window to the side to always be visible.
-    // Top and bottom struts will simply add outer gaps in addition to the area occupied by
-    // layer-shell panels and regular gaps.
-    struts {
-        // left 64
-        // right 64
-        // top 64
-        // bottom 64
-    }
-}
-
-// Add lines like this to spawn processes at startup.
-// Note that running niri as a session supports xdg-desktop-autostart,
-// which may be more convenient to use.
-// See the binds section below for more spawn examples.
-
-//spawn-at-startup "systemctl start --user niri-session.target"
-
-// To run a shell command (with variables, pipes, etc.), use spawn-sh-at-startup:
-// spawn-sh-at-startup "qs -c ~/source/qs/MyAwesomeShell"
-
-hotkey-overlay {
-    // Uncomment this line to disable the "Important Hotkeys" pop-up at startup.
-    skip-at-startup
-}
-
-// Uncomment this line to ask the clients to omit their client-side decorations if possible.
-// If the client will specifically ask for CSD, the request will be honored.
-// Additionally, clients will be informed that they are tiled, removing some client-side rounded corners.
-// This option will also fix border/focus ring drawing behind some semitransparent windows.
-// After enabling or disabling this, you need to restart the apps for this to take effect.
-// prefer-no-csd
-
-// You can change the path where screenshots are saved.
-// A ~ at the front will be expanded to the home directory.
-// The path is formatted with strftime(3) to give you the screenshot date and time.
-screenshot-path "~/Pictures/Screenshots/Screenshot from %Y-%m-%d %H-%M-%S.png"
-
-// You can also set this to null to disable saving screenshots to disk.
-// screenshot-path null
-
-// Animation settings.
-// The wiki explains how to configure individual animations:
-// https://niri-wm.github.io/niri/Configuration:-Animations
-animations {
-    // Uncomment to turn off all animations.
-    // off
-
-    // Slow down all animations by this factor. Values below 1 speed them up instead.
-    // slowdown 3.0
-}
-
-// Window rules let you adjust behavior for individual windows.
-// Find more information on the wiki:
-// https://niri-wm.github.io/niri/Configuration:-Window-Rules
-
-// Work around WezTerm's initial configure bug
-// by setting an empty default-column-width.
-window-rule {
-    // This regular expression is intentionally made as specific as possible,
-    // since this is the default config, and we want no false positives.
-    // You can get away with just app-id="wezterm" if you want.
-    match app-id=r#"^org\.wezfurlong\.wezterm$"#
-    default-column-width {}
-}
-
-// Open the Firefox picture-in-picture player as floating by default.
-window-rule {
-    // This app-id regular expression will work for both:
-    // - host Firefox (app-id is "firefox")
-    // - Flatpak Firefox (app-id is "org.mozilla.firefox")
-    match app-id=r#"firefox$"# title="^Picture-in-Picture$"
-    open-floating true
-}
-
-// Example: block out two password managers from screen capture.
-// (This example rule is commented out with a "/-" in front.)
-/-window-rule {
-    match app-id=r#"^org\.keepassxc\.KeePassXC$"#
-    match app-id=r#"^org\.gnome\.World\.Secrets$"#
-
-    block-out-from "screen-capture"
-
-    // Use this instead if you want them visible on third-party screenshot tools.
-    // block-out-from "screencast"
-}
-
-// Example: enable rounded corners for all windows.
-// (This example rule is commented out with a "/-" in front.)
-window-rule {
-    geometry-corner-radius 14
-    clip-to-geometry true
-}
-
-binds {
-    // Keys consist of modifiers separated by + signs, followed by an XKB key name
-    // in the end. To find an XKB name for a particular key, you may use a program
-    // like wev.
-    //
-    // "Mod" is a special modifier equal to Super when running on a TTY, and to Alt
-    // when running as a winit window.
-    //
-    // Most actions that you can bind here can also be invoked programmatically with
-    // `niri msg action do-something`.
-
-    // Mod-Shift-/, which is usually the same as Mod-?,
-    // shows a list of important hotkeys.
-    Mod+Shift+Slash { show-hotkey-overlay; }
-
-    // Suggested binds for running programs: terminal, app launcher, screen locker.
-    Mod+Return hotkey-overlay-title="Open a Terminal: kitty" { spawn "kitty"; }
-    Mod+Z hotkey-overlay-title="Open a launcher: walker" { spawn "walker"; }
-    Mod+Space { spawn "voxtoggle"; }
-    Mod+Alt+L hotkey-overlay-title="Lock the Screen: hyprlock" { spawn "hyprlock"; }
-
-    // Use spawn-sh to run a shell command. Do this if you need pipes, multiple commands, etc.
-    // Note: the entire command goes as a single argument. It's passed verbatim to `sh -c`.
-    // For example, this is a standard bind to toggle the screen reader (orca).
-    // Super+Alt+S allow-when-locked=true hotkey-overlay-title=null { spawn-sh "pkill orca || exec orca"; }
-
-    // Example volume keys mappings for PipeWire & WirePlumber.
-    // The allow-when-locked=true property makes them work even when the session is locked.
-    // Using spawn-sh allows to pass multiple arguments together with the command.
-    // "-l 1.0" limits the volume to 100%.
-    XF86AudioRaiseVolume allow-when-locked=true { spawn-sh "wpctl set-volume @DEFAULT_AUDIO_SINK@ 0.1+ -l 1.0"; }
-    XF86AudioLowerVolume allow-when-locked=true { spawn-sh "wpctl set-volume @DEFAULT_AUDIO_SINK@ 0.1-"; }
-    XF86AudioMute        allow-when-locked=true { spawn-sh "wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle"; }
-    XF86AudioMicMute     allow-when-locked=true { spawn-sh "wpctl set-mute @DEFAULT_AUDIO_SOURCE@ toggle"; }
-
-    // Example media keys mapping using playerctl.
