Syncthing secrets

.sops.yaml

@@ -1,14 +1,15 @@
-# This example uses YAML anchors which allows reuse of multiple keys 
+# This example uses YAML anchors which allows reuse of multiple keys
 # without having to repeat yourself.
 # Also see https://github.com/Mic92/dotfiles/blob/d6114726d859df36ccaa32891c4963ae5717ef7f/nixos/.sops.yaml
 # for a more complex example.
 keys:
   - &ryan_orion age1a560amc8xx3uwku8a7tmu3spmjnfs4cvq2hr5pgnr82lwhgg5d8q892l3q
   - &ryan_thalia age1eqlkecp5w5w73y5lp79rwus76xluzmz8l62ln9m3uhpxmmcczuqs4gk47h
+  - &ryan_ryanpandya age1ypva060ks8tnrhwyyu8eykgfr96d00zds3d93c8vukrrscaf3qkqscdufu
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
-    - age:
+      - age:
-      - *ryan_orion
+          - *ryan_orion
-      - *ryan_thalia
+          - *ryan_thalia
-
+          - *ryan_ryanpandya

flake.lock

@@ -20,6 +20,25 @@
         "type": "github"
       }
     },
+    "ags": {
+      "inputs": {
+        "astal": "astal",
+        "nixpkgs": "nixpkgs"
+      },
+      "locked": {
+        "lastModified": 1738087375,
+        "narHash": "sha256-GLyNtU9A2VN22jNRHZ2OXuFfTJLh8uEVVt+ftsKUX0c=",
+        "owner": "aylur",
+        "repo": "ags",
+        "rev": "a6a7a0adb17740f4c34a59902701870d46fbb6a4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "aylur",
+        "repo": "ags",
+        "type": "github"
+      }
+    },
     "aquamarine": {
       "inputs": {
         "hyprutils": [
@@ -53,6 +72,27 @@
         "type": "github"
       }
     },
+    "astal": {
+      "inputs": {
+        "nixpkgs": [
+          "ags",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1737670815,
+        "narHash": "sha256-ZCxxshGN7XooabArcoGkYSNx5yVunqjKJi2aTv6cznI=",
+        "owner": "aylur",
+        "repo": "astal",
+        "rev": "127e9cdcbf173846a3c40ddc0abfbb038df48042",
+        "type": "github"
+      },
+      "original": {
+        "owner": "aylur",
+        "repo": "astal",
+        "type": "github"
+      }
+    },
     "auto-cpufreq": {
       "inputs": {
         "nixpkgs": [
@@ -141,7 +181,7 @@
     },
     "catppuccin": {
       "inputs": {
-        "nixpkgs": "nixpkgs"
+        "nixpkgs": "nixpkgs_2"
       },
       "locked": {
         "lastModified": 1737579274,
@@ -1055,7 +1095,7 @@
         "hyprlang": "hyprlang_2",
         "hyprutils": "hyprutils",
         "hyprwayland-scanner": "hyprwayland-scanner",
-        "nixpkgs": "nixpkgs_3",
+        "nixpkgs": "nixpkgs_4",
         "pre-commit-hooks": "pre-commit-hooks",
         "systems": "systems_2",
         "xdph": "xdph"
@@ -1164,7 +1204,7 @@
           "hyprland-qtutils",
           "hyprutils"
         ],
-        "nixpkgs": "nixpkgs_2",
+        "nixpkgs": "nixpkgs_3",
         "systems": "systems"
       },
       "locked": {
@@ -1416,7 +1456,7 @@
     },
     "lightly": {
       "inputs": {
-        "nixpkgs": "nixpkgs_4"
+        "nixpkgs": "nixpkgs_5"
       },
       "locked": {
         "lastModified": 1737196763,
@@ -1539,7 +1579,7 @@
           "nix-gaming"
         ],
         "nix-github-actions": "nix-github-actions_2",
-        "nixpkgs": "nixpkgs_5",
+        "nixpkgs": "nixpkgs_6",
         "systems": "systems_4",
         "treefmt-nix": "treefmt-nix",
         "umu": "umu"
@@ -1583,7 +1623,7 @@
       "inputs": {
         "flake-parts": "flake-parts_3",
         "nix-github-actions": "nix-github-actions_3",
-        "nixpkgs": "nixpkgs_12",
+        "nixpkgs": "nixpkgs_13",
         "treefmt-nix": "treefmt-nix_2"
       },
       "locked": {
@@ -1638,7 +1678,7 @@
     "nix-gaming": {
       "inputs": {
         "flake-parts": "flake-parts_2",
-        "nixpkgs": "nixpkgs_7",
+        "nixpkgs": "nixpkgs_8",
         "umu": "umu_2"
       },
       "locked": {
@@ -1743,7 +1783,7 @@
     "nix-inspect": {
       "inputs": {
         "nci": "nci",
-        "nixpkgs": "nixpkgs_8",
+        "nixpkgs": "nixpkgs_9",
         "parts": "parts_2"
       },
       "locked": {
@@ -1762,7 +1802,7 @@
     },
     "nix-proton-cachyos": {
       "inputs": {
-        "nixpkgs": "nixpkgs_9"
+        "nixpkgs": "nixpkgs_10"
       },
       "locked": {
         "lastModified": 1737265916,
@@ -1782,7 +1822,7 @@
       "inputs": {
         "flake-compat": "flake-compat_3",
         "flake-utils": "flake-utils",
-        "nixpkgs": "nixpkgs_10"
+        "nixpkgs": "nixpkgs_11"
       },
       "locked": {
         "lastModified": 1737683312,
@@ -1851,15 +1891,15 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1736012469,
+        "lastModified": 1737469691,
-        "narHash": "sha256-/qlNWm/IEVVH7GfgAIyP6EsVZI6zjAx1cV5zNyrs+rI=",
+        "narHash": "sha256-nmKOgAU48S41dTPIXAq0AHZSehWUn6ZPrUKijHAMmIk=",
-        "owner": "NixOS",
+        "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "8f3e1f807051e32d8c95cd12b9b421623850a34d",
+        "rev": "9e4d5190a9482a1fb9d18adf0bdb83c6e506eaab",
         "type": "github"
       },
       "original": {
-        "owner": "NixOS",
+        "owner": "nixos",
         "ref": "nixos-unstable",
         "repo": "nixpkgs",
         "type": "github"
@@ -1927,7 +1967,7 @@
         "flake-compat": "flake-compat_4",
         "lib-aggregate": "lib-aggregate",
         "nix-eval-jobs": "nix-eval-jobs",
-        "nixpkgs": "nixpkgs_13"
+        "nixpkgs": "nixpkgs_14"
       },
       "locked": {
         "lastModified": 1737481114,
@@ -1944,6 +1984,22 @@
       }
     },
     "nixpkgs_10": {
+      "locked": {
+        "lastModified": 1730272153,
+        "narHash": "sha256-B5WRZYsRlJgwVHIV6DvidFN7VX7Fg9uuwkRW9Ha8z+w=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "2d2a9ddbe3f2c00747398f3dc9b05f7f2ebb0f53",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_11": {
