new modules, migrate to easy-hosts, format nixfmt-rfc-style

flake.lock

···
         "type": "github"
       }
     },
+    "easy-hosts": {
+      "locked": {
+        "lastModified": 1755470564,
+        "narHash": "sha256-KB1ZryVDoQcbIsItOf4WtxkHhh3ppj+XwMpSnt/2QHc=",
+        "owner": "tgirlcloud",
+        "repo": "easy-hosts",
+        "rev": "d0422bc7b3db26268982aa15d07e60370e76ee1d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "tgirlcloud",
+        "repo": "easy-hosts",
+        "type": "github"
+      }
+    },
     "fenix": {
       "inputs": {
         "nixpkgs": [
···
     "root": {
       "inputs": {
         "catppuccin": "catppuccin",
+        "easy-hosts": "easy-hosts",
         "flake-parts": "flake-parts",
         "ghostty": "ghostty",
         "helix": "helix",

flake.nix

···
       inputs.nixpkgs.follows = "nixpkgs";
     };
     flake-parts.url = "github:hercules-ci/flake-parts";
+    easy-hosts.url = "github:tgirlcloud/easy-hosts";
   };
-  outputs = {
-    self,
-    nixpkgs,
-    flake-parts,
-    ...
-  } @ inputs:
-    flake-parts.lib.mkFlake {inherit inputs;} (
-      {withSystem, ...}: {
+  outputs =
+    {
+      self,
+      nixpkgs,
+      flake-parts,
+      ...
+    }@inputs:
+    flake-parts.lib.mkFlake { inherit inputs; } (
+      { withSystem, config, ... }:
+      {
         systems = [
           "x86_64-linux"
           "aarch64-linux"
         ];
 
-        perSystem = {pkgs, ...}: {
-          packages = {
-            pokego = pkgs.callPackage ./pkgs/pokego.nix {};
-            http-nu = pkgs.callPackage ./pkgs/http-nu.nix {};
-            topiary-nu = pkgs.callPackage ./pkgs/topiary-nu.nix {
-              inherit (inputs) tree-sitter-nu topiary-nushell;
+        imports = [ ./systems/default.nix ];
+
+        perSystem =
+          { pkgs, ... }:
+          {
+            packages = {
+              pokego = pkgs.callPackage ./pkgs/pokego.nix { };
+              http-nu = pkgs.callPackage ./pkgs/http-nu.nix { };
+              topiary-nu = pkgs.callPackage ./pkgs/topiary-nu.nix {
+                inherit (inputs) tree-sitter-nu topiary-nushell;
+              };
+
+              wakuna-image = self.lib.sdImageFromSystem self.nixosConfigurations.wakuna;
             };
-
-            wakuna-image = self.lib.sdImageFromSystem self.nixosConfigurations.wakuna;
+            formatter = pkgs.nixfmt-rfc-style;
           };
-          formatter = pkgs.alejandra;
-        };
 
-        flake = let
-          inherit (nixpkgs) lib;
-        in {
-          lib = {
-            sdImageFromSystem = system: system.config.system.build.sdImage;
+        flake =
+          let
+            inherit (nixpkgs) lib;
+          in
+          {
+            lib = {
+              sdImageFromSystem = system: system.config.system.build.sdImage;
 
-            mkSystem' = system: hostname:
-              withSystem system (
-                {
-                  inputs',
-                  self',
-                  ...
-                }:
+              mkSystem' =
+                system: hostname:
+                withSystem system (
+                  { inputs', self', ... }:
                   lib.nixosSystem {
                     specialArgs = {
                       inherit
···
                         ;
                     };
                     modules = [
-                      {networking.hostName = hostname;}
+                      { networking.hostName = hostname; }
                       ./modules/core.nix
                       ./modules/nixos
                       ./hosts/${hostname}
+                      config.flake.nixosModules.dev
+                      config.flake.nixosModules.desktop
                     ];
                   }
-              );
+                );
 
-            mkSystem = system: hostname: {${hostname} = self.lib.mkSystem' system hostname;};
-            mkSystems = system: hosts: lib.mergeAttrsList (map (self.lib.mkSystem system) hosts);
-          };
+              mkSystem = system: hostname: { ${hostname} = self.lib.mkSystem' system hostname; };
+              mkSystems = system: hosts: lib.mergeAttrsList (map (self.lib.mkSystem system) hosts);
+            };
 
-          nixosConfigurations = inputs.nixpkgs.lib.concatMapAttrs self.lib.mkSystems {
-            "x86_64-linux" = [
-              "ozen"
-              "kiwi"
-              "reg"
-              "belaf"
-            ];
-            "aarch64-linux" = ["wakuna"];
+            overlays.default = import ./overlays;
+
+            homeModules = {
+              dev = import ./modules/dev/home.nix;
+              desktop = import ./modules/desktop/home.nix;
+            };
+
+            nixosModules = {
+              dev = import ./modules/dev/nixos.nix;
+              desktop = import ./modules/desktop/nixos.nix;
+            };
           };
-
-          overlays.default = import ./overlays;
-        };
       }
     );
   nixConfig = {

hosts/belaf/default.nix

···
+{ pkgs, ... }:
 {
-  pkgs,
-  lib,
-  inputs,
-  ...
-}: {
-  imports = [
-    inputs.lanzaboote.nixosModules.lanzaboote
-    inputs.catppuccin.nixosModules.catppuccin
-    ../../modules/home
-    ./hardware.nix
-  ];
-  catppuccin = {
-    enable = true;
-    flavor = "macchiato";
-  };
-  time.timeZone = "Europe/Paris";
-  desktop.enable = true;
+  imports = [ ./hardware.nix ];
   system.stateVersion = "25.11";
 
   boot = {
-    loader.systemd-boot = {
-      enable = lib.mkForce false;
-
-      configurationLimit = 10;
-    };
-    lanzaboote = {
-      enable = true;
-      pkiBundle = "/etc/secureboot";
-    };
-    supportedFilesystems = ["bcachefs"];
+    supportedFilesystems = [ "bcachefs" ];
     kernelPackages = pkgs.linuxPackages_latest;
   };
 
-  networking.networkmanager.enable = true;
-
-  services = {
-    tailscale.enable = true;
-    tailscale.useRoutingFeatures = "client";
-    touchegg.enable = true;
-    auto-cpufreq.enable = true;
-    blueman.enable = true;
-    udev.packages = [pkgs.via];
-  };
-
-  hardware.keyboard.qmk.enable = true;
-
-  security = {
-    sudo.wheelNeedsPassword = false;
-    rtkit.enable = true;
-  };
-
-  environment = with pkgs; {
-    systemPackages = [
-      sbctl
-    ];
-  };
-
-  virtualisation.docker = {
-    enable = true;
-    daemon.settings = {
-      data-root = "/docker";
-    };
+  virtualisation.docker.daemon.settings = {
+    data-root = "/docker";
   };
 }

hosts/belaf/hardware.nix

···
   lib,
   modulesPath,
   ...
-}: {
-  imports = [(modulesPath + "/installer/scan/not-detected.nix")];
+}:
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
   boot.initrd.availableKernelModules = [
     "xhci_pci"
···
     "usbhid"
     "sd_mod"
   ];
-  boot.initrd.kernelModules = [];
-  boot.kernelModules = ["kvm-intel"];
-  boot.extraModulePackages = [];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
 
   fileSystems."/" = {
     device = "UUID=d584e71f-2c5d-41e2-95e7-ed41f0833e25";
···
     fsType = "ext4";
   };
 
-  swapDevices = [];
+  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/kiwi/default.nix

···
 {
-  inputs,
-  pkgs,
   config,
+  pkgs,
+  lib,
   ...
-}: {
-  imports = [
-    inputs.catppuccin.nixosModules.catppuccin
-    ../../modules/home
-    ./hardware.nix
-  ];
+}:
+{
+  imports = [ ./hardware.nix ];
 
-  yubikey.enable = true;
-  catppuccin = {
-    enable = true;
-    flavor = "macchiato";
-  };
-  time.timeZone = "Europe/Paris";
-  desktop.enable = true;
   system.stateVersion = "25.11";
 
-  home-manager.users.${config.my.username}.imports = [
-    ./home-upf.nix
-    ./desktop.nix
-  ];
+  home-manager.users.${config.my.username} = {
+    nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ "hayase" ];
+
+    home.packages = [
+      pkgs.signal-desktop-bin
+      pkgs.obs-studio
+      pkgs.hayase
+    ];
+
+    programs.waybar.settings.mainBar.battery.bat = lib.mkForce "BAT0";
+  };
 
   boot = {
     # https://gitlab.freedesktop.org/drm/amd/-/issues/3925
···
       configurationLimit = 10;
     };
   };
-
-  hardware.keyboard.qmk.enable = true;
-
-  networking.networkmanager.enable = true;
-
-  services = {
-    tailscale = {
-      enable = true;
-      useRoutingFeatures = "client";
-    };
-    touchegg.enable = true;
-    blueman.enable = true;
-    auto-cpufreq.enable = true;
-    udev.packages = [pkgs.via];
-  };
-
-  security = {
-    sudo.wheelNeedsPassword = false;
-    rtkit.enable = true;
-  };
-
-  virtualisation.docker.enable = true;
-
-  programs._1password.enable = true;
 }

hosts/kiwi/desktop.nix

···
-{
-  lib,
-  pkgs,
-  ...
-}: {
-  nixpkgs.config.allowUnfreePredicate = pkg:
-    builtins.elem (lib.getName pkg) [
-      "hayase"
-    ];
-  home.packages = [
-    pkgs.signal-desktop-bin
-    pkgs.obs-studio
-    pkgs.hayase
-  ];
-
-  programs = {
-    waybar.settings.mainBar.battery.bat = lib.mkForce "BAT0";
-    opencode.settings.mcp = {
-      linear = {
-        type = "remote";
-        url = "https://mcp.linear.app/mcp";
-        enabled = true;
-        headers = {
-          Authorization = "Bearer {env:LINEAR_API_KEY}";
-        };
-      };
-      sentry = {
-        type = "local";
-        enabled = true;
-        command = [
-          "${pkgs.bun}/bin/bun"
-          "x"
-          "mcp-remote@latest"
-          "https://mcp.sentry.dev/mcp"
-        ];
-      };
-    };
-  };
-}

hosts/kiwi/hardware.nix

···
   lib,
   modulesPath,
   ...
-}: {
-  imports = [(modulesPath + "/installer/scan/not-detected.nix")];
+}:
+{
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
   boot.initrd.availableKernelModules = [
     "nvme"
···
     "usbhid"
     "sd_mod"
   ];
-  boot.initrd.kernelModules = [];
-  boot.kernelModules = ["kvm-amd"];
-  boot.extraModulePackages = [];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
 
   fileSystems."/" = {
     device = "/dev/disk/by-uuid/8039878e-c1a8-4b46-924a-0d42d4e49d24";
···
     ];
   };
 
-  swapDevices = [];
+  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/kiwi/home-upf.nix

···
-_: {
-  # [includeIf "hasconfig:remote.*.url:git+ssh://git@github/upfluence/**"]
-  #     path = "~/upf/.gitconfig"
-  xdg.configFile."git/config".text = ''
-    [includeIf "hasconfig:remote.*.url:git+ssh://[e-mail]/upfluence/**"]
-        path = "~/upf/.gitconfig"
-    [includeIf "hasconfig:remote.*.url:[e-mail]:upfluence/**"]
-        path = "~/upf/.gitconfig"
-  '';
-}

hosts/ozen/default.nix

···
 {
-  inputs,
   pkgs,
   lib,
   config,
   ...
-}: let
+}:
+let
   inherit (lib) mkForce;
-in {
+in
+{
   my.username = "nixos";
 
-  imports = [
-    inputs.catppuccin.nixosModules.catppuccin
-    inputs.nixos-wsl.nixosModules.default
-    ../../modules/home
-  ];
-
-  catppuccin = {
-    enable = true;
-    flavor = "macchiato";
-  };
   wsl.enable = true;
   wsl.defaultUser = config.my.username;
   system.stateVersion = "25.11";
···
 
   environment = {
     variables.BROWSER = mkForce "wsl-open";
-    systemPackages = [pkgs.wsl-open];
+    systemPackages = [ pkgs.wsl-open ];
   };
 
   nixpkgs.hostPlatform = "x86_64-linux";

hosts/reg/default.nix

···
   pkgs,
   inputs,
   ...
-}: {
+}:
+{
   my.username = "root";
 
   imports = [
···
 
   boot.tmp.cleanOnBoot = true;
   zramSwap.enable = true;
-  sops.age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
-  services = {
-    tailscale.enable = true;
-    tailscale.useRoutingFeatures = "server";
-    openssh.enable = true;
-
-    atuin = {
-      enable = true;
-      host = "0.0.0.0";
-    };
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+  services.atuin = {
+    enable = true;
+    host = "0.0.0.0";
   };
 
   users.users = {
-    ${config.my.username}.openssh.authorizedKeys.keyFiles = [inputs.ssh-keys];
+    ${config.my.username}.openssh.authorizedKeys.keyFiles = [ inputs.ssh-keys ];
   };
 
-  environment.systemPackages = with pkgs; [helix];
-  server = true;
+  environment.systemPackages = with pkgs; [ helix ];
 
   system.stateVersion = "25.05";
 }

hosts/reg/hardware.nix

···
-{modulesPath, ...}: {
-  imports = [(modulesPath + "/profiles/qemu-guest.nix")];
+{ modulesPath, ... }:
+{
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
   boot.loader.grub = {
     efiSupport = true;
     efiInstallAsRemovable = true;
···
     "xen_blkfront"
     "vmw_pvscsi"
   ];
-  boot.initrd.kernelModules = ["nvme"];
+  boot.initrd.kernelModules = [ "nvme" ];
   fileSystems."/" = {
     device = "/dev/sda1";
     fsType = "ext4";

hosts/reg/pds-backup.nix

···
-{
-  config,
-  pkgs,
-  ...
-}: let
+{ config, pkgs, ... }:
+let
   restoreScript = pkgs.writeShellScriptBin "pds-restore" ''
     set -e
 
···
 
     echo "$(date): Backup completed." >> "$LOG_FILE"
   '';
-in {
+in
+{
   sops.secrets.s3 = {
     format = "dotenv";
     sopsFile = ../../secrets/pds-backup-s3.env;
   };
 
-  environment.systemPackages = [restoreScript];
+  environment.systemPackages = [ restoreScript ];
 
   systemd.services.pds-backup = {
     description = "Backup PDS data to S3";
···
         "TAR_CMD=${pkgs.gnutar}/bin/tar"
         "AWS_CMD=${pkgs.awscli2}/bin/aws"
       ];
-      EnvironmentFile = [config.sops.secrets.s3.path];
+      EnvironmentFile = [ config.sops.secrets.s3.path ];
       User = "root";
       Type = "oneshot";
     };
   };
 
   systemd.timers.pds-backup = {
-    wantedBy = ["timers.target"];
+    wantedBy = [ "timers.target" ];
     timerConfig = {
       OnCalendar = "daily";
       Persistent = true;

hosts/reg/pds.nix

···
-{config, ...}: {
+{ config, ... }:
+{
+  imports = [ ../../modules/nixos/services/acme-nginx.nix ];
   sops = {
     secrets.pds = {
       format = "dotenv";
       sopsFile = ../../secrets/pds.env;
-      restartUnits = ["bluesky-pds.service"];
+      restartUnits = [ "bluesky-pds.service" ];
     };
     secrets.cloudflare-api = {
       format = "dotenv";
···
     settings = {
       PDS_HOSTNAME = "0xf.fr";
     };
-    environmentFiles = [config.sops.secrets.pds.path];
+    environmentFiles = [ config.sops.secrets.pds.path ];
   };
 