-    // This will work with any MPRIS-enabled media player.
-    XF86AudioPlay        allow-when-locked=true { spawn-sh "playerctl play-pause"; }
-    XF86AudioStop        allow-when-locked=true { spawn-sh "playerctl stop"; }
-    XF86AudioPrev        allow-when-locked=true { spawn-sh "playerctl previous"; }
-    XF86AudioNext        allow-when-locked=true { spawn-sh "playerctl next"; }
-
-    // Example brightness key mappings for brightnessctl.
-    // You can use regular spawn with multiple arguments too (to avoid going through "sh"),
-    // but you need to manually put each argument in separate "" quotes.
-    XF86MonBrightnessUp allow-when-locked=true { spawn "brightnessctl" "--class=backlight" "set" "+10%"; }
-    XF86MonBrightnessDown allow-when-locked=true { spawn "brightnessctl" "--class=backlight" "set" "10%-"; }
-
-    // Open/close the Overview: a zoomed-out view of workspaces and windows.
-    // You can also move the mouse into the top-left hot corner,
-    // or do a four-finger swipe up on a touchpad.
-    Mod+O repeat=false { toggle-overview; }
-
-    Mod+Backspace repeat=false { close-window; }
-
-    Mod+Left  { focus-column-left; }
-    Mod+Down  { focus-window-down; }
-    Mod+Up    { focus-window-up; }
-    Mod+Right { focus-column-right; }
-
-    Mod+H     { focus-column-left; }
-    Mod+J     { focus-window-or-workspace-down; }
-    Mod+K     { focus-window-or-workspace-up; }
-    Mod+L     { focus-column-right; }
-
-    Mod+Shift+Left  { move-column-left; }
-    Mod+Shift+Down  { move-window-down; }
-    Mod+Shift+Up    { move-window-up; }
-    Mod+Shift+Right { move-column-right; }
-    Mod+Shift+H     { move-column-left; }
-    Mod+Shift+J     { move-window-down-or-to-workspace-down; }
-    Mod+Shift+K     { move-window-up-or-to-workspace-up; }
-    Mod+Shift+L     { move-column-right; }
-
-
-    Mod+Home { focus-column-first; }
-    Mod+End  { focus-column-last; }
-    Mod+Shift+Home { move-column-to-first; }
-    Mod+Shift+End  { move-column-to-last; }
-
-    Mod+Ctrl+Left  { focus-monitor-left; }
-    Mod+Ctrl+Down  { focus-monitor-down; }
-    Mod+Ctrl+Up    { focus-monitor-up; }
-    Mod+Ctrl+Right { focus-monitor-right; }
-    Mod+Ctrl+H     { focus-monitor-left; }
-    Mod+Ctrl+J     { focus-monitor-down; }
-    Mod+Ctrl+K     { focus-monitor-up; }
-    Mod+Ctrl+L     { focus-monitor-right; }
-
-    Mod+Shift+Ctrl+Left  { move-column-to-monitor-left; }
-    Mod+Shift+Ctrl+Down  { move-column-to-monitor-down; }
-    Mod+Shift+Ctrl+Up    { move-column-to-monitor-up; }
-    Mod+Shift+Ctrl+Right { move-column-to-monitor-right; }
-    Mod+Shift+Ctrl+H     { move-column-to-monitor-left; }
-    Mod+Shift+Ctrl+J     { move-column-to-monitor-down; }
-    Mod+Shift+Ctrl+K     { move-column-to-monitor-up; }
-    Mod+Shift+Ctrl+L     { move-column-to-monitor-right; }
-
-    // Alternatively, there are commands to move just a single window:
-    // Mod+Shift+Ctrl+Left  { move-window-to-monitor-left; }
-    // ...
-
-    // And you can also move a whole workspace to another monitor:
-    // Mod+Shift+Ctrl+Left  { move-workspace-to-monitor-left; }
-    // ...
-
-    Mod+Page_Down      { focus-workspace-down; }
-    Mod+Page_Up        { focus-workspace-up; }
-    Mod+U              { focus-workspace-down; }
-    Mod+I              { focus-workspace-up; }
-    Mod+Ctrl+Page_Down { move-column-to-workspace-down; }
-    Mod+Ctrl+Page_Up   { move-column-to-workspace-up; }
-    Mod+Ctrl+U         { move-column-to-workspace-down; }
-    Mod+Ctrl+I         { move-column-to-workspace-up; }
-
-    // Alternatively, there are commands to move just a single window:
-    // Mod+Ctrl+Page_Down { move-window-to-workspace-down; }
-    // ...
-
-    Mod+Shift+Page_Down { move-workspace-down; }
-    Mod+Shift+Page_Up   { move-workspace-up; }
-    Mod+Shift+U         { move-workspace-down; }
-    Mod+Shift+I         { move-workspace-up; }
-
-    // You can bind mouse wheel scroll ticks using the following syntax.
-    // These binds will change direction based on the natural-scroll setting.
-    //
-    // To avoid scrolling through workspaces really fast, you can use
-    // the cooldown-ms property. The bind will be rate-limited to this value.
-    // You can set a cooldown on any bind, but it's most useful for the wheel.
-    Mod+WheelScrollDown      cooldown-ms=150 { focus-workspace-down; }
-    Mod+WheelScrollUp        cooldown-ms=150 { focus-workspace-up; }
-    Mod+Ctrl+WheelScrollDown cooldown-ms=150 { move-column-to-workspace-down; }
-    Mod+Ctrl+WheelScrollUp   cooldown-ms=150 { move-column-to-workspace-up; }
-
-    Mod+WheelScrollRight      { focus-column-right; }
-    Mod+WheelScrollLeft       { focus-column-left; }
-    Mod+Ctrl+WheelScrollRight { move-column-right; }
-    Mod+Ctrl+WheelScrollLeft  { move-column-left; }
-
-    // Usually scrolling up and down with Shift in applications results in
-    // horizontal scrolling; these binds replicate that.
-    Mod+Shift+WheelScrollDown      { focus-column-right; }
-    Mod+Shift+WheelScrollUp        { focus-column-left; }
-    Mod+Ctrl+Shift+WheelScrollDown { move-column-right; }
-    Mod+Ctrl+Shift+WheelScrollUp   { move-column-left; }
-
-    // Similarly, you can bind touchpad scroll "ticks".
-    // Touchpad scrolling is continuous, so for these binds it is split into
-    // discrete intervals.
-    // These binds are also affected by touchpad's natural-scroll, so these
-    // example binds are "inverted", since we have natural-scroll enabled for
-    // touchpads by default.
-    // Mod+TouchpadScrollDown { spawn-sh "wpctl set-volume @DEFAULT_AUDIO_SINK@ 0.02+"; }
-    // Mod+TouchpadScrollUp   { spawn-sh "wpctl set-volume @DEFAULT_AUDIO_SINK@ 0.02-"; }
