hosts/desktop: link XDG portal definitions

treewide: remove gnome
flake.lock: Update
2026-01-11 21:56:07 +00:00 · 2026-01-11 21:53:16 +00:00 · 2026-01-11 21:50:01 +00:00 · 2026-01-11 21:49:17 +00:00 · 2026-01-11 21:44:20 +00:00 · 2026-01-11 21:42:55 +00:00
36 changed files with 386 additions and 1744 deletions
--- a/README.md
+++ b/README.md
@@ -5,7 +5,7 @@ System and user configuration for NixOS-based systems.
 | | |
 |-|-|
 | **Shell:** | zsh |
-| **WM:** | Hyprland |
+| **WM:** | Niri |
 | **Theme:** | Adwaita |
 | **Terminal:** | kitty |

--- a/flake.lock
+++ b/flake.lock
@@ -51,39 +51,6 @@
        "type": "github"
      }
    },
-    "aquamarine": {
-      "inputs": {
-        "hyprutils": [
-          "hyprland",
-          "hyprutils"
-        ],
-        "hyprwayland-scanner": [
-          "hyprland",
-          "hyprwayland-scanner"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1767024902,
-        "narHash": "sha256-sMdk6QkMDhIOnvULXKUM8WW8iyi551SWw2i6KQHbrrU=",
-        "owner": "hyprwm",
-        "repo": "aquamarine",
-        "rev": "b8a0c5ba5a9fbd2c660be7dd98bdde0ff3798556",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "aquamarine",
-        "type": "github"
-      }
-    },
    "blobs": {
      "flake": false,
      "locked": {
@@ -238,22 +205,6 @@
      }
    },
    "flake-compat_2": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1767039857,
-        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
-        "owner": "NixOS",
-        "repo": "flake-compat",
-        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "repo": "flake-compat",
-        "type": "github"
-      }
-    },
-    "flake-compat_3": {
      "flake": false,
      "locked": {
        "lastModified": 1761588595,
@@ -269,7 +220,7 @@
        "type": "github"
      }
    },
-    "flake-compat_4": {
+    "flake-compat_3": {
      "flake": false,
      "locked": {
        "lastModified": 1767039857,
@@ -311,11 +262,11 @@
        "nixpkgs-lib": "nixpkgs-lib"
      },
      "locked": {
-        "lastModified": 1767609335,
-        "narHash": "sha256-feveD98mQpptwrAEggBQKJTYbvwwglSbOv53uCfH9PY=",
+        "lastModified": 1768135262,
+        "narHash": "sha256-PVvu7OqHBGWN16zSi6tEmPwwHQ4rLPU9Plvs8/1TUBY=",
        "owner": "hercules-ci",
        "repo": "flake-parts",
-        "rev": "250481aafeb741edfe23d29195671c19b36b6dca",
+        "rev": "80daad04eddbbf5a4d883996a73f3f542fa437ac",
        "type": "github"
      },
      "original": {
@@ -365,7 +316,7 @@
    },
    "flake-utils": {
      "inputs": {
-        "systems": "systems_4"
+        "systems": "systems_3"
      },
      "locked": {
        "lastModified": 1731533236,
@@ -387,7 +338,7 @@
          "nixos-mailserver",
          "flake-compat"
        ],
-        "gitignore": "gitignore_2",
+        "gitignore": "gitignore",
        "nixpkgs": [
          "nixos-mailserver",
          "nixpkgs"
@@ -425,28 +376,6 @@
      }
    },
    "gitignore": {
-      "inputs": {
-        "nixpkgs": [
-          "hyprland",
-          "pre-commit-hooks",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1709087332,
-        "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
-        "owner": "hercules-ci",
-        "repo": "gitignore.nix",
-        "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hercules-ci",
-        "repo": "gitignore.nix",
-        "type": "github"
-      }
-    },
-    "gitignore_2": {
      "inputs": {
        "nixpkgs": [
          "nixos-mailserver",
@@ -468,7 +397,7 @@
        "type": "github"
      }
    },
-    "gitignore_3": {
+    "gitignore_2": {
      "inputs": {
        "nixpkgs": [
          "pre-commit-hooks",
@@ -531,359 +460,10 @@
        "type": "github"
      }
    },
-    "hyprcursor": {
-      "inputs": {
-        "hyprlang": [
-          "hyprland",
-          "hyprlang"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1753964049,
-        "narHash": "sha256-lIqabfBY7z/OANxHoPeIrDJrFyYy9jAM4GQLzZ2feCM=",
-        "owner": "hyprwm",
-        "repo": "hyprcursor",
-        "rev": "44e91d467bdad8dcf8bbd2ac7cf49972540980a5",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprcursor",
-        "type": "github"
-      }
-    },
-    "hyprgraphics": {
-      "inputs": {
-        "hyprutils": [
-          "hyprland",
-          "hyprutils"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1766946335,
-        "narHash": "sha256-MRD+Jr2bY11MzNDfenENhiK6pvN+nHygxdHoHbZ1HtE=",
-        "owner": "hyprwm",
-        "repo": "hyprgraphics",
-        "rev": "4af02a3925b454deb1c36603843da528b67ded6c",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprgraphics",
-        "type": "github"
-      }
-    },
-    "hyprland": {
-      "inputs": {
-        "aquamarine": "aquamarine",
-        "hyprcursor": "hyprcursor",
-        "hyprgraphics": "hyprgraphics",
-        "hyprland-guiutils": "hyprland-guiutils",
-        "hyprland-protocols": "hyprland-protocols",
-        "hyprlang": "hyprlang",
-        "hyprutils": "hyprutils",
-        "hyprwayland-scanner": "hyprwayland-scanner",
-        "hyprwire": "hyprwire",
-        "nixpkgs": "nixpkgs",
-        "pre-commit-hooks": "pre-commit-hooks",
-        "systems": "systems_3",
-        "xdph": "xdph"
-      },
-      "locked": {
-        "lastModified": 1768000181,
-        "narHash": "sha256-/E66+tcVBnvJcOFL/CjnjBfKew6A2e+28EZrcRHioBw=",
-        "owner": "hyprwm",
-        "repo": "Hyprland",
-        "rev": "81e7498ec27156ee97aabba6fe4993412d98d1ab",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "Hyprland",
-        "type": "github"
-      }
-    },
-    "hyprland-guiutils": {
-      "inputs": {
-        "aquamarine": [
-          "hyprland",
-          "aquamarine"
-        ],
-        "hyprgraphics": [
-          "hyprland",
-          "hyprgraphics"
-        ],
-        "hyprlang": [
-          "hyprland",
-          "hyprlang"
-        ],
-        "hyprtoolkit": "hyprtoolkit",
-        "hyprutils": [
-          "hyprland",
-          "hyprutils"
-        ],
-        "hyprwayland-scanner": [
-          "hyprland",
-          "hyprwayland-scanner"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1767023960,
-        "narHash": "sha256-R2HgtVS1G3KSIKAQ77aOZ+Q0HituOmPgXW9nBNkpp3Q=",
-        "owner": "hyprwm",
-        "repo": "hyprland-guiutils",
-        "rev": "c2e906261142f5dd1ee0bfc44abba23e2754c660",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprland-guiutils",
-        "type": "github"
-      }
-    },
-    "hyprland-plugins": {
-      "inputs": {
-        "hyprland": [
-          "hyprland"
-        ],
-        "nixpkgs": [
-          "hyprland-plugins",
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland-plugins",
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1767723101,
-        "narHash": "sha256-jObY8O7OI+91hoE137APsDxm0235/Yx+HhFIip187zM=",
-        "owner": "hyprwm",
-        "repo": "hyprland-plugins",
-        "rev": "fef398ed5e4faf59bc43b915e46a75cfe8b16697",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprland-plugins",
-        "type": "github"
-      }
-    },
-    "hyprland-protocols": {
-      "inputs": {
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1765214753,
-        "narHash": "sha256-P9zdGXOzToJJgu5sVjv7oeOGPIIwrd9hAUAP3PsmBBs=",
-        "owner": "hyprwm",
-        "repo": "hyprland-protocols",
-        "rev": "3f3860b869014c00e8b9e0528c7b4ddc335c21ab",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprland-protocols",
-        "type": "github"
-      }
-    },
-    "hyprlang": {
-      "inputs": {
-        "hyprutils": [
-          "hyprland",
-          "hyprutils"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1764612430,
-        "narHash": "sha256-54ltTSbI6W+qYGMchAgCR6QnC1kOdKXN6X6pJhOWxFg=",
-        "owner": "hyprwm",
-        "repo": "hyprlang",
-        "rev": "0d00dc118981531aa731150b6ea551ef037acddd",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprlang",
-        "type": "github"
-      }
-    },
-    "hyprtoolkit": {
-      "inputs": {
-        "aquamarine": [
-          "hyprland",
-          "hyprland-guiutils",
-          "aquamarine"
-        ],
-        "hyprgraphics": [
-          "hyprland",
-          "hyprland-guiutils",
-          "hyprgraphics"
-        ],
-        "hyprlang": [
-          "hyprland",
-          "hyprland-guiutils",
-          "hyprlang"
-        ],
-        "hyprutils": [
-          "hyprland",
-          "hyprland-guiutils",
-          "hyprutils"
-        ],
-        "hyprwayland-scanner": [
-          "hyprland",
-          "hyprland-guiutils",
-          "hyprwayland-scanner"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "hyprland-guiutils",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "hyprland-guiutils",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1764592794,
-        "narHash": "sha256-7CcO+wbTJ1L1NBQHierHzheQGPWwkIQug/w+fhTAVuU=",
-        "owner": "hyprwm",
-        "repo": "hyprtoolkit",
-        "rev": "5cfe0743f0e608e1462972303778d8a0859ee63e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprtoolkit",
-        "type": "github"
-      }
-    },
-    "hyprutils": {
-      "inputs": {
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1766253372,
-        "narHash": "sha256-1+p4Kw8HdtMoFSmJtfdwjxM4bPxDK9yg27SlvUMpzWA=",
-        "owner": "hyprwm",
-        "repo": "hyprutils",
-        "rev": "51a4f93ce8572e7b12b7284eb9e6e8ebf16b4be9",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprutils",
-        "type": "github"
-      }
-    },
-    "hyprwayland-scanner": {
-      "inputs": {
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1763640274,
-        "narHash": "sha256-Uan1Nl9i4TF/kyFoHnTq1bd/rsWh4GAK/9/jDqLbY5A=",
-        "owner": "hyprwm",
-        "repo": "hyprwayland-scanner",
-        "rev": "f6cf414ca0e16a4d30198fd670ec86df3c89f671",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprwayland-scanner",
-        "type": "github"
-      }
-    },
-    "hyprwire": {
-      "inputs": {
-        "hyprutils": [
-          "hyprland",
-          "hyprutils"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1767473322,
-        "narHash": "sha256-RGOeG+wQHeJ6BKcsSB8r0ZU77g9mDvoQzoTKj2dFHwA=",
-        "owner": "hyprwm",
-        "repo": "hyprwire",
-        "rev": "d5e7d6b49fe780353c1cf9a1cf39fa8970bd9d11",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprwire",
-        "type": "github"
-      }
-    },
    "impermanence": {
      "inputs": {
        "home-manager": "home-manager_2",
-        "nixpkgs": "nixpkgs_2"
+        "nixpkgs": "nixpkgs"
      },
      "locked": {
        "lastModified": 1767822991,
@@ -955,11 +535,11 @@
        "xwayland-satellite-unstable": "xwayland-satellite-unstable"
      },
      "locked": {
-        "lastModified": 1768053065,
-        "narHash": "sha256-+RmYWQUHSSSF+/bVR2U/K7y6Z97fH4vvVW73IDouTFg=",
+        "lastModified": 1768153577,
+        "narHash": "sha256-iR54iiyM4UtQCfAZVsI/BRwIrDUO1oNeiA1h/Jp+nro=",
        "owner": "sodiboo",
        "repo": "niri-flake",
-        "rev": "95cbdad2ebce328c7b3fca09d9129e02d318b075",
+        "rev": "c65d3c7adfe488122c2c9b7ececb1d7fc893dc5b",
        "type": "github"
      },
      "original": {
@@ -988,11 +568,11 @@
    "niri-unstable": {
      "flake": false,
      "locked": {
