feature(boot): attatch /tmp to tmpfs, but keep nix build in /var/tmp

Merge pull request 'chore: repository cleanup and noctalia baseline' (#83 ) from chore/cleanup into main
Reviewed-on: #83
2026-10-02 16:39:53 +02:00 · 2026-10-02 09:51:23 +02:00 · 2026-10-02 09:39:08 +02:00 · 2026-10-02 09:25:40 +02:00 · 2026-10-02 09:25:40 +02:00 · 2026-10-02 09:25:40 +02:00
56 changed files with 1210 additions and 512 deletions
@@ -0,0 +1,2 @@
+# nixfmt reformat
+2231d2fc3fb4dc140c5f3257523dcdb513ac4dea
@@ -8,3 +8,7 @@ result-*

 # vim
 *.swp
+
+# devenv
+.devenv*
+devenv.local.nix
@@ -6,20 +6,20 @@ My personal NixOS configurations.

 ```bash
 .
-├── flake.lock
-├── flake.nix # flake definition
+├── flake.nix # hosts and home-manager wiring
 ├── hosts
-│   └── neon
-│       ├── configuration.nix # import nix-modules for specific host
-│       └── hardware-configuration.nix # hardware configs for specific host
+│   ├── argon # desktop
+│   ├── neon # laptop
+│   └── default # test vm
+│       ├── configuration.nix # host-specific settings and module imports
+│       ├── hardware-configuration.nix # generated by nixos-generate-config
+│       └── niri.nix # host-specific niri settings (outputs, input)
 ├── modules
-│   ├── home-manager
-│   │   ├── xyz_module.nix
-│   └── nixos
-│       └── xyz_module.nix
+│   ├── home-manager # user modules, imported by users/aaron/home.nix
+│   └── nixos # system modules, imported by the hosts
 └── users
    └── aaron
-        └── home.nix # import home-manager modules for specific user
+        └── home.nix # imports home-manager modules
 ```

 ## installation
@@ -0,0 +1,65 @@
+{
+  "nodes": {
+    "devenv": {
+      "locked": {
+        "dir": "src/modules",
+        "lastModified": 1790701375,
+        "narHash": "sha256-0FpLHIRDYiyo3EMTnMQSobZQknZaa3JuWo6vmMCK76o=",
+        "owner": "cachix",
+        "repo": "devenv",
+        "rev": "fe20b5cba7ab5e93ae73f956a8d3efc50e1753f4",
+        "type": "github"
+      },
+      "original": {
+        "dir": "src/modules",
+        "owner": "cachix",
+        "repo": "devenv",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "inputs": {
+        "nixpkgs-src": "nixpkgs-src"
+      },
+      "locked": {
+        "lastModified": 1789506231,
+        "narHash": "sha256-vNkJbtmqyBfFhn/HnzQo4ROuoyYWuy/allqTfJb4kMY=",
+        "owner": "cachix",
+        "repo": "devenv-nixpkgs",
+        "rev": "c2f38fe7f9e04d9aadd354d380f2bd40531d9737",
+        "type": "github"
+      },
+      "original": {
+        "owner": "cachix",
+        "ref": "rolling",
+        "repo": "devenv-nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-src": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1789370336,
+        "narHash": "sha256-6RSEDHIWQtesQKWSu5qRai8L2h4KgCgMEfJHstW99G4=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "c7def046b9a883d46974757852106483d741586f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "devenv": "devenv",
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
@@ -0,0 +1,29 @@
+{ pkgs, ... }:
+
+{
+  packages = with pkgs; [
+    # gitea (git.0x29a.ch)
+    tea
+    # nix tooling
+    nixfmt # official formatter (RFC 166 style)
+    statix # lints for nix anti-patterns
+    deadnix # finds unused bindings and arguments
+    nixd # language server
+    nvd # diff system generations
+  ];
+
+  scripts = {
+    lint.exec = ''
+      set -e
+      statix check .
+      deadnix --fail --exclude hosts/*/hardware-configuration.nix -- .
+    '';
+    fmt.exec = ''
+      nixfmt $(git ls-files '*.nix')
+    '';
+  };
+
+  enterShell = ''
+    echo "nixconfig devenv: tea, lint, fmt"
+  '';
+}
@@ -0,0 +1,3 @@
+inputs:
+  nixpkgs:
+    url: github:cachix/devenv-nixpkgs/rolling
@@ -8,11 +8,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1775087534,
-        "narHash": "sha256-91qqW8lhL7TLwgQWijoGBbiD4t7/q75KTi8NxjVmSmA=",
+        "lastModified": 1788450739,
+        "narHash": "sha256-glZLQlzIn1fXH6PazR2iUmTo7kzzyYSshrWhLS9TqCU=",
        "owner": "hercules-ci",
        "repo": "flake-parts",
-        "rev": "3107b77cd68437b9a76194f0f7f9c55f2329ca5b",
+        "rev": "31729ca8cbdb4fa927b34e5f4353e6a83f39e993",
        "type": "github"
      },
      "original": {
@@ -28,11 +28,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1777647296,
-        "narHash": "sha256-B2dllLZyocJ9fN4io22eadYPWynvAdRq/zC2NSjw52k=",
+        "lastModified": 1790819692,
+        "narHash": "sha256-rvubAPbh3QCliic3sAK+CXTrPCGgJstY52OTs/5H1J4=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "d181e6ac2ad01e50c914220d7478fed50b1dbf68",
+        "rev": "c8ecc29e5175452bee4a2aa1ba2383856d795338",
        "type": "github"
      },
      "original": {
@@ -43,11 +43,11 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1777268161,
-        "narHash": "sha256-bxrdOn8SCOv8tN4JbTF/TXq7kjo9ag4M+C8yzzIRYbE=",
+        "lastModified": 1790689126,
+        "narHash": "sha256-ilerN1WLSvF+HMjziC/Wv99J5y02maDH+6hZPwsORKg=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "1c3fe55ad329cbcb28471bb30f05c9827f724c76",
+        "rev": "b4fd65b198c599cbe814fcb9f42d25d021595ec9",
        "type": "github"
      },
      "original": {
@@ -66,11 +66,11 @@
        "systems": "systems"
      },
      "locked": {
-        "lastModified": 1777236345,
-        "narHash": "sha256-ALOqlq7bE30lsX4rA76hXeQ2aLLEpb44hS+D1+jWS88=",
+        "lastModified": 1790541651,
+        "narHash": "sha256-/496IQz8qNWHHLnc3Zvr0l4uxJ34igNhJhn7ZKAefFk=",
        "owner": "nix-community",
        "repo": "nixvim",
-        "rev": "a67d9cd6ff725a763afe88727aac73208ded3bf4",
+        "rev": "5980a626794486abad69fca7667f9c11dfbc3bd7",
        "type": "github"
      },
      "original": {
@@ -83,15 +83,14 @@
      "inputs": {
        "nixpkgs": [
          "nixpkgs"
-        ],
-        "noctalia-qs": "noctalia-qs"
+        ]
      },
      "locked": {
-        "lastModified": 1777427472,
-        "narHash": "sha256-kqcfLdxb+CqTroMErCScvx6YQcZYJcf6X+z5I8kBJK8=",
+        "lastModified": 1790718664,
+        "narHash": "sha256-LWil4xgSyqIFZ9sydvL1glFOoiqAOknWUwykC4sqxuY=",
        "owner": "noctalia-dev",
        "repo": "noctalia-shell",
-        "rev": "9f8dd48c8df5ab1f7f87ddf9842627e1e5682186",
+        "rev": "fd9759c892fe5034b682c185695f1bee121cd5b3",
        "type": "github"
      },
      "original": {
@@ -100,29 +99,6 @@
        "type": "github"
      }
    },
-    "noctalia-qs": {
-      "inputs": {
-        "nixpkgs": [
-          "noctalia",
-          "nixpkgs"
-        ],
-        "systems": "systems_2",
-        "treefmt-nix": "treefmt-nix"
-      },
-      "locked": {
-        "lastModified": 1777380063,
-        "narHash": "sha256-q5mWOEICcZzr+KnjIwDHV9EXiBxOC9cnBpxZbDAViU8=",
-        "owner": "noctalia-dev",
-        "repo": "noctalia-qs",
-        "rev": "8742a7a748c43bf44eb6862a8ebd3591ed71502d",
-        "type": "github"
-      },
-      "original": {
-        "owner": "noctalia-dev",
-        "repo": "noctalia-qs",
-        "type": "github"
-      }
-    },
    "root": {
      "inputs": {
        "home-manager": "home-manager",
@@ -132,56 +108,21 @@
      }
    },
    "systems": {
+      "flake": false,
      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "lastModified": 1774449309,
+        "narHash": "sha256-brhZ8DmuGtzkCYHJg4HEd602amKm89Y9ytsFZ5uWD1w=",
        "owner": "nix-systems",
        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "rev": "c29398b59d2048c4ab79345812849c9bd15e9150",
        "type": "github"
      },
      "original": {
        "owner": "nix-systems",
+        "ref": "future-26.11",
        "repo": "default",
        "type": "github"
      }
-    },
-    "systems_2": {
-      "locked": {
-        "lastModified": 1689347949,
-        "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
-        "owner": "nix-systems",
-        "repo": "default-linux",
-        "rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default-linux",
-        "type": "github"
-      }
-    },
-    "treefmt-nix": {
-      "inputs": {
-        "nixpkgs": [
-          "noctalia",
-          "noctalia-qs",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1775636079,
-        "narHash": "sha256-pc20NRoMdiar8oPQceQT47UUZMBTiMdUuWrYu2obUP0=",
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "rev": "790751ff7fd3801feeaf96d7dc416a8d581265ba",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "type": "github"
-      }
    }
  },
  "root": "root",
@@ -17,9 +17,17 @@
    };
  };

-  outputs = { self, nixpkgs, home-manager, nixvim, ... }@inputs:
+  outputs =
+    {
+      nixpkgs,
+      home-manager,
+      nixvim,
+      ...
+    }@inputs:
    let
-    mkHost = hostName: nixpkgs.lib.nixosSystem {
+      mkHost =
+        hostName:
+        nixpkgs.lib.nixosSystem {
          system = "x86_64-linux";
          specialArgs = { inherit inputs; };
          modules = [
@@ -27,6 +35,9 @@
            ./hosts/${hostName}/configuration.nix
            home-manager.nixosModules.home-manager
            {
+              home-manager.useGlobalPkgs = true;
+              home-manager.useUserPackages = true;
+              home-manager.backupCommand = "mv -f {file} {file}.hm-bak-$(date +%Y%m%d%H%M%S)";
              home-manager.extraSpecialArgs = { inherit inputs; };
              home-manager.users.aaron.imports = [
                nixvim.homeModules.nixvim
@@ -35,7 +46,8 @@
            }
          ];
        };
-  in {
+    in
+    {
      nixosConfigurations = {
        default = mkHost "default";
        neon = mkHost "neon";
@@ -1,16 +1,25 @@
-{ config, pkgs, inputs, ... }:
+# argon: desktop with an amd gpu and three luks-encrypted data drives.
+# The drives are unlocked in the initrd with keyfiles from /etc/nixos/keys.