-  networking.firewall.allowedTCPPorts = [
-    80
-    443
-  ];
-
-  security.acme = {
-    defaults.email = "[e-mail]";
-    acceptTerms = true;
-
-    certs."0xf.fr" = {
-      dnsProvider = "cloudflare";
-      credentialsFile = config.sops.secrets.cloudflare-api.path;
-      inherit (config.services.nginx) group;
-
-      domain = "0xf.fr";
-      extraDomainNames = ["*.0xf.fr"];
-      reloadServices = ["nginx"];
-    };
-  };
-
-  services.nginx = let
-    pass = {
-      useACMEHost = "0xf.fr";
-      forceSSL = true;
-      locations."/" = {
-        proxyPass = "http://127.0.0.1:${toString config.services.bluesky-pds.settings.PDS_PORT}";
-        proxyWebsockets = true;
-      };
-    };
-  in {
+  services.acme-nginx = {
     enable = true;
-    recommendedProxySettings = true;
-    recommendedTlsSettings = true;
-    virtualHosts."~(.*)\\.0xf\\.fr$" = pass;
+    email = "[e-mail]";
+    credentialsFile = config.sops.secrets.cloudflare-api.path;
+    hosts = [
+      {
+        domain = "0xf.fr";
+        extraDomainNames = [ "*.0xf.fr" ];
+        proxyPort = config.services.bluesky-pds.settings.PDS_PORT;
+      }
+    ];
   };
 }

hosts/wakuna/default.nix

···
   inputs,
   lib,
   modulesPath,
+  config,
   ...
-}: {
+}:
+{
   imports = [
     (modulesPath + "/installer/sd-card/sd-image-aarch64-installer.nix")
     ./torrent.nix
   ];
 
   sdImage.compressImage = false;
-
+  my.username = "root";
   nixpkgs.hostPlatform = "aarch64-linux";
   system.stateVersion = "24.11";
 
···
     ];
   };
 
-  users.users.root.openssh.authorizedKeys.keyFiles = [inputs.ssh-keys];
-  services.openssh = {
-    enable = true;
-    settings.PermitRootLogin = "yes";
-  };
+  users.users.${config.my.username}.openssh.authorizedKeys.keyFiles = [ inputs.ssh-keys ];
 
-  services.tailscale = {
-    enable = true;
-    useRoutingFeatures = "server";
-  };
+  services.openssh.settings.PermitRootLogin = "yes";
 }

hosts/wakuna/torrent.nix

···
-{config, ...}: {
+{ config, ... }:
+{
   systemd.services.flood.serviceConfig = {
-    SupplementaryGroups = [config.services.rtorrent.group];
+    SupplementaryGroups = [ config.services.rtorrent.group ];
   };
   services = {
     flood = {

modules/core.nix

···
-{lib, ...}: {
+{ lib, config, ... }:
+{
   options.my.username = lib.mkOption {
     type = lib.types.str;
     description = "The username for the current user.";
     default = "kar";
+  };
+
+  config = lib.mkIf (config.my.username != "root") {
+    users.users.${config.my.username} = {
+      home = "/home/${config.my.username}";
+      isNormalUser = true;
+      extraGroups = [
+        "networkmanager"
+        "docker"
+        "wheel"
+      ];
+    };
   };
 }

modules/desktop/apps/browser.nix

···
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+{
+  config = lib.mkIf config.desktop.apps.enable {
+    home = {
+      packages = [ pkgs.firefox-devedition ];
+    };
+  };
+}

modules/desktop/apps/default.nix

···
+{
+  imports = [
+    ./browser.nix
+    ./discord.nix
+  ];
+}

modules/desktop/apps/discord.nix

···
+{ lib, config, ... }:
+{
+  config = lib.mkIf config.desktop.apps.enable { programs.vesktop.enable = true; };
+}

modules/desktop/audio/default.nix

···
+{
+  imports = [
+    ./easyeffects.nix
+    ./rnnoise.nix
+  ];
+}

modules/desktop/audio/easyeffects.nix

···
+{ lib, config, ... }:
+{
+  config = lib.mkIf config.desktop.audio.enable {
+    xdg.configFile."easyeffects/output".source = ./easyeffects;
+    services.easyeffects = {
+      enable = true;
+    };
+  };
+}

modules/desktop/default.nix

···
+{ config, self, ... }:
+{
+  imports = [
+    self.nixosModules.desktop
+    self.nixosModules.dev
+    ../locale.nix
+    ../nixos/desktop-common.nix
+    ../hardware/peripherals.nix
+  ];
+
+  desktop.enable = true;
+  dev.enable = true;
+
+  home-manager.users.${config.my.username}.imports = [
+    self.homeModules.desktop
+    self.homeModules.dev
+  ];
+}

modules/desktop/home.nix

···
+{
+  lib,
+  osConfig ? { },
+  pkgs,
+  ...
+}:
+let
+  inherit (lib) mkEnableOption mkOption types;
+in
+{
+  config.desktop = {
+    inherit (osConfig.desktop or { })
+      enable
+      wm
+      terminal
+      audio
+      apps
+      ;
+  };
+  options.desktop = {
+    enable = mkEnableOption "all desktop tools";
+
+    wm.enable = mkEnableOption "window manager and interface tools";
+    terminal.enable = mkEnableOption "terminal tools";
+    audio.enable = mkEnableOption "audio tools";
+    apps.enable = mkEnableOption "desktop applications";
+    browser.default = mkOption {
+      description = "default browser xdg file";
+      default = "firefox-devedition.desktop";
+      type = types.str;
+    };
+    wallpaper = lib.mkOption {
+      default = pkgs.fetchurl {
+        url = "https://raw.githubusercontent.com/HoulFloof/wallpapers/f23c1010b93cb97baa7ad7c94fd552f7601496d2/misc/waves_right_colored.png";
+        hash = "sha256-NqqE+pGnCIWAitH86sxu1EudVEEaSO82y3NqbhtDh9k=";
+      };
+      type = lib.types.path;
+      description = "the wallpaper to use";
+    };
+  };
+  imports = [
+    ./wm
+    ./terminal
+    ./audio
+    ./apps
+  ];
+}

modules/desktop/ipcam.nix

···
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  config = lib.mkIf config.desktop.ipcam.enable {
+    boot = {
+      extraModulePackages = with config.boot.kernelPackages; [ v4l2loopback ];
+      kernelModules = [ "v4l2loopback" ];
+      extraModprobeConfig = ''
+        options v4l2loopback video_nr=9 card_label=IP-Webcam exclusive_caps=1
+      '';
+    };
+
+    environment.systemPackages =
+      let
+        port = 9696;
+        ipcam = pkgs.writeShellScriptBin "ipcam" ''
+          ${lib.getExe' pkgs.android-tools "adb"} wait-for-usb-device
+          ${lib.getExe' pkgs.android-tools "adb"} forward tcp:${toString port} tcp:8080
+          ${lib.getExe pkgs.ffmpeg} -i http://localhost:${toString port}/video -vf format=yuv420p -f v4l2 /dev/video9
+          ${lib.getExe' pkgs.android-tools "adb"} forward --remove tcp:${toString port}
+        '';
+      in
+      [
+        pkgs.ffmpeg
+        pkgs.android-tools
+        ipcam
+      ];
+  };
+}

modules/desktop/nixos.nix

···
+{ config, lib, ... }:
+let
+  cfg = config.desktop;
+  inherit (lib) mkIf mkEnableOption;
+in
+{
+  options.desktop = {
+    enable = mkEnableOption "all desktop tools";
+
+    wm.enable = mkEnableOption "window manager and interface tools";
+    terminal.enable = mkEnableOption "terminal tools";
+    audio.enable = mkEnableOption "audio tools";
+    apps.enable = mkEnableOption "desktop applications";
+    ipcam.enable = mkEnableOption "IP camera support";
+    yubikey.enable = mkEnableOption "YubiKey support";
+    locale.enable = mkEnableOption "locale and timezone settings";
+  };
+
+  imports = [
+    ./desktop.nix
+    ./sound.nix
+    ./yubikey.nix
+    ./fonts.nix
+    ./locale.nix
+    ./ipcam.nix
+  ];
+
+  config = {
+    desktop.wm.enable = mkIf cfg.enable true;
+    desktop.terminal.enable = mkIf cfg.enable true;
+    desktop.audio.enable = mkIf cfg.enable true;
+    desktop.apps.enable = mkIf cfg.enable true;
+    desktop.ipcam.enable = mkIf cfg.enable true;
+    desktop.yubikey.enable = mkIf cfg.enable true;
+    desktop.locale.enable = mkIf cfg.enable true;
+  };
+}

modules/desktop/terminal/default.nix

···
+{ imports = [ ./ghostty.nix ]; }

modules/desktop/wm/dunst.nix

···
+{ config, lib, ... }:
+{
+  services.dunst = lib.mkIf config.desktop.wm.enable { enable = true; };
+}

modules/desktop/wm/fuzzel.nix

···
+{ config, lib, ... }:
+{
+  programs.fuzzel = lib.mkIf config.desktop.wm.enable {
+    enable = true;
+    settings.main = {
+      terminal = "ghostty";
+    };
+  };
+}

modules/desktop/wm/hyprpaper.nix

···
+{ config, lib, ... }:
+{
+  config = lib.mkIf config.desktop.wm.enable {
+    services.hyprpaper = {
+      enable = true;
+      settings = {
+        preload = [ "${config.desktop.wallpaper}" ];
+        wallpaper = [ ", ${config.desktop.wallpaper}" ];
+      };
+    };
+  };
+}

modules/desktop/wm/niri.nix

···
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  config = lib.mkIf config.desktop.wm.enable {
+    home.packages = [ pkgs.nautilus ]; # xdg-desktop-portal-gnome wants it
+    programs.niri = {
+      settings = {
+        environment = {
+          NIXOS_OZONE_WL = "1";
+          ELECTRON_OZONE_PLATFORM_HINT = "auto";
+          QT_QPA_PLATFORMTHEME = "qt5ct";
+          QT_QPA_PLATFORM = "wayland";
+          DISPLAY = ":0";
+          GTK_IM_MODULE = "simple";
+        };
+
+        screenshot-path = null;
+        prefer-no-csd = true;
+
+        input = {
+          focus-follows-mouse = {
+            enable = true;
+            max-scroll-amount = "80%";
+          };
+          keyboard = {
+            repeat-delay = 300;
+            repeat-rate = 5;
+            xkb = {
+              layout = "us";
+              variant = "intl";
+            };
+          };
+
+          mouse = {
+            accel-profile = "flat";
+            accel-speed = 0.5;
+          };
+
+          touchpad = {
+            tap = true;
+            dwt = true;
+            natural-scroll = true;
+            click-method = "clickfinger";
+          };
+        };
+
+        spawn-at-startup = [ { command = [ "systemctl --user restart waybar.service" ]; } ];
+
+        layout = {
+          gaps = 16;
+          always-center-single-column = true;
+          empty-workspace-above-first = true;
+          default-column-width = {
+            proportion = 0.5;
+          };
+        };
+
+        window-rules = [
+          {
+            geometry-corner-radius =
+              let
+                radius = 8.0;
+              in
+              {
+                bottom-left = radius;
+                bottom-right = radius;
+                top-left = radius;
+                top-right = radius;
+              };
+            clip-to-geometry = true;
+          }
+          {
+            matches = [ { title = "Picture-in-Picture"; } ];
+            open-floating = true;
+            default-floating-position = {
+              x = 16;
+              y = 16;
+              relative-to = "bottom-right";
+            };
+          }
+        ];
+
+        outputs = rec {
+          eDP-1 = {
+            mode = null;
+            position = {
+              x = HDMI-A-1.mode.width;
+              y = 0;
+            };
+          };
+          HDMI-A-1 = {
+            mode = {
+              width = 2560;
+              height = 1440;
+            };
+            position = {
+              x = 0;
+              y = 0;
+            };
+          };
+        };
+
+        binds =
+          with config.lib.niri.actions;
+          let
+            # programs.niri.settings.binds."Mod+Q".action.close-window = []
+            toAction =
+              act: dir:
+              (lib.mapAttrs' (
+                argName: argValue:
+                lib.nameValuePair "${argName}+${dir.name}" {
+                  action = {
+                    "${argValue}-${dir.value}" = [ ];
+                  };
+                }
+              ) act);
+            windowMoves = lib.mergeAttrsList (
+              (map
+                (toAction {
+                  "Mod" = "focus";
+                  "Mod+Ctrl" = "move";
+                })
+                (
+                  lib.attrsToList {
+                    "Up" = "window-up";
+                    "k" = "window-up";
+                    "Down" = "window-down";
+                    "j" = "window-down";
+                    "Left" = "column-left";
+                    "h" = "column-left";
+                    "Right" = "column-right";
+                    "l" = "column-right";
+                    "I" = "workspace-down";
+                    "U" = "workspace-up";
+                  }
+                )
+              )
+              ++ (map
+                (toAction {
+                  "Mod+Shift" = "focus";
+                  "Mod+Ctrl+Shift" = "move-window-to";
+                })
+                (
+                  lib.attrsToList {
+                    "Up" = "monitor-up";
+                    "K" = "monitor-up";
+                    "Down" = "monitor-down";
+                    "J" = "monitor-down";
+                    "Left" = "monitor-left";
+                    "H" = "monitor-left";
+                    "Right" = "monitor-right";
+                    "L" = "monitor-right";
+                    "I" = "workspace-down";
+                    "U" = "workspace-up";
+                  }
+                )
+              )
+            );
+          in
+          {
+            "Mod+O".action = show-hotkey-overlay;
+            "Mod+Q".action.spawn = "${lib.getExe pkgs.ghostty}";
+            "Mod+R".action.spawn = "${lib.getExe pkgs.fuzzel}";
+            "Mod+C".action.close-window = [ ];
+
+            "Mod+Comma".action = consume-window-into-column;
+            "Mod+Period".action = expel-window-from-column;
+
+            "Mod+T".action = switch-preset-column-width;
+            "Mod+F".action = maximize-column;
+            "Mod+Shift+F".action = fullscreen-window;
+            "Mod+D".action = center-column;
+            "Mod+B".action = toggle-window-floating;
+
+            "Mod+Minus".action = set-column-width "-10%";
+            "Mod+Equal".action = set-column-width "+10%";
+            "Mod+Shift+Minus".action = set-window-height "-10%";
+            "Mod+Shift+Equal".action = set-window-height "+10%";
+
+            "Mod+Shift+Escape".action = toggle-keyboard-shortcuts-inhibit;
+            "Mod+Shift+E".action = quit;
+            "Mod+Shift+P".action = power-off-monitors;
+            "Mod+Shift+Ctrl+T".action = toggle-debug-tint;
+
+            "Mod+Shift+WheelScrollDown".action = focus-workspace-down;
+            "Mod+Shift+WheelScrollUp".action = focus-workspace-up;
+            "Mod+WheelScrollDown".action = focus-column-right;
+            "Mod+WheelScrollUp".action = focus-column-left;
+
+            "Mod+Shift+S".action.spawn = [
+              (lib.getExe pkgs.bash)
+              "-c"
+              ''${lib.getExe pkgs.slurp} -d | ${lib.getExe pkgs.grim} -t ppm -g - - | ${lib.getExe pkgs.satty} -f - --copy-command=${lib.getExe' pkgs.wl-clipboard "wl-copy"} --actions-on-escape="save-to-clipboard,exit"''
+            ];
+            "Mod+S".action.screenshot = { };
+
+            "XF86MonBrightnessDown".action.spawn = [
+              (lib.getExe pkgs.brightnessctl)
+              "set"
+              "5%-"
+            ];
+            "XF86MonBrightnessUp".action.spawn = [
+              (lib.getExe pkgs.brightnessctl)
+              "set"
+              "+5%"
+            ];
+            "XF86AudioLowerVolume".action.spawn = [
+              (lib.getExe' pkgs.wireplumber "wpctl")
+              "set-volume"
+              "@DEFAULT_AUDIO_SINK@"
+              "2%-"
+            ];
+            "XF86AudioRaiseVolume".action.spawn = [
+              (lib.getExe' pkgs.wireplumber "wpctl")
+              "set-volume"
+              "@DEFAULT_AUDIO_SINK@"
+              "2%+"
+            ];
+          }
+          // windowMoves;
+
+        animations =
+          let
+            vm = {
+              kind.spring = {
+                damping-ratio = 0.75;
+                stiffness = 200;
+                epsilon = 0.0001;
+              };
+            };
+          in
+          {
+            horizontal-view-movement = vm;
+            workspace-switch = vm;
+            window-resize = vm;
+
+            window-open = {
+              kind.easing = {
+                duration-ms = 200;
+                curve = "linear";
+              };
+              custom-shader = ''
+                vec4 open_color(vec3 coords_geo, vec3 size_geo) {
+                    vec3 coords_tex = niri_geo_to_tex * coords_geo;
+                    vec4 color = texture2D(niri_tex, coords_tex.st);
+
+                    vec2 coords = (coords_geo.xy - vec2(0.5, 0.5)) * size_geo.xy * 2.0;
+                    coords = coords / length(size_geo.xy);
+                    float p = niri_clamped_progress;
+                    if (p * p <= dot(coords, coords))
+                        color = vec4(0.0);
+
+                    return color;
+                }
+              '';
+            };
+          };
+      };
+    };
+  };
+}