-
-    // You can refer to workspaces by index. However, keep in mind that
-    // niri is a dynamic workspace system, so these commands are kind of
-    // "best effort". Trying to refer to a workspace index bigger than
-    // the current workspace count will instead refer to the bottommost
-    // (empty) workspace.
-    //
-    // For example, with 2 workspaces + 1 empty, indices 3, 4, 5 and so on
-    // will all refer to the 3rd workspace.
-    Mod+1 { focus-workspace 1; }
-    Mod+2 { focus-workspace 2; }
-    Mod+3 { focus-workspace 3; }
-    Mod+4 { focus-workspace 4; }
-    Mod+5 { focus-workspace 5; }
-    Mod+6 { focus-workspace 6; }
-    Mod+7 { focus-workspace 7; }
-    Mod+8 { focus-workspace 8; }
-    Mod+9 { focus-workspace 9; }
-    Mod+Shift+1 { move-column-to-workspace 1; }
-    Mod+Shift+2 { move-column-to-workspace 2; }
-    Mod+Shift+3 { move-column-to-workspace 3; }
-    Mod+Shift+4 { move-column-to-workspace 4; }
-    Mod+Shift+5 { move-column-to-workspace 5; }
-    Mod+Shift+6 { move-column-to-workspace 6; }
-    Mod+Shift+7 { move-column-to-workspace 7; }
-    Mod+Shift+8 { move-column-to-workspace 8; }
-    Mod+Shift+9 { move-column-to-workspace 9; }
-
-    // Alternatively, there are commands to move just a single window:
-    // Mod+Ctrl+1 { move-window-to-workspace 1; }
-
-    // Switches focus between the current and the previous workspace.
-    // Mod+Tab { focus-workspace-previous; }
-
-    // The following binds move the focused window in and out of a column.
-    // If the window is alone, they will consume it into the nearby column to the side.
-    // If the window is already in a column, they will expel it out.
-    Mod+BracketLeft  { consume-or-expel-window-left; }
-    Mod+BracketRight { consume-or-expel-window-right; }
-
-    // Consume one window from the right to the bottom of the focused column.
-    Mod+Comma  { consume-window-into-column; }
-    // Expel the bottom window from the focused column to the right.
-    Mod+Period { expel-window-from-column; }
-
-    Mod+R { switch-preset-column-width; }
-    // Cycling through the presets in reverse order is also possible.
-    // Mod+R { switch-preset-column-width-back; }
-    Mod+Ctrl+R { switch-preset-window-height; }
-    Mod+Shift+R { reset-window-height; }
-    Mod+F { maximize-column; }
-    Mod+Shift+F { fullscreen-window; }
-
-    // While maximize-column leaves gaps and borders around the window,
-    // maximize-window-to-edges doesn't: the window expands to the edges of the screen.
-    // This bind corresponds to normal window maximizing,
-    // e.g. by double-clicking on the titlebar.
-    Mod+M { maximize-window-to-edges; }
-
-    // Expand the focused column to space not taken up by other fully visible columns.
-    // Makes the column "fill the rest of the space".
-    Mod+Ctrl+F { expand-column-to-available-width; }
-
-    Mod+C { center-column; }
-
-    // Center all fully visible columns on screen.
-    Mod+Ctrl+C { center-visible-columns; }
-
-    // Finer width adjustments.
-    // This command can also:
-    // * set width in pixels: "1000"
-    // * adjust width in pixels: "-5" or "+5"
-    // * set width as a percentage of screen width: "25%"
-    // * adjust width as a percentage of screen width: "-10%" or "+10%"
-    // Pixel sizes use logical, or scaled, pixels. I.e. on an output with scale 2.0,
-    // set-column-width "100" will make the column occupy 200 physical screen pixels.
-    Mod+Minus { set-column-width "-10%"; }
-    Mod+Equal { set-column-width "+10%"; }
-
-    // Finer height adjustments when in column with other windows.
-    Mod+Shift+Minus { set-window-height "-10%"; }
-    Mod+Shift+Equal { set-window-height "+10%"; }
-
-    // Move the focused window between the floating and the tiling layout.
-    Mod+V       { toggle-window-floating; }
-    Mod+Shift+V { switch-focus-between-floating-and-tiling; }
-
-    // Toggle tabbed column display mode.
-    // Windows in this column will appear as vertical tabs,
-    // rather than stacked on top of each other.
-    Mod+W { toggle-column-tabbed-display; }
-
-    // Actions to switch layouts.
-    // Note: if you uncomment these, make sure you do NOT have
-    // a matching layout switch hotkey configured in xkb options above.
-    // Having both at once on the same hotkey will break the switching,
-    // since it will switch twice upon pressing the hotkey (once by xkb, once by niri).
-    // Mod+Space       { switch-layout "next"; }
-    // Mod+Shift+Space { switch-layout "prev"; }
-
-    Print { screenshot; }
-    Ctrl+Print { screenshot-screen; }
-    Alt+Print { screenshot-window; }
-
-    // Applications such as remote-desktop clients and software KVM switches may
-    // request that niri stops processing the keyboard shortcuts defined here
-    // so they may, for example, forward the key presses as-is to a remote machine.
-    // It's a good idea to bind an escape hatch to toggle the inhibitor,
-    // so a buggy application can't hold your session hostage.
-    //
-    // The allow-inhibiting=false property can be applied to other binds as well,
-    // which ensures niri always processes them, even when an inhibitor is active.
-    Mod+Escape allow-inhibiting=false { toggle-keyboard-shortcuts-inhibit; }
-
-    // The quit action will show a confirmation dialog to avoid accidental exits.
-    Mod+Shift+E { quit; }
-    Ctrl+Alt+Delete { quit; }
-
-    // Powers off the monitors. To turn them back on, do any input like
-    // moving the mouse or pressing any other key.
-    Mod+Shift+P { power-off-monitors; }
-
-}
-
-switch-events {
-    lid-close {
-        spawn "handle-lid-close";
-    }
-}

