users/jordan: add niri config

Flake lock file updates:

• Updated input 'hyprland':
    'github:hyprwm/Hyprland/f7f357f15f83612078eb0919ca08b71cac01c25e?narHash=sha256-y0bopy/Hob48/q71u4yJo2S0g90JFUJqq3rfh2DgKkk%3D' (2025-12-23)
  → 'github:hyprwm/Hyprland/33df518f97b930316742736ecb07dc322da4c5d3?narHash=sha256-m9VZ9cxYUl9Q9%2BROSKmYpVeyIAvz1faqNqBKZ4WamWI%3D' (2025-12-26)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/76701a179d3a98b07653e2b0409847499b2a07d3?narHash=sha256-5G1NDO2PulBx1RoaA6U1YoUDX0qZslpPxv%2Bn5GX6Qto%3D' (2025-12-23)
  → 'github:NixOS/nixpkgs/f560ccec6b1116b22e6ed15f4c510997d99d5852?narHash=sha256-BASnpCLodmgiVn0M1MU2Pqyoz0aHwar/0qLkp7CjvSQ%3D' (2025-12-26)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/a6531044f6d0bef691ea18d4d4ce44d0daa6e816?narHash=sha256-3xY8CZ4rSnQ0NqGhMKAy5vgC%2B2IVK0NoVEzDoOh4DA4%3D' (2025-12-21)
  → 'github:NixOS/nixpkgs/3e2499d5539c16d0d173ba53552a4ff8547f4539?narHash=sha256-QEhk0eXgyIqTpJ/ehZKg9IKS7EtlWxF3N7DXy42zPfU%3D' (2025-12-25)
• Updated input 'nixvim':
    'github:nix-community/nixvim/35688970083857d26bf6c57934541eb906f96249?narHash=sha256-aajoMAR81hZX4PZho2Hvx8Y95M1MtgQHF/8CwyJquZ4%3D' (2025-12-23)
  → 'github:nix-community/nixvim/2d3184cd3dd31f6eb57eb4ddfe2387ebd141f1e5?narHash=sha256-JG0KvKmVyAQZ4PxKVDy7FGGUirt1lLhWwGwy9ExLCoI%3D' (2025-12-26)

README.md

@@ -5,9 +5,9 @@ System and user configuration for NixOS-based systems.
 | | |
 |-|-|
 | **Shell:** | zsh |
-| **DE:** | GNOME |
+| **WM:** | Hyprland |
 | **Theme:** | Adwaita |
-| **Terminal:** | Ghostty |
+| **Terminal:** | kitty |
 