modules/desktop/wm/xdg.nix

···
+{ config, lib, ... }:
+{
+  config = lib.mkIf config.desktop.wm.enable {
+    xdg.mimeApps =
+      let
+        editor = "Helix.desktop";
+        browser = config.desktop.browser.default;
+      in
+      {
+        enable = true;
+        defaultApplications = {
+          "x-scheme-handler/http " = browser;
+          "x-scheme-handler/https" = browser;
+          "x-scheme-handler/chrome" = browser;
+          "text/html" = browser;
+          "binary/octet-stream" = browser;
+          "image/jpeg" = browser;
+          "application/x-extension-htm" = browser;
+          "application/x-extension-html" = browser;
+          "application/x-extension-shtml" = browser;
+          "application/xhtml+xml" = browser;
+          "application/x-extension-xhtml" = browser;
+          "application/x-extension-xht" = browser;
+          "x-scheme-handler/about" = browser;
+          "x-scheme-handler/unknown" = browser;
+          "x-scheme-handler/discord" = "legcord.desktop";
+          "text/markdown" = editor;
+          "text/plain" = editor;
+        };
+        associations = {
+          added = {
+            "x-scheme-handler/http" = browser;
+            "x-scheme-handler/https" = browser;
+            "text/html" = browser;
+            "binary/octet-stream" = browser;
+            "image/jpeg" = browser;
+          }
+          // lib.mergeAttrsList (
+            map
+              (lang: {
+                "text/x-${lang}" = editor;
+                "application/x-${lang}" = editor;
+              })
+              [
+                "python"
+                "go"
+                "mod"
+                "ruby"
+                "yaml"
+              ]
+          );
+        };
+      };
+  };
+}

modules/dev/editor/default.nix

···
+{ imports = [ ./helix.nix ]; }

modules/dev/editor/helix.nix

···
+{
+  lib,
+  pkgs,
+  inputs',
+  self',
+  config,
+  ...
+}:
+let
+  jj-patch = pkgs.fetchurl {
+    url = "https://patch-diff.githubusercontent.com/raw/helix-editor/helix/pull/14519.patch";
+    hash = "sha256-e4xaKcOhAKKYbJXhYHbjdFk6CwLubmCp+m7y//MmQFw=";
+  };
+  helix = inputs'.helix.packages.default.overrideAttrs (_: {
+    patches = jj-patch;
+  });
+  global-tools = with pkgs; [
+    nixfmt-rfc-style
+    biome
+    golangci-lint
+    gotools
+    gopls
+    sql-formatter
+    nodePackages.prettier
+  ];
+in
+lib.mkIf config.dev.editor.enable {
+  home.packages = global-tools;
+  programs.helix = {
+    enable = true;
+    defaultEditor = true;
+    package = helix;
+    extraPackages =
+      with pkgs;
+      [
+        golangci-lint-langserver
+        nixd
+        marksman
+        nodePackages.typescript-language-server
+        vscode-langservers-extracted
+        yaml-language-server
+        typos-lsp
+        nil
+      ]
+      ++ global-tools;
+
+    ignores = [
+      ".zig-cache"
+      "node_modules"
+      ".direnv"
+      "!/notes"
+    ];
+
+    settings = {
+      keys =
+        let
+          plusMenu = {
+            g = ''
+              :sh ${pkgs.nushell}/bin/nu -c '
+                let line = ("%{selection_line_start}" | default "%{cursor_line}")
+                let line_end = (if ("%{selection_line_end}" | is-not-empty) {$"-L%{selection_line_end}"} else "")
+                let root = (${pkgs.jujutsu}/bin/jj workspace root | str trim)
+                let rel_path = ("%{file_path_absolute}" | path relative-to $root)
+                let ref = (${pkgs.jujutsu}/bin/jj log -r `heads(::@ & bookmarks())` -T `remote_bookmarks` | parse -r `(?<branch>[^\s]+)@(?<remote>[^\s]+)` | sort-by remote -r | get branch.0)
+                let remote_url = (${pkgs.jujutsu}/bin/jj git remote list | parse "{remote} {url}" | where remote == origin | get url.0 | if ($in | str contains '://') {$in} else $"https://($in | str replace ':' '/')" | url parse)
+                let url = $"https://($remote_url.host)($remote_url.path | str replace ".git" "")/blob/($ref)/($rel_path)#L($line)($line_end)"
+                $url | ${pkgs.wl-clipboard}/bin/wl-copy
+              '
+            '';
+            b = ":echo %sh{git blame -L %{cursor_line},+1 %{buffer_name}}";
+            p = ":sh echo %{buffer_name} | ${pkgs.wl-clipboard}/bin/wl-copy";
+          };
+          goMenu = {
+            "8" = [
+              "move_prev_word_start"
+              "move_next_word_end"
+            ];
+            "c" = caseMenu;
+          };
+          caseMenu = {
+            p = ":pipe ${lib.getExe pkgs.sttr} pascal";
+            c = ":pipe ${lib.getExe pkgs.sttr} camel";
+            k = ":pipe ${lib.getExe pkgs.sttr} kebab";
+            K = ":pipe ${lib.getExe pkgs.sttr} kebab | ${lib.getExe pkgs.sttr} upper";
+            s = ":pipe ${lib.getExe pkgs.sttr} snake";
+            S = ":pipe ${lib.getExe pkgs.sttr} snake | ${lib.getExe pkgs.sttr} upper";
+            t = ":pipe ${lib.getExe pkgs.sttr} title";
+          };
+          runMenu = {
+            f = [
+              ":sh golangci-lint run --issues-exit-code=0 --fix %{buffer_name}"
+              ":reload"
+            ];
+          };
+          scrollFast = {
+            "C-j" = lib.replicate 5 "move_visual_line_down";
+            "C-k" = lib.replicate 5 "move_visual_line_up";
+          };
+        in
+        {
+          normal = {
+            "+" = plusMenu;
+            "-" = runMenu;
+            "g" = goMenu;
+          }
+          // scrollFast;
+          select = {
+            "+" = plusMenu;
+            "-" = runMenu;
+            "." = goMenu;
+          }
+          // scrollFast;
+        };
+
+      editor = {
+        scrolloff = 10;
+        text-width = 120;
+        rulers = [ 120 ];
+        bufferline = "multiple";
+        color-modes = true;
+        auto-format = true;
+        auto-save = true;
+        lsp = {
+          snippets = true;
+          display-color-swatches = true;
+          display-messages = true;
+        };
+        soft-wrap = {
+          enable = true;
+        };
+        statusline = {
+          left = [
+            "mode"
+            "spacer"
+            "diagnostics"
+            "version-control"
+            "file-name"
+            "read-only-indicator"
+            "file-modification-indicator"
+            "spinner"
+          ];
+          right = [
+            "file-encoding"
+            "file-type"
+            "selections"
+            "position"
+          ];
+        };
+        gutters = [
+          "line-numbers"
+          "diagnostics"
+          "diff"
+        ];
+        end-of-line-diagnostics = "hint";
+        inline-diagnostics = {
+          cursor-line = "warning"; # show warnings and errors on the cursorline inline
+        };
+        cursor-shape = {
+          insert = "bar";
+          normal = "block";
+          select = "underline";
+        };
+        whitespace.render.tab = "all";
+        indent-guides = {
+          render = true;
+          character = "┊";
+          skip-levels = 1;
+        };
+      };
+    };
+
+    languages = {
+      language-server = {
+        biome = {
+          command = "biome";
+          args = [ "lsp-proxy" ];
+        };
+        nu-lsp = {
+          command = "nu";
+          args = [
+            "--lsp"
+            "--no-config-file"
+          ];
+        };
+        typos = {
+          command = "typos-lsp";
+          config = {
+            diagnosticSeverity = "Warning";
+          };
+        };
+        yaml-language-server = {
+          config = {
+            enabled = true;
+            enabledForFilesGlob = "*.{yaml,yml}";
+            diagnosticsLimit = 50;
+            showDiagnosticsDirectly = false;
+            config = {
+              schemas = {
+                kubernetes = "templates/**";
+              };
+              completion = true;
+              hover = true;
+            };
+          };
+        };
+        golangci-lint-lsp = {
+          command = "golangci-lint-langserver";
+          config = {
+            command = [
+              "nu"
+              "-c"
+              ''
+                let args = [
+                  --output.json.path=stdout
+                  --path-mode=abs
+                  --issues-exit-code=1
+                  --show-stats=false
+                ]
+
+                if ($env.GOLANGCI_LINT_CONFIG? | is-not-empty) {
+                  golangci-lint run --config $env.GOLANGCI_LINT_CONFIG ...$args
+                } else {
+                  golangci-lint run ...$args
+                }
+              ''
+            ];
+          };
+        };
+        rubocop = {
+          command = "rubocop";
+          args = [ "--lsp" ];
+        };
+        ruby-lsp = {
+          command = "ruby-lsp";
+          config = {
+            diagnostics = true;
+            formatting = true;
+            config = {
+              initializationOptions = {
+                enabledFeatures = {
+                  codeActions = true;
+                  codeLens = true;
+                  completion = true;
+                  definition = true;
+                  diagnostics = true;
+                  documentHighlights = true;
+                  documentLink = true;
+                  documentSymbols = true;
+                  foldingRanges = true;
+                  formatting = true;
+                  hover = true;
+                  inlayHint = true;
+                  onTypeFormatting = true;
+                  selectionRanges = true;
+                  semanticHighlighting = true;
+                  signatureHelp = true;
+                  typeHierarchy = true;
+                  workspaceSymbol = true;
+                };
+                featuresConfiguration = {
+                  inlayHint = {
+                    implicitHashValue = true;
+                    implicitRescue = true;
+                  };
+                };
+              };
+            };
+          };
+        };
+        thriftls = {
+          command = "thriftls";
+          except-features = [ "format" ];
+        };
+      };
+
+      language =
+        let
+          defaults = [ "typos" ];
+        in
+        map
+          (
+            lang:
+            lang
+            // {
+              language-servers = if lang ? language-servers then lang.language-servers ++ defaults else defaults;
+            }
+          )
+          (
+            [
+              {
+                name = "nix";
+                language-servers = [
+                  "nixd"
+                  "nil"
+                ];
+                formatter = {
+                  command = "nixfmt";
+                  args = [
+                    "-s"
+                    "-w"
+                    "120"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "go";
+                language-servers = [
+                  "gopls"
+                  "golangci-lint-lsp"
+                ];
+                formatter = {
+                  command = "goimports";
+                };
+                auto-format = true;
+              }
+              {
+                name = "ruby";
+                language-servers = [
+                  "ruby-lsp"
+                  "rubocop"
+                ];
+                auto-format = true;
+              }
+              {
+                name = "html";
+                language-servers = [ "vscode-html-language-server" ];
+                formatter = {
+                  command = "prettier";
+                  args = [
+                    "--stdin-filepath"
+                    "file.html"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "javascript";
+                language-servers = [
+                  {
+                    name = "typescript-language-server";
+                    except-features = [ "format" ];
+                  }
+                  "biome"
+                ];
+                auto-format = true;
+              }
+              {
+                name = "json";
+                language-servers = [
+                  {
+                    name = "vscode-json-language-server";
+                    except-features = [ "format" ];
+                  }
+                  "biome"
+                ];
+                formatter = {
+                  command = "biome";
+                  args = [
+                    "format"
+                    "--stdin-file-path"
+                    "file.json"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "graphql";
+                formatter = {
+                  command = "biome";
+                  args = [
+                    "format"
+                    "--stdin-file-path"
+                    "file.gql"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "jsonc";
+                language-servers = [
+                  {
+                    name = "vscode-json-language-server";
+                    except-features = [ "format" ];
+                  }
+                  "biome"
+                ];
+                formatter = {
+                  command = "biome";
+                  args = [
+                    "format"
+                    "--stdin-file-path"
+                    "file.jsonc"
+                  ];
+                };
+                file-types = [
+                  "jsonc"
+                  "hujson"
+                ];
+                auto-format = true;
+              }
+              {
+                name = "jsx";
+                language-servers = [
+                  {
+                    name = "typescript-language-server";
+                    except-features = [ "format" ];
+                  }
+                  "biome"
+                ];
+                formatter = {
+                  command = "biome";
+                  args = [
+                    "format"
+                    "--stdin-file-path"
+                    "file.jsx"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "tsx";
+                language-servers = [
+                  {
+                    name = "typescript-language-server";
+                    except-features = [ "format" ];
+                  }
+                  "biome"
+                ];
+                formatter = {
+                  command = "biome";
+                  args = [
+                    "format"
+                    "--stdin-file-path"
+                    "file.tsx"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "typescript";
+                language-servers = [
+                  {
+                    name = "typescript-language-server";
+                    except-features = [ "format" ];
+                  }
+                  "biome"
+                ];
+                formatter = {
+                  command = "biome";
+                  args = [
+                    "format"
+                    "--stdin-file-path"
+                    "file.ts"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "yaml";
+                language-servers = [ "yaml-language-server" ];
+                formatter = {
+                  command = "prettier";
+                  args = [
+                    "--stdin-filepath"
+                    "file.yaml"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "helm";
+                language-servers = [ "helm_ls" ];
+              }
+              {
+                name = "typst";
+                language-servers = [ "tinymist" ];
+              }
+              {
+                name = "markdown";
+                language-servers = [
+                  "marksman"
+                  # "vale-ls"
+                ];
+                text-width = 100;
+                rulers = [ 100 ];
+                soft-wrap = {
+                  enable = true;
+                  wrap-at-text-width = true;
+                };
+                formatter = {
+                  command = "prettier";
+                  args = [
+                    "--stdin-filepath"
+                    "file.md"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "sql";
+                formatter = {
+                  command = "sql-formatter";
+                  args = [
+                    "-c"
+                    (builtins.toJSON {
+                      keywordCase = "upper";
+                      functionCase = "upper";
+                      dataTypeCase = "upper";
+                      identifierCase = "lower";
+                      language = "postgresql";
+                      expressionWidth = 80;
+                      tabWidth = 2;
+                    })
+                  ];
+                };
+                auto-format = false;
+              }
+              {
+                name = "nu";
+                language-servers = [ "nu-lsp" ];
+                formatter = {
+                  command = "${lib.getExe self'.packages.topiary-nu}";
+                  args = [
+                    "format"
+                    "--language"
+                    "nu"
+                  ];
+                };
+                auto-format = true;
+              }
+              {
+                name = "thrift";
+                language-servers = [ "thriftls" ];
+                formatter = {
+                  command = "thriftls";
+                  args = [
+                    "format"
+                    "-indent"
+                    "2space"
+                  ];
+                };
+                auto-format = true;
+              }
+            ]
+            ++ map (lang: { name = lang; }) [
+              "git-attributes"
+              "git-commit"
+              "git-config"
+              "git-ignore"
+              "git-rebase"
+            ]
+          );
+    };
+  };
+}