home/jokke/default.nix

@@ -14,7 +14,6 @@
       ffmpeg
       mediainfo
       git-lfs
-      telegram-desktop
       shards
       deno
       virt-manager

home/moco/default.nix

@@ -6,6 +6,13 @@
 }:
 let
   homeDirectory = "/home/moco";
+  nmcli = lib.getExe' pkgs.networkmanager "nmcli";
+  ykman = lib.getExe pkgs.yubikey-manager;
+  isMocoVpnActive = lib.getExe (
+    pkgs.writeShellScriptBin "is-moco-vpn-active" ''
+      ${nmcli} -t -f NAME connection show --active | grep -q '^moco$'
+    ''
+  );
 in
 {
   # Home Manager needs a bit of information about you and the paths it should
@@ -38,6 +45,13 @@ in
       (writeShellScriptBin "moco-reto-otp" ''
         ykman oath accounts code -s 'MOCO Reto' | wl-copy -n
       '')
+      (writeShellScriptBin "toggle-moco-vpn" ''
+        if ${isMocoVpnActive}; then
+          ${nmcli} c down moco
+        else
+          ${ykman} oath accounts code -s 'MOCO Reto' | ${nmcli} c up moco --ask
+        fi
+      '')
     ];
   };
 
@@ -62,34 +76,6 @@ in
     };
   };
 
-  programs.ashell.settings.settings.CustomButton =
-    let
-      nmcli = lib.getExe' pkgs.networkmanager "nmcli";
-      ykman = lib.getExe pkgs.yubikey-manager;
-      isMocoVpnActive = lib.getExe (
-        pkgs.writeShellScriptBin "is-moco-vpn-active" ''
-          ${nmcli} -t -f NAME connection show --active | grep -q '^moco$'
-        ''
-      );
-      toggleMocoVpn = lib.getExe (
-        pkgs.writeShellScriptBin "toggle-moco-vpn" ''
-          if ${isMocoVpnActive}; then
-            ${nmcli} c down moco
-          else
-            ${ykman} oath accounts code -s 'MOCO Reto' | ${nmcli} c up moco --ask
-          fi
-        ''
-      );
-    in
-    [
-      {
-        name = "MOCO VPN";
-        icon = "󰖂";
-        command = toggleMocoVpn;
-        status_command = isMocoVpnActive;
-      }
-    ];
-
   programs.zsh = {
     cdpath = [
       "${homeDirectory}/Code/mocoapp"

home/modules/voxtype/default.nix

@@ -32,6 +32,10 @@ let
     '';
     meta.mainProgram = "voxtype-post-process";
   };
+
+  postProcessingConfig = pkgs.writeText "voxtype-post-processing.json" (
+    builtins.toJSON cfg.postProcessing.settings
+  );
 in
 {
   options.programs.voxtype = {
@@ -83,10 +87,14 @@ in
   };
 
   config = lib.mkIf cfg.postProcessing.enable {
-    xdg.configFile."voxtype/post-processing.json".text = builtins.toJSON cfg.postProcessing.settings;
+    xdg.configFile."voxtype/post-processing.json".source = postProcessingConfig;
     programs.voxtype.settings.output.post_process = {
       command = lib.getExe postProcess;
       timeout_ms = 5 * 60 * 1000; # 5 minutes
     };
+
+    systemd.user.services.voxtype.Service.X-Reload-If-Changed = [
+      postProcess
+    ];
   };
 }

