.envrc

@@ -1,16 +1,6 @@
-#! /bin/sh
+# If nix-shell available, then nix is installed. We're going to use nix-direnv.
-
+if command -v nix-shell &> /dev/null
-source "$(
+then
-  nix eval \
+    use flake
-  --no-update-lock-file \
+fi
-  --no-write-lock-file \
-  --no-warn-dirty \
-  --accept-flake-config \
-  .#__std.direnv_lib 2>/dev/null \
-  || nix eval .#__std.direnv_lib # show the errors
-)"
-# FIXME: This should check if $USER is in userShells, if not,
-# fall back to `use nix`
-use std nix "//repo/userShells:${USER}"
-
 

.gitignore

@@ -1,2 +0,0 @@
-result
-.direnv

.sops.yaml

@@ -1,16 +0,0 @@
-keys:
-  - &htran-mbp age1jpm9mtxz6n8vncrk6pk7dppj3r7qxfj5hsgvcdulmp3lxvxez94qvxlgay
-  - &htran     age1jw958shpwu7st8sc4z0fufuswmfpxfc9wl3df9g3f3y57m45j92syr0mng
-  - &bao       age1umzkd4k0xt6uv5de85fpc4uztrph86nsd79h5f8cpuvtpy8n6adss7q2fv
-  - &root_bao  age1vx7e6vz9zptwqd0cakjj8erqv58cstddama8zcrppc36rqqmlvjs53x9u0
-  - &htran1    age1vkd39dmrft3uk5wnfqppharn38dhrh78ev6pl85u005jhcge5e9qz4lt79
-creation_rules:
-  - path_regex: .*
-    key_groups:
-    - age: 
-      - *htran
-      - *htran-mbp
-      - *bao
-      - *root_bao
-      - *htran1
-

README.md

@@ -5,10 +5,6 @@ Contains my configurations for the software I use.
 I'm looking to move forward to configuration with NixOS, but until I get
 a bit more experiment on NixOS, I'll keep this repository as simple as possible.
 
-- As of 2023-06-07, I have little interest in keeping configurations 
-([`init.lua`](./native_configs/neovim/init.lua), [`sshconfig`](./native_configs/ssh/config),...) 
-to be idempotent for Nix and non-Nix targets.
-
 ## Nix
 
 Monorepo that contains my commonly used personal environments.
@@ -17,7 +13,8 @@ onto this repo for quick env setup (especially devel) on new machines.
 
 ## How do I apply these config
 
-- Clone and nixify
+- I will always first clone this repository, preferably from local source before
+going from the github. `git clone https://github.com/pegasust/dotfiles`
 
 ### neovim
 
@@ -29,6 +26,7 @@ My main text editor. It's based on `vim`, but stays loyal to `lua` ecosystem
 #### Notes
 
 - Ensure that neovim is installed and invocable by `nvim`.
+- My config based on rather experimental version of`nvim` (>=0.7.2)
 - For information on installing neovim, visit their [github page](https://github.com/neovim/neovim/wiki/Installing-Neovim)
 
 ### tmux
@@ -42,7 +40,7 @@ from one terminal.
 
 #### Notes
 
-- Unsure of the minimum version of tmux. I have had an ancient HPC server
+- Unsure if the minimum version of tmux. I have had an ancient HPC server
 that does not respond well to one of the config lines.
 
 ### zk
@@ -59,23 +57,4 @@ text-editor agnostically.
 - Templates: `zk/templates/`
 - Command: `ln -s $PWD/zk/templates ~/.config/zk/templates`
 
-Note (2023-06-07): I'm now using a mix of nvim-zk with Notion. I'm still figuring out
-a centralize place to put my notes and use it to do some knowledge graph magic
-
-## Troubleshoots
-
-### My MacOS just updated, `nix` is no-longer here
-
-- An easy fix is to add the following  to the **bottom** of `/etc/zshrc`
-
-```sh
-# Nix {{{
-if [ -e '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh' ]; then
-  . '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh'
-fi
-# }}} 
-```
-
-- Otherwise, consult [`gh-gist:meeech/a_help-osx-borked-my-nix.md`](https://gist.github.com/meeech/0b97a86f235d10bc4e2a1116eec38e7e)
-
 

c_.nix

@@ -0,0 +1,100 @@
+# a small helper that only builds on top of builtins functions
+{src}@inputs:
+builtins // (let 
+formatSecondsSinceEpoch = t:
+let
+rem = x: y: x - x / y * y;
+days = t / 86400;
+secondsInDay = rem t 86400;
+hours = secondsInDay / 3600;
+minutes = (rem secondsInDay 3600) / 60;
+seconds = rem t 60;
+
+# Courtesy of https://stackoverflow.com/a/32158604.
+z = days + 719468;
+era = (if z >= 0 then z else z - 146096) / 146097;
+doe = z - era * 146097;
+yoe = (doe - doe / 1460 + doe / 36524 - doe / 146096) / 365;
+y = yoe + era * 400;
+doy = doe - (365 * yoe + yoe / 4 - yoe / 100);
+mp = (5 * doy + 2) / 153;
+d = doy - (153 * mp + 2) / 5 + 1;
+m = mp + (if mp < 10 then 3 else -9);
+y' = y + (if m <= 2 then 1 else 0);
+
+pad = s: if builtins.stringLength s < 2 then "0" + s else s;
+in "${toString y'}${pad (toString m)}${pad (toString d)}${pad (toString hours)}"
++ "${pad (toString minutes)}${pad (toString seconds)}";
+
+fetchTree =
+# this is the value of flake.lock#lock.nodes.${input_name}.locked
+{type
+, host? ""
+, owner? ""
+, repo? ""
+, rev? ""
+, submodules? ""
+, path? ""
+, narHash? null
+, lastModified? 0
+}@info:
+if info.type == "github" then
+{ outPath =
+  fetchTarball
+    ({ url = "https://api.${info.host or "github.com"}/repos/"
+     + "${info.owner}/${info.repo}/tarball/${info.rev}"; }
+     // (if info ? narHash then { sha256 = info.narHash; } else {})
+    );
+  rev = info.rev;
+  shortRev = builtins.substring 0 7 info.rev;
+  lastModified = info.lastModified;
+  lastModifiedDate = formatSecondsSinceEpoch info.lastModified;
+  narHash = info.narHash;
+}
+else if info.type == "git" then
+{ outPath =
+  builtins.fetchGit
+    ({ url = info.url; }
+     // (if info ? rev then { inherit (info) rev; } else {})
+     // (if info ? ref then { inherit (info) ref; } else {})
+     // (if info ? submodules then { inherit (info) submodules; } else {})
+    );
+  lastModified = info.lastModified;
+  lastModifiedDate = formatSecondsSinceEpoch info.lastModified;
+  narHash = info.narHash;
+} // (if info ? rev then {
+rev = info.rev;
+shortRev = builtins.substring 0 7 info.rev;
+} else {
+})
+else if info.type == "path" then
+{ outPath = builtins.path { 
+  path = if builtins.substring 0 1 info.path != "/"
+    then src + ("/" + info.path)  # make this absolute path by prepending ./
+    else info.path; # it's already an absolute path
+                          };
+narHash = info.narHash;
+}
+else if info.type == "tarball" then
+{ outPath =
+  fetchTarball
+    ({ inherit (info) url; }
+     // (if info ? narHash then { sha256 = info.narHash; } else {})
+    );
+}
+else if info.type == "gitlab" then
+{ inherit (info) rev narHash lastModified;
+  outPath =
+    fetchTarball
+    ({ url = "https://${info.host or "gitlab.com"}/api/v4/projects/${info.owner}%2F${info.repo}/repository/archive.tar.gz?sha=${info.rev}"; }
+     // (if info ? narHash then { sha256 = info.narHash; } else {})
+    );
+  shortRev = builtins.substring 0 7 info.rev;
+}
+else
+# FIXME: add Mercurial, tarball inputs.
+throw "flake input has unsupported input type '${info.type}'";
+in {
+  inherit fetchTree;
+})
+

credentials.yml

@@ -1,97 +0,0 @@
-credentials:
-    - kind:
-        name_unencrypted: kv
-      name_unencrypted: ci@dev1.htran.egihosting.com
-      user_unencrypted: ci
-      password: ENC[AES256_GCM,data:4AIDKxX9dQncyhHe,iv:+YbvHz6GLD9unbTwE/KwcdpU/yMygFurxelOjkrFJRU=,tag:VHnzt66W2pWwcxjTH9LreQ==,type:str]
-    - kind:
-        name_unencrypted: kv
-      name_unencrypted: Gitea credentials
-      user_unencrypted: pegasust
-      password: ENC[AES256_GCM,data:l472gCfek08/Z1cWL0EVtqWYYhE=,iv:TDUX4piGeHSkFSApeaGIPiXPzYAHZWxoMIuQ8G6cunw=,tag:WhCDoCNIUxe5gdxUuuYhZA==,type:str]
-    - kind:
-        name_unencrypted: kv
-      name_unencrypted: Nix SSH password for hungtr
-      user_unencrypted: hungtr
-      password: ENC[AES256_GCM,data:cJpfi8l1mx/86R1Oxd8=,iv:AwYBs4/P4ICNo4B6MxIz3HrGB+hdohIRtVflGBSS/P0=,tag:SC6MO5Zn0xwDRH4TGBR2LQ==,type:str]
-    - kind:
-        name_unencrypted: ssh
-      name_unencrypted: egi-htran
-      pubkey_unencrypted: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPNKyGKsVG/jVXwAmZvH8rLQPdGj8VgITMSN+/nbXTEY htran@Hung-Tran-MBP.local
-      privkey: ENC[AES256_GCM,data:OrurRGlutN1N1YFQvD1XbiF3thV8qO2y1ufRHi3ut1RVA/lxmqg1kYdWnYE7tOCCCITs20ZpcPFAwAjjAXZH6NaS8FgEJiPDUnJ+hg5v0VC7c4GNc+G3B8+9Taz7mggg70EL/s5QwofpuqJspr4EHrildX6eUeE6s9KwSFnw6KTBgO4r0JqBaicbbObhzxPYIYHjhxRxsbYMX4i8ADPeYryhEtL168dHEGENuz/mbw2I/5Qp3R/SwroNpYlTpq6ukGeobW4+j2KD7ZV9Nvcs/FL6/lPdaUKPxNW/bDeRhAaw9Mw3oDxHdTNisvCHJ53GHChdWcoXSMjYNH+zbgXp9YTeCLBMf9/lLnnEwtSEuD2kexcF+WR7gcbu6mdxJ1k3HBU+Xkrl6shGFuQv3hH8eSmfLhIdy+zcY/jb6tokQklrdKsrusFjuHhAuKfNl5uA93Pc0NxTZ4plxEEdbeyzz54cWwBf0HXR6ztSrjqfUtud3bQY667MNB2LHO91QBoQE7U2gUQ2CmI3VG9KVm2eh7LsXUjLoLzccYfg+kkTrQJnAfs=,iv:+4wsk7mUsIOWNe9IoV0TgrBKIsQdiJyzwVb2+hlPVTc=,tag:B9P2bHPh78JuwusZnAsC5A==,type:str]
-      agepub_unencrypted: age1jpm9mtxz6n8vncrk6pk7dppj3r7qxfj5hsgvcdulmp3lxvxez94qvxlgay
-      agepriv: ENC[AES256_GCM,data:tE6WLw8/dHsC6rfJpek7czvySW0+S2luc470l9X6UFX+zCOwlwoQpTWpIGPIqmkOFNSaaA0cyZ4BmWnlVz1iWxizh8DYqcE5los=,iv:4jnpibK+0cE1isWu6Zl1CsajMWN9Zgw8LGX5WpkRyy8=,tag:vdi85c3Q29olLGsCwrvmcA==,type:str]
-    - kind:
-        name_unencrypted: ssh
-      name_unencrypted: dev1-ssh
-      pubkey_unencrypted: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH1IiP+d2S152uiD2JjUJfADFv7AS0l3LX2NRgfMTYLe htran@htrandevbox
-      privkey: ENC[AES256_GCM,data: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,iv:30sivScr8WmFmZx8M/sqTEuGRg72VzJ+bc6AW847xz8=,tag:dJsH+/dhRWQoKwsGAUzqAQ==,type:str]
-    - kind:
-        name_unencrypted: age
-      agepub_unencrypted: age1jw958shpwu7st8sc4z0fufuswmfpxfc9wl3df9g3f3y57m45j92syr0mng
-      agepriv: ENC[AES256_GCM,data:f66nwYr1WLTejGI2SpHNrf8BYRJJuxpufYLSYVix1uLdBj2TfVJVjN3bLsnHrB1DoeVyaF0nUxrdcL64LhbI38zZC/fNORfXx4E=,iv:J/noycrJlL2+r1ojmUYC/6GUVMGqRFM2ondBm2C7fSE=,tag:pT5z5NQQdS30bucdbPPBng==,type:str]
-    - kind:
-        name_unencrypted: ssh
-      name_unencrypted: gl-egi-htran-ed25519
-      privkey: ENC[AES256_GCM,data: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,iv:JjO6O+FB+W1Gi216bjkVXiIFvxLmIZ4rKLCXcepOIQc=,tag:TxiwbrCZ4vFgw6WMmKrVOg==,type:str]
-      pubkey_unencrypted: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINOqM08nqvcFhcF6E//dlphXctfck83N0tjKIfil8npY htran@Hung-Tran-MBP.local
-      agepriv: ENC[AES256_GCM,data:Z4qRvam25nvkNr4DuZhhKtN83NIfNcBW5Wq7SGm0Nb31kAjCS25VfkTrXUtrxWIunMCZEYoIdDLiENjRQPAh/NwffGbZn94/ZKY=,iv:t3YtQvRQPdbDcXgEC/A13W1K9/IIlt6rPceR1lAl0BM=,tag:QmiriOk19fGSPOWj98doUQ==,type:str]
-      agepub_unencrypted: age1jz7ajxer3fs02uygr8a374jfk7vuklpnnyugrlq4equ285t7nyfqwqdreq
-    - kind:
-        name_unencrypted: win-rdp
-      name_unencrypted: EGNGoat
-      ip: ENC[AES256_GCM,data:9/FPJM8l4hLvzDc5pg==,iv:ny1LKtgznhzMd3Bhogwu6b6bOk3/uCNarKTmlWRZAes=,tag:PsleUu2ZE4leEMEcEuJdLQ==,type:str]
-      user_unencrypted: EGN NOC
-      password: ENC[AES256_GCM,data:YOL5Sw6zaA==,iv:Cs8gySfGIQUBPivkM5N6kflZsRhp2w9xmPwtl7RrEZE=,tag:LXYKdsX++IP+jQyjL6JBrg==,type:str]
-    - kind:
-        name_unencrypted: kv
-      name_unencrypted: gl-deploy-token
-      user_unencrypted: gitlab+deploy-token-2
-      pass_unencrpyted: ENC[AES256_GCM,data:GcPu8JFy8JuPb3xrHKBpP196h0k=,iv:2N69xdTtnpjDLvRAbSpDWGh6+IFWpIZgHo6yVf2kE/4=,tag:L7UA7Oj/ZtekO3Cmvp2lvA==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1jw958shpwu7st8sc4z0fufuswmfpxfc9wl3df9g3f3y57m45j92syr0mng
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwdGdsRlFqU3A5S3JERDFo
-            RjBhaHdhSVdXbThwNkR3aWNWc2pMY2owQ0JNCjZpTFBBRWlOTTRvYUJmVzU1QjN6
-            ZzkwcGNjNkVmVzhuMlhLN1ZpWEJiSjgKLS0tIGNmbHF5T3dFeWd1dDFCajIvUmJX
-            TkpXSCtrU1V5NjRWbTBKMWhhMi9JNGsK+UCiGQtJNU0QDTG2kIqxUO9boLPj583M
-            ZwQXwhqBljQojqs1NwvXHCWgyrqhPqIobwYO8xhq1/3S/jMkyfzbAQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1jpm9mtxz6n8vncrk6pk7dppj3r7qxfj5hsgvcdulmp3lxvxez94qvxlgay
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxSnN3V2hXZ25mU1gxait3
-            TDVDQ1RqbVZYOWI2Q1BCZnlDaFVHb2NuRXdrCm8yQ0FWRytReCt0TU11byt5THM1
-            VWh1MjhFWVlRQ29rQXlJS2FHTUFaQlkKLS0tIExJMndaY2g3ZmlnbyswWW9Fc0RM
-            MFFVNGs2RHVTcUdYZWljckt0RnRFN28K4O6nmQfMaJYzaA2n4PzLAqoslyxScplr
-            y6b6wTL3171sA2w6DgP+8BQjJ9/oCoGOtwpyxWzs2zld0dglmP9PGA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1umzkd4k0xt6uv5de85fpc4uztrph86nsd79h5f8cpuvtpy8n6adss7q2fv
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmOFVCTS9HS2dITFVqV2s5
-            VGV5WUZlaW9JMWdNM1NUeVNmTFV3eWVzS0hFCnNVTGRlbG1aU2dsaXhFMmZFekt5
-            cU4wWkNpYktFcEtwYTByUDlpOW5WY1EKLS0tIENyMndiL0gxUGdlK1BtelNKd295
-            QThYZGM0Y1FoTmVud2MxZ2lxK1RENFUKbRkax7DamL8m8qnN0FBHjJm7iDEjI4On
-            +xWVpKRSZviklQTybJqCS3PS3hCAW2zVlD8kZ5ZgTF9/p3towOAJGw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1vx7e6vz9zptwqd0cakjj8erqv58cstddama8zcrppc36rqqmlvjs53x9u0
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3eFI3YUtGbUFQbnQ5YXZ4
-            VE1uNHhNdUNPeEVOY3VuaFR5UEQ3ejJqaFJRClpETnFhQ09udk5XTWRBdmxnRW5q
-            T0xGbFYwOVlZWWFNb2c4d0ZBNzZnREEKLS0tIGlLK1RRMllKMG9vTmxOSHZXb3dT
-            cWxIRyszNmlpN2twMElIL3JCcHdOcHMKMT7Xq+XsSAdkJ1CAWRqdQTrr1NhPeTUc
-            UT0Fa8zUCBTUZEhcmVAnZ4Crr6N2GQbtNOU2S9Jt++od1dxQ+9TjHA==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-28T17:54:36Z"
-    mac: ENC[AES256_GCM,data:uI84H7eyWsauw2RMysa8w/OHP4QXN+FvO/GW+orj86cTlfL521MdPgZZamtSxOeyb4+893jn09GSFUBmOdQHUOX3kGNdWNwpu7eXM1ext/cpZwCsaIDBWDyCCE6LcF69LQEKsbRlC1nDAeMW3Wn510teS/TFxgbRucNdGTnrRE0=,iv:PbjX7VTDkAi0O/pipgV70KbJD/LLJAmD/U7d2kn58DM=,tag:dMsU71CPnO8JHyXoWPcFaQ==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.7.3

default.nix

@@ -1,13 +1,11 @@
 # We use top-level nix-flake, so default.nix is basically just a wrapper around ./flake.nix
-(
+(import
-  import
   (
-    let
+    let 
       lock = builtins.fromJSON (builtins.readFile ./flake.lock);
-      c_ = import ./c_.nix;
+      c_ = import ./c_.nix {src = ./.;};
     in
-      c_.fetchTree lock.nodes.flake-compat.locked
+    c_.fetchTree lock.nodes.flake-compat.locked
   )
-  {src = ./.;}
+  { src = ./.; }
-)
+).defaultNix
-.defaultNix

dev-shell.nix

@@ -1,30 +1,24 @@
-# Ideally, this should contain the barebone necessary for building/interacting
+# Ideally, this should contain the barebone necessary for building/interacting 
 # with tech used in this project
 #
 # Should also incorporate shortcuts like scripts/{hm-switch,conf-sysnix}.sh in here instead
 #
 # It should not contain PDE
-{
+{ pkgs ? import <nixpkgs> { }
-  pkgs ? import <nixpkgs> {},
+, lib
-  lib,
+, ...
-  ...
+}: pkgs.mkShell {
-}:
-pkgs.mkShell {
   # mkShell doesn't care about the differences across nativeBuildInputs,
   # buildInputs, or packages
   buildInputs = [
     # shell scripts
+    (lib.shellAsDrv { script = ''echo "hello world"''; pname = "hello"; })
+    # TODO: decompose hm-switch.sh with a base version (where HOME_MANAGER_BIN is injected)
+    # (lib.shellAsDrv {script = builtins.readFile ./scripts/hm-switch.sh; pname = "hm-switch";})
     pkgs.rust4cargo
-    pkgs.sops
-    pkgs.ssh-to-age
-    pkgs.go
-    pkgs.gopls
   ];
 
