.sops.yaml

@@ -1,15 +1,14 @@
-# This example uses YAML anchors which allows reuse of multiple keys
+# This example uses YAML anchors which allows reuse of multiple keys 
 # without having to repeat yourself.
 # Also see https://github.com/Mic92/dotfiles/blob/d6114726d859df36ccaa32891c4963ae5717ef7f/nixos/.sops.yaml
 # for a more complex example.
 keys:
   - &ryan_orion age1a560amc8xx3uwku8a7tmu3spmjnfs4cvq2hr5pgnr82lwhgg5d8q892l3q
   - &ryan_thalia age1eqlkecp5w5w73y5lp79rwus76xluzmz8l62ln9m3uhpxmmcczuqs4gk47h
-  - &ryan_ryanpandya age1ypva060ks8tnrhwyyu8eykgfr96d00zds3d93c8vukrrscaf3qkqscdufu
 creation_rules:
   - path_regex: secrets/[^/]+\.(yaml|json|env|ini)$
     key_groups:
-      - age:
+    - age:
-          - *ryan_orion
+      - *ryan_orion
-          - *ryan_thalia
+      - *ryan_thalia
-          - *ryan_ryanpandya
+

flake.lock

@@ -20,25 +20,6 @@
         "type": "github"
       }
     },
-    "ags": {
-      "inputs": {
-        "astal": "astal",
-        "nixpkgs": "nixpkgs"
-      },
-      "locked": {
-        "lastModified": 1738087375,
-        "narHash": "sha256-GLyNtU9A2VN22jNRHZ2OXuFfTJLh8uEVVt+ftsKUX0c=",
-        "owner": "aylur",
-        "repo": "ags",
-        "rev": "a6a7a0adb17740f4c34a59902701870d46fbb6a4",
-        "type": "github"
-      },
-      "original": {
-        "owner": "aylur",
-        "repo": "ags",
-        "type": "github"
-      }
-    },
     "aquamarine": {
       "inputs": {
         "hyprutils": [
@@ -72,27 +53,6 @@
         "type": "github"
       }
     },
-    "astal": {
-      "inputs": {
-        "nixpkgs": [
-          "ags",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1737670815,
-        "narHash": "sha256-ZCxxshGN7XooabArcoGkYSNx5yVunqjKJi2aTv6cznI=",
-        "owner": "aylur",
-        "repo": "astal",
-        "rev": "127e9cdcbf173846a3c40ddc0abfbb038df48042",
-        "type": "github"
-      },
-      "original": {
-        "owner": "aylur",
-        "repo": "astal",
-        "type": "github"
-      }
-    },
     "auto-cpufreq": {
       "inputs": {
         "nixpkgs": [
@@ -181,7 +141,7 @@
     },
     "catppuccin": {
       "inputs": {
-        "nixpkgs": "nixpkgs_2"
+        "nixpkgs": "nixpkgs"
       },
       "locked": {
         "lastModified": 1737579274,
@@ -1095,7 +1055,7 @@
         "hyprlang": "hyprlang_2",
         "hyprutils": "hyprutils",
         "hyprwayland-scanner": "hyprwayland-scanner",
-        "nixpkgs": "nixpkgs_4",
+        "nixpkgs": "nixpkgs_3",
         "pre-commit-hooks": "pre-commit-hooks",
         "systems": "systems_2",
         "xdph": "xdph"
@@ -1204,7 +1164,7 @@
           "hyprland-qtutils",
           "hyprutils"
         ],
-        "nixpkgs": "nixpkgs_3",
+        "nixpkgs": "nixpkgs_2",
         "systems": "systems"
       },
       "locked": {
@@ -1456,7 +1416,7 @@
     },
     "lightly": {
       "inputs": {
-        "nixpkgs": "nixpkgs_5"
+        "nixpkgs": "nixpkgs_4"
       },
       "locked": {
         "lastModified": 1737196763,
@@ -1579,7 +1539,7 @@
           "nix-gaming"
         ],
         "nix-github-actions": "nix-github-actions_2",
-        "nixpkgs": "nixpkgs_6",
+        "nixpkgs": "nixpkgs_5",
         "systems": "systems_4",
         "treefmt-nix": "treefmt-nix",
         "umu": "umu"
@@ -1623,7 +1583,7 @@
       "inputs": {
         "flake-parts": "flake-parts_3",
         "nix-github-actions": "nix-github-actions_3",
-        "nixpkgs": "nixpkgs_13",
+        "nixpkgs": "nixpkgs_12",
         "treefmt-nix": "treefmt-nix_2"
       },
       "locked": {
@@ -1678,7 +1638,7 @@
     "nix-gaming": {
       "inputs": {
         "flake-parts": "flake-parts_2",
-        "nixpkgs": "nixpkgs_8",
+        "nixpkgs": "nixpkgs_7",
         "umu": "umu_2"
       },
       "locked": {
@@ -1783,7 +1743,7 @@
     "nix-inspect": {
       "inputs": {
         "nci": "nci",
-        "nixpkgs": "nixpkgs_9",
+        "nixpkgs": "nixpkgs_8",
         "parts": "parts_2"
       },
       "locked": {
@@ -1802,7 +1762,7 @@
     },
     "nix-proton-cachyos": {
       "inputs": {
-        "nixpkgs": "nixpkgs_10"
+        "nixpkgs": "nixpkgs_9"
       },
       "locked": {
         "lastModified": 1737265916,
@@ -1822,7 +1782,7 @@
       "inputs": {
         "flake-compat": "flake-compat_3",
         "flake-utils": "flake-utils",
-        "nixpkgs": "nixpkgs_11"
+        "nixpkgs": "nixpkgs_10"
       },
       "locked": {
         "lastModified": 1737683312,
@@ -1891,15 +1851,15 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1737469691,
+        "lastModified": 1736012469,
-        "narHash": "sha256-nmKOgAU48S41dTPIXAq0AHZSehWUn6ZPrUKijHAMmIk=",
+        "narHash": "sha256-/qlNWm/IEVVH7GfgAIyP6EsVZI6zjAx1cV5zNyrs+rI=",
-        "owner": "nixos",
+        "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "9e4d5190a9482a1fb9d18adf0bdb83c6e506eaab",
+        "rev": "8f3e1f807051e32d8c95cd12b9b421623850a34d",
         "type": "github"
       },
       "original": {
-        "owner": "nixos",
+        "owner": "NixOS",
         "ref": "nixos-unstable",
         "repo": "nixpkgs",
         "type": "github"
@@ -1967,7 +1927,7 @@
         "flake-compat": "flake-compat_4",
         "lib-aggregate": "lib-aggregate",
         "nix-eval-jobs": "nix-eval-jobs",
-        "nixpkgs": "nixpkgs_14"
+        "nixpkgs": "nixpkgs_13"
       },
       "locked": {
         "lastModified": 1737481114,
@@ -1984,22 +1944,6 @@
       }
     },
     "nixpkgs_10": {
-      "locked": {
-        "lastModified": 1730272153,
-        "narHash": "sha256-B5WRZYsRlJgwVHIV6DvidFN7VX7Fg9uuwkRW9Ha8z+w=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "2d2a9ddbe3f2c00747398f3dc9b05f7f2ebb0f53",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixpkgs-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_11": {