home/modules/zed/default.nix

@@ -3,10 +3,71 @@
   lib,
   pkgs,
   pkgs-unstable,
+  inputs,
   ...
 }:
 let
   cfg = config.programs.zed-editor;
+  models-dev = inputs.models-dev;
+
+  getModelsFromProvider =
+    provider:
+    let
+      providerPath = "${models-dev}/providers/${provider}";
+      modelsPath = "${providerPath}/models";
+      providerToml = builtins.fromTOML (builtins.readFile "${providerPath}/provider.toml");
+
+      findAllTomlFiles =
+        path:
+        let
+          entries = builtins.readDir path;
+          files = builtins.filter (name: builtins.match ".*\\.toml$" name != null) (
+            builtins.attrNames (lib.filterAttrs (_: type: type == "regular") entries)
+          );
+          dirs = builtins.attrNames (lib.filterAttrs (_: type: type == "directory") entries);
+          nestedFiles = builtins.concatMap (
+            dir:
+            let
+              nestedPath = "${path}/${dir}";
+              nestedTomlFiles = findAllTomlFiles nestedPath;
+            in
+            map (file: "${dir}/${file}") nestedTomlFiles
+          ) dirs;
+        in
+        files ++ nestedFiles;
+
+      modelFiles = findAllTomlFiles modelsPath;
+      modelEntries = map (
+        file:
+        let
+          filePath = "${modelsPath}/${file}";
+          parsed = builtins.fromTOML (builtins.readFile filePath);
+          modelName = builtins.substring 0 (builtins.stringLength file - 5) file;
+        in
+        {
+          name = modelName;
+          display_name = parsed.name or modelName;
+          max_tokens = parsed.limit.context or parsed.limit.output or 128000;
+        }
+      ) modelFiles;
+    in
+    {
+      api_url = providerToml.api;
+      available_models = builtins.sort (a: b: a.name < b.name) modelEntries;
+      name = providerToml.name;
+    };
+
+  opencodeProviders = map getModelsFromProvider [
+    "opencode"
+    "opencode-go"
+    "fireworks-ai"
+    "firepass"
+  ];
+
+  openaiCompatibleProviders = builtins.listToAttrs (
+    map (p: lib.nameValuePair p.name p) opencodeProviders
+  );
+
   ameba-ls = pkgs.stdenv.mkDerivation rec {
     pname = "ameba-ls";
     version = "0.1.0";
@@ -81,8 +142,15 @@ in
         agent = {
           enabled = true;
           default_model = {
-            provider = "openai";
+            provider = "opencode-go";
-            model = "kimi-k2.5";
+            model = "glm-5";
+          };
+        };
+        agent_servers = {
+          OpenCode = {
+            command = "opencode";
+            args = [ "acp" ];
+            type = "custom";
           };
         };
         auto_update = false;
@@ -141,6 +209,10 @@ in
               ];
             };
           };
+          TypeScript.language_servers = [
+            "tsgo"
+            "vtsls"
+          ];
         };
         lsp = with pkgs; {
           nixd.binary.path = lib.getExe nixd;
@@ -204,7 +276,6 @@ in
           font_family = "IosevkaTerm Nerd Font";
         };
         edit_predictions = {
-          enabled = true;
           mode = "eager";
           provider = "copilot";
         };
@@ -219,173 +290,7 @@ in
           ];
         };
         language_models = {
-          openai = {
+          openai_compatible = openaiCompatibleProviders;
-            api_url = "https://opencode.ai/zen/v1";
-            available_models = [
-              # Claude models
-              {
-                name = "claude-opus-4-6";
-                display_name = "OpenCode Zen - Claude Opus 4.6";
-                max_tokens = 1048576;
-              }
-              {
-                name = "claude-opus-4-5";
-                display_name = "OpenCode Zen - Claude Opus 4.5";
-                max_tokens = 200000;
-              }
-              {
-                name = "claude-opus-4-1";
-                display_name = "OpenCode Zen - Claude Opus 4.1";
-                max_tokens = 200000;
-              }
-              {
-                name = "claude-sonnet-4";
-                display_name = "OpenCode Zen - Claude Sonnet 4";
-                max_tokens = 1048576;
-              }
-              {
-                name = "claude-sonnet-4-5";
-                display_name = "OpenCode Zen - Claude Sonnet 4.5";
-                max_tokens = 1048576;
-              }
-              {
-                name = "claude-3-5-haiku";
-                display_name = "OpenCode Zen - Claude 3.5 Haiku";
-                max_tokens = 200000;
-              }
-              {
-                name = "claude-haiku-4-5";
-                display_name = "OpenCode Zen - Claude Haiku 4.5";
-                max_tokens = 200000;
-              }
-              # GPT models
-              {
-                name = "gpt-5.2";
-                display_name = "OpenCode Zen - GPT 5.2";
-                max_tokens = 400000;
-              }
-              {
-                name = "gpt-5.2-codex";
-                display_name = "OpenCode Zen - GPT 5.2 Codex";
-                max_tokens = 400000;
-              }
-              {
-                name = "gpt-5.1";
-                display_name = "OpenCode Zen - GPT 5.1";
-                max_tokens = 400000;
-              }
-              {
-                name = "gpt-5.1-codex-max";
-                display_name = "OpenCode Zen - GPT 5.1 Codex Max";
-                max_tokens = 400000;
-              }
-              {
-                name = "gpt-5.1-codex";
-                display_name = "OpenCode Zen - GPT 5.1 Codex";
-                max_tokens = 400000;
-              }
-              {
-                name = "gpt-5.1-codex-mini";
-                display_name = "OpenCode Zen - GPT 5.1 Codex Mini";
-                max_tokens = 400000;
-              }
-              {
-                name = "gpt-5";
-                display_name = "OpenCode Zen - GPT 5";
-                max_tokens = 400000;
-              }
-              {
-                name = "gpt-5-codex";
-                display_name = "OpenCode Zen - GPT 5 Codex";
-                max_tokens = 400000;
-              }
-              {
-                name = "gpt-5-nano";
-                display_name = "OpenCode Zen - GPT 5 Nano";
-                max_tokens = 400000;
-              }
-              # Gemini models
-              {
-                name = "gemini-3-pro";
-                display_name = "OpenCode Zen - Gemini 3 Pro";
-                max_tokens = 1048576;
-              }
-              {
-                name = "gemini-3-flash";
-                display_name = "OpenCode Zen - Gemini 3 Flash";
-                max_tokens = 1048576;
-              }
-              # GLM models
-              {
-                name = "glm-4.7";
-                display_name = "OpenCode Zen - GLM 4.7";
-                max_tokens = 205000;
-              }
-              {
-                name = "glm-4.6";
-                display_name = "OpenCode Zen - GLM 4.6";
-                max_tokens = 205000;
-              }
-              {
-                name = "glm-4.7-free";
-                display_name = "OpenCode Zen - GLM 4.7 Free";
-                max_tokens = 205000;
-              }
-              # Kimi models
-              {
-                name = "kimi-k2.5";
-                display_name = "OpenCode Zen - Kimi K2.5";
-                max_tokens = 262000;
-              }
-              {
-                name = "kimi-k2.5-free";
-                display_name = "OpenCode Zen - Kimi K2.5 Free";
-                max_tokens = 262000;
-              }
-              {
-                name = "kimi-k2";
-                display_name = "OpenCode Zen - Kimi K2";
-                max_tokens = 262000;
-              }
-              {
-                name = "kimi-k2-thinking";
-                display_name = "OpenCode Zen - Kimi K2 Thinking";
-                max_tokens = 262000;
-              }
-              # MiniMax models
-              {
-                name = "minimax-m2.1";
-                display_name = "OpenCode Zen - MiniMax M2.1";
-                max_tokens = 205000;
-              }
-              {
-                name = "minimax-m2.5-free";
-                display_name = "OpenCode Zen - MiniMax M2.5 Free";
-                max_tokens = 205000;
-              }
-              {
-                name = "minimax-m2.1-free";
-                display_name = "OpenCode Zen - MiniMax M2.1 Free";
-                max_tokens = 205000;
-              }
-              # Other models
-              {
-                name = "trinity-large-preview-free";
-                display_name = "OpenCode Zen - Trinity Large Preview Free";
-                max_tokens = 131000;
-              }
-              {
-                name = "big-pickle";
-                display_name = "OpenCode Zen - Big Pickle";
-                max_tokens = 200000;
-              }
-              {
-                name = "alpha-g5";
-                display_name = "OpenCode Zen - Alpha G5";
-                max_tokens = 200000;
-              }
-            ];
-          };
         };
       };
       userKeymaps = [
@@ -453,7 +358,7 @@ in
         }
         {
           label = "opencode";
-          command = lib.getExe pkgs-unstable.opencode;
+          command = "opencode";
           reveal = "always";
           allow_concurrent_runs = true;
           use_new_terminal = false;

hosts/freun-dev/configuration.nix

@@ -106,6 +106,12 @@ in
     };
   };
 
+  services.resolved = {
+    enable = true;
+    dnsovertls = "opportunistic";
+    dnssec = "allow-downgrade";
+  };
+
   services.networkd-dispatcher = {
     enable = true;
     rules."50-tailscale" = {

hosts/freun-dev/secrets.nix

@@ -32,6 +32,9 @@
           "voidauth"
           "gitea"
           "gitea-actions-runner"
+          "searx"
+          "open-webui"
+          "open-terminal-api-key"
         ]
     )
     // {

hosts/freun-dev/services.nix

@@ -19,6 +19,7 @@ let
   secrets = config.age.secrets;
 in
 {
+  nixpkgs.config.allowUnfree = true;
   imports = [
     ./glance.nix
   ];
@@ -246,7 +247,25 @@ in
 
     mosquitto = {
       enable = true;
+      subdomain = "mqtt";
       listeners = [
+        {
+          users = {
+            homie = {
+              acl = [
+                "readwrite homie/#"
+              ];
+              hashedPasswordFile = secrets."mosquitto/homie".path;
+            };
+          };
+          port = 8084;
+          settings = {
+            protocol = "websockets";
+            cafile = "/run/credentials/mosquitto.service/fullchain.pem";
+            certfile = "/run/credentials/mosquitto.service/fullchain.pem";
+            keyfile = "/run/credentials/mosquitto.service/key.pem";
+          };
+        }
         {
           users = {
             homie = {
@@ -387,11 +406,73 @@ in
       };
     };
 