-  shellHook = ''
-    # Since we need late dispatch of ~, we have to put this in shellHook.
-    export SOPS_AGE_KEY_FILE=~/.config/sops/age/keys.txt
-  '';
   # env vars
   lol = "hello world";
 }
+

docs/DEV.md

@@ -28,7 +28,7 @@ documentations and defaults
 
 - `nativeBuildInputs` is supposed to be built by a deployment machine (not target)
 
-- `buildInputs` gives you access during runtime (if the package goes path build filter)
+- `buildInputs` gives you access during runtime
 
 - `nativeBulidInputs` gives you access to packages during build time
 

docs/manual-test/tailwind-color-cmp.md

@@ -1,12 +0,0 @@
-# Neovim: Testing cmp for color with Tailwind
-
-- [ ] It should detect a project uses tailwind, maybe via some kind of config file 
-(`tailwind.config.{cjs,mjs,js,ts,json,tsx,toml,yaml}`), or just based on the 
-string content or via tree-stiter. Check this by `:LspInfo` and `tailwindcss-lsp`
-should attach to the current buffer that has tailwind-css string
-- [ ] Type in a classname `text-red-500`, just stop at somewhere and start
-browsing the cmp-lsp window. It should show a color in place of `lspkind`.
-This validates `tailwindcss-colorizer-cmp.nvim` is good
-- [ ] Hit that autocomplete, the string should show the color red. This validates
-`nvim-colorizer.lua` is properly setup.
-

docs/vim-plugins.md

@@ -1,169 +0,0 @@
-# Offset Vim Plugins onto nix packer
-
-The current [`scripts/vim.dsl`](../scripts/vim.dsl) grabs the upstream supported vim plugins
-onto a sqlite database to be stored in memory. We could perform some data exploration via this database 
-
-## Explore which plugins should be added to `neovim.nix`
-
-Gather list of plugins need to be added. This can be done simply by adding 
-a print statement on `WPlug` in `../native_configs/neovim/init.lua` then run neovim
-to collect it.
-
-```lua
--- as of git://./dotfiles.git#a6c979c6
-local function WPlug(plugin_path, ...)
-  local plugin_name = string.lower(plugin_path:match("/([^/]+)$"))
-  if not installed_plugins[plugin_name] then
-    -- NOTE: Add print statement to get which plugin is still being
-    -- plugged at runtime
-    print("Plugging "..plugin_path)
-    Plug(plugin_path, ...)
-  end
-end
-```
-
-We can then use `vim_dsl.py`
-
-```py
-  vp = VimPlugins(UPSTREAM_CSV)
-  need_install_plugins = """
-tjdevries/nlua.nvim
-yioneko/nvim-yati
-nathanalderson/yang.vim
-numToStr/Comment.nvim
-lewis6991/gitsigns.nvim
-tpope/vim-fugitive
-williamboman/mason.nvim
-williamboman/mason-lspconfig.nvim
-TimUntersberger/neogit
-folke/trouble.nvim
-tpope/vim-dispatch
-clojure-vim/vim-jack-in
-radenling/vim-dispatch-neovim
-gennaro-tedesco/nvim-jqx
-kylechui/nvim-surround
-simrat39/inlay-hints.nvim
-gruvbox-community/gruvbox
-nvim-lualine/lualine.nvim
-lukas-reineke/indent-blankline.nvim
-kyazdani42/nvim-web-devicons
-m-demare/hlargs.nvim
-folke/todo-comments.nvim
-nvim-treesitter/playground
-saadparwaiz1/cmp_luasnip
-L3MON4D3/LuaSnip
-arthurxavierx/vim-caser
-~/local_repos/ts-ql
-  """.split()
-  need_install_plugins = [plugin.strip() for plugin in plugins_raw if plugin.strip()]
-
-  # Create the GitHub URL list
-  need_install_plugins_gh = [
-    f"https://github.com/{plugin}/".lower() for plugin in need_install_plugins if not plugin.startswith(("~", "."))]
-
-  # Get the values from the database
-  values = vp.query(f"SELECT LOWER(repo), alias from {vp.table_name()}")
-
-  # Check if the repo is in the list of plugins
-  need_install = [
-    vim_plugin_slug(alias) if alias else name_from_repo(repo) for repo, alias in values if repo in need_install_plugins_gh]
-
-  print("need_install", "\n".join(need_install))
-
-  # Check if the repo is not in the list
-  repos = [repo for repo, _ in values]
-  not_in_repo = [name_from_repo(gh) for gh in need_install_plugins_gh if gh not in repos]
-  print("not in repo", not_in_repo) # nvim-yati, yang-vim, Comment-nvim, inlay-hints-nvim, hlargs-nvim, vim-caser, gruvbox-community
-```
-
-This should print out
-```
-need_install
-cmp_luasnip
-comment-nvim
-gitsigns-nvim
-gruvbox-community
-indent-blankline-nvim
-lualine-nvim
-luasnip
-mason-lspconfig-nvim
-mason-nvim
-neogit
-nlua-nvim
-nvim-jqx
-nvim-surround
-nvim-web-devicons
-playground
-todo-comments-nvim
-trouble-nvim
-vim-dispatch
-vim-dispatch-neovim
-vim-fugitive
-vim-jack-in
-not in repo ['nvim-yati', 'yang-vim', 'inlay-hints-nvim', 'hlargs-nvim', 'vim-caser']
-```
-
-Given this list, we could safely add to `neovim.nix`
-
-```nix
-programs.neovim.plugins = 
- let inherit (pkgs.vimPlugins)
-    need_install
-    cmp_luasnip
-    comment-nvim
-    gitsigns-nvim
-    gruvbox-community
-    indent-blankline-nvim
-    lualine-nvim
-    luasnip
-    mason-lspconfig-nvim
-    mason-nvim
-    neogit
-    nlua-nvim
-    nvim-jqx
-    nvim-surround
-    nvim-web-devicons
-    playground
-    todo-comments-nvim
-    trouble-nvim
-    vim-dispatch
-    vim-dispatch-neovim
-    vim-fugitive
-    vim-jack-in
- ;in [
-    need_install
-    cmp_luasnip
-    comment-nvim
-    gitsigns-nvim
-    gruvbox-community
-    indent-blankline-nvim
-    lualine-nvim
-    luasnip
-    mason-lspconfig-nvim
-    mason-nvim
-    neogit
-    nlua-nvim
-    nvim-jqx
-    nvim-surround
-    nvim-web-devicons
-    playground
-    todo-comments-nvim
-    trouble-nvim
-    vim-dispatch
-    vim-dispatch-neovim
-    vim-fugitive
-    vim-jack-in
-  
- ];
-```
-
-
-TODO:
-- [ ] Source the plugins directly
-- [ ] Add 'frozen' to each of these plugin
-- [ ] Pin plugins separately from `neovim.nix`
-- [ ] Find a better way to `inherit` with list comprehension
-- [ ] Create alert & notification channel for this, ideally via Discord channel
-- [ ] Even better, just put it in email with some labels
-- [ ] Better end-to-end design that take even deeper account to gruvbox-community and such
-

flake.nix

@@ -2,69 +2,177 @@
   nixConfig = {
     accept-flake-config = true;
     experimental-features = "nix-command flakes";
-    max-jobs = 12;
+    # for darwin's browser
+    allowUnsupportedSystem = true;
   };
   description = "My personal configuration in Nix (and some native configurations)";
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    nixpkgs.url = "nixpkgs/nixos-unstable";
-    nixpkgs-latest.url = "github:nixos/nixpkgs";
+    # continously merged & rebased lightweight .lib. Basically a huge extension to c_.
-    deploy-rs.url = "github:serokell/deploy-rs";
+    nixlib.url = "github:nix-community/nixpkgs.lib";
-    std.url = "github:divnix/std";
+    agenix = {
+      url = "github:ryantm/agenix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     home-manager = {
       url = "github:nix-community/home-manager";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    neovim-nightly-overlay = {
+    flake-utils.url = "github:numtide/flake-utils";
-      # need to pin this until darwin build is successful again.
+    nixgl.url = "path:out-of-tree/nixGL";
-      url = "github:nix-community/neovim-nightly-overlay?rev=88a6c749a7d126c49f3374f9f28ca452ea9419b8";
+    rust-overlay.url = "github:oxalica/rust-overlay";
-      inputs.nixpkgs.follows = "nixpkgs";
+    # Allows default.nix to call onto flake.nix. Useful for nix eval and automations
-    };
+    flake-compat = {
-    nix-boost = {
+      url = "path:out-of-tree/flake-compat";
-      url = "git+https://git.pegasust.com/pegasust/nix-boost?ref=bleed";
+      flake = false;
     };
     kpcli-py = {
       url = "github:rebkwok/kpcli";
       flake = false;
     };
+    neovim-nightly-overlay = {
+      url = "github:nix-community/neovim-nightly-overlay";
+      inputs.nixpkgs.url = "github:nixos/nixpkgs?rev=fad51abd42ca17a60fc1d4cb9382e2d79ae31836";
+    };
     nix-index-database = {
       url = "github:mic92/nix-index-database";
-      # Should show the latest nixpkgs whenever possible
+      inputs.nixpkgs.follows = "nixpkgs";
-      inputs.nixpkgs.follows = "nixpkgs-latest";
     };
   };
 
-  outputs = {self, std, ...} @ inputs:
+  outputs =
-    std.growOn
+    { nixpkgs
-    {
+    , agenix
-      # boilerplate
+    , home-manager
-      inherit inputs;
+    , flake-utils
-      # All cell blocks are under ./nix/cells/<cell>/<cellblock> as `<cellblock>.nix`
+    , nixgl
-      # or `<cellblock/default.nix`
+    , rust-overlay
-      cellsFrom = ./nix/cells;
+    , flake-compat
-      # modules = ./nix/modules;
+    , neovim-nightly-overlay
+    , nix-index-database
+    , nixlib
+    , ...
+    }@_inputs:
+    let
+      # config_fn:: system -> config
+      # this function should take simple exports of homeConfigurations.${profile}, 
+      # nixosConfigurations.${profile}, devShells.${profile}, packages.${profile}
+      # and correctly produce 
+      cross_platform = config_fn: let 
+        # nixosConfigurations.${profile} -> nixosConfigurations.${system}.${profile}
+        # pass in: path.to.exports.nixosConfigurations
+        # get out: nixosConfigurations.${system} = {...}
+        strat_sandwich = field_name: config_field: system: {
+          "${field_name}"."${system}" = config_field;
+        };
+        # homeConfigurations.${profile} -> packages.${system}.homeConfigurations.${profile}
+        # pass in: path.to.exports.homeConfigurations
+        # get: packages.${system}.homeConfigurations
+        strat_wrap_packages = field_name: config_field: system: {
+          packages."${system}"."${field_name}" = config_field;
+        };
+        strat_noop = field_name: config_field: system: {"${field_name}" = config_field;};
+        strategyMap = {
+          nixosConfigurations = strat_sandwich;
+          templates =           strat_noop;
+          devShells =           strat_sandwich;
+          devShell =            strat_sandwich;
+          formatter =           strat_sandwich;
+          homeConfigurations =  strat_wrap_packages;
+          lib =                 strat_noop;
+          proj_root =           strat_noop;
+          unit_tests =          strat_noop;
+          secrets =             strat_noop;
+          debug =               strat_noop;
+        };
+        # takes in {homeConfigurations = ...; nixosConfigurations = ...}
+        # -> {packages.$system.homeConfigurations}
+        mapConfig = config: system: (builtins.foldl' 
+          (acc: confName: (strategyMap."${confName}" confName config."${confName}" system))
+          {} (builtins.attrNames config));
+      in builtins.foldl' nixlib.lib.recursiveUpdate {} (
+        builtins.map (system: (mapConfig (config_fn system) system)) flake-utils.lib.defaultSystems
+      );
+    in cross_platform (system:
+    let
+      # Context/global stuffs to be passed down
+      # NOTE: this will only read files that are within git tree
+      # all secrets should go into secrets.nix and secrets/*.age
+      proj_root =
+        let
+          path = builtins.toString ./.;
+        in
+        {
+          inherit path;
+          configs.path = "${path}/native_configs";
+          scripts.path = "${path}/scripts";
+          secrets.path = "${path}/secrets";
+          testdata.path = "${path}/tests";
+          modules.path = "${path}/modules";
+          hosts.path = "${path}/hosts";
+          users.path = "${path}/users";
+        };
+      overlays = import ./overlays.nix (_inputs // {inherit system;});
+      pkgs = import nixpkgs {
+        inherit system overlays;
+        config = {
+          allowUnfree = true;
+        };
+      };
+      # now, this lib is extremely powerful as it also engulfs nixpkgs.lib
+      # lib = nixpkgs.lib // pkgs.lib;
+      lib = (builtins.foldl' (lhs: rhs: (nixpkgs.lib.recursiveUpdate lhs rhs)) { } [
+        nixpkgs.lib
+        pkgs.lib
+        (import ./lib {
+          inherit proj_root pkgs overlays system;
+          inherit (pkgs) lib;
+        })
+      ]);
+      inputs_w_lib = (pkgs.lib.recursiveUpdate _inputs {
+        inherit system proj_root pkgs lib;
+      });
 
-      cellBlocks = let
+      modules = (import ./modules inputs_w_lib);
-        inherit (std.blockTypes) devshells functions anything installables;
+      hosts = (import ./hosts inputs_w_lib);
-      in [
+      users = (import ./users inputs_w_lib);
-        (devshells "devshells")
-        (devshells "userShells")
-        (functions "home-profiles")
-        (functions "home-modules")
-        (anything  "home-configs")
-        (installables "packages")
-        (anything "lib")
-      ];
-    }
-    {
-      devShells = std.harvest self [["dotfiles" "devshells"]];
-      # nixosConfigurations = std.pick [ [ "dotfiles" "nixos" ] ];
-      # homeConfigurations = std.pick [ [ "dotfiles" "home" ] ];
-      homeModules = std.pick self [["repo" "home-modules"]];
-      packages = std.harvest self [["repo" "packages"]];
-      legacyPackages = std.harvest self [["repo" "home-configs"]];
-      lib = std.pick self [["repo" "lib"]];
 
-      # TODO: Debug only
+      # {nixpkgs, agenix, home-manager, flake-utils, nixgl, rust-overlay, flake-compat
-      homeProfiles = std.pick self [["repo" "home-profiles"]];
+      # ,pkgs, lib (extended), proj_root}
-    };
+      final_inputs = inputs_w_lib;
+
+      # Tests: unit + integration
+      unit_tests = (import ./lib/test.nix final_inputs) //
+        {
+          test_example = {
+            expr = "names must start with 'test'";
+            expected = "or won't show up";
+          };
+          not_show = {
+            expr = "this will be ignored by lib.runTests";
+            expected = "for sure";
+          };
+        };
+      secrets = import ./secrets final_inputs;
+
+    in
+    {
+      inherit (hosts) nixosConfigurations;
+      inherit (users) homeConfigurations;
+      inherit lib proj_root;
+      devShells = import ./dev-shell.nix final_inputs;
+      templates = import ./templates final_inputs;
+      secrets = {
+        pubKeys = {
+          hosts = hosts.pubKeys;
+          users = users.pubKeys;
+        };
+      };
+
+      # unit_tests = lib.runTests unit_tests;
+      debug = {
+        inherit final_inputs hosts users modules lib inputs_w_lib unit_tests pkgs nixpkgs nixlib;
+      };
+      formatter."${system}" = pkgs.nixpkgs-fmt;
+    });
 }

hosts/Felia/hardware-configuration.nix

@@ -1,19 +1,15 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [];
 
-  boot.initrd.availableKernelModules = [];
+{
-  boot.initrd.kernelModules = [];
+  imports = [ ];
-  boot.kernelModules = [];
+
-  boot.extraModulePackages = [];
+  boot.initrd.availableKernelModules = [ ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
 