 ## Provisioning a new host
 

flake.lock

@@ -12,11 +12,11 @@
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1754433428,
-        "narHash": "sha256-NA/FT2hVhKDftbHSwVnoRTFhes62+7dxZbxj5Gxvghs=",
+        "lastModified": 1762618334,
+        "narHash": "sha256-wyT7Pl6tMFbFrs8Lk/TlEs81N6L+VSybPfiIgzU8lbQ=",
         "owner": "ryantm",
         "repo": "agenix",
-        "rev": "9edb1787864c4f59ae5074ad498b6272b3ec308d",
+        "rev": "fcdea223397448d35d9b31f798479227e80183f6",
         "type": "github"
       },
       "original": {
@@ -38,11 +38,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1754492276,
-        "narHash": "sha256-cCtleJZQY5eWPYRGl5x63BZ2rfOik4pLveCveH+tmvM=",
+        "lastModified": 1759699908,
+        "narHash": "sha256-kYVGY8sAfqwpNch706Fy2+/b+xbtfidhXSnzvthAhIQ=",
         "owner": "oddlama",
         "repo": "agenix-rekey",
-        "rev": "69ed7833c0e4e6a677a20894d8f12876b9e2bedb",
+        "rev": "42362b12f59978aabf3ec3334834ce2f3662013d",
         "type": "github"
       },
       "original": {
@@ -71,11 +71,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1755946532,
-        "narHash": "sha256-POePremlUY5GyA1zfbtic6XLxDaQcqHN6l+bIxdT5gc=",
+        "lastModified": 1765900596,
+        "narHash": "sha256-+hn8v9jkkLP9m+o0Nm5SiEq10W0iWDSotH2XfjU45fA=",
         "owner": "hyprwm",
         "repo": "aquamarine",
-        "rev": "81584dae2df6ac79f6b6dae0ecb7705e95129ada",
+        "rev": "d83c97f8f5c0aae553c1489c7d9eff3eadcadace",
         "type": "github"
       },
       "original": {
@@ -131,11 +131,11 @@
         "utils": "utils"
       },
       "locked": {
-        "lastModified": 1756719547,
-        "narHash": "sha256-N9gBKUmjwRKPxAafXEk1EGadfk2qDZPBQp4vXWPHINQ=",
+        "lastModified": 1766051518,
+        "narHash": "sha256-znKOwPXQnt3o7lDb3hdf19oDo0BLP4MfBOYiWkEHoik=",
         "owner": "serokell",
         "repo": "deploy-rs",
-        "rev": "125ae9e3ecf62fb2c0fd4f2d894eb971f1ecaed2",
+        "rev": "d5eff7f948535b9c723d60cd8239f8f11ddc90fa",
         "type": "github"
       },
       "original": {
@@ -172,11 +172,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1741473158,
-        "narHash": "sha256-kWNaq6wQUbUMlPgw8Y+9/9wP0F8SHkjy24/mN3UAppg=",
+        "lastModified": 1764011051,
+        "narHash": "sha256-M7SZyPZiqZUR/EiiBJnmyUbOi5oE/03tCeFrTiUZchI=",
         "owner": "numtide",
         "repo": "devshell",
-        "rev": "7c9e793ebe66bcba8292989a68c0419b737a22a0",
+        "rev": "17ed8d9744ebe70424659b0ef74ad6d41fc87071",
         "type": "github"
       },
       "original": {
@@ -213,11 +213,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756733629,
-        "narHash": "sha256-dwWGlDhcO5SMIvMSTB4mjQ5Pvo2vtxvpIknhVnSz2I8=",
+        "lastModified": 1766150702,
+        "narHash": "sha256-P0kM+5o+DKnB6raXgFEk3azw8Wqg5FL6wyl9jD+G5a4=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "a5c4f2ab72e3d1ab43e3e65aa421c6f2bd2e12a1",
+        "rev": "916506443ecd0d0b4a0f4cf9d40a3c22ce39b378",
         "type": "github"
       },
       "original": {
@@ -229,11 +229,11 @@
     "firefox-gnome-theme": {
       "flake": false,
       "locked": {
-        "lastModified": 1756083905,
-        "narHash": "sha256-UqYGTBgI5ypGh0Kf6zZjom/vABg7HQocB4gmxzl12uo=",
+        "lastModified": 1764873433,
+        "narHash": "sha256-1XPewtGMi+9wN9Ispoluxunw/RwozuTRVuuQOmxzt+A=",
         "owner": "rafaelmardojai",
         "repo": "firefox-gnome-theme",
-        "rev": "b655eaf16d4cbec9c3472f62eee285d4b419a808",
+        "rev": "f7ffd917ac0d253dbd6a3bf3da06888f57c69f92",
         "type": "github"
       },
       "original": {
@@ -261,11 +261,11 @@
     "flake-compat_2": {
       "flake": false,
       "locked": {
-        "lastModified": 1747046372,
-        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
+        "lastModified": 1761588595,
+        "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",
         "owner": "edolstra",
         "repo": "flake-compat",
-        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
+        "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",
         "type": "github"
       },
       "original": {
@@ -277,11 +277,11 @@
     "flake-compat_3": {
       "flake": false,
       "locked": {
-        "lastModified": 1747046372,
-        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
+        "lastModified": 1761588595,
+        "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",
         "owner": "edolstra",
         "repo": "flake-compat",
-        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
+        "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",
         "type": "github"
       },
       "original": {
@@ -293,11 +293,11 @@
     "flake-compat_4": {
       "flake": false,
       "locked": {
-        "lastModified": 1747046372,
-        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
+        "lastModified": 1761588595,
+        "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",
         "owner": "edolstra",
         "repo": "flake-compat",
-        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
+        "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",
         "type": "github"
       },
       "original": {
@@ -332,11 +332,11 @@
         "nixpkgs-lib": "nixpkgs-lib"
       },
       "locked": {
-        "lastModified": 1756770412,
-        "narHash": "sha256-+uWLQZccFHwqpGqr2Yt5VsW/PbeJVTn9Dk6SHWhNRPw=",
+        "lastModified": 1765835352,
+        "narHash": "sha256-XswHlK/Qtjasvhd1nOa1e8MgZ8GS//jBoTqWtrS1Giw=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "4524271976b625a4a605beefd893f270620fd751",
+        "rev": "a34fae9c08a15ad73f295041fec82323541400a9",
         "type": "github"
       },
       "original": {
@@ -353,11 +353,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1754091436,
-        "narHash": "sha256-XKqDMN1/Qj1DKivQvscI4vmHfDfvYR2pfuFOJiCeewM=",
+        "lastModified": 1765835352,
+        "narHash": "sha256-XswHlK/Qtjasvhd1nOa1e8MgZ8GS//jBoTqWtrS1Giw=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "67df8c627c2c39c41dbec76a1f201929929ab0bd",
+        "rev": "a34fae9c08a15ad73f295041fec82323541400a9",
         "type": "github"
       },
       "original": {
@@ -415,11 +415,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1742649964,
-        "narHash": "sha256-DwOTp7nvfi8mRfuL1escHDXabVXFGT1VlPD1JHrtrco=",
+        "lastModified": 1763319842,
+        "narHash": "sha256-YG19IyrTdnVn0l3DvcUYm85u3PaqBt6tI6VvolcuHnA=",
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "dcf5072734cb576d2b0c59b2ac44f5050b5eac82",
+        "rev": "7275fa67fbbb75891c16d9dee7d88e58aea2d761",
         "type": "github"
       },
       "original": {
@@ -517,16 +517,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1756679287,
-        "narHash": "sha256-Xd1vOeY9ccDf5VtVK12yM0FS6qqvfUop8UQlxEB+gTQ=",
+        "lastModified": 1766553861,
+        "narHash": "sha256-ZbnG01yA3O8Yr1vUm3+NQ2qk9iRhS5bloAnuXHHy7+c=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "07fc025fe10487dd80f2ec694f1cd790e752d0e8",
+        "rev": "0999ed8f965bbbd991437ad9c5ed3434cecbc30e",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-25.05",
+        "ref": "release-25.11",
         "repo": "home-manager",
         "type": "github"
       }
@@ -576,11 +576,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1755678602,
-        "narHash": "sha256-uEC5O/NIUNs1zmc1aH1+G3GRACbODjk2iS0ET5hXtuk=",
+        "lastModified": 1763733840,
+        "narHash": "sha256-JnET78yl5RvpGuDQy3rCycOCkiKoLr5DN1fPhRNNMco=",
         "owner": "hyprwm",
         "repo": "hyprgraphics",
-        "rev": "157cc52065a104fc3b8fa542ae648b992421d1c7",
+        "rev": "8f1bec691b2d198c60cccabca7a94add2df4ed1a",
         "type": "github"
       },
       "original": {
@@ -594,22 +594,23 @@
         "aquamarine": "aquamarine",
         "hyprcursor": "hyprcursor",
         "hyprgraphics": "hyprgraphics",
+        "hyprland-guiutils": "hyprland-guiutils",
         "hyprland-protocols": "hyprland-protocols",
-        "hyprland-qtutils": "hyprland-qtutils",
         "hyprlang": "hyprlang",
         "hyprutils": "hyprutils",
         "hyprwayland-scanner": "hyprwayland-scanner",
+        "hyprwire": "hyprwire",
         "nixpkgs": "nixpkgs",
         "pre-commit-hooks": "pre-commit-hooks",
         "systems": "systems_3",
         "xdph": "xdph"
       },
       "locked": {
-        "lastModified": 1756811803,
-        "narHash": "sha256-03zmDvAU+VLPWHv5uxfGVR6bs/SnCYeZ8hbedK/Eb/M=",
+        "lastModified": 1766761711,
+        "narHash": "sha256-m9VZ9cxYUl9Q9+ROSKmYpVeyIAvz1faqNqBKZ4WamWI=",
         "owner": "hyprwm",
         "repo": "Hyprland",
-        "rev": "127aab815908ecbd3db4d23f127d2e96b79855f9",
+        "rev": "33df518f97b930316742736ecb07dc322da4c5d3",
         "type": "github"
       },
       "original": {
@@ -618,6 +619,52 @@
         "type": "github"
       }
     },
+    "hyprland-guiutils": {
+      "inputs": {
+        "aquamarine": [
+          "hyprland",
+          "aquamarine"
+        ],
+        "hyprgraphics": [
+          "hyprland",
+          "hyprgraphics"
+        ],
+        "hyprlang": [
+          "hyprland",
+          "hyprlang"
+        ],
+        "hyprtoolkit": "hyprtoolkit",
+        "hyprutils": [
+          "hyprland",
+          "hyprutils"
+        ],
+        "hyprwayland-scanner": [
+          "hyprland",
+          "hyprwayland-scanner"
+        ],
+        "nixpkgs": [
+          "hyprland",
+          "nixpkgs"
+        ],
+        "systems": [
+          "hyprland",
+          "systems"
+        ]
+      },
+      "locked": {
+        "lastModified": 1765643131,
+        "narHash": "sha256-CCGohW5EBIRy4B7vTyBMqPgsNcaNenVad/wszfddET0=",
+        "owner": "hyprwm",
+        "repo": "hyprland-guiutils",
+        "rev": "e50ae912813bdfa8372d62daf454f48d6df02297",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hyprwm",
+        "repo": "hyprland-guiutils",
+        "type": "github"
+      }
+    },
     "hyprland-plugins": {
       "inputs": {
         "hyprland": [
@@ -635,11 +682,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756806479,
-        "narHash": "sha256-+RLX4BmuMw4c97npsBcjjEuy+s83POX9Yp8Nkj499lA=",
+        "lastModified": 1766258034,
+        "narHash": "sha256-0EoL8X+sYexDBusF9XyY2WoGKRqnARA+vfh/3uAi/j0=",
         "owner": "hyprwm",
         "repo": "hyprland-plugins",
-        "rev": "b8d6d369618078b2dbb043480ca65fe3521f273b",
+        "rev": "3e29d68d5a830c542643a52d4be726661eaa85e7",
         "type": "github"
       },
       "original": {
@@ -660,11 +707,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1749046714,
-        "narHash": "sha256-kymV5FMnddYGI+UjwIw8ceDjdeg7ToDVjbHCvUlhn14=",
+        "lastModified": 1765214753,
+        "narHash": "sha256-P9zdGXOzToJJgu5sVjv7oeOGPIIwrd9hAUAP3PsmBBs=",
         "owner": "hyprwm",
         "repo": "hyprland-protocols",
-        "rev": "613878cb6f459c5e323aaafe1e6f388ac8a36330",
+        "rev": "3f3860b869014c00e8b9e0528c7b4ddc335c21ab",
         "type": "github"
       },
       "original": {
@@ -673,74 +720,6 @@
         "type": "github"
       }
     },
-    "hyprland-qt-support": {
-      "inputs": {
-        "hyprlang": [
-          "hyprland",
-          "hyprland-qtutils",
-          "hyprlang"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "hyprland-qtutils",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "hyprland-qtutils",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1749154592,
-        "narHash": "sha256-DO7z5CeT/ddSGDEnK9mAXm1qlGL47L3VAHLlLXoCjhE=",
-        "owner": "hyprwm",
-        "repo": "hyprland-qt-support",
-        "rev": "4c8053c3c888138a30c3a6c45c2e45f5484f2074",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprland-qt-support",
-        "type": "github"
-      }
-    },
-    "hyprland-qtutils": {
-      "inputs": {
-        "hyprland-qt-support": "hyprland-qt-support",
-        "hyprlang": [
-          "hyprland",
-          "hyprlang"
-        ],
-        "hyprutils": [
-          "hyprland",
-          "hyprland-qtutils",
-          "hyprlang",
-          "hyprutils"
-        ],
-        "nixpkgs": [
-          "hyprland",
-          "nixpkgs"
-        ],
-        "systems": [
-          "hyprland",
-          "systems"
-        ]
-      },
-      "locked": {
-        "lastModified": 1753819801,
-        "narHash": "sha256-tHe6XeNeVeKapkNM3tcjW4RuD+tB2iwwoogWJOtsqTI=",
-        "owner": "hyprwm",
-        "repo": "hyprland-qtutils",
-        "rev": "b308a818b9dcaa7ab8ccab891c1b84ebde2152bc",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hyprwm",
-        "repo": "hyprland-qtutils",
-        "type": "github"
-      }
-    },
     "hyprlang": {
       "inputs": {
         "hyprutils": [
@@ -757,11 +736,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1753622892,
-        "narHash": "sha256-0K+A+gmOI8IklSg5It1nyRNv0kCNL51duwnhUO/B8JA=",
+        "lastModified": 1764612430,
+        "narHash": "sha256-54ltTSbI6W+qYGMchAgCR6QnC1kOdKXN6X6pJhOWxFg=",
         "owner": "hyprwm",
         "repo": "hyprlang",
-        "rev": "23f0debd2003f17bd65f851cd3f930cff8a8c809",
+        "rev": "0d00dc118981531aa731150b6ea551ef037acddd",
         "type": "github"
       },
       "original": {
@@ -770,6 +749,58 @@
         "type": "github"
       }
     },
+    "hyprtoolkit": {
+      "inputs": {
+        "aquamarine": [
+          "hyprland",
+          "hyprland-guiutils",
+          "aquamarine"
+        ],
+        "hyprgraphics": [
+          "hyprland",
+          "hyprland-guiutils",
+          "hyprgraphics"
+        ],
+        "hyprlang": [
+          "hyprland",
+          "hyprland-guiutils",
+          "hyprlang"
+        ],
+        "hyprutils": [
+          "hyprland",
+          "hyprland-guiutils",
+          "hyprutils"
+        ],
+        "hyprwayland-scanner": [
+          "hyprland",
+          "hyprland-guiutils",
+          "hyprwayland-scanner"
+        ],
+        "nixpkgs": [
+          "hyprland",
+          "hyprland-guiutils",
+          "nixpkgs"
+        ],
+        "systems": [
+          "hyprland",
+          "hyprland-guiutils",
+          "systems"
+        ]
+      },
+      "locked": {
+        "lastModified": 1764592794,
+        "narHash": "sha256-7CcO+wbTJ1L1NBQHierHzheQGPWwkIQug/w+fhTAVuU=",
+        "owner": "hyprwm",
+        "repo": "hyprtoolkit",
+        "rev": "5cfe0743f0e608e1462972303778d8a0859ee63e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hyprwm",
+        "repo": "hyprtoolkit",
+        "type": "github"
+      }
+    },
     "hyprutils": {
       "inputs": {
         "nixpkgs": [
@@ -782,11 +813,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756117388,
-        "narHash": "sha256-oRDel6pNl/T2tI+nc/USU9ZP9w08dxtl7hiZxa0C/Wc=",
+        "lastModified": 1766160771,
+        "narHash": "sha256-roINUGikWRqqgKrD4iotKbGj3ZKJl3hjMz5l/SyKrHw=",
         "owner": "hyprwm",
         "repo": "hyprutils",
-        "rev": "b2ae3204845f5f2f79b4703b441252d8ad2ecfd0",
+        "rev": "5ac060bfcf2f12b3a6381156ebbc13826a05b09f",
         "type": "github"
       },
       "original": {
@@ -807,11 +838,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1755184602,
-        "narHash": "sha256-RCBQN8xuADB0LEgaKbfRqwm6CdyopE1xIEhNc67FAbw=",
+        "lastModified": 1763640274,
+        "narHash": "sha256-Uan1Nl9i4TF/kyFoHnTq1bd/rsWh4GAK/9/jDqLbY5A=",
         "owner": "hyprwm",
         "repo": "hyprwayland-scanner",
-        "rev": "b3b0f1f40ae09d4447c20608e5a4faf8bf3c492d",
+        "rev": "f6cf414ca0e16a4d30198fd670ec86df3c89f671",
         "type": "github"
       },
       "original": {
@@ -820,6 +851,35 @@
         "type": "github"
       }
     },
+    "hyprwire": {
+      "inputs": {
+        "hyprutils": [
+          "hyprland",
+          "hyprutils"
+        ],
+        "nixpkgs": [
+          "hyprland",
+          "nixpkgs"
+        ],
+        "systems": [
+          "hyprland",
+          "systems"
+        ]
+      },
+      "locked": {
+        "lastModified": 1766253200,
+        "narHash": "sha256-26qPwrd3od+xoYVywSB7hC2cz9ivN46VPLlrsXyGxvE=",
+        "owner": "hyprwm",
+        "repo": "hyprwire",
+        "rev": "1079777525b30a947c8d657fac158e00ae85de9d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hyprwm",
+        "repo": "hyprwire",
+        "type": "github"
+      }
+    },
     "impermanence": {
       "locked": {
         "lastModified": 1737831083,
@@ -849,16 +909,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1748294338,
-        "narHash": "sha256-FVO01jdmUNArzBS7NmaktLdGA5qA3lUMJ4B7a05Iynw=",
+        "lastModified": 1754860581,
+        "narHash": "sha256-EM0IE63OHxXCOpDHXaTyHIOk2cNvMCGPqLt/IdtVxgk=",
         "owner": "NuschtOS",
         "repo": "ixx",
-        "rev": "cc5f390f7caf265461d4aab37e98d2292ebbdb85",
+        "rev": "babfe85a876162c4acc9ab6fb4483df88fa1f281",
         "type": "github"
       },
       "original": {
         "owner": "NuschtOS",
-        "ref": "v0.0.8",
+        "ref": "v0.1.1",
         "repo": "ixx",
         "type": "github"
       }
@@ -866,11 +926,11 @@
     "kvlibadwaita": {
       "flake": false,
       "locked": {
-        "lastModified": 1710621848,
-        "narHash": "sha256-xBl6zmpqTAH5MIT5iNAdW6kdOcB5MY0Dtrb95hdYpwA=",
+        "lastModified": 1757782301,
+        "narHash": "sha256-jCXME6mpqqWd7gWReT04a//2O83VQcOaqIIXa+Frntc=",
         "owner": "GabePoel",
         "repo": "KvLibadwaita",
-        "rev": "87c1ef9f44ec48855fd09ddab041007277e30e37",
+        "rev": "1f4e0bec44b13dabfa1fe4047aa8eeaccf2f3557",
         "type": "github"
       },
       "original": {
@@ -879,6 +939,64 @@
         "type": "github"
       }
     },
+    "niri": {
+      "inputs": {
+        "niri-stable": "niri-stable",
+        "niri-unstable": "niri-unstable",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "nixpkgs-stable": "nixpkgs-stable",
+        "xwayland-satellite-stable": "xwayland-satellite-stable",
+        "xwayland-satellite-unstable": "xwayland-satellite-unstable"
+      },
+      "locked": {
+        "lastModified": 1766765523,
+        "narHash": "sha256-DCk3GKdKZNjpvNuDy9ZVfVwCy3tlm96/UZnYkJO7N44=",
+        "owner": "sodiboo",
+        "repo": "niri-flake",
+        "rev": "a3e638c75d07de759421e6f34bd69c3f9a0a3567",
+        "type": "github"
+      },
+      "original": {
+        "owner": "sodiboo",
+        "repo": "niri-flake",
+        "type": "github"
+      }
+    },
+    "niri-stable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1756556321,
+        "narHash": "sha256-RLD89dfjN0RVO86C/Mot0T7aduCygPGaYbog566F0Qo=",
+        "owner": "YaLTeR",
+        "repo": "niri",
+        "rev": "01be0e65f4eb91a9cd624ac0b76aaeab765c7294",
+        "type": "github"
+      },
+      "original": {
+        "owner": "YaLTeR",
+        "ref": "v25.08",
+        "repo": "niri",
+        "type": "github"
+      }
+    },
+    "niri-unstable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1766751930,
+        "narHash": "sha256-83/YSW6c58i/iwGzAFApuMy6MCgoIaROeCcoIGh+ViU=",
+        "owner": "YaLTeR",
+        "repo": "niri",
+        "rev": "b5640d5293ad8dca06cb447692ea7cbb21680eb1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "YaLTeR",
+        "repo": "niri",
+        "type": "github"
+      }
+    },
     "nix-topology": {
       "inputs": {
         "devshell": "devshell_3",
@@ -891,11 +1009,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1752093877,
-        "narHash": "sha256-P0TySh6sQl1EhfxjW9ZqGxEyUBSsEpdnchOe1QB0pLA=",
+        "lastModified": 1765969653,
+        "narHash": "sha256-qVpQxyvdByeDfb+d+jhbyNna2Ie+w85iHpt4Qu0rv/E=",
         "owner": "oddlama",
         "repo": "nix-topology",
-        "rev": "6a536c4b686ee4bcf07a7b0f8b823584560e2633",
+        "rev": "0ed73e5a1b65eb8ed388d070ebe8dedb9182f466",
         "type": "github"
       },
       "original": {
@@ -906,11 +1024,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1756750488,
-        "narHash": "sha256-e4ZAu2sjOtGpvbdS5zo+Va5FUUkAnizl4wb0/JlIL2I=",
+        "lastModified": 1766568855,
+        "narHash": "sha256-UXVtN77D7pzKmzOotFTStgZBqpOcf8cO95FcupWp4Zo=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "47eb4856cfd01eaeaa7bb5944a0f27db8fb9b94a",
+        "rev": "c5db9569ac9cc70929c268ac461f4003e3e5ca80",
         "type": "github"
       },
       "original": {
@@ -926,31 +1044,30 @@
         "git-hooks": "git-hooks",
         "nixpkgs": [
           "nixpkgs"
-        ],
-        "nixpkgs-25_05": "nixpkgs-25_05"
+        ]
       },
       "locked": {
-        "lastModified": 1755110674,
-        "narHash": "sha256-PigqTAGkdBYXVFWsJnqcirrLeFqRFN4PFigLA8FzxeI=",
+        "lastModified": 1766537863,
+        "narHash": "sha256-HEt+wbazRgJYeY+lgj65bxhPyVc4x7NEB2bs5NU6DF8=",
         "owner": "simple-nixos-mailserver",
         "repo": "nixos-mailserver",
-        "rev": "f5936247dbdb8501221978562ab0b302dd75456c",
+        "rev": "23f0a53ca6e58e61e1ea2b86791c69b79c91656d",
         "type": "gitlab"
       },
       "original": {
         "owner": "simple-nixos-mailserver",
-        "ref": "nixos-25.05",
+        "ref": "nixos-25.11",
         "repo": "nixos-mailserver",
         "type": "gitlab"
       }
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1756266583,
-        "narHash": "sha256-cr748nSmpfvnhqSXPiCfUPxRz2FJnvf/RjJGvFfaCsM=",
+        "lastModified": 1766070988,
+        "narHash": "sha256-G/WVghka6c4bAzMhTwT2vjLccg/awmHkdKSd2JrycLc=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "8a6d5427d99ec71c64f0b93d45778c889005d9c2",
+        "rev": "c6245e83d836d0433170a16eb185cefe0572f8b8",
         "type": "github"
       },
       "original": {
@@ -960,44 +1077,44 @@
         "type": "github"
       }
     },
-    "nixpkgs-25_05": {
+    "nixpkgs-lib": {
       "locked": {
-        "lastModified": 1747610100,
-        "narHash": "sha256-rpR5ZPMkWzcnCcYYo3lScqfuzEw5Uyfh+R0EKZfroAc=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "ca49c4304acf0973078db0a9d200fd2bae75676d",
+        "lastModified": 1765674936,
+        "narHash": "sha256-k00uTP4JNfmejrCLJOwdObYC9jHRrr/5M/a/8L2EIdo=",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
+        "rev": "2075416fcb47225d9b68ac469a5c4801a9c4dd85",
         "type": "github"
       },
       "original": {
-        "owner": "NixOS",
-        "ref": "nixos-25.05",
-        "repo": "nixpkgs",
+        "owner": "nix-community",
+        "repo": "nixpkgs.lib",
         "type": "github"
       }
     },
-    "nixpkgs-lib": {
+    "nixpkgs-stable": {
       "locked": {
-        "lastModified": 1754788789,
-        "narHash": "sha256-x2rJ+Ovzq0sCMpgfgGaaqgBSwY+LST+WbZ6TytnT9Rk=",
-        "owner": "nix-community",
-        "repo": "nixpkgs.lib",
-        "rev": "a73b9c743612e4244d865a2fdee11865283c04e6",
+        "lastModified": 1766736597,
+        "narHash": "sha256-BASnpCLodmgiVn0M1MU2Pqyoz0aHwar/0qLkp7CjvSQ=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "f560ccec6b1116b22e6ed15f4c510997d99d5852",
         "type": "github"
       },
       "original": {
-        "owner": "nix-community",
-        "repo": "nixpkgs.lib",
+        "owner": "NixOS",
+        "ref": "nixos-25.11",
+        "repo": "nixpkgs",
         "type": "github"
       }
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1756787288,
-        "narHash": "sha256-rw/PHa1cqiePdBxhF66V7R+WAP8WekQ0mCDG4CFqT8Y=",
+        "lastModified": 1766651565,
+        "narHash": "sha256-QEhk0eXgyIqTpJ/ehZKg9IKS7EtlWxF3N7DXy42zPfU=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "d0fc30899600b9b3466ddb260fd83deb486c32f1",
+        "rev": "3e2499d5539c16d0d173ba53552a4ff8547f4539",
         "type": "github"
       },
       "original": {
@@ -1008,16 +1125,16 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1756754095,
-        "narHash": "sha256-9Rsn9XEWINExosFkKEqdp8EI6Mujr1gmQiyrEcts2ls=",
+        "lastModified": 1766736597,
+        "narHash": "sha256-BASnpCLodmgiVn0M1MU2Pqyoz0aHwar/0qLkp7CjvSQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "7c815e513adbf03c9098b2bd230c1e0525c8a7f9",
+        "rev": "f560ccec6b1116b22e6ed15f4c510997d99d5852",
         "type": "github"
       },
       "original": {
         "id": "nixpkgs",
-        "ref": "nixos-25.05",
+        "ref": "nixos-25.11",
         "type": "indirect"
       }
     },
@@ -1031,16 +1148,16 @@
         "systems": "systems_6"
       },
       "locked": {
-        "lastModified": 1755727480,
-        "narHash": "sha256-eb9N7XFj1zirk+D2KV+rn/CjmVHDISlxhtZCWZEVpkM=",
+        "lastModified": 1766725080,
+        "narHash": "sha256-JG0KvKmVyAQZ4PxKVDy7FGGUirt1lLhWwGwy9ExLCoI=",
         "owner": "nix-community",
         "repo": "nixvim",
-        "rev": "6df0b97b39baa1c0b3002b051f307aed68e17d1b",
+        "rev": "2d3184cd3dd31f6eb57eb4ddfe2387ebd141f1e5",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "nixos-25.05",
+        "ref": "nixos-25.11",
         "repo": "nixvim",
         "type": "github"
       }
@@ -1055,11 +1172,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1753771532,
-        "narHash": "sha256-Pmpke0JtLRzgdlwDC5a+aiLVZ11JPUO5Bcqkj0nHE/k=",
+        "lastModified": 1761730856,
+        "narHash": "sha256-t1i5p/vSWwueZSC0Z2BImxx3BjoUDNKyC2mk24krcMY=",
         "owner": "NuschtOS",
         "repo": "search",
-        "rev": "2a65adaf2c0c428efb0f4a2bc406aab466e96a06",
+        "rev": "e29de6db0cb3182e9aee75a3b1fd1919d995d85b",
         "type": "github"
       },
       "original": {
@@ -1078,11 +1195,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1755960406,
-        "narHash": "sha256-RF7j6C1TmSTK9tYWO6CdEMtg6XZaUKcvZwOCD2SICZs=",
+        "lastModified": 1765911976,
+        "narHash": "sha256-t3T/xm8zstHRLx+pIHxVpQTiySbKqcQbK+r+01XVKc0=",
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "e891a93b193fcaf2fc8012d890dc7f0befe86ec2",
+        "rev": "b68b780b69702a090c8bb1b973bab13756cc7a27",
         "type": "github"
       },
       "original": {
@@ -1100,11 +1217,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1755960406,
-        "narHash": "sha256-RF7j6C1TmSTK9tYWO6CdEMtg6XZaUKcvZwOCD2SICZs=",
+        "lastModified": 1765911976,
+        "narHash": "sha256-t3T/xm8zstHRLx+pIHxVpQTiySbKqcQbK+r+01XVKc0=",
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "e891a93b193fcaf2fc8012d890dc7f0befe86ec2",
+        "rev": "b68b780b69702a090c8bb1b973bab13756cc7a27",
         "type": "github"
       },
       "original": {
@@ -1128,6 +1245,7 @@
         "hyprland-plugins": "hyprland-plugins",
         "impermanence": "impermanence",
         "kvlibadwaita": "kvlibadwaita",
+        "niri": "niri",
         "nix-topology": "nix-topology",
         "nixos-hardware": "nixos-hardware",
         "nixos-mailserver": "nixos-mailserver",
@@ -1143,11 +1261,11 @@
     "secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1756051653,
-        "narHash": "sha256-JJkQliqI7zn+esLnKQP82eQEuolNz8IELm/BYGPTvEw=",
+        "lastModified": 1764864420,
+        "narHash": "sha256-14xW9M1JHKQ55DadtHCKDfvNoRtVnof8mz6hiUtqxtE=",
         "ref": "refs/heads/master",
-        "rev": "01cf200f61946ac9f259f9163933ea1749cb3531",
-        "revCount": 41,
+        "rev": "b445b0d0f9261ae5500fcdc799ee638d46159691",
+        "revCount": 43,
         "type": "git",
         "url": "ssh://git@git.vimium.com/jordan/nix-secrets.git"
       },
@@ -1249,11 +1367,11 @@
     "thunderbird-gnome-theme": {
       "flake": false,
       "locked": {
-        "lastModified": 1755861050,
-        "narHash": "sha256-oLmw1VRrmbuLwT5errG3lT85K0jLII/aQ32VtdJ+1xM=",
+        "lastModified": 1757216698,
+        "narHash": "sha256-aQAlgHsBAS+DdyYDlYhW/xT86xIu9FO8yJEzSCVaSBg=",
         "owner": "rafaelmardojai",
         "repo": "thunderbird-gnome-theme",
-        "rev": "b1fbb41db5718c23667bd9b40268b8e7317634fd",
+        "rev": "8b9a19eb188b3ede65e8f12a11637bbd56e4f4d7",
         "type": "github"
       },
       "original": {
@@ -1290,11 +1408,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1756662192,
-        "narHash": "sha256-F1oFfV51AE259I85av+MAia221XwMHCOtZCMcZLK2Jk=",
+        "lastModified": 1766000401,
+        "narHash": "sha256-+cqN4PJz9y0JQXfAK5J1drd0U05D5fcAGhzhfVrDlsI=",
         "owner": "numtide",
         "repo": "treefmt-nix",
-        "rev": "1aabc6c05ccbcbf4a635fb7a90400e44282f61c4",
+        "rev": "42d96e75aa56a3f70cab7e7dc4a32868db28e8fd",
         "type": "github"
       },
       "original": {
@@ -1349,11 +1467,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1755354946,
-        "narHash": "sha256-zdov5f/GcoLQc9qYIS1dUTqtJMeDqmBmo59PAxze6e4=",
+        "lastModified": 1761431178,
+        "narHash": "sha256-xzjC1CV3+wpUQKNF+GnadnkeGUCJX+vgaWIZsnz9tzI=",
         "owner": "hyprwm",
         "repo": "xdg-desktop-portal-hyprland",
-        "rev": "a10726d6a8d0ef1a0c645378f983b6278c42eaa0",
+        "rev": "4b8801228ff958d028f588f0c2b911dbf32297f9",
         "type": "github"
       },
       "original": {
@@ -1361,6 +1479,39 @@
         "repo": "xdg-desktop-portal-hyprland",
         "type": "github"
       }
+    },
+    "xwayland-satellite-stable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1755491097,
+        "narHash": "sha256-m+9tUfsmBeF2Gn4HWa6vSITZ4Gz1eA1F5Kh62B0N4oE=",
+        "owner": "Supreeeme",
+        "repo": "xwayland-satellite",
+        "rev": "388d291e82ffbc73be18169d39470f340707edaa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Supreeeme",
+        "ref": "v0.7",
+        "repo": "xwayland-satellite",
+        "type": "github"
+      }
+    },
+    "xwayland-satellite-unstable": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1766429945,
+        "narHash": "sha256-9Kv4gWagx/u4RfZJzBMAoagW9ava5waxd+XoTkzqF7E=",
+        "owner": "Supreeeme",
+        "repo": "xwayland-satellite",
+        "rev": "0dde7ca1d3a8e8c5082533d76084e2aa02bef70e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Supreeeme",
+        "repo": "xwayland-satellite",
+        "type": "github"
+      }
     }
   },
   "root": "root",

