From bc11b464a8184a43baa7c431488b84a2f8eeb115 Mon Sep 17 00:00:00 2001
From: aaron <aaron@0x29a.ch>
Date: Sun, 9 Aug 2026 14:45:08 +0200
Subject: [PATCH] fix: ship a numbered udev rule file for vial since otherwise
 it gets overwritten by systemd's udev file

---
 modules/nixos/vial.nix | 27 ++++++++++++++++++++-------
 1 file changed, 20 insertions(+), 7 deletions(-)

diff --git a/modules/nixos/vial.nix b/modules/nixos/vial.nix
index 35f9793..d66cd9d 100644
--- a/modules/nixos/vial.nix
+++ b/modules/nixos/vial.nix
@@ -3,11 +3,24 @@
 {
   # Vial-capable keyboards (lily58 pro r2g) expose a second, non-keyboard raw
   # HID interface that vial.rocks drives over WebHID. Its /dev/hidraw* node is
-  # root-only by default, so chromium cannot open the device without this rule.
-  services.udev.extraRules = ''
-    # Vial firmware advertises itself through a magic USB serial, so this
-    # matches any vial board rather than just the lily58. uaccess hands the
-    # device to whoever owns the active seat, no group membership needed.
-    KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{serial}=="*vial:f64c2b3c*", TAG+="uaccess"
-  '';
+  # root-only by default, so neither chromium nor the native app can open it.
+  #
+  # This has to ship as a numbered rules file rather than via
+  # services.udev.extraRules: extraRules lands in 99-local.rules, but the
+  # builtin that turns TAG+="uaccess" into an actual ACL is invoked from
+  # systemd's 73-seat-late.rules. A tag set at 99 is set too late to be seen,
+  # so the device ends up correctly tagged and still unreadable. 60- sorts
+  # safely ahead of 73.
+  services.udev.packages = [
+    (pkgs.writeTextFile {
+      name = "vial-udev-rules";
+      destination = "/lib/udev/rules.d/60-vial.rules";
+      # Vial firmware advertises itself through a magic USB serial, so this
+      # matches any vial board rather than just the lily58. uaccess hands the
+      # device to whoever owns the active seat, no group membership needed.
+      text = ''
+        KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{serial}=="*vial:f64c2b3c*", TAG+="uaccess"
+      '';
+    })
+  ];
 }
-- 
2.52.0