   ## NOTE: These filesystems are mounted by a wrapper script from nix-wsl
 
@@ -47,22 +43,25 @@
   #     fsType = "drvfs";
   #   };
 
-  fileSystems."/mnt/c" = {
+  fileSystems."/mnt/c" =
-    device = "C:";
+    {
-    fsType = "drvfs";
+      device = "C:";
-  };
+      fsType = "drvfs";
+    };
 
-  fileSystems."/mnt/d" = {
+  fileSystems."/mnt/d" =
-    device = "D:";
+    {
-    fsType = "drvfs";
+      device = "D:";
-  };
+      fsType = "drvfs";
+    };
 
-  fileSystems."/mnt/f" = {
+  fileSystems."/mnt/f" =
-    device = "F:";
+    {
-    fsType = "drvfs";
+      device = "F:";
-  };
+      fsType = "drvfs";
+    };
 
-  swapDevices = [];
+  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/bao/default.nix

@@ -1,12 +1,12 @@
-{
+{ nixpkgs
-  nixpkgs,
+, agenix
-  agenix,
+, home-manager
-  home-manager,
+, flake-utils
-  flake-utils,
+, nixgl
-  nixgl,
+, rust-overlay
-  rust-overlay,
+, flake-compat
-  flake-compat,
+, pkgs
-  pkgs,
+, lib
-  lib,
+, proj_root
-  proj_root,
+}: { }
-}: {}
+

hosts/bao/hardware-configuration.nix

@@ -1,23 +1,20 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
 {
-  config,
+  imports =
-  lib,
+    [
-  pkgs,
+      (modulesPath + "/installer/scan/not-detected.nix")
-  modulesPath,
+    ];
-  ...
-}: {
-  imports = [
-    (modulesPath + "/installer/scan/not-detected.nix")
-  ];
 
   boot.loader.systemd-boot.enable = true;
-  boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
   # boot.initrd.kernelModules = [ "amdgpu" ];
-  boot.initrd.kernelModules = [];
+  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = ["kvm-amd" "coretemp"];
+  boot.kernelModules = [ "kvm-amd" "coretemp" ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
   fileSystems."/" =
     # Might be wise to use /dev/nvme0p1 instead
@@ -33,7 +30,7 @@
       fsType = "vfat";
     };
 
-  swapDevices = [];
+  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/default.nix

@@ -1,18 +1,18 @@
-{
+{ nixpkgs
-  nixpkgs,
+, agenix
-  agenix,
+, home-manager
-  home-manager,
+, flake-utils
-  flake-utils,
+, nixgl
-  nixgl,
+, rust-overlay
-  rust-overlay,
+, flake-compat
-  flake-compat,
+, pkgs
-  pkgs,
+, lib
-  lib,
+, proj_root
-  proj_root,
+, nixosDefaultVersion ? "22.05"
-  nixosDefaultVersion ? "22.05",
+, defaultSystem ? "x86_64-linux"
-  defaultSystem ? "x86_64-linux",
+, ...
-  ...
+}@finalInputs:
-} @ finalInputs: let
+let
   config = {
     bao.metadata = {
       # req
@@ -33,58 +33,54 @@
       ];
     };
   };
-  propagate = hostConfig @ {
+  propagate = hostConfig@{ metadata, nixosConfig }:
-    metadata,
+    let
-    nixosConfig,
+      # req
-  }: let
+      inherit (metadata) hostName;
-    # req
+      # opts
-    inherit (metadata) hostName;
+      ssh_pubkey = lib.attrByPath [ "ssh_pubkey" ] null metadata; # metadata.ssh_pubkey??undefined
-    # opts
+      users = lib.attrByPath [ "users" ] { } metadata;
-    ssh_pubkey = lib.attrByPath ["ssh_pubkey"] null metadata; # metadata.ssh_pubkey??undefined
+      nixosVersion = lib.attrByPath [ "nixosVersion" ] nixosDefaultVersion metadata;
-    users = lib.attrByPath ["users"] {} metadata;
+      system = lib.attrByPath [ "system" ] defaultSystem metadata;
-    nixosVersion = lib.attrByPath ["nixosVersion"] nixosDefaultVersion metadata;
+      preset = lib.attrByPath [ "preset" ] "base" metadata;
-    system = lib.attrByPath ["system"] defaultSystem metadata;
+      # infer
-    preset = lib.attrByPath ["preset"] "base" metadata;
+      hardwareConfig = import "${proj_root.hosts.path}/${hostName}/hardware-configuration.nix";
-    # infer
+      # alias to prevent infinite recursion
-    hardwareConfig = import "${proj_root.hosts.path}/${hostName}/hardware-configuration.nix";
+      _nixosConfig = nixosConfig;
-    # alias to prevent infinite recursion
+    in
-    _nixosConfig = nixosConfig;
+    {
-  in {
+      inherit hostName ssh_pubkey users nixosVersion system preset hardwareConfig;
-    inherit hostName ssh_pubkey users nixosVersion system preset hardwareConfig;
+      nixosConfig = _nixosConfig // {
-    nixosConfig =
-      _nixosConfig
-      // {
         inherit system;
-        modules =
+        modules = [
-          [
+          {
-            {
+            config._module.args = {
-              config._module.args = {
+              inherit proj_root;
-                inherit proj_root;
+              my-lib = finalInputs.lib;
-                my-lib = finalInputs.lib;
+            };
-              };
+          }
-            }
+          hardwareConfig
-            hardwareConfig
+          {
-            {
+            system.stateVersion = nixosVersion;
-              system.stateVersion = nixosVersion;
+            networking.hostName = hostName;
-              networking.hostName = hostName;
+            users.users = users;
-              users.users = users;
+          }
-            }
+          {
-            {
+            imports = [ agenix.nixosModule ];
-              imports = [agenix.nixosModule];
+            environment.systemPackages = [ agenix.defaultPackage.x86_64-linux ];
-              environment.systemPackages = [agenix.defaultPackage.x86_64-linux];
+          }
-            }
+          (import "${proj_root.modules.path}/secrets.nix")
-            (import "${proj_root.modules.path}/secrets.nix")
+          (import "${proj_root.modules.path}/${preset}.sys.nix")
-            (import "${proj_root.modules.path}/${preset}.sys.nix")
+        ] ++ _nixosConfig.modules;
-          ]
-          ++ _nixosConfig.modules;
       };
-  };
+    };
   # we are blessed by the fact that we engulfed nixpkgs.lib.* at top level
-  mkHostFromPropagated = propagatedHostConfig @ {nixosConfig, ...}: nixpkgs.lib.nixosSystem nixosConfig;
+  mkHostFromPropagated = propagatedHostConfig@{ nixosConfig, ... }: nixpkgs.lib.nixosSystem nixosConfig;
-  mkHost = hostConfig: (lib.pipe [propagate mkHostFromPropagated] hostConfig);
+  mkHost = hostConfig: (lib.pipe [ propagate mkHostFromPropagated ] hostConfig);
   trimNull = lib.filterAttrsRecursive (name: value: value != null);
   flattenPubkey = lib.mapAttrs (hostName: meta_config: meta_config.metadata.ssh_pubkey);
-in {
+in
+{
   nixosConfigurations = lib.mapAttrs (name: hostConfig: mkHost hostConfig) config;
   # {bao = "ssh-ed25519 ..."; another_host = "ssh-rsa ...";}
   pubKeys = lib.getPubkey config;

hosts/homeless/hardware-configuration.nix

@@ -1,20 +1,17 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+{
-  boot.initrd.kernelModules = [];
+  imports =
-  boot.kernelParams = ["console=ttyS0,19200n8"];
+    [
+      (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
   boot.loader.grub.extraConfig = ''
     serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1
     terminal_input serial;
@@ -23,15 +20,17 @@
   boot.loader.grub.forceInstall = true;
   boot.loader.grub.device = "nodev";
   boot.loader.timeout = 10;
-  boot.kernelModules = [];
+  boot.kernelModules = [ ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
-  fileSystems."/" = {
+  fileSystems."/" =
-    device = "/dev/sda";
+    {
-    fsType = "ext4";
+      device = "/dev/sda";
-  };
+      fsType = "ext4";
+    };
 
-  swapDevices = [{device = "/dev/sdb";}];
+  swapDevices =
+    [{ device = "/dev/sdb"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/lester/hardware-configuration.nix

@@ -1,20 +1,17 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+{
-  boot.initrd.kernelModules = [];
+  imports =
-  boot.kernelParams = ["console=ttyS0,19200n8"];
+    [
+      (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
   boot.loader.grub.extraConfig = ''
     serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1
     terminal_input serial;
@@ -23,15 +20,17 @@
   boot.loader.grub.forceInstall = true;
   boot.loader.grub.device = "nodev";
   boot.loader.timeout = 10;
-  boot.kernelModules = [];
+  boot.kernelModules = [ ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
-  fileSystems."/" = {
+  fileSystems."/" =
-    device = "/dev/sda";
+    {
-    fsType = "ext4";
+      device = "/dev/sda";
-  };
+      fsType = "ext4";
+    };
 
-  swapDevices = [{device = "/dev/sdb";}];
+  swapDevices =
+    [{ device = "/dev/sdb"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/lizzi/default.nix

@@ -1,12 +1,11 @@
-{
+{ nixpkgs
-  nixpkgs,
+, agenix
-  agenix,
+, home-manager
-  home-manager,
+, flake-utils
-  flake-utils,
+, nixgl
-  nixgl,
+, rust-overlay
-  rust-overlay,
+, flake-compat
-  flake-compat,
+, pkgs
-  pkgs,
+, lib
-  lib,
+, proj_root
-  proj_root,
+}: { }
-}: {}

hosts/lizzi/hardware-configuration.nix

@@ -1,20 +1,17 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+{
-  boot.initrd.kernelModules = [];
+  imports =
-  boot.kernelParams = ["console=ttyS0,19200n8"];
+    [
+      (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
   boot.loader.grub.extraConfig = ''
     serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1
     terminal_input serial;
@@ -23,8 +20,8 @@
   boot.loader.grub.forceInstall = true;
   boot.loader.grub.device = "nodev";
   boot.loader.timeout = 10;
-  boot.kernelModules = [];
+  boot.kernelModules = [ ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
   fileSystems = {
     "/" = {
@@ -38,7 +35,8 @@
     };
   };
 
-  swapDevices = [{device = "/dev/sdb";}];
+  swapDevices =
+    [{ device = "/dev/sdb"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/nyx/hardware-configuration.nix

@@ -1,23 +1,20 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
 {
-  config,
+  imports =
-  lib,
+    [
-  pkgs,
+      (modulesPath + "/profiles/qemu-guest.nix")
-  modulesPath,
+    ];
-  ...
-}: {
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
-  boot.initrd.kernelModules = [];
+  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [];
+  boot.kernelModules = [ ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
-  boot.kernelParams = ["console=ttyS0,19200n8"];
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
   boot.loader.grub.extraConfig = ''
     serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1
     terminal_input serial;
@@ -26,12 +23,14 @@
   boot.loader.grub.forceInstall = true;
   boot.loader.grub.device = "nodev";
   boot.loader.timeout = 10;
-  fileSystems."/" = {
+  fileSystems."/" =
-    device = "/dev/sda";
+    {
-    fsType = "ext4";
+      device = "/dev/sda";
-  };
+      fsType = "ext4";
+    };
 
-  swapDevices = [{device = "/dev/sdb";}];
+  swapDevices =
+    [{ device = "/dev/sdb"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

lib/default.nix

@@ -0,0 +1,61 @@
+{ pkgs
+  # ,nixpkgs
+, proj_root
+  # ,agenix
+, nixosDefaultVersion ? "22.05"
+, defaultSystem ? "x86_64-linux"
+, ...
+}@inputs:
+let
+  lib = pkgs.lib;
+  inputs_w_lib = (inputs // { inherit lib; });
+  serde = import ./serde.nix inputs_w_lib;
+  shellAsDrv = { script, pname }: (pkgs.callPackage
+    (
+      # just a pattern that we must remember: args to this are children of pkgs.
+      { writeShellScriptBin }: writeShellScriptBin pname script
+    )
+    { });
+  trimNull = lib.filterAttrs (name: value: value != null);
+  # ssh
+  flattenPubkey = lib.mapAttrs (_identity: meta_config: lib.attrByPath [ "metadata" "ssh_pubkey" ] null meta_config);
+  getPubkey = config: (lib.pipe config [ flattenPubkey trimNull ]);
+  # procedure = 
+in
+{
+  # short-hand to create a shell derivation
+  # NOTE: this is pure. This means, env vars from devShells might not
+  # be accessible unless MAYBE they are `export`ed
+  inherit shellAsDrv trimNull flattenPubkey getPubkey;
+  ssh = {
+    inherit flattenPubkey getPubkey;
+  };
+  # Configures hosts as nixosConfiguration
+  # mkHost = {hostName
+  # , nixosBareConfiguration
+  # , finalInputs
+  # , users ? {}
+  # , nixosVersion? nixosDefaultVersion
+  # , system? defaultSystem
+  # , preset? "base"}:  # base | minimal 
+  # let 
+  #   hardwareConfig = hostname: import "${proj_root.hosts.path}/${hostName}/hardware-configuration.nix";
+  # in nixpkgs.lib.nixosSystem (nixosBareConfiguration // {
+  #   inherit system;
+  #   modules = [
+  #     {
+  #       system.stateVersion = nixosVersion;
+  #       networking.hostName = hostName;
+  #       users.users = users;
+  #     }
+  #     {
+  #       _module.args = finalInputs;
+  #     }
+  #     import "${proj_root.modules.path}/secrets.nix"
+  #     import "${proj_root.modules.path}/${preset}.sys.nix"
+  #   ] ++ nixosBareConfiguration.modules;
+  #   lib = finalInputs.lib;
+  # });
+  inherit serde;
+  inherit (serde) fromYaml fromYamlPath;
+}

lib/serde.nix

@@ -0,0 +1,31 @@
+# Takes care of serializing and deserializing to some formats
+# Blame: Pegasust<pegasucksgg@gmail.com>
+# TODO: Add to* formats from pkgs.formats.*
+{ pkgs
+, lib
+, ...
+} @ inputs:
+let
+  yamlToJsonDrv = yamlContent: outputPath: pkgs.callPackage
+    ({ runCommand }:
+      # runCommand source: https://github.com/NixOS/nixpkgs/blob/master/pkgs/build-support/trivial-builders.nix#L33
+      runCommand outputPath { inherit yamlContent; nativeBuildInputs = [ pkgs.yq ]; }
+        # run yq which outputs '.' (no filter) on file at yamlPath
+        # note that $out is passed onto the bash/sh script for execution
+        ''
+          echo "$yamlContent" | yq >$out
+        '')
+    { };
+in
+{
+  # Takes in a yaml string and produces a derivation with translated JSON at $outputPath
+  # similar to builtins.fromJSON, turns a YAML string to nix attrset
+  fromYaml = yamlContent: builtins.fromJSON (builtins.readFile (yamlToJsonDrv yamlContent "any_output.json"));
+  fromYamlPath = yamlPath: builtins.fromJSON (
+    builtins.readFile (
+      yamlToJsonDrv
+        (
+          builtins.readFile yamlPath)
+        "any-output.json"));
+  # TODO: fromToml?
+}

lib/test.nix

@@ -0,0 +1 @@
+{ lib, ... }: { }

modules/amdgpu.sys.nix

@@ -1,6 +1,6 @@
 {
-  imports = [./gpu.sys.nix];
+  imports = [ ./gpu.sys.nix ];
-  boot.initrd.kernelModules = ["amdgpu"];
+  boot.initrd.kernelModules = [ "amdgpu" ];
   services.xserver.enable = true;
-  services.xserver.videoDrivers = ["amdgpu"];
+  services.xserver.videoDrivers = [ "amdgpu" ];
 }

modules/base.sys.nix

@@ -1,8 +1,7 @@
-{
+{ pkgs
-  pkgs,
+, lib
-  lib,
+, proj_root
-  proj_root,
+, ...
-  ...
 }: {
   imports = [
     ./minimal.sys.nix
@@ -10,6 +9,7 @@
     ./tailscale.sys.nix
     ./ssh.sys.nix
   ];
-  environment.systemPackages = [pkgs.lm_sensors];
+  environment.systemPackages = [ pkgs.lm_sensors ];
   time.timeZone = "America/Phoenix";
+
 }

modules/default.nix

@@ -1 +1 @@
-inputs: {}
+inputs: { }

modules/gpu.sys.nix

@@ -1,8 +1,8 @@
-{pkgs, ...}: {
+{ pkgs, ... }: {
-  environment.systemPackages = [pkgs.clinfo pkgs.lshw pkgs.glxinfo pkgs.pciutils pkgs.vulkan-tools];
+  environment.systemPackages = [ pkgs.clinfo pkgs.lshw pkgs.glxinfo pkgs.pciutils pkgs.vulkan-tools ];
   hardware.opengl = {
     enable = true;
-    extraPackages = [pkgs.rocm-opencl-icd pkgs.rocm-opencl-runtime];
+    extraPackages = [ pkgs.rocm-opencl-icd pkgs.rocm-opencl-runtime ];
     # Vulkan
     driSupport = true;
     driSupport32Bit = true;

modules/kde.sys.nix

@@ -1,7 +1,6 @@
-{
+{ pkgs
-  pkgs,
+, my-lib
-  my-lib,
+, ...
-  ...
 }: {
   environment.noXlibs = my-lib.mkForce false;
   # TODO: wireless networking
@@ -12,16 +11,15 @@
   services.xserver.displayManager.sddm.enable = true;
   services.xserver.desktopManager.plasma5 = {
     enable = true;
-    excludePackages = let
+    excludePackages = let plasma5 = pkgs.libsForQt5; in
-      plasma5 = pkgs.libsForQt5;
+      [
-    in [
+        plasma5.elisa # audio viewer
-      plasma5.elisa # audio viewer
+        plasma5.konsole # I use alacritty instaed
-      plasma5.konsole # I use alacritty instaed
+        plasma5.plasma-browser-integration
-      plasma5.plasma-browser-integration
+        plasma5.print-manager # will enable if I need
-      plasma5.print-manager # will enable if I need
+        plasma5.khelpcenter # why not just write manpages instead :(
-      plasma5.khelpcenter # why not just write manpages instead :(
+        # plasma5.ksshaskpass   # pls just put prompts on my dear terminal
-      # plasma5.ksshaskpass   # pls just put prompts on my dear terminal
+      ];
-    ];
   };
 
