Initial Commit

.gitignore

···
+/.ignore/
+/.idea/
+
+/result

flake.lock

···
+{
+  "nodes": {
+    "crane": {
+      "locked": {
+        "lastModified": 1731098351,
+        "narHash": "sha256-HQkYvKvaLQqNa10KEFGgWHfMAbWBfFp+4cAgkut+NNE=",
+        "owner": "ipetkov",
+        "repo": "crane",
+        "rev": "ef80ead953c1b28316cc3f8613904edc2eb90c28",
+        "type": "github"
+      },
+      "original": {
+        "owner": "ipetkov",
+        "repo": "crane",
+        "type": "github"
+      }
+    },
+    "disko": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1746728054,
+        "narHash": "sha256-eDoSOhxGEm2PykZFa/x9QG5eTH0MJdiJ9aR00VAofXE=",
+        "owner": "nix-community",
+        "repo": "disko",
+        "rev": "ff442f5d1425feb86344c028298548024f21256d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "v1.12.0",
+        "repo": "disko",
+        "type": "github"
+      }
+    },
+    "firefox-addons": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "dir": "pkgs/firefox-addons",
+        "lastModified": 1754138575,
+        "narHash": "sha256-6foT7Sflve4XuLnBKkgN9b9IP4FvdoBA2XQ2IyXmbog=",
+        "owner": "rycee",
+        "repo": "nur-expressions",
+        "rev": "27c945a6450d42c62f7e41019d7931b426bb786f",
+        "type": "gitlab"
+      },
+      "original": {
+        "dir": "pkgs/firefox-addons",
+        "owner": "rycee",
+        "repo": "nur-expressions",
+        "type": "gitlab"
+      }
+    },
+    "flake-compat": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1696426674,
+        "narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=",
+        "owner": "edolstra",
+        "repo": "flake-compat",
+        "rev": "0f9255e01c2351cc7d116c072cb317785dd33b33",
+        "type": "github"
+      },
+      "original": {
+        "owner": "edolstra",
+        "repo": "flake-compat",
+        "type": "github"
+      }
+    },
+    "flake-compat_2": {
+      "locked": {
+        "lastModified": 1733328505,
+        "narHash": "sha256-NeCCThCEP3eCl2l/+27kNNK7QrwZB1IJCrXfrbv5oqU=",
+        "rev": "ff81ac966bb2cae68946d5ed5fc4994f96d0ffec",
+        "revCount": 69,
+        "type": "tarball",
+        "url": "https://api.flakehub.com/f/pinned/edolstra/flake-compat/1.1.0/01948eb7-9cba-704f-bbf3-3fa956735b52/source.tar.gz?rev=ff81ac966bb2cae68946d5ed5fc4994f96d0ffec&revCount=69"
+      },
+      "original": {
+        "type": "tarball",
+        "url": "https://flakehub.com/f/edolstra/flake-compat/1.tar.gz"
+      }
+    },
+    "flake-parts": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "lanzaboote",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1730504689,
+        "narHash": "sha256-hgmguH29K2fvs9szpq2r3pz2/8cJd2LPS+b4tfNFCwE=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "506278e768c2a08bec68eb62932193e341f55c90",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": "nixpkgs-lib"
+      },
+      "locked": {
+        "lastModified": 1754091436,
+        "narHash": "sha256-XKqDMN1/Qj1DKivQvscI4vmHfDfvYR2pfuFOJiCeewM=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "67df8c627c2c39c41dbec76a1f201929929ab0bd",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
+      "inputs": {
+        "systems": [
+          "nix-jetbrains-plugins",
+          "systems"
+        ]
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flakey-profile": {
+      "locked": {
+        "lastModified": 1712898590,
+        "narHash": "sha256-FhGIEU93VHAChKEXx905TSiPZKga69bWl1VB37FK//I=",
+        "owner": "lf-",
+        "repo": "flakey-profile",
+        "rev": "243c903fd8eadc0f63d205665a92d4df91d42d9d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "lf-",
+        "repo": "flakey-profile",
+        "type": "github"
+      }
+    },
+    "gitignore": {
+      "inputs": {
+        "nixpkgs": [
+          "lanzaboote",
+          "pre-commit-hooks-nix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1709087332,
+        "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "type": "github"
+      }
+    },
+    "home-manager": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1753592768,
+        "narHash": "sha256-oV695RvbAE4+R9pcsT9shmp6zE/+IZe6evHWX63f2Qg=",
+        "owner": "nix-community",
+        "repo": "home-manager",
+        "rev": "fc3add429f21450359369af74c2375cb34a2d204",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "release-25.05",
+        "repo": "home-manager",
+        "type": "github"
+      }
+    },
+    "lanzaboote": {
+      "inputs": {
+        "crane": "crane",
+        "flake-compat": "flake-compat",
+        "flake-parts": "flake-parts",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "pre-commit-hooks-nix": "pre-commit-hooks-nix",
+        "rust-overlay": "rust-overlay"
+      },
+      "locked": {
+        "lastModified": 1737639419,
+        "narHash": "sha256-AEEDktApTEZ5PZXNDkry2YV2k6t0dTgLPEmAZbnigXU=",
+        "owner": "nix-community",
+        "repo": "lanzaboote",
+        "rev": "a65905a09e2c43ff63be8c0e86a93712361f871e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "v0.4.2",
+        "repo": "lanzaboote",
+        "type": "github"
+      }
+    },
+    "lix": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1751235704,
+        "narHash": "sha256-J4ycLoXHPsoBoQtEXFCelL4xlq5pT8U9tNWNKm43+YI=",
+        "rev": "1d7368585eebaa2c4bdbcb88fe600cfb2239b2c6",
+        "type": "tarball",
+        "url": "https://git.lix.systems/api/v1/repos/lix-project/lix/archive/1d7368585eebaa2c4bdbcb88fe600cfb2239b2c6.tar.gz?rev=1d7368585eebaa2c4bdbcb88fe600cfb2239b2c6"
+      },
+      "original": {
+        "type": "tarball",
+        "url": "https://git.lix.systems/lix-project/lix/archive/release-2.93.tar.gz"
+      }
+    },
+    "lix-module": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "flakey-profile": "flakey-profile",
+        "lix": "lix",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1751240025,
+        "narHash": "sha256-SXUAlxpjPRkArRMHy5+Hdi+PiC+ND9yzzIjiaHmTvQU=",
+        "rev": "8b1094356f4723d6e89d3f8a95b333ee16d9ab02",
+        "type": "tarball",
+        "url": "https://git.lix.systems/api/v1/repos/lix-project/nixos-module/archive/8b1094356f4723d6e89d3f8a95b333ee16d9ab02.tar.gz?rev=8b1094356f4723d6e89d3f8a95b333ee16d9ab02"
+      },
+      "original": {
+        "type": "tarball",
+        "url": "https://git.lix.systems/lix-project/nixos-module/archive/2.93.2-1.tar.gz"
+      }
+    },
+    "niri": {
+      "inputs": {
+        "niri-stable": "niri-stable",
+        "niri-unstable": "niri-unstable",
+        "nixpkgs": "nixpkgs",
+        "nixpkgs-stable": "nixpkgs-stable_2",
+        "xwayland-satellite-stable": "xwayland-satellite-stable",
+        "xwayland-satellite-unstable": "xwayland-satellite-unstable"
+      },
+      "locked": {
+        "lastModified": 1754403288,
+        "narHash": "sha256-FdI2tV45ChVgwly2JRx1lA68gHIdZ38yyzHJeHHYTSc=",
+        "owner": "sodiboo",
+        "repo": "niri-flake",
+        "rev": "a5151e16afa09a01ef7b360d87956730d0534da7",
+        "type": "github"
+      },
+      "original": {
+        "owner": "sodiboo",
+        "repo": "niri-flake",
+        "type": "github"
+      }
+    },
+    "niri-stable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1748151941,
+        "narHash": "sha256-z4viQZLgC2bIJ3VrzQnR+q2F3gAOEQpU1H5xHtX/2fs=",
+        "owner": "YaLTeR",
+        "repo": "niri",
+        "rev": "8ba57fcf25d2fc9565131684a839d58703f1dae7",
+        "type": "github"
+      },
+      "original": {
+        "owner": "YaLTeR",
+        "ref": "v25.05.1",
+        "repo": "niri",
+        "type": "github"
+      }
+    },
+    "niri-unstable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1754400448,
+        "narHash": "sha256-tP4wYaIKlhMTzNp0S9ouU5Key0+41Z5KkjP9zO6bIQU=",
+        "owner": "YaLTeR",
+        "repo": "niri",
+        "rev": "52c579d5567d0b16ae68177fad05c612baba38af",
+        "type": "github"
+      },
+      "original": {
+        "owner": "YaLTeR",
+        "repo": "niri",
+        "type": "github"
+      }
+    },
+    "nix-jetbrains-plugins": {
+      "inputs": {
+        "flake-utils": "flake-utils_2",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1754124544,
+        "narHash": "sha256-hHU5smvvnTcSY+J5XeYfxKlUYtorazCt/hDWYbkCOBQ=",
+        "owner": "theCapypara",
+        "repo": "nix-jetbrains-plugins",
+        "rev": "a07bdf445e77f51240c0850b587f69576f5b55aa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "theCapypara",
+        "repo": "nix-jetbrains-plugins",
+        "type": "github"
+      }
+    },
+    "nixcord": {
+      "inputs": {
+        "flake-compat": "flake-compat_2",
+        "flake-parts": "flake-parts_2",
+        "nixpkgs": [
+          "nixpkgs-unstable"
+        ]
+      },
+      "locked": {
+        "lastModified": 1754382552,
+        "narHash": "sha256-ZyIpMq8PLACt+kl0pFOnAf38knBZ7bvyIJOLaQAqmvg=",
+        "owner": "kaylorben",
+        "repo": "nixcord",
+        "rev": "256184ad4a373e101232175bbe7707c622a4e24f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kaylorben",
+        "repo": "nixcord",
+        "type": "github"
+      }
+    },
+    "nixos-hardware": {
+      "locked": {
+        "lastModified": 1754316476,
+        "narHash": "sha256-Ry1gd1BQrNVJJfT11cpVP0FY8XFMx4DJV2IDp01CH9w=",
+        "owner": "NixOS",
+        "repo": "nixos-hardware",
+        "rev": "9368056b73efb46eb14fd4667b99e0f81b805f28",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "master",
+        "repo": "nixos-hardware",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1754214453,
+        "narHash": "sha256-Q/I2xJn/j1wpkGhWkQnm20nShYnG7TI99foDBpXm1SY=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "5b09dc45f24cf32316283e62aec81ffee3c3e376",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-lib": {
+      "locked": {
+        "lastModified": 1753579242,
+        "narHash": "sha256-zvaMGVn14/Zz8hnp4VWT9xVnhc8vuL3TStRqwk22biA=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "0f36c44e01a6129be94e3ade315a5883f0228a6e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "type": "github"
+      }
+    },
+    "nixpkgs-stable": {
+      "locked": {
+        "lastModified": 1730741070,
+        "narHash": "sha256-edm8WG19kWozJ/GqyYx2VjW99EdhjKwbY3ZwdlPAAlo=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "d063c1dd113c91ab27959ba540c0d9753409edf3",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-24.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-stable_2": {
+      "locked": {
+        "lastModified": 1754292888,
+        "narHash": "sha256-1ziydHSiDuSnaiPzCQh1mRFBsM2d2yRX9I+5OPGEmIE=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "ce01daebf8489ba97bd1609d185ea276efdeb121",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-25.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-unstable": {
+      "locked": {
+        "lastModified": 1754214453,
+        "narHash": "sha256-Q/I2xJn/j1wpkGhWkQnm20nShYnG7TI99foDBpXm1SY=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "5b09dc45f24cf32316283e62aec81ffee3c3e376",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1754292888,
+        "narHash": "sha256-1ziydHSiDuSnaiPzCQh1mRFBsM2d2yRX9I+5OPGEmIE=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "ce01daebf8489ba97bd1609d185ea276efdeb121",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-25.05",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "pre-commit-hooks-nix": {
+      "inputs": {
+        "flake-compat": [
+          "lanzaboote",
+          "flake-compat"
+        ],
+        "gitignore": "gitignore",
+        "nixpkgs": [
+          "lanzaboote",
+          "nixpkgs"
+        ],
+        "nixpkgs-stable": "nixpkgs-stable"
+      },
+      "locked": {
+        "lastModified": 1731363552,
+        "narHash": "sha256-vFta1uHnD29VUY4HJOO/D6p6rxyObnf+InnSMT4jlMU=",
+        "owner": "cachix",
+        "repo": "pre-commit-hooks.nix",
+        "rev": "cd1af27aa85026ac759d5d3fccf650abe7e1bbf0",
+        "type": "github"
+      },
+      "original": {
+        "owner": "cachix",
+        "repo": "pre-commit-hooks.nix",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "disko": "disko",
+        "firefox-addons": "firefox-addons",
+        "home-manager": "home-manager",
+        "lanzaboote": "lanzaboote",
+        "lix-module": "lix-module",
+        "niri": "niri",
+        "nix-jetbrains-plugins": "nix-jetbrains-plugins",
+        "nixcord": "nixcord",
+        "nixos-hardware": "nixos-hardware",
+        "nixpkgs": "nixpkgs_2",
+        "nixpkgs-unstable": "nixpkgs-unstable"
+      }
+    },
+    "rust-overlay": {
+      "inputs": {
+        "nixpkgs": [
+          "lanzaboote",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1731897198,
+        "narHash": "sha256-Ou7vLETSKwmE/HRQz4cImXXJBr/k9gp4J4z/PF8LzTE=",
+        "owner": "oxalica",
+        "repo": "rust-overlay",
+        "rev": "0be641045af6d8666c11c2c40e45ffc9667839b5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "oxalica",
+        "repo": "rust-overlay",
+        "type": "github"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "xwayland-satellite-stable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1748488455,
+        "narHash": "sha256-IiLr1alzKFIy5tGGpDlabQbe6LV1c9ABvkH6T5WmyRI=",
+        "owner": "Supreeeme",
+        "repo": "xwayland-satellite",
+        "rev": "3ba30b149f9eb2bbf42cf4758d2158ca8cceef73",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Supreeeme",
+        "ref": "v0.6",
+        "repo": "xwayland-satellite",
+        "type": "github"
+      }
+    },
+    "xwayland-satellite-unstable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1754367142,
+        "narHash": "sha256-U0gbn4Qe2NfdaQHvSerzjn3iLhrH+Ah0DMBJfRh1OT8=",
+        "owner": "Supreeeme",
+        "repo": "xwayland-satellite",
+        "rev": "ecbe57e7be12452d6fe477f2154a6d93f60c41e0",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Supreeeme",
+        "repo": "xwayland-satellite",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