flake.nix

@@ -30,7 +30,7 @@
     };
 
     home-manager = {
-      url = "github:nix-community/home-manager/release-25.05";
+      url = "github:nix-community/home-manager/release-25.11";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
@@ -62,19 +62,24 @@
 
     nixos-hardware.url = "github:NixOS/nixos-hardware";
 
-    nixos-mailserver = {
-      url = "gitlab:simple-nixos-mailserver/nixos-mailserver/nixos-25.05";
+    niri = {
+      url = "github:sodiboo/niri-flake";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
-    nixpkgs.url = "nixpkgs/nixos-25.05";
+    nixos-mailserver = {
+      url = "gitlab:simple-nixos-mailserver/nixos-mailserver/nixos-25.11";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    nixpkgs.url = "nixpkgs/nixos-25.11";
 
     nixpkgs-unstable.url = "nixpkgs/nixos-unstable";
 
     # nixpkgs-master.url = "nixpkgs";
 
     nixvim = {
-      url = "github:nix-community/nixvim/nixos-25.05";
+      url = "github:nix-community/nixvim/nixos-25.11";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 

hosts/artemis/default.nix

@@ -23,8 +23,13 @@ in
 
   nixpkgs = {
     hostPlatform = "x86_64-linux";
+    config.permittedInsecurePackages = [
+      "qtwebengine-5.15.19"
+    ];
   };
 
+  age.rekey.hostPubkey = ./ssh_host_ed25519_key.pub;
+
   boot.loader = {
     systemd-boot = {
       enable = true;
@@ -100,7 +105,7 @@ in
       };
       desktop = {
         gnome.enable = lib.mkForce false;
-        hyprland.enable = true;
+        hyprland.enable = false;
       };
     };
   };

hosts/artemis/hardware-configuration.nix

@@ -68,7 +68,7 @@ in
       "amdgpu.sched_hw_submission=4"
       "audit=0"
     ];
-    kernelPackages = pkgs.linuxPackages_6_15;
+    kernelPackages = pkgs.linuxPackages_6_17;
     supportedFilesystems = [ "ntfs" ];
   };
 

hosts/artemis/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDXJmnp4LUE9AFjGHwvxAu4m/3PB2uYQ69F7wYv7cGGT

hosts/atlas/default.nix

@@ -9,6 +9,8 @@
 
   nixpkgs.hostPlatform = "x86_64-linux";
 