       "locked": {
         "lastModified": 1713805509,
         "narHash": "sha256-YgSEan4CcrjivCNO5ZNzhg7/8ViLkZ4CB/GrGBVSudo=",
@@ -2015,7 +1959,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_12": {
+    "nixpkgs_11": {
       "locked": {
         "lastModified": 1737469691,
         "narHash": "sha256-nmKOgAU48S41dTPIXAq0AHZSehWUn6ZPrUKijHAMmIk=",
@@ -2031,7 +1975,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_13": {
+    "nixpkgs_12": {
       "locked": {
         "lastModified": 1736042175,
         "narHash": "sha256-jdd5UWtLVrNEW8K6u5sy5upNAFmF3S4Y+OIeToqJ1X8=",
@@ -2047,7 +1991,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_14": {
+    "nixpkgs_13": {
       "locked": {
         "lastModified": 1737062831,
         "narHash": "sha256-Tbk1MZbtV2s5aG+iM99U8FqwxU/YNArMcWAv6clcsBc=",
@@ -2063,7 +2007,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_15": {
+    "nixpkgs_14": {
       "locked": {
         "lastModified": 1737370608,
         "narHash": "sha256-hFA6SmioeqvGW/XvZa9bxniAeulksCOcj3kokdNT/YE=",
@@ -2079,7 +2023,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_16": {
+    "nixpkgs_15": {
       "locked": {
         "lastModified": 1736061677,
         "narHash": "sha256-DjkQPnkAfd7eB522PwnkGhOMuT9QVCZspDpJJYyOj60=",
@@ -2095,7 +2039,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_17": {
+    "nixpkgs_16": {
       "locked": {
         "lastModified": 1736798957,
         "narHash": "sha256-qwpCtZhSsSNQtK4xYGzMiyEDhkNzOCz/Vfu4oL2ETsQ=",
@@ -2113,11 +2057,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1736012469,
+        "lastModified": 1737469691,
-        "narHash": "sha256-/qlNWm/IEVVH7GfgAIyP6EsVZI6zjAx1cV5zNyrs+rI=",
+        "narHash": "sha256-nmKOgAU48S41dTPIXAq0AHZSehWUn6ZPrUKijHAMmIk=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "8f3e1f807051e32d8c95cd12b9b421623850a34d",
+        "rev": "9e4d5190a9482a1fb9d18adf0bdb83c6e506eaab",
         "type": "github"
       },
       "original": {
@@ -2144,22 +2088,6 @@
       }
     },
     "nixpkgs_4": {
-      "locked": {
-        "lastModified": 1737469691,
-        "narHash": "sha256-nmKOgAU48S41dTPIXAq0AHZSehWUn6ZPrUKijHAMmIk=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "9e4d5190a9482a1fb9d18adf0bdb83c6e506eaab",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_5": {
       "locked": {
         "lastModified": 1734424634,
         "narHash": "sha256-cHar1vqHOOyC7f1+tVycPoWTfKIaqkoe1Q6TnKzuti4=",
@@ -2175,7 +2103,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_6": {
+    "nixpkgs_5": {
       "locked": {
         "lastModified": 1737062831,
         "narHash": "sha256-Tbk1MZbtV2s5aG+iM99U8FqwxU/YNArMcWAv6clcsBc=",
@@ -2191,7 +2119,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_7": {
+    "nixpkgs_6": {
       "locked": {
         "lastModified": 1737421359,
         "narHash": "sha256-9BOjprNDwt95olCWD/uH602V2g0YrZP2gOI62JXi0Uo=",
@@ -2207,7 +2135,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_8": {
+    "nixpkgs_7": {
       "locked": {
         "lastModified": 1737003892,
         "narHash": "sha256-RCzJE9wKByLCXmRBp+z8LK9EgdW+K+W/DXnJS4S/NVo=",
@@ -2223,7 +2151,7 @@
         "type": "github"
       }
     },
-    "nixpkgs_9": {
+    "nixpkgs_8": {
       "locked": {
         "lastModified": 1732014248,
         "narHash": "sha256-y/MEyuJ5oBWrWAic/14LaIr/u5E0wRVzyYsouYY3W6w=",
@@ -2239,6 +2167,22 @@
         "type": "github"
       }
     },
+    "nixpkgs_9": {
+      "locked": {
+        "lastModified": 1730272153,
+        "narHash": "sha256-B5WRZYsRlJgwVHIV6DvidFN7VX7Fg9uuwkRW9Ha8z+w=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "2d2a9ddbe3f2c00747398f3dc9b05f7f2ebb0f53",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "nixvim": {
       "inputs": {
         "devshell": "devshell",
@@ -2354,7 +2298,7 @@
         "flake-utils": "flake-utils_4",
         "mnw": "mnw",
         "nil": "nil",
-        "nixpkgs": "nixpkgs_15",
+        "nixpkgs": "nixpkgs_14",
         "nmd": "nmd",
         "plugin-aerial-nvim": "plugin-aerial-nvim",
         "plugin-alpha-nvim": "plugin-alpha-nvim",
@@ -5333,7 +5277,7 @@
       "inputs": {
         "libcamera-src": "libcamera-src",
         "libpisp-src": "libpisp-src",
-        "nixpkgs": "nixpkgs_16",
+        "nixpkgs": "nixpkgs_15",
         "rpi-bluez-firmware-src": "rpi-bluez-firmware-src",
         "rpi-firmware-nonfree-src": "rpi-firmware-nonfree-src",
         "rpi-firmware-src": "rpi-firmware-src",
@@ -5380,7 +5324,6 @@
     "root": {
       "inputs": {
         "aaru": "aaru",
-        "ags": "ags",
         "auto-cpufreq": "auto-cpufreq",
         "catppuccin": "catppuccin",
         "catppuccin-ghostwriter": "catppuccin-ghostwriter",
@@ -5409,7 +5352,7 @@
         "nix-vscode-extensions": "nix-vscode-extensions",
         "nixos-generators": "nixos-generators",
         "nixos-hardware": "nixos-hardware",
-        "nixpkgs": "nixpkgs_12",
+        "nixpkgs": "nixpkgs_11",
         "nixpkgs-wayland": "nixpkgs-wayland",
         "nixvim": "nixvim",
         "nsearch": "nsearch",
@@ -5684,7 +5627,7 @@
         "git-hooks": "git-hooks_2",
         "gnome-shell": "gnome-shell",
         "home-manager": "home-manager_3",
-        "nixpkgs": "nixpkgs_17",
+        "nixpkgs": "nixpkgs_16",
         "systems": "systems_11",
         "tinted-foot": "tinted-foot",
         "tinted-kitty": "tinted-kitty",
@@ -6097,7 +6040,7 @@
     },
     "umu": {
       "inputs": {
-        "nixpkgs": "nixpkgs_7"
+        "nixpkgs": "nixpkgs_6"
       },
       "locked": {
         "dir": "packaging/nix",