flake.nix

···
+{
+  description = "Personal-use NixOS configuration";
+
+  inputs = {
+    # Basic Nix/OS functionality
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.05";
+    nixpkgs-unstable.url = "github:NixOS/nixpkgs/nixos-unstable";
+
+    nixos-hardware.url = "github:NixOS/nixos-hardware/master";
+
+    disko = {
+      url = "github:nix-community/disko/v1.12.0";
+
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    lanzaboote = {
+      url = "github:nix-community/lanzaboote/v0.4.2";
+
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    home-manager = {
+      url = "github:nix-community/home-manager/release-25.05";
+
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    # Package alternatives
+    lix-module = {
+      url = "https://git.lix.systems/lix-project/nixos-module/archive/2.93.2-1.tar.gz";
+
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    # Window/desktop managers
+    niri = {
+      url = "github:sodiboo/niri-flake";
+    };
+
+    # Declarative addon systems
+    nix-jetbrains-plugins = {
+      url = "github:theCapypara/nix-jetbrains-plugins";
+
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    firefox-addons = {
+      url = "gitlab:rycee/nur-expressions?dir=pkgs/firefox-addons";
+
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    nixcord = {
+      url = "github:kaylorben/nixcord";
+
+      inputs.nixpkgs.follows = "nixpkgs-unstable";
+    };
+  };
+
+  outputs = args: import ./outputs.nix args;
+}