-        "lastModified": 1768048242,
-        "narHash": "sha256-4thwWvKFEAFNtolJNN3i9wQ78jMI5VmejiLtjv3vNdc=",
+        "lastModified": 1768150783,
+        "narHash": "sha256-1gtx2la5f8RphvN+BUZuZjiGh25WdO0Hf9+kJKIu3rA=",
        "owner": "YaLTeR",
        "repo": "niri",
-        "rev": "a6baef7b68fcb60dfc57a9fc04e983cfd8a028ac",
+        "rev": "e9d888cd52f8a783b07e0d6c0ec9a341a81031ca",
        "type": "github"
      },
      "original": {
@@ -1009,11 +589,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1767999039,
-        "narHash": "sha256-VfU/4wlBPcyAfqftIyw5Yk9GPYVwMowRZcvnPBn+Owk=",
+        "lastModified": 1768068512,
+        "narHash": "sha256-pH5wkcNOiXy4MBjDTe6A1gml+7m+ULC3lYMBPMqdS1w=",
        "owner": "oddlama",
        "repo": "nix-topology",
-        "rev": "924a60a75e17b8c405c5cf0c721449f6441b9967",
+        "rev": "4367a2093c5ff74fc478466aebf41d47ce0cacb4",
        "type": "github"
      },
      "original": {
@@ -1040,7 +620,7 @@
    "nixos-mailserver": {
      "inputs": {
        "blobs": "blobs",
-        "flake-compat": "flake-compat_3",
+        "flake-compat": "flake-compat_2",
        "git-hooks": "git-hooks",
        "nixpkgs": [
          "nixpkgs"
@@ -1063,15 +643,15 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1767379071,
-        "narHash": "sha256-EgE0pxsrW9jp9YFMkHL9JMXxcqi/OoumPJYwf+Okucw=",
-        "owner": "NixOS",
+        "lastModified": 1748026106,
+        "narHash": "sha256-6m1Y3/4pVw1RWTsrkAK2VMYSzG4MMIj7sqUy7o8th1o=",
+        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "fb7944c166a3b630f177938e478f0378e64ce108",
+        "rev": "063f43f2dbdef86376cc29ad646c45c46e93234c",
        "type": "github"
      },
      "original": {
-        "owner": "NixOS",
+        "owner": "nixos",
        "ref": "nixos-unstable",
        "repo": "nixpkgs",
        "type": "github"
@@ -1109,11 +689,11 @@
    },
    "nixpkgs-stable": {
      "locked": {
-        "lastModified": 1767799921,
-        "narHash": "sha256-r4GVX+FToWVE2My8VVZH4V0pTIpnu2ZE8/Z4uxGEMBE=",
+        "lastModified": 1768028080,
+        "narHash": "sha256-50aDK+8eLvsLK39TzQhKNq50/HcXyP4hyxOYoPoVxjo=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "d351d0653aeb7877273920cd3e823994e7579b0b",
+        "rev": "d03088749a110d52a4739348f39a63f84bb0be14",
        "type": "github"
      },
      "original": {
@@ -1125,11 +705,11 @@
    },
    "nixpkgs-unstable": {
      "locked": {
-        "lastModified": 1767892417,
-        "narHash": "sha256-dhhvQY67aboBk8b0/u0XB6vwHdgbROZT3fJAjyNh5Ww=",
+        "lastModified": 1768127708,
+        "narHash": "sha256-1Sm77VfZh3mU0F5OqKABNLWxOuDeHIlcFjsXeeiPazs=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "3497aa5c9457a9d88d71fa93a4a8368816fbeeba",
+        "rev": "ffbc9f8cbaacfb331b6017d5a5abb21a492c9a38",
        "type": "github"
      },
      "original": {
@@ -1140,27 +720,11 @@
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1748026106,
-        "narHash": "sha256-6m1Y3/4pVw1RWTsrkAK2VMYSzG4MMIj7sqUy7o8th1o=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "063f43f2dbdef86376cc29ad646c45c46e93234c",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixos-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_3": {
-      "locked": {
-        "lastModified": 1767799921,
-        "narHash": "sha256-r4GVX+FToWVE2My8VVZH4V0pTIpnu2ZE8/Z4uxGEMBE=",
+        "lastModified": 1768028080,
+        "narHash": "sha256-50aDK+8eLvsLK39TzQhKNq50/HcXyP4hyxOYoPoVxjo=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "d351d0653aeb7877273920cd3e823994e7579b0b",
+        "rev": "d03088749a110d52a4739348f39a63f84bb0be14",
        "type": "github"
      },
      "original": {
@@ -1176,7 +740,7 @@
          "nixpkgs"
        ],
        "nuschtosSearch": "nuschtosSearch",
-        "systems": "systems_5"
+        "systems": "systems_4"
      },
      "locked": {
        "lastModified": 1767448089,
@@ -1200,11 +764,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1768055992,
-        "narHash": "sha256-vbhRHMcRrKzJ8cppwCQL1Hjk0wqDorDTAG894paemiM=",
+        "lastModified": 1768165554,
+        "narHash": "sha256-oUmbaJuAdRwr97ySDaI6Sb/HrVmKVGZiqkvj66w5EN4=",
        "owner": "noctalia-dev",
        "repo": "noctalia-shell",
-        "rev": "10bd2aa303be259fe39c7f95433bb4a12657ad72",
+        "rev": "62798d5c57fde04be310561c1e9e2ab5181e2081",
        "type": "github"
      },
      "original": {
@@ -1238,31 +802,8 @@
    },
    "pre-commit-hooks": {
      "inputs": {
-        "flake-compat": "flake-compat_2",
-        "gitignore": "gitignore",
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1767281941,
-        "narHash": "sha256-6MkqajPICgugsuZ92OMoQcgSHnD6sJHwk8AxvMcIgTE=",
-        "owner": "cachix",
-        "repo": "git-hooks.nix",
-        "rev": "f0927703b7b1c8d97511c4116eb9b4ec6645a0fa",
-        "type": "github"
-      },
-      "original": {
-        "owner": "cachix",
-        "repo": "git-hooks.nix",
-        "type": "github"
-      }
-    },
-    "pre-commit-hooks_2": {
-      "inputs": {
-        "flake-compat": "flake-compat_4",
-        "gitignore": "gitignore_3",
+        "flake-compat": "flake-compat_3",
+        "gitignore": "gitignore_2",
        "nixpkgs": [
          "nixpkgs"
        ]
@@ -1292,22 +833,21 @@
        "flake-parts": "flake-parts_2",
        "gitea-github-theme": "gitea-github-theme",
        "home-manager": "home-manager",
-        "hyprland": "hyprland",
-        "hyprland-plugins": "hyprland-plugins",
        "impermanence": "impermanence",
        "kvlibadwaita": "kvlibadwaita",
        "niri": "niri",
        "nix-topology": "nix-topology",
        "nixos-hardware": "nixos-hardware",
        "nixos-mailserver": "nixos-mailserver",
-        "nixpkgs": "nixpkgs_3",
+        "nixpkgs": "nixpkgs_2",
        "nixpkgs-unstable": "nixpkgs-unstable",
        "nixvim": "nixvim",
        "noctalia": "noctalia",
-        "pre-commit-hooks": "pre-commit-hooks_2",
+        "pre-commit-hooks": "pre-commit-hooks",
        "secrets": "secrets",
        "thunderbird-gnome-theme": "thunderbird-gnome-theme",
-        "treefmt-nix": "treefmt-nix_2"
+        "treefmt-nix": "treefmt-nix_2",
+        "zen-browser": "zen-browser"
      }
    },
    "secrets": {
@@ -1357,21 +897,6 @@
      }
    },
    "systems_3": {
-      "locked": {
-        "lastModified": 1689347949,
-        "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
-        "owner": "nix-systems",
-        "repo": "default-linux",
-        "rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default-linux",
-        "type": "github"
-      }
-    },
-    "systems_4": {
      "locked": {
        "lastModified": 1681028828,
        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
@@ -1386,7 +911,7 @@
        "type": "github"
      }
    },
-    "systems_5": {
+    "systems_4": {
      "locked": {
        "lastModified": 1681028828,
        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
@@ -1445,11 +970,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1768031762,
-        "narHash": "sha256-b2gJDJfi+TbA7Hu2sKip+1mWqya0GJaWrrXQjpbOVTU=",
+        "lastModified": 1768158989,
+        "narHash": "sha256-67vyT1+xClLldnumAzCTBvU0jLZ1YBcf4vANRWP3+Ak=",
        "owner": "numtide",
        "repo": "treefmt-nix",
-        "rev": "0c445aa21b01fd1d4bb58927f7b268568af87b20",
+        "rev": "e96d59dff5c0d7fddb9d113ba108f03c3ef99eca",
        "type": "github"
      },
      "original": {
@@ -1476,47 +1001,6 @@
        "type": "github"
      }
    },
-    "xdph": {
-      "inputs": {
-        "hyprland-protocols": [
-          "hyprland",
-          "hyprland-protocols"
-        ],
-        "hyprlang": [
-          "hyprland",
-          "hyprlang"
-        ],
-        "hyprutils": [
-          "hyprland",
-          "hyprutils"
-        ],
-        "hyprwayland-scanner": [
-          "hyprland",
-          "hyprwayland-scanner"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1761431178,
-        "narHash": "sha256-xzjC1CV3+wpUQKNF+GnadnkeGUCJX+vgaWIZsnz9tzI=",
-        "owner": "hyprwm",
-        "repo": "xdg-desktop-portal-hyprland",
-        "rev": "4b8801228ff958d028f588f0c2b911dbf32297f9",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "xdg-desktop-portal-hyprland",
-        "type": "github"
-      }
-    },
    "xwayland-satellite-stable": {
      "flake": false,
      "locked": {
@@ -1537,11 +1021,11 @@
    "xwayland-satellite-unstable": {
      "flake": false,
      "locked": {
-        "lastModified": 1767932953,
-        "narHash": "sha256-V8+DrPOp940J6icERAaGuDQTKyEyZzFuRw363XwDKXg=",
+        "lastModified": 1768106915,
+        "narHash": "sha256-HlLo9zH4ULRXlmlIK948cHmdVhxyHgTHxGaoCRlW4k8=",
        "owner": "Supreeeme",
        "repo": "xwayland-satellite",
-        "rev": "bc47ef59501556fc2584155ddef76493752dd727",
+        "rev": "72245e108f3b03c3c4474d2de9de2d1830849603",
        "type": "github"
      },
      "original": {
@@ -1549,6 +1033,26 @@
        "repo": "xwayland-satellite",
        "type": "github"
      }
+    },
+    "zen-browser": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1767618227,
+        "narHash": "sha256-9+XVF47E9NCVs249SSsDtr7YdG/23/lCJmWAjQvOfqI=",
+        "owner": "youwen5",
+        "repo": "zen-browser-flake",
+        "rev": "1586e49b3908b058e221f11d843eb46392dba17b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "youwen5",
+        "repo": "zen-browser-flake",
+        "type": "github"
+      }
    }
  },
  "root": "root",
--- a/flake.nix
+++ b/flake.nix
@@ -34,13 +34,6 @@
      inputs.nixpkgs.follows = "nixpkgs";
    };

-    hyprland.url = "github:hyprwm/Hyprland";
-
-    hyprland-plugins = {
-      url = "github:hyprwm/hyprland-plugins";
-      inputs.hyprland.follows = "hyprland";
-    };
-
    firefox-gnome-theme = {
      url = "github:rafaelmardojai/firefox-gnome-theme";
      flake = false;
@@ -112,6 +105,11 @@
      url = "github:numtide/treefmt-nix";
      inputs.nixpkgs.follows = "nixpkgs";
    };
+
+    zen-browser = {
+      url = "github:youwen5/zen-browser-flake";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
  };

  outputs =
--- a/hosts/artemis/default.nix
+++ b/hosts/artemis/default.nix
@@ -103,10 +103,6 @@ in
        enable = true;
        interfaces = [ "wlp11s0" ];
      };
-      desktop = {
-        gnome.enable = lib.mkForce false;
-        hyprland.enable = false;
-      };
    };
  };

--- a/hosts/common.nix
+++ b/hosts/common.nix
@@ -80,9 +80,10 @@

  nix = {
    package = pkgs.nixVersions.stable;
-    extraOptions = ''
-      experimental-features = nix-command flakes
-    '';
+    settings.extra-experimental-features = [
+      "flakes"
+      "nix-command"
+    ];
    buildMachines = [
      {
        hostName = "10.0.1.235";
--- a/hosts/desktop.nix
+++ b/hosts/desktop.nix
@@ -51,10 +51,14 @@
  systemd.services.NetworkManager-wait-online.enable = false;

  modules = {
-    system.desktop.gnome.enable = true;
    services.tailscale.enable = true;
  };

+  environment.pathsToLink = [
+    "/share/applications"
+    "/share/xdg-desktop-portal"
+  ];
+
  environment.systemPackages = with pkgs; [
    bind
    bmon
--- a/hosts/helios/default.nix
+++ b/hosts/helios/default.nix
@@ -1,12 +1,8 @@
 {
  pkgs,
-  lib,
  ...