       "locked": {
         "lastModified": 1713805509,
         "narHash": "sha256-YgSEan4CcrjivCNO5ZNzhg7/8ViLkZ4CB/GrGBVSudo=",
@@ -1959,7 +2015,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_11": {
+    "nixpkgs_12": {
       "locked": {
         "lastModified": 1737469691,
         "narHash": "sha256-nmKOgAU48S41dTPIXAq0AHZSehWUn6ZPrUKijHAMmIk=",
@@ -1975,7 +2031,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_12": {
+    "nixpkgs_13": {
       "locked": {
         "lastModified": 1736042175,
         "narHash": "sha256-jdd5UWtLVrNEW8K6u5sy5upNAFmF3S4Y+OIeToqJ1X8=",
@@ -1991,7 +2047,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_13": {
+    "nixpkgs_14": {
       "locked": {
         "lastModified": 1737062831,
         "narHash": "sha256-Tbk1MZbtV2s5aG+iM99U8FqwxU/YNArMcWAv6clcsBc=",
@@ -2007,7 +2063,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_14": {
+    "nixpkgs_15": {
       "locked": {
         "lastModified": 1737370608,
         "narHash": "sha256-hFA6SmioeqvGW/XvZa9bxniAeulksCOcj3kokdNT/YE=",
@@ -2023,7 +2079,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_15": {
+    "nixpkgs_16": {
       "locked": {
         "lastModified": 1736061677,
         "narHash": "sha256-DjkQPnkAfd7eB522PwnkGhOMuT9QVCZspDpJJYyOj60=",
@@ -2039,7 +2095,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_16": {
+    "nixpkgs_17": {
       "locked": {
         "lastModified": 1736798957,
         "narHash": "sha256-qwpCtZhSsSNQtK4xYGzMiyEDhkNzOCz/Vfu4oL2ETsQ=",
@@ -2057,11 +2113,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1737469691,
+        "lastModified": 1736012469,
-        "narHash": "sha256-nmKOgAU48S41dTPIXAq0AHZSehWUn6ZPrUKijHAMmIk=",
+        "narHash": "sha256-/qlNWm/IEVVH7GfgAIyP6EsVZI6zjAx1cV5zNyrs+rI=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "9e4d5190a9482a1fb9d18adf0bdb83c6e506eaab",
+        "rev": "8f3e1f807051e32d8c95cd12b9b421623850a34d",
         "type": "github"
       },
       "original": {
@@ -2088,6 +2144,22 @@
       }
     },
     "nixpkgs_4": {
+      "locked": {
+        "lastModified": 1737469691,
+        "narHash": "sha256-nmKOgAU48S41dTPIXAq0AHZSehWUn6ZPrUKijHAMmIk=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "9e4d5190a9482a1fb9d18adf0bdb83c6e506eaab",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_5": {
       "locked": {
         "lastModified": 1734424634,
         "narHash": "sha256-cHar1vqHOOyC7f1+tVycPoWTfKIaqkoe1Q6TnKzuti4=",
@@ -2103,7 +2175,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_5": {
+    "nixpkgs_6": {
       "locked": {
         "lastModified": 1737062831,
         "narHash": "sha256-Tbk1MZbtV2s5aG+iM99U8FqwxU/YNArMcWAv6clcsBc=",
@@ -2119,7 +2191,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_6": {
+    "nixpkgs_7": {
       "locked": {
         "lastModified": 1737421359,
         "narHash": "sha256-9BOjprNDwt95olCWD/uH602V2g0YrZP2gOI62JXi0Uo=",
@@ -2135,7 +2207,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_7": {
+    "nixpkgs_8": {
       "locked": {
         "lastModified": 1737003892,
         "narHash": "sha256-RCzJE9wKByLCXmRBp+z8LK9EgdW+K+W/DXnJS4S/NVo=",
@@ -2151,7 +2223,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_8": {
+    "nixpkgs_9": {
       "locked": {
         "lastModified": 1732014248,
         "narHash": "sha256-y/MEyuJ5oBWrWAic/14LaIr/u5E0wRVzyYsouYY3W6w=",
@@ -2167,22 +2239,6 @@
         "type": "github"
       }
     },
-    "nixpkgs_9": {
-      "locked": {
-        "lastModified": 1730272153,
-        "narHash": "sha256-B5WRZYsRlJgwVHIV6DvidFN7VX7Fg9uuwkRW9Ha8z+w=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "2d2a9ddbe3f2c00747398f3dc9b05f7f2ebb0f53",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixpkgs-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
     "nixvim": {
       "inputs": {
         "devshell": "devshell",
@@ -2298,7 +2354,7 @@
         "flake-utils": "flake-utils_4",
         "mnw": "mnw",
         "nil": "nil",
-        "nixpkgs": "nixpkgs_14",
+        "nixpkgs": "nixpkgs_15",
         "nmd": "nmd",
         "plugin-aerial-nvim": "plugin-aerial-nvim",
         "plugin-alpha-nvim": "plugin-alpha-nvim",
@@ -5277,7 +5333,7 @@
       "inputs": {
         "libcamera-src": "libcamera-src",
         "libpisp-src": "libpisp-src",
-        "nixpkgs": "nixpkgs_15",
+        "nixpkgs": "nixpkgs_16",
         "rpi-bluez-firmware-src": "rpi-bluez-firmware-src",
         "rpi-firmware-nonfree-src": "rpi-firmware-nonfree-src",
         "rpi-firmware-src": "rpi-firmware-src",
@@ -5324,6 +5380,7 @@
     "root": {
       "inputs": {
         "aaru": "aaru",
+        "ags": "ags",
         "auto-cpufreq": "auto-cpufreq",
         "catppuccin": "catppuccin",
         "catppuccin-ghostwriter": "catppuccin-ghostwriter",
@@ -5352,7 +5409,7 @@
         "nix-vscode-extensions": "nix-vscode-extensions",
         "nixos-generators": "nixos-generators",
         "nixos-hardware": "nixos-hardware",
-        "nixpkgs": "nixpkgs_11",
+        "nixpkgs": "nixpkgs_12",
         "nixpkgs-wayland": "nixpkgs-wayland",
         "nixvim": "nixvim",
         "nsearch": "nsearch",
@@ -5627,7 +5684,7 @@
         "git-hooks": "git-hooks_2",
         "gnome-shell": "gnome-shell",
         "home-manager": "home-manager_3",
-        "nixpkgs": "nixpkgs_16",
+        "nixpkgs": "nixpkgs_17",
         "systems": "systems_11",
         "tinted-foot": "tinted-foot",
         "tinted-kitty": "tinted-kitty",
@@ -6040,7 +6097,7 @@
     },
     "umu": {
       "inputs": {
-        "nixpkgs": "nixpkgs_6"
+        "nixpkgs": "nixpkgs_7"
       },
       "locked": {
         "dir": "packaging/nix",