+{ lib, pkgs, ... }:
+
+let
+  # luks name -> partition uuid, mounted at /mnt/<name>
+  drives = {
+    data1 = "dfae62cc-bad1-4879-bf9a-461bde833625";
+    data2 = "8312edae-9247-481b-a313-52a7f848f027";
+    nvmecache = "2352250e-4ebe-4f9a-bf66-0d4aaa961bd8";
+  };
+  key = name: "/etc/nixos/keys/${name}.key";
+in
 {
  imports = [
+    ../../modules/nixos/appimage.nix
+    ../../modules/nixos/astro.nix
    ../../modules/nixos/audio.nix
    ../../modules/nixos/bootloader.nix
-    ../../modules/nixos/calibre.nix
-    ../../modules/nixos/claudecode.nix
    ../../modules/nixos/certificates.nix
-    ../../modules/nixos/drives.nix
    ../../modules/nixos/gnupg.nix
-    #../../modules/nixos/gnuradio.nix -> build error
-    ../../modules/nixos/graphics.nix
    ../../modules/nixos/greetd.nix
    ../../modules/nixos/locales.nix
    ../../modules/nixos/networking.nix
@@ -22,13 +31,41 @@
    ../../modules/nixos/services.nix
    ../../modules/nixos/settings.nix
    ../../modules/nixos/steam.nix
+    ../../modules/nixos/thunar.nix
    ../../modules/nixos/users.nix
+    ../../modules/nixos/vial.nix
+  ];
+
+  # host-specific niri config (outputs, input devices)
+  home-manager.users.aaron.imports = [ ./niri.nix ];
+
+  # amd gpu: mesa/vulkan, and amdgpu in the initrd for plymouth
+  hardware.graphics = {
+    enable = true;
+    enable32Bit = true;
+  };
+  hardware.amdgpu.initrd.enable = true;
+
+  # encrypted data drives
+  boot.initrd.secrets = lib.mapAttrs' (name: _: lib.nameValuePair (key name) (key name)) drives;
+  boot.initrd.luks.devices = lib.mapAttrs (name: uuid: {
+    device = "/dev/disk/by-uuid/${uuid}";
+    keyFile = key name;
+  }) drives;
+  fileSystems = lib.mapAttrs' (
+    name: _:
+    lib.nameValuePair "/mnt/${name}" {
+      device = "/dev/mapper/${name}";
+      fsType = "ext4";
+      options = [ "nofail" ];
+    }
+  ) drives;
+
+  environment.systemPackages = with pkgs; [
+    amdgpu_top
+    calibre # ebook management and kobo syncing
  ];

-  # set hostname
  networking.hostName = "argon";
-
-  # install state version
-  system.stateVersion = "25.11"; # Don't change
+  system.stateVersion = "25.11"; # don't change
 }
-
@@ -1,37 +1,53 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:

 {
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
  ];

-  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.availableKernelModules = [
+    "nvme"
+    "xhci_pci"
+    "ahci"
+    "usbhid"
+    "usb_storage"
+    "sd_mod"
+  ];
  boot.initrd.kernelModules = [ "dm-crypt dm-mod" ];
  boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-label/nixcrypt";
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];

-  fileSystems."/" =
-    { device = "/dev/mapper/lvmroot-root";
+  fileSystems."/" = {
+    device = "/dev/mapper/lvmroot-root";
    fsType = "ext4";
  };

-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/AC1C-20EB";
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/AC1C-20EB";
    fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
+    options = [
+      "fmask=0022"
+      "dmask=0022"
+    ];
  };

-  fileSystems."/home" =
-    { device = "/dev/mapper/lvmroot-home";
+  fileSystems."/home" = {
+    device = "/dev/mapper/lvmroot-home";
    fsType = "ext4";
  };

-  swapDevices =
-    [ { device = "/dev/mapper/lvmroot-swap"; }
+  swapDevices = [
+    { device = "/dev/mapper/lvmroot-swap"; }
  ];

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
@@ -0,0 +1,37 @@
+# argon: desktop with two 1440p monitors side by side
+
+{
+  wayland.windowManager.niri.settings = {
+    input = {
+      touchpad.off = { };
+      trackpoint.off = { };
+    };
+
+    _children = [
+      {
+        output = {
+          _args = [ "DP-1" ];
+          mode = "2560x1440@165.000";
+          scale = 1;
+          transform = "normal";
+          position._props = {
+            x = 0;
+            y = 0;
+          };
+        };
+      }
+      {
+        output = {
+          _args = [ "DP-2" ];
+          mode = "2560x1440@143.912";
+          scale = 1;
+          transform = "normal";
+          position._props = {
+            x = 2560;
+            y = 0;
+          };
+        };
+      }
+    ];
+  };
+}
@@ -1,10 +1,13 @@
-# 0x29a nixos conifg
+# 0x29a nixos config

-{ pkgs, lib, ... }:
+{ pkgs, ... }:

 {
  # use flakes
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];

  # configure bootloader
  boot.loader.systemd-boot.enable = false;
@@ -60,7 +63,8 @@

    windowManager.qtile = {
      enable = true;
-      extraPackages = python3Packages: with python3Packages; [
+      extraPackages =
+        python3Packages: with python3Packages; [
          qtile-extras
        ];
    };
@@ -97,7 +101,10 @@
    autosuggestions.enable = true;
    ohMyZsh = {
      enable = true;
-      plugins = [ "git" "sudo" ];
+      plugins = [
+        "git"
+        "sudo"
+      ];
      theme = "agnoster";
    };
  };
@@ -130,4 +137,3 @@
  # install state version
  system.stateVersion = "25.05"; # Don't change
 }
-
@@ -1,35 +1,55 @@
 # 0x29a nixos hardware configuration

-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:

 {
-  imports =
-    [ (modulesPath + "/profiles/qemu-guest.nix")
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
  ];

  # boot and initrd configs
-  boot.initrd.availableKernelModules = [ "uhci_hcd" "ehci_pci" "ahci" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
-  boot.initrd.kernelModules = [ "dm-snapshot" "cryptd" ];
+  boot.initrd.availableKernelModules = [
+    "uhci_hcd"
+    "ehci_pci"
+    "ahci"
+    "virtio_pci"
+    "virtio_scsi"
+    "sd_mod"
+    "sr_mod"
+  ];
+  boot.initrd.kernelModules = [
+    "dm-snapshot"
+    "cryptd"
+  ];
  boot.kernelModules = [ ];
  boot.extraModulePackages = [ ];
  boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-label/nixcrypt";

  # file systems
-  fileSystems."/" =
-    { device = "/dev/disk/by-label/nixroot";
+  fileSystems."/" = {
+    device = "/dev/disk/by-label/nixroot";
    fsType = "ext4";
  };
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-label/nixboot";
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-label/nixboot";
    fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
+    options = [
+      "fmask=0022"
+      "dmask=0022"
+    ];
  };
-  fileSystems."/home" =
-    { device = "/dev/disk/by-label/nixhome";
+  fileSystems."/home" = {
+    device = "/dev/disk/by-label/nixhome";
    fsType = "ext4";
  };
-  swapDevices =
-    [ { device = "/dev/disk/by-label/nixswap"; }
+  swapDevices = [
+    { device = "/dev/disk/by-label/nixswap"; }
  ];

  # enable dhcp on all interfaces
@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ pkgs, ... }:

 {
  # user config
@@ -29,7 +29,6 @@
    iotop
    iftop
    strace
-    ltrace
    lsof
    sysstat
    lm_sensors
@@ -51,12 +50,16 @@
    syntaxHighlighting.enable = true;
    oh-my-zsh = {
      enable = true;
-      plugins = [ "git" "sudo" "python" "ansible" ];
+      plugins = [
+        "git"
+        "sudo"
+        "python"
+        "ansible"
+      ];
      theme = "agnoster";
    };
  };

-
  ## deploy qtile config
  #home.file."qtile-config" = {
  #  target = ".config/qtile/config.py";
@@ -1,7 +1,7 @@
-{ config, pkgs, inputs, ... }:
-
 {
  imports = [
+    ../../modules/nixos/appimage.nix
+    ../../modules/nixos/astro.nix
    ../../modules/nixos/audio.nix
    ../../modules/nixos/bootloader.nix
    ../../modules/nixos/certificates.nix
@@ -13,17 +13,18 @@
    ../../modules/nixos/noctalia.nix
    ../../modules/nixos/openssh.nix
    ../../modules/nixos/packages.nix
+    ../../modules/nixos/protonvpn.nix
    ../../modules/nixos/sddm.nix
    ../../modules/nixos/services.nix
    ../../modules/nixos/settings.nix
    ../../modules/nixos/steam.nix
    ../../modules/nixos/users.nix
+    ../../modules/nixos/vial.nix
  ];

-  # set hostname
+  # host-specific niri config (input devices, laptop binds)
+  home-manager.users.aaron.imports = [ ./niri.nix ];
+
  networking.hostName = "neon";
-
-  # install state version
-  system.stateVersion = "25.11"; # Don't change
+  system.stateVersion = "25.11"; # don't change
 }
-
@@ -1,38 +1,56 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:

 {
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
  ];

-  boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "usb_storage" "sd_mod" "rtsx_pci_sdmmc" ];
-  boot.initrd.kernelModules = [ "dm-snapshot" "cryptd" ];
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "nvme"
+    "usb_storage"
+    "sd_mod"
+    "rtsx_pci_sdmmc"
+  ];
+  boot.initrd.kernelModules = [
+    "dm-snapshot"
+    "cryptd"
+  ];
  boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-label/nixcrypt";

  boot.kernelModules = [ "kvm-intel" ];
  boot.extraModulePackages = [ ];

-  fileSystems."/" =
-    { device = "/dev/disk/by-label/nixroot";
+  fileSystems."/" = {
+    device = "/dev/disk/by-label/nixroot";
    fsType = "ext4";
  };

-  fileSystems."/boot" =
-    { device = "/dev/disk/by-label/nixboot";
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-label/nixboot";
    fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
+    options = [
+      "fmask=0022"
+      "dmask=0022"
+    ];
  };