 }:

-let
-  inherit (lib) mkForce;
-in
 {
  imports = [
    ./hardware-configuration.nix
@@ -45,10 +41,6 @@ in
        repoPath = "ssh://b9cjl9hq@b9cjl9hq.repo.borgbase.com/./repo";
      };
    };
-    system.desktop = {
-      gnome.enable = mkForce false;
-      hyprland.enable = true;
-    };
  };

  system.stateVersion = "22.11";
--- a/hosts/hypnos/0001-Add-apple_set_os-EFI-boot-service.patch
+++ b/hosts/hypnos/0001-Add-apple_set_os-EFI-boot-service.patch
@@ -1,101 +0,0 @@
-From d310ddee0fb8e7a5a8b89668c6cb8f9dc863ce94 Mon Sep 17 00:00:00 2001
-From: Jordan Holt <jordan@vimium.com>
-Date: Sun, 28 Apr 2024 15:59:52 +0100
-Subject: [PATCH] Add apple_set_os EFI boot service
-
---
- drivers/firmware/efi/libstub/x86-stub.c | 59 +++++++++++++++++++++++++
- include/linux/efi.h                     |  1 +
- 2 files changed, 60 insertions(+)
-
-diff --git a/drivers/firmware/efi/libstub/x86-stub.c b/drivers/firmware/efi/libstub/x86-stub.c
-index d5a8182cf..be722c43a 100644
--- a/drivers/firmware/efi/libstub/x86-stub.c
-+++ b/drivers/firmware/efi/libstub/x86-stub.c
-@@ -449,6 +449,63 @@ static void setup_graphics(struct boot_params *boot_params)
- 	}
- }
-
-+typedef struct {
-+	u64 version;
-+	void (*set_os_version) (const char *os_version);
-+	void (*set_os_vendor) (const char *os_vendor);
-+} apple_set_os_interface_t;
-+
-+static efi_status_t apple_set_os()
-+{
-+	apple_set_os_interface_t *set_os;
-+	efi_guid_t set_os_guid = APPLE_SET_OS_PROTOCOL_GUID;
-+	efi_status_t status;
-+	void **handles;
-+	unsigned long i, nr_handles, size = 0;
-+
-+	status = efi_bs_call(locate_handle, EFI_LOCATE_BY_PROTOCOL,
-+			     &set_os_guid, NULL, &size, handles);
-+
-+	if (status == EFI_BUFFER_TOO_SMALL) {
-+		status = efi_bs_call(allocate_pool, EFI_LOADER_DATA,
-+				     size, &handles);
-+
-+		if (status != EFI_SUCCESS)
-+			return status;
-+
-+		status = efi_bs_call(locate_handle, EFI_LOCATE_BY_PROTOCOL,
-+				     &set_os_guid, NULL, &size, handles);
-+	}
-+
-+	if (status != EFI_SUCCESS)
-+		goto free_handle;
-+
-+	nr_handles = size / sizeof(void *);
-+	for (i = 0; i < nr_handles; i++) {
-+		void *h = handles[i];
-+
-+		status = efi_bs_call(handle_protocol, h,
-+				     &set_os_guid, &set_os);
-+
-+		if (status != EFI_SUCCESS || !set_os)
-+			continue;
-+
-+		if (set_os->version > 0) {
-+			efi_bs_call((unsigned long)set_os->set_os_version,
-+					"Mac OS X 10.9");
-+		}
-+
-+		if (set_os->version >= 2) {
-+			efi_bs_call((unsigned long)set_os->set_os_vendor,
-+					"Apple Inc.");
-+		}
-+	}
-+
-+free_handle:
-+	efi_bs_call(free_pool, uga_handle);
-+
-+	return status;
-+}
-
- static void __noreturn efi_exit(efi_handle_t handle, efi_status_t status)
- {
-@@ -951,6 +1008,8 @@ void __noreturn efi_stub_entry(efi_handle_t handle,
-
- 	setup_unaccepted_memory();
-
-+	apple_set_os();
-+
- 	status = exit_boot(boot_params, handle);
- 	if (status != EFI_SUCCESS) {
- 		efi_err("exit_boot() failed!\n");
-diff --git a/include/linux/efi.h b/include/linux/efi.h
-index d59b0947f..81158014f 100644
--- a/include/linux/efi.h
-+++ b/include/linux/efi.h
-@@ -385,6 +385,7 @@ void efi_native_runtime_setup(void);
- #define EFI_MEMORY_ATTRIBUTES_TABLE_GUID	EFI_GUID(0xdcfa911d, 0x26eb, 0x469f,  0xa2, 0x20, 0x38, 0xb7, 0xdc, 0x46, 0x12, 0x20)
- #define EFI_CONSOLE_OUT_DEVICE_GUID		EFI_GUID(0xd3b36f2c, 0xd551, 0x11d4,  0x9a, 0x46, 0x00, 0x90, 0x27, 0x3f, 0xc1, 0x4d)
- #define APPLE_PROPERTIES_PROTOCOL_GUID		EFI_GUID(0x91bd12fe, 0xf6c3, 0x44fb,  0xa5, 0xb7, 0x51, 0x22, 0xab, 0x30, 0x3a, 0xe0)
-+#define APPLE_SET_OS_PROTOCOL_GUID		EFI_GUID(0xc5c5da95, 0x7d5c, 0x45e6,  0xb2, 0xf1, 0x3f, 0xd5, 0x2b, 0xb1, 0x00, 0x77)
- #define EFI_TCG2_PROTOCOL_GUID			EFI_GUID(0x607f766c, 0x7455, 0x42be,  0x93, 0x0b, 0xe4, 0xd7, 0x6d, 0xb2, 0x72, 0x0f)
- #define EFI_TCG2_FINAL_EVENTS_TABLE_GUID	EFI_GUID(0x1e2ed096, 0x30e2, 0x4254,  0xbd, 0x89, 0x86, 0x3b, 0xbe, 0xf8, 0x23, 0x25)
- #define EFI_LOAD_FILE_PROTOCOL_GUID		EFI_GUID(0x56ec3091, 0x954c, 0x11d2,  0x8e, 0x3f, 0x00, 0xa0, 0xc9, 0x69, 0x72, 0x3b)
--
-2.42.0
--- a/hosts/hypnos/README.md
+++ b/hosts/hypnos/README.md
@@ -24,16 +24,24 @@ Apple SSD SM0512F | `/dev/sda1` (EFI, 256 MiB, NixOS Boot) <br> `/dev/sda2` (ZFS
 rpool/
 ├── local
 │   ├── nix
-│   └── tmp
-├── system
 │   ├── root
-│   └── var
-└── user
-    └── home
+│   └── state
+└── safe
+    └── persist
 ```

 See [Graham Christensen's article](https://grahamc.com/blog/nixos-on-zfs/#datasets) for the motivation behind these datasets.

+#### Impermanence
+
+This machine uses [impermanence](https://github.com/nix-community/impermanence) and is rolled back to a clean state on each reboot.
+
+Mountpoint | Persists across reboots? | Backed up?
+--- | --- | ---
+`/` | No | Yes
+`/state` | Yes | No
+`/persist` | Yes | Yes
+
 ### Networks

 - DHCP on `10.0.1.0/24` subnet.
--- a/hosts/hypnos/default.nix
+++ b/hosts/hypnos/default.nix
@@ -4,50 +4,113 @@
  pkgs,
  ...