flake.nix

@@ -134,6 +134,7 @@
     stylix.url = "github:danth/stylix";
 
     hyprland.url = "github:hyprwm/Hyprland";
+    ags.url = "github:aylur/ags";
 
     # KDE
     kwin-effects-forceblur = {
@@ -258,7 +259,7 @@
             ];
           };
           # Ryanpandya.com
-          "ryanpandya.com" = nixpkgs.lib.nixosSystem {
+          "ryanpandya" = nixpkgs.lib.nixosSystem {
             system = "x86_64-linux";
 
             specialArgs = {
@@ -271,7 +272,7 @@
             };
 
             modules = [
-              ./hosts/ryanpandya.com
+              ./hosts/ryanpandya
               inputs.stylix.nixosModules.stylix
 
               inputs.sops-nix.nixosModules.sops

hosts/ryanpandya/default.nix

@@ -52,8 +52,25 @@
   };
 
   networking = {
-    hostName = "orion";
+    hostName = "ryanpandya";
     wireless.enable = false;
+    nameservers = ["8.8.8.8" "8.8.4.4"];
+    firewall = {
+        allowedUDPPorts = [
+          7946
+          4789
+          2377
+        ];
+        allowedTCPPorts = [
+          80
+          443
+          3000
+          996
+          7946
+          4789
+          2377
+        ];
+      };
   };
 
   powerManagement.cpuFreqGovernor = "ondemand";

hosts/ryanpandya/hardware-configuration.nix

@@ -14,32 +14,19 @@
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "tmpfs";
+    { device = "/dev/disk/by-uuid/1fa30915-49a8-46b8-b9b7-b298fb5c12c2";
-      fsType = "tmpfs";
+      fsType = "ext4";
     };
 
-  fileSystems."/iso" =
+  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/1980-01-01-00-00-00-00";
+    { device = "/dev/disk/by-uuid/9897-75EA";
-      fsType = "iso9660";
+      fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" ];
     };
 
-  fileSystems."/nix/.ro-store" =
+  swapDevices =
-    { device = "/iso/nix-store.squashfs";
+    [ { device = "/dev/disk/by-uuid/073ce40c-8c8c-4a60-bc27-055d9cb78388"; }
-      fsType = "squashfs";
+    ];
-      options = [ "loop" ];
-    };
-
-  fileSystems."/nix/.rw-store" =
-    { device = "tmpfs";
-      fsType = "tmpfs";
-    };
-
-  fileSystems."/nix/store" =
-    { device = "overlay";
-      fsType = "overlay";
-    };
-
-  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
@@ -49,4 +36,4 @@
   # networking.interfaces.ens3.useDHCP = lib.mkDefault true;
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-}
+}

modules/apps/hyprland/default.nix

@@ -12,6 +12,12 @@ let
 in
 with lib;
 {
+
+  imports = [
+    ./waybar.nix
+    ./swaync.nix
+    ./rofi.nix
+  ];
  options = {
     hyprland = {
       enable = lib.mkEnableOption "Enable hyprland in NixOS";
@@ -19,13 +25,13 @@ with lib;
   };
   config = lib.mkIf cfg.enable {
 