+    searx = {
+      enable = true;
+      subdomain = "q";
+      port = 3400;
+      environmentFile = secrets.searx.path;
+      settings = {
+        general = {
+          instance_name = "freun.dev SearXNG";
+        };
+        server = {
+          public_instance = true;
+          image_proxy = true;
+          method = "GET";
+          secret_key = "$SEARX_SECRET_KEY";
+        };
+        engines = lib.mapAttrsToList (name: value: { inherit name; } // value) {
+          "google".disabled = true;
+          "duckduckgo".disabled = false;
+          "duckduckgo images".disabled = false;
+          "wolframalpha".disabled = false;
+        };
+        search = {
+          formats = [
+            "html"
+            "json"
+          ];
+        };
+        enabled_plugins = [
+          "Basic Calculator"
+          "Hash plugin"
+          "Open Access DOI rewrite"
+          "Hostnames plugin"
+          "Unit converter plugin"
+          "Tracker URL remover"
+        ];
+      };
+    };
+
+    open-webui = {
+      enable = true;
+      port = 3500;
+      environmentFile = secrets.open-webui.path;
+      environment = {
+        ENABLE_WEB_SEARCH = "True";
+        ENABLE_OLLAMA_API = "False";
+      };
+      subdomain = "owu";
+    };
+
     webserver = {
       acme.dnsChallenge = true;
       tailscaleAuth.expectedTailnet = "tempel-vibes.ts.net";
     };
   };
 
+  virtualisation.oci-containers.containers.open-terminal = {
+    image = "ghcr.io/open-webui/open-terminal:latest";
+    autoStart = true;
+    ports = [ "127.0.0.1:3700:8000" ];
+    environmentFiles = [ config.age.secrets."open-terminal-api-key".path ];
+    environment = {
+      OPEN_TERMINAL_MULTI_USER = "true";
+    };
+    volumes = [
+      "open-terminal-data:/home/user"
+    ];
+  };
+
   virtualisation.docker.autoPrune.enable = true;
 }

hosts/radish/containers.nix

@@ -4,6 +4,7 @@
     containers = {
       enable = true;
       storage.settings.storage.driver = "btrfs";
+      containersConf.settings.compose_warning_logs = false;
     };
 
     oci-containers.backend = "podman";
@@ -13,15 +14,7 @@
       autoPrune.enable = true;
       defaultNetwork.settings.dns_enabled = true;
       package = pkgs-unstable.podman;
-    };
+      dockerCompat = true;
-
-    docker = {
-      storageDriver = "btrfs";
-      enable = true;
-      autoPrune.enable = true;
     };
   };
-
-  users.users.jokke.extraGroups = [ "docker" ];
-  users.users.moco.extraGroups = [ "docker" ];
 }

hosts/radish/desktop.nix

@@ -1,8 +1,8 @@
-{ ... }:
+{ pkgs-unstable, ... }:
 {
   services.displayManager.gdm.enable = true;
   services.desktopManager.gnome.enable = true;
-  programs.niri.enable = true;
+  services.displayManager.sessionPackages = [ pkgs-unstable.niri ];
 
   services.printing.enable = true;
   services.keyd = {

hosts/radish/hardware.nix

@@ -69,9 +69,15 @@
     enable = true;
     extraPackages = with pkgs; [ rocmPackages.clr.icd ];
   };
+  services.resolved = {
+    enable = true;
+    dnsovertls = "opportunistic";
+    dnssec = "allow-downgrade";
+  };
   networking.networkmanager = {
     enable = true;
     wifi.backend = "iwd";
+    dns = "systemd-resolved";
     plugins = with pkgs; [
       networkmanager-openvpn
     ];
@@ -86,4 +92,50 @@
     }
   ];
   networking.firewall.allowedUDPPorts = [ 5353 ];
+
+  networking.wg-quick.interfaces = lib.mkMerge (
+    lib.map
+      (
+        {
+          region,
+          ipOctet,
+          publicKey,
+        }:
+        {
+          "everii-${region}" = {
+            address = [ "10.${toString ipOctet}.8.48/22" ];
+            dns = [ "10.${toString ipOctet}.1.1" ];
+            privateKeyFile = config.age.secrets."everii-vpn/${region}.key".path;
+            peers = [
+              {
+                allowedIPs = [ "10.${toString ipOctet}.0.0/16" ];
+                endpoint = "vpn.${region}.infra.everii.io:51821";
+                inherit publicKey;
+              }
+            ];
+            postUp = ''
+              ${pkgs.systemd}/bin/resolvectl domain everii-${region} ~${region}.everii ~${toString ipOctet}.10.in-addr.arpa
+              ${pkgs.systemd}/bin/resolvectl dnssec everii-${region} no
+            '';
+          };
+        }
+      )
+      [
+        {
+          region = "de1";
+          ipOctet = 13;
+          publicKey = "uBUgSTZb6WbfE960S3qFP/UUMtdsgNWqtkTaBkp6Xxo=";
+        }
+        {
+          region = "fi1";
+          ipOctet = 14;
+          publicKey = "Yoakl0lrL6IK1nT8x5SGpaS39fQxRAsP9Zjpu8/1RRs=";
+        }
+        {
+          region = "ch1";
+          ipOctet = 15;
+          publicKey = "gfciqAk+X02zoEKXSvRamx5+TGL3i4GpT7oUvHMD0xo=";
+        }
+      ]
+  );
 }

hosts/radish/packages.nix

@@ -33,6 +33,8 @@ in
     nerd-fonts.iosevka-term
   ];
   services = {
+    gnome.evolution-data-server.enable = true;
+    flatpak.enable = true;
     pcscd = {
       enable = true;
       plugins = [ pkgs.ccid ];

hosts/radish/secrets.nix

@@ -10,6 +10,9 @@
       })
       [
         "borgbackup-radish"
+        "everii-vpn/de1.key"
+        "everii-vpn/ch1.key"
+        "everii-vpn/fi1.key"
       ]
   );
 }

hosts/radish/users.nix

@@ -4,7 +4,10 @@
   users.users.jokke = {
     uid = 1001;
     isNormalUser = true;
-    extraGroups = [ "wheel" ];
+    extraGroups = [
+      "wheel"
+      "networkmanager"
+    ];
     shell = pkgs.zsh;
     initialPassword = "changeme";
   };
@@ -12,7 +15,10 @@
   users.users.moco = {
     uid = 1000;
     isNormalUser = true;
-    extraGroups = [ "wheel" ];
+    extraGroups = [
+      "wheel"
+      "networkmanager"
+    ];
     shell = pkgs.zsh;
     initialPassword = "changeme";
     subUidRanges = [

modules/services/adguardhome.nix

@@ -46,7 +46,18 @@ in
           certificate_chain_path = "/run/credentials/adguardhome.service/fullchain.pem";
           private_key_path = "/run/credentials/adguardhome.service/key.pem";
         };
-        dns.bind_hosts = tailscaleIps;
+        dns = {
+          bind_hosts = tailscaleIps;
+          upstream_dns = [
+            "https://dns10.quad9.net/dns-query"
+            "https://cloudflare-dns.com/dns-query"
+            "https://dns.google/dns-query"
+          ];
+          fallback_dns = [
+            "https://cloudflare-dns.com/dns-query"
+            "https://dns.google/dns-query"
+          ];
+        };
       };
     };
 