hardware/cpu/amd.nix

···
+{ nixos-hardware, ... }:
+
+{
+  imports = [
+    ./common.nix
+
+    nixos-hardware.nixosModules.common-cpu-amd
+  ];
+}

hardware/cpu/common.nix

···
+{ isLaptop, ... }:
+
+{
+  #services.auto-cpufreq.enable = isLaptop;
+}

hardware/cpu/intel.nix

···
+{
+  lib,
+  nixos-hardware,
+  isLaptop,
+  ...
+}:
+
+{
+  imports = [
+    ./common.nix
+
+    nixos-hardware.nixosModules.common-cpu-intel
+  ];
+
+  services.thermald.enable = isLaptop;
+}

hardware/gpu/amd.nix

···
+{ nixos-hardware, pkgs, ... }:
+
+{
+  imports = [
+    nixos-hardware.nixosModules.common-gpu-amd
+  ];
+
+  hardware.graphics.extraPackages = with pkgs; [
+    rocmPackages.clr.icd
+  ];
+
+  programs.obs-studio.plugins = with pkgs.obs-studio-plugins; [
+    obs-vaapi
+  ];
+}

hardware/gpu/nvidia.nix

···
+{
+  lib,
+  nixos-hardware,
+  pkgs,
+  isLaptop,
+  ...
+}:
+
+{
+  imports = [
+    nixos-hardware.nixosModules.common-gpu-nvidia
+  ];
+
+  services.xserver.videoDrivers = [
+    "modesetting" # TODO: add if isLaptop
+    "nvidia"
+  ];
+
+  hardware.nvidia = {
+    open = true;
+
+    modesetting.enable = isLaptop;
+
+    prime = {
+      offload.enable = isLaptop;
+    };
+  };
+
+  programs.obs-studio.package = (
+    pkgs.obs-studio.override {
+      cudaSupport = true;
+    }
+  );
+}

hardware/laptop.nix

···
+{ }

homes/encode42/common/bat.nix

···
+{ pkgs, ... }:
+
+{
+  programs.bat = {
+    enable = true;
+
+    config = {
+      paging = "never";
+
+      theme = "base16";
+
+      style = [
+        "numbers"
+      ];
+    };
+  };
+
+  home.shellAliases = {
+    cat = "bat";
+  };
+
+  home.packages = with pkgs; [
+    bat
+  ];
+}

homes/encode42/common/direnv.nix

···
+{
+  programs.direnv = {
+    enable = true;
+
+    nix-direnv.enable = true;
+
+    silent = true;
+  };
+}

homes/encode42/common/eza.nix

···
+{ pkgs, ... }:
+
+{
+  home.shellAliases = {
+    ls = "eza -la";
+    tree = "eza -T";
+  };
+
+  home.packages = with pkgs; [
+    eza
+  ];
+}

homes/encode42/common/fastfetch.nix

···
+{ pkgs, ... }:
+
+{
+  programs.fastfetch = {
+    enable = true;
+
+    settings = {
+      logo = {
+        type = "none";
+      };
+
+      display = {
+        separator = " ";
+        color = "#c6a0f6";
+      };
+
+      modules = [
+        {
+          type = "custom";
+          format = "─────────────────────────────────";
+        }
+        {
+          type = "title";
+          keyWidth = 10;
+        }
+        {
+          type = "custom";
+          format = "─────────────────────────────────";
+        }
+        "break"
+        {
+          type = "custom";
+          key = "System";
+          keyColor = "#ed8796";
+          format = "";
+        }
+        {
+          type = "os";
+          key = "├ 💾";
+          keyColor = "#ed8796";
+        }
+        {
+          type = "kernel";
+          key = "├ 🐧";
+          keyColor = "#ed8796";
+        }
+        {
+          type = "packages";
+          key = "├ 📦";
+          keyColor = "#ed8796";
+        }
+        {
+          type = "initsystem";
+          key = "├ ⏱️";
+          keyColor = "#ed8796";
+        }
+        {
+          type = "shell";
+          key = "└ 🐚";
+          keyColor = "#ed8796";
+        }
+        "break"
+        {
+          type = "custom";
+          key = "Client";
+          keyColor = "#f5a97f";
+          format = "";
+        }
+        {
+          type = "lm";
+          key = "├ 🚪";
+          keyColor = "#f5a97f";
+        }
+        {
+          type = "wm";
+          key = "├ 🦟";
+          keyColor = "#f5a97f";
+        }
+        {
+          type = "de";
+          key = "├ 🖥";
+          keyColor = "#f5a97f";
+        }
+        {
+          type = "terminal";
+          key = "├ 🮮";
+          keyColor = "#f5a97f";
+        }
+        {
+          type = "theme";
+          key = "├ 🎨";
+          keyColor = "#f5a97f";
+        }
+        {
+          type = "icons";
+          key = "├ 📁";
+          keyColor = "#f5a97f";
+        }
+        {
+          type = "cursor";
+          key = "├ 🖱";
+          keyColor = "#f5a97f";
+        }
+        {
+          type = "font";
+          key = "└ 🖤";
+          keyColor = "#f5a97f";
+        }
+        "break"
+        {
+          type = "custom";
+          key = "Hardware";
+          keyColor = "#a6da95";
+          format = "";
+        }
+        {
+          type = "host";
+          key = "├ 🧩";
+          keyColor = "#a6da95";
+        }
+        {
+          type = "cpu";
+          key = "├ 🧠";
+          keyColor = "#a6da95";
+        }
+        {
+          type = "gpu";
+          key = "├ ⚙️";
+          keyColor = "#a6da95";
+        }
+        {
+          type = "memory";
+          key = "├ 📚";
+          keyColor = "#a6da95";
+        }
+        {
+          type = "custom";
+          key = "├ 📁";
+          keyColor = "#a6da95";
+        }
+        {
+          type = "disk";
+          key = "│ └";
+          keyColor = "#a6da95";
+        }
+        {
+          type = "chassis";
+          key = "└ 📦";
+          keyColor = "#a6da95";
+        }
+        "break"
+        {
+          type = "custom";
+          key = "Peripherals";
+          keyColor = "#8aadf4";
+          format = "";
+        }
+        {
+          type = "custom";
+          key = "├ 🖥";
+          keyColor = "#8aadf4";
+          format = "";
+        }
+        {
+          type = "display";
+          key = "│ └";
+          keyColor = "#8aadf4";
+        }
+        {
+          type = "custom";
+          key = "├ 🖱";
+          keyColor = "#8aadf4";
+          format = "";
+        }
+        {
+          type = "mouse";
+          key = "│ └";
+          keyColor = "#8aadf4";
+        }
+        {
+          type = "custom";
+          key = "├ 🎮";
+          keyColor = "#8aadf4";
+          format = "";
+        }
+        {
+          type = "gamepad";
+          key = "│ └";
+          keyColor = "#8aadf4";
+        }
+        {
+          type = "sound";
+          key = "├ 🔈";
+          keyColor = "#8aadf4";
+        }
+        {
+          type = "camera";
+          key = "└ 📷";
+          keyColor = "#8aadf4";
+        }
+      ];
+    };
+  };
+
+  home.packages = with pkgs; [
+    fastfetch
+  ];
+}