-  imports = [
+  home-manager.users.${username} = {
-    ./waybar.nix
+    # home.file = {
-    ./swaync.nix
+    #   ".config/ags" = {
-    ./rofi.nix
+    #     source = ./ags;
-  ];
+    #   };
-
+    # };
-  home-manager.users.${username}.wayland.windowManager.hyprland = {
+    wayland.windowManager.hyprland = {
     enable = true;
     xwayland.enable = true;
     systemd.enable = true;
@@ -55,7 +61,9 @@ with lib;
                     exec-once = dbus-update-activation-environment --systemd --all
                     exec-once = systemctl --user import-environment QT_QPA_PLATFORMTHEME WAYLAND_DISPLAY XDG_CURRENT_DESKTOP
                     exec-once = killall -q swww;sleep .5 && swww init
-                    exec-once = killall -q waybar;sleep .5 && waybar
+                    
+                    exec-once = ags run > /tmp/ags.log
+
                     exec-once = killall -q swaync;sleep .5 && swaync
                     exec-once = nm-applet --indicator
                     exec-once = blueman-applet
@@ -229,5 +237,5 @@ with lib;
         ''
       ];
   };
-};
+};};
 }

modules/apps/ssh/default.nix

@@ -84,6 +84,10 @@ in
               HostName router.home
               User root
               Port 22
+            Host ryanpandya
+              HostName 152.53.83.167
+              User ryan
+              Port 15995
           '';
         };
       };

modules/apps/syncthing/default.nix

@@ -17,8 +17,8 @@ in
   config = lib.mkIf cfg.enable {
     services.syncthing = {
       enable = true;
-      key = "${config.sops.secrets."syncthing/key".path}";
+      key  = "${config.sops.secrets."syncthing/${config.networking.hostName}_key".path }";
-      cert = "${config.sops.secrets."syncthing/cert".path}";
+      cert = "${config.sops.secrets."syncthing/${config.networking.hostName}_cert".path}";
       user = "${username}";
       group = "users";
       dataDir = "/home/${username}";
@@ -36,7 +36,10 @@ in
             id = "TM4RJVL-W2CJ32S-ZF3VN2K-DYOUT5Z-DJPAK4R-DMB4B7X-L35KLEP-NAM7QQJ";
           };
           "thalia" = {
-            id = "TPTJE5T-3EKRCLJ-LWH5RTK-QCBNQ4V-AXNOLOS-6GB2C3R-Z3SYAFQ-PBS6BAP";
+            id = "XECYWXP-KSBKPKA-MLW3ITR-2GDF75P-PEX3GBR-MP5XHJS-BGJEAGZ-ZNBD7QJ";
+          };
+          "synology" = {
+            id = "GZEXPNR-3VXONBW-64I4C27-YMMGYH7-GL65LXT-AL7OJEQ-PHRGQST-ZY5APQK";
           };
         };
         folders = {
@@ -47,15 +50,17 @@ in
             devices = [
               "luna"
               "thalia"
+              "synology"
             ]; # Which devices to share the folder with
           };
-          "Documents" = {
+          "Sync" = {
             id = "ye1o9-0c6bd";
-            label = "Documents";
+            label = "Sync";
-            path = "~/Documents";
+            path = "~/Sync";
             devices = [
               "luna"
               "thalia"
+              "synology"
             ];
           };
         };

modules/apps/zsh/default.nix

@@ -44,6 +44,10 @@ in
           initExtra = ''
             autoload -U add-zsh-hook
             export GITHUB_TOKEN="$(cat ${config.sops.secrets."github_token".path})"
+            [ "$TERM" = "xterm-kitty" ] && alias ssh="kitty +kitten ssh"
+
+            autoload -U colors && colors
+            PS1="%{$fg[red]%}%n%{$reset_color%}@%{$fg[blue]%}%m %{$fg[yellow]%}%~ %{$reset_color%}%% "
           '';
 
           oh-my-zsh = {

modules/components/default.nix

@@ -10,6 +10,6 @@
     # ./pipewire
     ./theming
     # ./users
-    # ./virtualization
+    ./virtualization
   ];
 }

modules/components/theming/default.nix

@@ -75,10 +75,14 @@ in
           # "Net/ThemeName" = "${GTK-THEME}";
         };
       };
-      gtk.iconTheme = {
+      gtk = {
+        iconTheme = {
         package = pkgs.catppuccin-papirus-folders;
         name = "cat-mocha-lavender";
       };
+      gtk3.extraConfig.gtk-sound-theme-name = "ocean";
+      gtk4.extraConfig.gtk-sound-theme-name = "ocean";
+    };
     };
   };
 }

modules/components/virtualization/default.nix

@@ -0,0 +1,88 @@
+{
+  lib,
+  config,
+  pkgs,
+  username,
+  vars,
+  ...
+}:
+let
+  cfg = config.virtualization;
+in
+{
+  options = {
+    virtualization = {
+      enable = lib.mkEnableOption "Enable virtualization in NixOS & home-manager";
+    };
+  };
+  config = lib.mkIf cfg.enable {
+    environment = {
+      systemPackages = with pkgs; [
+        docker-compose
+        podlet
+        quickemu
+        spice
+        spice-protocol
+        virt-manager
+        virtiofsd
+        virtio-win
+        win-spice
+      ];
+    };
+    services = {
+      spice-vdagentd.enable = true;
+    };
+    virtualisation = {
+      docker = {
+        enable = true;
+        enableOnBoot = true;
+        autoPrune = {
+          enable = true;
+          dates = "weekly";
+        };
+        liveRestore = false;
+        enableNvidia = if vars.nvidia then true else false;
+      };
+      libvirtd = {
+        # Make sure you run this once: "sudo virsh net-autostart default"
+        enable = true;
+        qemu = {
+          swtpm.enable = true;
+          ovmf.enable = true;
+          ovmf.packages = [ pkgs.OVMFFull.fd ];
+        };
+      };
+      spiceUSBRedirection.enable = true;
+      vmVariant = {
+        virtualisation = {
+          memorySize = 4096;
+          cores = 3;
+        };
+      };
+    };
+
+    users = {
+      users = {
+        ${username} = {
+          extraGroups = [
+            "docker"
+            "libvirtd"
+            "podman"
+          ];
+          # quadlets
+          autoSubUidGidRange = true;
+          linger = true;
+        };
+      };
+    };
+
+    home-manager.users.${username} = {
+      dconf.settings = {
+        "org/virt-manager/virt-manager/connections" = {
+          autoconnect = [ "qemu:///system" ];
+          uris = [ "qemu:///system" ];
+        };
+      };
+    };
+  };
+}

modules/profiles/base.nix

@@ -68,7 +68,7 @@ in
     secrets.enable = true;
     syncthing.enable = true;
     # users.enable = true;
-    # virtualization.enable = true;
+    virtualization.enable = lib.mkDefault false;
 
     console = {
       earlySetup = true;
@@ -105,6 +105,8 @@ in
       };
     };
 