 }:
-
+let
+  inherit (lib)
+    mkForce
+    ;
+in
 {
  imports = [
    inputs.disko.nixosModules.disko
    ./hardware-configuration.nix
    ./disko-config.nix
    ../desktop.nix
+    ../../modules/nixos/deterministic-ids.nix
    ../../users/jordan
  ];

  nixpkgs = {
    hostPlatform = "x86_64-linux";
    config = {
-      nvidia.acceptLicense = true;
-      permittedInsecurePackages = [ "broadcom-sta-6.30.223.271-57-6.12.41" ];
+      permittedInsecurePackages = [ "broadcom-sta-6.30.223.271-59-6.12.63" ];
    };
  };

  age.rekey.hostPubkey = ./ssh_host_ed25519_key.pub;

-  boot.loader = {
+  boot = {
+    loader = {
      systemd-boot.enable = true;
      efi.canTouchEfiVariables = true;
    };
-
-  networking.hostId = "cf791898";
-
-  # nvidia 470 driver doesn't work with Wayland
-  services = {
-    xserver = {
-      displayManager.gdm.wayland = lib.mkForce false;
-      videoDrivers = [ "nvidia" ];
+    initrd.systemd = {
+      enable = true;
+      extraBin.cryptsetup = "${pkgs.cryptsetup}/bin/cryptsetup";
+      services."zfs-import-rpool".after = [ "cryptsetup.target" ];
    };
-    displayManager = {
-      defaultSession = "gnome-xorg";
+    tmp.useTmpfs = true;
  };
+
+  console.earlySetup = true;
+
+  systemd.network.enable = true;
+  systemd.network.wait-online.enable = false;
+
+  networking = {
+    hostId = "cf791898";
+    useNetworkd = true;
+    dhcpcd.enable = false;
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [
+        22 # SSH
+      ];
+    };
+  };
+
+  services.resolved = {
+    enable = true;
+    dnssec = "false";
+    fallbackDns = [
+      "9.9.9.9"
+      "2620:fe::fe"
+      "1.1.1.1"
+      "2606:4700:4700::1111"
+    ];
+    llmnr = "false";
+    extraConfig = ''
+      MulticastDNS=false
+    '';
  };

  # Workaround for label rendering bug in GTK4 with nvidia 470 driver
  environment.sessionVariables.GSK_RENDERER = "gl";

-  environment.systemPackages = [
-    pkgs.moonlight-qt
+  environment.persistence."/persist".enable = mkForce true;
+  environment.persistence."/state".enable = mkForce true;
+
+  modules = {
+    system.desktop.gnome.enable = mkForce false;
+  };
+
+  services.openssh.settings.PermitRootLogin = mkForce "prohibit-password";
+
+  users = {
+    users = {
+      root = {
+        openssh.authorizedKeys.keys = [
+          "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILVHTjsyMIV4THNw6yz0OxAxGnC+41gX72UrPqTzR+OS jordan@vimium.com"
        ];
+      };
+    };
+  };
+
+  users.deterministicIds =
+    let
+      uidGid = id: {
+        uid = id;
+        gid = id;
+      };
+    in
+    {
+      systemd-oom = uidGid 999;
+      systemd-coredump = uidGid 998;
+      sshd = uidGid 997;
+      nscd = uidGid 996;
+      polkituser = uidGid 995;
+      rtkit = uidGid 994;
+      lpadmin = uidGid 993;
+    };

  system.stateVersion = "22.11";
 }
--- a/hosts/hypnos/disko-config.nix
+++ b/hosts/hypnos/disko-config.nix
@@ -8,17 +8,28 @@
        content = {
          type = "gpt";
          partitions = {
-            ESP = {
+            efi = {
              size = "256M";
-              type = "EF00";
+              type = "ef00";
              content = {
                type = "filesystem";
                format = "vfat";
                mountpoint = "/boot";
              };
            };
-            zfs = {
+            swap = {
+              size = "8G";
+              content = {
+                type = "swap";
+                randomEncryption = true;
+              };
+            };
+            rpool = {
              size = "100%";
+              content = {
+                type = "luks";
+                name = "rpool_ata-APPLE_SSD_SM0512F_S1K5NYBF736152";
+                settings.allowDiscards = true;
                content = {
                  type = "zfs";
                  pool = "rpool";
@@ -28,6 +39,7 @@
          };
        };
      };
+    };
    zpool = {
      rpool = {
        type = "zpool";
@@ -35,87 +47,59 @@
          ashift = "12";
        };
        rootFsOptions = {
-          canmount = "off";
-          mountpoint = "none";
-          dnodesize = "auto";
+          compression = "zstd";
+          acltype = "posix";
+          atime = "off";
          xattr = "sa";
-        };
-        postCreateHook = "zfs snapshot rpool@blank";
-        datasets = {
-          local = {
-            type = "zfs_fs";
-            options = {
+          dnodesize = "auto";
          mountpoint = "none";
+          canmount = "off";
+          devices = "off";
+          exec = "off";
+          setuid = "off";
        };
+        datasets = {
+          "local" = {
+            type = "zfs_fs";
+          };
+          "local/root" = {
+            type = "zfs_fs";
+            mountpoint = "/";
+            options = {
+              canmount = "noauto";
+              mountpoint = "/";
+              exec = "on";
+              setuid = "on";
+            };
+            postCreateHook = "zfs snapshot rpool/local/root@blank";
          };
          "local/nix" = {
            type = "zfs_fs";
            mountpoint = "/nix";
            options = {
-              atime = "off";
-              mountpoint = "legacy";
+              canmount = "noauto";
+              mountpoint = "/nix";
+              exec = "on";
+              setuid = "on";
            };
          };
-          "local/tmp" = {
+          "local/state" = {
            type = "zfs_fs";
-            mountpoint = "/tmp";
+            mountpoint = "/state";
            options = {
-              setuid = "off";
-              devices = "off";
-              mountpoint = "legacy";
+              canmount = "noauto";
+              mountpoint = "/state";
            };
          };
-          system = {
+          "safe" = {
            type = "zfs_fs";
-            mountpoint = "/";
-            options = {
-              mountpoint = "legacy";
          };
-          };
-          "system/var" = {
+          "safe/persist" = {
            type = "zfs_fs";
-            mountpoint = "/var";
+            mountpoint = "/persist";
            options = {
-              mountpoint = "legacy";
-            };
-          };
-          "system/var/tmp" = {
-            type = "zfs_fs";
-            mountpoint = "/var/tmp";
-            options = {
-              devices = "off";
-              mountpoint = "legacy";
-            };
-          };
-          "system/var/log" = {
-            type = "zfs_fs";
-            mountpoint = "/var/log";
-            options = {
-              compression = "on";
-              acltype = "posix";
-              mountpoint = "legacy";
-            };
-          };
-          user = {
-            type = "zfs_fs";
-            options = {
-              mountpoint = "none";
-              encryption = "aes-256-gcm";
-              keyformat = "passphrase";
-              keylocation = "file:///tmp/secret.key";
-            };
-            # use this to read the key during boot
-            postCreateHook = ''
-              zfs set keylocation="prompt" "rpool/$name";
-            '';
-          };
-          "user/home" = {
-            type = "zfs_fs";
-            mountpoint = "/home";
-            options = {
-              setuid = "off";
-              devices = "off";
-              mountpoint = "legacy";
+              canmount = "noauto";
+              mountpoint = "/persist";
            };
          };
        };
--- a/hosts/hypnos/hardware-configuration.nix
+++ b/hosts/hypnos/hardware-configuration.nix
@@ -30,7 +30,6 @@
    ];
    extraModulePackages = [
      config.boot.kernelPackages.broadcom_sta
-      config.boot.kernelPackages.nvidiaPackages.legacy_470
    ];
  };

@@ -40,11 +39,6 @@

  hardware = {
    cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
-    nvidia = {
-      package = config.boot.kernelPackages.nvidiaPackages.legacy_470;
-      modesetting.enable = true;
-      powerManagement.enable = true;
-    };
    graphics = {
      enable = true;
      extraPackages = with pkgs; [
--- a/hosts/odyssey/default.nix
+++ b/hosts/odyssey/default.nix
@@ -1,5 +1,4 @@
 {
-  lib,
  pkgs,
  ...
 }:
@@ -106,10 +105,6 @@
        repoPath = "ssh://iqwu22oq@iqwu22oq.repo.borgbase.com/./repo";
      };
    };
-    system.desktop = {
-      gnome.enable = lib.mkForce false;
-      hyprland.enable = lib.mkForce false;
-    };
  };

  system.stateVersion = "22.11";
--- a/modules/nixos/default.nix
+++ b/modules/nixos/default.nix
@@ -5,8 +5,6 @@
    ./services/borgmatic.nix
    ./services/postgresql.nix
    ./services/tailscale.nix
-    ./system/desktop/gnome.nix
-    ./system/desktop/hyprland.nix
    ./system/wireless.nix
  ];
 }
--- a/modules/nixos/deterministic-ids.nix
+++ b/modules/nixos/deterministic-ids.nix
@@ -0,0 +1,100 @@
+{
+  lib,
+  config,
+  ...
+}:
+let
+  inherit (lib)
+    concatLists
+    flip
+    mapAttrsToList
+    mkDefault
+    mkIf
+    mkOption
+    types
+    ;
+
+  cfg = config.users.deterministicIds;
+in
+{
+  options = {
+    users.deterministicIds = mkOption {
+      default = { };
+      description = ''
+        Maps a user or group name to its expected uid/gid values. If a user/group is
+        used on the system without specifying a uid/gid, this module will assign the
+        corresponding ids defined here, or show an error if the definition is missing.
+      '';
+      type = types.attrsOf (
+        types.submodule {
+          options = {
+            uid = mkOption {
+              type = types.nullOr types.int;
+              default = null;
+              description = "The uid to assign if it is missing in `users.users.<name>`.";
+            };
+            gid = mkOption {
+              type = types.nullOr types.int;
+              default = null;
+              description = "The gid to assign if it is missing in `users.groups.<name>`.";
+            };
+          };
+        }
+      );
+    };
+
+    users.users = mkOption {
+      type = types.attrsOf (
+        types.submodule (
+          { name, ... }:
+          {
+            config.uid =
+              let
+                deterministicUid = cfg.${name}.uid or null;
+              in
+              mkIf (deterministicUid != null) (mkDefault deterministicUid);
+          }
+        )
+      );
+    };
+
+    users.groups = mkOption {
+      type = types.attrsOf (
+        types.submodule (
+          { name, ... }:
+          {
+            config.gid =
+              let
+                deterministicGid = cfg.${name}.gid or null;
+              in
+              mkIf (deterministicGid != null) (mkDefault deterministicGid);
+          }
+        )
+      );
+    };
+  };
+
+  config = {
+    assertions =
+      concatLists (
+        flip mapAttrsToList config.users.users (
+          name: user: [
+            {
+              assertion = user.uid != null;
+              message = "non-deterministic uid detected for '${name}', please assign one via `users.deterministicIds`";
+            }
+            {
+              assertion = !user.autoSubUidGidRange;
+              message = "non-deterministic subUids/subGids detected for: ${name}";
+            }
+          ]
+        )
+      )
+      ++ flip mapAttrsToList config.users.groups (
+        name: group: {
+          assertion = group.gid != null;
+          message = "non-deterministic gid detected for '${name}', please assign one via `users.deterministicIds`";
+        }
+      );
+  };
+}
--- a/modules/nixos/system/desktop/gnome.nix
+++ b/modules/nixos/system/desktop/gnome.nix
@@ -1,79 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-let
-  cfg = config.modules.system.desktop.gnome;
-in
-{
-  options.modules.system.desktop.gnome = {
-    enable = lib.mkOption {
-      default = false;
-      example = true;
-    };
-  };
-
-  config = lib.mkIf cfg.enable {
-    services.xserver = {
-      enable = true;
-      displayManager.gdm.enable = true;
-      desktopManager.gnome.enable = true;
-    };
-
-    services.flatpak.enable = true;
-    services.fwupd.enable = true;
-
-    programs.dconf.enable = true;
-
-    environment.systemPackages = with pkgs.unstable; [
-      adw-gtk3
-      adwaita-fonts
-      libsForQt5.qtstyleplugin-kvantum
-      morewaita-icon-theme
-      nautilus-python
-      qadwaitadecorations
-      qadwaitadecorations-qt6
-
-      ## Shell extensions
-      gnomeExtensions.appindicator
-      gnomeExtensions.arcmenu
-      gnomeExtensions.blur-my-shell
-      gnomeExtensions.burn-my-windows
-      gnomeExtensions.clipboard-indicator
-      gnomeExtensions.coverflow-alt-tab
-      gnomeExtensions.dash-to-panel
-      gnomeExtensions.desktop-cube
-      gnomeExtensions.easyScreenCast
-      gnomeExtensions.fly-pie
-      gnomeExtensions.forge
-      gnomeExtensions.gsconnect
-      gnomeExtensions.gsnap
-      gnomeExtensions.hide-top-bar
-      gnomeExtensions.just-perfection
-      gnomeExtensions.media-controls
-      gnomeExtensions.mouse-follows-focus
-      # gnomeExtensions.pano (disabled due to: https://github.com/NixOS/nixpkgs/issues/369438)
-      gnomeExtensions.paperwm
-      gnomeExtensions.pip-on-top
-      gnomeExtensions.search-light
-      gnomeExtensions.smart-auto-move
-      gnomeExtensions.space-bar
-      gnomeExtensions.tiling-assistant
-      gnomeExtensions.tiling-shell
-      gnomeExtensions.todotxt
-      gnomeExtensions.vitals
-      gnomeExtensions.window-is-ready-remover
-      gnomeExtensions.worksets
-      gnomeExtensions.workspace-matrix
-    ];
-
-    environment.persistence."/persist".directories = [
-      "/etc/NetworkManager"
-      "/var/lib/AccountsService"
-      "/var/lib/NetworkManager"
-    ];
-  };
-}
--- a/modules/nixos/system/desktop/hyprland.nix
+++ b/modules/nixos/system/desktop/hyprland.nix
@@ -1,25 +0,0 @@
-{
-  config,
-  lib,
-  ...