homes/encode42/common/fish.nix

···
+{ pkgs, ... }:
+
+{
+  programs.fish = {
+    enable = true;
+
+    plugins = with pkgs.fishPlugins; [
+      {
+        name = "bobthefish";
+        src = bobthefish.src;
+      }
+    ];
+
+    interactiveShellInit = ''
+      set fish_greeting # Disable greeting
+    '';
+  };
+}

homes/encode42/common/git.nix

···
+{
+  programs.git = {
+    enable = true;
+
+    userName = "encode42";
+    userEmail = "[e-mail]";
+
+    extraConfig = {
+      init.defaultBranch = "main";
+    };
+  };
+}

homes/encode42/common/github.nix

···
+{ pkgs, ... }:
+
+{
+  imports = [
+    ./git.nix
+  ];
+
+  programs.gh = {
+    enable = true;
+
+    gitCredentialHelper = {
+      enable = true;
+    };
+  };
+
+  home.packages = with pkgs; [
+    gh
+  ];
+}

homes/encode42/common/imagemagik.nix

···
+{ pkgs, ... }:
+
+{
+  home.packages = with pkgs; [
+    (imagemagick.override {
+      libpngSupport = true;
+      libjpegSupport = true;
+      libwebpSupport = true;
+      librsvgSupport = true;
+    })
+  ];
+}

homes/encode42/common/xh.nix

···
+{ pkgs, ... }:
+
+{
+  home.shellAliases = {
+    curl = "xh";
+  };
+
+  home.packages = with pkgs; [
+    xh
+  ];
+}

homes/encode42/desktop/cursor.nix

···
+{ pkgs, ... }:
+
+{
+  home.pointerCursor = {
+    gtk.enable = true;
+
+    name = "macchiatoMauve";
+    package = pkgs.catppuccin-cursors;
+  };
+}

homes/encode42/desktop/discord.nix

···
+{
+  programs.nixcord = {
+    enable = true;
+
+    discord.enable = false;
+
+    vesktop = {
+      enable = true;
+
+      settings = {
+        customTitleBar = true;
+        splashTheming = true;
+
+        minimizeToTray = false;
+
+        checkUpdates = false;
+      };
+    };
+
+    config = {
+      useQuickCss = false;
+
+      notifyAboutUpdates = false;
+      autoUpdate = false;
+
+      themeLinks = [
+        "@light https://catppuccin.github.io/discord/dist/catppuccin-latte-mauve.theme.css"
+        "@dark https://catppuccin.github.io/discord/dist/catppuccin-macchiato-mauve.theme.css"
+      ];
+
+      plugins = {
+        chatInputButtonAPI.enable = false;
+        commandsAPI.enable = false;
+        memberListDecoratorsAPI.enable = false;
+        messageDecorationsAPI.enable = false;
+        messageEventsAPI.enable = false;
+        messagePopoverAPI.enable = false;
+        messageUpdaterAPI.enable = false;
+        serverListAPI.enable = false;
+
+        webScreenShareFixes.enable = true;
+        youtubeAdblock.enable = true;
+
+        settings = {
+          settingsLocation = "aboveActivity";
+        };
+
+        fullUserInChatbox.enable = true;
+        roleColorEverywhere.enable = true;
+        typingTweaks.enable = true;
+        alwaysExpandRoles.enable = true;
+        betterGifAltText.enable = true;
+        betterRoleContext.enable = true;
+
+        viewIcons = {
+          enable = true;
+
+          format = "png";
+          imgSize = 4096;
+        };
+      };
+    };
+  };
+}

homes/encode42/desktop/firefox.nix

···
+{ firefox-addons, pkgs, ... }:
+
+{
+  programs.firefox = {
+    enable = true;
+
+    policies = {
+      BlockAboutConfig = true;
+    };
+
+    profiles.default = {
+      settings = {
+        "extensions.autoDisableScopes" = 0;
+
+        "sidebar.verticalTabs" = true;
+        "sidebar.main.tools" = "history";
+        "browser.toolbars.bookmarks.visibility" = "never";
+
+        "browser.newtabpage.enabled" = false;
+        "browser.startup.page" = 0;
+
+        "browser.download.autohideButton" = false;
+        "browser.uiCustomization.horizontalTabstrip" = "[\"tabbrowser-tabs\",\"new-tab-button\"]";
+        "browser.uiCustomization.navBarWhenVerticalTabs" =
+          "[\"sidebar-button\",\"back-button\",\"forward-button\",\"stop-reload-button\",\"vertical-spacer\",\"urlbar-container\",\"_61a05c39-ad45-4086-946f-32adb0a40a9d_-browser-action\",\"unified-extensions-button\",\"downloads-button\"]";
+
+        "browser.urlbar.suggest.history" = false;
+        "browser.urlbar.suggest.recentsearches" = false;
+
+        "privacy.history.custom" = true;
+        "browser.formfill.enable" = false;
+        "extensions.formautofill.addresses.enabled" = false;
+        "extensions.formautofill.creditCards.enabled" = false;
+
+        "dom.security.https_only_mode" = true;
+
+        "privacy.fingerprintingProtection" = true;
+        "privacy.trackingprotection.enabled" = true;
+        "browser.safebrowsing.malware.enabled" = false;
+        "browser.safebrowsing.phishing.enabled" = false;
+
+        "browser.newtabpage.activity-stream.showSponsoredTopSites" = false;
+        "datareporting.healthreport.uploadEnabled" = false;
+        "datareporting.usage.uploadEnabled" = false;
+      };
+
+      extensions = {
+        packages = with firefox-addons.packages.${pkgs.system}; [
+          fastforwardteam
+          indie-wiki-buddy
+        ];
+      };
+
+      search = {
+        force = true;
+
+        default = "searx";
+
+        engines = {
+          searx = {
+            name = "encrypted group search";
+            definedAliases = [ "@searx" ];
+
+            urls = [
+              {
+                template = "https://search.encrypted.group/search?q={searchTerms}";
+              }
+            ];
+          };
+
+          nix-packages = {
+            name = "Nix Packages";
+            iconMapObj."16" = "https://wiki.nixos.org/favicon.ico";
+            definedAliases = [ "@nixpkgs" ];
+
+            urls = [
+              {
+                template = "https://search.nixos.org/packages";
+                params = [
+                  {
+                    name = "type";
+                    value = "packages";
+                  }
+                  {
+                    name = "query";
+                    value = "{searchTerms}";
+                  }
+                ];
+              }
+            ];
+          };
+
+          nixos-options = {
+            name = "NixOS Options";
+            iconMapObj."16" = "https://wiki.nixos.org/favicon.ico";
+            definedAliases = [ "@nixos" ];
+
+            urls = [
+              {
+                template = "https://search.nixos.org/options";
+                params = [
+                  {
+                    name = "type";
+                    value = "options";
+                  }
+                  {
+                    name = "query";
+                    value = "{searchTerms}";
+                  }
+                ];
+              }
+            ];
+          };
+
+          nixos-wiki = {
+            name = "NixOS Wiki";
+            iconMapObj."16" = "https://wiki.nixos.org/favicon.ico";
+            definedAliases = [ "@nixos-wiki" ];
+
+            urls = [
+              {
+                template = "https://wiki.nixos.org/w/index.php?search={searchTerms}";
+              }
+            ];
+          };
+
+          bing.metaData.hidden = true;
+        };
+
+        order = [
+          "ddg"
+          "google"
+          "nix-packages"
+          "nixos-options"
+          "nixos-wiki"
+        ];
+      };
+    };
+  };
+}