   # disables KDE's setting of askpassword

modules/minimal.sys.nix

@@ -1,11 +1,10 @@
-{
+{ pkgs
-  pkgs,
+, lib
-  lib,
+, proj_root
-  proj_root,
+, modulesPath
-  modulesPath,
+, ...
-  ...
 }: {
-  imports = ["${modulesPath}/profiles/minimal.nix"];
+  imports = [ "${modulesPath}/profiles/minimal.nix" ];
   # prune old builds after a while
   nix.settings.auto-optimise-store = true;
   nix.package = pkgs.nixFlakes; # nix flakes

modules/mosh.sys.nix

@@ -1,11 +1,10 @@
+{ pkgs
+, lib
+, config
+, ...
+}:
+let cfg = config.mod.mosh; in
 {
-  pkgs,
-  lib,
-  config,
-  ...
-}: let
-  cfg = config.mod.mosh;
-in {
   options.mod.mosh = {
     enable = lib.mkOption {
       type = lib.types.bool;
@@ -15,14 +14,12 @@ in {
     };
   };
   config = lib.mkIf cfg.enable {
-    environment.systemPackages = [pkgs.mosh];
+    environment.systemPackages = [ pkgs.mosh ];
     networking.firewall = lib.mkIf config.networking.firewall.enable {
       allowedUDPPortRanges = [
-        {
+        { from = 60000; to = 61000; } # mosh
-          from = 60000;
-          to = 61000;
-        } # mosh
       ];
     };
   };
 }
+

modules/nvgpu.sys.nix

@@ -1,7 +1,7 @@
-{config, ...}: {
+{ config, ... }: {
-  imports = [./gpu.sys.nix];
+  imports = [ ./gpu.sys.nix ];
   nixpkgs.config.allowUnfree = true;
   services.xserver.enable = true;
-  services.xserver.videoDrivers = ["nvidia"];
+  services.xserver.videoDrivers = [ "nvidia" ];
   hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.stable;
 }

modules/opengl.sys.nix

@@ -1,23 +1,21 @@
-{
+{ config, pkgs, lib }:
-  config,
+let
-  pkgs,
+  gpu_pkgs = [ pkgs.clinfo pkgs.lshw pkgs.glxinfo pkgs.pciutils pkgs.vulkan-tools ];
-  lib,
-}: let
-  gpu_pkgs = [pkgs.clinfo pkgs.lshw pkgs.glxinfo pkgs.pciutils pkgs.vulkan-tools];
   gpu_conf = {
     # openCL
     hardware.opengl = {
       enable = true;
-      extraPackages = let
+      extraPackages =
-        inherit (pkgs) rocm-opencl-icd rocm-opencl-runtime;
+        let
-      in [rocm-opencl-icd rocm-opencl-runtime];
+          inherit (pkgs) rocm-opencl-icd rocm-opencl-runtime;
+        in
+        [ rocm-opencl-icd rocm-opencl-runtime ];
       # Vulkan
       driSupport = true;
       driSupport32Bit = true;
       package = pkgs.mesa.drivers;
       package32 = pkgs.pkgsi686Linux.mesa.drivers;
     };
-    environment.systemPackages = gpu_pkgs;
   };
 in
-  gpu_conf
+  ;

modules/secrets.nix

@@ -1,4 +1,6 @@
-{proj_root, ...}: {
+{ proj_root
+, ...
+}: {
   age.secrets.s3fs = {
     file = "${proj_root.secrets.path}/s3fs.age";
     # mode = "600";  # owner + group only

modules/storage.perso.sys.nix

@@ -1,10 +1,5 @@
 # Personal configuration on storage solution
-{
+{ pkgs, config, lib, ... }: {
-  pkgs,
-  config,
-  lib,
-  ...
-}: {
   environment.systemPackages = [
     pkgs.s3fs
     pkgs.cifs-utils
@@ -14,81 +9,87 @@
   # HACK: need to store secret somewhere so that root can access this
   # because autofs may run as root for now, we enforce putting the secret in this monorepo
   # TODO: make this configuration nix-less to show that it's 100% data
-  services.autofs = let
+  services.autofs =
-    # confToBackendArg {lol="what"; empty=""; name_only=null;} -> "lol=what,empty=,name_only"
+    let
-    # TODO: change null -> true/false. This allows overriding & better self-documentation
+      # confToBackendArg {lol="what"; empty=""; name_only=null;} -> "lol=what,empty=,name_only"
-    confToBackendArg = conf: (lib.concatStringsSep ","
+      # TODO: change null -> true/false. This allows overriding & better self-documentation
-      (lib.mapAttrsToList (name: value: "${name}${lib.optionalString (value != null) "=${value}"}") conf));
+      confToBackendArg = conf: (lib.concatStringsSep ","
+        (lib.mapAttrsToList (name: value: "${name}${lib.optionalString (value != null) "=${value}"}") conf));
 
-    # mount_dest: path ("wow")
+      # mount_dest: path ("wow")
-    # backend_args: nix attrs representing the arguments to be passed to s3fs
+      # backend_args: nix attrs representing the arguments to be passed to s3fs 
-    #    ({"-fstype" = "fuse"; "use_cache" = "/tmp";})
+      #    ({"-fstype" = "fuse"; "use_cache" = "/tmp";})
-    # bucket: bucket name (hungtr-hot)
+      # bucket: bucket name (hungtr-hot)
-    #     NOTE: s3 custom provider will be provided inside
+      #     NOTE: s3 custom provider will be provided inside
-    #    backend_args, so just put the bucket name here
+      #    backend_args, so just put the bucket name here
-    #
+      #
-    #-> "${mount_dest} ${formatted_args} ${s3fs-bin}#${bucket}"
+      #-> "${mount_dest} ${formatted_args} ${s3fs-bin}#${bucket}"
-    autofs-s3fs_entry = {
+      autofs-s3fs_entry =
-      mount_dest,
+        { mount_dest
-      backend_args ? {"-fstype" = "fuse";},
+        , backend_args ? { "-fstype" = "fuse"; }
-      bucket,
+        , bucket
-    } @ inputs: let
+        }@inputs:
-      s3fs-exec = "${pkgs.s3fs}/bin/s3fs";
-    in "${mount_dest} ${confToBackendArg backend_args} :${s3fs-exec}\#${bucket}";
-    personalStorage = [
-      (autofs-s3fs_entry {
-        mount_dest = "garden";
-        backend_args = {
-          "-fstype" = "fuse";
-          use_cache = "/tmp";
-          del_cache = null;
-          allow_other = null;
-          url = "https://v5h5.la11.idrivee2-14.com";
-          passwd_file = config.age.secrets."s3fs.digital-garden".path;
-          dbglevel = "debug"; # enable this for better debugging info in journalctl
-          uid = "1000"; # default user
-          gid = "100"; # users
-          umask = "003"; # others read only, fully shared for users group
-        };
-        bucket = "digital-garden";
-      })
-      (
         let
-          args = {
+          s3fs-exec = "${pkgs.s3fs}/bin/s3fs";
-            "-fstype" = "cifs";
+        in
-            credentials = config.age.secrets._nhitrl_cred.path;
+        "${mount_dest} ${confToBackendArg backend_args} :${s3fs-exec}\#${bucket}";
-            user = null;
+      personalStorage = [
-            uid = "1001";
+        (autofs-s3fs_entry {
-            gid = "100";
+          mount_dest = "garden";
-            dir_mode = "0777";
+          backend_args = {
-            file_mode = "0777";
+            "-fstype" = "fuse";
+            use_cache = "/tmp";
+            del_cache = null;
+            allow_other = null;
+            url = "https://v5h5.la11.idrivee2-14.com";
+            passwd_file = config.age.secrets."s3fs.digital-garden".path;
+            dbglevel = "debug"; # enable this for better debugging info in journalctl
+            uid = "1000"; # default user
+            gid = "100"; # users
+            umask = "003"; # others read only, fully shared for users group
           };
-        in "felia_d ${confToBackendArg args} ://felia.coati-celsius.ts.net/d"
+          bucket = "digital-garden";
-      )
+        })
-      (
+        (
-        let
+          let
-          args = {
+            args = {
-            "-fstype" = "cifs";
+              "-fstype" = "cifs";
-            credentials = config.age.secrets._nhitrl_cred.path;
+              credentials = config.age.secrets._nhitrl_cred.path;
-            user = null;
+              user = null;
-            uid = "1001";
+              uid = "1001";
-            gid = "100";
+              gid = "100";
-            dir_mode = "0777";
+              dir_mode = "0777";
-            file_mode = "0777";
+              file_mode = "0777";
-          };
+            };
-        in "felia_f ${confToBackendArg args} ://felia.coati-celsius.ts.net/f"
+          in
-      )
+          "felia_d ${confToBackendArg args} ://felia.coati-celsius.ts.net/d"
-    ];
+        )
-    persoConf = pkgs.writeText "auto.personal" (builtins.concatStringsSep "\n" personalStorage);
+        (
-  in {
+          let
-    enable = true;
+            args = {
-    # Creates /perso directory with every subdirectory declared by ${personalStorage}
+              "-fstype" = "cifs";
-    # as of now (might be stale), /perso/hot is the only mount accessible
+              credentials = config.age.secrets._nhitrl_cred.path;
-    # that is also managed by s3fs
+              user = null;
-    autoMaster = ''
+              uid = "1001";
-      /perso file:${persoConf}
+              gid = "100";
-    '';
+              dir_mode = "0777";
-    timeout = 30; # default: 600, 600 seconds (10 mins) of inactivity => unmount
+              file_mode = "0777";
-    # debug = true; # writes to more to journalctl
+            };
-  };
+          in
+          "felia_f ${confToBackendArg args} ://felia.coati-celsius.ts.net/f"
+        )
+      ];
+      persoConf = pkgs.writeText "auto.personal" (builtins.concatStringsSep "\n" personalStorage);
+    in
+    {
+      enable = true;
+      # Creates /perso directory with every subdirectory declared by ${personalStorage}
+      # as of now (might be stale), /perso/hot is the only mount accessible
+      # that is also managed by s3fs
+      autoMaster = ''
+        /perso file:${persoConf}
+      '';
+      timeout = 30; # default: 600, 600 seconds (10 mins) of inactivity => unmount
+      # debug = true; # writes to more to journalctl
+    };
 }

modules/tailscale.sys.nix

@@ -1,25 +1,22 @@
-{
+{ pkgs
-  pkgs,
+, config
-  config,
+, lib
-  lib,
+, ...
-  ...
+}: let cfg = config.mod.tailscale; in {
-}: let
+  options.mod.tailscale = { 
-  cfg = config.mod.tailscale;
-in {
-  options.mod.tailscale = {
     enable = lib.mkEnableOption "tailscale";
   };
   config = lib.mkIf cfg.enable {
-    environment.systemPackages = [pkgs.tailscale];
+    environment.systemPackages = [ pkgs.tailscale ];
     services.tailscale.enable = true;
 
     systemd.services.tailscale-autoconnect = {
       description = "Automatically connects to Tailscale";
 
       # make sure tailscale is running before trying to connect to tailscale
-      after = ["network-pre.target" "tailscale.service"];
+      after = [ "network-pre.target" "tailscale.service" ];
-      wants = ["network-pre.target" "tailscale.service"];
+      wants = [ "network-pre.target" "tailscale.service" ];
-      wantedBy = ["multi-user.target"];
+      wantedBy = [ "multi-user.target" ];
 
       # set this service as a oneshot job
       serviceConfig.Type = "oneshot";
@@ -36,7 +33,7 @@ in {
 
         # ${pkgs.tailscale}/bin/tailscale up # blocks, doesn't give url
         # This time, configure device auth so that we authenticate from portal
-        # https://tailscale.com/kb/1099/device-authorization/#enable-device-authorization-for-your-network
+        # https://tailscale.com/kb/1099/device-authorization/#enable-device-authorization-for-your-network 
         ${pkgs.tailscale}/bin/tailscale up -authkey tskey-auth-kJcgTG5CNTRL-PUVFkk31z1bThHpfq3FC5b1jcMmkW2EYW
       '';
     };

modules/wifi.sys.nix

@@ -1,4 +1,4 @@
-{config, ...}: {
+{ config, ... }: {
   networking.wireless.enable = true;
   networking.wireless.environmentFile = config.age.secrets."wifi.env";
   networking.wireless.networks = {

native_configs/README.md

@@ -1,17 +1,3 @@
 # Native configs
 
-Contains all configurations that are written in their native configuration language.
+Contains all configurations that are written in their native language
-
-## Why native language?
-
-- Easier portability
-- Syntax highlighting and robust checking without needing to realize derivation
-- Nix can read from [JSON](https://nixos.org/manual/nix/stable/language/builtins.html#builtins-fromJSON),
-[TOML](https://nixos.org/manual/nix/stable/release-notes/rl-2.6.html#release-26-2022-01-24).
-- We have also managed to hack together a [fromYaml](./../nix-conf/lib/serde/default.nix),
-though it will not work for strictly pure builds or bootstrapping builds.
-
-## When to use Nix to generate config?
-
-- Original configuraiton language requires too much duplication that can be solved with Nix 
-