modules/services/default.nix

@@ -33,5 +33,7 @@
     ./gitea.nix
     ./dhcp-dns-sync
     ./invidious-companion.nix
+    ./searx.nix
+    ./open-webui.nix
   ];
 }

modules/services/dnote.nix

@@ -37,6 +37,9 @@ let
   };
 
   immutableEnvironment = {
+    HOME = "/var/lib/dnote";
+    XDG_DATA_HOME = "/var/lib/dnote";
+    XDG_CONFIG_HOME = "/var/lib/dnote";
     GO_ENV = "PRODUCTION";
     OnPremises = true;
     DBHost = "/var/run/postgresql";
@@ -90,26 +93,10 @@ in
       after = [ "postgresql.service" ];
       requires = [ "postgresql.service" ];
       serviceConfig = {
-        ExecStart = "${pkgs-unstable.dnote}/bin/dnote-server -port ${toString cfg.port} start";
+        ExecStart = "${pkgs-unstable.dnote}/bin/dnote-server start --port ${toString cfg.port}";
         EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile;
         User = cfg.user;
-        BindPaths = [
+        StateDirectory = "dnote";
-          "/var/run/postgresql"
-        ];
-        BindReadOnlyPaths = [
-          /run/systemd/resolve/stub-resolv.conf
-          /etc/ssl
-          /etc/static/ssl
-          /etc/resolv.conf
-          /etc/static/resolv.conf
-          /etc/nsswitch.conf
-          /etc/static/nsswitch.conf
-          /etc/hosts
-        ];
-      };
-      confinement = {
-        enable = true;
-        packages = [ pkgs.cacert ];
       };
       wantedBy = [ "multi-user.target" ];
     };

modules/services/mosquitto.nix

@@ -1,14 +1,39 @@
-{ config, lib, ... }:
+{
+  config,
+  lib,
+  ...
+}:
 let
   cfg = config.services.mosquitto;
+  fqdn = "${cfg.subdomain}.${config.networking.domain}";
+  acme = config.security.acme;
 in
 {
   options = {
     services.mosquitto = {
       openFirewall = lib.mkEnableOption "Open firewall port for Mosquitto";
+      subdomain = lib.mkOption {
+        type = lib.types.nullOr lib.types.str;
+        default = null;
+      };
     };
   };
-  config = lib.mkIf cfg.enable {
+  config = lib.mkIf cfg.enable (
-    networking.firewall.allowedTCPPorts = map ({ port, ... }: port) cfg.listeners;
+    lib.mkMerge [
-  };
+      { networking.firewall.allowedTCPPorts = map ({ port, ... }: port) cfg.listeners; }
+      (lib.mkIf (cfg.subdomain != null) {
+        security.acme.certs.${fqdn}.postRun = ''
+          systemctl restart mosquitto
+        '';
+
+        systemd.services.mosquitto = {
+          requires = [ "acme-${fqdn}.service" ];
+          serviceConfig.LoadCredential = [
+            "fullchain.pem:${acme.certs.${fqdn}.directory}/fullchain.pem"
+            "key.pem:${acme.certs.${fqdn}.directory}/key.pem"
+          ];
+        };
+      })
+    ]
+  );
 }

modules/services/octodns.nix

@@ -204,6 +204,7 @@ let
       hetzner = {
         class = "octodns_hetzner.HetznerProvider";
         token = "env/HETZNER_API_TOKEN";
+        backend = "hcloud";
       };
     };
 

modules/services/open-webui.nix

@@ -0,0 +1,78 @@
+{
+  lib,
+  config,
+  pkgs-unstable,
+  ...
+}:
+let
+  cfg = config.services.open-webui;
+  fqdn = "${cfg.subdomain}.${config.networking.domain}";
+
+  open-webui-pkg = pkgs-unstable.open-webui.overridePythonAttrs (oldAttrs: {
+    dependencies =
+      oldAttrs.dependencies
+      ++ (with pkgs-unstable.python3Packages; [
+        pgvector
+        psycopg2
+      ])
+      ++ [
+        pkgs-unstable.ffmpeg
+      ];
+  });
+in
+{
+  options.services.open-webui = {
+    subdomain = lib.mkOption {
+      type = lib.types.str;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services = {
+      open-webui = {
+        package = open-webui-pkg;
+        environment = {
+          ANONYMIZED_TELEMETRY = "False";
+          DO_NOT_TRACK = "True";
+          SCARF_NO_ANALYTICS = "True";
+          WEBUI_URL = "https://${fqdn}";
+          VECTOR_DB = "pgvector";
+          PGVECTOR_CREATE_EXTENSION = "False";
+          DATABASE_URL = "postgresql:///open-webui?host=/var/run/postgresql";
+          CORS_ALLOW_ORIGIN = "https://${fqdn};http://localhost";
+        };
+      };
+
+      webserver.vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
+      postgresql = {
+        enable = lib.mkDefault true;
+        ensureDatabases = [ "open-webui" ];
+        ensureUsers = [
+          {
+            name = "open-webui";
+            ensureDBOwnership = true;
+          }
+        ];
+        extensions = ps: with ps; [ pgvector ];
+      };
+    };
+
+    systemd.services.open-webui-pgvector-setup = {
+      description = "Ensure pgvector extension exists for open-webui";
+      wantedBy = [ "open-webui.service" ];
+      before = [ "open-webui.service" ];
+      after = [
+        "postgresql.service"
+        "postgresql-setup.service"
+      ];
+      requires = [ "postgresql.service" ];
+      serviceConfig = {
+        Type = "oneshot";
+        User = "postgres";
+        Group = "postgres";
+        ExecStart = "${config.services.postgresql.package}/bin/psql -d open-webui -c 'CREATE EXTENSION IF NOT EXISTS vector;'";
+        RemainAfterExit = true;
+      };
+    };
+  };
+}