homes/encode42/desktop/fonts.nix

···
+{ pkgs, ... }:
+
+{
+  home.packages = with pkgs; [
+    inter
+    jetbrains-mono
+
+    twemoji-color-font
+  ];
+}

homes/encode42/desktop/jetbrains/datagrip.nix

···
+

homes/encode42/desktop/jetbrains/intellij.nix

···
+{
+  flakeRoot,
+  nix-jetbrains-plugins,
+  pkgs,
+  ...
+}:
+
+let
+  customJetbrainsPackage = import (flakeRoot + /lib/customJetbrainsPackage.nix) {
+    inherit nix-jetbrains-plugins pkgs;
+  };
+in
+{
+  home.packages = [
+    (customJetbrainsPackage {
+      idePackage = pkgs.jetbrains.idea-ultimate;
+
+      pluginIds = [
+        "systems.fehn.intellijdirenv"
+        "com.liubs.jaredit"
+      ];
+
+      patchedPlugins = [
+        "catppuccin-theme"
+        "-env-files"
+        "minecraft-development"
+      ];
+    })
+  ];
+}

homes/encode42/desktop/jetbrains/rustrover.nix

···
+{
+  flakeRoot,
+  nix-jetbrains-plugins,
+  pkgs,
+  ...
+}:
+
+let
+  customJetbrainsPackage = import (flakeRoot + /lib/customJetbrainsPackage.nix) {
+    inherit nix-jetbrains-plugins pkgs;
+  };
+in
+{
+  home.packages = [
+    (customJetbrainsPackage {
+      idePackage = pkgs.jetbrains.rust-rover;
+
+      pluginIds = [
+        "systems.fehn.intellijdirenv"
+      ];
+
+      patchedPlugins = [
+        "catppuccin-theme"
+        "-env-files"
+      ];
+    })
+  ];
+}

homes/encode42/desktop/jetbrains/webstorm.nix

···
+{
+  flakeRoot,
+  nix-jetbrains-plugins,
+  pkgs,
+  ...
+}:
+
+let
+  customJetbrainsPackage = import (flakeRoot + /lib/customJetbrainsPackage.nix) {
+    inherit nix-jetbrains-plugins pkgs;
+  };
+in
+{
+  home.packages = [
+    (customJetbrainsPackage {
+      idePackage = pkgs.jetbrains.webstorm;
+
+      pluginIds = [
+        "systems.fehn.intellijdirenv"
+        "com.github.biomejs.intellijbiome"
+        "intellij.javascript.bun"
+        "dev.blachut.svelte.lang"
+      ];
+
+      patchedPlugins = [
+        "catppuccin-theme"
+        "-env-files"
+      ];
+    })
+  ];
+}

homes/encode42/desktop/prismlauncher.nix

···
+{ pkgs, ... }:
+
+{
+  home.packages = [
+    (pkgs.prismlauncher.override {
+      additionalPrograms = with pkgs; [
+        ffmpeg
+      ];
+
+      jdks = with pkgs; [
+        temurin-jre-bin-8
+        temurin-jre-bin-17
+        temurin-bin
+      ];
+    })
+  ];
+}

hosts/decryption/default.nix

···
+{
+  flakeRoot,
+  nixos-hardware,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+    ./disk.nix
+    (flakeRoot + /hardware/laptop.nix) # TODO: Automatically add this in mkSystem
+    (flakeRoot + /hardware/cpu/amd.nix)
+    (flakeRoot + /hardware/gpu/nvidia.nix)
+
+    ./users
+
+    (flakeRoot + /modules/common)
+
+    (flakeRoot + /modules/common/boot/systemd-boot.nix)
+    (flakeRoot + /modules/common/system/audio.nix)
+    (flakeRoot + /modules/desktop/environments/gnome.nix)
+  ];
+
+  boot.kernelPackages = pkgs.linuxKernel.packages.linux_hardened;
+
+  hardware.nvidia.prime = {
+    amdgpuBusId = "PCI:4:0:0";
+    nvidiaBusId = "PCI:1:0:0";
+  };
+
+  networking.hostName = "decryption";
+
+  system.stateVersion = "25.05";
+}

hosts/decryption/disk.nix

···
+{
+  disko.devices = {
+    disk = {
+      main = {
+        type = "disk";
+        device = "/dev/disk/by-id/nvme-Samsung_SSD_980_1TB_S64ANS0T409404F";
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              end = "500M";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+              };
+            };
+            root = {
+              name = "root";
+              end = "-0";
+
+              content = {
+                type = "filesystem";
+                format = "xfs";
+                mountpoint = "/";
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}

hosts/decryption/hardware-configuration.nix

···
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlp3s0.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/decryption/homes/encode42.nix

···
+{
+  flakeRoot,
+  pkgs,
+  pkgs-unstable,
+  ...
+}:
+
+{
+  imports = [
+    (flakeRoot + /homes/encode42/common/fastfetch.nix)
+    (flakeRoot + /homes/encode42/common/fish.nix)
+    (flakeRoot + /homes/encode42/common/github.nix)
+    (flakeRoot + /homes/encode42/common/direnv.nix)
+
+    (flakeRoot + /homes/encode42/common/bat.nix)
+    (flakeRoot + /homes/encode42/common/eza.nix)
+    (flakeRoot + /homes/encode42/common/xh.nix)
+
+    (flakeRoot + /homes/encode42/desktop/cursor.nix)
+    (flakeRoot + /homes/encode42/desktop/fonts.nix)
+
+    (flakeRoot + /homes/encode42/desktop/jetbrains/intellij.nix)
+
+    (flakeRoot + /homes/encode42/desktop/discord.nix)
+    (flakeRoot + /homes/encode42/desktop/firefox.nix)
+
+    (flakeRoot + /homes/encode42/desktop/prismlauncher.nix)
+  ];
+
+  home.packages = with pkgs; [
+    r2modman
+
+    slack
+  ];
+}

hosts/decryption/users/default.nix

···
+{ flakeRoot, ... }:
+
+{
+  imports = [
+    (flakeRoot + /modules/desktop/home-manager.nix)
+
+    ./encode42.nix
+  ];
+}

hosts/decryption/users/encode42.nix

···
+{
+  lib,
+  flakeRoot,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [
+    (flakeRoot + /packages/common/fish.nix)
+    (flakeRoot + /packages/common/git.nix)
+    (flakeRoot + /packages/common/yubikey.nix)
+
+    (flakeRoot + /packages/desktop/gnome/goldwarden.nix)
+    (flakeRoot + /packages/desktop/gnome/localsend.nix)
+
+    (flakeRoot + /packages/desktop/steam.nix)
+  ];
+
+  users.users.encode42 = {
+    isNormalUser = true;
+
+    shell = pkgs.fish;
+  };
+
+  home-manager.users.encode42 = {
+    imports = [
+      ../homes/encode42.nix
+    ];
+
+    programs.home-manager.enable = true;
+
+    home.stateVersion = "24.05";
+  };
+
+  users.users.encode42.extraGroups = [
+    "wheel"
+    "networkmanager"
+  ];
+}