modules/dev/home.nix

···
+{
+  osConfig ? { },
+  lib,
+  ...
+}:
+let
+  inherit (lib) mkEnableOption;
+in
+{
+  config.dev = osConfig.dev or { };
+  options.dev = {
+    enable = mkEnableOption "all development tools";
+
+    shell.enable = mkEnableOption "shell-related tools";
+    editor.enable = mkEnableOption "editor tools";
+    vcs.enable = mkEnableOption "version control tools";
+    tools.enable = mkEnableOption "development utilities";
+  };
+  imports = [
+    ./shell
+    ./editor
+    ./vcs
+    ./tools
+  ];
+}

modules/dev/nixos.nix

···
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.dev;
+  inherit (lib) mkIf mkEnableOption mkDefault;
+in
+{
+  options.dev = {
+    enable = mkEnableOption "all development tools";
+
+    shell.enable = mkEnableOption "shell-related tools";
+    editor.enable = mkEnableOption "editor tools";
+    vcs.enable = mkEnableOption "version control tools";
+    tools.enable = mkEnableOption "development utilities";
+  };
+
+  config = {
+    dev.shell.enable = mkIf cfg.enable true;
+    dev.editor.enable = mkIf cfg.enable true;
+    dev.vcs.enable = mkIf cfg.enable true;
+    dev.tools.enable = mkIf cfg.enable true;
+
+    users.defaultUserShell = mkIf (cfg.enable || cfg.shell.enable) pkgs.nushell;
+    environment.shells = mkIf (cfg.enable || cfg.shell.enable) [ pkgs.nushell ];
+
+    programs.nano.enable = mkDefault (!(cfg.enable || cfg.editor.enable));
+  };
+}

modules/dev/shell/atuin.nix

···
+{ config, lib, ... }:
+{
+  config = lib.mkIf config.dev.shell.enable {
+    programs.atuin = {
+      enable = true;
+      flags = [ "--disable-up-arrow" ];
+      settings = {
+        enter_accept = false;
+        style = "compact";
+        sync_address = "http://reg.dolly-ruffe.ts.net:8888";
+      };
+    };
+  };
+}

modules/dev/shell/default.nix

···
+{
+  imports = [
+    ./atuin.nix
+    ./nushell.nix
+    ./starship.nix
+    ./zellij.nix
+  ];
+}

modules/dev/shell/nushell.nix

···
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  config = lib.mkIf config.dev.shell.enable {
+    programs.nushell = {
+      enable = true;
+      shellAliases = {
+        k = "kubectl";
+        fg = "job unfreeze";
+        nn = "exec $env.EDITOR ~/notes";
+      };
+      configFile.text = ''
+        $env.config = {
+          show_banner: false,
+        }
+
+        if ("~/.profile.nu" | path exists) {
+          source-env "~/.profile.nu"
+        }
+
+        ${lib.meta.getExe pkgs.pokego} -l french
+      '';
+
+      extraLogin = ''
+        bash -c ". /etc/profile && env"
+         | parse "{n}={v}"
+         | where n not-in $env or v != ($env | get $it.n)
+         | where n not-in ["_", "LAST_EXIT_CODE", "DIRS_POSITION"]
+         | transpose --header-row
+         | into record
+         | load-env
+      '';
+    };
+  };
+}

modules/dev/shell/starship.nix

···
+{
+  config,
+  inputs',
+  lib,
+  ...
+}:
+{
+  config = lib.mkIf config.dev.shell.enable {
+    xdg.configFile."starship-jj/starship-jj.toml".text = ''
+      "$schema"="https://gitlab.com/Lanastara/lanastara_foss/-/raw/v0.3.0/schema.json?ref_type=tags"
+      module_separator = " "
+      timeout = 1000
+      [bookmarks]
+      search_depth = 100
+      exclude = []
+
+      [[module]]
+      type = "Commit"
+      empty_text = ""
+      [module.change]
+      fg = "magenta"
+
+      [[module]]
+      type = "Bookmarks"
+      separator = " "
+      color = "Magenta"
+      behind_symbol = "⇡"
+
+      [[module]]
+      type = "State"
+      separator = " "
+
+      [module.conflict]
+      disabled = true
+      text = "(CONFLICT)"
+      color = "Red"
+
+      [module.divergent]
+      disabled = true
+      text = "(DIVERGENT)"
+      color = "Cyan"
+
+      [module.empty]
+      disabled = false
+      text = "(EMPTY)"
+      color = "Yellow"
+
+      [module.immutable]
+      disabled = false
+      text = "(IMMUTABLE)"
+      color = "Yellow"
+
+      [module.hidden]
+      disabled = false
+      text = "(HIDDEN)"
+      color = "Yellow"
+
+      [[module]]
+      type = "Metrics"
+      template = "[{changed} {added}{removed}]"
+      color = "Magenta"
+
+      [module.changed_files]
+      prefix = ""
+      suffix = ""
+      color = "Cyan"
+
+      [module.added_lines]
+      prefix = "+"
+      suffix = ""
+      color = "Green"
+
+      [module.removed_lines]
+      prefix = "-"
+      suffix = ""
+      color = "Red"
+    '';
+    programs.starship = {
+      enable = true;
+      settings = {
+        format = lib.concatMapStrings (s: s) [
+          "$directory"
+          "$nix_shell"
+          "$custom"
+          "$cmd_duration"
+          "$line_break"
+          "$character"
+        ];
+        nix_shell = {
+          format = "[$symbol]($style)";
+        };
+        custom = {
+          jj = {
+            command = ''${lib.getExe' inputs'.starship-jj.packages.default "starship-jj"} --ignore-working-copy starship prompt'';
+            format = "[$symbol](blue bold) $output";
+            symbol = "󱗆";
+            when = "jj root --ignore-working-copy";
+          };
+          git_branch = {
+            when = true;
+            command = "jj root >/dev/null 2>&1 || starship module git_branch";
+            description = "Only show git_branch if we're not in a jj repo";
+          };
+        };
+      };
+    };
+  };
+}

modules/dev/tools/default.nix

···
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  config = lib.mkIf config.dev.tools.enable {
+    home.packages = [
+      pkgs.sd
+      pkgs.fd
+      pkgs.uutils-coreutils-noprefix
+    ];
+
+    programs = {
+      zoxide.enable = true;
+      carapace.enable = true;
+
+      ripgrep.enable = true;
+      bat.enable = true;
+      less = {
+        enable = true;
+        config = ''
+          #env
+          LESS = -S -R -i
+        '';
+      };
+    };
+  };
+
+  imports = [
+    ./direnv.nix
+    ./opencode.nix
+    ./yazi.nix
+  ];
+}

modules/dev/tools/direnv.nix

···
+{ config, lib, ... }:
+{
+  config = lib.mkIf config.dev.tools.enable {
+    programs.direnv = {
+      enable = true;
+      nix-direnv.enable = true;
+      silent = true;
+      stdlib = ''
+        alias() {
+        	if [ ! $PWD/.direnv/bin ]; then
+        		mkdir $PWD/.direnv/bin
+        	fi
+
+        	echo "#!/usr/bin/env sh
+        $2 \$@" > "$PWD/.direnv/bin/$1"
+        	chmod +x "$PWD/.direnv/bin/$1"
+        }
+      '';
+    };
+
+    programs.nushell.extraConfig = ''
+      $env.DIRENV_LOG_FORMAT = ""
+    '';
+  };
+}

modules/dev/tools/opencode.nix

···
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  config = lib.mkIf config.dev.tools.enable {
+    programs.opencode =
+      let
+        opencodePkg = pkgs.symlinkJoin {
+          name = "opencode-wrapped";
+          paths = [
+            pkgs.opencode
+            pkgs.nixd
+            pkgs.alejandra
+          ];
+          buildInputs = [ pkgs.makeWrapper ];
+          postBuild = ''
+            wrapProgram $out/bin/opencode \
+              --set SHELL ${pkgs.bash}/bin/bash
+          '';
+        };
+      in
+      {
+        enable = true;
+        package = opencodePkg;
+        enableMcpIntegration = true;
+        settings = {
+          theme = "catppuccin-macchiato";
+          formatter = {
+            alejandra = {
+              command = [ "alejandra" ];
+              extensions = [ ".nix" ];
+            };
+          };
+          agent = {
+            stack-analyst = {
+              description = "Analyzes stack traces to map errors to code paths and identify root causes";
+              prompt = "You are a stack trace analyst. Analyze the provided stack trace to identify the root cause and suggest fixes.";
+              mode = "primary";
+              tools = {
+                read = true;
+                glob = true;
+                grep = true;
+                write = true;
+                edit = false;
+                bash = true;
+              };
+              permissions = {
+                bash = {
+                  "git status" = "allow";
+                  "git log" = "allow";
+                  "*" = "ask";
+                };
+              };
+            };
+          };
+          mcp = {
+            gopls = {
+              type = "local";
+              enabled = true;
+              command = [
+                "gopls"
+                "mcp"
+              ];
+            };
+          };
+        };
+      };
+  };
+}

modules/dev/tools/yazi.nix

···
+{ config, lib, ... }:
+{
+  config = lib.mkIf config.dev.tools.enable {
+    programs.yazi = {
+      enable = true;
+    };
+  };
+}

modules/dev/vcs/default.nix

···
+{
+  imports = [
+    ./git.nix
+    ./jj.nix
+  ];
+}

modules/dev/vcs/git.nix

···
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  config = lib.mkIf config.dev.vcs.enable {
+    home.packages = [ pkgs.gh ];
+    programs.git = {
+      enable = true;
+      ignores = [
+        "/notes"
+        "/tmp"
+        ".direnv"
+        ".envrc"
+      ];
+
+      signing = {
+        key = "~/.ssh/id_ed25519.pub";
+        signByDefault = true;
+      };
+
+      settings = {
+        user = {
+          name = "karitham";
+          email = "[e-mail]";
+        };
+
+        alias = {
+          co = "checkout";
+          ci = "commit";
+          st = "status";
+          br = "branch";
+          hist = "log --pretty=format:'%h %ad | %s%d [%an]' --graph --date=short";
+          type = "cat-file -t";
+          dump = "cat-file -p";
+          dft = "difftool";
+        };
+
+        init.defaultBranch = "main";
+        merge.stat = true;
+        pull.rebase = true;
+
+        push = {
+          autoSetupRemote = true;
+          default = "current";
+        };
+
+        url."ssh://[e-mail]/".insteadOf = "https://github.com/";
+
+        gpg = {
+          format = "ssh";
+          ssh.defaultKeyCommand = "ssh-add -L";
+        };
+
+        core = {
+          editor = config.home.sessionVariables.EDITOR;
+          whitespace = "fix,-indent-with-non-tab,trailing-space,cr-at-eol";
+        };
+
+        pager.difftool = true;
+        diff.tool = "difftastic";
+        difftool = {
+          prompt = false;
+          difftastic.cmd = "${pkgs.difftastic}/bin/difft --color auto --background light --display side-by-side \"$LOCAL\" \"$REMOTE\"";
+        };
+
+        rebase = {
+          autoSquash = true;
+          autoStash = true;
+          updateRefs = true;
+        };
+
+        rerere = {
+          enabled = true;
+          autoUpdate = true;
+        };
+      };
+    };
+  };
+}

modules/dev/vcs/jj.nix

···
+{ config, lib, ... }:
+{
+  config = lib.mkIf config.dev.vcs.enable {
+    programs.jujutsu = {
+      enable = true;
+
+      settings = {
+        user = {
+          email = "[e-mail]";
+          name = "karitham";
+        };
+        signing = {
+          behavior = "own";
+          backend = "ssh";
+          key = "~/.ssh/id_ed25519.pub";
+        };
+        git = {
+          write-change-id-header = true;
+          track-default-bookmark-on-clone = true;
+        };
+        remotes."origin".auto-track-bookmarks = "glob:*";
+        revsets = {
+          log = "..@ | branches | curbranch::@ | @::nextbranch | downstream(@, branchesandheads)";
+        };
+        revset-aliases = {
+          "immutable_heads()" = "builtin_immutable_heads() | (trunk().. & ~mine())";
+          "downstream(x,y)" = "(x::y) & y";
+          "branches" = "downstream(trunk(), bookmarks()) & mine()";
+          "branchesandheads" = "branches | (heads(trunk()::) & mine())";
+          "curbranch" = "latest(branches::@- & branches)";
+          "nextbranch" = "roots(@:: & branchesandheads)";
+        };
+        ui = {
+          default-command = [
+            "log"
+            "--no-pager"
+            "-n"
+            "10"
+          ];
+          movement.edit = true;
+          editor = "hx";
+        };
+      };
+    };
+
+    programs.delta = {
+      enable = true;
+      enableJujutsuIntegration = true;
+      enableGitIntegration = true;
+    };
+  };
+}

modules/hardware/peripherals.nix

···
+{ pkgs, ... }:
+{
+  hardware.bluetooth.enable = true;
+  hardware.keyboard.qmk.enable = true;
+  services.udev.packages = with pkgs; [ via ];
+}

modules/home/default.nix

···
   self,
   self',
   ...
-}: {
-  imports = [inputs.home-manager.nixosModules.default];
-  users.users.${config.my.username} =
-    if config.my.username != "root"
-    then {
-      home = "/home/${config.my.username}";
-      isNormalUser = true;
-      extraGroups = [
-        "networkmanager"
-        "docker"
-        "wheel"
-      ];
-    }
-    else {};
+}:
+{
+  imports = [
+    inputs.home-manager.nixosModules.default
+    inputs.catppuccin.nixosModules.catppuccin
+  ];
+
+  catppuccin = {
+    enable = true;
+    flavor = "macchiato";
+  };
 
   home-manager = {
     extraSpecialArgs = {
···
     };
     backupFileExtension = "bak";
     users.${config.my.username} = {
-      home.username = config.my.username;
-      home.stateVersion = "25.11";
+      imports = [ inputs.catppuccin.homeModules.default ];
 