+  age.rekey.hostPubkey = ./ssh_host_ed25519_key.pub;
+
   boot.loader = {
     systemd-boot.enable = true;
     efi.canTouchEfiVariables = true;

hosts/atlas/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPddvpZeCUelUGsnFvx87WOqKKc+MGPU6+rx6s1ReWQl

hosts/common.nix

@@ -24,6 +24,7 @@
     config.allowUnfree = true;
     overlays = [
       inputs.agenix.overlays.default
+      inputs.niri.overlays.niri
       (final: prev: {
         unstable = import inputs.nixpkgs-unstable {
           config = {
@@ -117,13 +118,14 @@
       dates = "weekly";
       options = "-d --delete-older-than 7d";
     };
+    registry.unstable.flake = inputs.nixpkgs-unstable;
   };
 
   home-manager = {
     useGlobalPkgs = true;
     useUserPackages = true;
     sharedModules = [
-      inputs.nixvim.homeManagerModules.nixvim
+      inputs.nixvim.homeModules.nixvim
       {
         home.stateVersion = config.system.stateVersion;
       }

hosts/desktop.nix

@@ -40,7 +40,7 @@
   };
 
   system.autoUpgrade = {
-    enable = true;
+    enable = false;
     flake = "git+ssh://git@git.vimium.com/jordan/nix-config.git";
     randomizedDelaySec = "10min";
   };

hosts/helios/default.nix

@@ -16,6 +16,8 @@ in
 
   nixpkgs.hostPlatform = "x86_64-linux";
 
+  age.rekey.hostPubkey = ./ssh_host_ed25519_key.pub;
+
   boot = {
     loader.grub = {
       enable = true;

hosts/helios/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL2tDij7eTDbljl6Crz4i7qrM0lgp8U2T9ZMXt7VQPT/

hosts/hypnos/default.nix

@@ -22,6 +22,8 @@
     };
   };
 
+  age.rekey.hostPubkey = ./ssh_host_ed25519_key.pub;
+
   boot.loader = {
     systemd-boot.enable = true;
     efi.canTouchEfiVariables = true;

hosts/hypnos/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINGlbvy+4QHbveFbS6r9S0JWUVHeI/MgYLyGtfpZqJ/3

hosts/library/ai.nix

@@ -4,6 +4,9 @@
   ...
 }:
 
+let
+  stateDir = "/var/lib/open-webui";
+in
 {
   age.secrets.open-webui-env = {
     rekeyFile = ./secrets/open-webui-env.age;
@@ -13,6 +16,7 @@
     enable = true;
     package = pkgs.unstable.open-webui;
     port = 8081;
+    host = "0.0.0.0";
     environment =
       let
         clientId = "open-webui";
@@ -28,10 +32,33 @@
         OFFLINE_MODE = "True";
         OPENID_PROVIDER_URL = "https://auth.vimium.com/oauth2/openid/${clientId}/.well-known/openid-configuration";
         OPENID_REDIRECT_URI = "${publicUrl}/oauth/oidc/callback";
+
+        # Fix from https://github.com/NixOS/nixpkgs/pull/431395
+        STATIC_DIR = "${stateDir}/static";
+        DATA_DIR = "${stateDir}/data";
+        HF_HOME = "${stateDir}/hf_home";
+        SENTENCE_TRANSFORMERS_HOME = "${stateDir}/transformers_home";
       };
     environmentFile = config.age.secrets.open-webui-env.path;
   };
 
+  # Fix from https://github.com/NixOS/nixpkgs/pull/432897
+  systemd.services.open-webui.preStart = ''
+    if [ -d "${stateDir}/data" ] && [ -n "$(ls -A "${stateDir}/data" 2>/dev/null)" ]; then
+      exit 0
+    fi
+
+    mkdir -p "${stateDir}/data"
+
+    [ -f "${stateDir}/webui.db" ] && mv "${stateDir}/webui.db" "${stateDir}/data/"
+
+    for dir in cache uploads vector_db; do
+      [ -d "${stateDir}/$dir" ] && mv "${stateDir}/$dir" "${stateDir}/data/"
+    done
+
+    exit 0
+  '';
+
   modules.services.borgmatic.directories = [
     "/var/lib/private/open-webui"
   ];

hosts/library/jellyfin.nix

@@ -8,7 +8,7 @@
   hardware.graphics = {
     enable = true;
     extraPackages = with pkgs; [
-      vaapiVdpau
+      libva-vdpau-driver
     ];
   };
 

hosts/library/jellysearch.nix

@@ -13,7 +13,7 @@
   services.meilisearch = {
     enable = true;
     package = pkgs.meilisearch;
-    masterKeyEnvironmentFile = config.age.secrets."files/services/meilisearch/envfile".path;
+    masterKeyFile = config.age.secrets."files/services/meilisearch/envfile".path;
   };
 
   users.users.jellysearch = {

hosts/library/nginx.nix

@@ -33,25 +33,6 @@
             '';
           };
         };
-        "chat.ai.vimium.com" = {
-          listen = [
-            {
-              addr = "127.0.0.1";
-              port = 8001;
-            }
-          ];
-          locations."/" = {
-            proxyPass = "http://localhost:8081";
-            extraConfig = proxyConfig + ''
-              # Disable proxy buffering for better streaming response from models
-              proxy_buffering off;
-
-              # Increase max request size for large attachments and long audio messages
-              client_max_body_size 20M;
-              proxy_read_timeout 10m;
-            '';
-          };
-        };
         "jellyfin.vimium.com" = {
           default = true;
           listen = [

hosts/mail/default.nix

@@ -14,6 +14,8 @@
 
   nixpkgs.hostPlatform = "x86_64-linux";
 
+  age.rekey.hostPubkey = ./ssh_host_ed25519_key.pub;
+
   networking = {
     hostId = "08ac2f14";
     firewall = {

hosts/mail/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGLHtC0JmFfct+lYl0EjgphutmeYY8BWDctY3+/TsO6L

hosts/odyssey/aws.env

@@ -0,0 +1 @@
+AWS_REGION=us-east-1

hosts/odyssey/comfyui-docker.nix

@@ -0,0 +1,35 @@
+{
+  hardware.graphics.enable32Bit = true;
+  hardware.nvidia-container-toolkit.enable = true;
+
+  virtualisation.docker.enable = true;
+
+  virtualisation.oci-containers = {
+    backend = "docker";
+    containers = {
+      comfyui = {
+        image = "ghcr.io/clsferguson/comfyui-docker:latest";
+        autoStart = true;
+        ports = [ "8188:8188" ];
+        extraOptions = [
+          "--device=nvidia.com/gpu=all"
+          "--ipc=host"
+        ];
+        volumes = [
+          "/home/jordan/ComfyUI/user:/app/ComfyUI/user"
+          "/home/jordan/ComfyUI/custom_nodes:/app/ComfyUI/custom_nodes"
+          "/home/jordan/ComfyUI/models:/app/ComfyUI/models:rw"
+          "/home/jordan/ComfyUI/input:/app/ComfyUI/input:rw"
+          "/home/jordan/ComfyUI/output:/app/ComfyUI/output:rw"
+        ];
+        environment = {
+          TZ = "Europe/London";
+          PUID = "1000";
+          PGID = "1000";
+          COMFY_AUTO_INSTALL = "1";
+          FORCE_SAGE_ATTENTION = "1";
+        };
+      };
+    };
+  };
+}

hosts/odyssey/default.nix

@@ -7,7 +7,9 @@
 {
   imports = [
     ./hardware-configuration.nix
+    ./comfyui-docker.nix
     ./gitea-runner.nix
+    ./home-assistant
     ./nix-serve.nix
     ../desktop.nix
     ../../users/jordan
@@ -20,6 +22,8 @@
     };
   };
 
+  age.rekey.hostPubkey = ./ssh_host_ed25519_key.pub;
+
   boot.loader = {
     systemd-boot = {
       enable = true;
@@ -61,6 +65,24 @@
 
   services.pcscd.enable = true;
 
+  security.acme = {
+    acceptTerms = true;
+    defaults = {
+      email = "hostmaster@vimium.com";
+      dnsProvider = "route53";
+      dnsResolver = "9.9.9.9";
+      credentialFiles = {
+        AWS_SHARED_CREDENTIALS_FILE = "/home/jordan/projects/vimium/infra/credentials";
+      };
+      environmentFile = ./aws.env;
+    };
+    certs = {
+      "vimium.com" = {
+        extraDomainNames = [ "*.vimium.com" ];
+      };
+    };
+  };
+
   modules = {
     hardware.presonus-studio.enable = true;
     services = {

hosts/odyssey/hardware-configuration.nix

@@ -44,6 +44,7 @@
       powerManagement.enable = true;
       nvidiaSettings = false;
     };
+    nvidia-container-toolkit.enable = true;
   };
 
   powerManagement.cpuFreqGovernor = "schedutil";

hosts/odyssey/home-assistant/dashboards.nix

@@ -0,0 +1,63 @@
+{
+  ...
+}:
+
+{
+  /**
+    *******************
+    - Service Dashboard for stats (energy usage, bandwidth etc.)
+    - Dashboard fragment per room
+    - Tablet in each room can display just its associated fragment
+    - Per user dynamic dashboard that shows the dashboard fragment for the room
+      you are in using Bluetooth presence detection
+
+    Rooms: [Auto, Bedroom, Kitchen, Living Room, Office]
+
+    Shared: Date/time, Guest Override action, Weather, Air quality
+
+    Bedroom:
+    - Temperature
+    - Minimal Lights action
+    - Individual light cards
+    - Sheets last changed
+    - Plant last watered
+
+    Kitchen:
+    - Temperature
+    - Individual light cards
+    - Water filter age
+
+    Living Room:
+    - Temperature
+    - Turn TV on action
+      * dynamic card to start Movie Mode
+    - Individual light cards
+    - Plant last watered
+
+    Office:
+    - Temperature
+    - Individual light cards
+    - Bandwidth usage
+    - Computer stats
+
+    Primary IEEE address: 00:12:4B:00:29:E8:B1:9E
+
+    Random inspiration words:
+    - "Temp Disable Office Motion"
+    - "Main Lights {Bright,Dim,Warm}"
+    - "Robot Vacuum"
+    - "Living Room TV"
+    - "Morning wakeup"
+    - "Going to sleep early"
+    - "Take out bins"
+    - "Video Conference"
+    - "Gaming"
+    - Monitor power usage to tell when something has started/stopped
+    - Vibration sensor for kitchen drawer
+    - Todo list for dinner schedule
+    - Air quality sensor in kitchen
+    - Notification to close vents when outdoor air quality is bad
+    - "TV Lights Lock" - don't auto dim-lights on play/pause
+    *********************
+  */
+}

hosts/odyssey/home-assistant/default.nix

@@ -124,13 +124,13 @@
       "folder_watcher"
       "forecast_solar"
       "frontend"
-      "gdacs"
+      # "gdacs"
       "generic"
       "generic_hygrostat"
       "generic_thermostat"
       "geo_json_events"
       "geo_location"
-      "geo_rss_events"
+      # "geo_rss_events"
       "github"
       "group"
       "hardware"
@@ -244,6 +244,7 @@
       "wake_on_lan"
       "water_heater"
       "weather"
+      "webostv"
       "websocket_api"
       "wled"
       "workday"

hosts/odyssey/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJre8/cjdoUnbTu0x4ClTITcq4lq+FjpEyJBbLbOlox7

hosts/pi/README.md

@@ -27,3 +27,4 @@ SD card | `/dev/mmcblk0` (ext4, NixOS Root)
 - HDMI to ONKYO HT-R990
 - S/PDIF to ONKYO HT-R990
 - Ethernet to ONKYO HT-R990
+- Ethernet to LG TV

hosts/pi/default.nix

@@ -8,13 +8,14 @@
   imports = [
     inputs.nixos-hardware.nixosModules.raspberry-pi-4
     ./hardware-configuration.nix
-    ./home-assistant
     ./snapcast.nix
     ../server.nix
   ];
 
   nixpkgs.hostPlatform = "aarch64-linux";
 
+  age.rekey.hostPubkey = ./ssh_host_ed25519_key.pub;
+
   hardware = {
     raspberry-pi."4" = {
       apply-overlays-dtmerge.enable = true;
@@ -99,7 +100,7 @@
       ];
     };
     firmware = with pkgs; [
-      firmwareLinuxNonfree
+      linux-firmware
       wireless-regdb
     ];
   };
@@ -129,14 +130,25 @@
     };
   };
 
-  # Connection to ONKYO HT-R990
-  networking.interfaces.end0 = {
-    ipv4.addresses = [
-      {
-        address = "172.16.0.1";
-        prefixLength = 30;
-      }
-    ];
+  networking.interfaces = {
+    # Connection to ONKYO HT-R990
+    end0 = {
+      ipv4.addresses = [
+        {
+          address = "172.16.0.1";
+          prefixLength = 30;
+        }
+      ];
+    };
+    # Connection to LG TV
+    enp1s0u2 = {
+      ipv4.addresses = [
+        {
+          address = "172.16.1.1";
+          prefixLength = 30;
+        }
+      ];
+    };
   };
 
   environment.systemPackages = with pkgs; [

hosts/pi/snapcast.nix

@@ -18,15 +18,7 @@
   };
 
   services.snapserver = {
-    enable = true;
-    streams = {
-      default = {
-        type = "file";
-        location = "/var/lib/snapserver/test.wav";
-        sampleFormat = "44100:16:2";
-        codec = "flac";
-      };
-    };
+    enable = false;
   };
 
   systemd.services.snapclient = {

hosts/pi/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFYv5V6Lr1Er1dljwmunurIz1Q3Ce5FsFSxtUOW6aO9J

hosts/skycam/default.nix

@@ -11,6 +11,8 @@
 
   nixpkgs.hostPlatform = "aarch64-linux";
 