+    programs.nix-ld.enable = true;
+
     services = {
       cron.enable = true;
       dbus.implementation = "broker";

modules/profiles/desktop.nix

@@ -105,7 +105,11 @@ in
       {
         # Home-manager programs
         programs = {
-          kitty.enable = true;
+          kitty = {enable = true;
+          settings = {
+            enable_audio_bell = false;
+          };
+          };
         };
         home.packages = with pkgs; [
           # GUI Apps

modules/profiles/gaming.nix

@@ -134,7 +134,8 @@ in
     networking = {
       firewall = {
         allowedUDPPorts = [
-          # Development, temporary port, etc
+          # Development, temporary ports, etc
+          3000
           8080
 
           # Moonlight
@@ -146,7 +147,8 @@ in
           48010
         ];
         allowedTCPPorts = [
-          # Development, temporary port, etc
+          # Development, temporary ports, etc
+          3000
           8080
 
           # Moonlight

modules/profiles/hardening.nix

@@ -178,6 +178,7 @@ in
                 [
                   "poweroff"
                   "reboot"
+                  "nh"
                   "nixos-rebuild"
                   "nix-env"
                   "shutdown"

modules/profiles/server.nix

@@ -18,6 +18,7 @@ in
   config = lib.mkIf cfg.enable {
     # Custom modules
     base.enable = true;
+    virtualization.enable = true;
     catppuccinTheming.enable = lib.mkForce false;
     packages.enable = lib.mkForce false;
 

secrets/default.nix

@@ -21,8 +21,8 @@ in
       secrets = {
       	password_secure = { };
         password_insecure = { };
-        "syncthing/cert" = { };
+        "syncthing/${config.networking.hostName}_key" = { };
-        "syncthing/key" = { };
+        "syncthing/${config.networking.hostName}_cert" = { };
       };
       # templates = {
       #   "nix-github-token.conf" = {