-      catppuccin = {
-        inherit (config.catppuccin) enable;
-        inherit (config.catppuccin) flavor;
+      home = {
+        inherit (config.my) username;
+        stateVersion = "25.11";
       };
+
+      catppuccin = { inherit (config.catppuccin) flavor enable; };
 
       nixpkgs.overlays = [
         inputs.self.overlays.default
         inputs.niri.overlays.niri
         inputs.ghostty.overlays.default
         inputs.knixpkgs.overlays.default
-      ];
-
-      imports = [
-        inputs.catppuccin.homeModules.default
-        ./desktop
-        ./dev
       ];
     };
   };

modules/home/desktop/browser.nix

···
-{
-  lib,
-  osConfig,
-  pkgs,
-  ...
-}: {
-  options.browser.default = lib.mkOption {
-    description = "default browser xdg file";
-    default = "firefox-devedition.desktop";
-    type = lib.types.str;
-  };
-
-  config = lib.mkIf osConfig.desktop.enable {
-    home = {
-      packages = [pkgs.firefox-devedition];
-    };
-  };
-}

modules/home/desktop/cursor.nix modules/desktop/wm/cursor.nix

···
+{ lib, config, ... }:
 {
-  lib,
-  osConfig,
-  ...
-}: {
-  config = lib.mkIf osConfig.desktop.enable {
+  config = lib.mkIf config.desktop.wm.enable {
     catppuccin.cursors.enable = true;
     home.pointerCursor = {
       gtk.enable = true;

modules/home/desktop/default.nix modules/desktop/wm/default.nix

···
-_: {
+{
   imports = [
-    ./browser.nix
     ./cursor.nix
-    ./discord.nix
     ./dunst.nix
-    ./easyeffects.nix
     ./fuzzel.nix
-    ./ghostty.nix
     ./hyprlock.nix
     ./hyprpaper.nix
     ./niri.nix
-    ./rnnoise.nix
     ./waybar.nix
     ./xdg.nix
   ];

modules/home/desktop/discord.nix

···
-{
-  lib,
-  osConfig,
-  ...
-}: {
-  config = lib.mkIf osConfig.desktop.enable {
-    programs.vesktop.enable = true;
-  };
-}

modules/home/desktop/dunst.nix

···
-{
-  osConfig,
-  lib,
-  ...
-}: {
-  services.dunst = lib.mkIf osConfig.desktop.enable {
-    enable = true;
-  };
-}

modules/home/desktop/easyeffects.nix

···
-_: {
-  xdg.configFile."easyeffects/output".source = ./easyeffects;
-  services.easyeffects = {
-    enable = true;
-  };
-}

modules/home/desktop/fuzzel.nix

···
-{
-  osConfig,
-  lib,
-  ...
-}: {
-  programs.fuzzel = lib.mkIf osConfig.desktop.enable {
-    enable = true;
-    settings.main = {
-      terminal = "ghostty";
-    };
-  };
-}

modules/home/desktop/ghostty.nix modules/desktop/terminal/ghostty.nix

···
 {
+  config,
   osConfig,
   lib,
   inputs',
   ...
-}: {
-  config = lib.mkIf osConfig.desktop.enable {
+}:
+{
+  config = lib.mkIf config.desktop.terminal.enable {
     programs.ghostty = {
       enable = true;
       package = inputs'.ghostty.packages.default;

modules/home/desktop/hyprlock.nix modules/desktop/wm/hyprlock.nix

···
 {
   lib,
   osConfig,
+  config,
   ...
-}: {
-  config = lib.mkIf osConfig.desktop.enable {
+}:
+{
+  config = lib.mkIf config.desktop.wm.enable {
     services.hypridle = {
       enable = true;
       settings = {
···
 
         background = {
           monitor = "";
-          path = "${osConfig.desktop.wallpaper}";
+          path = "${config.desktop.wallpaper}";
           blur_passes = 0;
           color = "$base";
         };

modules/home/desktop/hyprpaper.nix

···
-{
-  osConfig,
-  lib,
-  ...
-}: {
-  config = lib.mkIf osConfig.desktop.enable {
-    services.hyprpaper = {
-      enable = true;
-      settings = {
-        preload = ["${osConfig.desktop.wallpaper}"];
-        wallpaper = [", ${osConfig.desktop.wallpaper}"];
-      };
-    };
-  };
-}

modules/home/desktop/niri.nix

···
-{
-  config,
-  osConfig,
-  lib,
-  pkgs,
-  ...
-}: {
-  config = lib.mkIf (osConfig.desktop.enable && osConfig.desktop.enable) {
-    home.packages = [pkgs.nautilus]; # xdg-desktop-portal-gnome wants it
-    programs.niri = {
-      settings = {
-        environment = {
-          NIXOS_OZONE_WL = "1";
-          ELECTRON_OZONE_PLATFORM_HINT = "auto";
-          QT_QPA_PLATFORMTHEME = "qt5ct";
-          QT_QPA_PLATFORM = "wayland";
-          DISPLAY = ":0";
-          GTK_IM_MODULE = "simple";
-        };
-
-        screenshot-path = null;
-        prefer-no-csd = true;
-
-        input = {
-          focus-follows-mouse = {
-            enable = true;
-            max-scroll-amount = "80%";
-          };
-          keyboard = {
-            repeat-delay = 300;
-            repeat-rate = 5;
-            xkb = {
-              layout = "us";
-              variant = "intl";
-            };
-          };
-
-          mouse = {
-            accel-profile = "flat";
-            accel-speed = 0.5;
-          };
-
-          touchpad = {
-            tap = true;
-            dwt = true;
-            natural-scroll = true;
-            click-method = "clickfinger";
-          };
-        };
-
-        spawn-at-startup = [
-          {
-            command = [
-              "systemctl --user restart waybar.service"
-            ];
-          }
-        ];
-
-        layout = {
-          gaps = 16;
-          always-center-single-column = true;
-          empty-workspace-above-first = true;
-          default-column-width = {
-            proportion = 0.5;
-          };
-        };
-
-        window-rules = [
-          {
-            geometry-corner-radius = let
-              radius = 8.0;
-            in {
-              bottom-left = radius;
-              bottom-right = radius;
-              top-left = radius;
-              top-right = radius;
-            };
-            clip-to-geometry = true;
-          }
-          {
-            matches = [
-              {
-                title = "Picture-in-Picture";
-              }
-            ];
-            open-floating = true;
-            default-floating-position = {
-              x = 16;
-              y = 16;
-              relative-to = "bottom-right";
-            };
-          }
-        ];
-
-        outputs = rec {
-          eDP-1 = {
-            mode = null;
-            position = {
-              x = HDMI-A-1.mode.width;
-              y = 0;
-            };
-          };
-          HDMI-A-1 = {
-            mode = {
-              width = 2560;
-              height = 1440;
-            };
-            position = {
-              x = 0;
-              y = 0;
-            };
-          };
-        };
-
-        binds = with config.lib.niri.actions; let
-          # programs.niri.settings.binds."Mod+Q".action.close-window = []
-          toAction = act: dir: (lib.mapAttrs' (
-              argName: argValue:
-                lib.nameValuePair "${argName}+${dir.name}" {
-                  action = {
-                    "${argValue}-${dir.value}" = [];
-                  };
-                }
-            )
-            act);
-          windowMoves = lib.mergeAttrsList (
-            (
-              map
-              (toAction {
-                "Mod" = "focus";
-                "Mod+Ctrl" = "move";
-              })
-              (
-                lib.attrsToList {
-                  "Up" = "window-up";
-                  "k" = "window-up";
-                  "Down" = "window-down";
-                  "j" = "window-down";
-                  "Left" = "column-left";
-                  "h" = "column-left";
-                  "Right" = "column-right";
-                  "l" = "column-right";
-                  "I" = "workspace-down";
-                  "U" = "workspace-up";
-                }
-              )
-            )
-            ++ (
-              map
-              (toAction {
-                "Mod+Shift" = "focus";
-                "Mod+Ctrl+Shift" = "move-window-to";
-              })
-              (
-                lib.attrsToList {
-                  "Up" = "monitor-up";
-                  "K" = "monitor-up";
-                  "Down" = "monitor-down";
-                  "J" = "monitor-down";
-                  "Left" = "monitor-left";
-                  "H" = "monitor-left";
-                  "Right" = "monitor-right";
-                  "L" = "monitor-right";
-                  "I" = "workspace-down";
-                  "U" = "workspace-up";
-                }
-              )
-            )
-          );
-        in
-          {
-            "Mod+O".action = show-hotkey-overlay;
-            "Mod+Q".action.spawn = "${lib.getExe pkgs.ghostty}";
-            "Mod+R".action.spawn = "${lib.getExe pkgs.fuzzel}";
-            "Mod+C".action.close-window = [];
-
-            "Mod+Comma".action = consume-window-into-column;
-            "Mod+Period".action = expel-window-from-column;
-
-            "Mod+T".action = switch-preset-column-width;
-            "Mod+F".action = maximize-column;
-            "Mod+Shift+F".action = fullscreen-window;
-            "Mod+D".action = center-column;
-            "Mod+B".action = toggle-window-floating;
-
-            "Mod+Minus".action = set-column-width "-10%";
-            "Mod+Equal".action = set-column-width "+10%";
-            "Mod+Shift+Minus".action = set-window-height "-10%";
-            "Mod+Shift+Equal".action = set-window-height "+10%";
-
-            "Mod+Shift+Escape".action = toggle-keyboard-shortcuts-inhibit;
-            "Mod+Shift+E".action = quit;
-            "Mod+Shift+P".action = power-off-monitors;
-            "Mod+Shift+Ctrl+T".action = toggle-debug-tint;
-
-            "Mod+Shift+WheelScrollDown".action = focus-workspace-down;
-            "Mod+Shift+WheelScrollUp".action = focus-workspace-up;
-            "Mod+WheelScrollDown".action = focus-column-right;
-            "Mod+WheelScrollUp".action = focus-column-left;
-
-            "Mod+Shift+S".action.spawn = [
-              (lib.getExe pkgs.bash)
-              "-c"
-              ''${lib.getExe pkgs.slurp} -d | ${lib.getExe pkgs.grim} -t ppm -g - - | ${lib.getExe pkgs.satty} -f - --copy-command=${lib.getExe' pkgs.wl-clipboard "wl-copy"} --actions-on-escape="save-to-clipboard,exit"''
-            ];
-            "Mod+S".action.screenshot = {};
-
-            "XF86MonBrightnessDown".action.spawn = [
-              (lib.getExe pkgs.brightnessctl)
-              "set"
-              "5%-"
-            ];
-            "XF86MonBrightnessUp".action.spawn = [
-              (lib.getExe pkgs.brightnessctl)
-              "set"
-              "+5%"
-            ];
-            "XF86AudioLowerVolume".action.spawn = [
-              (lib.getExe' pkgs.wireplumber "wpctl")
-              "set-volume"
-              "@DEFAULT_AUDIO_SINK@"
-              "2%-"
-            ];
-            "XF86AudioRaiseVolume".action.spawn = [
-              (lib.getExe' pkgs.wireplumber "wpctl")
-              "set-volume"
-              "@DEFAULT_AUDIO_SINK@"
-              "2%+"
-            ];
-          }
-          // windowMoves;
-
-        animations = let
-          vm = {
-            kind.spring = {
-              damping-ratio = 0.75;
-              stiffness = 200;
-              epsilon = 0.0001;
-            };
-          };
-        in {
-          horizontal-view-movement = vm;
-          workspace-switch = vm;
-          window-resize = vm;
-
-          window-open = {
-            kind.easing = {
-              duration-ms = 200;
-              curve = "linear";
-            };
-            custom-shader = ''
-              vec4 open_color(vec3 coords_geo, vec3 size_geo) {
-                  vec3 coords_tex = niri_geo_to_tex * coords_geo;
-                  vec4 color = texture2D(niri_tex, coords_tex.st);
-
-                  vec2 coords = (coords_geo.xy - vec2(0.5, 0.5)) * size_geo.xy * 2.0;
-                  coords = coords / length(size_geo.xy);
-                  float p = niri_clamped_progress;
-                  if (p * p <= dot(coords, coords))
-                      color = vec4(0.0);
-
-                  return color;
-              }
-            '';
-          };
-        };
-      };
-    };
-  };
-}

modules/home/desktop/rnnoise.nix modules/desktop/audio/rnnoise.nix

···
 {
-  osConfig,
+  config,
   lib,
   pkgs,
   ...
-}: {
-  config = lib.mkIf osConfig.desktop.enable {
+}:
+{
+  config = lib.mkIf config.desktop.audio.enable {
     xdg.configFile."pipewire/pipewire.conf.d/99-input-denoising.conf".text = builtins.toJSON {
       "context.modules" = [
         {

modules/home/desktop/waybar.nix modules/desktop/wm/waybar.nix

···
   osConfig,
   lib,
   pkgs,
+  config,
   ...
-}: {
-  config = lib.mkIf osConfig.desktop.enable {
+}:
+{
+  config = lib.mkIf config.desktop.wm.enable {
     programs.waybar = {
       enable = true;
       systemd.enable = true;
···
           "backlight"
         ];
 
-        modules-center = lib.optional osConfig.desktop.enable "niri/workspaces";
+        modules-center = lib.optional config.desktop.wm.enable "niri/workspaces";
 
         modules-right = [
           "pulseaudio"
···
           critical-threshold = 80;
         };
 