-  fileSystems."/home" =
-    { device = "/dev/disk/by-label/nixhome";
+  fileSystems."/home" = {
+    device = "/dev/disk/by-label/nixhome";
    fsType = "ext4";
  };

-  swapDevices =
-    [ { device = "/dev/disk/by-label/nixswap"; }
+  swapDevices = [
+    { device = "/dev/disk/by-label/nixswap"; }
  ];

  networking.useDHCP = lib.mkDefault true;
@@ -0,0 +1,24 @@
+# neon: laptop, the built-in display is auto-configured by niri
+
+{ lib, ... }:
+
+{
+  wayland.windowManager.niri.settings = {
+    input.touchpad = {
+      tap = { };
+      natural-scroll = { };
+    };
+
+    layout.gaps = lib.mkForce 10;
+
+    binds = {
+      "Print".screenshot = { };
+      "Ctrl+Print".screenshot-screen = { };
+      "Mod+Shift+P".power-off-monitors = { };
+
+      # finer brightness steps
+      "XF86MonBrightnessUp".spawn-sh = lib.mkForce "brightnessctl --class=backlight set +1%";
+      "XF86MonBrightnessDown".spawn-sh = lib.mkForce "brightnessctl --class=backlight set 1%-";
+    };
+  };
+}
@@ -1,4 +1,4 @@
-{ config, pkgs, inputs, ... }:
+{ pkgs, ... }:

 {
  # user fonts
@@ -1,5 +1,3 @@
-{ config, pkgs, inputs, ... }:
-
 {
  programs.ghostty = {
    enable = true;
@@ -1,17 +1,41 @@
-{ config, pkgs, inputs, ... }:
+# Commits are signed with each machine's ~/.ssh/id_ed25519 through the ssh
+# agent. gitea verifies them against the account keys; allowed_signers gives
+# the local git the same trust, so `git log --show-signature` resolves too.

 {
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+let
+  email = "aaron@0x29a.ch";
+  signingKeys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHRhwzo1oxaT3fEySSmILKNnu9v30cfjx5G7FKpmfqeX aaron@argon"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGDkhvvTUcBSQdtXjX+Mw2Bp8HHhtiBm8aJi4ZxiBgZR aaron@neon"
+  ];
+in
+{
+  xdg.configFile."git/allowed_signers".text = lib.concatMapStrings (
+    key: "${email} ${key}\n"
+  ) signingKeys;
+
  programs.git = {
    enable = true;
    settings = {
-      push = { autoSetupRemote = true; };
+      push.autoSetupRemote = true;
      user = {
        name = "aaron";
-        email = "aaron@0x29a.ch";
+        inherit email;
      };
+      gpg.ssh.allowedSignersFile = "${config.xdg.configHome}/git/allowed_signers";
    };
    signing = {
-      key = "7A830180A05DAC59CDE43B0677D2F5DB48184456";
+      format = "ssh";
+      # the public key makes ssh-keygen sign through the agent
+      key = "${config.home.homeDirectory}/.ssh/id_ed25519.pub";
+      signer = "${pkgs.openssh}/bin/ssh-keygen";
      signByDefault = true;
    };
  };
@@ -0,0 +1,270 @@
+# Only renders ~/.config/niri/config.kdl; niri itself, its session and portals
+# come from modules/nixos/niri.nix. Outputs and input devices that differ
+# per machine live in hosts/<host>/niri.nix.
+
+{ lib, osConfig, ... }:
+
+let
+  # Mod+1..9 focus a workspace, Mod+Ctrl+1..9 move the column there
+  workspaceBinds = lib.mergeAttrsList (
+    map (n: {
+      "Mod+${toString n}".focus-workspace = n;
+      "Mod+Ctrl+${toString n}".move-column-to-workspace = n;
+    }) (lib.range 1 9)
+  );
+
+  # shell command that also works on the lock screen
+  lockedSh = cmd: {
+    _props.allow-when-locked = true;
+    spawn-sh = cmd;
+  };
+in
+{
+  wayland.windowManager.niri = {
+    # only on hosts that run niri
+    enable = osConfig.programs.niri.enable;
+
+    # validate the config against the installed niri
+    package = osConfig.programs.niri.package;
+    systemd.enable = false;
+    portalPackage = null;
+    xwaylandSatellitePackage = null; # installed system-wide
+
+    settings = {
+      input = {
+        keyboard = {
+          xkb.layout = "ch";
+          numlock = { };
+        };
+        mouse = {
+          natural-scroll = { };
+          accel-speed = 0.5;
+          scroll-method = "no-scroll";
+        };
+      };
+
+      environment.GTK_IM_MODULE = "simple";
+
+      layout = {
+        gaps = 16;
+        center-focused-column = "never";
+
+        preset-column-widths._children = [
+          { proportion = 0.33333; }
+          { proportion = 0.5; }
+          { proportion = 0.66667; }
+          { fixed = 2560; }
+        ];
+
+        default-column-width.proportion = 0.5;
+
+        focus-ring = {
+          on = { };
+          width = 2;
+          active-color = "#4c566a";
+          inactive-color = "#2e3440";
+          urgent-color = "#a3be8c";
+        };
+
+        border.off = { };
+
+        shadow = {
+          on = { };
+          draw-behind-window = true;
+          softness = 30;
+          spread = 10;
+          offset._props = {
+            x = 0;
+            y = 5;
+          };
+          color = "#0007";
+        };
+      };
+
+      spawn-at-startup = "noctalia";
+
+      hotkey-overlay.skip-at-startup = { };
+
+      screenshot-path = "~/Pictures/Screenshots/Screenshot from %Y-%m-%d %H-%M-%S.png";
+
+      _children = [
+        # Open the Firefox picture-in-picture player as floating by default.
+        {
+          window-rule._children = [
+            {
+              match._props = {
+                app-id = "firefox$";
+                title = "^Picture-in-Picture$";
+              };
+            }
+            { open-floating = true; }
+          ];
+        }
+        # Block out the password manager from screen capture.
+        {
+          window-rule._children = [
+            { match._props.app-id = "^org\\.keepassxc\\.KeePassXC$"; }
+            { block-out-from = "screen-capture"; }
+          ];
+        }
+        {
+          window-rule = {
+            geometry-corner-radius = 12;
+            clip-to-geometry = true;
+          };
+        }
+      ];
+
+      binds = workspaceBinds // {
+        # programs: terminal, app launcher, screen locker
+        "Mod+Return" = {
+          _props.hotkey-overlay-title = "Open a Terminal";
+          spawn = "ghostty";
+        };
+        "Mod+D" = {
+          _props.hotkey-overlay-title = "Run an Application";
+          spawn-sh = "noctalia msg panel-toggle launcher";
+        };
+        "Super+Alt+L" = {
+          _props.hotkey-overlay-title = "Lock the Screen";
+          spawn-sh = "noctalia msg session lock";
+        };
+
+        # media keys (PipeWire / WirePlumber)
+        "XF86AudioRaiseVolume" = lockedSh "wpctl set-volume @DEFAULT_SINK@ 0.01+ -l 1.0";
+        "XF86AudioLowerVolume" = lockedSh "wpctl set-volume @DEFAULT_SINK@ 0.01-";
+        "XF86AudioMute" = lockedSh "wpctl set-mute @DEFAULT_SINK@ toggle";
+        "XF86AudioMicMute" = lockedSh "wpctl set-mute @DEFAULT_SOURCE@ toggle";
+        "XF86AudioPlay" = lockedSh "playerctl play-pause";
+        "XF86AudioStop" = lockedSh "playerctl stop";
+        "XF86AudioPrev" = lockedSh "playerctl previous";
+        "XF86AudioNext" = lockedSh "playerctl next";
+        "XF86MonBrightnessUp" = lockedSh "brightnessctl --class=backlight set +10%";
+        "XF86MonBrightnessDown" = lockedSh "brightnessctl --class=backlight set 10%-";
+
+        "Mod+O" = {
+          _props.repeat = false;
+          toggle-overview = { };
+        };
+        "Mod+Q" = {
+          _props.repeat = false;
+          close-window = { };
+        };
+
+        # focus / move columns and windows
+        "Mod+Left".focus-column-left = { };
+        "Mod+Down".focus-window-down = { };
+        "Mod+Up".focus-window-up = { };
+        "Mod+Right".focus-column-right = { };
+        "Mod+H".focus-column-left = { };
+        "Mod+J".focus-window-down = { };
+        "Mod+K".focus-window-up = { };
+        "Mod+L".focus-column-right = { };
+
+        "Mod+Shift+Left".move-column-left = { };
+        "Mod+Shift+Down".move-window-down = { };
+        "Mod+Shift+Up".move-window-up = { };
+        "Mod+Shift+Right".move-column-right = { };
+        "Mod+Shift+H".move-column-left = { };
+        "Mod+Shift+J".move-window-down = { };
+        "Mod+Shift+K".move-window-up = { };
+        "Mod+Shift+L".move-column-right = { };
+
+        "Mod+Home".focus-column-first = { };
+        "Mod+End".focus-column-last = { };
+        "Mod+Ctrl+Home".move-column-to-first = { };
+        "Mod+Ctrl+End".move-column-to-last = { };
+
+        # move columns between monitors
+        "Mod+Ctrl+Left".move-column-to-monitor-left = { };
+        "Mod+Ctrl+Down".move-column-to-monitor-down = { };
+        "Mod+Ctrl+Up".move-column-to-monitor-up = { };
+        "Mod+Ctrl+Right".move-column-to-monitor-right = { };
+        "Mod+Ctrl+H".move-column-to-monitor-left = { };
+        "Mod+Ctrl+J".move-column-to-monitor-down = { };
+        "Mod+Ctrl+K".move-column-to-monitor-up = { };
+        "Mod+Ctrl+L".move-column-to-monitor-right = { };
+
+        # workspaces
+        "Mod+Page_Down".focus-workspace-down = { };
+        "Mod+Page_Up".focus-workspace-up = { };
+        "Mod+U".focus-workspace-down = { };
+        "Mod+I".focus-workspace-up = { };
+        "Mod+Ctrl+Page_Down".move-column-to-workspace-down = { };
+        "Mod+Ctrl+Page_Up".move-column-to-workspace-up = { };
+        "Mod+Ctrl+U".move-column-to-workspace-down = { };
+        "Mod+Ctrl+I".move-column-to-workspace-up = { };
+
+        "Mod+Shift+Page_Down".move-workspace-down = { };
+        "Mod+Shift+Page_Up".move-workspace-up = { };
+        "Mod+Shift+U".move-workspace-down = { };
+        "Mod+Shift+I".move-workspace-up = { };
+
+        # mouse wheel
+        "Mod+WheelScrollDown" = {
+          _props.cooldown-ms = 150;
+          focus-workspace-down = { };
+        };
+        "Mod+WheelScrollUp" = {
+          _props.cooldown-ms = 150;
+          focus-workspace-up = { };
+        };
+        "Mod+Ctrl+WheelScrollDown" = {
+          _props.cooldown-ms = 150;
+          move-column-to-workspace-down = { };
+        };
+        "Mod+Ctrl+WheelScrollUp" = {
+          _props.cooldown-ms = 150;
+          move-column-to-workspace-up = { };
+        };
+
+        "Mod+WheelScrollRight".focus-column-right = { };
+        "Mod+WheelScrollLeft".focus-column-left = { };
+        "Mod+Ctrl+WheelScrollRight".move-column-right = { };
+        "Mod+Ctrl+WheelScrollLeft".move-column-left = { };
+
+        "Mod+Shift+WheelScrollDown".focus-column-right = { };
+        "Mod+Shift+WheelScrollUp".focus-column-left = { };
+        "Mod+Ctrl+Shift+WheelScrollDown".move-column-right = { };
+        "Mod+Ctrl+Shift+WheelScrollUp".move-column-left = { };
+
+        # columns
+        "Mod+BracketLeft".consume-or-expel-window-left = { };
+        "Mod+BracketRight".consume-or-expel-window-right = { };
+        "Mod+Comma".consume-window-into-column = { };
+        "Mod+Period".expel-window-from-column = { };
+
+        "Mod+R".switch-preset-column-width = { };
+        "Mod+Shift+R".switch-preset-window-height = { };
+        "Mod+Ctrl+R".reset-window-height = { };
+        "Mod+F".maximize-column = { };
+        "Mod+Shift+F".fullscreen-window = { };
+        "Mod+Ctrl+F".expand-column-to-available-width = { };
+
+        "Mod+C".center-column = { };
+        "Mod+Ctrl+C".center-visible-columns = { };
+
+        "Mod+Minus".set-column-width = "-10%";
+        "Mod+Equal".set-column-width = "+10%";
+        "Mod+Shift+Minus".set-window-height = "-10%";
+        "Mod+Shift+Equal".set-window-height = "+10%";
+
+        "Mod+Space".toggle-window-floating = { };
+        "Mod+Shift+Space".switch-focus-between-floating-and-tiling = { };
+        "Mod+W".toggle-column-tabbed-display = { };
+
+        # screenshots
+        "Mod+P".screenshot = { };
+        "Alt+Print".screenshot-window = { };
+
+        # escape hatch for apps that inhibit keyboard shortcuts
+        "Mod+Escape" = {
+          _props.allow-inhibiting = false;
+          toggle-keyboard-shortcuts-inhibit = { };
+        };
+
+        "Mod+Shift+E".quit = { };
+      };
+    };
+  };
+}
@@ -1,9 +1,12 @@
-{ config, pkgs, inputs, ... }:
+{ pkgs, inputs, ... }:

 {
  programs.nixvim = {
    enable = true;

+    # same nixpkgs as the flake's `follows`, silences nixvim's pin warning
+    nixpkgs.source = inputs.nixpkgs;
+
    # set aliases
    viAlias = true;
    vimAlias = true;
@@ -61,7 +64,11 @@
    };
    plugins.treesitter = {
      enable = true;
-      settings.ensure_installed = [ "markdown" "markdown_inline" "typst" ];
+      settings.ensure_installed = [
+        "markdown"
+        "markdown_inline"
+        "typst"
+      ];
    };
    plugins.typst-preview = {
      enable = true;
@@ -81,7 +88,11 @@
      enable = true;
      settings = {
        # render in normal mode, raw source in insert
-        render_modes = [ "n" "c" "t"];
+        render_modes = [
+          "n"
+          "c"
+          "t"
+        ];
        pipe_table.preset = "round";
        heading.width = "block";
        file_types = [ "markdown" ];
@@ -90,8 +101,6 @@
    };
  };

-  # install dependencies
-  home.packages = with pkgs; [
-    ripgrep
-  ];
+  # telescope live_grep
+  home.packages = [ pkgs.ripgrep ];
 }
@@ -0,0 +1,148 @@
+{ pkgs, inputs, ... }:
+
+{
+  # Noctalia v5 shell, managed via home-manager's built-in programs.noctalia module.
+  # The noctalia flake's homeModules.default is not imported: it redeclares the same
+  # options and its disabledModules path ("programs/noctalia.nix") doesn't match HM's.
+  # See https://docs.noctalia.dev/v5/getting-started/nixos/
+
+  programs.noctalia = {
+    enable = true;
+
+    # Use the package from the noctalia flake rather than nixpkgs.
+    package = inputs.noctalia.packages.${pkgs.stdenv.hostPlatform.system}.default;
+
+    # settings is rendered to ~/.config/noctalia/config.toml
+    settings = {
+      # theme / colors
+      theme = {
+        source = "builtin";
+        builtin = "Nord";
+        mode = "dark";
+        templates.builtin_ids = [ "ghostty" ];
+      };
+
+      # general
+      shell = {
+        font_family = "0xProto Nerd Font";
+        avatar_path = "/home/aaron/syncthing/pictures/Logo-Aaron-Totenkopf-rund-schwarz.png";
+        telemetry_enabled = false;
+        clipboard_enabled = true;
+        password_style = "random";
+
+        launcher = {
+          categories = false;
+          providers.emoji.global = false;
+        };
+
+        panel = {
+          open_near_click_control_center = true;
+          open_near_click_session = true;
+          open_near_click_wallpaper = true;
+          transparency_mode = "glass";
+        };
+
+        screen_corners = {
+          enabled = true;
+          size = 10;
+        };
+      };
+
+      # location / weather
+      location.address = "Bern";
+
+      weather = {
+        enabled = true;
+        unit = "metric";
+      };
+
+      # wallpaper
+      wallpaper = {
+        enabled = true;
+        directory = "/home/aaron/Pictures/Wallpapers";
+        fill_mode = "crop";
+        default.path = "/home/aaron/Pictures/Wallpapers/nord-theme-tower.png";
+      };
+
+      # bar layout
+      bar = {
+        order = [ "default" ];
+        default = {
+          position = "top";
+          background_opacity = 0.93;
+          font_weight = 400;
+          margin_edge = 0;
+          margin_ends = 0;
+          radius = 0;
+          scale = 1.2;
+          widget_spacing = 20;
+          start = [
+            "control-center"
+            "cpu"
+            "ram"
+            "temp"
+            "active_window"
+          ];
+          center = [ "workspaces" ];
+          end = [
+            "tray"
+            "bluetooth"
+            "notifications"
+            "volume"
+            "network"
+            "clock"
+          ];
+        };
+      };
+
+      # per-widget styling
+      widget = {
+        bluetooth.capsule = true;
+        control-center = {
+          capsule_radius = 8;
+          custom_image = "/home/aaron/syncthing/pictures/nix_flake_logo.png";
+          scale = 1.4;
+        };
+        cpu.capsule = true;
+        network = {
+          capsule = true;
+          show_label = false;
+        };
+        notifications.capsule = true;
+        ram.capsule = true;
+        temp.capsule = true;
+        volume = {
+          capsule = true;
+          show_label = false;
+        };
+      };
+
+      # idle behavior
+      idle = {
+        pre_action_fade_seconds = 5;
+        behavior_order = [
+          "screen-off"
+          "lock"
+          "lock-and-suspend"
+        ];
+        behavior = {
+          "screen-off" = {
+            action = "screen_off";
+            enabled = true;
+            timeout = 300;
+          };
+          "lock" = {
+            action = "lock";
+            enabled = true;
+            timeout = 600;
+          };
+          "lock-and-suspend" = {
+            action = "lock_and_suspend";
+            enabled = true;
+            timeout = 1800;
+          };
+        };
+      };
+    };
+  };
+}
@@ -1,4 +1,4 @@
-{ config, pkgs, inputs, ... }:
+{ config, pkgs, ... }:

 {
  # user packages
@@ -1,19 +1,26 @@
-{ config, lib, pkgs, inputs, ... }:
+# zsh with oh-my-zsh: agnoster where glyphs render, gentoo on the console.
+# Deep paths are shortened to `…/last/two` so the prompt stays on one line:
+# `%(4~|…/%2~|%~)` shows the last two components from four levels down.
+
+{ lib, ... }:

 {
-  # configure z-shell to use omz with some plugins
  programs.zsh = {
    enable = true;
    autosuggestion.enable = true;
    syntaxHighlighting.enable = true;
    oh-my-zsh = {
      enable = true;
-      # theme will be set below
-      theme = "";
-      plugins = [ "git" "ssh-agent" "gpg-agent" ];
-    };
-    # only display a fancy theme when glyphs are rendered
-    initContent = lib.mkOrder 550 ''
+      plugins = [
+        "git"
+        "ssh-agent"
+        "gpg-agent"
+      ];
+      # runs before oh-my-zsh is sourced
+      extraConfig = ''
+        # faster git status on large repositories
+        DISABLE_UNTRACKED_FILES_DIRTY=true
+
        if [[ "$TERM" == "linux" || "$TERM" == "screen" ]]; then
          ZSH_THEME="gentoo"
        else
@@ -22,7 +29,20 @@
      '';
    };

-  # set important env vars
+    # runs after oh-my-zsh, once the theme's prompt exists
+    initContent = lib.mkAfter ''
+      if [[ "$ZSH_THEME" == "agnoster" ]]; then
+        # agnoster renders prompt_dir on every prompt, so override it
+        prompt_dir() {
+          prompt_segment "$AGNOSTER_DIR_BG" "$AGNOSTER_DIR_FG" '%(4~|…/%2~|%~)'
+        }
+      else
+        # gentoo builds PROMPT once; ascii dots, the console font lacks …
+        PROMPT="''${PROMPT/\%~/%(4~|.../%2~|%~)}"
+      fi
+    '';
+  };
+
  home.sessionVariables = {
    EDITOR = "vim";
    NH_FLAKE = "/home/aaron/git/nixconfig";
@@ -1,7 +1,6 @@
-{ config, pkgs, inputs, ... }:
+{ pkgs, ... }:

 {
-  # set gtk theme
  gtk = {
    enable = true;
    theme = {
@@ -13,7 +12,6 @@
    gtk4.extraConfig.gtk-application-prefer-dark-theme = 1;
  };

-  # set qt theme
  qt = {
    enable = true;
    platformTheme.name = "qt6";
@@ -22,10 +20,4 @@
      package = pkgs.adwaita-qt;
    };
  };
-
-  # ensure packages are installed
-  home.packages = with pkgs; [
-    gnome-themes-extra
-    adwaita-qt
-  ];
 }
@@ -1,60 +1,95 @@
-{ config, pkgs, inputs, ... }:
+# Nord-style status line built natively, no theme plugin.
+# The powerline separators (U+E0B0..U+E0B3) are written as escapes via
+# fromJSON: literal private-use glyphs get stripped silently on copy/paste.
+# Commas inside #{?...} separate arguments, hence the escaped `#,` below.