flake.nix

@@ -134,7 +134,6 @@
     stylix.url = "github:danth/stylix";
 
     hyprland.url = "github:hyprwm/Hyprland";
-    ags.url = "github:aylur/ags";
 
     # KDE
     kwin-effects-forceblur = {
@@ -259,7 +258,7 @@
             ];
           };
           # Ryanpandya.com
-          "ryanpandya" = nixpkgs.lib.nixosSystem {
+          "ryanpandya.com" = nixpkgs.lib.nixosSystem {
             system = "x86_64-linux";
 
             specialArgs = {
@@ -272,7 +271,7 @@
             };
 
             modules = [
-              ./hosts/ryanpandya
+              ./hosts/ryanpandya.com
               inputs.stylix.nixosModules.stylix
 
               inputs.sops-nix.nixosModules.sops

hosts/ryanpandya.com/default.nix

@@ -52,25 +52,8 @@
   };
 
   networking = {
-    hostName = "ryanpandya";
+    hostName = "orion";
     wireless.enable = false;
-    nameservers = ["8.8.8.8" "8.8.4.4"];
-    firewall = {
-        allowedUDPPorts = [
-          7946
-          4789
-          2377
-        ];
-        allowedTCPPorts = [
-          80
-          443
-          3000
-          996
-          7946
-          4789
-          2377
-        ];
-      };
   };
 
   powerManagement.cpuFreqGovernor = "ondemand";

hosts/ryanpandya.com/hardware-configuration.nix

@@ -14,19 +14,32 @@
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "/dev/disk/by-uuid/1fa30915-49a8-46b8-b9b7-b298fb5c12c2";
+    { device = "tmpfs";
-      fsType = "ext4";
+      fsType = "tmpfs";
     };
 
-  fileSystems."/boot" =
+  fileSystems."/iso" =
-    { device = "/dev/disk/by-uuid/9897-75EA";
+    { device = "/dev/disk/by-uuid/1980-01-01-00-00-00-00";
-      fsType = "vfat";
+      fsType = "iso9660";
-      options = [ "fmask=0077" "dmask=0077" ];
     };
 