-        backlight = let
-          bctl = lib.meta.getExe pkgs.brightnessctl;
-        in {
-          device = "eDP-1";
-          max-length = "4";
-          format = "{icon} {percent}%";
-          format-icons = [
-            ""
-            ""
-            ""
-            ""
-            ""
-            ""
-            ""
-            ""
-            ""
-          ];
-          on-scroll-up = pkgs.writeShellScript "brightness.sh" ''
-            MIN_BRIGHTNESS=5
-            current_brightness=$(${bctl} g)
-            max_brightness=$(${bctl} m)
-            min_brightness_raw=$((max_brightness * MIN_BRIGHTNESS / 100))
-            scaling_factor=30
-            decrement=$((max_brightness / scaling_factor))
-            new_brightness_raw=$((current_brightness - decrement))
-            if [ "$new_brightness_raw" -lt "$min_brightness_raw" ]; then
-              new_brightness_raw=$min_brightness_raw
-            fi
-            ${bctl} set "$new_brightness_raw"
-          '';
-          on-scroll-down = "${bctl} set +5%";
-        };
+        backlight =
+          let
+            bctl = lib.meta.getExe pkgs.brightnessctl;
+          in
+          {
+            device = "eDP-1";
+            max-length = "4";
+            format = "{icon} {percent}%";
+            format-icons = [
+              ""
+              ""
+              ""
+              ""
+              ""
+              ""
+              ""
+              ""
+              ""
+            ];
+            on-scroll-up = pkgs.writeShellScript "brightness.sh" ''
+              MIN_BRIGHTNESS=5
+              current_brightness=$(${bctl} g)
+              max_brightness=$(${bctl} m)
+              min_brightness_raw=$((max_brightness * MIN_BRIGHTNESS / 100))
+              scaling_factor=30
+              decrement=$((max_brightness / scaling_factor))
+              new_brightness_raw=$((current_brightness - decrement))
+              if [ "$new_brightness_raw" -lt "$min_brightness_raw" ]; then
+                new_brightness_raw=$min_brightness_raw
+              fi
+              ${bctl} set "$new_brightness_raw"
+            '';
+            on-scroll-down = "${bctl} set +5%";
+          };
 
         pulseaudio = {
           format = "{icon} {volume}%";

modules/home/desktop/xdg.nix

···
-{
-  config,
-  lib,
-  ...
-}: {
-  xdg.mimeApps = let
-    editor = "Helix.desktop";
-    browser = config.browser.default;
-  in {
-    enable = true;
-    defaultApplications = {
-      "x-scheme-handler/http " = browser;
-      "x-scheme-handler/https" = browser;
-      "x-scheme-handler/chrome" = browser;
-      "text/html" = browser;
-      "binary/octet-stream" = browser;
-      "image/jpeg" = browser;
-      "application/x-extension-htm" = browser;
-      "application/x-extension-html" = browser;
-      "application/x-extension-shtml" = browser;
-      "application/xhtml+xml" = browser;
-      "application/x-extension-xhtml" = browser;
-      "application/x-extension-xht" = browser;
-      "x-scheme-handler/about" = browser;
-      "x-scheme-handler/unknown" = browser;
-      "x-scheme-handler/discord" = "legcord.desktop";
-      "text/markdown" = editor;
-      "text/plain" = editor;
-    };
-    associations = {
-      added =
-        {
-          "x-scheme-handler/http" = browser;
-          "x-scheme-handler/https" = browser;
-          "text/html" = browser;
-          "binary/octet-stream" = browser;
-          "image/jpeg" = browser;
-        }
-        // lib.mergeAttrsList (
-          map
-          (lang: {
-            "text/x-${lang}" = editor;
-            "application/x-${lang}" = editor;
-          })
-          [
-            "python"
-            "go"
-            "mod"
-            "ruby"
-            "yaml"
-          ]
-        );
-    };
-  };
-}

modules/home/dev/atuin.nix

···
-_: {
-  programs.atuin = {
-    enable = true;
-    flags = [
-      "--disable-up-arrow"
-    ];
-    settings = {
-      enter_accept = false;
-      style = "compact";
-      sync_address = "http://reg.dolly-ruffe.ts.net:8888";
-    };
-  };
-}

modules/home/dev/default.nix

···
-_: {
-  imports = [
-    ./atuin.nix
-    ./direnv.nix
-    ./git.nix
-    ./helix.nix
-    ./jj.nix
-    ./mise.nix
-    ./nushell.nix
-    ./opencode.nix
-    ./starship.nix
-    ./utils.nix
-    ./yazi.nix
-    ./zellij.nix
-  ];
-}

modules/home/dev/direnv.nix

···
-_: {
-  programs.direnv = {
-    enable = true;
-    nix-direnv.enable = true;
-    silent = true;
-    stdlib = ''
-      alias() {
-      	if [ ! $PWD/.direnv/bin ]; then
-      		mkdir $PWD/.direnv/bin
-      	fi
-
-      	echo "#!/usr/bin/env sh
-      $2 \$@" > "$PWD/.direnv/bin/$1"
-      	chmod +x "$PWD/.direnv/bin/$1"
-      }
-    '';
-  };
-
-  programs.nushell.extraConfig = ''
-    $env.DIRENV_LOG_FORMAT = ""
-  '';
-}

modules/home/dev/git.nix

···
-{
-  config,
-  pkgs,
-  ...
-}: {
-  home.packages = [pkgs.gh];
-  programs.git = {
-    enable = true;
-    ignores = [
-      "/notes"
-      "/tmp"
-      ".direnv"
-      ".envrc"
-    ];
-
-    signing = {
-      key = "~/.ssh/id_ed25519.pub";
-      signByDefault = true;
-    };
-
-    settings = {
-      user = {
-        name = "karitham";
-        email = "[e-mail]";
-      };
-
-      alias = {
-        co = "checkout";
-        ci = "commit";
-        st = "status";
-        br = "branch";
-        hist = "log --pretty=format:'%h %ad | %s%d [%an]' --graph --date=short";
-        type = "cat-file -t";
-        dump = "cat-file -p";
-        dft = "difftool";
-      };
-
-      init.defaultBranch = "main";
-      merge.stat = true;
-      pull.rebase = true;
-
-      push = {
-        autoSetupRemote = true;
-        default = "current";
-      };
-
-      url."ssh://[e-mail]/".insteadOf = "https://github.com/";
-
-      gpg = {
-        format = "ssh";
-        ssh.defaultKeyCommand = "ssh-add -L";
-      };
-
-      core = {
-        editor = config.home.sessionVariables.EDITOR;
-        whitespace = "fix,-indent-with-non-tab,trailing-space,cr-at-eol";
-      };
-
-      pager.difftool = true;
-      diff.tool = "difftastic";
-      difftool = {
-        prompt = false;
-        difftastic.cmd = "${pkgs.difftastic}/bin/difft --color auto --background light --display side-by-side \"$LOCAL\" \"$REMOTE\"";
-      };
-
-      rebase = {
-        autoSquash = true;
-        autoStash = true;
-        updateRefs = true;
-      };
-
-      rerere = {
-        enabled = true;
-        autoUpdate = true;
-      };
-    };
-  };
-}

modules/home/dev/helix.nix

···
-{
-  lib,
-  pkgs,
-  inputs',
-  self',
-  ...
-}: let
-  jj-patch = pkgs.fetchurl {
-    url = "https://patch-diff.githubusercontent.com/raw/helix-editor/helix/pull/14519.patch";
-    hash = "sha256-e4xaKcOhAKKYbJXhYHbjdFk6CwLubmCp+m7y//MmQFw=";
-  };
-  helix = inputs'.helix.packages.default.overrideAttrs (_: {
-    patches = jj-patch;
-  });
-  global-tools = with pkgs; [
-    alejandra
-    biome
-    golangci-lint
-    gotools
-    gopls
-    sql-formatter
-    nodePackages.prettier
-  ];
-in {
-  home.packages = global-tools;
-  programs.helix = {
-    enable = true;
-    defaultEditor = true;
-    package = helix;
-    extraPackages = with pkgs;
-      [
-        golangci-lint-langserver
-        nixd
-        marksman
-        nodePackages.typescript-language-server
-        vscode-langservers-extracted
-        yaml-language-server
-        typos-lsp
-        nil
-      ]
-      ++ global-tools;
-
-    ignores = [
-      ".zig-cache"
-      "node_modules"
-      ".direnv"
-      "!/notes"
-    ];
-
-    settings = {
-      keys = let
-        plusMenu = {
-          g = ''
-            :sh ${pkgs.nushell}/bin/nu -c '
-              let line = ("%{selection_line_start}" | default "%{cursor_line}")
-              let line_end = (if ("%{selection_line_end}" | is-not-empty) {$"-L%{selection_line_end}"} else "")
-              let root = (${pkgs.jujutsu}/bin/jj workspace root | str trim)
-              let rel_path = ("%{file_path_absolute}" | path relative-to $root)
-              let ref = (${pkgs.jujutsu}/bin/jj log -r `heads(::@ & bookmarks())` -T `remote_bookmarks` | parse -r `(?<branch>[^\s]+)@(?<remote>[^\s]+)` | sort-by remote -r | get branch.0)
-              let remote_url = (${pkgs.jujutsu}/bin/jj git remote list | parse "{remote} {url}" | where remote == origin | get url.0 | if ($in | str contains '://') {$in} else $"https://($in | str replace ':' '/')" | url parse)
-              let url = $"https://($remote_url.host)($remote_url.path | str replace ".git" "")/blob/($ref)/($rel_path)#L($line)($line_end)"
-              $url | ${pkgs.wl-clipboard}/bin/wl-copy
-            '
-          '';
-          b = ":echo %sh{git blame -L %{cursor_line},+1 %{buffer_name}}";
-          p = ":sh echo %{buffer_name} | ${pkgs.wl-clipboard}/bin/wl-copy";
-        };
-        goMenu = {
-          "8" = [
-            "move_prev_word_start"
-            "move_next_word_end"
-          ];
-          "c" = caseMenu;
-        };
-        caseMenu = {
-          p = ":pipe ${lib.getExe pkgs.sttr} pascal";
-          c = ":pipe ${lib.getExe pkgs.sttr} camel";
-          k = ":pipe ${lib.getExe pkgs.sttr} kebab";
-          K = ":pipe ${lib.getExe pkgs.sttr} kebab | ${lib.getExe pkgs.sttr} upper";
-          s = ":pipe ${lib.getExe pkgs.sttr} snake";
-          S = ":pipe ${lib.getExe pkgs.sttr} snake | ${lib.getExe pkgs.sttr} upper";
-          t = ":pipe ${lib.getExe pkgs.sttr} title";
-        };
-        runMenu = {
-          f = [
-            ":sh golangci-lint run --issues-exit-code=0 --fix %{buffer_name}"
-            ":reload"
-          ];
-        };
-        scrollFast = {
-          "C-j" = lib.replicate 5 "move_visual_line_down";
-          "C-k" = lib.replicate 5 "move_visual_line_up";
-        };
-      in {
-        normal =
-          {
-            "+" = plusMenu;
-            "-" = runMenu;
-            "g" = goMenu;
-          }
-          // scrollFast;
-        select =
-          {
-            "+" = plusMenu;
-            "-" = runMenu;
-            "." = goMenu;
-          }
-          // scrollFast;
-      };
-
-      editor = {
-        scrolloff = 10;
-        text-width = 120;
-        rulers = [120];
-        bufferline = "multiple";
-        color-modes = true;
-        auto-format = true;
-        auto-save = true;
-        lsp = {
-          snippets = true;
-          display-color-swatches = true;
-          display-messages = true;
-        };
-        soft-wrap = {
-          enable = true;
-        };
-        statusline = {
-          left = [
-            "mode"
-            "spacer"
-            "diagnostics"
-            "version-control"
-            "file-name"
-            "read-only-indicator"
-            "file-modification-indicator"
-            "spinner"
-          ];
-          right = [
-            "file-encoding"
-            "file-type"
-            "selections"
-            "position"
-          ];
-        };
-        gutters = [
-          "line-numbers"
-          "diagnostics"
-          "diff"
-        ];
-        end-of-line-diagnostics = "hint";
-        inline-diagnostics = {
-          cursor-line = "warning"; # show warnings and errors on the cursorline inline
-        };
-        cursor-shape = {
-          insert = "bar";
-          normal = "block";
-          select = "underline";
-        };
-        whitespace.render.tab = "all";
-        indent-guides = {
-          render = true;
-          character = "┊";
-          skip-levels = 1;
-        };
-      };
-    };
-
-    languages = {
-      language-server = {
-        biome = {
-          command = "biome";
-          args = ["lsp-proxy"];
-        };
-        nu-lsp = {
-          command = "nu";
-          args = [
-            "--lsp"
-            "--no-config-file"
-          ];
-        };
-        typos = {
-          command = "typos-lsp";
-          config = {
-            diagnosticSeverity = "Warning";
-          };
-        };
-        yaml-language-server = {
-          config = {
-            enabled = true;
-            enabledForFilesGlob = "*.{yaml,yml}";
-            diagnosticsLimit = 50;
-            showDiagnosticsDirectly = false;
-            config = {
-              schemas = {
-                kubernetes = "templates/**";
-              };
-              completion = true;
-              hover = true;
-            };
-          };
-        };
-        golangci-lint-lsp = {
-          command = "golangci-lint-langserver";
-          config = {
-            command = [
-              "nu"
-              "-c"
-              ''
-                let args = [
-                  --output.json.path=stdout
-                  --path-mode=abs
-                  --issues-exit-code=1
-                  --show-stats=false
-                ]
-
-                if ($env.GOLANGCI_LINT_CONFIG? | is-not-empty) {
-                  golangci-lint run --config $env.GOLANGCI_LINT_CONFIG ...$args
-                } else {
-                  golangci-lint run ...$args
-                }
-              ''
-            ];
-          };
-        };
-        rubocop = {
-          command = "rubocop";
-          args = ["--lsp"];
-        };
-        ruby-lsp = {
-          command = "ruby-lsp";
-          config = {
-            diagnostics = true;
-            formatting = true;
-            config = {
-              initializationOptions = {
-                enabledFeatures = {
-                  codeActions = true;
-                  codeLens = true;
-                  completion = true;
-                  definition = true;
-                  diagnostics = true;
-                  documentHighlights = true;
-                  documentLink = true;
-                  documentSymbols = true;
-                  foldingRanges = true;
-                  formatting = true;
-                  hover = true;
-                  inlayHint = true;
-                  onTypeFormatting = true;
-                  selectionRanges = true;
-                  semanticHighlighting = true;
-                  signatureHelp = true;
-                  typeHierarchy = true;
-                  workspaceSymbol = true;
-                };
-                featuresConfiguration = {
-                  inlayHint = {
-                    implicitHashValue = true;
-                    implicitRescue = true;
-                  };
-                };
-              };
-            };
-          };
-        };
-        thriftls = {
-          command = "thriftls";
-          except-features = ["format"];
-        };
-      };
-
-      language = let
-        defaults = [
-          "typos"
-        ];
-      in
-        map
-        (
-          lang:
-            lang
-            // {
-              language-servers =
-                if lang ? language-servers
-                then lang.language-servers ++ defaults
-                else defaults;
-            }
-        )
-        (
-          [
-            {
-              name = "nix";
-              language-servers = [
-                "nixd"
-                "nil"
-              ];
-              formatter = {
-                command = "alejandra";
-              };
-              auto-format = true;
-            }
-            {
-              name = "go";
-              language-servers = [
-                "gopls"
-                "golangci-lint-lsp"
-              ];
-              formatter = {
-                command = "goimports";
-              };
-              auto-format = true;
-            }
-            {
-              name = "ruby";
-              language-servers = [
-                "ruby-lsp"
-                "rubocop"
-              ];
-              auto-format = true;
-            }
-            {
-              name = "html";
-              language-servers = ["vscode-html-language-server"];
-              formatter = {
-                command = "prettier";
-                args = [
-                  "--stdin-filepath"
-                  "file.html"
-                ];
-              };
-              auto-format = true;
-            }
-            {
-              name = "javascript";
-              language-servers = [
-                {
-                  name = "typescript-language-server";
-                  except-features = ["format"];
-                }
-                "biome"
-              ];
-              auto-format = true;
-            }
-            {
-              name = "json";
-              language-servers = [
-                {
-                  name = "vscode-json-language-server";
-                  except-features = ["format"];
-                }
-                "biome"
-              ];
-              formatter = {
-                command = "biome";
-                args = [
-                  "format"
-                  "--stdin-file-path"
-                  "file.json"
-                ];
-              };
-              auto-format = true;
-            }
-            {
-              name = "graphql";
-              formatter = {
-                command = "biome";
-                args = [
-                  "format"
-                  "--stdin-file-path"
-                  "file.gql"
-                ];
-              };
-              auto-format = true;
-            }
-            {
-              name = "jsonc";
-              language-servers = [
-                {
-                  name = "vscode-json-language-server";
-                  except-features = ["format"];
-                }
-                "biome"
-              ];
-              formatter = {
-                command = "biome";
-                args = [
-                  "format"
-                  "--stdin-file-path"
-                  "file.jsonc"
-                ];
-              };
-              file-types = [
-                "jsonc"
-                "hujson"
-              ];
-              auto-format = true;
-            }
-            {
-              name = "jsx";
-              language-servers = [
-                {
-                  name = "typescript-language-server";
-                  except-features = ["format"];
-                }
-                "biome"
-              ];
-              formatter = {
-                command = "biome";
-                args = [
-                  "format"
-                  "--stdin-file-path"
-                  "file.jsx"
-                ];
-              };
-              auto-format = true;
-            }
-            {
-              name = "tsx";
-              language-servers = [
-                {
-                  name = "typescript-language-server";
-                  except-features = ["format"];
-                }
-                "biome"
-              ];
-              formatter = {
-                command = "biome";
-                args = [
-                  "format"
-                  "--stdin-file-path"
-                  "file.tsx"
-                ];
-              };
-              auto-format = true;
-            }
-            {
-              name = "typescript";
-              language-servers = [
-                {
-                  name = "typescript-language-server";
-                  except-features = ["format"];
-                }
-                "biome"
-              ];
-              formatter = {
-                command = "biome";
-                args = [
-                  "format"
-                  "--stdin-file-path"
-                  "file.ts"
-                ];
-              };
-              auto-format = true;
-            }
-            {
-              name = "yaml";
-              language-servers = ["yaml-language-server"];
-              formatter = {
-                command = "prettier";
-                args = [
-                  "--stdin-filepath"
-                  "file.yaml"
-                ];
-              };
-              auto-format = true;
-            }
-            {
-              name = "helm";
-              language-servers = ["helm_ls"];
-            }
-            {
-              name = "typst";
-              language-servers = ["tinymist"];
-            }
-            {
-              name = "markdown";
-              language-servers = [
-                "marksman"
-                # "vale-ls"
-              ];
-              text-width = 100;
-              rulers = [100];
-              soft-wrap = {
-                enable = true;
-                wrap-at-text-width = true;
-              };
-              formatter = {
-                command = "prettier";
-                args = [
-                  "--stdin-filepath"
-                  "file.md"
-                ];
-              };
-              auto-format = true;
-            }
-            {
-              name = "sql";
-              formatter = {
-                command = "sql-formatter";
-                args = [
-                  "-c"
-                  (builtins.toJSON {
-                    keywordCase = "upper";
-                    functionCase = "upper";
-                    dataTypeCase = "upper";
-                    identifierCase = "lower";
-                    language = "postgresql";
-                    expressionWidth = 80;
-                    tabWidth = 2;
-                  })
-                ];
-              };
-              auto-format = false;
-            }
-            {
-              name = "nu";
-              language-servers = ["nu-lsp"];
-              formatter = {
-                command = "${lib.getExe self'.packages.topiary-nu}";
-                args = [
-                  "format"
-                  "--language"
-                  "nu"
-                ];
-              };
-              auto-format = true;
-            }
-            {
-              name = "thrift";
-              language-servers = ["thriftls"];
-              formatter = {
-                command = "thriftls";
-                args = [
-                  "format"
-                  "-indent"
-                  "2space"
-                ];
-              };
-              auto-format = true;
-            }
-          ]
-          ++ map (lang: {name = lang;}) [
-            "git-attributes"
-            "git-commit"
-            "git-config"
-            "git-ignore"
-            "git-rebase"
-          ]
-        );
-    };
-  };
-}