-}:
-
-let
-  inherit (lib)
-    mkEnableOption
-    mkIf
-    ;
-  cfg = config.modules.system.desktop.hyprland;
-in
-{
-  options.modules.system.desktop.hyprland.enable = mkEnableOption "hyprland";
-
-  config = mkIf cfg.enable {
-    networking.networkmanager.enable = true;
-
-    programs.hyprland = {
-      enable = true;
-      withUWSM = true;
-    };
-  };
-}
--- a/secrets/rekeyed/atlas/703d7f8fd1a8bc71327f3011304a78a9-nix-access-tokens.age
+++ b/secrets/rekeyed/atlas/703d7f8fd1a8bc71327f3011304a78a9-nix-access-tokens.age
--- a/secrets/rekeyed/helios/4aaa7a0f1b4819f7b6fb076ab42afcb5-nix-access-tokens.age
+++ b/secrets/rekeyed/helios/4aaa7a0f1b4819f7b6fb076ab42afcb5-nix-access-tokens.age
--- a/secrets/rekeyed/hypnos/59884012552f74517db9f43d996a8b80-nix-access-tokens.age
+++ b/secrets/rekeyed/hypnos/59884012552f74517db9f43d996a8b80-nix-access-tokens.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 5PDipg VUUf0H5YtcvVIQGHWSRUjCCWJFC8uyifg9jb3dcKQEM
+2u40LYxerTKD200Mkp/UhMFDwRQy/u74lpFa7JG783g
+-> vSi-grease xC k Y9 7n3c
+WC+dOm6hxAlN9zTouhlfHvZCHfJaGnqOMa5jSIw
+--- 0ywtnNEFe21IGFUvzuzK0dO65YKZCymavaqHOmKB9iQ
+Lš\_%£™ø%2{ÀˆSªžè eMî‡c¹8ˆÝHzÂ`zžà×<C3A0>LTJ1öðm6JE¡pñd`žÍÁMfÙâ5Äî½ü×ðKAØ<Vb‹ù_¿‘ÉÇ¬hæÖí¶o# “‚Ôa€ªóí¸ñ7j„„q>ùW.¤ C«ŸðÏ:Ü¿K•¸«©q]_U•–#‘/M=×-PÓ¦
--- a/secrets/rekeyed/odyssey/ff372013878d923f3800ea9583fb6063-nix-access-tokens.age
+++ b/secrets/rekeyed/odyssey/ff372013878d923f3800ea9583fb6063-nix-access-tokens.age
--- a/users/jordan/artemis.nix
+++ b/users/jordan/artemis.nix
@@ -7,7 +7,6 @@
  imports = [
    ./common/optional/graphical/firefox.nix
    ./common/optional/graphical/fonts.nix
-    ./common/optional/graphical/hyprland
    ./common/optional/graphical/mimeapps.nix
  ];

--- a/users/jordan/atlas.nix
+++ b/users/jordan/atlas.nix
@@ -6,7 +6,7 @@
 {
  imports = [
    ./common/optional/graphical/firefox.nix
-    ./common/optional/graphical/gnome.nix
+    ./common/optional/graphical/niri.nix
  ];

  home.packages = with pkgs; [
--- a/users/jordan/common/optional/graphical/awesome.nix
+++ b/users/jordan/common/optional/graphical/awesome.nix
@@ -0,0 +1,10 @@
+{
+  ...
+}:
+
+{
+  xsession = {
+    enable = true;
+    windowManager.awesome.enable = true;
+  };
+}
--- a/users/jordan/common/optional/graphical/gnome.nix
+++ b/users/jordan/common/optional/graphical/gnome.nix
@@ -1,243 +0,0 @@
-{
-  inputs,
-  lib,
-  pkgs,
-  osConfig,
-  ...
-}:
-
-let
-  inherit (lib)
-    mkForce
-    ;
-  inherit (lib.generators)
-    toINI
-    ;
-in
-{
-  dconf.settings = {
-    "io/github/celluloid-player/celluloid" = {
-      draggable-video-area-enable = true;
-    };
-    "org/gnome/Console" = {
-      font-scale = 1.4;
-      use-system-font = false;
-      custom-font = "ComicShannsMono Nerd Font 10";
-    };
-    "org/gnome/desktop/interface" = {
-      color-scheme = "prefer-dark";
-      cursor-theme = "Adwaita";
-      enable-hot-corners = false;
-      font-name = "Adwaita Sans 11";
-      gtk-theme = "adw-gtk3-dark";
-      icon-theme = "MoreWaita";
-      monospace-font-name = "Adwaita Mono 11";
-      toolbar-style = "both-horiz";
-    };
-    "org/gnome/desktop/peripherals/touchpad" = {
-      tap-to-click = true;
-    };
-    "org/gnome/desktop/sound" = {
-      theme-name = "freedesktop";
-    };
-    "org/gnome/desktop/search-providers" = {
-      disabled = [ "org.gnome.Epiphany.desktop" ];
-    };
-    "org/gnome/desktop/wm/keybindings" = {
-      switch-group = [ "<Super>grave" ];
-      switch-group-backward = [ "<Shift><Super>grave" ];
-    };
-    "org/gnome/desktop/wm/preferences" = {
-      button-layout = "appmenu:close";
-    };
-    "org/gnome/gnome-session" = {
-      auto-save-session = true;
-    };
-    "org/gnome/gnome-system-monitor" = {
-      show-dependencies = true;
-    };
-    "org/gnome/mutter" = {
-      center-new-windows = true;
-      edge-tiling = true;
-      experimental-features = [ "scale-monitor-framebuffer" ];
-    };
-    "org/gnome/settings-daemon/plugins/media-keys" = {
-      volume-up = [
-        "<Shift>F12"
-        "XF86AudioRaiseVolume"
-      ];
-      volume-down = [
-        "<Shift>F11"
-        "XF86AudioLowerVolume"
-      ];
-    };
-    "org/gnome/shell" = {
-      disable-user-extensions = false;
-      enabled-extensions = [
-        "appindicatorsupport@rgcjonas.gmail.com"
-        # "arcmenu@arcmenu.com"
-        "blur-my-shell@aunetx"
-        "burn-my-windows@schneegans.github.com"
-        "clipboard-indicator@tudmotu.com"
-        "CoverflowAltTab@palatis.blogspot.com"
-        # "dash-to-panel@jderose9.github.com"
-        # "desktop-cube@schneegans.github.com"
-        # "EasyScreenCast@iacopodeenosee.gmail.com"
-        "espresso@coadmunkee.github.com"
-        "flypie@schneegans.github.com"
-        # "forge@jmmaranan.com"
-        "gsconnect@andyholmes.github.io"
-        # "gSnap@micahosborne"
-        "hidetopbar@mathieu.bidon.ca"
-        "just-perfection-desktop@just-perfection"
-        # "mediacontrols@cliffniff.github.com"
-        # "mousefollowsfocus@matthes.biz"
-        # "pano@elhan.io"
-        # "paperwm@hedning:matrix.org"
-        "pip-on-top@rafostar.github.com"
-        # "search-light@icedman.github.com"
-        # "smart-auto-move@khimaros.com"
-        "space-bar@luchrioh"
-        # "tiling-assistant@leleat-on-github"
-        "tilingshell@ferrarodomenico.com"
-        "Vitals@CoreCoding.com"
-        "windowIsReady_Remover@nunofarruca@gmail.com"
-        # "worksets@blipk.xyz"
-        # "wsmatrix@martin.zurowietz.de"
-      ];
-      favorite-apps = [
-        "firefox.desktop"
-        "org.gnome.Nautilus.desktop"
-      ];
-    };
-    "org/gnome/shell/extensions/blur-my-shell/panel" = {
-      static-blur = true;
-    };
-    "org/gnome/shell/extensions/blur-my-shell/applications" = {
-      blur = false;
-    };
-    "org/gnome/shell/extensions/burn-my-windows" = {
-      fire-close-effect = false;
-      glide-open-effect = true;
-      glide-close-effect = true;
-    };
-    "org/gnome/shell/extensions/dash-to-panel" = {
-      intellihide = true;
-      panel-positions = ''
-        {"0":"TOP"}
-      '';
-      trans-panel-opacity = 0.3;
-      trans-use-custom-opacity = true;
-      trans-use-dynamic-opacity = true;
-    };
-    "org/gnome/shell/extensions/espresso" = {
-      enable-fullscreen = true;
-      show-indicator = true;
-      show-notifications = false;
-      inhibit-apps = [
-        "com.obsproject.Studio.desktop"
-      ];
-    };
-    "org/gnome/shell/extensions/flypie" = {
-      preview-on-right-side = true;
-    };
-    "org/gnome/shell/extensions/forge" = {
-      window-gap-size = 8;
-      window-gap-hidden-on-single = false;
-    };
-    "org/gnome/shell/extensions/hidetopbar" = {
-      mouse-sensitive = true;
-      mouse-sensitive-fullscreen-window = true;
-      enable-active-window = false;
-    };
-    "org/gnome/shell/extensions/just-perfection" = {
-      activities-button = false;
-      window-demands-attention-focus = true;
-      workspace-wrap-around = true;
-    };
-    "org/gnome/shell/extensions/paperwm" = {
-      use-default-background = true;
-    };
-    "org/gnome/shell/extensions/pip-on-top" = {
-      stick = true;
-    };
-    "org/gnome/shell/extensions/search-light" = {
-      popup-at-cursor-monitor = true;
-    };
-    "org/gnome/shell/extensions/space-bar/behavior" = {
-      enable-activate-workspace-shortcuts = true;
-      show-empty-workspaces = true;
-      smart-workspace-names = false;
-    };
-    "org/gnome/shell/extensions/tiling-assistant" = {
-      screen-top-gap = 8;
-      screen-right-gap = 8;
-      screen-bottom-gap = 8;
-      screen-left-gap = 8;
-      window-gap = 8;
-    };
-    "org/gnome/shell/extensions/tilingshell" = {
-      inner-gaps = 16;
-      outer-gaps = 8;
-      enable-blur-snap-assistant = true;
-    };
-    "org/gtk/settings/file-chooser" = {
-      show-hidden = true;
-      sort-directories-first = true;
-    };
-    "org/gtk/gtk4/settings/file-chooser" = {
-      show-hidden = true;
-      sort-directories-first = true;
-    };
-  };
-
-  home.sessionVariables = {
-    QT_STYLE_OVERRIDE = mkForce "kvantum";
-    QT_WAYLAND_DECORATION = mkForce "adwaita";
-  };
-
-  xdg.configFile = {
-    "Kvantum/kvantum.kvconfig".text = toINI { } {
-      General.theme = "KvLibadwaitaDark";
-    };
-    "Kvantum/KvLibadwaita".source = "${inputs.kvlibadwaita}/src/KvLibadwaita";
-  };
-
-  home.packages =
-    with pkgs;
-    [
-      authenticator
-      # bottles
-      # bustle
-      celluloid
-      # d-spy
-      # drawing
-      # fragments
-      dconf-editor
-      ghex
-      ghostty
-      # gnome-builder
-      gnome-decoder
-      gnome-firmware
-      gnome-frog
-      # gnome-obfuscate
-      gnome-podcasts
-      identity
-      # mission-center
-      mousam
-      newsflash
-      # schemes
-      shortwave
-      sysprof
-    ]
-    ++ (
-      if osConfig.virtualisation.podman.enable then
-        [
-          pods
-        ]
-      else
-        [ ]
-    );
-
-  services.gpg-agent.pinentry.package = pkgs.pinentry-gnome3;
-}
--- a/users/jordan/common/optional/graphical/hyprland/default.nix
+++ b/users/jordan/common/optional/graphical/hyprland/default.nix
@@ -1,332 +0,0 @@
-{
-  inputs,
-  lib,
-  pkgs,
-  osConfig,
-  ...