-  swapDevices =
+  fileSystems."/nix/.ro-store" =
-    [ { device = "/dev/disk/by-uuid/073ce40c-8c8c-4a60-bc27-055d9cb78388"; }
+    { device = "/iso/nix-store.squashfs";
-    ];
+      fsType = "squashfs";
+      options = [ "loop" ];
+    };
+
+  fileSystems."/nix/.rw-store" =
+    { device = "tmpfs";
+      fsType = "tmpfs";
+    };
+
+  fileSystems."/nix/store" =
+    { device = "overlay";
+      fsType = "overlay";
+    };
+
+  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
@@ -36,4 +49,4 @@
   # networking.interfaces.ens3.useDHCP = lib.mkDefault true;
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
-}
+}

modules/apps/hyprland/default.nix

@@ -12,12 +12,6 @@ let
 in
 with lib;
 {
-
-  imports = [
-    ./waybar.nix
-    ./swaync.nix
-    ./rofi.nix
-  ];
  options = {
     hyprland = {
       enable = lib.mkEnableOption "Enable hyprland in NixOS";
@@ -25,13 +19,13 @@ with lib;
   };
   config = lib.mkIf cfg.enable {
 
-  home-manager.users.${username} = {
+  imports = [
-    # home.file = {
+    ./waybar.nix
-    #   ".config/ags" = {
+    ./swaync.nix
-    #     source = ./ags;
+    ./rofi.nix
-    #   };
+  ];
-    # };
+
-    wayland.windowManager.hyprland = {
+  home-manager.users.${username}.wayland.windowManager.hyprland = {
     enable = true;
     xwayland.enable = true;
     systemd.enable = true;
@@ -61,9 +55,7 @@ with lib;
                     exec-once = dbus-update-activation-environment --systemd --all
                     exec-once = systemctl --user import-environment QT_QPA_PLATFORMTHEME WAYLAND_DISPLAY XDG_CURRENT_DESKTOP
                     exec-once = killall -q swww;sleep .5 && swww init
-                    
+                    exec-once = killall -q waybar;sleep .5 && waybar
-                    exec-once = ags run > /tmp/ags.log
-
                     exec-once = killall -q swaync;sleep .5 && swaync
                     exec-once = nm-applet --indicator
                     exec-once = blueman-applet
@@ -237,5 +229,5 @@ with lib;
         ''
       ];
   };
-};};
+};
 }

modules/apps/ssh/default.nix

@@ -84,10 +84,6 @@ in
               HostName router.home
               User root
               Port 22
-            Host ryanpandya
-              HostName 152.53.83.167
-              User ryan
-              Port 15995
           '';
         };
       };

modules/apps/syncthing/default.nix

@@ -17,8 +17,8 @@ in
   config = lib.mkIf cfg.enable {
     services.syncthing = {
       enable = true;
-      key  = "${config.sops.secrets."syncthing/${config.networking.hostName}_key".path }";
+      key = "${config.sops.secrets."syncthing/key".path}";
-      cert = "${config.sops.secrets."syncthing/${config.networking.hostName}_cert".path}";
+      cert = "${config.sops.secrets."syncthing/cert".path}";
       user = "${username}";
       group = "users";
       dataDir = "/home/${username}";
@@ -36,10 +36,7 @@ in
             id = "TM4RJVL-W2CJ32S-ZF3VN2K-DYOUT5Z-DJPAK4R-DMB4B7X-L35KLEP-NAM7QQJ";
           };
           "thalia" = {
-            id = "XECYWXP-KSBKPKA-MLW3ITR-2GDF75P-PEX3GBR-MP5XHJS-BGJEAGZ-ZNBD7QJ";
+            id = "TPTJE5T-3EKRCLJ-LWH5RTK-QCBNQ4V-AXNOLOS-6GB2C3R-Z3SYAFQ-PBS6BAP";
-          };
-          "synology" = {
-            id = "GZEXPNR-3VXONBW-64I4C27-YMMGYH7-GL65LXT-AL7OJEQ-PHRGQST-ZY5APQK";
           };
         };
         folders = {
@@ -50,17 +47,15 @@ in
             devices = [
               "luna"
               "thalia"
-              "synology"
             ]; # Which devices to share the folder with
           };
-          "Sync" = {
+          "Documents" = {
             id = "ye1o9-0c6bd";
-            label = "Sync";
+            label = "Documents";
-            path = "~/Sync";
+            path = "~/Documents";
             devices = [
               "luna"
               "thalia"
-              "synology"
             ];
           };
         };

modules/apps/zsh/default.nix

@@ -44,10 +44,6 @@ in
           initExtra = ''
             autoload -U add-zsh-hook
             export GITHUB_TOKEN="$(cat ${config.sops.secrets."github_token".path})"
-            [ "$TERM" = "xterm-kitty" ] && alias ssh="kitty +kitten ssh"
-
-            autoload -U colors && colors
-            PS1="%{$fg[red]%}%n%{$reset_color%}@%{$fg[blue]%}%m %{$fg[yellow]%}%~ %{$reset_color%}%% "
           '';
 
           oh-my-zsh = {

modules/components/default.nix

@@ -10,6 +10,6 @@
     # ./pipewire
     ./theming
     # ./users
-    ./virtualization
+    # ./virtualization
   ];
 }

modules/components/theming/default.nix

@@ -75,14 +75,10 @@ in
           # "Net/ThemeName" = "${GTK-THEME}";
         };
       };
-      gtk = {
+      gtk.iconTheme = {
-        iconTheme = {
         package = pkgs.catppuccin-papirus-folders;
         name = "cat-mocha-lavender";
       };
-      gtk3.extraConfig.gtk-sound-theme-name = "ocean";
-      gtk4.extraConfig.gtk-sound-theme-name = "ocean";
-    };
     };
   };
 }