secrets/secrets.yaml

@@ -3,11 +3,17 @@ github_token: ENC[AES256_GCM,data:yI9GSOpVQVEvgehmkcWkAN1sZO3VDFgg/buJe60tp1rwFd
 password_secure: ENC[AES256_GCM,data:86zyxrfTpZbEpA==,iv:61PjfuIO5cylyEHyrtIUbTbmXgubz/ssZtpU8FY/Y3U=,tag:3Kb5qdbnRJR/JSiZZSJqpg==,type:str]
 password_insecure: ENC[AES256_GCM,data:q6g19uQcIqjmsg==,iv:Wy2FDNtFU1pl+23jqu8K9kfksyOlIMf5itdW0BREeBI=,tag:lDybgVyiM9iyJbi6lgLt/w==,type:str]
 syncthing:
-    cert: ENC[AES256_GCM,data:ebg+4Nv/cwafq4Iy66fFfmsRtMBfpJqWwb2u4LH9w6MURjRtsOQxERYnGwyA7G9DcntSJpoTD2pV+jVNfpQ50sCoRlTcI/jZdGu8yLc+HR9yhPLn2avn/oKXrd2ktvrw8S/munYxIBuwNFYgAGUqY6rzzkmz3UpGAYGs13TRUzPRmVpiBHup8P4KMpXymgaDKI1vklKPkIWXwpClU1qnPerrz43QtbR68T4S2dBRK+mU7HyxPyRD2D91CNap73AorUhy6Lge1JIioRl0D20qhT9MLOX0+0TbN0v8yl6iQpnDW5eYsf/oQuTAabAHNKJ0N2IJwkJwXUy3I+Ng/LzK51PG97x5BuO5ZrVNvteAu5Jkn4jDu9eAETA7l4JzL8BOcAsfRzYnpBcF1RoCnMq5rjrcArFcqk/nIkeDgtMMAu6TUu5+gSLdlB2aSy0bACrQfMfU90vOlpMV/x8tslzr1D+Y6pheTPff6bUQ16oqfxfGBoOCX+WBRzY7Y1EaVnTf2+VnvjIXwA+pcPg/Tc6DcDHVeBPKepJPV32ziQM928Kx7f9kow5aGeMYQwxHjfNKSvE5Umy6CgwOhHZaJdpBLp2B4F/r0QNaYuBbCxSHa7cLOuvilCF30h6WYhbaMoSNzPVG83UyiKVBdFVXZKqT1eee7kGPY4wfxSMJXzvqVLbrh/xN1aYnjojzpQNJVJFCseqaqC68wo2HCeIlJNf6p0N5gVUFt+OgXpG+T0VRaGIWQcrJSoWGaxq+ZqVkUwMMJXpmGTwm7M14TwAta8TDDX0b/fo12J9K1OiYhS+Zf71v8dK1XooLCvxFG4Y9tWnLzn62O/51Xg2FBXkRyqo+Y8DDGnbA/hEcrhOdzOaDZnpr5R2qJ2QruW2k2DM+I1jvJZPRbIMAXOeIlbShz1F1PaAYY1PnxInT9Zt5hCIH0P7XcoA9oBeV83PogvwK2dukGMxnHGzlrbABdmmiDulN0uL+1ZADchsKMvu81wqvy+ifriYIGOo5geOlRmtBkHo3yM8epX0edRG3lj4JkFgzA6L7lmBSVGgCgPM=,iv:xThuPyFq3lPtnYXyCx9WtYWzPK3A6HH2K7ulnNbo+kU=,tag:PaU6Fa4jXgRnwCg9lRTBvg==,type:str]
+    thalia_cert: ENC[AES256_GCM,data:irowVfkBrB6JDrVBdiQb8V4SKMJ4byRKy1ELGK8DVCY5/AJpKGacfUzzLXeS+/gMHg/KW+IDsIoHGzV259B1mX6Wvs7AvJ7Bp7FjjY39X0YOZkU/L9F71bt8gACiLVAGxF9/fGrLSaClYVC4NQW8NIX+8ZEKG6wHEsr6SVbROxLLKIzm+wraT1WdmfM9NA0xS33HWYcSRmLit3D5L8m0/LQcK3HFAjecTtNM5FDJy4UPLmhYaPnvJF8+Hu3WMIFDtxIoF7uOeiyAJ6yzfr2C0zNRW55S8JAU2JBPf9+eIISccXVHDrNC1v/V4L08FQok9aIzQYwD2K/UeMt7c4KMFhJnIJ8shWLRVlkBPfZs94uSTUhDtJjVizGZGnPx4hDRa7gDOpaw0WpEnu8eMFA2SaWJecOGxnUyNoyyb0ZmHBB2ICbc/yZ2bN0/J5MglaffQnKpeb4DHfk5F0gCChsznlh2aV+9NET2fzudklrH9BZcMnRYmzLfhZSRs6yyQBb9rSdPNkX+DxNdeyqnjrw4Os0/qxz9az4vziXdrzhXNV0DlEZ+zXCyCnJd0SEYf1yYdnRfQsfPh4kLOk7TBNXnErkSt4ZdPOTQvpYfa39cCiU3EOOpp/ZBj6/QhTrXklzZ+WpyJPgG017SD8QwK+JVPGI5vBI/k/IhyX4zA0B8E01gcQktRV1IHrZJaVl1wMqQoveyyvRcp+WGJAxI2BpDoJhG6sSMGZAVLKi7WGxSmzpAyo5j8lOndvSRYKPINbEY8ahvjM5jJT4b0AA+001M5n66CnlPjgjz5cG5Rv2TKty6gpOTQBeiHBQ5uX3dMt4PMvkV7WeTTMkczZWWvKTIxn3P/uhLoo8ZyVd44lCNk45eqSPabXTu/3HaQjHaf3HQ2yZInw2CusWZaQy2hiocdo3RRhgFLQv4sVrqzdlNKeq7mIEDY2xclFzwiE0uFJ99RQzGOSO2tYAZ1W0MxP2GREY5/Pss+RWxi1IdRp9VijD1WfFc+dhUXbvV/jNpXqkN9oaQ6xNs1GK3tQ166fUcJqcsyWYx4oCHd58=,iv:heezEF8ufqhOjWBV1mLBuSCH2CTfZ6BpJ0GoF17+ez4=,tag:0U8nLzzLzLyvBbgDXGaCKw==,type:str]
-    key: ENC[AES256_GCM,data:PJVykKJq86KSXi3Oo3NukZwew6pxVrR2i7qofbxmHSvsVCGHdaYJSzCz1dvLCU0XFH2soLfQfY/fQXf0gTaUFmPyf/NZwinWIbDOaYXIFYDdCT1JmxENeRgASrCFAZ2pN3CtQpzpPYoG0c6j6LwwLFeuMecGcm9oCzXgIzV+FZzyRu4juFwWtdvllYpl0yfi6EUwcxYIYof574XY7KhNxvx1bshTZkS0WDePwBliS8PxswN66xzpP969cmoGA5gQ5Otohia3f+K8ehoy8wr+rAMorxAsElYtRmOOJ1rG6UySr6+j+xo722J+cNk4n+vFWlmoAQajX5JgK0H6R3s8ciUVvs81TZYPJU8rGZD1nxrrkqkJwEjRE4jxXhtpNW+f,iv:1vfQ65juysJbKprZjtI+7WBmm+UaxTA60LOHA05SRx4=,tag:D6JGMJKzSUKVKmG7fEvR/w==,type:str]