hosts/encryption/default.nix

···
+{
+  flakeRoot,
+  nixos-hardware,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [
+    ./hardware-configuration.nix
+    nixos-hardware.nixosModules.msi-b350-tomahawk
+    (flakeRoot + /hardware/cpu/amd.nix)
+    (flakeRoot + /hardware/gpu/amd.nix)
+
+    ./users
+
+    (flakeRoot + /modules/common)
+
+    (flakeRoot + /modules/common/boot/systemd-boot.nix)
+    (flakeRoot + /modules/common/system/audio.nix)
+    (flakeRoot + /modules/desktop/environments/gnome.nix)
+
+    (flakeRoot + /modules/common/virtualization.nix)
+  ];
+
+  boot.kernelPackages = pkgs.linuxKernel.packages.linux_zen;
+
+  networking.hostName = "encryption";
+
+  system.stateVersion = "24.05";
+}

hosts/encryption/hardware-configuration.nix

···
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
+{
+  imports = [
+    (modulesPath + "/installer/scan/not-detected.nix")
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "nvme"
+    "xhci_pci"
+    "ahci"
+    "usbhid"
+    "usb_storage"
+    "sd_mod"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/8221b1bf-9efb-4891-b0c7-23f0d680d4e7";
+    fsType = "ext4";
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/D32C-35B1";
+    fsType = "vfat";
+    options = [
+      "fmask=0077"
+      "dmask=0077"
+    ];
+  };
+
+  swapDevices = [ ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp34s0.useDHCP = lib.mkDefault true;
+  # networking.interfaces.wlo1.useDHCP = lib.mkDefault true;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}

hosts/encryption/homes/encode42.nix

···
+{
+  flakeRoot,
+  pkgs,
+  pkgs-unstable,
+  ...
+}:
+
+{
+  imports = [
+    (flakeRoot + /homes/encode42/common/fastfetch.nix)
+    (flakeRoot + /homes/encode42/common/fish.nix)
+    (flakeRoot + /homes/encode42/common/github.nix)
+    (flakeRoot + /homes/encode42/common/direnv.nix)
+
+    (flakeRoot + /homes/encode42/common/bat.nix)
+    (flakeRoot + /homes/encode42/common/eza.nix)
+    (flakeRoot + /homes/encode42/common/xh.nix)
+
+    (flakeRoot + /homes/encode42/common/imagemagik.nix)
+
+    (flakeRoot + /homes/encode42/desktop/cursor.nix)
+    (flakeRoot + /homes/encode42/desktop/fonts.nix)
+
+    (flakeRoot + /homes/encode42/desktop/jetbrains/intellij.nix)
+    (flakeRoot + /homes/encode42/desktop/jetbrains/rustrover.nix)
+    (flakeRoot + /homes/encode42/desktop/jetbrains/webstorm.nix)
+
+    (flakeRoot + /homes/encode42/desktop/discord.nix)
+    (flakeRoot + /homes/encode42/desktop/firefox.nix)
+
+    (flakeRoot + /homes/encode42/desktop/prismlauncher.nix)
+  ];
+
+  home.packages = with pkgs; [
+    audacity
+    puddletag
+
+    blockbench
+
+    clonehero
+    openrct2
+    r2modman
+    pkgs-unstable.olympus
+
+    slack
+  ];
+}

hosts/encryption/users/default.nix

···
+{ flakeRoot, ... }:
+
+{
+  imports = [
+    (flakeRoot + /modules/desktop/home-manager.nix)
+
+    ./encode42.nix
+  ];
+}

hosts/encryption/users/encode42.nix

···
+{
+  lib,
+  flakeRoot,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [
+    (flakeRoot + /packages/common/fish.nix)
+    (flakeRoot + /packages/common/git.nix)
+    (flakeRoot + /packages/common/yubikey.nix)
+
+    (flakeRoot + /packages/desktop/gnome/goldwarden.nix)
+    (flakeRoot + /packages/desktop/gnome/localsend.nix)
+
+    (flakeRoot + /packages/desktop/obs.nix)
+    (flakeRoot + /packages/desktop/steam.nix)
+  ];
+
+  users.users.encode42 = {
+    isNormalUser = true;
+
+    shell = pkgs.fish;
+  };
+
+  home-manager.users.encode42 = {
+    imports = [
+      ../homes/encode42.nix
+    ];
+
+    programs.home-manager.enable = true;
+
+    home.stateVersion = "24.05";
+  };
+
+  users.users.encode42.extraGroups = [
+    "wheel"
+    "networkmanager"
+    "libvirtd"
+  ];
+}

lib/customJetbrainsPackage.nix

···
+{ nix-jetbrains-plugins, pkgs }:
+
+{
+  idePackage,
+  pluginIds ? [ ],
+  patchedPlugins ? [ ],
+}:
+
+let
+  marketplacePluginBase =
+    nix-jetbrains-plugins.plugins.${pkgs.system}.${idePackage.pname}.${idePackage.version};
+  marketplacePluginList = builtins.map (pluginId: marketplacePluginBase.${pluginId}) pluginIds;
+
+  pluginList = patchedPlugins ++ marketplacePluginList;
+in
+pkgs.jetbrains.plugins.addPlugins idePackage pluginList

lib/mkSystem.nix

···
+{
+  inputs,
+  flakeRootPath,
+}:
+
+{
+  name,
+  system,
+  isLaptop ? false
+}:
+
+inputs.nixpkgs.lib.nixosSystem {
+  inherit system;
+
+  modules = [
+    inputs.lix-module.nixosModules.default
+    inputs.disko.nixosModules.disko
+
+    ../hosts/${name}
+  ];
+
+  specialArgs = {
+    inherit isLaptop;
+
+    flakeRoot = flakeRootPath;
+
+    pkgs = import inputs.nixpkgs {
+      inherit system;
+
+      config.allowUnfree = true;
+    };
+
+    pkgs-unstable = import inputs.nixpkgs-unstable {
+      inherit system;
+
+      config.allowUnfree = true;
+    };
+
+    lanzaboote = inputs.lanzaboote;
+    nixos-hardware = inputs.nixos-hardware;
+    home-manager = inputs.home-manager;
+    nix-jetbrains-plugins = inputs.nix-jetbrains-plugins;
+    firefox-addons = inputs.firefox-addons;
+    nixcord = inputs.nixcord;
+  };
+}