modules/home/dev/jj.nix

···
-_: {
-  programs.jujutsu = {
-    enable = true;
-
-    settings = {
-      user = {
-        email = "[e-mail]";
-        name = "karitham";
-      };
-      signing = {
-        behavior = "own";
-        backend = "ssh";
-        key = "~/.ssh/id_ed25519.pub";
-      };
-      git = {
-        write-change-id-header = true;
-        track-default-bookmark-on-clone = true;
-      };
-      remotes."origin".auto-track-bookmarks = "glob:*";
-      revsets = {
-        log = "..@ | branches | curbranch::@ | @::nextbranch | downstream(@, branchesandheads)";
-      };
-      revset-aliases = {
-        "immutable_heads()" = "builtin_immutable_heads() | (trunk().. & ~mine())";
-        "downstream(x,y)" = "(x::y) & y";
-        "branches" = "downstream(trunk(), bookmarks()) & mine()";
-        "branchesandheads" = "branches | (heads(trunk()::) & mine())";
-        "curbranch" = "latest(branches::@- & branches)";
-        "nextbranch" = "roots(@:: & branchesandheads)";
-      };
-      ui = {
-        default-command = [
-          "log"
-          "--no-pager"
-          "-n"
-          "10"
-        ];
-        movement.edit = true;
-        editor = "hx";
-      };
-    };
-  };
-
-  programs.delta = {
-    enable = true;
-    enableJujutsuIntegration = true;
-    enableGitIntegration = true;
-  };
-}

modules/home/dev/mise.nix

···
-{
-  lib,
-  config,
-  ...
-}: {
-  config = lib.mkIf config.programs.mise.enable {
-    programs.nushell = {
-      envFile.text = ''
-        let mise_path = $nu.default-config-dir | path join mise.nu
-        ^mise activate nu | save $mise_path --force
-      '';
-      configFile.text = ''
-        use ($nu.default-config-dir | path join mise.nu)
-      '';
-    };
-  };
-}

modules/home/dev/nushell.nix

···
-{
-  lib,
-  pkgs,
-  ...
-}: {
-  programs.nushell = {
-    enable = true;
-    shellAliases = {
-      k = "kubectl";
-      fg = "job unfreeze";
-      nn = "exec $env.EDITOR ~/notes";
-    };
-    configFile.text = ''
-      $env.config = {
-        show_banner: false,
-      }
-
-      if ("~/.profile.nu" | path exists) {
-        source-env "~/.profile.nu"
-      }
-
-      ${lib.meta.getExe pkgs.pokego} -l french
-    '';
-
-    extraLogin = ''
-      bash -c ". /etc/profile && env"
-       | parse "{n}={v}"
-       | where n not-in $env or v != ($env | get $it.n)
-       | where n not-in ["_", "LAST_EXIT_CODE", "DIRS_POSITION"]
-       | transpose --header-row
-       | into record
-       | load-env
-    '';
-  };
-}

modules/home/dev/opencode.nix

···
-{pkgs, ...}: {
-  programs.opencode = let
-    opencodePkg = pkgs.symlinkJoin {
-      name = "opencode-wrapped";
-      paths = [
-        pkgs.opencode
-        pkgs.nixd
-        pkgs.alejandra
-      ];
-      buildInputs = [pkgs.makeWrapper];
-      postBuild = ''
-        wrapProgram $out/bin/opencode \
-          --set SHELL ${pkgs.bash}/bin/bash
-      '';
-    };
-  in {
-    enable = true;
-    package = opencodePkg;
-    enableMcpIntegration = true;
-    settings = {
-      theme = "catppuccin-macchiato";
-      formatter = {
-        alejandra = {
-          command = ["alejandra"];
-          extensions = [".nix"];
-        };
-      };
-      agent = {
-        stack-analyst = {
-          description = "Analyzes stack traces to map errors to code paths and identify root causes";
-          prompt = builtins.readFile ./opencode/stack-analyst.md;
-          mode = "primary";
-          tools = {
-            read = true;
-            glob = true;
-            grep = true;
-            write = true;
-            edit = false;
-            bash = true;
-          };
-          permissions = {
-            bash = {
-              "git status" = "allow";
-              "git log" = "allow";
-              "*" = "ask";
-            };
-          };
-        };
-      };
-      mcp = {
-        gopls = {
-          type = "local";
-          enabled = true;
-          command = [
-            "gopls"
-            "mcp"
-          ];
-        };
-      };
-    };
-  };
-}

modules/home/dev/opencode/stack-analyst.md

···
-You are the **Stack Trace & Debugging Specialist**, an advanced engineering agent dedicated to performing root cause analysis on software crashes, errors, and panics.
-
-### Core Objective
-Your goal is to take a stack trace (from text, a file, a URL, or an issue tracker) and provide a deterministic explanation of *why* the code failed, along with the specific inputs or state required to reproduce it.
-
-### Capabilities & Tooling Strategy
-1.  **Code Intelligence (LSP) [Best Effort]:**
-    *   **Primary Tool:** Attempt to use `gopls` (for Go) or `ruby-lsp` (for Ruby) to read and understand code.
-    *   **Fallback:** If LSP tools fail to launch (e.g., due to missing gems/dependencies) or return errors, **immediately** switch to standard `grep`, `glob`, and `read` tools. Do not waste turns debugging the LSP setup itself.
-    *   **Usage:** Use these tools to jump to definitions, view struct/class hierarchies, and inspect function signatures.
-    *   **Why:** To accurately interpret types, interfaces, and shared logic that simple text searching might miss.
-
-2.  **Context Retrieval:**
-    *   **Inputs:** You may receive stack traces as raw text, file paths, or URLs (e.g., Linear issues, GitHub issues, Pastebin).
-    *   **Linear:** If provided a Linear link, use the `linear` tool to extract the crash report and context.
-    *   **File System:** Use `read` and `glob` to ingest logs, config files, or local repro cases.
-
-3.  **Codebase Navigation:**
-    *   Use `glob` to fuzzy-find files when stack trace paths are relative or truncated.
-    *   Use `grep` to find where specific error messages or constants are generated.
-
-### Analysis Protocol
-
-**Phase 1: Ingestion & Parsing**
-*   Identify the panic message, error code, or exception type.
-*   Extract the stack trace frames. Distinguish between library/framework code (noise) and application code (signal).
-
-**Phase 2: Mapping & Inspection**
-*   Locate the exact file and line number of the crash.
-*   **Crucial:** Use LSP tools to inspect the definitions of variables involved at the crash site.
-    *   *Example:* If `user.Process()` panicked, check the definition of `user`. Is it a pointer? interface? nullable?
-
-**Phase 3: Backward Execution Trace**
-*   Analyze the calling frames. How did execution reach the failure point?
-*   Identify "source" data. Where did the variables causing the crash originate? (e.g., HTTP request body, database row, config file).
-
-**Phase 4: Root Cause & Reproduction**
-*   **Hypothesize:** Formulate a strict logical theory (e.g., "The `Context` object was canceled before the database transaction completed, but error checking was skipped").
-*   **Payload Reconstruction:** Define the specific JSON payload, environment variable, or sequence of events needed to trigger this path.
-
-### Output Style
-*   **Direct & Analytical:** Start with the root cause.
-*   **Evidence-Based:** Cite specific file names, line numbers, and variable types.
-*   **Actionable:** Conclude with a specific code path fix or a reproduction payload.
-
-### Constraints
-*   **Read-Only Analysis:** Your primary role is analysis and diagnosis. Do not run commands that modify the codebase (like `rails generate`, `npm install`, or writing files) unless explicitly asked to "fix" or "apply" the solution.
-*   **Safe Exploration:** You may run read-only commands (e.g., `grep`, `ls`, `cat`) freely.

modules/home/dev/starship.nix

···
-{
-  inputs',
-  lib,
-  ...
-}: {
-  xdg.configFile."starship-jj/starship-jj.toml".text = ''
-    "$schema"="https://gitlab.com/Lanastara/lanastara_foss/-/raw/v0.3.0/schema.json?ref_type=tags"
-    module_separator = " "
-    timeout = 1000
-    [bookmarks]
-    search_depth = 100
-    exclude = []
-
-    [[module]]
-    type = "Commit"
-    empty_text = ""
-    [module.change]
-    fg = "magenta"
-
-    [[module]]
-    type = "Bookmarks"
-    separator = " "
-    color = "Magenta"
-    behind_symbol = "⇡"
-
-    [[module]]
-    type = "State"
-    separator = " "
-
-    [module.conflict]
-    disabled = true
-    text = "(CONFLICT)"
-    color = "Red"
-
-    [module.divergent]
-    disabled = true
-    text = "(DIVERGENT)"
-    color = "Cyan"
-
-    [module.empty]
-    disabled = false
-    text = "(EMPTY)"
-    color = "Yellow"
-
-    [module.immutable]
-    disabled = false
-    text = "(IMMUTABLE)"
-    color = "Yellow"
-
-    [module.hidden]
-    disabled = false
-    text = "(HIDDEN)"
-    color = "Yellow"
-
-    [[module]]
-    type = "Metrics"
-    template = "[{changed} {added}{removed}]"
-    color = "Magenta"
-
-    [module.changed_files]
-    prefix = ""
-    suffix = ""
-    color = "Cyan"
-
-    [module.added_lines]
-    prefix = "+"
-    suffix = ""
-    color = "Green"
-
-    [module.removed_lines]
-    prefix = "-"
-    suffix = ""
-    color = "Red"
-  '';
-  programs.starship = {
-    enable = true;
-    settings = {
-      format = lib.concatMapStrings (s: s) [
-        "$directory"
-        "$nix_shell"
-        "$custom"
-        "$cmd_duration"
-        "$line_break"
-        "$character"
-      ];
-      nix_shell = {
-        format = "[$symbol]($style)";
-      };
-      custom = {
-        jj = {
-          command = ''${lib.getExe' inputs'.starship-jj.packages.default "starship-jj"} --ignore-working-copy starship prompt'';
-          format = "[$symbol](blue bold) $output";
-          symbol = "󱗆";
-          when = "jj root --ignore-working-copy";
-        };
-        git_branch = {
-          when = true;
-          command = "jj root >/dev/null 2>&1 || starship module git_branch";
-          description = "Only show git_branch if we're not in a jj repo";
-        };
-      };
-    };
-  };
-}

modules/home/dev/utils.nix

···
-{pkgs, ...}: {
-  home.packages = [
-    pkgs.sd
-    pkgs.fd
-    pkgs.uutils-coreutils-noprefix
-  ];
-  programs = {
-    zoxide.enable = true;
-    carapace.enable = true;
-
-    ripgrep.enable = true;
-    bat.enable = true;
-    less = {
-      enable = true;
-      config = ''
-        #env
-        LESS = -S -R -i
-      '';
-    };
-  };
-}

modules/home/dev/yazi.nix

···
-_: {
-  programs.yazi = {
-    enable = true;
-  };
-}

modules/home/dev/zellij.nix modules/dev/shell/zellij.nix

···
-{inputs', ...}: {
+{
+  inputs',
+  lib,
+  config,
+  ...
+}:
+lib.mkIf config.dev.shell.enable {
   programs.zellij = {
     enable = true;
     settings = {
···
         shared._children = [
           {
             bind = {
-              _args = ["Alt f"];
-              ToggleFloatingPanes = {};
+              _args = [ "Alt f" ];
+              ToggleFloatingPanes = { };
             };
           }
         ];

modules/locale.nix

···
+{ pkgs, ... }:
+{
+  time.timeZone = "Europe/Paris";
+
+  console = {
+    keyMap = "us-acentos";
+    packages = [ pkgs.kbd ];
+  };
+
+  i18n = {
+    defaultLocale = "en_US.UTF-8";
+    extraLocaleSettings = {
+      LC_ADDRESS = "fr_FR.UTF-8";
+      LC_IDENTIFICATION = "fr_FR.UTF-8";
+      LC_MEASUREMENT = "fr_FR.UTF-8";
+      LC_MONETARY = "fr_FR.UTF-8";
+      LC_NAME = "fr_FR.UTF-8";
+      LC_NUMERIC = "fr_FR.UTF-8";
+      LC_PAPER = "fr_FR.UTF-8";
+      LC_TELEPHONE = "fr_FR.UTF-8";
+      LC_TIME = "fr_FR.UTF-8";
+    };
+  };
+}

modules/nixos/cachix.nix

···
   lib,
   config,
   ...
-}: {
+}:
+{
   config = lib.mkIf (!config.server) {
     nix.settings = {
-      substituters = lib.mkAfter ["https://karitham.cachix.org"];
+      substituters = lib.mkAfter [ "https://karitham.cachix.org" ];
       trusted-public-keys = lib.mkAfter [
         "karitham.cachix.org-1:Q0wdHZsCssuepIrtx83gHibE0LTDYLVNnvaV3Nms9U0="
       ];
     };
 