+    thalia_key: ENC[AES256_GCM,data:C0xSsf0H6fn+u+e/JgkXcMzJO91nVN1riM18ejlbbM6ehafcj/pinDJZsViXoshsheW1wmqmyIu4qLGSmPvf586aCF43XimEe5d/v1XD6kvU8Xq+nL706LECPAZgAtxO+MVD5y0KLkFm7m0qCii+Eslu3FXUYvhpOCn0e8sugpjXjU0jBzCjeYuVHwcuT1/+6WyIek9I6w8sibbeUpMRwXiBDVe3kpiyM2XgAlpi+40C9nS6L+YFq4qKMTDBx+gMbzKyBSZw85R1dQwSVD1lzUjZsGYutihktitJeUiv/GTuwu53zB69FO5RV5e67RZ0eBeXkjjGPgycFGuTN3glllyx2azVDUf2tVIqtHyjZoCvfM534Iz0cKnZxFq3kCG5,iv:XixdQoAFgQ+/EVu8SRvFDqMW2NaOKANoHJvbvyiqL8M=,tag:OqJrkwNVehIhiKehsIfnDA==,type:str]
+    orion_key: ENC[AES256_GCM,data:xhYvOMdMgKh5HdzNEtTYkCBqr/m4YfmOArTvdfkWWKE7HyTaL3/FnGMCv6r+uZUZq7MqA8Z7/j9LDo3cRmwtM48f+i/FtbPfUK+m8TlapTDHvcKTeK3/FbRqaXThm8hn4X4Mkm7C+ninBq1czzx0fxYhbbv9XhspxpMFgmiKXOrTQn6L/uTreUTGtweZvzgCPvObOjhnYF0+FqZX6Y4bDQYX6bU3rQA8U/Um6mk/N99RU4b7VYfp6gm4VQKfx659Pwku8HMXQe3N/pJFY1+qZ0L6MaH6yLkF6+UgygUZB7HkZQyTd+DKJrJNSj3fd/pqecegSDu+F548Tjjk88IIsU16VsMgK+csY2XogBZ24sTyHfcuTdKqPWtMtO8tf8e2,iv:KRWOKh++JATu7GuIJKMQ5z7Ip8FYLWhOCrPwPF9pzIo=,tag:BslAOolvsB/z9aiDdd9V/w==,type:str]
+    orion_cert: ENC[AES256_GCM,data:NwCB2ERG+G5walm6/DmZdh7kFj6nO9m0agxwZcib+VFJY6lk8WC4fCrBGEm86ZMceA2Pjbad6nwx5ydrUke/R8uF2vXZcQKBF6k7H1PtIiaJcFfj+a5BDaV2/316XyjOpgatH6pUehVhKy31+Gzqj/gZhxHGxgt+fbR4FpZ42dM7+8k/dTjcfwGxxzDGMMXjKkhmWHqfgi/LgqM5VdSw2bbhl3s9G93n+YD79DEBzsnkfj2m2cUCZa82xlpEWHmoVPMjXA3nU2nnAL+DxgDx27URRxFwsCvqjmkFW6aJFCt+iGrsHCya830jT7HzMrW9ZRMcvTvYbdX1HboulOX3U1CsDmewKhXGm8bDZrluKi8R72yYEZne2AEQ7ukrmZCnQITAP5vlWVPIhwFwkOZGQa/UPCcmdxcduRdeZYkS72zk+VWFv3RCH0fwnU0aM5dT5R+MqhLS2TUmJTcYeuGGYEk+x11HDQBqMWrk5YNgJm2Vj7jQm/Ni5K3YjK7Y0NWt6Udwsp0f7cQ7AJVXte256Zp9FfM027iG0bIVRzVZIZ5m3vZ27JBnetiBuIVXOQsMAu3RtLykeYBu9PADKFVRkbSnBD4bAZxlJg+b7A1fTFd2LmgqCPK36QUT1tv7xbI2XaIRclE6vn1KPl4fzUnaMxVfBMvH36Oi1TvEcNaRhcQDiEsp95cvX9I2vQyY9iTgxzWhQi3HcRE+MPgn711mVLimi5+w6bgV0Wp0SPqb7Fb0dVqPkRfMQ3Qh2n+/kDjL6flEjwQPUizAWJ08yuFswAsNK5OA7IL/+7bbM42HS6vuwUipNMJP+mceCbf1dzdz51Bf2aSK5cOfHEqG75BW1xk9cU+zluvSmvnq2kY+gDvDrR9tWRmEiUHFZDxPCT90/+AazzMgR4vjfvjtFurgmki87mQAH2GpDS4dsH5ClBSXQpLkS5UXtcvt19q8KJSrlxSJoO0U3Rmz90sIMrBz/9Qy2fWdP5gPwfUfrytZD5uUIzsHv5M/awQAOMcBe8mUxQ8Yip9gMTR26cZjnTbntaapnugthnaDXK8=,iv:iW5RngULYJUBXgRGoShAJbxZRHQYIwr5mFDNI22/6h4=,tag:lw4LU30jdSehgt+mfGL1HQ==,type:str]
+    ryanpandya_key: ENC[AES256_GCM,data:kRA8ySWyxxAsd6yMiidQEB5xMS0m7fiKV5V1+GT3cY0nNjxJeZGlNywnDDApOKe7TkqtdwPlqG4ucawIOQ+LHCHqBXGie9mUp09LAHSEpD7/dotLUq0xiGKyobwk2QOoyIh4xJIPWZjkqf59AZq+7cFtKaaU4A3oIdk8bMm0F6ZWdxMXn01v+dafww6JncVz9e9DTB5vJr5pyvNAc1Bp6zCzlVFD+UDqVaN/9b3kdV+PS+2NVrX0nJdouBLW3mf8Y2mGjj/tVpNUhwXZcPKLec6iRSQxWyucAtUVQVhuRh9vzA8CMzrgqpl1ZIw+Ar9IWdPqsJUZ5TwyAwO6I1xp0TEwSWgk15D7xAAoM0W+IvusnBqliLB9IpdlxMXt5vmf,iv:nkzCHkLGZakPNm9cgO3T6vu/6/CfGZt7BF1PeiGFRcY=,tag:t+p6Vpyonus+k2CK/fZsQQ==,type:str]
+    ryanpandya_cert: ENC[AES256_GCM,data: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,iv:mx5uaH2T3wWbuLrjyEwD1L7f8dqk5PqQl1WjtcdHgKM=,tag:jQ3XyHY9jn/2WJdBgn4cHw==,type:str]
 ssh:
     private_keys:
         ryan@orion: ENC[AES256_GCM,data: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,iv:XHSTbv5aTYtya0BNbS1uNWTXbOcP+mBCk9Gkx7cn1zE=,tag:2IwYw7mSChgHJceHeSSC3Q==,type:str]
+        ryan@thalia: ENC[AES256_GCM,data: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,iv:Vki+hv3wvQ5bFlAzEy/p4WFG7BvW8U+OlQUwQMEJkRs=,tag:WK6qEJlkd5IWqCF5znTM0Q==,type:str]
+        ryan@ryanpandya: ENC[AES256_GCM,data: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,iv:LBoQ8Lup9s5OtEpPUD0ae4WDFqAWwvjVXBhMCJSxqus=,tag:tVpxNiP9GGq7rxCqWp1DQw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -17,23 +23,32 @@ sops:
         - recipient: age1a560amc8xx3uwku8a7tmu3spmjnfs4cvq2hr5pgnr82lwhgg5d8q892l3q
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzaUJKejVFVXhMNjF2d0l5
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4bVJJb1EwYzZwQ0dBblkz