native_configs/neovim/init.fnl

@@ -1,721 +0,0 @@
-(vim.cmd "let data_dir = has('nvim') ? stdpath('data') . '/site' : '~/.vim'
-let plug_path = data_dir . '/autoload/plug.vim'
-if empty(glob(plug_path))
-    execute '!curl -fLo '.plug_path.' --create-dirs https://raw.githubusercontent.com/junegunn/vim-plug/master/plug.vim'
-    execute 'so '.plug_path
-endif
-")
-(local Plug (. vim.fn "plug#"))
-(local installed-plugins {})
-(each [_ path (ipairs (vim.api.nvim_list_runtime_paths))]
-  (local last-folder-start (path:find "/[^/]*$"))
-  (when last-folder-start
-    (local plugin-name (path:sub (+ last-folder-start 1)))
-    (tset installed-plugins plugin-name true)))
-(fn WPlug [plugin-path ...]
-  (let [plugin-name (string.lower (plugin-path:match "/([^/]+)$"))]
-    (when (not (. installed-plugins plugin-name)) (Plug plugin-path ...))))
-(vim.call "plug#begin")
-(WPlug :tjdevries/nlua.nvim)
-(WPlug :nvim-treesitter/nvim-treesitter)
-(WPlug :nvim-treesitter/nvim-treesitter-textobjects)
-(WPlug :nvim-telescope/telescope.nvim {:branch :0.1.x})
-(WPlug :nvim-telescope/telescope-fzf-native.nvim {:do "make >> /tmp/log 2>&1"})
-(WPlug :nvim-telescope/telescope-file-browser.nvim)
-(WPlug :neovim/nvim-lspconfig)
-(WPlug :hrsh7th/cmp-nvim-lsp)
-(WPlug :hrsh7th/cmp-path)
-(WPlug :hrsh7th/cmp-buffer)
-(WPlug :hrsh7th/cmp-cmdline)
-(WPlug :hrsh7th/nvim-cmp)
-(WPlug :onsails/lspkind-nvim)
-(WPlug :yioneko/nvim-yati {:tag "*"})
-(WPlug :nathanalderson/yang.vim)
-(WPlug :windwp/nvim-autopairs)
-(WPlug :windwp/nvim-ts-autotag)
-(WPlug :NMAC427/guess-indent.nvim)
-(WPlug :j-hui/fidget.nvim)
-(WPlug :numToStr/Comment.nvim)
-(WPlug :lewis6991/gitsigns.nvim)
-(WPlug :tpope/vim-fugitive)
-(WPlug :williamboman/mason.nvim)
-(WPlug :williamboman/mason-lspconfig.nvim)
-(WPlug :ThePrimeagen/harpoon)
-(WPlug :TimUntersberger/neogit)
-(WPlug :folke/trouble.nvim)
-(WPlug :tpope/vim-dispatch)
-(WPlug :clojure-vim/vim-jack-in)
-(WPlug :radenling/vim-dispatch-neovim)
-(WPlug :gennaro-tedesco/nvim-jqx)
-(WPlug :kylechui/nvim-surround)
-(WPlug :simrat39/rust-tools.nvim)
-(WPlug :simrat39/inlay-hints.nvim)
-(WPlug :gruvbox-community/gruvbox)
-(WPlug :nvim-lualine/lualine.nvim)
-(WPlug :lukas-reineke/indent-blankline.nvim)
-(WPlug :kyazdani42/nvim-web-devicons)
-(WPlug :m-demare/hlargs.nvim)
-(WPlug :folke/todo-comments.nvim)
-(WPlug :nvim-treesitter/nvim-treesitter-context)
-(WPlug :nvim-treesitter/playground)
-(WPlug :saadparwaiz1/cmp_luasnip)
-(WPlug :L3MON4D3/LuaSnip)
-(WPlug :mickael-menu/zk-nvim)
-(WPlug :arthurxavierx/vim-caser)
-(WPlug "~/local_repos/ts-ql")
-(vim.call "plug#end")
-(vim.cmd "if len(filter(values(g:plugs), '!isdirectory(v:val.dir)'))
-    PlugInstall --sync | autocmd VimEnter * so $MYVIMRC
-endif
-")
-(vim.api.nvim_create_autocmd [:VimEnter]
-                             {:callback (fn []
-                                          (fn named-term [term-idx term-name]
-                                            ((. (require :harpoon.term)
-                                                :gotoTerminal) term-idx)
-                                            (vim.cmd (.. ":exe \":file "
-                                                         term-name
-                                                         "\" | :bfirst")))
-
-                                          (named-term 4 "term:ctl")
-                                          (named-term 5 "term:dev")
-                                          (named-term 7 "term:repl")
-                                          (named-term 6 "term:repl2"))})
-(set vim.g.gruvbox_contrast_dark :soft)
-(set vim.g.gruvbox_contrast_light :soft)
-(set vim.opt.ignorecase true)
-(set vim.opt.smartcase true)
-(set vim.opt.incsearch true)
-(set vim.opt.number true)
-(set vim.opt.relativenumber true)
-(set vim.opt.autoindent true)
-(set vim.opt.smartindent true)
-(set vim.opt.expandtab true)
-(set vim.opt.exrc true)
-(set vim.opt.tabstop 4)
-(set vim.opt.softtabstop 4)
-(set vim.opt.shiftwidth 4)
-(set vim.opt.scrolloff 30)
-(set vim.opt.signcolumn :yes)
-(set vim.opt.colorcolumn :80)
-(set vim.opt.background :dark)
-(vim.api.nvim_create_user_command :Dark
-                                  (fn [opts]
-                                    (let [contrast (or (and (and opts.args
-                                                                 (> (string.len opts.args)
-                                                                    0))
-                                                            opts.args)
-                                                       vim.g.gruvbox_contrast_dark)]
-                                      (set vim.g.gruvbox_contrast_dark contrast)
-                                      (set vim.opt.background :dark)))
-                                  {:nargs "?"})
-(vim.api.nvim_create_user_command :Light
-                                  (fn [opts]
-                                    (let [contrast (or (and (and opts.args
-                                                                 (> (string.len opts.args)
-                                                                    0))
-                                                            opts.args)
-                                                       vim.g.gruvbox_contrast_light)]
-                                      (set vim.g.gruvbox_contrast_light
-                                           contrast)
-                                      (set vim.opt.background :light)))
-                                  {:nargs "?"})
-(set vim.opt.lazyredraw true)
-(set vim.opt.termguicolors true)
-(set vim.opt.cursorline true)
-(set vim.opt.swapfile false)
-(set vim.opt.backup false)
-(set vim.opt.undodir (.. (vim.fn.stdpath :state) :/.vim/undodir))
-(set vim.opt.undofile true)
-(set vim.opt.completeopt "menuone,noselect")
-(set vim.opt.updatetime 50)
-(set vim.g.mapleader " ")
-(set vim.g.maplocalleader ",")
-(vim.keymap.set [:n :v] :<Space> :<Nop> {:silent true})
-(vim.keymap.set :t :<Esc> "<C-\\><C-n>)")
-(vim.keymap.set [:n :i :v] :<c-l> :<Cmd>mode<Cr> {:desc ""})
-(vim.keymap.set :n "[d" vim.diagnostic.goto_prev)
-(vim.keymap.set :n "]d" vim.diagnostic.goto_next)
-(vim.keymap.set :n :<leader>e vim.diagnostic.open_float)
-(vim.keymap.set :n :<leader>q "<cmd>TroubleToggle loclist<cr>")
-(vim.keymap.set :n :<leader>wq "<cmd>TroubleToggle workspace_diagnostics<cr>")
-(vim.keymap.set :n :<leader>gg :<cmd>GuessIndent<cr>)
-(vim.cmd "colorscheme gruvbox\n")
-((. (require :hlargs) :setup))
-((. (require :nvim-web-devicons) :setup))
-((. (require :trouble) :setup))
-((. (require :todo-comments) :setup))
-(fn remap [mode key-cmd binded-fn opts]
-  (set-forcibly! opts (or opts {:remap true}))
-  (vim.keymap.set mode key-cmd binded-fn opts))
-((. (require :Comment) :setup))
-(set vim.opt.list true)
-(vim.opt.listchars:append "space:⋅")
-(vim.opt.listchars:append "eol:↴")
-((. (require :indent_blankline) :setup) {:show_end_of_line true
-                                         :space_char_blankline " "})
-(vim.api.nvim_create_user_command :HalfSpaces
-                                  (fn [opts]
-                                    (vim.api.nvim_command "set ts=2 sts=2 noet")
-                                    (vim.api.nvim_command :retab!)
-                                    (vim.api.nvim_command "set ts=1 sts=1 et")
-                                    (vim.api.nvim_command :retab)
-                                    (vim.api.nvim_command :GuessIndent))
-                                  {:nargs 0})
-(vim.api.nvim_create_user_command :DoubleSpaces
-                                  (fn [opts]
-                                    (vim.api.nvim_command "set ts=2 sts=2 noet")
-                                    (vim.api.nvim_command :retab!)
-                                    (vim.api.nvim_command "set ts=4 sts=4 et")
-                                    (vim.api.nvim_command :retab)
-                                    (vim.api.nvim_command :GuessIndent))
-                                  {:nargs 0})
-(local fb-actions (. (. (. (require :telescope) :extensions) :file_browser)
-                     :actions))
-((. (require :telescope) :setup) {:defaults {:mappings {:i {:<C-d> false
-                                                            :<C-u> false}}}
-                                  :extensions {:file_browser {:hiject_netrw true
-                                                              :mappings {:i {}
-                                                                         :n {:c fb-actions.create
-                                                                             :d fb-actions.remove
-                                                                             :e fb-actions.goto_home_dir
-                                                                             :f fb-actions.toggle_browser
-                                                                             :g fb-actions.goto_parent_dir
-                                                                             :h fb-actions.toggle_hidden
-                                                                             :m fb-actions.move
-                                                                             :o fb-actions.open
-                                                                             :r fb-actions.rename
-                                                                             :s fb-actions.toggle_all
-                                                                             :t fb-actions.change_cwd
-                                                                             :w fb-actions.goto_cwd
-                                                                             :y fb-actions.copy}}
-                                                              :theme (. ((. (require :telescope.themes)
-                                                                            :get_ivy))
-                                                                        :theme)}
-                                               :fzf {:case_mode :smart_case
-                                                     :fuzzy true
-                                                     :override_file_sorter true
-                                                     :override_generic_sorter true}}})
-(pcall (. (require :telescope) :load_extension) :fzf)
-(pcall (. (require :telescope) :load_extension) :file_browser)
-(remap :n :<C-p> :<cmd>Telescope<cr> {:desc "Open Telescope general search"})
-(remap :n :<leader>fm (fn []
-                        ((. (. (. (require :telescope) :extensions)
-                               :file_browser)
-                            :file_browser) {}))
-       {:desc "[F]ile [M]utation"})
-(remap :n :<leader>ff
-       (fn []
-         ((. (require :telescope.builtin) :find_files) {:follow false
-                                                        :hidden false
-                                                        :no_ignore false}))
-       {:desc "[F]ind [F]ile"})
-(remap :n :<leader>fa
-       (fn []
-         ((. (require :telescope.builtin) :find_files) {:follow true
-                                                        :hidden true
-                                                        :no_ignore true}))
-       {:desc "[F]ind [A]ll files"})
-(remap :n :<leader>fg
-       (fn []
-         ((. (require :telescope.builtin) :live_grep)))
-       {:desc "[F]ind by [G]rep"})
-(remap :n :<leader>fug
-       (fn []
-         ((. (require :telescope.builtin) :live_grep) {:glob_pattern "**/*"}))
-       {:desc "[F]ind by [u]nrestricted [G]rep"})
-(remap :n :<leader>fb
-       (fn []
-         ((. (require :telescope.builtin) :buffers)))
-       {:desc "[F]ind existing [B]uffers"})
-(remap :n :<leader>fh
-       (fn []
-         ((. (require :telescope.builtin) :help_tags)))
-       {:desc "[F]ind [H]elp"})
-(remap :n :<leader>fd
-       (fn []
-         ((. (require :telescope.builtin) :diagnostics)))
-       {:desc "[F]ind [D]iagnostics"})
-(remap :n :<leader>zf
-       (fn []
-         ((. (require :zk) :edit) {} {:multi_select false}))
-       {:desc "[Z]ettelkasten [F]iles"})
-(remap :n :<leader>zg (fn [] (vim.cmd ":ZkGrep"))
-       {:desc "[Z]ettelkasten [G]rep"})
-(for [i 1 9]
-  (vim.api.nvim_set_keymap :n (.. :<C-t> i) (.. ":tabn " i :<CR>)
-                           {:noremap true :silent true}))
-(set vim.o.showtabline 1)
-(set vim.o.tabline "%!v:lua.my_tabline()")
-(fn _G.my_tabline []
-  (var s "")
-  (for [i 1 (vim.fn.tabpagenr "$")]
-    (if (= i (vim.fn.tabpagenr)) (set s (.. s "%" i "T%#TabLineSel#"))
-        (set s (.. s "%" i "T%#TabLine#")))
-    (local tab (. (vim.fn.gettabinfo i) 1))
-    (local tabbuf tab.variables.buffers)
-    (var bufname :<unknown>)
-    (when tabbuf
-      (set bufname (. (. tabbuf tab.curwin) :name)))
-    (set s (.. s " " i " " (vim.fn.fnamemodify bufname ":t")))
-    (when (not= i (vim.fn.tabpagenr "$"))
-      (set s (.. s "%#TabLine#|%#TabLine#"))))
-  (.. s "%T%#TabLineFill#%="))
-(vim.api.nvim_set_keymap :n :<C-t>x
-                         ":tabdo if tabpagenr() > 1 | tabclose | endif<CR>"
-                         {:noremap true :silent true})
-(require :treesitter-context)
-((. (require :nvim-treesitter.configs) :setup) {:autotag {:enable true}
-                                                :highlight {:enable true
-                                                            :enable_vim_regex_highlighting true}
-                                                :incremental_selection {:enable true
-                                                                        :keymaps {:init_selection :<C-space>
-                                                                                  :node_decremental :<C-backspace>
-                                                                                  :node_incremental :<C-space>
-                                                                                  :pscope_incremental :<C-S>}}
-                                                :indent {:enable false}
-                                                :playground {:disable {}
-                                                             :enable true}
-                                                :textobjects {:select {:enable true
-                                                                       :keymaps {:ac "@class.outer"
-                                                                                 :af "@function.outer"
-                                                                                 :ic "@class.inner"
-                                                                                 :if "@function.inner"}
-                                                                       :lookahead true}}
-                                                :yati {:default_fallback :auto
-                                                       :default_lazy true
-                                                       :disable [:nix]
-                                                       :enable true}})
-((. (require :nvim-autopairs) :setup) {:check_ts true})
-(local parser-config
-       ((. (require :nvim-treesitter.parsers) :get_parser_configs)))
-(set parser-config.tsx.filetype_to_parsername [:javascript :typescript.tsx])
-(set parser-config.astro.filetype_to_parsername
-     [:javascript :typescript.tsx :astro])
-((. (require :guess-indent) :setup) {:auto_cmd true
-                                     :filetype_exclude [:netrw :tutor]})
-(remap :n :<leader>m
-       (fn []
-         ((. (require :harpoon.mark) :add_file)))
-       {:desc "[H]arpoon [M]ark"})
-(fn harpoon-nav [key nav-file-index lead-keybind]
-  (set-forcibly! lead-keybind (or lead-keybind :<leader>h))
-  (assert (= (type key) :string) "expect key to be string(keybind)")
-  (assert (and (= (type nav-file-index) :number) (>= nav-file-index 1))
-          "expect 1-indexed number for file index")
-  (remap :n (.. lead-keybind key)
-         (fn []
-           ((. (require :harpoon.ui) :nav_file) nav-file-index))
-         {:desc (.. "[H]arpoon navigate " (tostring nav-file-index))}))
-(harpoon-nav :f 1)
-(harpoon-nav :j 2)
-(harpoon-nav :d 3)
-(harpoon-nav :k 4)
-(remap :n :<leader>hh
-       (fn []
-         ((. (require :harpoon.ui) :toggle_quick_menu))))
-(for [i 1 10]
-  (harpoon-nav (tostring (% i 10)) i)
-  (remap :n (.. :<leader>t (tostring (% i 10)))
-         (fn []
-           ((. (require :harpoon.term) :gotoTerminal) i))))
-((. (require :neogit) :setup) {})
-(remap :n :<leader>gs (fn []
-                        ((. (require :neogit) :open) {}))
-       {:desc "[G]it [S]tatus"})
-((. (require :inlay-hints) :setup) {:eol {:right_align false}
-                                    :only_current_line false})
-(fn on-attach [client bufnr]
-  (fn nmap [keys func desc]
-    (when desc (set-forcibly! desc (.. "LSP: " desc)))
-    (vim.keymap.set :n keys func {:buffer bufnr : desc :noremap true}))
-
-  (nmap :<leader>rn vim.lsp.buf.rename "[R]e[n]ame")
-  (nmap :<leader>ca vim.lsp.buf.code_action "[C]ode [A]ction")
-  (vim.api.nvim_buf_set_option bufnr :omnifunc "v:lua.vim.lsp.omnifunc")
-  (nmap :<leader>df (fn [] (vim.lsp.buf.format {:async true}))
-        "[D]ocument [F]ormat")
-  (nmap :gd vim.lsp.buf.definition "[G]oto [D]efinition")
-  (nmap :gi vim.lsp.buf.implementation "[G]oto [I]mplementation")
-  (nmap :gr (. (require :telescope.builtin) :lsp_references))
-  (nmap :<leader>ds (. (require :telescope.builtin) :lsp_document_symbols)
-        "[D]ocument [S]ymbols")
-  (nmap :<leader>ws (. (require :telescope.builtin)
-                       :lsp_dynamic_workspace_symbols)
-        "[W]orkspace [S]ymbols")
-  (nmap :K vim.lsp.buf.hover "Hover Documentation")
-  (nmap :<C-k> vim.lsp.buf.signature_help "Signature Documentation")
-  (nmap :gD vim.lsp.buf.declaration "[G]oto [D]eclaration")
-  (nmap :gtd vim.lsp.buf.type_definition "[G]oto [T]ype [D]efinition")
-  (nmap :<leader>D vim.lsp.buf.type_definition "Type [D]efinition")
-  (nmap :<leader>wa vim.lsp.buf.add_workspace_folder "[W]orkspace [A]dd Folder")
-  (nmap :<leader>wr vim.lsp.buf.remove_workspace_folder
-        "[W]orkspace [R]emove Folder")
-  (nmap :<leader>wl
-        (fn []
-          (print (vim.inspect (vim.lsp.buf.list_workspace_folders))))
-        "[W]orkspace [L]ist Folders")
-  ((. (require :inlay-hints) :on_attach) client bufnr))
-(local cmp (require :cmp))
-(local luasnip (require :luasnip))
-(local lspkind (require :lspkind))
-(local source-mapping {:buffer "[Buffer]"
-                       :nvim_lsp "[LSP]"
-                       :nvim_lua "[Lua]"
-                       :path "[Path]"})
-(cmp.event:on :confirm_done ((. (require :nvim-autopairs.completion.cmp)
-                                :on_confirm_done)))
-(cmp.setup {:formatting {:format (fn [entry vim-item]
-                                   (set vim-item.kind
-                                        (lspkind.symbolic vim-item.kind
-                                                          {:mode :symbol}))
-                                   (set vim-item.menu
-                                        (. source-mapping entry.source_name))
-                                   (local maxwidth 80)
-                                   (set vim-item.abbr
-                                        (string.sub vim-item.abbr 1 maxwidth))
-                                   vim-item)}
-            :mapping (cmp.mapping.preset.insert {:<C-d> (cmp.mapping.scroll_docs 4)
-                                                 :<C-space> (cmp.mapping.complete)
-                                                 :<C-u> (cmp.mapping.scroll_docs (- 4))
-                                                 :<CR> (cmp.mapping.confirm {:behavior cmp.ConfirmBehavior.Replace
-                                                                             :select true})
-                                                 :<S-Tab> (cmp.mapping (fn [fallback]
-                                                                         (if (cmp.visible)
-                                                                             (cmp.select_prev_item)
-                                                                             (luasnip.jumpable (- 1))
-                                                                             (luasnip.jump (- 1))
-                                                                             (fallback)))
-                                                                       [:i :s])
-                                                 :<Tab> (cmp.mapping (fn [fallback]
-                                                                       (if (cmp.visible)
-                                                                           (cmp.select_next_item)
-                                                                           (luasnip.expand_or_jumpable)
-                                                                           (luasnip.expand_or_jump)
-                                                                           (fallback)))
-                                                                     [:i :s])})
-            :snippet {:expand (fn [args] (luasnip.lsp_expand args.body))}
-            :sources (cmp.config.sources [{:name :nvim_lsp}
-                                          {:name :luasnip}
-                                          {:name :buffer}
-                                          {:name :path}])})
-(local capabilities ((. (require :cmp_nvim_lsp) :default_capabilities)))
-(local servers [:clangd
-                :rust_analyzer
-                :pyright
-                :tsserver
-                :lua_ls
-                :cmake
-                :tailwindcss
-                :prismals
-                :rnix
-                :eslint
-                :terraformls
-                :tflint
-                :svelte
-                :astro
-                :clojure_lsp
-                :bashls
-                :yamlls
-                :ansiblels
-                :jsonls
-                :denols
-                :gopls
-                :nickel_ls
-                :pylsp])
-((. (require :mason) :setup) {:PATH :append
-                              :ui {:check_outdated_packages_on_open true
-                                   :icons {:package_installed "✓"
-                                           :package_pending "➜"
-                                           :package_uninstalled "✗"}}})
-((. (require :mason-lspconfig) :setup) {:automatic_installation false})
-(local inlay-hint-tsjs
-       {:includeInlayEnumMemberValueHints true
-        :includeInlayFunctionLikeReturnTypeHints true
-        :includeInlayFunctionParameterTypeHints true
-        :includeInlayParameterNameHints :all
-        :includeInlayPropertyDeclarationTypeHints true
-        :includeInlayVariableTypeHints true
-        :inlcudeInlayParameterNameHintsWhenArgumentMatchesName false})
-((. (require :mason-lspconfig) :setup_handlers) {1 (fn [server-name]
-                                                     ((. (. (require :lspconfig)
-                                                            server-name)
-                                                         :setup) {: capabilities
-                                                                                                                                                                                                                            :on_attach on-attach}))
-                                                 :denols (fn []
-                                                           ((. (. (require :lspconfig)
-                                                                  :denols)
-                                                               :setup) {: capabilities
-                                                                                                                                                                                                                                          :on_attach on-attach
-                                                                                                                                                                                                                                          :root_dir ((. (require :lspconfig.util)
-                                                                                                                                                                                                                                                        :root_pattern) :deno.json
-                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         :deno.jsonc)}))
-                                                 :lua_ls (fn []
-                                                           ((. (. (require :lspconfig)
-                                                                  :lua_ls)
-                                                               :setup) {: capabilities
-                                                                                                                                                                                                                                          :on_attach on-attach
-                                                                                                                                                                                                                                          :settings {:Lua {:diagnostics {:globals [:vim]}
-                                                                                                                                                                                                                                                           :format {:defaultConfig {:indent_size 4
-                                                                                                                                                                                                                                                                                    :indent_style :space}
-                                                                                                                                                                                                                                                                    :enable true}
-                                                                                                                                                                                                                                                           :hint {:enable true}
-                                                                                                                                                                                                                                                           :runtime {:path (vim.split package.path
-                                                                                                                                                                                                                                                                                      ";")
-                                                                                                                                                                                                                                                                     :version :LuaJIT}
-                                                                                                                                                                                                                                                           :telemetry {:enable false}
-                                                                                                                                                                                                                                                           :workspace {:library (vim.api.nvim_get_runtime_file ""
-                                                                                                                                                                                                                                                                                                               true)}}}}))
-                                                 :pyright (fn []
-                                                            ((. (. (require :lspconfig)
-                                                                   :pyright)
-                                                                :setup) {: capabilities
-                                                                                                                                                                                                                                              :on_attach on-attach
-                                                                                                                                                                                                                                              :settings {:pyright {:disableLanguageServices false
-                                                                                                                                                                                                                                                                   :disableOrganizeImports false}
-                                                                                                                                                                                                                                                         :python {:analysis {:autoImportCompletions true
-                                                                                                                                                                                                                                                                             :autoSearchPaths true
-                                                                                                                                                                                                                                                                             :diagnosticMode :openFilesOnly
-                                                                                                                                                                                                                                                                             :extraPaths {}
-                                                                                                                                                                                                                                                                             :logLevel :Information
-                                                                                                                                                                                                                                                                             :pythonPath :python
-                                                                                                                                                                                                                                                                             :stubPath :typings
-                                                                                                                                                                                                                                                                             :typeCheckingMode :basic
-                                                                                                                                                                                                                                                                             :typeshedPaths {}
-                                                                                                                                                                                                                                                                             :useLibraryCodeForTypes false
-                                                                                                                                                                                                                                                                             :venvPath ""}
-                                                                                                                                                                                                                                                                  :linting {:mypyEnabled true}}}}))
-                                                 :tsserver (fn []
-                                                             ((. (. (require :lspconfig)
-                                                                    :tsserver)
-                                                                 :setup) {: capabilities
-                                                                                                                                                                                                                                                  :on_attach on-attach
-                                                                                                                                                                                                                                                  :root_dir ((. (require :lspconfig.util)
-                                                                                                                                                                                                                                                                :root_pattern) :package.json)
-                                                                                                                                                                                                                                                  :settings {:javascript inlay-hint-tsjs
-                                                                                                                                                                                                                                                             :typescript inlay-hint-tsjs}}))
-                                                 :yamlls (fn []
-                                                           ((. (. (require :lspconfig)
-                                                                  :yamlls)
-                                                               :setup) {: capabilities
-                                                                                                                                                                                                                                          :on_attach on-attach
-                                                                                                                                                                                                                                          :settings {:yaml {:keyOrdering false}}}))})
-((. (require :rust-tools) :setup) {:dap {:adapter {:command :lldb-vscode
-                                                   :name :rt_lldb
-                                                   :type :executable}}
-                                   :server {: capabilities
-                                            :cmd [:rust-analyzer]
-                                            :on_attach (fn [client bufnr]
-                                                         (fn nmap [keys
-                                                                   func
-                                                                   desc]
-                                                           (when desc
-                                                             (set-forcibly! desc
-                                                                            (.. "LSP: "
-                                                                                desc)))
-                                                           (vim.keymap.set :n
-                                                                           keys
-                                                                           func
-                                                                           {:buffer bufnr
-                                                                            : desc
-                                                                            :noremap true}))
-
-                                                         (on-attach client
-                                                                    bufnr)
-                                                         (nmap :K
-                                                               (. (. (require :rust-tools)
-                                                                     :hover_actions)
-                                                                  :hover_actions)
-                                                               "Hover Documentation"))
-                                            :settings {:rust-analyzer {:cargo {:loadOutDirsFromCheck true}
-                                                                       :checkOnSave {:command :clippy
-                                                                                     :extraArgs [:--all
-                                                                                                 "--"
-                                                                                                 :-W
-                                                                                                 "clippy::all"]}
-                                                                       :procMacro {:enable true}
-                                                                       :rustfmt {:extraArgs [:+nightly]}}}
-                                            :standalone true}
-                                   :tools {:crate_graph {:backend :x11
-                                                         :enabled_graphviz_backends [:bmp
-                                                                                     :cgimage
-                                                                                     :canon
-                                                                                     :dot
-                                                                                     :gv
-                                                                                     :xdot
-                                                                                     :xdot1.2
-                                                                                     :xdot1.4
-                                                                                     :eps
-                                                                                     :exr
-                                                                                     :fig
-                                                                                     :gd
-                                                                                     :gd2
-                                                                                     :gif
-                                                                                     :gtk
-                                                                                     :ico
-                                                                                     :cmap
-                                                                                     :ismap
-                                                                                     :imap
-                                                                                     :cmapx
-                                                                                     :imap_np
-                                                                                     :cmapx_np
-                                                                                     :jpg
-                                                                                     :jpeg
-                                                                                     :jpe
-                                                                                     :jp2
-                                                                                     :json
-                                                                                     :json0
-                                                                                     :dot_json
-                                                                                     :xdot_json
-                                                                                     :pdf
-                                                                                     :pic
-                                                                                     :pct
-                                                                                     :pict
-                                                                                     :plain
-                                                                                     :plain-ext
-                                                                                     :png
-                                                                                     :pov
-                                                                                     :ps
-                                                                                     :ps2
-                                                                                     :psd
-                                                                                     :sgi
-                                                                                     :svg
-                                                                                     :svgz
-                                                                                     :tga
-                                                                                     :tiff
-                                                                                     :tif
-                                                                                     :tk
-                                                                                     :vml
-                                                                                     :vmlz
-                                                                                     :wbmp
-                                                                                     :webp
-                                                                                     :xlib
-                                                                                     :x11]
-                                                         :full true
-                                                         :output nil}
-                                           :executor (. (require :rust-tools/executors)
-                                                        :termopen)
-                                           :hover_actions {:auto_focus false
-                                                           :border [["╭"
-                                                                     :FloatBorder]
-                                                                    ["─"
-                                                                     :FloatBorder]
-                                                                    ["╮"
-                                                                     :FloatBorder]
-                                                                    ["│"
-                                                                     :FloatBorder]
-                                                                    ["╯"
-                                                                     :FloatBorder]
-                                                                    ["─"
-                                                                     :FloatBorder]
-                                                                    ["╰"
-                                                                     :FloatBorder]
-                                                                    ["│"
-                                                                     :FloatBorder]]}
-                                           :inlay_hints {:auto false
-                                                         :highlight :NonText
-                                                         :max_len_align false
-                                                         :max_len_align_padding 1
-                                                         :only_current_line true
-                                                         :other_hints_prefix "=> "
-                                                         :parameter_hints_prefix "<- "
-                                                         :right_align false
-                                                         :right_align_padding 7
-                                                         :show_parameter_hints true}
-                                           :on_initialized (fn []
-                                                             ((. (require :inlay-hints)
-                                                                 :set_all)))
-                                           :reload_workspace_from_cargo_toml true}})
-((. (require :zk) :setup) {:lsp {:auto_attach {:enable true
-                                               :filetypes [:markdown]}
-                                 :config {:cmd [:zk :lsp]
-                                          :name :zk
-                                          :on_attach on-attach}}
-                           :picker :telescope})
-((. (require :zk.commands) :add) :ZkOrphans
-                                 (fn [options]
-                                   (set-forcibly! options
-                                                  (vim.tbl_extend :force
-                                                                  {:orphan true}
-                                                                  (or options
-                                                                      {})))
-                                   ((. (require :zk) :edit) options
-                                                            {:title "Zk Orphans (unlinked notes)"})))
-((. (require :zk.commands) :add) :ZkGrep
-                                 (fn [match-ctor]
-                                   (var grep-str match-ctor)
-                                   (var ___match___ nil)
-                                   (if (or (= match-ctor nil) (= match-ctor ""))
-                                       (do
-                                         (vim.fn.inputsave)
-                                         (set grep-str
-                                              (vim.fn.input "Grep string: >"))
-                                         (vim.fn.inputrestore)
-                                         (set ___match___ {:match grep-str}))
-                                       (= (type match-ctor) :string)
-                                       (set ___match___ {:match grep-str}))
-                                   ((. (require :zk) :edit) ___match___
-                                                            {:mutli_select false
-                                                             :title (.. "Grep: '"
-                                                                        grep-str
-                                                                        "'")})))
-((. (require :gitsigns) :setup) {:signs {:add {:text "+"}
-                                         :change {:text "~"}
-                                         :changedelete {:text "~"}
-                                         :delete {:text "_"}
-                                         :topdelete {:text "‾"}}})
-((. (require :lualine) :setup) {:inactive_sections {:lualine_a {}
-                                                    :lualine_b {}
-                                                    :lualine_c [{1 :filename
-                                                                 :file_status true
-                                                                 :path 1}]
-                                                    :lualine_x [:location]
-                                                    :lualine_y {}
-                                                    :lualine_z {}}
-                                :options {:icons_enabled true}
-                                :sections {:lualine_a [:mode]
-                                           :lualine_b [:branch
-                                                       :diff
-                                                       :diagnostics]
-                                           :lualine_c [{1 :filename
-                                                        :file_status true
-                                                        :newfile_status false
-                                                        :path 1
-                                                        :symbols {:modified "[+]"
-                                                                  :newfile "[New]"
-                                                                  :readonly "[-]"
-                                                                  :unnamed "[Unnamed]"}}]
-                                           :lualine_x [:encoding
-                                                       :fileformat
-                                                       :filetype]
-                                           :lualine_y [:progress]
-                                           :lualine_z [:location]}})
-((. (require :nvim-surround) :setup) {})
-((. (require :tsql) :setup))
-((. (require :fidget) :setup) {:align {:bottom true :right true}
-                               :debug {:logging false :strict false}
-                               :fmt {:fidget (fn [fidget-name spinner]
-                                               (string.format "%s %s" spinner
-                                                              fidget-name))
-                                     :leftpad true
-                                     :max_width 0
-                                     :stack_upwards true
-                                     :task (fn [task-name message percentage]
-                                             (string.format "%s%s [%s]" message
-                                                            (or (and percentage
-                                                                     (string.format " (%s%%)"
-                                                                                    percentage))
-                                                                "")
-                                                            task-name))}
-                               :sources {:* {:ignore false}}
-                               :text {:commenced :Started
-                                      :completed :Completed
-                                      :done "✔"
-                                      :spinner :moon}
-                               :timer {:fidget_decay 2000
-                                       :spinner_rate 125
-                                       :task_decay 1000}
-                               :window {:blend 100
-                                        :border :none
-                                        :relative :editor
-                                        :zindex nil}})	