modules/components/virtualization/default.nix

@@ -1,88 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  username,
-  vars,
-  ...
-}:
-let
-  cfg = config.virtualization;
-in
-{
-  options = {
-    virtualization = {
-      enable = lib.mkEnableOption "Enable virtualization in NixOS & home-manager";
-    };
-  };
-  config = lib.mkIf cfg.enable {
-    environment = {
-      systemPackages = with pkgs; [
-        docker-compose
-        podlet
-        quickemu
-        spice
-        spice-protocol
-        virt-manager
-        virtiofsd
-        virtio-win
-        win-spice
-      ];
-    };
-    services = {
-      spice-vdagentd.enable = true;
-    };
-    virtualisation = {
-      docker = {
-        enable = true;
-        enableOnBoot = true;
-        autoPrune = {
-          enable = true;
-          dates = "weekly";
-        };
-        liveRestore = false;
-        enableNvidia = if vars.nvidia then true else false;
-      };
-      libvirtd = {
-        # Make sure you run this once: "sudo virsh net-autostart default"
-        enable = true;
-        qemu = {
-          swtpm.enable = true;
-          ovmf.enable = true;
-          ovmf.packages = [ pkgs.OVMFFull.fd ];
-        };
-      };
-      spiceUSBRedirection.enable = true;
-      vmVariant = {
-        virtualisation = {
-          memorySize = 4096;
-          cores = 3;
-        };
-      };
-    };
-
-    users = {
-      users = {
-        ${username} = {
-          extraGroups = [
-            "docker"
-            "libvirtd"
-            "podman"
-          ];
-          # quadlets
-          autoSubUidGidRange = true;
-          linger = true;
-        };
-      };
-    };
-
-    home-manager.users.${username} = {
-      dconf.settings = {
-        "org/virt-manager/virt-manager/connections" = {
-          autoconnect = [ "qemu:///system" ];
-          uris = [ "qemu:///system" ];
-        };
-      };
-    };
-  };
-}

modules/profiles/base.nix

@@ -68,7 +68,7 @@ in
     secrets.enable = true;
     syncthing.enable = true;
     # users.enable = true;
-    virtualization.enable = lib.mkDefault false;
+    # virtualization.enable = true;
 
     console = {
       earlySetup = true;
@@ -105,8 +105,6 @@ in
       };
     };
 
-    programs.nix-ld.enable = true;
-
     services = {
       cron.enable = true;
       dbus.implementation = "broker";

modules/profiles/desktop.nix

@@ -105,11 +105,7 @@ in
       {
         # Home-manager programs
         programs = {
-          kitty = {enable = true;
+          kitty.enable = true;
-          settings = {
-            enable_audio_bell = false;
-          };
-          };
         };
         home.packages = with pkgs; [
           # GUI Apps

modules/profiles/gaming.nix

@@ -134,8 +134,7 @@ in
     networking = {
       firewall = {
         allowedUDPPorts = [
-          # Development, temporary ports, etc
+          # Development, temporary port, etc
-          3000
           8080
 
           # Moonlight
@@ -147,8 +146,7 @@ in
           48010
         ];
         allowedTCPPorts = [
-          # Development, temporary ports, etc
+          # Development, temporary port, etc
-          3000
           8080
 
           # Moonlight

modules/profiles/hardening.nix

@@ -178,7 +178,6 @@ in
                 [
                   "poweroff"
                   "reboot"
-                  "nh"
                   "nixos-rebuild"
                   "nix-env"
                   "shutdown"

modules/profiles/server.nix

@@ -18,7 +18,6 @@ in
   config = lib.mkIf cfg.enable {
     # Custom modules
     base.enable = true;
-    virtualization.enable = true;
     catppuccinTheming.enable = lib.mkForce false;
     packages.enable = lib.mkForce false;
 

secrets/default.nix

@@ -21,8 +21,8 @@ in
       secrets = {
       	password_secure = { };
         password_insecure = { };
-        "syncthing/${config.networking.hostName}_key" = { };
+        "syncthing/cert" = { };
-        "syncthing/${config.networking.hostName}_cert" = { };
+        "syncthing/key" = { };
       };
       # templates = {
       #   "nix-github-token.conf" = {