modules/services/searx.nix

@@ -0,0 +1,70 @@
+{
+  pkgs-unstable,
+  config,
+  lib,
+  inputs,
+  ...
+}:
+let
+  cfg = config.services.searx;
+  fqdn = "${cfg.subdomain}.${config.networking.domain}";
+in
+{
+  disabledModules = [ "services/networking/searx.nix" ];
+
+  imports = [
+    "${inputs.nixpkgs-unstable}/nixos/modules/services/networking/searx.nix"
+  ];
+
+  options.services.searx = {
+    port = lib.mkOption {
+      type = lib.types.int;
+    };
+    subdomain = lib.mkOption {
+      type = lib.types.str;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.searx = {
+      redisCreateLocally = true;
+      package = pkgs-unstable.searxng;
+      limiterSettings = {
+        botdetection = {
+          ipv4_prefix = 32;
+          ipv6_prefix = 56;
+          ip_limit = {
+            filter_link_local = true;
+            link_token = false;
+          };
+          ip_lists = {
+            pass_ip = [
+              "127.0.0.1/32"
+              "::1"
+            ];
+          };
+          trusted_proxies = [
+            "127.0.0.0/8"
+            "::1"
+          ];
+        };
+      };
+      settings = {
+        server = {
+          bind_address = "localhost";
+          port = cfg.port;
+          limiter = true;
+        };
+      };
+    };
+
+    services.webserver.vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
+
+    # searx expects limiter.toml in the same directory as settings.yml (/run/searx)
+    systemd.services.searx-init.script = lib.mkAfter ''
+      ln -sf /etc/searxng/limiter.toml /run/searx/limiter.toml
+    '';
+
+    users.groups.searx.members = [ "nginx" ];
+  };
+}

secrets/everii-vpn/ch1.key.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 osOCZA ynIsrUjxXEYLRtKoiyBKCn83JeZ5rFhGD3xi61ypVBc
+ZuKEpntuTCMigOf/jeQ3V6oklmqzuxyDpi4oVhtWsc4
+-> ssh-ed25519 DFiohQ /0VJWz6hK+0FNjBciDbPHX+ader97UxCiQYB1BFZh3E
+SiqY0KS5wBWHMgEbJMAU1WgvXqEJjBAOQ3l/eMuETdI
+-> ssh-ed25519 hRPDBg KSXXiPwj27sKoXMiwW7IqQJvE72lYIgUjiPnpvVSSmE
+ioQGtUPSMj4flm9j84PLGm4C/P0sHVmYX38SgB6Yl2c
+--- jUadITulpzJjYp3oWxkG0Qk5RwDXisrKgmXYMlcxCss
+ç[ ,J"ø$¥Èµå½Mõ.ã0ט½Œcë§~ã,<2C>CŸ
+‰“s•¤×u1<02>™órDTf­:FtwAÉtÿ„™hE¿›„Af

secrets/everii-vpn/de1.key.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 osOCZA sGsltqSPiC3jkgZcpRXobfPgKiuPYzU3XiNptcyniB4
+0Q7X+YuaRHT2/1sCrqyhnXCRGIcUKlHQKoo7W8TCwD0
+-> ssh-ed25519 DFiohQ o982CBPZ8MYPkm+ngw0WxJKc4vC0yo1poTz3ICnbJVM
+Ac600G8Gr8dhPaXxl8k7A7XpaX70iyLTzfFFTc+14Ag
+-> ssh-ed25519 hRPDBg Pf8NvKBZy/afSlFjZIySg6aSregAeMtUCj7e90b0qXw
+kW4Ph56hKVtR0MUaulZpSS28Kna1Wigcvcf1Uv2ESf8
+--- Jbu+08V6cvPbTBjwiZvIRtsdOPOtn/e3VCzQuyrCgLw
+®î|xÌ=׺6ú»ÙÄ)ؘjYy6¤Ê`Ø‚ÛØào wÔ¬ËZ€\
LLfK,(œØq¸>AŽ_tM£êqŽü°°£Y‘>Õí

secrets/octodns.age

@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 osOCZA /bvBpb77DcS/s/6CeQ0UhEFWbvqhxFPaNA5OLFaiCH8
+-> ssh-ed25519 osOCZA +17EFCHbZLHgR8Rpm0rJMQkRE2BDzdkOKAVOVkYtp3g
-wzpY/fQkGJhFxoatlrZFpgcSoS4xbjcjBvcb60KP9QA
+qczTzv19yHel1huh/iaPmhL2IHn6VnllmrRc12fxEvo
--> ssh-ed25519 DFiohQ z2bzmSRW1uEFJh41p+1zsMEA/N00fsbFoIKbRt6ktUc
+-> ssh-ed25519 DFiohQ cqthFucT4nqP8zBbI7T0PKasbQiodUI6shXtE4cajlc
-uHoXyf/G5+Hzhz0pBtWl3GgP6sty9pHQwrebs0wjq+k
+C7IH41sO9JVDNP7x4WAaj/uP0hTSBa8tTr1xZkGut+8
--> ssh-ed25519 PT7ffg pnFtzWlckamU83mOYBtgvv7x+xD+CZYyqqcvMnIjwwU
+-> ssh-ed25519 PT7ffg 6+n9C8GUwvyogxvYl2XPERJRl1XEFT1kpwSaP11u2Xs
-tHtJlZI6fSajHOQw8MaYV5Qb1k/WBvv9jmPcvWh3UkA
+zmKc4mAIhn6UbgZwm6BDQ0CrVffTwa9ojd874CUr6Zk
---- w7H9J7plG2t7AGvKdg96CkqXSfV6s4Sqh3K37oZB3QU
+--- 2Allu+4UF9XVajB6oIS9vVPA/0U2CpnndT5oA7jEliQ
-LÆù¥á9|m·Ÿê
E$Ñ:†+ú È7 _Í]Ä9Ò4<>` Öè?2ÙAEñ±÷ð÷SÏÀ‰ô;ô»˜ã/i ÌIr!c¦mßëó8ÇTã¹Ò8j£/ílq—ù
+±¢‘ýèDzƒšªÑ6Ë%®^õ‚?ön’ò±Nú$&w7¥Fi<46>½d¯fÑÌÿ
<01>àóS@Ô["´ëP¸²õ6sÆó˜¦2ªï/¶w™—Iœ>æÒç×ÿÒÞ'ð?Èñ‘	Õ5÷ŒT‘ÁõèrJjLÝÜ
-OÅ€içÏo]]{¿X©«

secrets/secrets.nix

@@ -46,4 +46,10 @@ in
   "gitea-actions-runner.age".publicKeys = users ++ [ freun-dev ];
   "invidious-companion.age".publicKeys = users ++ [ apu ];
   "invidious.age".publicKeys = users ++ [ freun-dev ];
+  "open-webui.age".publicKeys = users ++ [ freun-dev ];
+  "open-terminal-api-key.age".publicKeys = users ++ [ freun-dev ];
+  "searx.age".publicKeys = users ++ [ freun-dev ];
+  "everii-vpn/de1.key.age".publicKeys = users ++ [ radish ];
+  "everii-vpn/ch1.key.age".publicKeys = users ++ [ radish ];
+  "everii-vpn/fi1.key.age".publicKeys = users ++ [ radish ];
 }