-}:
-let
-  inherit (lib)
-    attrValues
-    concatStringsSep
-    elem
-    mapAttrs
-    mkIf
-    versionOlder
-    ;
-  inherit (lib.generators)
-    toINI
-    ;
-  concatMapAttrsStringSep =
-    sep: f: attrs:
-    concatStringsSep sep (attrValues (mapAttrs f attrs));
-  globalVariables = {
-    _JAVA_AWT_WM_NONREPARENTING = "1";
-    GDK_BACKEND = "wayland";
-    MOZ_ENABLE_WAYLAND = "1";
-    NIXOS_OZONE_WL = "1";
-    QT_QPA_PLATFORM = "wayland";
-    QT_STYLE_OVERRIDE = "kvantum";
-    QT_WAYLAND_DECORATION = "adwaita";
-    QT_WAYLAND_DISABLE_WINDOWDECORATION = "1";
-    SDL_VIDEODRIVER = "wayland";
-    XDG_SESSION_TYPE = "wayland";
-  }
-  // (
-    if elem "nvidia" osConfig.services.xserver.videoDrivers then
-      {
-        GBM_BACKEND = "nvidia-drm";
-        GSK_RENDERER =
-          if versionOlder osConfig.hardware.nvidia.package.version "570" then "ngl" else "vulkan";
-        LIBVA_DRIVER_NAME = "nvidia";
-      }
-    else
-      { }
-  );
-  hyprVariables = {
-    AQ_DRM_DEVICES = "/dev/dri/card0:/dev/dri/card1";
-  };
-in
-{
-  imports = [
-    ./hypridle.nix
-    ./hyprlock.nix
-    ./hyprpaper.nix
-    ./waybar.nix
-  ];
-
-  wayland.windowManager.hyprland = {
-    enable = true;
-    package = inputs.hyprland.packages.${pkgs.stdenv.hostPlatform.system}.hyprland;
-    portalPackage =
-      inputs.hyprland.packages.${pkgs.stdenv.hostPlatform.system}.xdg-desktop-portal-hyprland;
-    plugins = [
-      # pkgs.unstable.hyprlandPlugins.hyprbars
-      # pkgs.unstable.hyprlandPlugins.hypr-dynamic-cursors
-    ];
-    settings = {
-      general = {
-        gaps_in = 0;
-        gaps_out = 0;
-
-        border_size = 2;
-
-        allow_tearing = false;
-        layout = "dwindle";
-      };
-
-      plugin = {
-        dynamic-cursors = {
-          enabled = false;
-          mode = "none";
-          shake = {
-            enabled = true;
-          };
-        };
-
-        hyprbars = {
-          enabled = false;
-          bar_height = 20;
-          bar_blur = true;
-        };
-      };
-
-      dwindle = {
-        pseudotile = true;
-        preserve_split = true;
-      };
-
-      master = {
-        new_status = "master";
-      };
-
-      misc = {
-        force_default_wallpaper = 0;
-        disable_hyprland_logo = true;
-      };
-
-      ecosystem = {
-        no_donation_nag = true;
-        no_update_news = true;
-      };
-
-      experimental = {
-        xx_color_management_v4 = true;
-      };
-
-      decoration = {
-        rounding = 0;
-
-        active_opacity = 1.0;
-        inactive_opacity = 1.0;
-
-        shadow = {
-          enabled = true;
-          range = 4;
-          render_power = 3;
-        };
-
-        blur = {
-          enabled = true;
-          size = 3;
-          passes = 1;
-
-          vibrancy = 0.1696;
-        };
-      };
-
-      animations = {
-        enabled = true;
-        bezier = [
-          "easeOutQuint,0.23,1,0.32,1"
-          "easeInOutCubic,0.65,0.05,0.36,1"
-          "linear,0,0,1,1"
-          "almostLinear,0.5,0.5,0.75,1.0"
-          "quick,0.15,0,0.1,1"
-        ];
-        animation = [
-          "global, 1, 10, default"
-          "border, 1, 5.39, easeOutQuint"
-          "windows, 1, 4.79, easeOutQuint"
-          "windowsIn, 1, 4.1, easeOutQuint, popin 87%"
-          "windowsOut, 1, 1.49, linear, popin 87%"
-          "fadeIn, 1, 1.73, almostLinear"
-          "fadeOut, 1, 1.46, almostLinear"
-          "fade, 1, 3.03, quick"
-          "layers, 1, 3.81, easeOutQuint"
-          "layersIn, 1, 4, easeOutQuint, fade"
-          "layersOut, 1, 1.5, linear, fade"
-          "fadeLayersIn, 1, 1.79, almostLinear"
-          "fadeLayersOut, 1, 1.39, almostLinear"
-          "workspaces, 1, 1.94, almostLinear, fade"
-          "workspacesIn, 1, 1.21, almostLinear, fade"
-          "workspacesOut, 1, 1.94, almostLinear, fade"
-        ];
-      };
-
-      monitor = [
-        "desc:Dell Inc. DELL U3219Q HPTP413, preferred, auto, 1, vrr, 0, bitdepth, 10, cm, hdr"
-        "desc:LG Electronics LG TV SSCR2, 3840x2160@60, 0x0, 1, vrr, 0, bitdepth, 10, cm, hdr"
-      ];
-
-      input = {
-        kb_layout = "us";
-        kb_options = "caps:super";
-        follow_mouse = 1;
-        sensitivity = 0;
-      };
-
-      device = {
-        name = "mx-anywhere-3s-mouse";
-        sensitivity = -0.5;
-      };
-
-      "$terminal" = "kitty";
-      "$fileManager" = "thunar";
-      "$menu" = "anyrun";
-      "$mainMod" = "SUPER";
-
-      bind = [
-        "$mainMod, Q, exec, $terminal"
-        "$mainMod, C, killactive,"
-        "$mainMod, M, exit,"
-        "$mainMod, E, exec, $fileManager"
-        "$mainMod, V, togglefloating,"
-        "$mainMod, R, exec, $menu"
-        "$mainMod, P, pseudo, # dwindle"
-        "$mainMod, J, togglesplit, # dwindle"
-        "$mainMod, left, movefocus, l"
-        "$mainMod, right, movefocus, r"
-        "$mainMod, up, movefocus, u"
-        "$mainMod, down, movefocus, d"
-        "$mainMod, 1, workspace, 1"
-        "$mainMod, 2, workspace, 2"
-        "$mainMod, 3, workspace, 3"
-        "$mainMod, 4, workspace, 4"
-        "$mainMod, 5, workspace, 5"
-        "$mainMod, 6, workspace, 6"
-        "$mainMod, 7, workspace, 7"
-        "$mainMod, 8, workspace, 8"
-        "$mainMod, 9, workspace, 9"
-        "$mainMod, 0, workspace, 10"
-        "$mainMod SHIFT, 1, movetoworkspace, 1"
-        "$mainMod SHIFT, 2, movetoworkspace, 2"
-        "$mainMod SHIFT, 3, movetoworkspace, 3"
-        "$mainMod SHIFT, 4, movetoworkspace, 4"
-        "$mainMod SHIFT, 5, movetoworkspace, 5"
-        "$mainMod SHIFT, 6, movetoworkspace, 6"
-        "$mainMod SHIFT, 7, movetoworkspace, 7"
-        "$mainMod SHIFT, 8, movetoworkspace, 8"
-        "$mainMod SHIFT, 9, movetoworkspace, 9"
-        "$mainMod SHIFT, 0, movetoworkspace, 10"
-        "$mainMod, S, togglespecialworkspace, magic"
-        "$mainMod SHIFT, S, movetoworkspace, special:magic"
-        "$mainMod, mouse_down, workspace, e+1"
-        "$mainMod, mouse_up, workspace, e-1"
-      ];
-
-      bindm = [
-        "$mainMod, mouse:272, movewindow"
-        "$mainMod, mouse:273, resizewindow"
-      ];
-
-      bindel = [
-        ",XF86AudioRaiseVolume, exec, wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%+"
-        ",XF86AudioLowerVolume, exec, wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%-"
-        ",XF86AudioMute, exec, wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle"
-        ",XF86AudioMicMute, exec, wpctl set-mute @DEFAULT_AUDIO_SOURCE@ toggle"
-        ",XF86MonBrightnessUp, exec, brightnessctl s 10%+"
-        ",XF86MonBrightnessDown, exec, brightnessctl s 10%-"
-      ];
-
-      bindl = [
-        ", XF86AudioNext, exec, playerctl next"
-        ", XF86AudioPause, exec, playerctl play-pause"
-        ", XF86AudioPlay, exec, playerctl play-pause"
-        ", XF86AudioPrev, exec, playerctl previous"
-      ];
-
-      windowrulev2 = [
-        "suppressevent maximize, class:.*"
-        "nofocus,class:^$,title:^$,xwayland:1,floating:1,fullscreen:0,pinned:0"
-      ];
-    };
-  };
-
-  xdg.configFile = mkIf osConfig.programs.hyprland.withUWSM {
-    "Kvantum/kvantum.kvconfig".text = toINI { } {
-      General.theme = "KvLibadwaitaDark";
-    };
-    "Kvantum/KvLibadwaita".source = "${inputs.kvlibadwaita}/src/KvLibadwaita";
-    "uwsm/env".text = concatMapAttrsStringSep "\n" (
-      name: value: "export ${name}=${value}"
-    ) globalVariables;
-    "uwsm/env-hyprland".text = concatMapAttrsStringSep "\n" (
-      name: value: "export ${name}=${value}"
-    ) hyprVariables;
-  };
-
-  home.pointerCursor = {
-    enable = true;
-    gtk.enable = true;
-    name = "macOS";
-    package = pkgs.apple-cursor;
-    size = 28;
-  };
-
-  gtk = {
-    enable = true;
-
-    iconTheme = {
-      name = "MoreWaita";
-      package = pkgs.unstable.morewaita-icon-theme;
-    };
-  };
-
-  fonts.fontconfig = {
-    enable = true;
-    defaultFonts = {
-      sansSerif = [
-        "Adwaita Sans"
-      ];
-      emoji = [
-        "Apple Color Emoji"
-      ];
-    };
-  };
-
-  programs.kitty = {
-    enable = true;
-    settings = {
-      background = "#000000";
-      background_opacity = 0.8;
-    };
-  };
-
-  programs.neovide = {
-    enable = true;
-    package = pkgs.unstable.neovide;
-    settings = {
-      font.size = 16.0;
-    };
-  };
-
-  home.packages = with pkgs.unstable; [
-    anyrun
-    clipse
-    dunst
-    libsForQt5.qtstyleplugin-kvantum
-    loupe
-    mpv
-    qadwaitadecorations
-    qadwaitadecorations-qt6
-    wl-clipboard
-  ];
-
-  services = {
-    flameshot.enable = true;
-    unclutter.enable = true;
-  };
-
-  services.gpg-agent.pinentry.package = pkgs.pinentry-gnome3;
-}
--- a/users/jordan/common/optional/graphical/hyprland/hypridle.nix
+++ b/users/jordan/common/optional/graphical/hyprland/hypridle.nix
@@ -1,28 +0,0 @@
-{
-  ...