-            d3ZPM25WdEp0Yk94SHl0YUUzc0x2RWJ0aVM4Ck4zVUVDRVZkYWExN1NjSEJNenhM
+            cHZYMzZ2ekVQb2ZzdE9VWmhQWXBheVFjazN3Ck8wbUtvL2NwR2VKMit6NlBiVS9r
-            QzVXUHAzSE9JUHpzU09NbnpDMWhnS0EKLS0tIE5oMnUxcTYzV09vb1p3UDY0aXY1
+            a1FDV2FqK1d0cHRKN240MHpGMkMzU2sKLS0tIDdaUlNWUkVaUnNuai94cElvMXEv
-            dElkYlpSdjczWnBlVzZ2Q2YrdkVvd2cKyZFqH6HMB9PTT3v5t8l7UrzESygm94nk
+            K3c4TU9sRTRseDRubHRhZFBSN0VpT1EKPGyAEpgNXDBIF8CD8D5Pa6rfySoO7V6b
-            Clwd44vK2VQZdwXOWhxE/oVfkR8RHg4vAAd6cub1b/IA3cUx8YE9Ng==
+            kdqkc7Ia4qZgST/+UGtKcMU15fcnegKfL0CAi5REgv2jEkRPFieacQ==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1eqlkecp5w5w73y5lp79rwus76xluzmz8l62ln9m3uhpxmmcczuqs4gk47h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvR3RFQWxCb2RwemlxbW1v
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCNnlWSEQ3TTZaSzRZUEZq
-            OHhud0pYZ2YzdkJTTzkxMDB2Ulo0Q3ZpNzNvCmVvYys4RnZ5bWdBTWZIbEV5YWFO
+            b1RlWEw0bU9CeldDVmY5QzU0THhxRzhmUlZjCngvYTBjNVYwbFJOZ21aYWJZVVo5
-            Si82Wnp3WExISlR0RkV0c1VqSm51aUUKLS0tIFp3endHdmozQzAySmgzalIxUWpa
+            UzdFYkpUeXRsMWpFYkNGTERoQjA4N3MKLS0tIDFGS1VzQ2JvdjRBQW1UQVh0Tm5s
-            MzdNcUhHSURYSzBoekthcUFjWStwSmcKNrX1473QeS6juNAp0yN3ZCwJfWa524SA
+            TW0zQ1A2VjlBM0dDTUVqbmpIR2JEMW8KWhvX51T+4FLDejDpbzcmrxJeX5WiBi/G
-            sArpDaBjlbJfErAzLaXLwofONMiV8EU4kYM5+r61G5Oc0V5TfDfk1w==
+            jIvg9epRNiEDb72621Wv2GCjabdxOwgRxwPX3B05GDnUO/zW7nMT9g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-26T03:04:30Z"
+        - recipient: age1ypva060ks8tnrhwyyu8eykgfr96d00zds3d93c8vukrrscaf3qkqscdufu
-    mac: ENC[AES256_GCM,data:yzzw17P0DrA/kv9qzw2UNwrEwyH+8r1vGsLAN4IIUsAVEROSWSqS+emt5zLgzaPhGGcgRbYuczosuXRb2w2uu644u1nkeJqrYgXuPksqBgwljewGxjLmMJYy9iY5HkYbhy59M3hjf7tihWCJXdDKWGd4N/aKJxsbpj+EsQtJxHM=,iv:7NXDLC0VUTmgorfRlEV2haiUumcFDjkb1LC0++saHDY=,tag:BDtwatWx1lpvhdzv2RmxaQ==,type:str]
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWeGttUCtlTE9JNVFhUjRO
+            RWRXV2dWSGpQVk1xeFVUQXFaZGl5VHNhSHlRCisvYWpNb2xQOC9aNFo5VEJuY2tt
+            Si8vUENic0JaS2F4bVBEdDVDK1ExOE0KLS0tIFF2MTRVOExxZGM3cng5OXpzdkxX
+            SmJ4QzR1MHFOVTNmbVJoZGo5VkJuWW8KVTmrekkTI5nkOQHx90FGgR9LQwM9FE8u
+            2XB3nbzHMNpiDngxBajVDNT9rrpL5Jf4p57MwFpfzBRqJCQDzAEjsw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-02T01:16:30Z"
+    mac: ENC[AES256_GCM,data:k97o2+/ctAZ87KLgb6dEn7oLCHa4TsQRQZR6t0//MktiEHx9YasQWyuQR1qlBFKELq88TDXNdotrGbqu2JMFgUxQS5SlpT7rGTTjNIy0c/v2oDg2ygVjGetF9QhX7SXL5odBklT1LcYO3KnOOid2Bd7mfyo/8TjczhldJKcPsjU=,iv:A3kIgJQA+rGgJBU9Yx3CArNbmXmYQLC+Ojsb6ZiaVyQ=,tag:ArI97S9y7AnivQACdSDQHA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.3

todo

@@ -1,17 +1,17 @@
-DONE    secrets
+[x] secrets
-TOFIX    syncthing - needs to have different keys per host
+[x] Logseq
-DONE    Logseq
+[x] mouse speed
-DONE    mouse speed
+[x] git thru ssh
-DONE    git thru ssh
+[x] boot into Hyprland
-DONE    boot into Hyprland
+[x] zsh error
-DONE    zsh error
+[x] sync with thalia (sops, ssh, etc)
-DONE    sync with thalia (sops, ssh, etc)
+[x] thalia sunshine output
-DONE    thalia sunshine output
+[x] autologin on boot
-DONE    autologin on boot
+[x] Numlock
-TODO    displayManager theming
+[ ] syncthing - needs to have different keys per host
-TODO    ags
+[ ] displayManager theming
-TODO    sudo nopasswd
+[ ] ags
-TODO    brightness controls
+[ ] sudo nopasswd
-TODO    sounds (disable bell!!!)
+[ ] brightness controls
-TODO    KDEConnect
+[x] sounds (disable bell!!!)
-DONE    Numlock
+[ ] KDEConnect