secrets/secrets.yaml

@@ -3,17 +3,11 @@ github_token: ENC[AES256_GCM,data:yI9GSOpVQVEvgehmkcWkAN1sZO3VDFgg/buJe60tp1rwFd
 password_secure: ENC[AES256_GCM,data:86zyxrfTpZbEpA==,iv:61PjfuIO5cylyEHyrtIUbTbmXgubz/ssZtpU8FY/Y3U=,tag:3Kb5qdbnRJR/JSiZZSJqpg==,type:str]
 password_insecure: ENC[AES256_GCM,data:q6g19uQcIqjmsg==,iv:Wy2FDNtFU1pl+23jqu8K9kfksyOlIMf5itdW0BREeBI=,tag:lDybgVyiM9iyJbi6lgLt/w==,type:str]
 syncthing:
-    thalia_cert: ENC[AES256_GCM,data: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,iv:heezEF8ufqhOjWBV1mLBuSCH2CTfZ6BpJ0GoF17+ez4=,tag:0U8nLzzLzLyvBbgDXGaCKw==,type:str]
+    cert: ENC[AES256_GCM,data:ebg+4Nv/cwafq4Iy66fFfmsRtMBfpJqWwb2u4LH9w6MURjRtsOQxERYnGwyA7G9DcntSJpoTD2pV+jVNfpQ50sCoRlTcI/jZdGu8yLc+HR9yhPLn2avn/oKXrd2ktvrw8S/munYxIBuwNFYgAGUqY6rzzkmz3UpGAYGs13TRUzPRmVpiBHup8P4KMpXymgaDKI1vklKPkIWXwpClU1qnPerrz43QtbR68T4S2dBRK+mU7HyxPyRD2D91CNap73AorUhy6Lge1JIioRl0D20qhT9MLOX0+0TbN0v8yl6iQpnDW5eYsf/oQuTAabAHNKJ0N2IJwkJwXUy3I+Ng/LzK51PG97x5BuO5ZrVNvteAu5Jkn4jDu9eAETA7l4JzL8BOcAsfRzYnpBcF1RoCnMq5rjrcArFcqk/nIkeDgtMMAu6TUu5+gSLdlB2aSy0bACrQfMfU90vOlpMV/x8tslzr1D+Y6pheTPff6bUQ16oqfxfGBoOCX+WBRzY7Y1EaVnTf2+VnvjIXwA+pcPg/Tc6DcDHVeBPKepJPV32ziQM928Kx7f9kow5aGeMYQwxHjfNKSvE5Umy6CgwOhHZaJdpBLp2B4F/r0QNaYuBbCxSHa7cLOuvilCF30h6WYhbaMoSNzPVG83UyiKVBdFVXZKqT1eee7kGPY4wfxSMJXzvqVLbrh/xN1aYnjojzpQNJVJFCseqaqC68wo2HCeIlJNf6p0N5gVUFt+OgXpG+T0VRaGIWQcrJSoWGaxq+ZqVkUwMMJXpmGTwm7M14TwAta8TDDX0b/fo12J9K1OiYhS+Zf71v8dK1XooLCvxFG4Y9tWnLzn62O/51Xg2FBXkRyqo+Y8DDGnbA/hEcrhOdzOaDZnpr5R2qJ2QruW2k2DM+I1jvJZPRbIMAXOeIlbShz1F1PaAYY1PnxInT9Zt5hCIH0P7XcoA9oBeV83PogvwK2dukGMxnHGzlrbABdmmiDulN0uL+1ZADchsKMvu81wqvy+ifriYIGOo5geOlRmtBkHo3yM8epX0edRG3lj4JkFgzA6L7lmBSVGgCgPM=,iv:xThuPyFq3lPtnYXyCx9WtYWzPK3A6HH2K7ulnNbo+kU=,tag:PaU6Fa4jXgRnwCg9lRTBvg==,type:str]
-    thalia_key: ENC[AES256_GCM,data:C0xSsf0H6fn+u+e/JgkXcMzJO91nVN1riM18ejlbbM6ehafcj/pinDJZsViXoshsheW1wmqmyIu4qLGSmPvf586aCF43XimEe5d/v1XD6kvU8Xq+nL706LECPAZgAtxO+MVD5y0KLkFm7m0qCii+Eslu3FXUYvhpOCn0e8sugpjXjU0jBzCjeYuVHwcuT1/+6WyIek9I6w8sibbeUpMRwXiBDVe3kpiyM2XgAlpi+40C9nS6L+YFq4qKMTDBx+gMbzKyBSZw85R1dQwSVD1lzUjZsGYutihktitJeUiv/GTuwu53zB69FO5RV5e67RZ0eBeXkjjGPgycFGuTN3glllyx2azVDUf2tVIqtHyjZoCvfM534Iz0cKnZxFq3kCG5,iv:XixdQoAFgQ+/EVu8SRvFDqMW2NaOKANoHJvbvyiqL8M=,tag:OqJrkwNVehIhiKehsIfnDA==,type:str]
+    key: ENC[AES256_GCM,data:PJVykKJq86KSXi3Oo3NukZwew6pxVrR2i7qofbxmHSvsVCGHdaYJSzCz1dvLCU0XFH2soLfQfY/fQXf0gTaUFmPyf/NZwinWIbDOaYXIFYDdCT1JmxENeRgASrCFAZ2pN3CtQpzpPYoG0c6j6LwwLFeuMecGcm9oCzXgIzV+FZzyRu4juFwWtdvllYpl0yfi6EUwcxYIYof574XY7KhNxvx1bshTZkS0WDePwBliS8PxswN66xzpP969cmoGA5gQ5Otohia3f+K8ehoy8wr+rAMorxAsElYtRmOOJ1rG6UySr6+j+xo722J+cNk4n+vFWlmoAQajX5JgK0H6R3s8ciUVvs81TZYPJU8rGZD1nxrrkqkJwEjRE4jxXhtpNW+f,iv:1vfQ65juysJbKprZjtI+7WBmm+UaxTA60LOHA05SRx4=,tag:D6JGMJKzSUKVKmG7fEvR/w==,type:str]