native_configs/ssh/config

@@ -1,3 +1,6 @@
+Host *
+    IdentityFile ~/.ssh/id_rsa
+
 # felia mirror on windows
 Host felia-win
     HostName felia.coati-celsius.ts.net
@@ -49,94 +52,3 @@ Host noami
     User htran
     Port 22
 
-Host sr1
-    HostName 10.30.76.46
-    User htran
-    Port 22
-    StrictHostKeyChecking no
-    HostKeyAlgorithms=+ssh-dss,ssh-rsa
-    KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1
-
-Host bgp1
-    HostName 10.111.100.113
-    User htran
-    Port 22
-    StrictHostKeyChecking no
-    HostKeyAlgorithms=+ssh-dss,ssh-rsa
-    KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1
-
-Host bgp2
-    HostName 10.111.100.114
-    User htran
-    Port 22
-    StrictHostKeyChecking no
-    HostKeyAlgorithms=+ssh-dss,ssh-rsa
-    KexAlgorithms +diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1
-Host d1-30
-    HostName 10.111.103.60
-    User htran
-    Port 22
-    StrictHostKeyChecking no
-    UserKnownHostsFile /dev/null
-    IdentityFile ~/.ssh/id_ed25519
-    IdentityFile ~/.ssh/id_rsa 
-
-Host d3l-3
-    HostName 10.111.103.65
-    User htran
-    Port 22
-    StrictHostKeyChecking no
-    UserKnownHostsFile /dev/null
-    IdentityFile ~/.ssh/id_ed25519
-    IdentityFile ~/.ssh/id_rsa 
-
-Host dev0
-    HostName 10.100.200.230
-    User htran
-    Port 22
-
-Host dev2
-    HostName 10.100.200.210
-    User htran
-    Port 22
-
-Host dev1
-    HostName 10.100.200.220
-    User htran
-    Port 22
-
-
-Host ztp-egi
-    HostName 10.23.27.201
-    User root
-    Port 22
-    
-Host goat
-    HostName 10.133.32.100
-    User "EGN NOC"
-    Port 22
-
-Host portal2
-    HostName portal2.egihosting.com
-    User root
-    Port 22
-
-Host egn-rest-api
-    HostName egn-rest-api.egihosting.com
-    User root
-    Port 22
-
-Host gl-egi
-    HostName gitlab.egihosting.com
-    User git
-    Port 22
-    IdentityFile ~/.ssh/id_ed25519
-
-Host 10.111.103.*
-    StrictHostKeyChecking no
-    UserKnownHostsFile /dev/null
-
-Host *
-    IdentityFile ~/.ssh/id_ed25519
-    IdentityFile ~/.ssh/id_rsa 
-

native_configs/starship/starship.toml

@@ -3,11 +3,6 @@
 [aws]
 symbol = "  "
 
-[c]
-disabled = false
-# commands = [ [ 'cc', '--version' ], [ 'gcc', '--version' ], [ 'clang', '--version' ] ]
-detect_extensions = ["c", "h", "cc", "cpp", "hh", "hpp"]
-
 [conda]
 symbol = " "
 

native_configs/tmux/tmux.conf

@@ -14,19 +14,7 @@ setw -g pane-base-index 1
 set-option -g renumber-windows on
 
 # status bar
-# set -g status-style 'bg=#333333 fg=#5eacd3'
+set -g status-style 'bg=#333333 fg=#5eacd3'
-# set -g status-interval 60
-# set -g status-right-style 'bg=#333333 fg=#5eacd3'
-# set -g status-right-length 50
-# set -g status-left " "
 
 # Keybinds
-# Enter copy mode with 'v' in vi mode
-bind-key -Tcopy-mode-vi v send-keys -X begin-selection
-
-# Copy selection with 'y' in vi mode
-bind-key -Tcopy-mode-vi y send-keys -X copy-selection-and-cancel
 set-window-option -g mode-keys vi
-
-# # Log
-# set-option -g history-file /tmp/.tmux.log

nix-conf/home-manager/base/alacritty.nix

@@ -1,51 +1,53 @@
-{
+{ config
-  config,
+, proj_root
-  proj_root,
+, myLib
-  myLib,
+, ...
-  ...
+}:
-}: let
+let
   inherit (myLib) fromYaml;
   actualConfig = fromYaml (builtins.readFile "${proj_root.config.path}//alacritty/alacritty.yml");
   cfg = config.base.alacritty;
-in {
+in
-  options.base.alacritty = {
+{
-    font.family = myLib.mkOption {
+  options.base.alacritty =
-      type = myLib.types.singleLineStr;
+    {
-      default = actualConfig.font.normal.family;
+      font.family = myLib.mkOption {
-      description = ''
+        type = myLib.types.singleLineStr;
-        The font family for Alacritty
+        default = actualConfig.font.normal.family;
-      '';
+        description = ''
-      example = "DroidSansMono NF";
+          The font family for Alacritty
+        '';
+        example = "DroidSansMono NF";
+      };
+      font.size = myLib.mkOption {
+        type = myLib.types.number;
+        default = actualConfig.font.size;
+        description = ''
+          The default font size for Alacritty. This is probably measured in px.
+        '';
+        example = 7.0;
+      };
+      enable = myLib.mkOption {
+        type = myLib.types.bool;
+        default = true;
+        description = ''
+          Enables alacritty
+        '';
+        example = true;
+      };
+      _actualConfig = myLib.mkOption {
+        type = myLib.types.attrs;
+        visible = false;
+        default = actualConfig;
+        description = "underlying default config";
+      };
+      additionalConfigPath = myLib.mkOption {
+        type = myLib.types.nullOr myLib.types.path;
+        visible = false;
+        default = null;
+        description = "impurely write our alacritty.yml to this path";
+      };
     };
-    font.size = myLib.mkOption {
-      type = myLib.types.number;
-      default = actualConfig.font.size;
-      description = ''
-        The default font size for Alacritty. This is probably measured in px.
-      '';
-      example = 7.0;
-    };
-    enable = myLib.mkOption {
-      type = myLib.types.bool;
-      default = true;
-      description = ''
-        Enables alacritty
-      '';
-      example = true;
-    };
-    _actualConfig = myLib.mkOption {
-      type = myLib.types.attrs;
-      visible = false;
-      default = actualConfig;
-      description = "underlying default config";
-    };
-    additionalConfigPath = myLib.mkOption {
-      type = myLib.types.nullOr myLib.types.path;
-      visible = false;
-      default = null;
-      description = "impurely write our alacritty.yml to this path";
-    };
-  };
 
   config.programs.alacritty = {
     enable = cfg.enable;