+  age.rekey.hostPubkey = ./ssh_host_ed25519_key.pub;
+
   networking = {
     hostId = "731d1660";
     firewall = {

hosts/skycam/hardware-configuration.nix

@@ -78,7 +78,7 @@
         ];
     };
     firmware = with pkgs; [
-      firmwareLinuxNonfree
+      linux-firmware
     ];
   };
 

hosts/skycam/ssh_host_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHv5+HwcRetBxtQZXpGbYv22S4prJu9bYCzKTSoMCl8D

hosts/vps1/headscale.nix

@@ -36,7 +36,7 @@ in
           {
             name = "home.mesh.vimium.net";
             type = "A";
-            value = "100.64.0.7";
+            value = "100.64.0.5";
           }
         ];
         magic_dns = true;
@@ -60,7 +60,7 @@ in
       forceSSL = true;
       enableACME = true;
       locations."/" = {
-        proxyPass = "http://localhost:${toString config.services.headscale.port}";
+        proxyPass = "http://127.0.0.1:${toString config.services.headscale.port}";
         proxyWebsockets = true;
       };
     };

hosts/vps1/kanidm.nix

@@ -26,7 +26,7 @@ in
       uri = "https://${domain}";
     in
     {
-      package = pkgs.unstable.kanidmWithSecretProvisioning;
+      package = pkgs.unstable.kanidmWithSecretProvisioning_1_7;
       enableClient = true;
       enableServer = true;
       clientSettings = {
@@ -124,6 +124,7 @@ in
   systemd.services.kanidm = {
     requires = [ "tailscaled.service" ];
     after = [ "tailscaled.service" ];
+    serviceConfig.RestartSec = "60";
   };
 
   services.nginx.virtualHosts = {

hosts/vps1/matrix.nix

@@ -1,4 +1,5 @@
 {
+  inputs,
   config,
   lib,
   pkgs,
@@ -26,30 +27,31 @@ let
   };
   matrixServerConfig."m.server" = "${matrixSubdomain}:443";
   commonBridgeSettings = bridge: {
-    appservice = {
-      database = lib.mkIf usePostgresql {
-        type = "postgres";
-        uri = "postgresql:///${bridge}?host=/run/postgresql";
-      };
+    database = lib.mkIf usePostgresql {
+      type = "postgres";
+      uri = "postgresql:///${bridge}?host=/run/postgresql";
     };
     bridge = {
-      encryption = {
-        allow = true;
-        default = true;
-        require = true;
-      };
       permissions = {
         "${serverName}" = "user";
         "@jordan:${serverName}" = "admin";
       };
-      provisioning = {
-        shared_secret = "disable";
-      };
+    };
+    encryption = {
+      allow = true;
+      default = true;
+      require = true;
+    };
+    provisioning = {
+      shared_secret = "disable";
     };
     homeserver = {
       address = "https://${matrixSubdomain}";
       domain = serverName;
     };
+    double_puppet.secrets = {
+      "${serverName}" = "as_token:$MAUTRIX_DOUBLEPUPPET_TOKEN";
+    };
   };
   proxyConfig = ''
     proxy_set_header        Host $host;
@@ -61,6 +63,33 @@ let
   '';
 in
 {
+  # Backport new options from https://github.com/NixOS/nixpkgs/pull/446155
+  disabledModules = [
+    "services/matrix/mautrix-whatsapp.nix"
+  ];
+
+  imports = [
+    (inputs.nixpkgs-unstable + /nixos/modules/services/matrix/mautrix-whatsapp.nix)
+  ];
+
+  age.secrets = {
+    mautrix-doublepuppet-registration = {
+      rekeyFile = ./secrets/mautrix-doublepuppet-registration.age;
+      mode = "0440";
+      group = "matrix-synapse";
+    };
+    mautrix-signal-env = {
+      rekeyFile = ./secrets/mautrix-signal-env.age;
+      mode = "0440";
+      group = "mautrix-signal";
+    };
+    mautrix-whatsapp-env = {
+      rekeyFile = ./secrets/mautrix-whatsapp-env.age;
+      mode = "0440";
+      group = "mautrix-whatsapp";
+    };
+  };
+
   networking.firewall.allowedTCPPorts = [
     8448 # Matrix federation
   ];
@@ -107,16 +136,16 @@ in
       ];
       locations = {
         "/" = {
-          proxyPass = "http://localhost:8008";
+          proxyPass = "http://127.0.0.1:8008";
           extraConfig = proxyConfig;
         };
         "/_matrix" = {
-          proxyPass = "http://localhost:8008";
+          proxyPass = "http://127.0.0.1:8008";
           extraConfig = proxyConfig + ''
             client_max_body_size 50M;
           '';
         };
-        "/_synapse/client".proxyPass = "http://localhost:8008";
+        "/_synapse/client".proxyPass = "http://127.0.0.1:8008";
       };
     };
     "${serverName}" =
@@ -167,6 +196,9 @@ in
     enable = true;
     enableRegistrationScript = true;
     settings = {
+      app_service_config_files = [
+        config.age.secrets.mautrix-doublepuppet-registration.path
+      ];
       database.name = (if usePostgresql then "psycopg2" else "sqlite3");
       enable_metrics = false;
       enable_registration = false;
@@ -203,23 +235,33 @@ in
 
   services.mautrix-signal = lib.mkIf bridges.signal {
     enable = true;
-    settings = commonBridgeSettings "mautrix-signal";
+    environmentFile = config.age.secrets.mautrix-signal-env.path;
+    settings = lib.recursiveUpdate {
+      encryption = {
+        pickle_key = "$MAUTRIX_SIGNAL_ENCRYPTION_PICKLE_KEY";
+      };
+    } (commonBridgeSettings "mautrix-signal");
   };
 
   services.mautrix-whatsapp = lib.mkIf bridges.whatsapp {
     enable = true;
-    settings = {
-      bridge = {
+    environmentFile = config.age.secrets.mautrix-whatsapp-env.path;
+    settings = lib.recursiveUpdate {
+      backfill = {
+        enabled = true;
+        max_initial_messags = 50;
+      };
+      encryption = {
+        pickle_key = "$MAUTRIX_WHATSAPP_ENCRYPTION_PICKLE_KEY";
+      };
+      network = {
+        mute_status_broadcast = true;
         history_sync = {
-          backfill = true;
           max_initial_conversations = -1;
-          message_count = 50;
           request_full_sync = true;
         };
-        mute_bridging = true;
       };
-    }
-    // commonBridgeSettings "mautrix-whatsapp";
+    } (commonBridgeSettings "mautrix-whatsapp");
   };
 
   environment.persistence."/persist".directories = [

hosts/vps1/nginx.nix

@@ -17,7 +17,7 @@ let
     add_header Expect-CT max-age=30 always;
     add_header Referrer-Policy strict-origin-when-cross-origin always;
     add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
-    add_header Vimium-Responding-Instance $hostname;
+    add_header Vimium-Responding-Instance edge-lhr-a0 always;
     add_header X-XSS-Protection "1; mode=block" always;
     add_header X-Content-Type-Options nosniff always;
   '';
@@ -82,14 +82,33 @@ in
         maxSize = "100m";
       };
     };
+    proxyResolveWhileRunning = true;
+    resolver.addresses = [ "100.100.100.100" ];
+    upstreams = {
+      jellyfin.servers = {
+        "library.mesh.vimium.net:8096" = {
+          fail_timeout = "30s";
+        };
+      };
+      open-webui.servers = {
+        "library.mesh.vimium.net:8081" = {
+          fail_timeout = "30s";
+        };
+      };
+      skycam.servers = {
+        "skycam.mesh.vimium.net:1984" = {
+          fail_timeout = "30s";
+        };
+      };
+    };
     virtualHosts = {
-      ## Static sites
+      ## Proxied sites
       "chat.ai.vimium.com" = {
         forceSSL = true;
         enableACME = true;
         extraConfig = nginxErrorPages + nginxEdgeHeaders;
         locations."/" = {
-          proxyPass = "http://localhost:8001";
+          proxyPass = "http://open-webui";
           extraConfig = ''
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -114,7 +133,7 @@ in
         enableACME = true;
         extraConfig = nginxErrorPages + nginxEdgeHeaders;
         locations."/" = {
-          proxyPass = "http://localhost:8000";
+          proxyPass = "http://jellyfin";
           extraConfig = ''
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -129,7 +148,12 @@ in
             proxy_set_header Connection "upgrade";
           '';
         };
+        locations."/metrics" = {
+          return = "404";
+        };
       };
+
+      ## Static sites
       "jdholt.com" = {
         forceSSL = true;
         enableACME = true;
@@ -140,11 +164,8 @@ in
         };
         locations."/skycam/snapshot.jpg" = {
           extraConfig = ''
-            set $backend "skycam.mesh.vimium.net:1984";
-
-            resolver 100.100.100.100;
-
-            proxy_pass http://$backend/api/frame.jpeg?src=rpicam;
+            set $args "";
+            proxy_pass http://skycam/api/frame.jpeg?src=rpicam;
             proxy_cache skycam_cache;
             proxy_cache_valid any 10s;
             proxy_ignore_headers Cache-Control Expires Set-Cookie;
@@ -181,6 +202,7 @@ in
         };
       };
     }
+
     ## Redirects
     // (mkRedirect "h0lt.com" "jdholt.com")
     // (mkRedirect "jordanholt.xyz" "jdholt.com")

hosts/vps1/secrets/mautrix-signal-env.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> piv-p256 a1N2XA AuFF7Zqic+KNiU82xDS8ItdNSnr1045DpKOyYHZgq3kE
+qNK+p6I6kR2A41d/gVyCp2b3xu7g0/rCXIL22Gal3IA
+-> R.kR/-r-grease 5Q54Z B.x PMjy\
+3ajY8AoJzUB9fiDnHoFVSIPEfvgAk2VtJeHNOno9cxeK6uZ+Ve22pUWBN2cp+2Qz
+J7J9U1zQWVSOum3dDmscAVBzf4Hw2hUBZcAnZA
+--- hZ4N9mXSCS3zT9R/Axb9dWVx5Lr+mLxxXuR45oehok4
+§½z󩃢âJ%ÓÍwþèðÍœŸ–ùcÛ' “«ÀK39¦´Ë¯ÀqªGøbX6<58>6±Ìšƒ¶p˜4ºmG<6D>æÕá¤ãŒÄ
+ꇿë`¿8

hosts/vps2/default.nix

@@ -1,31 +0,0 @@
-{
-  inputs,
-  ...
-}:
-
-{
-  imports = [
-    inputs.disko.nixosModules.disko
-    ./hardware-configuration.nix
-    ./disko-config.nix
-    ../server.nix
-  ];
-
-  nixpkgs = {
-    hostPlatform = "x86_64-linux";
-  };
-
-  networking = {
-    hostId = "60de4af8";
-    firewall = {
-      enable = true;
-      allowedTCPPorts = [
-        22 # SSH
-      ];
-    };
-  };
-
-  modules.services.tailscale.isExitNode = true;
-
-  system.stateVersion = "25.05";
-}

hosts/vps2/disko-config.nix

@@ -1,55 +0,0 @@
-{ lib, ... }:
-{
-  disko.devices = {
-    disk.disk1 = {
-      device = lib.mkDefault "/dev/sda";
-      type = "disk";
-      content = {
-        type = "gpt";
-        partitions = {
-          boot = {
-            name = "boot";
-            size = "2M";
-            type = "EF02";
-          };
-          esp = {
-            name = "ESP";
-            size = "300M";
-            type = "EF00";
-            content = {
-              type = "filesystem";
-              format = "vfat";
-              mountpoint = "/boot";
-            };
-          };
-          root = {
-            name = "root";
-            size = "100%";
-            content = {
-              type = "lvm_pv";
-              vg = "pool";
-            };
-          };
-        };
-      };
-    };
-    lvm_vg = {
-      pool = {
-        type = "lvm_vg";
-        lvs = {
-          root = {
-            size = "100%FREE";
-            content = {
-              type = "filesystem";
-              format = "ext4";
-              mountpoint = "/";
-              mountOptions = [
-                "defaults"
-              ];
-            };
-          };
-        };
-      };
-    };
-  };
-}

hosts/vps2/hardware-configuration.nix

@@ -1,29 +0,0 @@
-{
-  modulesPath,
-  ...
-}:
-
-{
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
-
-  boot = {
-    initrd = {
-      availableKernelModules = [
-        "ata_piix"
-        "uhci_hcd"
-        "xen_blkfront"
-        "vmw_pvscsi"
-      ];
-      kernelModules = [ "nvme" ];
-    };
-    loader.grub = {
-      efiSupport = true;
-      efiInstallAsRemovable = true;
-    };
-    tmp.cleanOnBoot = true;
-  };
-
-  zramSwap.enable = true;
-}

modules/nixos/system/desktop/gnome.nix

@@ -47,7 +47,6 @@ in
       gnomeExtensions.dash-to-panel
       gnomeExtensions.desktop-cube
       gnomeExtensions.easyScreenCast
-      gnomeExtensions.espresso
       gnomeExtensions.fly-pie
       gnomeExtensions.forge
       gnomeExtensions.gsconnect

nix/hosts.nix

@@ -54,7 +54,6 @@
           "pi"
           "skycam"
           "vps1"
-          "vps2"
         ] mkDeployNode;
       };
     };

secrets/rekeyed/atlas/9f3916fc5285b691931e572afdc8ac22-open-webui-api-key.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 mV4Rog gj6NT+DEVJbKeGArVcbzNphmMXoXFmVPHlo+zWuI1Ek
+Wt0saIoq6RnQR1jVLHI84JMDP0rCvc1kfjSQoSHly/4
+-> t-grease <a`) :34)]ad /J) =]!RB~HB
+m7JCE0PP2H9DkOdbj/dhZATaXfIoPmocKnGkYUXnjyo99nVMMy2FSmNdZyE0KGCR
+eVkIGwJbH3HNimXst62gIxvSrFQ4a4IcO1Cv8UaMK9UjGfy731BRpg
+--- bEP7E9Ajvw0pIWFF7+QakdFigo0B+0aa0ha9/Y/OADA
+ZrÕ«ö‰0/^´2µB
+oÒÀ’@3
±¡~qSò‰–û¥H	fa	¤¨Sœ0Àˆ•ŸrvŠ«ÑB+¿