+let
+  sep = builtins.fromJSON ''
+    {
+      "right":     "",
+      "rightThin": "",
+      "left":      "",
+      "leftThin":  ""
+    }
+  '';
+in
 {
  programs.tmux = {
    enable = true;
    prefix = "C-a";
    keyMode = "vi";
    mouse = true;
-    terminal = "screen-256color";
+    terminal = "tmux-256color"; # truecolor, italics and undercurl in nvim
+    escapeTime = 10; # the 500ms default lags leaving insert mode in nvim
+    focusEvents = true; # nvim autoread
+    historyLimit = 50000;
+    baseIndex = 1; # window numbers match the number row
+
    extraConfig = ''
-      # Status keys
      set -g status-keys vi
+
+      # outer terminal does 24-bit colour
+      set -sa terminal-features ",*:RGB"
+
+      # forward Shift+Enter and other extended keys as CSI-u (tmux >= 3.5)
+      set -s extended-keys always
+      set -s extended-keys-format csi-u
+      set -as terminal-features '*:extkeys'
+
      # Status bar options
-      set -g status-interval 1
-      set -g status on
+      set -g status-interval 5
      set -g status-justify left
+
      # Clock mode
      setw -g clock-mode-colour cyan
+
      # Colors
      set -g status-bg black
      set -g status-fg white
+
      # Key bindings
-      # Reload configuration 
-      bind r source-file ~/.config/tmux/tmux.conf
-      # Panel split and selection
+      bind r source-file ~/.config/tmux/tmux.conf \; display-message "tmux.conf reloaded"
+
+      # Panel split and selection, new panes/windows inherit the cwd
      unbind %
      unbind '"'
-      bind v split-window -v
-      bind c split-window -h
-      bind i new-window
-      bind b previous-window
-      bind n next-window
+      bind v split-window -v -c "#{pane_current_path}"
+      bind c split-window -h -c "#{pane_current_path}"
+      bind i new-window -c "#{pane_current_path}"
+      bind -r b previous-window
+      bind -r n next-window
+
      # Move around panes with hjkl
      bind h select-pane -L
      bind j select-pane -D
      bind k select-pane -U
      bind l select-pane -R
+
      # Resize panes
-      bind H resize-pane -L 5
-      bind J resize-pane -D 5
-      bind K resize-pane -U 5
-      bind L resize-pane -R 5
-      # Wayland clipboard integration
-      # Copy selection to both clipboard (Ctrl+V / Shift+Insert) and primary (middle-click)
+      bind -r H resize-pane -L 5
+      bind -r J resize-pane -D 5
+      bind -r K resize-pane -U 5
+      bind -r L resize-pane -R 5
+
+      # copy to both the clipboard and primary selection
+      bind -T copy-mode-vi v send-keys -X begin-selection
+      bind -T copy-mode-vi C-v send-keys -X rectangle-toggle
      bind -T copy-mode-vi y send-keys -X copy-pipe-and-cancel "wl-copy && wl-copy --primary"
      bind -T copy-mode-vi Enter send-keys -X copy-pipe-and-cancel "wl-copy && wl-copy --primary"
      bind -T copy-mode-vi MouseDragEnd1Pane send-keys -X copy-pipe-and-cancel "wl-copy && wl-copy --primary"
+
      # Kill commands
-      bind q kill-window
-      bind Q kill-session
+      bind q confirm-before -p "kill window #W? (y/n)" kill-window
+      bind Q confirm-before -p "kill session #S? (y/n)" kill-session
+
      # Bars
      set -g status-left-length 24
-      set -g status-left "#[fg=black,bg=blue,bold] #{=20:session_name} #[fg=blue,bg=black,nobold,noitalics,nounderscore]"
-      set -g status-right "#{prefix_highlight}#[fg=brightblack,bg=black,nobold,noitalics,nounderscore]#[fg=white,bg=brightblack] %Y-%m-%d #[fg=white,bg=brightblack,nobold,noitalics,nounderscore]#[fg=white,bg=brightblack] %H:%M #[fg=cyan,bg=brightblack,nobold,noitalics,nounderscore]#[fg=black,bg=cyan,bold] #H "
+      set -g status-left "#[fg=black,bg=blue,bold] #{=20:session_name} #[fg=blue,bg=black,nobold,noitalics,nounderscore]${sep.right}"
+      set -g status-right "#{?client_prefix,#[fg=black#,bg=yellow#,bold] ^A ,}#[fg=brightblack,bg=black,nobold,noitalics,nounderscore]${sep.left}#[fg=white,bg=brightblack] %Y-%m-%d #[fg=white,bg=brightblack,nobold,noitalics,nounderscore]${sep.leftThin}#[fg=white,bg=brightblack] %H:%M #[fg=cyan,bg=brightblack,nobold,noitalics,nounderscore]${sep.left}#[fg=black,bg=cyan,bold] #H "
+
      # Windows
-      set -g window-status-format "#[fg=black,bg=brightblack,nobold,noitalics,nounderscore] #[fg=white,bg=brightblack]#I #[fg=white,bg=brightblack,nobold,noitalics,nounderscore] #[fg=white,bg=brightblack]#W #F #[fg=brightblack,bg=black,nobold,noitalics,nounderscore]"
-      set -g window-status-current-format "#[fg=black,bg=cyan,nobold,noitalics,nounderscore] #[fg=black,bg=cyan]#I #[fg=black,bg=cyan,nobold,noitalics,nounderscore] #[fg=black,bg=cyan]#W #F #[fg=cyan,bg=black,nobold,noitalics,nounderscore]"
+      set -g window-status-format "#[fg=black,bg=brightblack,nobold,noitalics,nounderscore]${sep.right} #[fg=white,bg=brightblack]#I #[fg=white,bg=brightblack,nobold,noitalics,nounderscore]${sep.rightThin} #[fg=white,bg=brightblack]#W #F #[fg=brightblack,bg=black,nobold,noitalics,nounderscore]${sep.right}"
+      set -g window-status-current-format "#[fg=black,bg=cyan,nobold,noitalics,nounderscore]${sep.right} #[fg=black,bg=cyan]#I #[fg=black,bg=cyan,nobold,noitalics,nounderscore]${sep.rightThin} #[fg=black,bg=cyan]#W #F #[fg=cyan,bg=black,nobold,noitalics,nounderscore]${sep.right}"
      set -g window-status-separator ""
    '';
  };
@@ -0,0 +1,10 @@
+# Running an AppImage directly fails on NixOS: its runtime dlopens
+# libfuse.so.2, which nix-ld doesn't cover. appimage-run unpacks the image
+# into an FHS sandbox instead. Used for the BitBox02 wallet from bitbox.swiss.
+
+{
+  programs.appimage = {
+    enable = true;
+    binfmt = true; # ./Something.AppImage runs without the appimage-run prefix
+  };
+}
@@ -0,0 +1,72 @@
+# Stellarium for target finding, Siril for stacking.
+#
+# Siril's python plugins run in a venv of foreign manylinux wheels (numpy,
+# PyQt6, ...), dlopened by nixpkgs python, so nix-ld doesn't help. The wrapper
+# puts their libs on LD_LIBRARY_PATH, a python on PATH to bootstrap the venv,
+# and adwaita-qt6 on QT_PLUGIN_PATH so the dark style override resolves.
+# The python comes from /etc/siril/bin, a stable symlink: a /nix/store path
+# would leave the venv dangling after the next python bump and gc.
+#
+# StarNet++ has no package: unzip the v2 ORT cli build from starnetastro.com
+# to ~/.local/share/siril/starnet/ and point Siril's preferences at ./starnet2.
+# It runs through nix-ld and finds its own libs in the bundled ./lib.
+
+{ lib, pkgs, ... }:
+
+let
+  sirilWithPlugins = pkgs.symlinkJoin {
+    name = "siril-with-plugins";
+    paths = [ pkgs.siril ];
+    nativeBuildInputs = [ pkgs.makeWrapper ];
+    postBuild = ''
+      wrapProgram $out/bin/siril \
+        --prefix PATH : /etc/siril/bin \
+        --prefix QT_PLUGIN_PATH : ${pkgs.adwaita-qt6}/lib/qt-6/plugins \
+        --prefix LD_LIBRARY_PATH : ${
+          lib.makeLibraryPath (
+            with pkgs;
+            [
+              stdenv.cc.cc.lib # libstdc++, libgcc_s, libgomp (numpy)
+              zlib
+              zstd # PyQt6
+              libGL # PyQt6
+              # Qt needs these even on wayland
+              glib
+              fontconfig
+              freetype
+              dbus
+              libxkbcommon
+              # Qt platform plugins: wayland, and the xcb fallback
+              wayland
+              libxcb-cursor
+              libx11
+              libxcb
+              libxcb-util
+              libxcb-wm
+              libxcb-image
+              libxcb-keysyms
+              libxcb-render-util
+            ]
+          )
+        }
+    '';
+  };
+in
+{
+  environment.systemPackages = [
+    pkgs.stellarium
+    sirilWithPlugins
+  ];
+
+  # same python siril propagates, so sirilpy's abi matches
+  environment.etc."siril/bin/python3".source = "${pkgs.python3}/bin/python3";
+
+  # for StarNet++
+  programs.nix-ld = {
+    enable = true;
+    libraries = with pkgs; [
+      stdenv.cc.cc.lib
+      zlib
+    ];
+  };
+}
@@ -1,5 +1,3 @@
-{ config, lib, pkgs, ... }:
-
 {
  # enable sound through pipewire
  services.pipewire = {
@@ -1,4 +1,4 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:

 {
  # set bootloader to systemd
@@ -17,10 +17,19 @@
  };

  # kernel options
-  boot.kernelParams = [ "quiet" "acpi.debug_level=0"];
+  boot.kernelParams = [
+    "quiet"
+    "acpi.debug_level=0"
+  ];
  boot.kernelPackages = pkgs.linuxPackages_latest;
  boot.consoleLogLevel = 2;