nix-conf/home-manager/base/darwin-spotlight.nix

@@ -1,54 +0,0 @@
-{
-  lib,
-  pkgs,
-  config,
-  ...
-}: {
-  # This patch exists since Darwin's search bar requires solid apps and not
-  # symlinked
-  # TODO: QA
-  # - [x] works for base case
-  # - [x] works for repeated case
-  # - [ ] works after base case, then removed
-  # - [ ] works for repeated case, then removed
-
-  # Copy GUI apps to "~/Applications/Home Manager Apps"
-  # Based on this comment: https://github.com/nix-community/home-manager/issues/1341#issuecomment-778820334
-  home.activation.patch-spotlight =
-    if pkgs.stdenv.isDarwin
-    then let
-      apps = pkgs.buildEnv {
-        name = "home-manager-applications";
-        paths = config.home.packages;
-        pathsToLink = "/Applications";
-      };
-    in
-      lib.hm.dag.entryAfter ["linkGeneration"] ''
-        # Install MacOS applications to the user environment.
-        HM_APPS="$HOME/Applications/Home Manager Apps"
-        # Reset current state
-        if [ -e "$HM_APPS" ]; then
-          $DRY_RUN_CMD mv "$HM_APPS" "$HM_APPS.$(date +%Y%m%d%H%M%S)"
-        fi
-        $DRY_RUN_CMD mkdir -p "$HM_APPS"
-        # .app dirs need to be actual directories for Finder to detect them as Apps.
-        # In the env of Apps we build, the .apps are symlinks. We pass all of them as
-        # arguments to cp and make it dereference those using -H
-        $DRY_RUN_CMD cp --archive -H --dereference ${apps}/Applications/* "$HM_APPS"
-        $DRY_RUN_CMD chmod +w -R "$HM_APPS"
-      ''
-    else "";
-  # We need this in case upstream home-manager changes the behavior of linking
-  # applications
-  home.activation.remove-patch-spotlight =
-    if pkgs.stdenv.isDarwin
-    then
-      lib.hm.dag.entryBefore ["checkLinkTargets"] ''
-        HM_APPS="$HOME/Applications/Home Manager Apps"
-        # Reset current state
-        if [ -e "$HM_APPS" ]; then
-          $DRY_RUN_CMD mv "$HM_APPS" "$HM_APPS.$(date +%Y%m%d%H%M%S)"
-        fi
-      ''
-    else "";
-}

nix-conf/home-manager/base/default.nix

@@ -1,4 +1,6 @@
-{nix-index-database, ...} @ inputs: {
+{nix-index-database
+,...
+}@inputs:{
   mkModuleArgs = import ./mkModuleArgs.nix;
   modules = [
     ./alacritty.nix

nix-conf/home-manager/base/git.nix

@@ -1,8 +1,8 @@
-{
+{ config
-  config,
+, myLib
-  myLib,
+, ...
-  ...
+}:
-}: let
+let
   cfg = config.base.git;
   baseAliases = {
     a = "add";
@@ -15,11 +15,12 @@
     co = "checkout";
     b = "branch";
   };
-in {
+in
+{
   options.base.git = {
     aliases = myLib.mkOption {
       type = myLib.types.attrs;
-      default = {};
+      default = { };
       example = baseAliases;
       description = ''
         Additional git aliases. This settings comes with base configuration.
@@ -49,7 +50,7 @@ in {
         .gitignore patterns that are applied in every repository.
         This is useful for IDE-specific settings.
       '';
-      example = [".direnv" "node_modules"];
+      example = [ ".direnv" "node_modules" ];
     };
     enable = myLib.mkOption {
       type = myLib.types.bool;

nix-conf/home-manager/base/graphics.nix

@@ -1,14 +1,11 @@
-{
+{ pkgs, config, lib, ... }:
-  pkgs,
+let
-  config,
-  lib,
-  ...
-}: let
   cfg = config.base.graphics;
   cfgEnable = cfg.enable or (cfg.useNixGL.defaultPackage != null);
   types = lib.types;
-in {
+in
-  imports = [./shells.nix];
+{
+  imports = [ ./shells.nix ];
   options.base.graphics = {
     enable = lib.mkEnableOption "graphics";
     _enable = lib.mkOption {
@@ -26,14 +23,14 @@ in {
         ];
       };
       defaultPackage = lib.mkOption {
-        type = types.nullOr (types.enum ["nixGLIntel" "nixGLNvidia" "nixGLNvidiaBumblebee"]);
+        type = types.nullOr (types.enum [ "nixGLIntel" "nixGLNvidia" "nixGLNvidiaBumblebee" ]);
         description = "Which nixGL package to be aliased as `nixGL` on the shell";
         default = null;
         example = "nixGLIntel";
       };
     };
   };
-  # NOTE: importing shells does not mean we're enabling everything, if we do mkDefault false
+  # importing shells does not mean we're enabling everything, if we do mkDefault false
   # but the dilemma is, if the user import BOTH graphics.nix and shells.nix
   # they will also need to do `config.base.shells.enable`
   # generally, we want the behavior: import means enable
@@ -44,6 +41,6 @@ in {
         nixGL = cfg.useNixGL.defaultPackage;
       };
     };
-    home.packages = [cfg.useNixGL.package];
+    home.packages = [ cfg.useNixGL.package ];
   };
 }

nix-conf/home-manager/base/keepass.nix

@@ -1,14 +1,10 @@
-{
+{ config, proj_root, pkgs, lib, ... }:
-  config,
+let
-  proj_root,
-  pkgs,
-  lib,
-  ...
-}: let
   cfg = config.base.keepass;
   trimNull = lib.filterAttrsRecursive (name: value: value != null);
-in {
+in
-  imports = [./graphics.nix];
+{
+  imports = [ ./graphics.nix ];
   options.base.keepass = {
     enable = lib.mkEnableOption "keepass";
     use_gui = lib.mkOption {
@@ -46,18 +42,12 @@ in {
     };
   };
   config = lib.mkIf cfg.enable {
-    home.packages =
+    home.packages = [
-      [
+      pkgs.kpcli-py # kp but is in cli
-        pkgs.kpcli-py # kp but is in cli
+    ] ++ (if cfg.use_gui or config.base.graphics._enable then [
-      ]
+      pkgs.keepass # Personal secret management
-      ++ (
+    ] else [ ]);
-        if cfg.use_gui or config.base.graphics._enable
+    home.file.".kp/config.ini".text = lib.generators.toINI { } (trimNull {
-        then [
-          pkgs.keepass # Personal secret management
-        ]
-        else []
-      );
-    home.file.".kp/config.ini".text = lib.generators.toINI {} (trimNull {
       default = {
         KEEPASSDB = cfg.path;
         KEEPASSDB_KEYFILE = cfg.keyfile_path;

nix-conf/home-manager/base/mkModuleArgs.nix

@@ -1,20 +1,20 @@
-# Turns given inputs into the standardized shape of the inputs to configure
+# Turns given inputs into the standardized shape of the inputs to configure  
 # custom base modules in this directory.
-{
+{ pkgs
-  pkgs,
+, lib ? pkgs.lib
-  lib ? pkgs.lib,
+, ...
-  ...
+}@inputs:
-} @ inputs: let
+let
   recursiveUpdate = lib.recursiveUpdate;
-  _lib = recursiveUpdate lib (import ../../lib {inherit pkgs lib;});
+  _lib = recursiveUpdate lib (import ../../lib { inherit pkgs lib; });
   proj_root = builtins.toString ./../../..;
 in
-  # TODO: Unpollute inputs
+# TODO: Unpollute inputs
-  recursiveUpdate inputs {
+recursiveUpdate inputs {
-    proj_root = {
+  proj_root = {
-      path = proj_root;
+    path = proj_root;
-      config.path = "${proj_root}/native_configs";
+    config.path = "${proj_root}/native_configs";
-      scripts.path = "${proj_root}/scripts";
+    scripts.path = "${proj_root}/scripts";
-    };
+  };
-    myLib = _lib;
+  myLib = _lib;
-  }
+}

nix-conf/home-manager/base/neovim.nix

@@ -1,91 +1,81 @@
-# TODO: vim-plug and Mason supports laziness. Probably worth it to explore incremental dependencies based on the project TODO: just install these things, then symlink to mason's bin directory
+# TODO: vim-plug and Mason supports laziness. Probably worth it to explore
+# incremental dependencies based on the project
+# TODO: just install these things, then symlink to mason's bin directory
 #
 # One thing to consider, though, /nix/store of `nix-shell` or `nix-develop`
-# might be different from `home-manager`'s (~/.nix_profile/bin/jq)
+# might be different from `home-manager`'s
-{
+{ pkgs, lib, config, proj_root, ... }:
-  pkgs,
+let
-  lib,
+  # NOTE: Failure 1: buildInputs is pretty much ignored
-  config,
+  #   my_neovim = pkgs.neovim-unwrapped.overrideDerivation (old: {
-  proj_root,
+  # # TODO: is there a more beautiful way to override propagatedBuildInputs?
-  ...
+  #     name = "hungtr-" + old.name;
-}: let
+  #     buildInputs = (old.buildInputs or []) ++ [
+  #       pkgs.tree-sitter # highlighting
+  #       rust_pkgs        # for potentially rust-analyzer
+  #       pkgs.fzf
+  #       pkgs.ripgrep
+  #       pkgs.zk
+  #       pkgs.fd
+  #     ];
+  # NOTE: Failure 2: propagatedBuildInputs probably only concerns dyn libs
+  #   });
+  # NOTE: Failure 3: must be unwrapped neovim because home-manager does the wrapping
+  # my_neovim = pkgs.neovim;
+
   # NOTE: Add packages to nvim_pkgs instead, so that it's available at userspace
   # and is added to the path after wrapping.
   # check: nix repl `homeConfigurations.hungtr.config.programs.neovim.finalPackage.buildCommand`
   # see: :/--suffix.*PATH
   # there should be mentions of additional packages
   my_neovim = pkgs.neovim-unwrapped;
-  rust_pkgs =
+  rust_pkgs = (pkgs.rust-bin.selectLatestNightlyWith
-    pkgs.rust-bin.selectLatestNightlyWith
     (
       toolchain:
-        toolchain.default.override {
+      toolchain.default.override {
-          extensions = ["rust-src" "rust-analyzer" "rust-docs" "rustfmt" "clippy" "miri"];
+        extensions = [ "rust-src" ];
-        }
+      }
-    );
+    ));
-  nvim_pkgs =
+  nvim_pkgs = [
-    [
+    # pkgs.gccStdenv
-      # pkgs.gccStdenv
+    pkgs.gcc
-      pkgs.tree-sitter
+    pkgs.tree-sitter
-      pkgs.fzf # file name fuzzy search
+    pkgs.fzf # file name fuzzy search
-      pkgs.ripgrep # content fuzzy search
+    pkgs.ripgrep # content fuzzy search
-      pkgs.zk # Zettelkasten (limited support)
+    pkgs.zk # Zettelkasten (limited support)
-      pkgs.fd # Required by a Telescope plugin (?)
+    pkgs.fd # Required by a Telescope plugin (?)
-      pkgs.stdenv.cc.cc.lib
+    pkgs.stdenv.cc.cc.lib
-      pkgs.rnix-lsp # doesn't work, Mason just installs it using cargo
+    pkgs.rnix-lsp  # doesn't work, Mason just installs it using cargo
-      pkgs.rust4cargo
+    pkgs.rust4cargo
-      pkgs.nickel
-      pkgs.nls
 
-      pkgs.go # doesn't work, Mason installs from runtime path
 
-      # Language-specific stuffs
+    # Language-specific stuffs
-      pkgs.sumneko-lua-language-server
+    pkgs.sumneko-lua-language-server
-      # pkgs.python3Packages.python-lsp-server
+    # pkgs.python3Packages.python-lsp-server
-      pkgs.nodePackages.pyright
+    pkgs.nodePackages.pyright
-      pkgs.python3Packages.pylint
+    pkgs.python3Packages.pylint
-      pkgs.python3Packages.flake8
+    pkgs.python3Packages.flake8
-      # FIXME: installing ansible from here just doesn't work :/
+    # pkgs.ansible-lint
-      # pkgs.ansible-lint
+    pkgs.python38Packages.ansible
-      # pkgs.python38Packages.ansible
+    pkgs.ansible-language-server
-      # pkgs.ansible-language-server
+    # TODO: the devShell should provide rust-analyzer so that 
-      # TODO: the devShell should provide rust-analyzer so that
+    # cargo test builds binaries compatible with rust-analyzer 
-      # cargo test builds binaries compatible with rust-analyzer
 
-      # pkgs.rust-analyzer
+    # pkgs.rust-analyzer
-      # rust_pkgs
+    # rust_pkgs
-      # pkgs.evcxr # Rust REPL for Conjure!
+    # pkgs.evcxr # Rust REPL for Conjure!
-    ]
+  ];
-    ++ lib.optionals (pkgs.stdenv.isDarwin) (
+in
-      let
+{
-        inherit (pkgs.darwin.apple_sdk.frameworks) System CoreFoundation;
-      in [
-        System
-        CoreFoundation
-      ]
-    );
-in {
   options.base.neovim = {
     enable = lib.mkOption {
       default = true;
       description = "enable personalized neovim as default editor";
       type = lib.types.bool;
       example = false;
-      f = let
-        adder = {
-          __functor = self: arg:
-            if builtins.isInt arg
-            then self // {x = self.x + arg;}
-            else self.x;
-          x = 0;
-        };
-      in {
-        what = adder 1 2 3 {};
-      };
     };
   };
   config = lib.mkIf config.base.neovim.enable {
-    # home-manager
     programs.neovim = {
       enable = true;
       package = my_neovim;
@@ -93,100 +83,23 @@ in {
       vimAlias = true;
       withPython3 = true;
       withNodeJs = true;
+      # Attempt 4: Correct way to make neovim aware of packages
+      # homeConfigurations.config.programs.neovim takes UNWRAPPED neovim
+      # and wraps it. 
+      # Ideally, we build our own neovim and add that to config.home.packages
+      # to share it with nixOS. But we don't really need to share
       extraPackages = nvim_pkgs;
-      extraLuaConfig = builtins.readFile "${proj_root.config.path}//neovim/init.lua";
+      # only for here for archive-documentation
-      plugins = let
+      # extraPython3Packages = (pypkgs: [
-        inherit
+      #   # pypkgs.python-lsp-server
-          (pkgs.vimPlugins)
+      #   pypkgs.ujson
-          plenary-nvim
+      # ]);
-          nvim-treesitter
+      # I use vim-plug, so I probably don't require packaging
-          nvim-treesitter-textobjects
+      # extraConfig actually writes to init-home-manager.vim (not lua)
-          nvim-treesitter-context
+      # https://github.com/nix-community/home-manager/pull/3287
-          telescope-fzf-native-nvim
+      # extraConfig = builtins.readFile "${proj_root}/neovim/init.lua";
-          telescope-file-browser-nvim
-          telescope-nvim
-          nvim-lspconfig
-          gruvbox-community
-          neodev-nvim
-          cmp-nvim-lsp
-          cmp-path
-          cmp-buffer
-          cmp-cmdline
-          nvim-cmp
-          lspkind-nvim
-          nvim-autopairs
-          nvim-ts-autotag
-          guess-indent-nvim
-          harpoon
-          zk-nvim
-          luasnip
-          fidget-nvim
-          rust-tools-nvim
-          cmp_luasnip
-          gitsigns-nvim
-          indent-blankline-nvim
-          lualine-nvim
-          mason-lspconfig-nvim
-          mason-nvim
-          neogit
-          nlua-nvim
-          nvim-jqx
-          nvim-surround
-          nvim-web-devicons
-          playground
-          todo-comments-nvim
-          trouble-nvim
-          vim-dispatch
-          vim-dispatch-neovim
-          vim-fugitive
-          vim-jack-in
-          ;
-      in [
-        plenary-nvim
-        nvim-treesitter.withAllGrammars
-        nvim-treesitter-textobjects
-        telescope-fzf-native-nvim
-        telescope-file-browser-nvim
-        telescope-nvim
-        nvim-lspconfig
-        gruvbox-community
-        neodev-nvim
-        cmp-nvim-lsp
-        cmp-path
-        cmp-buffer
-        cmp-cmdline
-        nvim-cmp
-        lspkind-nvim
-        nvim-autopairs
-        nvim-ts-autotag
-        guess-indent-nvim
-        harpoon
-        zk-nvim
-        luasnip
-        nvim-treesitter-context
-        fidget-nvim
-        rust-tools-nvim
-
-        cmp_luasnip
-        gitsigns-nvim
-        indent-blankline-nvim
-        lualine-nvim
-        mason-lspconfig-nvim
-        mason-nvim
-        neogit
-        nlua-nvim
-        nvim-jqx
-        nvim-surround
-        nvim-web-devicons
-        playground
-        todo-comments-nvim
-        trouble-nvim
-        vim-dispatch
-        vim-dispatch-neovim
-        vim-fugitive
-        vim-jack-in
-      ];
     };
     # home.packages = nvim_pkgs;
+    xdg.configFile."nvim/init.lua".source = "${proj_root.config.path}//neovim/init.lua";
   };
 }

nix-conf/home-manager/base/private_chromium.nix

@@ -1,13 +1,9 @@
 # TODO: maybe throw if base.graphics is not enabled?
 # Though, headless chromium might be possible
+{ config, pkgs, lib, ... }:
+let cfg = config.base.private_chromium;
+in
 {
-  config,
-  pkgs,
-  lib,
-  ...
-}: let
-  cfg = config.base.private_chromium;
-in {
   options.base.private_chromium = {
     enable = lib.mkOption {
       type = lib.types.bool;
@@ -18,41 +14,37 @@ in {
       '';
     };
   };
-  config = lib.mkIf (cfg.enable) {
+  config = lib.mkIf cfg.enable {
     # home.packages = [pkgs.ungoogled-chromium];
     programs.chromium = {
       enable = true;
       package = pkgs.ungoogled-chromium;
-      extensions = let
+      extensions =
-        # TODO: how about a chrome extension registry?
+        let
-        mkChromiumExtForVersion = browserVersion: {
+          mkChromiumExtForVersion = browserVersion: { id, sha256, extVersion, ... }:
-          id,
+            {
-          sha256,
+              inherit id;
-          extVersion,
+              crxPath = builtins.fetchurl {
-          ...
+                url = "https://clients2.google.com/service/update2/crx" +
-        }: {
+                  "?response=redirect" +
-          inherit id;
+                  "&acceptformat=crx2,crx3" +
-          crxPath = builtins.fetchurl {
+                  "&prodversion=${browserVersion}" +
-            url =
+                  "&x=id%3D${id}%26installsource%3Dondemand%26uc";
-              "https://clients2.google.com/service/update2/crx"
+                name = "${id}.crx";
-              + "?response=redirect"
+                inherit sha256;
-              + "&acceptformat=crx2,crx3"
+              };
-              + "&prodversion=${browserVersion}"
+              version = extVersion;
-              + "&x=id%3D${id}%26installsource%3Dondemand%26uc";
+            };
-            name = "${id}.crx";
+          mkChromiumExt = mkChromiumExtForVersion (lib.versions.major pkgs.ungoogled-chromium.version);
-            inherit sha256;
+        in
-          };
+        [
-          version = extVersion;
+          # vimium
-        };
+          (mkChromiumExt {
-        mkChromiumExt = mkChromiumExtForVersion (lib.versions.major pkgs.ungoogled-chromium.version);
+            id = "dbepggeogbaibhgnhhndojpepiihcmeb";
-      in [
+            sha256 = "00qhbs41gx71q026xaflgwzzridfw1sx3i9yah45cyawv8q7ziic";
-        # vimium
+            extVersion = "1.67.4";
-        (mkChromiumExt {
+          })
-          id = "dbepggeogbaibhgnhhndojpepiihcmeb";
+        ];
-          sha256 = "00qhbs41gx71q026xaflgwzzridfw1sx3i9yah45cyawv8q7ziic";
-          extVersion = "1.67.4";
-        })
-      ];
     };
   };
 }