secrets/rekeyed/helios/e09d8370465eb4038d032d0d84b700b1-open-webui-api-key.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 3xQa4Q 3I7Mpt3/StzFpy8/egW+PleMsKV/YFsw1lpzt0057ns
+Plc2u/sza/Fga8lnCMj4rH8midPdaFP+FZ1J8+pwRP8
+-> .-grease !Yk9l62 H3@'J 9Klw
+2fJgCUF22ciTm8EfYemHjA1uN1jkVGLGfcTllU8m08Ya2fUPig7ZK4fNLV3ttMc4
+uLthrVZFo1HKF2wQSMeDq+ITZItvxHg2NFxqkWRCJv4
+--- r3Fao3CQxFocTu4+9/Nh0zcCvTYQWpmRQD112YiAIwU
+[µXG¹àÞŒ¡ÑÝ€aFa‘‹K|Å' øËdOµX§ ¨éúùGÁLHÿ€’©<>4¥<34>

secrets/rekeyed/hypnos/c12ed3579ec35228529211b0f518d0fe-open-webui-api-key.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 5PDipg Eic12F37CNvDBqlFV17aMYXTS/eFKEd8SYfOvKV2CGY
+Co7whyv5vxJnlELVyIZJiNmj+hATpw1/QpK2t8CtcvE
+-> >e`c+0-grease D[m[ *0=DB?=
+uPUY90BUNR6Hm0F2Q0F+dXWkUOe4cLjrAvkcxaR79km0qMgJ/C7ribHeWpK3siOe
+2zz5YA
+--- XoQX1p09n36Cqyc0sEShbtcn4wbX68ULdGNrDzX5w04
+üš»AñXÖÓÄÝf’³(ã=<3D>†ÒeÈuϘÆz@ V.ù~Ê_Ié#å<>¤#2Q;9DÅ$e­l®H<C2AE>Ã;
+‘`5âÂ	

secrets/rekeyed/odyssey/c8231a45d0bb912d87bc291481a583cd-open-webui-api-key.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 jqV4bA 9vHES4DslQIplaJN4M+TnWzQxPwO0WOWnusIQxrQqh8
+oLran53jiS0hjirGdMD/akpaNCNvKY5M0+i/6ky5HNM
+-> 2ZC`)9-grease W G
+ZW4ghYvlO1xs0GHJldTD1ZdM+wXYQ4dNdZsg81dTE7VxIona+puaHU9MBq/v2+Sg
+qmqbacPFykJqeBG/uhJHYHgjbuHT8c0gTvWH3RCIQEPq
+--- fS6Rtw7zUkvtwfx1/GIHT40nzsmh5Nfj7/SG9svMXAQ
+käE8ÙÏ<EFBFBD>ôEƒrhé”@ìZ•U9›ën›¡teiŸËW6YèbjCÄ•·P
Í.rÝÁË­“<C2AD>÷Ìæ>

secrets/rekeyed/vps1/297ecb1d48e44e0f309958a6b43f58d4-mautrix-doublepuppet-registration.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 lOyIlA LfDvF0kXFmP4yGPz9A5uov9DbRfMeLniWQhgnYE3ZA0
+9GkGo/twG1cfOHZgRGAmAcfQlrgQ86QvgehbkleKyz0
+-> GEv|{-grease c)B+5+, \v$ piek
+hwIw75OzOhfdScMKrNZ5i+WWh5zcfMryQXdbz81yUkEjWm9P4UVOYee+zz4/PU+t
+6nEKEqvPf6RwBOzAlzx72Yi0l+onxh1CHOWRlfU
+--- dkZlSoaBUqLnMu25ocR0VwgPr190ZOmcMdxQ3KApFS0
+ƒþ<Ù²õŒ}M9Gdhœú’³0[ù¹ú¡²¯Ì®È¼ažjÅg–…¨:JÀ»Æ$:^èä€OÓeêø@÷žoé‡1
+¤r]I>†tü?°XãQٕى¡„A¯r)ab	§’”Ü$8e“ˆ<E2809C>½f¥Å<C2A5>zÍ7ÓÜÁlf)Õ|jl“%öâ
+v-òá!ª‘•(ÕÙ.qR…ÚÙ*yŽÁ¿¿XªÙµ

secrets/rekeyed/vps1/6a6726d70ccca930f798a32691ce17eb-mautrix-whatsapp-env.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 lOyIlA ZQWnreUg4ob9RmEKNrdJKWGRCC1k0HWc8op8ycG5uXU
+U6SEQWo1DoLxclnhkXJy3D93nuijiD4kk9qjMk61Yis
+-> b(/|-grease
+CUalICYuF4P5Ipe5C6gdrw
+--- OmIGQ6VJYZcCIkTPapXNIMJswGczS/1bp8A+AeAj0yU
+¡MÜlànY›K-ç‹ÝG·^\Žõêèk(—ZØþ•˜·Z›$-=(<28>¢å¨·ÅßHú¤Õ=4ŸÌÙ‹#ƒY
Ñ7òø‡tnÝ<6E>gØp>`ÄÈE©B
$ Â÷0Œ<30>¥ž8BWOá°Ù<C2B0>) (ŸüU®"Ͻî54U²Gþ‰oÈ¥?¯ðu§Aôâ
+z`¥d3Ij`†Ò€¬SK¤
Û}$ì×ã®<03>8%Ž·Á—ë9ÈÙÀ÷½?1tZ¤Av´+ê¢Jœ”Ï<E2809D>Z¥u˜lsôkJ+-Îhœ‚–µ

users/guest/common/optional/graphical/jellyfin.nix

@@ -0,0 +1,20 @@
+{
+  pkgs,
+  ...
+}:
+{
+  home.packages = with pkgs; [
+    gamescope
+    jellyfin-media-player
+  ];
+
+  home.persistence."/state".directories = [
+    ".cache/jellyfin.org"
+  ];
+
+  home.persistence."/persist".directories = [
+    ".config/jellyfin.org"
+    ".local/share/jellyfinmediaplayer"
+    ".local/share/Jellyfin Media Player"
+  ];
+}

users/guest/common/optional/graphical/steam.nix

@@ -8,23 +8,10 @@
     steam
   ];
 
-  systemd.user.services.steam-big-picture = {
-    Unit = {
-      Description = "Steam Big Picture in Gamescope";
-      After = [
-        "graphical.target"
-        "default.target"
-      ];
-    };
-    Service = {
-      ExecStart = ''
-        ${pkgs.gamescope}/bin/gamescope --rt --backend drm --steam -- \
-          ${pkgs.steam}/bin/steam -pipewire-dmabuf -tenfoot
-      '';
-      Restart = "always";
-    };
-    Install = {
-      WantedBy = [ "default.target" ];
-    };
-  };
+  home.persistence."/persist".directories = [
+    ".config/gamescope"
+    ".local/share/Steam"
+    ".local/share/vulkan"
+    ".steam"
+  ];
 }

users/guest/default.nix

@@ -22,11 +22,13 @@ in
     ];
     group = "users";
     isNormalUser = true;
+    password = "";
     shell = pkgs.zsh;
   };
 
   home-manager.users.${name} = {
     imports = [
+      ./common/optional/graphical/jellyfin.nix
       ./common/optional/graphical/steam.nix
       {
         home.persistence."/state" = {
@@ -36,11 +38,7 @@ in
         };
         home.persistence."/persist" = {
           directories = [
-            ".config/gamescope"
             ".local/share/icons"
-            ".local/share/Steam"
-            ".local/share/vulkan"
-            ".steam"
           ];
         };
       }
@@ -48,17 +46,140 @@ in
     ++ optional (builtins.pathExists hostFile) hostFile;
 
     home = {
+      packages = with pkgs; [
+        adwaita-fonts
+      ];
       username = name;
+      sessionVariables = {
+        ZDOTDIR = "~/.config/zsh";
+      };
+      pointerCursor = {
+        enable = true;
+        size = 64;
+        name = "macOS";
+        package = pkgs.apple-cursor;
+        gtk.enable = true;
+        x11.enable = true;
+      };
+    };
+
+    fonts.fontconfig.enable = true;
+
+    programs.firefox = {
+      enable = true;
+      profiles.Default = {
+        search = {
+          default = "ddg";
+          privateDefault = "ddg";
+          force = true;
+        };
+        settings = {
+          "layout.css.devPixelsPerPx" = 1.5;
+        };
+      };
+    };
+
+    programs.zsh = {
+      enable = true;
+      enableCompletion = true;
     };
 
     xdg.enable = true;
   };
 
-  services.getty = {
-    autologinOnce = true;
-    autologinUser = "guest";
+  services.displayManager = {
+    enable = true;
+    sessionPackages =
+      let
+        firefoxDesktopFile = pkgs.writeTextFile {
+          name = "firefox-desktop-entry";
+          destination = "/share/wayland-sessions/firefox.desktop";
+          text = ''
+            [Desktop Entry]
+            Name=Firefox
+            Comment=Desktop session for web browsing
+            Exec=${pkgs.gamescope}/bin/gamescope --rt --backend drm --expose-wayland -W 3840 -H 2160 -- MOZ_ENABLE_WAYLAND=1 ${pkgs.firefox}/bin/firefox https://www.youtube.com/
+            Type=Application
+          '';
+        };
+
+        jellyfinDesktopFile = pkgs.writeTextFile {
+          name = "jellyfin-desktop-entry";
+          destination = "/share/wayland-sessions/jellyfin.desktop";
+          text = ''
+            [Desktop Entry]
+            Name=Jellyfin
+            Comment=Desktop session for music, movies, and TV
+            Exec=${pkgs.gamescope}/bin/gamescope --rt --backend drm -W 3840 -H 2160 -- ${pkgs.jellyfin-media-player}/bin/jellyfinmediaplayer --scale-factor 2 --tv --fullscreen
+            Type=Application
+          '';
+        };
+
+        steamDesktopFile = pkgs.writeTextFile {
+          name = "steam-desktop-entry";
+          destination = "/share/wayland-sessions/steam.desktop";
+          text = ''
+            [Desktop Entry]
+            Name=Steam
+            Comment=Desktop session for gaming
+            Exec=${pkgs.gamescope}/bin/gamescope --rt --backend drm --steam -- ${pkgs.steam}/bin/steam -pipewire-dmabuf -tenfoot
+            Type=Application
+          '';
+        };
+
+        firefoxSession = pkgs.symlinkJoin {
+          name = "firefox-session";
+          paths = [ firefoxDesktopFile ];
+          passthru.providedSessions = [ "firefox" ];
+        };
+
+        jellyfinSession = pkgs.symlinkJoin {
+          name = "jellyfin-session";
+          paths = [ jellyfinDesktopFile ];
+          passthru.providedSessions = [ "jellyfin" ];
+        };
+
+        steamSession = pkgs.symlinkJoin {
+          name = "steam-session";
+          paths = [ steamDesktopFile ];
+          passthru.providedSessions = [ "steam" ];
+        };
+      in
+      [
+        firefoxSession
+        jellyfinSession
+        steamSession
+      ];
   };
 
+  services.greetd =
+    let
+      desktops = config.services.displayManager.sessionData.desktops;
+    in
+    {
+      enable = true;
+      settings = {
+        default_session = {
+          command = "${pkgs.greetd.tuigreet}/bin/tuigreet --time --sessions ${desktops}/share/xsessions:${desktops}/share/wayland-sessions";
+        };
+      };
+    };
+
+  # security.pam.services = {
+  #   greetd.text = ''
+  #     auth      requisite     pam_nologin.so
+  #     auth      sufficient    pam_succeed_if.so user = ${name} quiet_success
+  #     auth      required      pam_unix.so
+  #
+  #     account   sufficient    pam_unix.so
+  #
+  #     password  required      pam_deny.so
+  #
+  #     session   optional      pam_keyinit.so revoke
+  #     session   include       login
+  #   '';
+  # };
+
   # Workaround: https://github.com/nix-community/home-manager/issues/7166
   systemd.services."home-manager-${name}".serviceConfig = {
     RemainAfterExit = "yes";

users/jordan/artemis.nix

@@ -12,9 +12,9 @@
   ];
 
   home.packages = with pkgs; [
-    jellyfin-media-player
-    lutris
-    unstable.pcsx2
+    # jellyfin-media-player
+    unstable.lutris
+    pcsx2
     xemu
   ];
 }

users/jordan/atlas.nix

@@ -10,7 +10,7 @@
   ];
 
   home.packages = with pkgs; [
-    jellyfin-media-player
+    # jellyfin-media-player
     qbittorrent
   ];
 }

users/jordan/common/git.nix

@@ -5,12 +5,18 @@
 {
   programs.git = {
     enable = true;
-    aliases = {
-      amend = "commit --amend";
-      lg = "log --color --graph --abbrev-commit --";
-      ls = "ls-files";
-      unadd = "reset HEAD";
-      undo-commit = "reset --soft \"HEAD^\"";
+    settings = {
+      aliases = {
+        amend = "commit --amend";
+        lg = "log --color --graph --abbrev-commit --";
+        ls = "ls-files";
+        unadd = "reset HEAD";
+        undo-commit = "reset --soft \"HEAD^\"";
+      };
+      user = {
+        email = "jordan@vimium.com";
+        name = "Jordan Holt";
+      };
     };
     ignores = [
       ".Trash-*"
@@ -27,8 +33,6 @@
       "[._]*.un~"
       "cmake-build-*/"
     ];
-    userEmail = "jordan@vimium.com";
-    userName = "Jordan Holt";
     signing = {
       key = "B8CFFF61F1CCF520";
       signByDefault = true;

users/jordan/common/gpg.nix

@@ -9,7 +9,6 @@
 
   services.gpg-agent = {
     enable = true;
-    enableSshSupport = true;
   };
 
   home.persistence."/persist".directories = [

users/jordan/common/neovim.nix

@@ -1,4 +1,5 @@
 {
+  osConfig,
   ...
 }:
 