-    environment.systemPackages = [pkgs.cachix];
+    environment.systemPackages = [ pkgs.cachix ];
   };
 }

modules/nixos/default.nix

···
-{...}: {
+{ ... }:
+{
   imports = [
-    ./shell.nix
-    ./ipcam.nix
-    ./desktop.nix
-    ./sound.nix
     ./nix.nix
     ./cachix.nix
-    ./locale.nix
     ./docker.nix
-    ./fonts.nix
-    ./yubikey.nix
     ./server.nix
   ];
 }

modules/nixos/desktop-common.nix

···
+_: {
+  imports = [ ../../modules/home ];
+
+  networking.networkmanager.enable = true;
+
+  services = {
+    tailscale = {
+      enable = true;
+      useRoutingFeatures = "client";
+    };
+    touchegg.enable = true;
+    blueman.enable = true;
+    auto-cpufreq.enable = true;
+  };
+
+  security = {
+    sudo.wheelNeedsPassword = false;
+    rtkit.enable = true;
+  };
+
+  virtualisation.docker.enable = true;
+}

modules/nixos/desktop.nix modules/desktop/desktop.nix

···
   pkgs,
   inputs,
   ...
-}: let
+}:
+let
   cfg = config.desktop;
-in {
-  options.desktop = {
-    enable = lib.mkEnableOption "desktop usage";
-    wallpaper = lib.mkOption {
-      default = pkgs.fetchurl {
-        url = "https://raw.githubusercontent.com/HoulFloof/wallpapers/f23c1010b93cb97baa7ad7c94fd552f7601496d2/misc/waves_right_colored.png";
-        hash = "sha256-NqqE+pGnCIWAitH86sxu1EudVEEaSO82y3NqbhtDh9k=";
-      };
-      type = lib.types.path;
-      description = "the wallpaper to use";
-    };
-  };
-
-  imports = [inputs.niri.nixosModules.niri];
-
+in
+{
+  imports = [ inputs.niri.nixosModules.niri ];
   config = lib.mkIf cfg.enable {
-    hardware = {
-      bluetooth.enable = true;
-    };
-
     environment = {
       systemPackages = with pkgs; [
         wl-clipboard

modules/nixos/fonts.nix modules/desktop/fonts.nix

···
   lib,
   pkgs,
   ...
-}: {
+}:
+{
   options.fonts = {
     mono = lib.mkOption {
       type = lib.types.str;
···
             "Noto Serif"
             "Noto Color Emoji"
           ];
-          emoji = ["Noto Color Emoji"];
+          emoji = [ "Noto Color Emoji" ];
         };
       };
     };

modules/nixos/ipcam.nix

···
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}: {
-  options.ipcam.enable = lib.mkEnableOption "enable ipcam module";
-
-  config = lib.mkIf (config.desktop.enable && config.ipcam.enable) {
-    boot = {
-      extraModulePackages = with config.boot.kernelPackages; [v4l2loopback];
-      kernelModules = ["v4l2loopback"];
-      extraModprobeConfig = ''
-        options v4l2loopback video_nr=9 card_label=IP-Webcam exclusive_caps=1
-      '';
-    };
-
-    environment.systemPackages = let
-      port = 9696;
-      ipcam = pkgs.writeShellScriptBin "ipcam" ''
-        ${lib.getExe' pkgs.android-tools "adb"} wait-for-usb-device
-        ${lib.getExe' pkgs.android-tools "adb"} forward tcp:${toString port} tcp:8080
-        ${lib.getExe pkgs.ffmpeg} -i http://localhost:${toString port}/video -vf format=yuv420p -f v4l2 /dev/video9
-        ${lib.getExe' pkgs.android-tools "adb"} forward --remove tcp:${toString port}
-      '';
-    in [
-      pkgs.ffmpeg
-      pkgs.android-tools
-      ipcam
-    ];
-  };
-}

modules/nixos/locale.nix modules/desktop/locale.nix

···
   lib,
   pkgs,
   ...
-}: {
-  config = lib.mkIf (!config.server) {
+}:
+{
+  config = lib.mkIf config.desktop.locale.enable {
+    time.timeZone = "Europe/Paris";
+
     console = {
       keyMap = "us-acentos";
-      packages = [pkgs.kbd];
+      packages = [ pkgs.kbd ];
     };
 
     i18n = {

modules/nixos/nix.nix

···
   config,
   pkgs,
   ...
-}: {
+}:
+{
   config = lib.mkIf (!config.server) {
     nix = {
       package = pkgs.lix;
···
       settings = {
         auto-optimise-store = true;
         builders-use-substitutes = true;
-        allowed-users = ["@wheel"];
-        trusted-users = ["@wheel"];
+        allowed-users = [ "@wheel" ];
+        trusted-users = [ "@wheel" ];
         commit-lockfile-summary = "chore: Update flake.lock";
         accept-flake-config = true;
         keep-derivations = true;
···
       overlays = [
         inputs.self.overlays.default
         inputs.niri.overlays.niri
+        inputs.ghostty.overlays.default
+        inputs.knixpkgs.overlays.default
       ];
     };
 

modules/nixos/server-common.nix

···
+_: {
+  services = {
+    tailscale = {
+      enable = true;
+      useRoutingFeatures = "server";
+    };
+    openssh.enable = true;
+  };
+}

modules/nixos/server.nix

···
-{lib, ...}: {
+{ lib, ... }:
+{
   options.server = lib.mkEnableOption "enable server mode";
 }

modules/nixos/services/acme-nginx.nix

···
+{ config, lib, ... }:
+let
+  cfg = config.services.acme-nginx;
+  hostType = lib.types.submodule {
+    options = {
+      domain = lib.mkOption {
+        type = lib.types.str;
+        description = "The main domain for this host.";
+      };
+      extraDomainNames = lib.mkOption {
+        type = lib.types.listOf lib.types.str;
+        default = [ ];
+        description = "Extra domain names for this host.";
+      };
+      proxyPort = lib.mkOption {
+        type = lib.types.int;
+        description = "The port to proxy to locally for this host.";
+      };
+    };
+  };
+in
+{
+  options.services.acme-nginx = {
+    enable = lib.mkEnableOption "ACME and Nginx reverse proxy";
+
+    email = lib.mkOption {
+      type = lib.types.str;
+      description = "Email for ACME.";
+    };
+
+    credentialsFile = lib.mkOption {
+      type = lib.types.path;
+      description = "Path to the credentials file for DNS provider.";
+    };
+
+    hosts = lib.mkOption {
+      type = lib.types.listOf hostType;
+      default = [ ];
+      description = "List of hosts to configure.";
+      example = [
+        {
+          domain = "example.com";
+          extraDomainNames = [ "*.example.com" ];
+          proxyPort = 3000;
+        }
+      ];
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    networking.firewall.allowedTCPPorts = [
+      80
+      443
+    ];
+
+    security.acme = {
+      defaults.email = cfg.email;
+      acceptTerms = true;
+      certs = lib.listToAttrs (
+        map (host: {
+          name = host.domain;
+          value = {
+            dnsProvider = "cloudflare";
+            inherit (cfg) credentialsFile;
+            inherit (config.services.nginx) group;
+            inherit (host) domain;
+            extraDomainNames = host.extraDomainNames or [ ];
+            reloadServices = [ "nginx" ];
+          };
+        }) cfg.hosts
+      );
+    };
+
+    services.nginx = {
+      enable = true;
+      recommendedProxySettings = true;
+      recommendedTlsSettings = true;
+      virtualHosts = lib.listToAttrs (
+        map (host: {
+          name = "~(.*)\\.${lib.escapeRegex host.domain}$";
+          value = {
+            useACMEHost = host.domain;
+            forceSSL = true;
+            locations."/" = {
+              proxyPass = "http://127.0.0.1:${toString host.proxyPort}";
+              proxyWebsockets = true;
+            };
+          };
+        }) cfg.hosts
+      );
+    };
+  };
+}

modules/nixos/shell.nix

···
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}: {
-  config = lib.mkIf (!config.server) {
-    users.defaultUserShell = pkgs.nushell;
-    environment.shells = [pkgs.nushell];
-
-    environment.sessionVariables.EDITOR =
-      lib.attrByPath [
-        "home-manager"
-        "users"
-        config.my.username
-        "home"
-        "sessionVariables"
-        "EDITOR"
-      ] "nano"
-      config;
-    programs.nano.enable =
-      !(lib.attrByPath [
-          "home-manager"
-          "users"
-          config.my.username
-          "programs"
-          "helix"
-          "enable"
-        ]
-        false
-        config);
-  };
-}

modules/nixos/sound.nix modules/desktop/sound.nix

···
+{ config, lib, ... }:
 {
-  config,
-  lib,
-  ...
-}: {
   config = lib.mkIf config.desktop.enable {
     services = {
       pulseaudio.enable = false;

modules/nixos/yubikey.nix modules/desktop/yubikey.nix

···
   lib,
   pkgs,
   ...
-}: {
-  options.yubikey.enable = lib.mkEnableOption "enable yubikey";
-
-  config = lib.mkIf (config.desktop.enable && config.yubikey.enable) {
-    services.udev.packages = [pkgs.yubikey-personalization];
+}:
+{
+  config = lib.mkIf (config.desktop.enable && config.desktop.yubikey.enable) {
+    services.udev.packages = [ pkgs.yubikey-personalization ];
 
     programs.gnupg.agent = {
       enable = true;
···
     security.pam.yubico = {
       enable = true;
       mode = "challenge-response";
-      id = ["32235281"];
+      id = [ "32235281" ];
     };
 
     services.udev.extraRules = ''

modules/server/default.nix

···
+{ imports = [ ../nixos/server-common.nix ]; }

modules/tags/secureboot.nix

···
+{ inputs, pkgs, ... }:
+{
+  imports = [ inputs.lanzaboote.nixosModules.lanzaboote ];
+  environment.systemPackages = [ pkgs.sbctl ];
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/etc/secureboot";
+    configurationLimit = 5;
+  };
+}

modules/tags/work.nix

···
+{ config, pkgs, ... }:
+{
+  desktop.yubikey.enable = true;
+  programs._1password.enable = true;
+
+  home-manager.users.${config.my.username} = {
+    xdg.configFile."git/config".text = ''
+      [includeIf "hasconfig:remote.*.url:git+ssh://[e-mail]/upfluence/**"]
+          path = "~/upf/.gitconfig"
+      [includeIf "hasconfig:remote.*.url:[e-mail]:upfluence/**"]
+          path = "~/upf/.gitconfig"
+    '';
+
+    programs.opencode.settings.mcp = {
+      linear = {
+        type = "remote";
+        url = "https://mcp.linear.app/mcp";
+        enabled = true;
+        headers = {
+          Authorization = "Bearer {env:LINEAR_API_KEY}";
+        };
+      };
+      sentry = {
+        type = "local";
+        enabled = true;
+        command = [
+          "${pkgs.bun}/bin/bun"
+          "x"
+          "mcp-remote@latest"
+          "https://mcp.sentry.dev/mcp"
+        ];
+      };
+    };
+  };
+}

modules/wsl/default.nix

···
+{
+  inputs,
+  self,
+  config,
+  ...
+}:
+{
+  imports = [
+    self.nixosModules.dev
+    inputs.nixos-wsl.nixosModules.default
+    ../locale.nix
+    ../home
+  ];
+
+  dev.enable = true;
+
+  home-manager.users.${config.my.username}.imports = [ self.homeModules.dev ];
+}

overlays/default.nix

···
 _: prev: {
-  pokego = prev.callPackage ../pkgs/pokego.nix {};
+  pokego = prev.callPackage ../pkgs/pokego.nix { };
   golangci-lint-langserver = prev.golangci-lint-langserver.overrideAttrs (_: {
     patches = prev.fetchurl {
       url = "https://github.com/karitham/golangci-lint-langserver/commit/31e6806187d431a8865261b5441ef5a65b589ae5.patch";

pkgs/http-nu.nix

···
 
   doCheck = false;
 
-  buildInputs = [
-    sqlite
-  ];
+  buildInputs = [ sqlite ];
 
   meta = {
     description = "The surprisingly performant, Nushell-scriptable HTTP server that fits in your back pocket";

pkgs/pokego.nix

···
-{pkgs, ...}:
+{ pkgs, ... }:
 pkgs.buildGoModule {
   pname = "pokego";
   version = "devel";
···
 
   vendorHash = "sha256-Eykg/qGqWA+qxeFPAhd0BERHtLj5X7kMQo/IPp1yRU4=";
   env.CGO_ENABLED = 0;
-  flags = ["-trimpath"];
+  flags = [ "-trimpath" ];
   ldflags = [
     "-s"
     "-w"
···
     homepage = "https://github.com/karitham/pokego";
     mainProgram = "pokego";
     license = licenses.gpl3;
-    maintainers = with maintainers; [karitham];
+    maintainers = with maintainers; [ karitham ];
   };
 }

pkgs/topiary-nu.nix

···
   nodejs,
   tree-sitter-nu,
   topiary-nushell,
-}: let
+}:
+let
   treeSitterNu = stdenv.mkDerivation {
     name = "tree-sitter-nu";
     src = tree-sitter-nu;
···
     '';
   };
 in
-  runCommand "topiary-nu"
+runCommand "topiary-nu"
   {
-    buildInputs = [makeWrapper];
+    buildInputs = [ makeWrapper ];
     meta = {
       mainProgram = "topiary-nu";
     };

systems/default.nix

···
+{ self, inputs, ... }:
+{
+  imports = [ inputs.easy-hosts.flakeModule ];
+
+  config.easy-hosts = {
+    shared = {
+      modules = [
+        ../modules/core.nix
+        ../modules/nixos
+      ];
+
+      specialArgs = { inherit inputs self; };
+    };
+
+    additionalClasses = {
+      desktop = "nixos";
+      server = "nixos";
+      wsl = "nixos";
+    };
+
+    perClass = class: { modules = [ ../modules/${class}/default.nix ]; };
+
+    perTag = tag: { modules = [ ../modules/tags/${tag}.nix ]; };
+
+    hosts = {
+      kiwi = {
+        class = "desktop";
+        tags = [ "work" ];
+      };
+
+      ozen = {
+        class = "wsl";
+      };
+
+      reg = {
+        class = "server";
+      };
+
+      belaf = {
+        class = "desktop";
+        tags = [ "secureboot" ];
+      };
+
+      wakuna = {
+        arch = "aarch64";
+        class = "server";
+      };
+    };
+  };
+}