+  # /tmp in RAM, nix builds go to /var/tmp instead (see settings.nix)
+  boot.tmp = {
+    useTmpfs = true;
+    tmpfsSize = "50%";
+  };
+
  # Add boot-related packages
  environment.systemPackages = with pkgs; [
    efibootmgr
@@ -1,8 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  # install calibre for ebook management and kobo syncing
-  environment.systemPackages = with pkgs; [
-    calibre
-  ];
-}
@@ -1,5 +1,3 @@
-{ config, lib, pkgs, ... }:
-
 let
  caddyRootCA = ''
    -----BEGIN CERTIFICATE-----
@@ -1,7 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  environment.systemPackages = with pkgs; [
-    claude-code
-  ];
-}
@@ -1,26 +1,15 @@
-{ config, lib, pkgs, ...}:
-
 {
-  # add docker group to user
-  users.users.aaron.extraGroups = [ "docker" ];
-
-  virtualisation.docker = {
-    enable = true;
-    # Customize Docker daemon settings
-    daemon.settings = {
-      dns = [ "1.1.1.1" "8.8.8.8" ];
-      log-driver = "journald";
-      registry-mirrors = [ "https://mirror.gcr.io" ];
-      storage-driver = "overlay2";
-    };
-    # Use the rootless mode
-    rootless = {
+  # rootless only: no root daemon and no root-equivalent docker group
+  virtualisation.docker.rootless = {
    enable = true;
    setSocketVariable = true;
-    };
-    # Install docker-compose
-    extraPackages = with pkgs; [
-      docker-compose
+    daemon.settings = {
+      dns = [
+        "1.1.1.1"
+        "8.8.8.8"
      ];
+      log-driver = "journald";
+      registry-mirrors = [ "https://mirror.gcr.io" ];
+    };
  };
 }
@@ -1,47 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-# Add encrypted drives to argon
-
-{
-  # copy keyfiles into initrd to make them available during early boot
-  boot.initrd.secrets = {
-    "/etc/nixos/keys/data1.key" = "/etc/nixos/keys/data1.key";
-    "/etc/nixos/keys/data2.key" = "/etc/nixos/keys/data2.key";
-    "/etc/nixos/keys/nvmecache.key" = "/etc/nixos/keys/nvmecache.key";
-  };
-
-  # decrypt data drives with keyfiles for argon
-  boot.initrd.luks.devices = {
-    "data1" = {
-      device = "/dev/disk/by-uuid/dfae62cc-bad1-4879-bf9a-461bde833625";
-      keyFile = "/etc/nixos/keys/data1.key";
-    };
-    "data2" = {
-      device = "/dev/disk/by-uuid/8312edae-9247-481b-a313-52a7f848f027";
-      keyFile = "/etc/nixos/keys/data2.key";
-    };
-    "nvmecache" = {
-      device = "/dev/disk/by-uuid/2352250e-4ebe-4f9a-bf66-0d4aaa961bd8";
-      keyFile = "/etc/nixos/keys/nvmecache.key";
-    };
-  };
-
-  # mount decrypted filesystems
-  fileSystems."/mnt/data1" = {
-    device = "/dev/mapper/data1";
-    fsType = "ext4";
-    options = [ "nofail" ];
-  };
-
-  fileSystems."/mnt/data2" = {
-    device = "/dev/mapper/data2";
-    fsType = "ext4";
-    options = [ "nofail" ];
-  };
-
-  fileSystems."/mnt/nvmecache" = {
-    device = "/dev/mapper/nvmecache";
-    fsType = "ext4";
-    options = [ "nofail" ];
-  };
-}
@@ -1,15 +1,26 @@
-{ config, lib, pkgs, ... }:
+# A graphical pinentry never grabs the tty, so a passphrase prompt can't take
+# over a terminal driven by a coding agent. The cache lasts a working day, and
+# an unattended signature fails after two minutes instead of blocking forever.
+
+{ config, pkgs, ... }:

 {
-  # enable gnupg agent
  programs.gnupg.agent = {
    enable = true;
-    enableSSHSupport = true;
-    pinentryPackage = pkgs.pinentry-curses;
+    pinentryPackage = pkgs.pinentry-qt;
+    settings = {
+      default-cache-ttl = 86400;
+      max-cache-ttl = 86400;
+      pinentry-timeout = 120;
+    };
  };

-  environment.systemPackages = with pkgs; [ 
-    gnupg
-    pinentry-curses
+  environment.systemPackages = [
+    pkgs.pinentry-curses # fallback for sessions without a display
+    # prime the passphrase cache on demand, e.g. before an agent session
+    (pkgs.writeShellScriptBin "gpg-unlock" ''
+      echo | ${config.programs.gnupg.package}/bin/gpg --clearsign --output /dev/null
+      echo "gpg key unlocked"
+    '')
  ];
 }
@@ -1,12 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  # install gnuradio companion along with it's osmocom library
-  environment.systemPackages = with pkgs; [
-    (gnuradio.override {
-      extraPackages = with gnuradio.pkgs; [ osmosdr ];
-    })
-    gqrx
-    hackrf
-  ];
-}
@@ -1,17 +0,0 @@
-{ config, lib, pkgs, ... }:
-
-{
-  # enable amd GPU acceleration (mesa, vulkan, egl)
-  hardware.graphics = {
-    enable = true;
-    enable32Bit = true;
-  };
-
-  # install amdgpu_top
-  environment.systemPackages = with pkgs; [
-    amdgpu_top
-  ];
-  
-  # add amdgpu to the initrd for plymouth
-  hardware.amdgpu.initrd.enable = true;
-}
@@ -1,4 +1,4 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:

 {
  # greetd display manager with tuigreet
@@ -1,5 +1,3 @@
-{ config, lib, pkgs, ... }:
-
 {
  # set the time zone
  time.timeZone = "Europe/Zurich";
@@ -1,20 +1,12 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:

 {
-  # user networkmanager
  networking.networkmanager.enable = true;

-  # firewall default configs
-  networking.firewall.allowedTCPPorts = [ ];
-  networking.firewall.allowedUDPPorts = [ ];
-
-  # enable wifi firmware
+  # wifi firmware and bluetooth
  hardware.enableAllFirmware = true;
-
-  # enable bluetooth
  hardware.bluetooth.enable = true;

-  # Add network-related packages
  environment.systemPackages = with pkgs; [
    wireguard-tools
    update-systemd-resolved
@@ -1,11 +1,7 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:

 {
-  # just enable and install niri
+  # compositor and session; the config itself lives in home-manager
  programs.niri.enable = true;
-
-  # Add compositor-related packages
-  environment.systemPackages = with pkgs; [
-    xwayland-satellite
-  ];
+  environment.systemPackages = [ pkgs.xwayland-satellite ];
 }
@@ -1,12 +1,14 @@
-{ config, lib, pkgs, inputs, ... }:
+{ pkgs, ... }:
+
 {
-  # install noctalia and helper packages
+  # helpers for the noctalia shell (the shell itself comes from home-manager)
  environment.systemPackages = with pkgs; [
-    inputs.noctalia.packages.${pkgs.stdenv.hostPlatform.system}.default
    adw-gtk3
-    adwaita-qt
    adwaita-qt6
    brightnessctl
+    ddcutil
    playerctl
+    wl-clipboard
+    wl-mirror
  ];
 }
@@ -1,5 +1,3 @@
-{ config, lib, pkgs, ... }:
-
 {
  # enable the openssh daemon
  services.openssh = {
@@ -1,9 +1,11 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:

 {
-  # system packages
+  # baseline tools for every host
  environment.systemPackages = with pkgs; [
    btop
+    cifs-utils
+    claude-code
    cowsay
    dnsutils
    ethtool
@@ -13,28 +15,23 @@
    imv
    iperf3
    jq
-    kdePackages.qtmultimedia
    ldns
    lm_sensors
    lsof
-    ltrace
    mtr
-    neovim
+    nfs-utils
    nh
    nix-output-monitor
    nmap
-    nvd
    p7zip
    pciutils
    socat
-    sof-firmware
    strace
    sysstat
    tree
    unzip
    usbutils
    vim
-    wl-clipboard
    wget
    which
    xz
@@ -1,13 +1,8 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:

 {
-  # protonvpn uses wireguard tunnels, which break strict reverse path filtering
-  # because packets arrive on the tunnel interface but may be routed back differently.
-  # "loose" checks that the source is routable through *any* interface (not necessarily
-  # the same one), which is sufficient for wireguard while still preventing IP spoofing.
+  # wireguard replies may leave on another interface, so strict rpfilter drops them
  networking.firewall.checkReversePath = "loose";

-  environment.systemPackages = with pkgs; [
-    proton-vpn
-  ];
+  environment.systemPackages = [ pkgs.proton-vpn ];
 }
@@ -1,25 +1,15 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:

 {
-  # enable sddm and use astronaut theme
  services.displayManager.sddm = {
    enable = true;
    wayland.enable = true;
    autoNumlock = true;
    enableHidpi = true;
    theme = "sddm-astronaut-theme";
-    settings = {
-      Theme = {
-        Current = "sddm-astronaut-theme";
-      };
-    };
-    extraPackages = with pkgs; [
-      sddm-astronaut
-    ];
+    extraPackages = [ pkgs.sddm-astronaut ]; # theme's qml dependencies
  };

-  # Make the theme available in the system path so sddm can find it
-  environment.systemPackages = with pkgs; [
-    sddm-astronaut
-  ];
+  # sddm looks for themes in the system path
+  environment.systemPackages = [ pkgs.sddm-astronaut ];
 }
@@ -1,5 +1,3 @@
-{ config, lib, pkgs, ... }:
-
 {
  # list of enabled services on the system
  services = {
@@ -1,30 +1,25 @@
-{ config, lib, pkgs, ... }:
-
 {
  nix = {
-    # nix settings
    settings = {
-      # enable flakes and nix-command
-      experimental-features = [ "nix-command" "flakes" ];
-      # auto-optimize my nix-store
-      auto-optimise-store = true;
-      # use all cores
-      max-jobs = "auto";  
-      # use all available cores per job
-      cores = 0;          
-      # add trusted substituters (binary caches)
-      substituters = [
-        "https://cache.nixos.org"
-        "https://nix-community.cachix.org"
+      experimental-features = [
+        "nix-command"
+        "flakes"
      ];
-      # add keys
-      trusted-public-keys = [
-        "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
+      auto-optimise-store = true;
+      # parallel builds, each using all cores
+      max-jobs = "auto";
+      cores = 0;
+      # cache.nixos.org is the default, these come on top
+      extra-substituters = [ "https://nix-community.cachix.org" ];
+      extra-trusted-public-keys = [
        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
      ];
+      trusted-users = [
+        "root"
+        "@wheel"
+      ];
    };

-    # enable automatic garbage collection
    gc = {
      automatic = true;
      dates = "weekly";
@@ -32,14 +27,12 @@
    };
  };