@@ -10,6 +11,17 @@
     viAlias = true;
     vimAlias = true;
 
+    extraConfigLua = ''
+      if vim.g.neovide then
+        vim.g.neovide_opacity = 0.8
+        vim.g.neovide_normal_opacity = 0.8
+        -- vim.g.neovide_cursor_vfx_mode = "pixiedust"
+        vim.g.neovide_floating_blur_amount_x = 2.0
+        vim.g.neovide_floating_blur_amount_y = 2.0
+        vim.g.neovide_floating_corner_radius = 0.2
+      end
+    '';
+
     opts = {
       number = true;
       tabstop = 2;
@@ -34,14 +46,88 @@
       providers.wl-copy.enable = true;
     };
 
+    colorschemes.onedark = {
+      enable = true;
+      settings = {
+        style = "darker";
+        transparent = true;
+      };
+    };
+
+    plugins.cmp = {
+      enable = true;
+      autoEnableSources = true;
+      settings = {
+        sources = [
+          { name = "nvim_lsp"; }
+          { name = "path"; }
+          { name = "buffer"; }
+        ];
+        mapping = {
+          "<Tab>" = "cmp.mapping(cmp.mapping.select_next_item(), {'i', 's'})";
+          "<S-Tab>" = "cmp.mapping(cmp.mapping.select_prev_item(), {'i', 's'})";
+          "<CR>" = "cmp.mapping.confirm({ select = true })";
+        };
+      };
+    };
+
+    plugins.codecompanion = {
+      enable = true;
+
+      settings = {
+        adapters = {
+          http.opts.show_defaults = false;
+          http.openwebui.__raw = ''
+            function()
+              return require("codecompanion.adapters").extend("openai_compatible", {
+                name = "openwebui",
+                formatted_name = "Open WebUI",
+                opts = {
+                  stream = true,
+                  tools = true,
+                  vision = false,
+                },
+                url = "''${url}''${chat_endpoint}",
+                env = {
+                  api_key = "cmd:cat ${osConfig.age.secrets.open-webui-api-key.path}",
+                  url = "https://chat.ai.vimium.com",
+                  chat_endpoint = "/api/chat/completions",
+                  models_endpoint = "/api/models",
+                },
+                headers = {
+                  ["Content-Type"] = "application/json",
+                  Authorization = "Bearer ''${api_key}",
+                },
+                schema = {
+                  model = {
+                    default = "openai/gpt-5-chat",
+                  },
+                },
+              })
+            end
+          '';
+        };
+
+        strategies = {
+          chat = {
+            adapter = "openwebui";
+          };
+          inline = {
+            adapter = "openwebui";
+          };
+          cmd = {
+            adapter = "openwebui";
+          };
+        };
+      };
+    };
+
     plugins.comment.enable = true;
 
     plugins.hmts.enable = true;
 
     plugins.lightline.enable = true;
 
-    plugins.luasnip.enable = true;
-
     plugins.lsp = {
       enable = true;
       servers = {
@@ -63,24 +149,9 @@
       };
     };
 
-    plugins.nvim-autopairs.enable = true;
+    plugins.luasnip.enable = true;
 
-    plugins.cmp = {
-      enable = true;
-      autoEnableSources = true;
-      settings = {
-        sources = [
-          { name = "nvim_lsp"; }
-          { name = "path"; }
-          { name = "buffer"; }
-        ];
-        mapping = {
-          "<Tab>" = "cmp.mapping(cmp.mapping.select_next_item(), {'i', 's'})";
-          "<S-Tab>" = "cmp.mapping(cmp.mapping.select_prev_item(), {'i', 's'})";
-          "<CR>" = "cmp.mapping.confirm({ select = true })";
-        };
-      };
-    };
+    plugins.nvim-autopairs.enable = true;
 
     plugins.telescope = {
       enable = true;
@@ -105,9 +176,9 @@
 
     plugins.treesitter-refactor = {
       enable = true;
-      highlightDefinitions = {
+      settings.highlight_definitions = {
         enable = true;
-        clearOnCursorMove = false;
+        clear_on_cursor_move = false;
       };
     };
 
@@ -115,18 +186,41 @@
 
     plugins.vim-surround.enable = true;
 
+    plugins.visual-multi.enable = true;
+
     plugins.web-devicons.enable = true;
 
-    # plugins.gitsigns.enable = true;
-    # plugins.gitgutter.enable = true;
-    # plugins.goyo.enable = true;
+    plugins.yazi.enable = true;
+
+    plugins.zen-mode.enable = true;
+
+    # plugins.actions-preview.enable = true;
+    # plugins.aerial.enable = true;
+    # plugins.arrow.enable = true;
+    # plugins.blink.enable = true;
+    # plugins.bufferline.enable = true;
+    # plugins.fidget.enable = true;
+    # plugins.flash.enable = true;
     # plugins.fugitive.enable = true;
     # plugins.fzf-lua.enable = true;
+    # plugins.gitsigns.enable = true;
+    # plugins.gitgutter.enable = true;
+    # plugins.glance.enable = true;
+    # plugins.hop.enable = true;
+    # plugins.improved-search.enable = true;
+    # plugins.goto-preview.enable = true;
+    # plugins.kulala.enable = true;
     # plugins.neo-tree.enable = true;
     # plugins.none-ls.enable = true;
-    # plugins.nvim-tree.enable = true;
+    # plugins.nvim-dap.enable = true;
+    # plugins.nvim-dbee.enable = true;
+    # plugins.nvim-neoclip.enable = true;
     # plugins.oil.enable = true;
+    # plugins.persisted.enable = true;
+    # plugins.precognition.enable = true;
     # plugins.project-nvim.enable = true;
+    # plugins.tardis.enable = true;
+    # plugins.typescript-tools.enable = true;
   };
 
   home.sessionVariables.EDITOR = "nvim";

users/jordan/common/optional/graphical/firefox.nix

@@ -8,6 +8,39 @@
 
   programs.firefox = {
     enable = true;
+    policies = {
+      DisableFirefoxAccounts = true;
+      DisableFirefoxStudies = true;
+      DisableTelemetry = true;
+      DisableFeedbackCommands = true;
+      DisablePocket = true;
+      DisableSetDesktopBackground = true;
+      DontCheckDefaultBrowser = true;
+      NoDefaultBookmarks = true;
+      SkipTermsOfUse = true;
+      GenerativeAI = {
+        Chatbot = false;
+        LinkPreviews = false;
+        TabGroups = false;
+      };
+      ExtensionSettings = {
+        "uBlock0@raymondhill.net" = {
+          installation_mode = "force_installed";
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi";
+          private_browsing = true;
+        };
+      };
+      SearchEngines = {
+        Default = "DuckDuckGo";
+        Remove = [
+          "Amazon.com"
+          "Bing"
+          "eBay"
+          "Google"
+          "Perplexity"
+        ];
+      };
+    };
     profiles.Default = {
       search = {
         default = "ddg";
@@ -47,6 +80,9 @@
         "browser.urlbar.suggest.calculator" = true;
         "browser.urlbar.trending.featureGate" = false;
         "browser.urlbar.unitConversion.enabled" = true;
+        "browser.aboutConfig.showWarning" = false;
+        "browser.aboutwelcome.enabled" = false;
+        "browser.shell.checkDefaultBrowser" = false;
         "cookiebanners.service.mode" = 1;
         "cookiebanners.service.mode.privateBrowsing" = 1;
         "network.IDN_show_punycode" = true;
@@ -99,6 +135,7 @@
         ## Privacy
         "dom.private-attribution.submission.enabled" = false;
         # "privacy.resistFingerprinting" = true;
+        "privacy.resistFingerprinting.randomization.daily_reset.enabled" = true;
         "privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts" = false;
         "privacy.trackingprotection.enabled" = true;
         "privacy.trackingprotection.pbmode.enabled" = true;
@@ -135,6 +172,13 @@
         "dom.webnotifications.serviceworker.enabled" = false;
         "permissions.default.desktop-notification" = 2;
 
+        ## ML
+        "browser.ml.enable" = false;
+        "browser.ml.chat.enable" = false;
+        "browser.ml.chat.menu" = false;
+        "browser.ml.linkPreview.enable" = false;
+        "browser.tabs.groups.smart.enabled" = false;
+
         ## DOM / JavaScript
         # "dom.event.clipboardevents.enabled" = false;
         "middlemouse.paste" = false;
@@ -202,6 +246,31 @@
         "plugin.state.flash" = 0;
         "plugin.state.java" = 0;
 
+        # Fullscreen
+        "full-screen-api.transition-duration.enter" = "0 0";
+        "full-screen-api.transition-duration.leave" = "0";
+        "full-screen-api.warning.timeout" = 0;
+
+        # Update management
+        "app.update.auto" = false;
+        "app.update.background.enabled" = false;
+        "app.update.url" = "";
+
+        # Sync
+        "services.sync.engine.addresses" = false;
+        "services.sync.engine.creditcards" = false;
+        "services.sync.engine.addons" = false;
+        "services.sync.engine.bookmarks" = false;
+        "services.sync.engine.history" = false;
+        "services.sync.engine.passwords" = false;
+        "services.sync.engine.prefs" = false;
+        "services.sync.engine.tabs" = false;
+        "identity.fxaccounts.enabled" = false;
+
+        # Notifications and CFR
+        "browser.messaging-system.whatsNewPanel.enabled" = false;
+        "browser.cfr.enabled" = false;
+
         ## Misc
         "browser.selfsupport.url" = "";
       };

users/jordan/common/optional/graphical/hyprland/default.nix

@@ -61,13 +61,13 @@ in
     portalPackage =
       inputs.hyprland.packages.${pkgs.stdenv.hostPlatform.system}.xdg-desktop-portal-hyprland;
     plugins = [
-      pkgs.unstable.hyprlandPlugins.hyprbars
-      pkgs.unstable.hyprlandPlugins.hypr-dynamic-cursors
+      # pkgs.unstable.hyprlandPlugins.hyprbars
+      # pkgs.unstable.hyprlandPlugins.hypr-dynamic-cursors
     ];
     settings = {
       general = {
-        gaps_in = 5;
-        gaps_out = 20;
+        gaps_in = 0;
+        gaps_out = 0;
 
         border_size = 2;
 
@@ -77,7 +77,7 @@ in
 
       plugin = {
         dynamic-cursors = {
-          enabled = true;
+          enabled = false;
           mode = "none";
           shake = {
             enabled = true;
@@ -85,7 +85,7 @@ in
         };
 
         hyprbars = {
-          enabled = true;
+          enabled = false;
           bar_height = 20;
           bar_blur = true;
         };
@@ -115,7 +115,7 @@ in
       };
 
       decoration = {
-        rounding = 10;
+        rounding = 0;
 
         active_opacity = 1.0;
         inactive_opacity = 1.0;
@@ -299,7 +299,15 @@ in
     enable = true;
     settings = {
       background = "#000000";
-      background_opacity = 0.7;
+      background_opacity = 0.8;
+    };
+  };
+
+  programs.neovide = {
+    enable = true;
+    package = pkgs.unstable.neovide;
+    settings = {
+      font.size = 16.0;
     };
   };
 

users/jordan/common/optional/graphical/hyprland/waybar.css

@@ -3,7 +3,88 @@
 }
 
 window#waybar {
-  border-radius: 1em;
+  background: linear-gradient(
+    to bottom,
+    rgba(118, 118, 118, 0.78) 0%,
+    rgba(50, 50, 50, 0.78) 50%,
+    rgba(0, 0, 0, 0.74) 50%,
+    rgba(0, 0, 0, 0.76) 100%
+  );
+  border-top: 1px solid rgba(71, 71, 71, 0.90);
+  border-bottom: 1px solid rgba(0, 0, 0, 0.97);
+  box-shadow: inset 0px 1px 0px 0px rgba(158, 158, 158, 0.90);
+  text-shadow: black 0px 0px 2px;
+  color: white;
+}
+
+#workspaces button {
+  margin: 2px;
+  background: linear-gradient(
+    to bottom,
+    rgba(255, 255, 255, 0.35) 0%,
+    rgba(255, 255, 255, 0.11) 50%,
+    rgba(255, 255, 255, 0) 50%
+  );
+  border: 1px solid rgba(0, 0, 0, 0.37);
+  border-radius: 4px;
+  box-shadow: inset 0px 1px 0px 0px rgba(255, 255, 255, 0.25);
+  text-shadow: black 0px 0px 2px;
+  color: white;
+}
+
+#workspaces button:hover {
+  background:
+    linear-gradient(
+      to bottom,
+      rgba(255, 255, 255, 0.35) 0%,
+      rgba(255, 255, 255, 0.17) 50%,
+      rgba(255, 255, 255, 0) 50%
+    ),
+    radial-gradient(
+      ellipse 80% 80% at 50% 110%,
+      rgba(44, 126, 204, 1) 0%,
+      rgba(44, 126, 204, 0) 80%
+    );
+}
+
+#workspaces button.active {
+  background: linear-gradient(
+    to bottom,
+    rgba(0, 0, 0, 0.40) 0%,
+    rgba(0, 0, 0, 0.38) 50%,
+    rgba(0, 0, 0, 0.55) 50%
+  );
+  box-shadow: inset 0px 1px 0px 0px rgb(0, 0, 0);
+}
+
+#workspaces button.active:hover {
+  background:
+    linear-gradient(
+      to bottom,
+      rgba(0, 0, 0, 0.40) 0%,
+      rgba(0, 0, 0, 0.38) 50%,
+      rgba(0, 0, 0, 0.55) 50%
+    ),
+    radial-gradient(
+      ellipse 80% 80% at 50% 120%,
+      rgba(43, 143, 189, 1) 0%,
+      rgba(43, 143, 189, 0) 80%
+    );
+}
+
+#workspaces button.urgent {
+  background:
+    linear-gradient(
+      to bottom,
+      rgba(255, 255, 255, 0.35) 0%,
+      rgba(255, 255, 255, 0.11) 50%,
+      rgba(255, 255, 255, 0) 50%
+    ),
+    radial-gradient(
+      ellipse 80% 80% at 50% 100%,
+      rgba(199, 128, 14, 1) 0%,
+      rgba(170, 75, 12, 0) 100%
+    );
 }
 