-}:
-
-{
-  services.hypridle = {
-    enable = true;
-    settings = {
-      general = {
-        after_sleep_cmd = "hyprctl dispatch dpms on";
-        ignore_dbus_inhibit = false;
-        lock_cmd = "hyprlock";
-      };
-
-      listener = [
-        {
-          timeout = 900;
-          on-timeout = "hyprlock";
-        }
-        {
-          timeout = 1200;
-          on-timeout = "hyprctl dispatch dpms off";
-          on-resume = "hyprctl dispatch dpms on";
-        }
-      ];
-    };
-  };
-}
--- a/users/jordan/common/optional/graphical/hyprland/hyprlock.nix
+++ b/users/jordan/common/optional/graphical/hyprland/hyprlock.nix
@@ -1,51 +0,0 @@
-{
-  config,
-  lib,
-  ...
-}:
-let
-  inherit (lib)
-    getExe
-    ;
-in
-{
-  wayland.windowManager.hyprland.settings.bind = [
-    "$mainMod, L, exec, uwsm app -- ${getExe config.programs.hyprlock.package}"
-  ];
-
-  programs.hyprlock = {
-    enable = true;
-    settings = {
-      general = {
-        disable_loading_bar = false;
-        grace = 3;
-        hide_cursor = true;
-        no_fade_in = false;
-      };
-
-      background = [
-        {
-          path = "screenshot";
-          blur_passes = 3;
-          blur_size = 8;
-        }
-      ];
-
-      input-field = [
-        {
-          size = "200, 50";
-          position = "0, -80";
-          monitor = "";
-          dots_center = true;
-          fade_on_empty = false;
-          font_color = "rgb(202, 211, 245)";
-          inner_color = "rgb(91, 96, 120)";
-          outer_color = "rgb(24, 25, 38)";
-          outline_thickness = 5;
-          placeholder_text = "Password...";
-          shadow_passes = 2;
-        }
-      ];
-    };
-  };
-}
--- a/users/jordan/common/optional/graphical/hyprland/hyprpaper.nix
+++ b/users/jordan/common/optional/graphical/hyprland/hyprpaper.nix
@@ -1,21 +0,0 @@
-{
-  ...
-}:
-
-{
-  services.hyprpaper = {
-    enable = true;
-    settings = {
-      ipc = "on";
-      splash = false;
-
-      preload = [
-        "/home/jordan/Pictures/Aurora.png"
-      ];
-
-      wallpaper = [
-        ",/home/jordan/Pictures/Aurora.png"
-      ];
-    };
-  };
-}
--- a/users/jordan/common/optional/graphical/hyprland/waybar.css
+++ b/users/jordan/common/optional/graphical/hyprland/waybar.css
@@ -1,96 +0,0 @@
-* {
-  font-family: sans-serif;
-}
-
-window#waybar {
-  background: linear-gradient(
-    to bottom,
-    rgba(118, 118, 118, 0.78) 0%,
-    rgba(50, 50, 50, 0.78) 50%,
-    rgba(0, 0, 0, 0.74) 50%,
-    rgba(0, 0, 0, 0.76) 100%
-  );
-  border-top: 1px solid rgba(71, 71, 71, 0.90);
-  border-bottom: 1px solid rgba(0, 0, 0, 0.97);
-  box-shadow: inset 0px 1px 0px 0px rgba(158, 158, 158, 0.90);
-  text-shadow: black 0px 0px 2px;
-  color: white;
-}
-
-#workspaces button {
-  margin: 2px;
-  background: linear-gradient(
-    to bottom,
-    rgba(255, 255, 255, 0.35) 0%,
-    rgba(255, 255, 255, 0.11) 50%,
-    rgba(255, 255, 255, 0) 50%
-  );
-  border: 1px solid rgba(0, 0, 0, 0.37);
-  border-radius: 4px;
-  box-shadow: inset 0px 1px 0px 0px rgba(255, 255, 255, 0.25);
-  text-shadow: black 0px 0px 2px;
-  color: white;
-}
-
-#workspaces button:hover {
-  background:
-    linear-gradient(
-      to bottom,
-      rgba(255, 255, 255, 0.35) 0%,
-      rgba(255, 255, 255, 0.17) 50%,
-      rgba(255, 255, 255, 0) 50%
-    ),
-    radial-gradient(
-      ellipse 80% 80% at 50% 110%,
-      rgba(44, 126, 204, 1) 0%,
-      rgba(44, 126, 204, 0) 80%
-    );
-}
-
-#workspaces button.active {
-  background: linear-gradient(
-    to bottom,
-    rgba(0, 0, 0, 0.40) 0%,
-    rgba(0, 0, 0, 0.38) 50%,
-    rgba(0, 0, 0, 0.55) 50%
-  );
-  box-shadow: inset 0px 1px 0px 0px rgb(0, 0, 0);
-}
-
-#workspaces button.active:hover {
-  background:
-    linear-gradient(
-      to bottom,
-      rgba(0, 0, 0, 0.40) 0%,
-      rgba(0, 0, 0, 0.38) 50%,
-      rgba(0, 0, 0, 0.55) 50%
-    ),
-    radial-gradient(
-      ellipse 80% 80% at 50% 120%,
-      rgba(43, 143, 189, 1) 0%,
-      rgba(43, 143, 189, 0) 80%
-    );
-}
-
-#workspaces button.urgent {
-  background:
-    linear-gradient(
-      to bottom,
-      rgba(255, 255, 255, 0.35) 0%,
-      rgba(255, 255, 255, 0.11) 50%,
-      rgba(255, 255, 255, 0) 50%
-    ),
-    radial-gradient(
-      ellipse 80% 80% at 50% 100%,
-      rgba(199, 128, 14, 1) 0%,
-      rgba(170, 75, 12, 0) 100%
-    );
-}
-
-.modules-left {
-  margin-left: 10px;
-}
-
-.modules-right {
-  margin-right: 10px;
-}
--- a/users/jordan/common/optional/graphical/hyprland/waybar.nix
+++ b/users/jordan/common/optional/graphical/hyprland/waybar.nix
@@ -1,53 +0,0 @@
-{
-  ...
-}:
-
-{
-  programs.waybar = {
-    enable = true;
-    settings = [
-      {
-        layer = "top";
-        position = "bottom";
-        height = 30;
-        spacing = 10;
-
-        modules-left = [
-          "hyprland/workspaces"
-        ];
-        modules-center = [
-          "hyprland/window"
-        ];
-        modules-right = [
-          "disk"
-          "cpu"
-          "memory"
-          "privacy"
-          "clock"
-        ];
-
-        clock = {
-          format = "{:%I:%M %p}";
-        };
-
-        disk = {
-          format = "{free}";
-          path = "/";
-        };
-
-        privacy = {
-          modules = [
-            {
-              type = "screenshare";
-            }
-            {
-              type = "audio-in";
-            }
-          ];
-        };
-      }
-    ];
-    style = ./waybar.css;
-    systemd.enable = true;
-  };
-}
--- a/users/jordan/default.nix
+++ b/users/jordan/default.nix
@@ -15,10 +15,20 @@ in
 {
  age.secrets."passwords/users/jordan".file = "${inputs.secrets}/passwords/users/jordan.age";

-  age.secrets.open-webui-api-key = {
+  age.secrets = {
+    open-webui-api-key = {
      rekeyFile = ./secrets/open-webui-api-key.age;
      owner = "jordan";
    };
+    nix-access-tokens = {
+      rekeyFile = ./secrets/nix-access-tokens.age;
+    };
+  };
+
+  # Increase rate limit with read-only token
+  nix.extraOptions = ''
+    !include ${config.age.secrets.nix-access-tokens.path}
+  '';

  users.users.${name} = {
    description = "Jordan Holt";
@@ -37,7 +47,9 @@ in
    ];
    shell = pkgs.zsh;
    uid = 1000;
-  };
+    createHome = true;
+  }
+  // lib.optionalAttrs (!config.users.mutableUsers) { autoSubUidGidRange = false; };

  home-manager.users.${name} = {
    imports = [
--- a/users/jordan/helios.nix
+++ b/users/jordan/helios.nix
@@ -7,7 +7,7 @@
  imports = [
    ./common/optional/graphical/firefox.nix
    ./common/optional/graphical/fonts.nix
-    ./common/optional/graphical/hyprland
+    ./common/optional/graphical/niri.nix
    ./common/optional/graphical/mimeapps.nix
  ];

--- a/users/jordan/hypnos.nix
+++ b/users/jordan/hypnos.nix
@@ -5,9 +5,9 @@

 {
  imports = [
+    ./common/optional/graphical/awesome.nix
    ./common/optional/graphical/firefox.nix
    ./common/optional/graphical/fonts.nix
-    ./common/optional/graphical/gnome.nix
  ];

  home.packages = with pkgs; [
--- a/users/jordan/odyssey.nix
+++ b/users/jordan/odyssey.nix
@@ -1,4 +1,5 @@
 {
+  inputs,
  pkgs,
  ...