-  # allow unfree packages (steam, protonvpn, discord, etc.)
+  # build on disk, big builds would fill the /tmp tmpfs
+  systemd.services.nix-daemon.environment.TMPDIR = "/var/tmp";
+
+  # steam, protonvpn, discord, etc.
  nixpkgs.config.allowUnfree = true;

  # links /libexec from derivations to /run/current-system/sw
  environment.pathsToLink = [ "/libexec" ];
-
-  # enable home-manager globally
-  home-manager.useGlobalPkgs = true;
-  home-manager.useUserPackages = true;
-  home-manager.backupCommand = "mv -f {file} {file}.hm-bak-$(date +%Y%m%d%H%M%S)";
 }
@@ -1,20 +1,13 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:

 {
-  # enable steam and open firewall
  programs.steam = {
    enable = true;
+    # fix black screen when running under xwayland-satellite
+    package = pkgs.steam.override { extraArgs = "-system-composer"; };
    remotePlay.openFirewall = true;
    dedicatedServer.openFirewall = true;
    localNetworkGameTransfers.openFirewall = true;
-    # add proton-glorious-eggroll
-    extraCompatPackages = with pkgs; [
-      proton-ge-bin
-    ];
-  };
-
-  # fix black screen in steam when using xwayland-satellite
-  programs.steam.package = pkgs.steam.override {
-    extraArgs = "-system-composer";
+    extraCompatPackages = [ pkgs.proton-ge-bin ];
  };
 }
@@ -0,0 +1,9 @@
+{ pkgs, ... }:
+
+{
+  programs.thunar.enable = true;
+
+  # thumbnails: tumbler service plus the path it loads extensions from
+  environment.systemPackages = [ pkgs.tumbler ];
+  environment.pathsToLink = [ "share/thumbnailers" ];
+}
@@ -1,18 +1,16 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:

 {
-  # create users
  users.users.aaron = {
    isNormalUser = true;
-    group = "users";
-    extraGroups = [ "wheel" "networkmanager" "dialout" ];
+    extraGroups = [
+      "wheel"
+      "networkmanager"
+      "dialout"
+    ];
    shell = pkgs.zsh;
  };