-    orion_key: ENC[AES256_GCM,data:xhYvOMdMgKh5HdzNEtTYkCBqr/m4YfmOArTvdfkWWKE7HyTaL3/FnGMCv6r+uZUZq7MqA8Z7/j9LDo3cRmwtM48f+i/FtbPfUK+m8TlapTDHvcKTeK3/FbRqaXThm8hn4X4Mkm7C+ninBq1czzx0fxYhbbv9XhspxpMFgmiKXOrTQn6L/uTreUTGtweZvzgCPvObOjhnYF0+FqZX6Y4bDQYX6bU3rQA8U/Um6mk/N99RU4b7VYfp6gm4VQKfx659Pwku8HMXQe3N/pJFY1+qZ0L6MaH6yLkF6+UgygUZB7HkZQyTd+DKJrJNSj3fd/pqecegSDu+F548Tjjk88IIsU16VsMgK+csY2XogBZ24sTyHfcuTdKqPWtMtO8tf8e2,iv:KRWOKh++JATu7GuIJKMQ5z7Ip8FYLWhOCrPwPF9pzIo=,tag:BslAOolvsB/z9aiDdd9V/w==,type:str]
-    orion_cert: ENC[AES256_GCM,data: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,iv:iW5RngULYJUBXgRGoShAJbxZRHQYIwr5mFDNI22/6h4=,tag:lw4LU30jdSehgt+mfGL1HQ==,type:str]
-    ryanpandya_key: ENC[AES256_GCM,data:kRA8ySWyxxAsd6yMiidQEB5xMS0m7fiKV5V1+GT3cY0nNjxJeZGlNywnDDApOKe7TkqtdwPlqG4ucawIOQ+LHCHqBXGie9mUp09LAHSEpD7/dotLUq0xiGKyobwk2QOoyIh4xJIPWZjkqf59AZq+7cFtKaaU4A3oIdk8bMm0F6ZWdxMXn01v+dafww6JncVz9e9DTB5vJr5pyvNAc1Bp6zCzlVFD+UDqVaN/9b3kdV+PS+2NVrX0nJdouBLW3mf8Y2mGjj/tVpNUhwXZcPKLec6iRSQxWyucAtUVQVhuRh9vzA8CMzrgqpl1ZIw+Ar9IWdPqsJUZ5TwyAwO6I1xp0TEwSWgk15D7xAAoM0W+IvusnBqliLB9IpdlxMXt5vmf,iv:nkzCHkLGZakPNm9cgO3T6vu/6/CfGZt7BF1PeiGFRcY=,tag:t+p6Vpyonus+k2CK/fZsQQ==,type:str]
-    ryanpandya_cert: ENC[AES256_GCM,data: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,iv:mx5uaH2T3wWbuLrjyEwD1L7f8dqk5PqQl1WjtcdHgKM=,tag:jQ3XyHY9jn/2WJdBgn4cHw==,type:str]
 ssh:
     private_keys:
         ryan@orion: ENC[AES256_GCM,data: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,iv:XHSTbv5aTYtya0BNbS1uNWTXbOcP+mBCk9Gkx7cn1zE=,tag:2IwYw7mSChgHJceHeSSC3Q==,type:str]
-        ryan@thalia: ENC[AES256_GCM,data:/e8vMK4IWk077zKZjwgupLfJn6Xutl5zRzSqFn5FoPE5sRRGr0W3nBTeLbYvZeVPCIMmRw/SaCoJxcu/XyADnl1S9skXHHL0gu/l0WoVRsZedRWZQopeX1cL1HszdlQqKIgtAdpZHliInRz5fVYJwpDgydLg20dz5DlKUtDQeLjhiCMB1dp6hC4wOx0ZN+DPdwE9DAGkngVLPqME9UnMe4jHfNn+hByw3jJW+IPEhFhllKE+8Tmho6OyzEQ5nK9IC+qTFvmOa9gJj6xp3LMZh4zWYCZrudT+H2wj/78dJuv/I+5GwzPv3bUucxkpnI5ZqbG7Z0PsQeZgZFdQ8PFgvT89AoqvLJxWdOoHBhGesNMDxrBtzgQATM2Dst762zja7LGUL9TkqQn+RIhavOyBtJdb1JcPWqDmtvIDq6+cL11rR1Cbg1bGqE3DDUjV1lPxnPiVQoelfPw5Zyd77DKHNC57IjcqC4s0DATzfAFxAinnbgCjT8x+mEGS/5+4Ig51egizlgNVTTMlxIiZe0Fw,iv:Vki+hv3wvQ5bFlAzEy/p4WFG7BvW8U+OlQUwQMEJkRs=,tag:WK6qEJlkd5IWqCF5znTM0Q==,type:str]
-        ryan@ryanpandya: ENC[AES256_GCM,data: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,iv:LBoQ8Lup9s5OtEpPUD0ae4WDFqAWwvjVXBhMCJSxqus=,tag:tVpxNiP9GGq7rxCqWp1DQw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -23,32 +17,23 @@ sops:
         - recipient: age1a560amc8xx3uwku8a7tmu3spmjnfs4cvq2hr5pgnr82lwhgg5d8q892l3q
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4bVJJb1EwYzZwQ0dBblkz
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzaUJKejVFVXhMNjF2d0l5
-            cHZYMzZ2ekVQb2ZzdE9VWmhQWXBheVFjazN3Ck8wbUtvL2NwR2VKMit6NlBiVS9r
+            d3ZPM25WdEp0Yk94SHl0YUUzc0x2RWJ0aVM4Ck4zVUVDRVZkYWExN1NjSEJNenhM
-            a1FDV2FqK1d0cHRKN240MHpGMkMzU2sKLS0tIDdaUlNWUkVaUnNuai94cElvMXEv
+            QzVXUHAzSE9JUHpzU09NbnpDMWhnS0EKLS0tIE5oMnUxcTYzV09vb1p3UDY0aXY1
-            K3c4TU9sRTRseDRubHRhZFBSN0VpT1EKPGyAEpgNXDBIF8CD8D5Pa6rfySoO7V6b
+            dElkYlpSdjczWnBlVzZ2Q2YrdkVvd2cKyZFqH6HMB9PTT3v5t8l7UrzESygm94nk
-            kdqkc7Ia4qZgST/+UGtKcMU15fcnegKfL0CAi5REgv2jEkRPFieacQ==