license.md

···
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+   "License" shall mean the terms and conditions for use, reproduction,
+   and distribution as defined by Sections 1 through 9 of this document.
+
+   "Licensor" shall mean the copyright owner or entity authorized by
+   the copyright owner that is granting the License.
+
+   "Legal Entity" shall mean the union of the acting entity and all
+   other entities that control, are controlled by, or are under common
+   control with that entity. For the purposes of this definition,
+   "control" means (i) the power, direct or indirect, to cause the
+   direction or management of such entity, whether by contract or
+   otherwise, or (ii) ownership of fifty percent (50%) or more of the
+   outstanding shares, or (iii) beneficial ownership of such entity.
+
+   "You" (or "Your") shall mean an individual or Legal Entity
+   exercising permissions granted by this License.
+
+   "Source" form shall mean the preferred form for making modifications,
+   including but not limited to software source code, documentation
+   source, and configuration files.
+
+   "Object" form shall mean any form resulting from mechanical
+   transformation or translation of a Source form, including but
+   not limited to compiled object code, generated documentation,
+   and conversions to other media types.
+
+   "Work" shall mean the work of authorship, whether in Source or
+   Object form, made available under the License, as indicated by a
+   copyright notice that is included in or attached to the work
+   (an example is provided in the Appendix below).
+
+   "Derivative Works" shall mean any work, whether in Source or Object
+   form, that is based on (or derived from) the Work and for which the
+   editorial revisions, annotations, elaborations, or other modifications
+   represent, as a whole, an original work of authorship. For the purposes
+   of this License, Derivative Works shall not include works that remain
+   separable from, or merely link (or bind by name) to the interfaces of,
+   the Work and Derivative Works thereof.
+
+   "Contribution" shall mean any work of authorship, including
+   the original version of the Work and any modifications or additions
+   to that Work or Derivative Works thereof, that is intentionally
+   submitted to Licensor for inclusion in the Work by the copyright owner
+   or by an individual or Legal Entity authorized to submit on behalf of
+   the copyright owner. For the purposes of this definition, "submitted"
+   means any form of electronic, verbal, or written communication sent
+   to the Licensor or its representatives, including but not limited to
+   communication on electronic mailing lists, source code control systems,
+   and issue tracking systems that are managed by, or on behalf of, the
+   Licensor for the purpose of discussing and improving the Work, but
+   excluding communication that is conspicuously marked or otherwise
+   designated in writing by the copyright owner as "Not a Contribution."
+
+   "Contributor" shall mean Licensor and any individual or Legal Entity
+   on behalf of whom a Contribution has been received by Licensor and
+   subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   copyright license to reproduce, prepare Derivative Works of,
+   publicly display, publicly perform, sublicense, and distribute the
+   Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   (except as stated in this section) patent license to make, have made,
+   use, offer to sell, sell, import, and otherwise transfer the Work,
+   where such license applies only to those patent claims licensable
+   by such Contributor that are necessarily infringed by their
+   Contribution(s) alone or by combination of their Contribution(s)
+   with the Work to which such Contribution(s) was submitted. If You
+   institute patent litigation against any entity (including a
+   cross-claim or counterclaim in a lawsuit) alleging that the Work
+   or a Contribution incorporated within the Work constitutes direct
+   or contributory patent infringement, then any patent licenses
+   granted to You under this License for that Work shall terminate
+   as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+   Work or Derivative Works thereof in any medium, with or without
+   modifications, and in Source or Object form, provided that You
+   meet the following conditions:
+
+   (a) You must give any other recipients of the Work or
+   Derivative Works a copy of this License; and
+
+   (b) You must cause any modified files to carry prominent notices
+   stating that You changed the files; and
+
+   (c) You must retain, in the Source form of any Derivative Works
+   that You distribute, all copyright, patent, trademark, and
+   attribution notices from the Source form of the Work,
+   excluding those notices that do not pertain to any part of
+   the Derivative Works; and
+
+   (d) If the Work includes a "NOTICE" text file as part of its
+   distribution, then any Derivative Works that You distribute must
+   include a readable copy of the attribution notices contained
+   within such NOTICE file, excluding those notices that do not
+   pertain to any part of the Derivative Works, in at least one
+   of the following places: within a NOTICE text file distributed
+   as part of the Derivative Works; within the Source form or
+   documentation, if provided along with the Derivative Works; or,
+   within a display generated by the Derivative Works, if and
+   wherever such third-party notices normally appear. The contents
+   of the NOTICE file are for informational purposes only and
+   do not modify the License. You may add Your own attribution
+   notices within Derivative Works that You distribute, alongside
+   or as an addendum to the NOTICE text from the Work, provided
+   that such additional attribution notices cannot be construed
+   as modifying the License.
+
+   You may add Your own copyright statement to Your modifications and
+   may provide additional or different license terms and conditions
+   for use, reproduction, or distribution of Your modifications, or
+   for any such Derivative Works as a whole, provided Your use,
+   reproduction, and distribution of the Work otherwise complies with
+   the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+   any Contribution intentionally submitted for inclusion in the Work
+   by You to the Licensor shall be under the terms and conditions of
+   this License, without any additional terms or conditions.
+   Notwithstanding the above, nothing herein shall supersede or modify
+   the terms of any separate license agreement you may have executed
+   with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+   names, trademarks, service marks, or product names of the Licensor,
+   except as required for reasonable and customary use in describing the
+   origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+   agreed to in writing, Licensor provides the Work (and each
+   Contributor provides its Contributions) on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied, including, without limitation, any warranties or conditions
+   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+   PARTICULAR PURPOSE. You are solely responsible for determining the
+   appropriateness of using or redistributing the Work and assume any
+   risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+   whether in tort (including negligence), contract, or otherwise,
+   unless required by applicable law (such as deliberate and grossly
+   negligent acts) or agreed to in writing, shall any Contributor be
+   liable to You for damages, including any direct, indirect, special,
+   incidental, or consequential damages of any character arising as a
+   result of this License or out of the use or inability to use the
+   Work (including but not limited to damages for loss of goodwill,
+   work stoppage, computer failure or malfunction, or any and all
+   other commercial damages or losses), even if such Contributor
+   has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+   the Work or Derivative Works thereof, You may choose to offer,
+   and charge a fee for, acceptance of support, warranty, indemnity,
+   or other liability obligations and/or rights consistent with this
+   License. However, in accepting such obligations, You may act only
+   on Your own behalf and on Your sole responsibility, not on behalf
+   of any other Contributor, and only if You agree to indemnify,
+   defend, and hold each Contributor harmless for any liability
+   incurred by, or claims asserted against, such Contributor by reason
+   of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+Copyright 2025 encode42
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

modules/common/boot/common.nix

···
+{
+  boot = {
+    kernelParams = [ "boot.shell_on_fail" ];
+
+    kernel.sysctl."kernel.sysrq" = 1;
+  };
+}

modules/common/boot/secureboot.nix

···
+{
+  lib,
+  lanzaboote,
+  pkgs,
+}:
+
+{
+  imports = [
+    ./systemd-boot.nix
+    lanzaboote.nixosModules.lanzaboote
+  ];
+
+  boot.loader.systemd-boot.enable = lib.mkForce false;
+
+  boot.lanzaboote = {
+    enable = true;
+
+    pkiBundle = "/etc/secureboot";
+  };
+
+  environment.systemPackages = with pkgs; [
+    sbctl
+  ];
+}

modules/common/boot/systemd-boot.nix

···
+{
+  imports = [
+    ./common.nix
+  ];
+
+  boot.loader.systemd-boot = {
+    enable = true;
+
+    editor = false;
+    configurationLimit = 6;
+  };
+}

modules/common/default.nix

···
+{
+  imports = [
+    ./locale/en_US.nix
+
+    ./network/firewall.nix
+
+    ./system/coreutils.nix
+    ./system/firmware.nix
+    ./system/memory.nix
+    ./system/sudo.nix
+
+    ./home-manager.nix
+    ./nix.nix
+  ];
+}

modules/common/home-manager.nix

···
+{
+  flakeRoot,
+  home-manager,
+  pkgs,
+  pkgs-unstable,
+  ...
+}:
+
+{
+  imports = [
+    home-manager.nixosModules.home-manager
+  ];
+
+  home-manager = {
+    useGlobalPkgs = true;
+
+    backupFileExtension = "bak";
+
+    extraSpecialArgs = {
+      inherit flakeRoot pkgs pkgs-unstable;
+    };
+  };
+
+  environment.systemPackages = with pkgs; [
+    home-manager
+  ];
+}

modules/common/locale/en_US.nix

···
+{
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "en_US.UTF-8";
+    LC_IDENTIFICATION = "en_US.UTF-8";
+    LC_MEASUREMENT = "en_US.UTF-8";
+    LC_MONETARY = "en_US.UTF-8";
+    LC_NAME = "en_US.UTF-8";
+    LC_NUMERIC = "en_US.UTF-8";
+    LC_PAPER = "en_US.UTF-8";
+    LC_TELEPHONE = "en_US.UTF-8";
+    LC_TIME = "en_US.UTF-8";
+  };
+
+  services.xserver.xkb = {
+    layout = "us";
+    variant = "";
+  };
+}