 }:
@@ -16,7 +17,9 @@

  programs.nh.enable = true;

-  home.packages = with pkgs; [
+  home.packages =
+    with pkgs;
+    [
      # ardour
      audacity
      blender
@@ -32,5 +35,8 @@
      pcsx2
      qbittorrent
      xemu
+    ]
+    ++ [
+      inputs.zen-browser.packages.${pkgs.stdenv.hostPlatform.system}.default
    ];
 }
--- a/users/jordan/secrets/nix-access-tokens.age
+++ b/users/jordan/secrets/nix-access-tokens.age
Author	SHA1	Message	Date
Jordan Holt	97aaaa44b0	hosts/desktop: link XDG portal definitions Some checks failed Check flake / build-amd64-linux (push) Failing after 1m1s Details	2026-01-11 21:56:07 +00:00
Jordan Holt	a2138e3d8d	treewide: remove gnome Some checks failed Check flake / build-amd64-linux (push) Failing after 31s Details	2026-01-11 21:53:16 +00:00
Jordan Holt	6b8d1373c4	flake.lock: Update Flake lock file updates: • Updated input 'flake-parts': 'github:hercules-ci/flake-parts/250481aafeb741edfe23d29195671c19b36b6dca?narHash=sha256-feveD98mQpptwrAEggBQKJTYbvwwglSbOv53uCfH9PY%3D' (2026-01-05) → 'github:hercules-ci/flake-parts/80daad04eddbbf5a4d883996a73f3f542fa437ac?narHash=sha256-PVvu7OqHBGWN16zSi6tEmPwwHQ4rLPU9Plvs8/1TUBY%3D' (2026-01-11) • Removed input 'hyprland' • Removed input 'hyprland/aquamarine' • Removed input 'hyprland/aquamarine/hyprutils' • Removed input 'hyprland/aquamarine/hyprwayland-scanner' • Removed input 'hyprland/aquamarine/nixpkgs' • Removed input 'hyprland/aquamarine/systems' • Removed input 'hyprland/hyprcursor' • Removed input 'hyprland/hyprcursor/hyprlang' • Removed input 'hyprland/hyprcursor/nixpkgs' • Removed input 'hyprland/hyprcursor/systems' • Removed input 'hyprland/hyprgraphics' • Removed input 'hyprland/hyprgraphics/hyprutils' • Removed input 'hyprland/hyprgraphics/nixpkgs' • Removed input 'hyprland/hyprgraphics/systems' • Removed input 'hyprland/hyprland-guiutils' • Removed input 'hyprland/hyprland-guiutils/aquamarine' • Removed input 'hyprland/hyprland-guiutils/hyprgraphics' • Removed input 'hyprland/hyprland-guiutils/hyprlang' • Removed input 'hyprland/hyprland-guiutils/hyprtoolkit' • Removed input 'hyprland/hyprland-guiutils/hyprtoolkit/aquamarine' • Removed input 'hyprland/hyprland-guiutils/hyprtoolkit/hyprgraphics' • Removed input 'hyprland/hyprland-guiutils/hyprtoolkit/hyprlang' • Removed input 'hyprland/hyprland-guiutils/hyprtoolkit/hyprutils' • Removed input 'hyprland/hyprland-guiutils/hyprtoolkit/hyprwayland-scanner' • Removed input 'hyprland/hyprland-guiutils/hyprtoolkit/nixpkgs' • Removed input 'hyprland/hyprland-guiutils/hyprtoolkit/systems' • Removed input 'hyprland/hyprland-guiutils/hyprutils' • Removed input 'hyprland/hyprland-guiutils/hyprwayland-scanner' • Removed input 'hyprland/hyprland-guiutils/nixpkgs' • Removed input 'hyprland/hyprland-guiutils/systems' • Removed input 'hyprland/hyprland-protocols' • Removed input 'hyprland/hyprland-protocols/nixpkgs' • Removed input 'hyprland/hyprland-protocols/systems' • Removed input 'hyprland/hyprlang' • Removed input 'hyprland/hyprlang/hyprutils' • Removed input 'hyprland/hyprlang/nixpkgs' • Removed input 'hyprland/hyprlang/systems' • Removed input 'hyprland/hyprutils' • Removed input 'hyprland/hyprutils/nixpkgs' • Removed input 'hyprland/hyprutils/systems' • Removed input 'hyprland/hyprwayland-scanner' • Removed input 'hyprland/hyprwayland-scanner/nixpkgs' • Removed input 'hyprland/hyprwayland-scanner/systems' • Removed input 'hyprland/hyprwire' • Removed input 'hyprland/hyprwire/hyprutils' • Removed input 'hyprland/hyprwire/nixpkgs' • Removed input 'hyprland/hyprwire/systems' • Removed input 'hyprland/nixpkgs' • Removed input 'hyprland/pre-commit-hooks' • Removed input 'hyprland/pre-commit-hooks/flake-compat' • Removed input 'hyprland/pre-commit-hooks/gitignore' • Removed input 'hyprland/pre-commit-hooks/gitignore/nixpkgs' • Removed input 'hyprland/pre-commit-hooks/nixpkgs' • Removed input 'hyprland/systems' • Removed input 'hyprland/xdph' • Removed input 'hyprland/xdph/hyprland-protocols' • Removed input 'hyprland/xdph/hyprlang' • Removed input 'hyprland/xdph/hyprutils' • Removed input 'hyprland/xdph/hyprwayland-scanner' • Removed input 'hyprland/xdph/nixpkgs' • Removed input 'hyprland/xdph/systems' • Removed input 'hyprland-plugins' • Removed input 'hyprland-plugins/hyprland' • Removed input 'hyprland-plugins/nixpkgs' • Removed input 'hyprland-plugins/systems' • Updated input 'niri': 'github:sodiboo/niri-flake/95cbdad2ebce328c7b3fca09d9129e02d318b075?narHash=sha256-%2BRmYWQUHSSSF%2B/bVR2U/K7y6Z97fH4vvVW73IDouTFg%3D' (2026-01-10) → 'github:sodiboo/niri-flake/c65d3c7adfe488122c2c9b7ececb1d7fc893dc5b?narHash=sha256-iR54iiyM4UtQCfAZVsI/BRwIrDUO1oNeiA1h/Jp%2Bnro%3D' (2026-01-11) • Updated input 'niri/niri-unstable': 'github:YaLTeR/niri/a6baef7b68fcb60dfc57a9fc04e983cfd8a028ac?narHash=sha256-4thwWvKFEAFNtolJNN3i9wQ78jMI5VmejiLtjv3vNdc%3D' (2026-01-10) → 'github:YaLTeR/niri/e9d888cd52f8a783b07e0d6c0ec9a341a81031ca?narHash=sha256-1gtx2la5f8RphvN%2BBUZuZjiGh25WdO0Hf9%2BkJKIu3rA%3D' (2026-01-11) • Updated input 'niri/nixpkgs-stable': 'github:NixOS/nixpkgs/d351d0653aeb7877273920cd3e823994e7579b0b?narHash=sha256-r4GVX%2BFToWVE2My8VVZH4V0pTIpnu2ZE8/Z4uxGEMBE%3D' (2026-01-07) → 'github:NixOS/nixpkgs/d03088749a110d52a4739348f39a63f84bb0be14?narHash=sha256-50aDK%2B8eLvsLK39TzQhKNq50/HcXyP4hyxOYoPoVxjo%3D' (2026-01-10) • Updated input 'niri/xwayland-satellite-unstable': 'github:Supreeeme/xwayland-satellite/bc47ef59501556fc2584155ddef76493752dd727?narHash=sha256-V8%2BDrPOp940J6icERAaGuDQTKyEyZzFuRw363XwDKXg%3D' (2026-01-09) → 'github:Supreeeme/xwayland-satellite/72245e108f3b03c3c4474d2de9de2d1830849603?narHash=sha256-HlLo9zH4ULRXlmlIK948cHmdVhxyHgTHxGaoCRlW4k8%3D' (2026-01-11) • Updated input 'nix-topology': 'github:oddlama/nix-topology/924a60a75e17b8c405c5cf0c721449f6441b9967?narHash=sha256-VfU/4wlBPcyAfqftIyw5Yk9GPYVwMowRZcvnPBn%2BOwk%3D' (2026-01-09) → 'github:oddlama/nix-topology/4367a2093c5ff74fc478466aebf41d47ce0cacb4?narHash=sha256-pH5wkcNOiXy4MBjDTe6A1gml%2B7m%2BULC3lYMBPMqdS1w%3D' (2026-01-10) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/d351d0653aeb7877273920cd3e823994e7579b0b?narHash=sha256-r4GVX%2BFToWVE2My8VVZH4V0pTIpnu2ZE8/Z4uxGEMBE%3D' (2026-01-07) → 'github:NixOS/nixpkgs/d03088749a110d52a4739348f39a63f84bb0be14?narHash=sha256-50aDK%2B8eLvsLK39TzQhKNq50/HcXyP4hyxOYoPoVxjo%3D' (2026-01-10) • Updated input 'nixpkgs-unstable': 'github:NixOS/nixpkgs/3497aa5c9457a9d88d71fa93a4a8368816fbeeba?narHash=sha256-dhhvQY67aboBk8b0/u0XB6vwHdgbROZT3fJAjyNh5Ww%3D' (2026-01-08) → 'github:NixOS/nixpkgs/ffbc9f8cbaacfb331b6017d5a5abb21a492c9a38?narHash=sha256-1Sm77VfZh3mU0F5OqKABNLWxOuDeHIlcFjsXeeiPazs%3D' (2026-01-11) • Updated input 'noctalia': 'github:noctalia-dev/noctalia-shell/10bd2aa303be259fe39c7f95433bb4a12657ad72?narHash=sha256-vbhRHMcRrKzJ8cppwCQL1Hjk0wqDorDTAG894paemiM%3D' (2026-01-10) → 'github:noctalia-dev/noctalia-shell/62798d5c57fde04be310561c1e9e2ab5181e2081?narHash=sha256-oUmbaJuAdRwr97ySDaI6Sb/HrVmKVGZiqkvj66w5EN4%3D' (2026-01-11) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/0c445aa21b01fd1d4bb58927f7b268568af87b20?narHash=sha256-b2gJDJfi%2BTbA7Hu2sKip%2B1mWqya0GJaWrrXQjpbOVTU%3D' (2026-01-10) → 'github:numtide/treefmt-nix/e96d59dff5c0d7fddb9d113ba108f03c3ef99eca?narHash=sha256-67vyT1%2BxClLldnumAzCTBvU0jLZ1YBcf4vANRWP3%2BAk%3D' (2026-01-11)	2026-01-11 21:50:01 +00:00
Jordan Holt	7845ecd2dd	treewide: remove hyprland	2026-01-11 21:49:17 +00:00
Jordan Holt	47676ade11	atlas: replace gnome with niri	2026-01-11 21:44:20 +00:00
Jordan Holt	19d322f406	hosts/hypnos: rebuild Some checks failed Check flake / build-amd64-linux (push) Failing after 1m10s Details	2026-01-11 21:42:55 +00:00
Jordan Holt	55961c5618	users/jordan: format access-tokens Some checks failed Check flake / build-amd64-linux (push) Failing after 41s Details	2026-01-10 19:16:38 +00:00
Jordan Holt	c95ab6f0e7	users/jordan: add access-token for nix Some checks failed Check flake / build-amd64-linux (push) Failing after 13s Details	2026-01-10 19:05:19 +00:00
Jordan Holt	45d3148255	hosts/common: refactor Some checks failed Check flake / build-amd64-linux (push) Failing after 1m3s Details	2026-01-10 18:53:28 +00:00
Jordan Holt	1908f83f3b	users/jordan: add zen-browser to odyssey Some checks failed Check flake / build-amd64-linux (push) Failing after 1m2s Details	2026-01-10 17:49:12 +00:00