-  # add default zsh config
-  programs.zsh = {
-    enable = true;
-    enableCompletion = true;
-    autosuggestions.enable = true;
-  };
+  # login shell; plugins and prompt are configured in home-manager
+  programs.zsh.enable = true;
 }
@@ -0,0 +1,21 @@
+# Vial keyboards (lily58 pro r2g) expose a raw HID interface that vial.rocks
+# drives over WebHID; its /dev/hidraw* node is root-only by default.
+# The rule ships as 60-vial.rules because uaccess is only applied by
+# 73-seat-late.rules, and services.udev.extraRules lands at 99, too late.
+
+{ pkgs, ... }:
+
+{
+  services.udev.packages = [
+    (pkgs.writeTextFile {
+      name = "vial-udev-rules";
+      destination = "/lib/udev/rules.d/60-vial.rules";
+      # the magic serial matches any vial board; uaccess grants the seat owner
+      text = ''
+        KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{serial}=="*vial:f64c2b3c*", TAG+="uaccess"
+      '';
+    })
+  ];
+
+  environment.systemPackages = [ pkgs.vial ];
+}
@@ -0,0 +1,8 @@
+# statix configuration (run via `lint` in the devenv)
+
+# Flat assignments like `boot.loader = ...; boot.plymouth = ...;` are the
+# preferred style in this repo, so don't ask for them to be merged.
+disabled = [ "repeated_keys" ]
+
+# Generated by nixos-generate-config, not maintained by hand.
+ignore = [ "hosts/*/hardware-configuration.nix" ]
@@ -1,11 +1,11 @@
-{ config, pkgs, ... }:
-
 {
  imports = [
    ../../modules/home-manager/fonts.nix
    ../../modules/home-manager/git.nix
    ../../modules/home-manager/ghostty.nix
    ../../modules/home-manager/nixvim.nix
+    ../../modules/home-manager/niri.nix
+    ../../modules/home-manager/noctalia.nix
    ../../modules/home-manager/programs.nix
    ../../modules/home-manager/shell.nix
    ../../modules/home-manager/styling.nix
Author	SHA1	Message	Date
aaron	6a080b2319	feature(boot): attatch /tmp to tmpfs, but keep nix build in /var/tmp	2026-10-02 16:39:53 +02:00
aaron	3e0e1d48f9	Merge pull request 'chore: repository cleanup and noctalia baseline' (#83 ) from chore/cleanup into main Reviewed-on: #83	2026-10-02 09:51:23 +02:00
aaronandClaude Opus 5.5	3fed9c1fc8	feature(noctalia): take argon's gui overrides into the config - idle: 300s screen-off, 600s lock, 5s fade, and explicit actions (without them the behaviours do nothing once settings.toml is gone) - font without Mono, launcher without categories or global emoji, control-center logo from syncthing - drop shell.ui_scale and shell.panel.launcher_compact, which v5 ignores Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-02 09:39:08 +02:00
aaronandClaude Opus 5.5	87eb1bcb72	refactor(docker): rootless only Drops the root daemon and the root-equivalent docker group; the daemon settings now apply to the rootless daemon. compose ships with the docker package. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-02 09:25:40 +02:00
aaronandClaude Opus 5.5	06b656477b	docs: move explanations into short module headers Non-obvious context sits in a brief header at the top of a module, everything else uses single-line comments. niri binds use spawn-sh strings, so neon only overrides the command. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-02 09:25:40 +02:00
aaronandClaude Opus 5.5	8d19be9527	refactor: fold host-only modules into the hosts - argon owns its gpu settings, calibre and the luks drives, now generated from one table - claudecode.nix is gone, claude-code lives in packages.nix - home-manager options live next to the home-manager wiring in flake.nix - settings.nix: one nix block, extra-substituters instead of repeating the cache.nixos.org defaults - README: current layout Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-02 09:25:40 +02:00
aaronandClaude Opus 5.5	1abb1ca6a1	chore: drop redundant packages and options - packages.nix is the baseline: drop neovim (nixvim), nvd, sof-firmware (enableAllFirmware), qtmultimedia (v4 leftover); vial moves to vial.nix, wl-clipboard to noctalia.nix, claude-code becomes a plain package here - drop packages and options already provided elsewhere: noctalia (home-manager), gnupg/pinentry-qt (agent), gtk/qt themes, sddm Theme.Current, zsh plugins (home-manager), group = users, empty firewall lists - single-package lists without `with pkgs;`, steam package inside its block Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-02 09:25:40 +02:00
aaronandClaude Opus 5.5	4633687ccb	chore: remove unused gnuradio module It isn't imported by any host and doesn't build reliably on unstable; gnuradio moves to a devenv in the projects that need it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-02 09:25:14 +02:00
aaron	99a910265f	Merge pull request 'feature(niri): configure niri via home-manager's niri module' (#82 ) from feature/niri-hm into main Reviewed-on: #82	2026-10-02 08:37:31 +02:00
aaron	5abbcb10ca	feature(devenv): update devenv	2026-10-02 08:23:28 +02:00
aaron	ea2682f31d	feature(niri): use home-managers new niri-module to configure niri on my machines with host-specific additions	2026-10-01 18:43:48 +02:00
aaron	73e17de1a1	Merge pull request 'chore: linting' (#81 ) from chore/lint into main Reviewed-on: #81	2026-10-01 11:42:15 +02:00
aaron	26473288b6	chore: ignore nixfmt reformat in git blame	2026-10-01 11:40:30 +02:00
aaron	2231d2fc3f	style: format all nix files with nixfmt	2026-10-01 11:40:12 +02:00
aaron	4ec579b1fc	chore(lint): add statix config and remove unused arguments	2026-10-01 11:40:03 +02:00
aaron	c1d11138b3	Merge pull request 'feature: pull in the latest updates, fix some errors and add a devenv for this repository' (#80 ) from chore/update into main Reviewed-on: #80	2026-10-01 11:26:12 +02:00
aaron	92b170e5e8	feature: pull in the latest updates, fix some errors and add a devenv for this repository	2026-10-01 11:20:22 +02:00
aaron	3d90a9759f	Merge pull request 'feature(wl-mirror): add wl-mirror as dependency to noctalia' (#79 ) from feature/wl-mirror into main Reviewed-on: #79	2026-09-29 20:29:06 +02:00
aaron	3b4f05a91c	feature(wl-mirror): add wl-mirror as dependency to noctalia	2026-09-29 16:05:18 +02:00
aaron	c1a7a9d085	Merge pull request 'chore(flake): update flake file' (#78 ) from chore/update into main Reviewed-on: #78	2026-09-26 17:25:11 +02:00
aaron	848af4d44b	chore(flake): update flake file	2026-09-26 17:23:47 +02:00
aaron	e61289a26e	Merge pull request 'fix(siri): add venv to the siril installation' (#77 ) from fix/siril into main Reviewed-on: #77	2026-09-20 12:51:09 +02:00
aaron	28f5f4faa9	fix(siri): add venv to the siril installation	2026-09-19 18:48:20 +02:00
aaron	1007450e19	Merge pull request 'chore: update nix flake' (#76 ) from chore/update into main Reviewed-on: #76	2026-09-15 12:49:26 +02:00
aaron	1be2731c53	chore: update nix flake	2026-09-15 12:34:30 +02:00
aaron	b8d108f173	Merge pull request 'feature(shell): shorten the path in the agnoster prompt, if it gets too long' (#75 ) from feature/shorten_shell into main Reviewed-on: #75	2026-09-14 16:47:19 +02:00
aaron	366a895a08	feature(shell): shorten the path in the agnoster prompt, if it gets too long	2026-09-14 16:46:17 +02:00
aaron	7ceef4775c	Merge pull request 'feature: move from gpg-git-commit-signing to ssh-signing' (#74 ) from feature/ssh-git-sign into main Reviewed-on: #74	2026-09-05 15:46:55 +02:00
aaron	1b9b584729	feature(gpg): add more signing-keys to the config to enable my laptop as well	2026-09-05 15:44:42 +02:00
aaron	d9d6877714	feature(gpg): move git from gpg-signing to ssh-signing	2026-09-05 15:33:05 +02:00
aaron	6704ec389c	Merge pull request 'chore(update): update flake file' (#73 ) from chore/update into main Reviewed-on: #73	2026-08-31 13:52:26 +02:00
aaron	aca9e5d7cc	chore(update): update flake file	2026-08-30 18:46:17 +02:00
aaron	2c8fbf008d	Merge pull request 'chore(update): update flake file' (#72 ) from chore/update into main Reviewed-on: #72	2026-08-20 20:53:12 +02:00
aaron	c4f1be8a38	chore(update): update flake file	2026-08-20 20:52:22 +02:00
aaron	6df7fcacbb	Merge pull request 'fix: ship a numbered udev rule file for vial since otherwise it gets overwritten by systemd's udev file' (#71 ) from feature/vial into main Reviewed-on: #71	2026-08-09 14:45:34 +02:00
aaron	bc11b464a8	fix: ship a numbered udev rule file for vial since otherwise it gets overwritten by systemd's udev file	2026-08-09 14:45:08 +02:00
aaron	0ac9b45286	Merge pull request 'feature(udev): add support for vial.rocks configurable devices and add the native app as well' (#69 ) from feature/lily58 into main Reviewed-on: #69	2026-08-09 14:27:03 +02:00
aaron	55e12b2226	Merge pull request 'feature/appimage' (#70 ) from feature/bitbox02 into main Reviewed-on: #70	2026-08-09 14:26:54 +02:00
aaron	eab8f4974e	feature(appimage): add appimage squashfs support for my nixos	2026-08-09 14:13:52 +02:00
aaron	0b1190a257	feature(appimage): add appimage squashfs support for my nixos	2026-08-09 14:13:06 +02:00
aaron	62954a67b5	feature(udev): add support for vial.rocks configurable devices and add the native app as well	2026-08-09 13:49:46 +02:00
aaron	37d44b64c1	Merge pull request 'chore(flake): update flake file' (#68 ) from chore/update into main Reviewed-on: #68	2026-08-06 16:50:04 +02:00
aaron	cb5dd91550	chore(flake): update flake file	2026-08-06 16:38:59 +02:00
aaron	fb04de1d23	Merge pull request 'feature(tmux): make tmux forward csi-u sequences thus enabling shift-enter in opencode' (#66 ) from feature/tmux into main Reviewed-on: #66	2026-07-29 10:46:47 +02:00
aaron	f41387e451	feature(tmux): make tmux forward csi-u sequences thus enabling shift-enter in opencode	2026-07-29 10:44:42 +02:00
aaron	2ae9d451f5	Merge pull request 'refactor(tmux): tidy up my old tmux config, use unicode for the seperators and backport augmentations from my at-work-config' (#65 ) from feature/tmux into main Reviewed-on: #65	2026-07-29 10:34:05 +02:00
aaron	3feb6d2367	refactor(tmux): tidy up my old tmux config, use unicode for the seperators and backport augmentations from my at-work-config	2026-07-29 10:30:33 +02:00
aaron	41fbb67fc9	Merge pull request 'fix(sleep): revert s2sleep as it introduces crashes after the wake-up of the system' (#64 ) from fix/sleep into main Reviewed-on: #64	2026-07-23 17:10:08 +02:00
aaron	b15968b004	fix(sleep): revert s2sleep as it introduces crashes after the wake-up of the system	2026-07-23 16:12:50 +02:00
aaron	274c39b213	Merge pull request 'refactor(sleep): move the s2 sleep change to argon only since s2idle would cost more battery on a laptop that s3 deep sleep' (#63 ) from fix/sleep into main Reviewed-on: #63	2026-07-23 15:08:41 +02:00
aaron	2a3c439993	refactor(sleep): move the s2 sleep change to argon only since s2idle would cost more battery on a laptop that s3 deep sleep	2026-07-23 15:08:24 +02:00
aaron	a2e9ad6035	Merge pull request 'fix(sleep): change sleep mode from s3 deep to s2 idle sleep to prevent issues woth radeon RDNA4 cards' (#62 ) from fix/sleep into main Reviewed-on: #62	2026-07-23 14:56:59 +02:00
aaron	6fdde12804	fix(sleep): change sleep mode from s3 deep to s2 idle sleep to prevent issues woth radeon RDNA4 cards	2026-07-23 14:51:55 +02:00
aaron	32291e63bb	Merge pull request 'chore(update): update flake file' (#61 ) from feature/update into main Reviewed-on: #61	2026-07-23 14:29:18 +02:00
aaron	0e681ec0e2	chore(update): update flake file	2026-07-20 22:51:44 +02:00
aaron	0ce944b327	Merge pull request 'chore(flake): update flake file' (#60 ) from feature/updates into main Reviewed-on: #60	2026-07-06 22:12:41 +02:00
aaron	046a17374b	chore(flake): update flake file	2026-07-06 21:16:24 +02:00
aaron	626015db9f	Merge pull request 'feature(packages): update and add cifs and nfs utils' (#59 ) from feature/cifs-utils into main Reviewed-on: #59	2026-06-27 19:07:21 +02:00
aaron	dfc2a1ca3a	feature(packages): add nfs-utils	2026-06-27 18:51:31 +02:00
aaron	e41d02abcc	chore(update): upgrade flake file	2026-06-27 18:36:19 +02:00
aaron	ec79afe982	feature(packages): add cifs-utils	2026-06-27 18:35:06 +02:00
aaron	536d4df5e4	Merge pull request 'feature(noctalia): add ddcutil to adjust the screens brightness' (#58 ) from feature/brightnesscontrol into main Reviewed-on: #58	2026-06-23 13:03:47 +02:00
aaron	3bd71bb5e1	feature(noctalia): add ddcutil to adjust the screens brightness	2026-06-23 13:02:19 +02:00
aaron	d7ac5923ff	Merge pull request 'feature: astrophotography toolkit' (#57 ) from feature/astro into main Reviewed-on: #57	2026-06-23 11:21:10 +02:00
aaron	dab8e42797	fix(siril): expose adwaita-qt6 style plugin for dark theme	2026-06-23 11:08:10 +02:00
aaron	cd905df8b4	fix(siril): add python3 to the siril wrapper so it sees it in its runtime path	2026-06-23 10:53:21 +02:00
aaron	c20c9c0601	chore(flake): update flake file	2026-06-22 23:20:40 +02:00
aaron	853a7cfb17	feature(neon): add claude code to neon	2026-06-22 21:51:11 +02:00
aaron	596b58fab4	fix: add gc and misc settings to neon as well	2026-06-21 00:01:16 +02:00
aaron	a58319e08d	fix: remove stellarium module from neon	2026-06-20 23:57:20 +02:00
aaron	79b24d9439	fix: add more shared objects for sirils plugins	2026-06-20 21:48:26 +02:00
aaron	b295a9a330	feature(siril): make siril plugins work by exposing shared objects	2026-06-20 18:11:34 +02:00
aaron	29db6af86b	feature(starnet): add starnet to siril to use ml models for star removal, this needs nix-ld to be enabled	2026-06-20 13:58:29 +02:00
aaron	9d7efb69ac	feature(astro): collect astrofotography tools in one module	2026-06-20 12:18:45 +02:00
aaron	bf5de3872f	Merge pull request 'chore(update): update flake file' (#56 ) from feature/updates into main Reviewed-on: #56	2026-06-16 14:44:10 +02:00
aaron	7577e39c88	feature(noctalia): update the noctalia config	2026-06-16 11:33:38 +02:00
aaron	47fb9e7f97	feature(nixvim): pin nixvim to nixpkgs to suppress the non-default warning	2026-06-15 10:54:35 +02:00
aaron	098b92ae45	feature(noctalia): use the noctialia flake to manage my noctalia config for version 5	2026-06-15 10:45:34 +02:00
aaron	b987dcf0c6	chore(update): update flake file	2026-06-14 16:49:39 +02:00
aaron	0c6c2dd71b	chore(update): update flake file	2026-06-11 16:00:09 +02:00
aaron	a329e21711	Merge pull request 'chore(update): update flake file' (#55 ) from feature/updates into main Reviewed-on: #55	2026-06-09 20:08:00 +02:00
aaron	91f3e0425b	chore(update): update flake file	2026-06-09 20:05:11 +02:00
aaron	85fa00a2e1	Merge pull request 'add stellarium app' (#54 ) from feature/stellarium into main Reviewed-on: #54	2026-06-07 18:38:32 +02:00
aaron	1d558f3f7c	feature(stellarium): add new module for stellarium	2026-06-07 18:33:29 +02:00
aaron	ddaeb1beff	Merge pull request 'updates' (#53 ) from feature/updates into main Reviewed-on: #53	2026-06-04 20:48:10 +02:00
aaron	5e3867b227	chore(update): update flake file	2026-06-04 20:47:25 +02:00
aaron	7f58c16441	Merge pull request 'omz update' (#52 ) from feautre/omz_update into main Reviewed-on: #52	2026-06-04 09:22:13 +02:00
aaron	2edc62ff13	refactor(omz): move theme selection and untracked files to extraConfig	2026-06-04 09:18:33 +02:00
aaron	27fb719555	feature(omz): add option to make omz faster on large repositories	2026-06-04 08:49:53 +02:00
aaron	5ab603b726	Merge pull request 'add thunar' (#51 ) from feature/thunar into main Reviewed-on: #51	2026-05-29 20:40:49 +02:00
aaron	a3e09d0019	fix: remove typo	2026-05-29 19:19:10 +02:00
aaron	ae895dc55f	fix: tumbler is a package rather than a programm and thus must be installed with packages	2026-05-29 19:15:40 +02:00
aaron	cb0645dd81	feature(thunar): add thunar and thumbler thumbnailer service	2026-05-29 19:06:02 +02:00
aaron	0daf4eec9a	Merge pull request 'chore(flake): update flake file to latest state' (#50 ) from feautre/update into main Reviewed-on: #50	2026-05-26 20:37:27 +02:00
aaron	59a83f550c	chore(flake): update flake file to latest state	2026-05-26 20:37:02 +02:00
aaron	6ceaf560ca	Merge pull request 'feature(gnuradio): add gnuradio-companion back to desktop since the compile error has been resolved upstream' (#49 ) from feature/add_gnuradio into main Reviewed-on: #49	2026-05-25 18:38:59 +02:00
aaron	553d748f91	feature(gnuradio): add gnuradio-companion back to desktop since the compile error has been resolved upstream	2026-05-25 18:38:16 +02:00
aaron	fac89ff665	Merge pull request 'feature/add_proton' (#48 ) from feature/add_proton into main Reviewed-on: #48	2026-05-23 15:29:39 +02:00
aaron	af42bdc7a3	feature(nix): add wheel and root to the list of trusted users	2026-05-21 11:14:55 +02:00
aaron	45ae50d7a5	chore: update flake	2026-05-19 22:26:49 +02:00
aaron	965de98adb	feature(vpn): add protonvpn to neon	2026-05-19 22:05:42 +02:00
aaron	53c39bb8f8	Merge pull request 'feautre/add_claude_code' (#47 ) from feautre/add_claude_code into main Reviewed-on: #47	2026-05-01 18:43:47 +02:00