+            Clwd44vK2VQZdwXOWhxE/oVfkR8RHg4vAAd6cub1b/IA3cUx8YE9Ng==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1eqlkecp5w5w73y5lp79rwus76xluzmz8l62ln9m3uhpxmmcczuqs4gk47h
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCNnlWSEQ3TTZaSzRZUEZq
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvR3RFQWxCb2RwemlxbW1v
-            b1RlWEw0bU9CeldDVmY5QzU0THhxRzhmUlZjCngvYTBjNVYwbFJOZ21aYWJZVVo5
+            OHhud0pYZ2YzdkJTTzkxMDB2Ulo0Q3ZpNzNvCmVvYys4RnZ5bWdBTWZIbEV5YWFO
-            UzdFYkpUeXRsMWpFYkNGTERoQjA4N3MKLS0tIDFGS1VzQ2JvdjRBQW1UQVh0Tm5s
+            Si82Wnp3WExISlR0RkV0c1VqSm51aUUKLS0tIFp3endHdmozQzAySmgzalIxUWpa
-            TW0zQ1A2VjlBM0dDTUVqbmpIR2JEMW8KWhvX51T+4FLDejDpbzcmrxJeX5WiBi/G
+            MzdNcUhHSURYSzBoekthcUFjWStwSmcKNrX1473QeS6juNAp0yN3ZCwJfWa524SA
-            jIvg9epRNiEDb72621Wv2GCjabdxOwgRxwPX3B05GDnUO/zW7nMT9g==
+            sArpDaBjlbJfErAzLaXLwofONMiV8EU4kYM5+r61G5Oc0V5TfDfk1w==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1ypva060ks8tnrhwyyu8eykgfr96d00zds3d93c8vukrrscaf3qkqscdufu
+    lastmodified: "2025-01-26T03:04:30Z"
-          enc: |
+    mac: ENC[AES256_GCM,data:yzzw17P0DrA/kv9qzw2UNwrEwyH+8r1vGsLAN4IIUsAVEROSWSqS+emt5zLgzaPhGGcgRbYuczosuXRb2w2uu644u1nkeJqrYgXuPksqBgwljewGxjLmMJYy9iY5HkYbhy59M3hjf7tihWCJXdDKWGd4N/aKJxsbpj+EsQtJxHM=,iv:7NXDLC0VUTmgorfRlEV2haiUumcFDjkb1LC0++saHDY=,tag:BDtwatWx1lpvhdzv2RmxaQ==,type:str]
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWeGttUCtlTE9JNVFhUjRO
-            RWRXV2dWSGpQVk1xeFVUQXFaZGl5VHNhSHlRCisvYWpNb2xQOC9aNFo5VEJuY2tt
-            Si8vUENic0JaS2F4bVBEdDVDK1ExOE0KLS0tIFF2MTRVOExxZGM3cng5OXpzdkxX
-            SmJ4QzR1MHFOVTNmbVJoZGo5VkJuWW8KVTmrekkTI5nkOQHx90FGgR9LQwM9FE8u
-            2XB3nbzHMNpiDngxBajVDNT9rrpL5Jf4p57MwFpfzBRqJCQDzAEjsw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-02-02T01:16:30Z"
-    mac: ENC[AES256_GCM,data:k97o2+/ctAZ87KLgb6dEn7oLCHa4TsQRQZR6t0//MktiEHx9YasQWyuQR1qlBFKELq88TDXNdotrGbqu2JMFgUxQS5SlpT7rGTTjNIy0c/v2oDg2ygVjGetF9QhX7SXL5odBklT1LcYO3KnOOid2Bd7mfyo/8TjczhldJKcPsjU=,iv:A3kIgJQA+rGgJBU9Yx3CArNbmXmYQLC+Ojsb6ZiaVyQ=,tag:ArI97S9y7AnivQACdSDQHA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.3

todo

@@ -1,17 +1,17 @@
-[x] secrets
+DONE    secrets
-[x] Logseq
+TOFIX    syncthing - needs to have different keys per host
-[x] mouse speed
+DONE    Logseq
-[x] git thru ssh
+DONE    mouse speed
-[x] boot into Hyprland
+DONE    git thru ssh
-[x] zsh error
+DONE    boot into Hyprland
-[x] sync with thalia (sops, ssh, etc)
+DONE    zsh error
-[x] thalia sunshine output
+DONE    sync with thalia (sops, ssh, etc)
-[x] autologin on boot
+DONE    thalia sunshine output
-[x] Numlock
+DONE    autologin on boot
-[ ] syncthing - needs to have different keys per host
+TODO    displayManager theming
-[ ] displayManager theming
+TODO    ags
-[ ] ags
+TODO    sudo nopasswd
-[ ] sudo nopasswd
+TODO    brightness controls
-[ ] brightness controls
+TODO    sounds (disable bell!!!)
-[x] sounds (disable bell!!!)
+TODO    KDEConnect
-[ ] KDEConnect
+DONE    Numlock