modules/common/network/bluetooth.nix

···
+{
+  hardware.bluetooth = {
+    enable = true;
+
+    powerOnBoot = false;
+  };
+}

modules/common/network/firewall.nix

···
+{
+  networking.firewall = {
+    enable = true;
+
+    allowPing = false;
+  };
+}

modules/common/network/network.nix

···
+{
+  networking.networkmanager = {
+    enable = true;
+
+    dns = "systemd-resolved";
+
+    wifi = {
+      backend = "iwd";
+
+      powersave = true;
+    };
+  };
+}

modules/common/nix.nix

···
+{
+  nix = {
+    channel.enable = false;
+
+    gc = {
+      automatic = true;
+      dates = "weekly";
+
+      persistent = true;
+
+      options = "--delete-older-than 7d";
+    };
+
+    optimise = {
+      automatic = true;
+      dates = [ "1w" ];
+
+      persistent = true;
+    };
+
+    settings = {
+      experimental-features = [
+        "nix-command"
+        "flakes"
+      ];
+
+      download-buffer-size = 268435456;
+    };
+  };
+
+  documentation.man.enable = false;
+}

modules/common/system/audio.nix

···
+{
+  pkgs,
+  ...
+}:
+
+{
+  security.rtkit.enable = true;
+
+  services.pipewire = {
+    enable = true;
+
+    alsa.enable = true;
+    pulse.enable = true;
+  };
+
+  programs.obs-studio = {
+    plugins = with pkgs.obs-studio-plugins; [
+      obs-pipewire-audio-capture
+    ];
+  };
+}

modules/common/system/coreutils.nix

···
+{ pkgs, ... }:
+
+{
+  environment.systemPackages = with pkgs; [
+    uutils-coreutils-noprefix
+  ];
+}

modules/common/system/firmware.nix

···
+{
+  services.fwupd = {
+    enable = true;
+  };
+}

modules/common/system/memory.nix

···
+{
+  systemd.oomd = {
+    enable = true;
+  };
+}

modules/common/system/sudo.nix

···
+{
+  security = {
+    sudo.enable = false;
+
+    sudo-rs = {
+      enable = true;
+
+      execWheelOnly = true;
+      wheelNeedsPassword = true;
+    };
+  };
+}

modules/common/virtualization.nix

···
+{ pkgs, ... }:
+
+{
+  virtualisation = {
+    libvirtd = {
+      enable = true;
+
+      qemu = {
+        swtpm.enable = true;
+
+        ovmf = {
+          enable = true;
+
+          packages = with pkgs; [
+            OVMFFull.fd
+          ];
+        };
+      };
+    };
+
+    spiceUSBRedirection.enable = true;
+  };
+
+  services.spice-vdagentd.enable = true;
+
+  environment.systemPackages = with pkgs; [
+    spice
+    spice-protocol
+  ];
+}

modules/desktop/environments/common.nix

···
+{ pkgs, ... }:
+
+{
+  environment.sessionVariables.NIXOS_OZONE_WL = "1";
+
+  services.xserver = {
+    enable = true;
+
+    excludePackages = with pkgs; [
+      xterm
+    ];
+  };
+}

modules/desktop/environments/gnome.nix

···
+{ pkgs, ... }:
+
+{
+  imports = [
+    ./common.nix
+  ];
+
+  services.xserver = {
+    displayManager.gdm.enable = true;
+    desktopManager.gnome.enable = true;
+  };
+
+  environment.gnome.excludePackages = with pkgs; [
+    snapshot
+    gnome-connections
+    gnome-tour
+    yelp
+    epiphany
+    totem
+    gnome-music
+    seahorse
+  ];
+
+  services.gvfs.enable = true;
+
+  qt = {
+    enable = true;
+
+    platformTheme = "gnome";
+    style = "adwaita-dark";
+  };
+
+  services.udev.packages = with pkgs; [
+    gnome-settings-daemon
+  ];
+
+  services.dbus.packages = with pkgs; [
+    gcr
+  ];
+
+  environment.systemPackages = with pkgs; [
+    gnomeExtensions.appindicator
+
+    gnome-calendar
+    gnome-feeds
+
+    celluloid
+    zenity
+  ];
+}

modules/desktop/home-manager.nix

···
+{
+  nix-jetbrains-plugins,
+  nixcord,
+  firefox-addons,
+  ...
+}:
+
+{
+  imports = [
+    ../common/home-manager.nix
+  ];
+
+  home-manager = {
+    sharedModules = [
+      nixcord.homeModules.nixcord
+    ];
+
+    extraSpecialArgs = {
+      inherit nix-jetbrains-plugins firefox-addons;
+    };
+  };
+}

modules/desktop/printing.nix

···
+{
+  services.printing = {
+    enable = true;
+  };
+}

outputs.nix

···
+{ ... }@inputs:
+
+let
+  mkSystem = import ./lib/mkSystem.nix {
+    inherit inputs;
+
+    flakeRootPath = ./.;
+  };
+in
+{
+  formatter.x86_64-linux = inputs.nixpkgs.legacyPackages.x86_64-linux.nixfmt-rfc-style;
+
+  nixosConfigurations = {
+    encryption = mkSystem {
+      name = "encryption";
+      system = "x86_64-linux";
+    };
+
+    decryption = mkSystem {
+      name = "decryption";
+      system = "x86_64-linux";
+
+      isLaptop = true;
+    };
+  };
+}

packages/common/fish.nix

···
+{
+  programs.fish = {
+    enable = true;
+
+    useBabelfish = true;
+  };
+}

packages/common/git.nix

···
+{
+  programs.git = {
+    enable = true;
+
+    lfs = {
+      enable = true;
+    };
+
+    config = {
+      init = {
+        defaultBranch = "main";
+      };
+    };
+  };
+}

packages/common/yubikey.nix

···
+{ pkgs, ... }:
+
+{
+  services.udev.packages = with pkgs; [
+    yubikey-personalization
+  ];
+
+  programs.gnupg.agent = {
+    enable = true;
+
+    enableSSHSupport = true;
+  };
+
+  services.pcscd = {
+    enable = true;
+  };
+}

packages/desktop/gnome/goldwarden.nix

···
+{
+  programs.goldwarden = {
+    enable = true;
+
+    useSshAgent = false;
+  };
+}

packages/desktop/gnome/localsend.nix

···
+{
+  programs.localsend = {
+    enable = true;
+  };
+}

packages/desktop/obs.nix

···
+{ pkgs, ... }:
+
+{
+  programs.obs-studio = {
+    enable = true;
+
+    enableVirtualCamera = true;
+
+    plugins = with pkgs.obs-studio-plugins; [
+      wlrobs
+      obs-vkcapture
+
+      obs-composite-blur
+      input-overlay
+    ];
+  };
+
+  programs.steam = {
+    package = pkgs.steam.override {
+      extraEnv = {
+        OBS_VKCAPTURE = true;
+      };
+    };
+  };
+}

packages/desktop/steam.nix

···
+{ pkgs, ... }:
+
+{
+  programs.steam = {
+    enable = true;
+
+    extest.enable = true;
+
+    extraCompatPackages = with pkgs; [
+      proton-ge-bin
+    ];
+
+    remotePlay.openFirewall = true;
+  };
+}

readme.md

···
+Personal-use NixOS configuration files.
+
+- `hardware`: Specialized hardware configuration
+- `homes`: User-owned home-manager directories
+- `hosts`: Machine configuration
+  - `users`: Users present on the system
+  - `homes`: User-owned home-manager configurations
+- `lib`: Helper functions
+- `modules`: System modules and relevant configuration
+- `packages`: Program package configuration