 .modules-left {

users/jordan/common/optional/graphical/hyprland/waybar.nix

@@ -8,9 +8,8 @@
     settings = [
       {
         layer = "top";
-        position = "top";
+        position = "bottom";
         height = 30;
-        margin = "10 20 0 20";
         spacing = 10;
 
         modules-left = [

users/jordan/common/optional/graphical/niri.nix

@@ -0,0 +1,261 @@
+{
+  config,
+  lib,
+  inputs,
+  pkgs,
+  ...
+}:
+let
+  inherit (lib)
+    getExe
+    ;
+in
+{
+  imports = [
+    inputs.niri.homeModules.niri
+  ];
+
+  xdg.portal = {
+    enable = true;
+    xdgOpenUsePortal = true;
+    config.niri = {
+      default = [
+        "gnome"
+        "gtk"
+      ];
+      "org.freedesktop.impl.portal.Access" = "gtk";
+      "org.freedesktop.impl.portal.Notification" = "gtk";
+      "org.freedesktop.impl.portal.Secret" = "gnome-keyring";
+      "org.freedesktop.impl.portal.FileChooser" = "gtk";
+      "org.freedesktop.impl.portal.ScreenCast" = [ "gnome" ];
+      "org.freedesktop.impl.portal.Screenshot" = [ "gnome" ];
+    };
+    extraPortals = with pkgs; [
+      xdg-desktop-portal-gtk
+      xdg-desktop-portal-gnome
+    ];
+  };
+
+  programs.niri = {
+    enable = true;
+    package = pkgs.niri-unstable;
+
+    settings = {
+      xwayland-satellite.path = getExe pkgs.xwayland-satellite-stable;
+      input = {
+        keyboard = {
+          xkb = {
+            layout = "us";
+            variant = "intl";
+          };
+
+          repeat-delay = 235;
+          repeat-rate = 60;
+        };
+
+        touchpad = {
+          tap = true;
+          dwt = true;
+          dwtp = true;
+          natural-scroll = true;
+          accel-profile = "flat";
+        };
+
+        mouse = {
+          accel-speed = 0.2;
+          accel-profile = "flat";
+        };
+
+        power-key-handling.enable = false;
+        workspace-auto-back-and-forth = true;
+      };
+
+      gestures.hot-corners.enable = false;
+      debug.honor-xdg-activation-with-invalid-serial = true;
+      binds = with config.lib.niri.actions; {
+        "Mod+T".action = spawn "kitty";
+        "Mod+b".action = spawn "firefox";
+        "Super+Alt+L".action = spawn "systemctl suspend";
+        XF86AudioRaiseVolume = {
+          action = spawn "wpctl" "set-volume" "@DEFAULT_AUDIO_SINK@" "0.1+";
+          allow-when-locked = true;
+        };
+        XF86AudioLowerVolume = {
+          action = spawn "wpctl" "set-volume" "@DEFAULT_AUDIO_SINK@" "0.1-";
+          allow-when-locked = true;
+        };
+        XF86AudioMute = {
+          action = spawn "wpctl" "set-mute" "@DEFAULT_AUDIO_SINK@" "toggle";
+          allow-when-locked = true;
+        };
+        XF86AudioMicMute = {
+          action = spawn "wpctl" "set-mute" "@DEFAULT_AUDIO_SOURCE@" "toggle";
+          allow-when-locked = true;
+        };
+        "Mod+Q".action = close-window;
+
+        "Mod+n".action = focus-column-left;
+        "Mod+left".action = focus-column-left;
+        "Mod+Shift+n".action = move-column-left;
+        "Mod+Shift+left".action = move-column-left;
+
+        "Mod+r".action = focus-window-or-workspace-down;
+        "Mod+down".action = focus-window-or-workspace-down;
+        "Mod+Shift+r".action = move-window-down;
+        "Mod+Shift+down".action = move-window-down;
+
+        "Mod+l".action = focus-window-or-workspace-up;
+        "Mod+up".action = focus-window-or-workspace-up;
+        "Mod+Shift+l".action = move-window-up;
+        "Mod+Shift+up".action = move-window-up;
+
+        "Mod+s".action = focus-column-right;
+        "Mod+right".action = focus-column-right;
+        "Mod+Shift+s".action = move-column-right;
+        "Mod+Shift+right".action = move-column-right;
+
+        "Mod+h".action = focus-column-first;
+        "Mod+Shift+h".action = consume-or-expel-window-left;
+        "Mod+m".action = focus-column-last;
+        "Mod+Shift+m".action = consume-or-expel-window-right;
+
+        "Mod+Ctrl+n".action = focus-monitor-left;
+        "Mod+Shift+Ctrl+n".action = move-column-to-monitor-left;
+        "Mod+Ctrl+r".action = focus-monitor-down;
+        "Mod+Shift+Ctrl+r".action = move-column-to-monitor-down;
+        "Mod+Ctrl+l".action = focus-monitor-up;
+        "Mod+Shift+Ctrl+l".action = move-column-to-monitor-up;
+        "Mod+Ctrl+s".action = focus-monitor-right;
+        "Mod+Shift+Ctrl+s".action = move-column-to-monitor-right;
+
+        "Mod+Period".action = focus-workspace-down;
+        "Mod+Shift+Period".action = move-column-to-workspace-down;
+        "Mod+Ctrl+Period".action = move-workspace-down;
+        "Mod+comma".action = focus-workspace-up;
+        "Mod+Shift+comma".action = move-column-to-workspace-up;
+        "Mod+Ctrl+comma".action = move-workspace-up;
+
+        "Mod+WheelScrollDown" = {
+          action = focus-workspace-down;
+          cooldown-ms = 150;
+        };
+        "Mod+WheelScrollUp" = {
+          action = focus-workspace-up;
+          cooldown-ms = 150;
+        };
+        "Mod+Ctrl+WheelScrollDown" = {
+          action = move-column-to-workspace-down;
+          cooldown-ms = 150;
+        };
+        "Mod+Ctrl+WheelScrollUp" = {
+          action = move-column-to-workspace-up;
+          cooldown-ms = 150;
+        };
+        "Mod+WheelScrollRight".action = focus-column-right;
+        "Mod+WheelScrollLeft".action = focus-column-left;
+        "Mod+Ctrl+WheelScrollRight".action = move-column-right;
+        "Mod+Ctrl+WheelScrollLeft".action = move-column-left;
+        "Mod+Shift+WheelScrollDown".action = focus-column-right;
+        "Mod+Shift+WheelScrollUp".action = focus-column-left;
+        "Mod+Ctrl+Shift+WheelScrollDown".action = move-column-right;
+        "Mod+Ctrl+Shift+WheelScrollUp".action = move-column-left;
+
+        "Mod+V".action = maximize-column;
+        "Mod+Ctrl+V".action = expand-column-to-available-width;
+        "Mod+return".action = fullscreen-window;
+        "Mod+Minus".action = set-column-width "-10%";
+        "Mod+Shift+0".action = set-column-width "+10%";
+
+        "Mod+F".action = toggle-window-floating;
+        "Mod+Ctrl+F".action = switch-focus-between-floating-and-tiling;
+
+        "Mod+y".action = toggle-column-tabbed-display;
+
+        #"Print".action = screenshot;
+        #"Ctrl+Print".action = screenshot-screen {};
+        #"Alt+Print".action = screenshot-window;
+
+        "Mod+Escape" = {
+          action = toggle-keyboard-shortcuts-inhibit;
+          allow-inhibiting = false;
+        };
+
+        # The quit action will show a confirmation dialog to avoid accidental exits.
+        "Mod+Ctrl+Escape".action = quit;
+        # Powers off the monitors. To turn them back on, do any input like
+        # moving the mouse or pressing any other key.
+        "Mod+Shift+P".action = power-off-monitors;
+      };
+
+      spawn-at-startup = [
+        { command = [ "firefox" ]; }
+      ];
+
+      prefer-no-csd = true;
+      hotkey-overlay = {
+        skip-at-startup = true;
+      };
+      layout = {
+        gaps = 1;
+        center-focused-column = "never";
+        empty-workspace-above-first = true;
+        preset-column-widths = [
+          { proportion = 0.33333; }
+          { proportion = 0.5; }
+          { proportion = 0.66667; }
+        ];
+        default-column-width = {
+          proportion = 0.5;
+        };
+        preset-window-heights = [
+          { proportion = 0.33333; }
+          { proportion = 0.5; }
+          { proportion = 0.66667; }
+        ];
+        focus-ring = {
+          enable = true;
+          width = 2;
+          active.color = "#7fc8ff";
+          inactive.color = "#505050";
+        };
+        border = {
+          enable = false;
+          width = 2;
+          active.color = "#ffc87f";
+          inactive.color = "#505050";
+        };
+        shadow = {
+          # on
+          softness = 30;
+          spread = 5;
+          offset = {
+            x = 0;
+            y = 5;
+          };
+          draw-behind-window = true;
+          color = "#00000070";
+          # inactive-color "#00000054"
+        };
+        tab-indicator = {
+          # off
+          hide-when-single-tab = true;
+          place-within-column = true;
+          gap = 5;
+          width = 4;
+          length = {
+            total-proportion = 1.0;
+          };
+          position = "right";
+          gaps-between-tabs = 2;
+          corner-radius = 8;
+          active.color = "red";
+          inactive.color = "gray";
+        };
+        insert-hint = {
+          # off
+          display.color = "#ffc87f80";
+        };
+      };
+    };
+  };
+}

users/jordan/common/shell.nix

@@ -174,6 +174,7 @@ in
     mcfly.enable = true;
     navi.enable = true;
     nix-index.enable = true;
+    yazi.enable = true;
   };
 
   home.persistence."/persist" = {
@@ -189,10 +190,12 @@ in
     bat
     btop
     fd
+    file
     jq
     ncdu
     nix-zsh-completions
-    nnn
+    p7zip-rar
     ripgrep
+    unzip
   ];
 }

users/jordan/common/ssh.nix

@@ -3,11 +3,8 @@
 }:
 
 {
-  services.ssh-agent.enable = true;
-
   programs.ssh = {
     enable = true;
-    addKeysToAgent = "yes";
   };
 
   home.persistence."/state".files = [

users/jordan/default.nix

@@ -15,6 +15,11 @@ in
 {
   age.secrets."passwords/users/jordan".file = "${inputs.secrets}/passwords/users/jordan.age";
 
+  age.secrets.open-webui-api-key = {
+    rekeyFile = ./secrets/open-webui-api-key.age;
+    owner = "jordan";
+  };
+
   users.users.${name} = {
     description = "Jordan Holt";
     extraGroups = [

users/jordan/helios.nix

@@ -7,13 +7,13 @@
   imports = [
     ./common/optional/graphical/firefox.nix
     ./common/optional/graphical/fonts.nix
-    ./common/optional/graphical/hyprland
+    ./common/optional/graphical/niri.nix
     ./common/optional/graphical/mimeapps.nix
   ];
 
   programs.nh.enable = true;
 
   home.packages = with pkgs; [
-    jellyfin-media-player
+    # jellyfin-media-player
   ];
 }

users/jordan/odyssey.nix

@@ -22,12 +22,12 @@
     gimp
     handbrake
     inkscape
-    jellyfin-media-player
+    # jellyfin-media-player
     krita
-    lutris
+    unstable.lutris
     mkvtoolnix
     # obs-studio
-    unstable.pcsx2
+    pcsx2
     qbittorrent
     xemu
   ];

users/jordan/secrets/open-webui-api-key.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> piv-p256 a1N2XA AnYGGZaNhtGzK2rbiM3Nfom6xfUq5qTv7fUMDVl1jb+J
+gu1Rpzq2gIB6uopM3tNl3CAb0Xyweu8DA61Unku56m0
+-> x]n-grease R"L{e% Q(Dh['$p ,KZz C
+JKGsU9abzhI9Qly1rrkbXqYl947wcA
+--- jZDJChrb2qWPWvG0aFUDNOJGx+fowthXvwyuMI77drI
+Ѐ6{_ÿóÚöë´_—¼ ¹ž£S÷	Ç…ŠÝÅ+•ã!©Æö<7F>A¹„õÜ «AíyÏ