nix-conf/home-manager/base/productive_desktop.nix

@@ -1,9 +1,9 @@
 # A module that takes care of a GUI-ful, productive desktop environment
-inputs @ {pkgs, ...}: {
+inputs@{ pkgs, ... }: {
   imports = [
     # slack
-    ({pkgs, ...}: {
+    ({ pkgs, ... }: {
-      home.packages = [
+      home.packages = [ 
         pkgs.slack
       ];
     })

nix-conf/home-manager/base/shells.nix

@@ -1,14 +1,14 @@
 # Configurations for shell stuffs.
-# Should probably be decoupled even more for each feature
+# Should probably be decoupled even more
+{ config
+, proj_root
+, myLib
+, pkgs
+, ...
+}:
+let cfg = config.base.shells;
+in
 {
-  config,
-  proj_root,
-  myLib,
-  pkgs,
-  ...
-}: let
-  cfg = config.base.shells;
-in {
   options.base.shells = {
     enable = myLib.mkOption {
       type = myLib.types.bool;
@@ -30,13 +30,14 @@ in {
     shellAliases = myLib.mkOption {
       type = myLib.types.attrs;
       description = "Shell command aliases";
-      default = {};
+      default = { };
       example = {
         nixGL = "nixGLIntel";
       };
     };
   };
   config = myLib.mkIf cfg.enable {
+    xdg.configFile."starship.toml".source = "${proj_root.config.path}//starship/starship.toml";
     # nix: Propagates the environment with packages and vars when enter (children of)
     # a directory with shell.nix-compatible and .envrc
     programs.direnv = {
@@ -51,37 +52,16 @@ in {
     };
     programs.tmux = {
       enable = true;
-      # extraConfigBeforePlugin = builtins.readFile "${proj_root.config.path}/tmux/tmux.conf";
-      plugins = let inherit (pkgs.tmuxPlugins) cpu net-speed; in [cpu net-speed];
       extraConfig = builtins.readFile "${proj_root.config.path}/tmux/tmux.conf";
     };
-    xdg.configFile."tmux/tmux.conf".text = myLib.mkOrder 600 ''
-      set -g status-right '#{cpu_bg_color} CPU: #{cpu_icon} #{cpu_percentage} | %a %h-%d %H:%M '
-    '';
-    # Colored ls
     programs.exa = {
       enable = true;
       enableAliases = true;
     };
-    # Make the shell look beautiful
     programs.starship = {
       enable = true;
       enableZshIntegration = true;
-      settings = let
-        native = builtins.fromTOML (builtins.readFile "${proj_root.config.path}/starship/starship.toml");
-        patch-nix = pkgs.lib.recursiveUpdate native {
-          # WARNING: home-manager fails on here for some reason. Likely not at the 
-          # validation phase (type-checking), but at evaluation phaase (stringify)
-          # c.commands = [
-          #   ["nix" "run" "nixpkgs#clang" "--" "--version"]
-          #   ["nix" "run" "nixpkgs#gcc" "--" "--version"]
-          # ];
-          c.commands = "fuk";
-        };
-      in
-        patch-nix;
     };
-    # Fuzzy finder. `fzf` for TUI, `fzf -f '<fuzzy query>'` for UNIX piping
     programs.fzf.enable = true;
     programs.bash = {
       enable = true;
@@ -92,12 +72,10 @@ in {
       enable = true;
       enableCompletion = true;
       enableAutosuggestions = true;
-      shellAliases =
+      shellAliases = {
-        {
+        nix-rebuild = "sudo nixos-rebuild switch";
-          nix-rebuild = "sudo nixos-rebuild switch";
+        hm-switch = "home-manager switch --flake";
-          hm-switch = "home-manager switch --flake";
+      } // (cfg.shellAliases or { });
-        }
-        // (cfg.shellAliases or {});
       history = {
         size = 10000;
         path = "${config.xdg.dataHome}/zsh/history";
@@ -111,13 +89,10 @@ in {
           "gitignore" # `gi list` -> `gi java >>.gitignore`
           "ripgrep" # adds completion for `rg`
           "rust" # compe for rustc/cargo
-          "poetry" # compe for poetry - Python's cargo
           # "vi-mode"   # edit promps with vi motions :)
         ];
       };
       sessionVariables = {
-        # Vim mode on the terminal
-
         # VI_MODE_RESET_PROMPT_ON_MODE_CHANGE = true;
         # VI_MODE_SET_CURSOR = true;
         # ZVM_VI_ESCAPE_BINDKEY = "";
@@ -125,11 +100,10 @@ in {
         ZVM_KEYTIMEOUT = 0.004; # 40ms, or subtly around 25 FPS. I'm a gamer :)
         ZVM_ESCAPE_KEYTIMEOUT = 0.004; # 40ms, or subtly around 25 FPS. I'm a gamer :)
       };
-      initExtra =
+      initExtra = (cfg.shellInitExtra or "") + ''
-        (cfg.shellInitExtra or "")
+        source ${pkgs.zsh-vi-mode}/share/zsh-vi-mode/zsh-vi-mode.plugin.zsh
-        + ''
+      '';
-          source ${pkgs.zsh-vi-mode}/share/zsh-vi-mode/zsh-vi-mode.plugin.zsh
+
-        '';
     };
   };
 }

nix-conf/home-manager/base/ssh.nix

@@ -1,11 +1,11 @@
+{ config
+, proj_root
+, myLib
+, ...
+}:
+let cfg = config.base.ssh;
+in
 {
-  config,
-  proj_root,
-  myLib,
-  ...
-}: let
-  cfg = config.base.ssh;
-in {
   options.base.ssh.enable = myLib.mkOption {
     type = myLib.types.bool;
     default = true;
@@ -17,6 +17,7 @@ in {
   config.programs.ssh = {
     inherit (cfg) enable;
     forwardAgent = true;
-    includes = ["${proj_root.config.path}/ssh/config"];
+    extraConfig = builtins.readFile "${proj_root.config.path}/ssh/config";
   };
 }
+

nix-conf/home-manager/default.nix

@@ -1,13 +1,11 @@
 # We use top-level nix-flake, so default.nix is basically just a wrapper around ./flake.nix
-(
+(import
-  import
   (
-    let
+    let 
       lock = builtins.fromJSON (builtins.readFile ./flake.lock);
-      c_ = import ./../../c_.nix;
+      c_ = import ./../../c_.nix {src = ./.;};
     in
-      c_.fetchTree lock.nodes.flake-compat.locked
+    c_.fetchTree lock.nodes.flake-compat.locked
   )
-  {src = ./.;}
+  { src = ./.; }
-)
+).defaultNix
-.defaultNix

nix-conf/home-manager/flake.nix

@@ -10,16 +10,13 @@
       "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
       "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
     ];
-    max-jobs = 12;
   };
   description = "simple home-manager config";
   inputs = {
     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
-    nixpkgs-latest.url = "github:nixos/nixpkgs";
     home-manager = {
       url = "github:nix-community/home-manager";
-      # url = "github:pegasust/home-manager/starship-config-type";
+      inputs.nixpkgs.follows = "nixpkgs";
-      follows = "nixpkgs";
     };
     flake-utils.url = "github:numtide/flake-utils";
     nixgl.url = "path:./../../out-of-tree/nixGL";
@@ -29,13 +26,14 @@
       url = "path:../../out-of-tree/flake-compat";
       flake = false;
     };
-    nix-boost.url = "git+https://git.pegasust.com/pegasust/nix-boost.git";
     kpcli-py = {
       url = "github:rebkwok/kpcli";
       flake = false;
     };
     neovim-nightly-overlay = {
-      url = "github:nix-community/neovim-nightly-overlay?rev=88a6c749a7d126c49f3374f9f28ca452ea9419b8";
+      url = "github:nix-community/neovim-nightly-overlay";
+      # Pin to a nixpkgs revision that doesn't have NixOS/nixpkgs#208103 yet
+      inputs.nixpkgs.url = "github:nixos/nixpkgs?rev=fad51abd42ca17a60fc1d4cb9382e2d79ae31836";
     };
     nix-index-database = {
       url = "github:mic92/nix-index-database";
@@ -43,88 +41,81 @@
     };
   };
 
-  outputs = flake_inputs @ {
+  outputs =
-    nixpkgs,
+    flake_inputs@{ nixpkgs
-    home-manager,
+    , home-manager
-    nixgl,
+    , nixgl
-    rust-overlay,
+    , rust-overlay
-    flake-utils,
+    , flake-utils
-    kpcli-py,
+    , kpcli-py
-    neovim-nightly-overlay,
+    , neovim-nightly-overlay
-    nix-boost,
+    , ...
-    nixpkgs-latest,
+    }:
-    ...
+    let
-  }: let
+      # config_fn:: system -> config
-    # config_fn:: system -> config
+      cross_platform = config_fn: ({
-    cross_platform = config_fn: {
+        packages = builtins.foldl'
-      packages =
+          (prev: system: prev // {
-        builtins.foldl'
-        (prev: system:
-          prev
-          // {
             "${system}" = config_fn system;
           })
-        {}
+          { }
-        flake-utils.lib.defaultSystems;
+          flake-utils.lib.defaultSystems;
-    };
+      });
-  in
+    in
-    cross_platform (system: let
+    cross_platform (system:
-      overlays = import ./overlays.nix (flake_inputs // {inherit system;});
+    let
+      overlays = import ./../../overlays.nix (flake_inputs // {inherit system;});
       # pkgs = nixpkgs.legacyPackages.${system}.appendOverlays overlays;
       pkgs = import nixpkgs {
         inherit system overlays;
-        config = {allowUnfree = true;};
+        config = { allowUnfree = true; };
       };
       # lib = (import ../lib { inherit pkgs; lib = pkgs.lib; });
       base = import ./base flake_inputs;
       inherit (base) mkModuleArgs;
 
-      nerd_font_module = {
+      nerd_font_module = { config, pkgs, ... }: {
-        config,
-        pkgs,
-        ...
-      }: {
         fonts.fontconfig.enable = true;
         home.packages = [
-          # list of fonts are available at https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/data/fonts/nerdfonts/shas.nix
+          (pkgs.nerdfonts.override { fonts = [ "DroidSansMono" ]; })
-          (pkgs.nerdfonts.override {fonts = ["Hack"];})
         ];
-        base.alacritty.font.family = "Hack Nerd Font Mono";
+        # For some reasons, Windows es in the font name as DroidSansMono NF
+        # so we need to override this
+        base.alacritty.font.family = "DroidSansMono Nerd Font";
       };
-    in {
+    in
+    {
       debug = {
         inherit overlays pkgs base;
       };
-      homeConfigurations = let
+      homeConfigurations =
-        x11_wsl = ''
+        let
-          # x11 output for WSL
+          x11_wsl = ''
-          export DISPLAY=$(ip route list default | awk '{print $3}'):0
+            # x11 output for WSL
-          export LIBGL_ALWAYS_INDIRECT=1
+            export DISPLAY=$(ip route list default | awk '{print $3}'):0
-        '';
+            export LIBGL_ALWAYS_INDIRECT=1
-      in {
+          '';
-        "hungtr" = home-manager.lib.homeManagerConfiguration {
+        in
-          inherit pkgs;
+        {
-          modules =
+          "hungtr" = home-manager.lib.homeManagerConfiguration {
-            base.modules
+            inherit pkgs;
-            ++ [
+            modules = base.modules ++ [
               ./home.nix
             ];
-          # optionally pass inarguments to module
+            # optionally pass inarguments to module
-          # we migrate this from in-place modules to allow flexibility
+            # we migrate this from in-place modules to allow flexibility
-          # in this case, we can add "home" to input arglist of home.nix
+            # in this case, we can add "home" to input arglist of home.nix
-          extraSpecialArgs = mkModuleArgs {
+            extraSpecialArgs = mkModuleArgs {
-            inherit pkgs;
+              inherit pkgs;
-            myHome = {
+              myHome = {
-              username = "hungtr";
+                username = "hungtr";
-              homeDirectory = "/home/hungtr";
+                homeDirectory = "/home/hungtr";
+              };
             };
           };
-        };
+          "hungtr@bao" = home-manager.lib.homeManagerConfiguration {
-        "hungtr@bao" = home-manager.lib.homeManagerConfiguration {
+            inherit pkgs;
-          inherit pkgs;
+            modules = base.modules ++ [
-          modules =
-            base.modules
-            ++ [
               ./home.nix
               nerd_font_module
               ./base/productive_desktop.nix
@@ -137,23 +128,21 @@
                 base.graphics.useNixGL.enable = true;
               }
             ];
-          # optionally pass inarguments to module
+            # optionally pass inarguments to module
-          # we migrate this from in-place modules to allow flexibility
+            # we migrate this from in-place modules to allow flexibility
-          # in this case, we can add "home" to input arglist of home.nix
+            # in this case, we can add "home" to input arglist of home.nix
-          extraSpecialArgs = mkModuleArgs {
+            extraSpecialArgs = mkModuleArgs {
-            inherit pkgs;
+              inherit pkgs;
-            myHome = {
+              myHome = {
-              username = "hungtr";
+                username = "hungtr";
-              homeDirectory = "/home/hungtr";
+                homeDirectory = "/home/hungtr";
+              };
             };
           };
-        };
+          # Personal darwin, effectively serves as the Darwin edge channel
-        # Personal darwin, effectively serves as the Darwin edge channel
+          "hungtran" = home-manager.lib.homeManagerConfiguration { 
-        "hungtran" = home-manager.lib.homeManagerConfiguration {
+            inherit pkgs;
-          inherit pkgs;
+            modules = base.modules ++ [
-          modules =
-            base.modules
-            ++ [
               ./home.nix
               {
                 base.graphics.enable = false;
@@ -168,86 +157,83 @@
               {
                 base.private_chromium.enable = false;
               }
-              {
-                home.packages = [
-                  pkgs.postman
-                ];
-              }
             ];
-          extraSpecialArgs = mkModuleArgs {
+            extraSpecialArgs = mkModuleArgs {
-            inherit pkgs;
+              inherit pkgs;
-            myHome = {
+              myHome = {
-              username = "hungtran";
+                username = "hungtran";
-              homeDirectory = "/Users/hungtran";
+                homeDirectory = "/Users/hungtran";
+              };
             };
           };
-        };
+          # Work darwin
-        # Work darwin
+          "htran" = home-manager.lib.homeManagerConfiguration { 
-        "htran" = home-manager.lib.homeManagerConfiguration {
+            inherit pkgs;
-          inherit pkgs;
+            modules = base.modules ++ [
-          modules =
-            base.modules
-            ++ [
               ./home.nix
-              ./base/productive_desktop.nix
-              ./base/darwin-spotlight.nix
-              {
-                base.private_chromium.enable = false;
-              }
-              nerd_font_module
               {
                 base.graphics.enable = false;
                 # don't want to deal with GL stuffs on mac yet :/
                 base.graphics.useNixGL.defaultPackage = null;
+                # NOTE: this actually does not exist
+                base.keepass.path = "/Users/htran/keepass.kdbx";
                 base.alacritty.font.size = 11.0;
                 base.git.name = "Hung";
                 base.git.email = "htran@egihosting.com";
               }
-              {
+              nerd_font_module
-                home.packages = [
-                  pkgs.postman
-                ];
-              }
-              {base.keepass.enable = pkgs.lib.mkForce false;}
             ];
-          extraSpecialArgs = mkModuleArgs {
+            extraSpecialArgs = mkModuleArgs {
-            inherit pkgs;
+              inherit pkgs;
-            myHome = {
+              myHome = {
-              username = "htran";
+                username = "htran";
-              homeDirectory = "/Users/htran";
+                homeDirectory = "/Users/htran";
-            };
-          };
-        };
-        "nixos@Felia" = home-manager.lib.homeManagerConfiguration {
-          inherit pkgs;
-          modules = [
-            ./home.nix
-            {
-              base.shells = {
-                shellInitExtra =
-                  ''
-                  ''
-                  + x11_wsl;
               };
-            }
-          ];
-          # optionally pass inarguments to module
-          # we migrate this from in-place modules to allow flexibility
-          # in this case, we can add "home" to input arglist of home.nix
-          extraSpecialArgs = mkModuleArgs {
-            inherit pkgs;
-            myHome = {
-              username = "nixos";
-              homeDirectory = "/home/nixos";
             };
           };
-        };
+          "nixos@Felia" = home-manager.lib.homeManagerConfiguration {
-        # Personal laptop
+            inherit pkgs;
-        hwtr = home-manager.lib.homeManagerConfiguration {
+            modules = [
-          inherit pkgs;
+              ./home.nix
-          modules =
+              {
-            base.modules
+                base.shells = {
-            ++ [
+                  shellInitExtra = ''
+                '' + x11_wsl;
+                };
+              }
+            ];
+            # optionally pass inarguments to module
+            # we migrate this from in-place modules to allow flexibility
+            # in this case, we can add "home" to input arglist of home.nix
+            extraSpecialArgs = mkModuleArgs {
+              inherit pkgs;
+              myHome = {
+                username = "nixos";
+                homeDirectory = "/home/nixos";
+              };
+            };
+          };
+          # NOTE: This is never actually tested. This is for Ubuntu@Felia
+          # "ubuntu_admin" = home-manager.lib.homeManagerConfiguration {
+          #   inherit pkgs;
+          #   modules = [
+          #     ./home.nix
+          #   ];
+          #   extraSpecialArgs = {
+          #     myLib = lib;
+          #     myHome = {
+          #       username = "ubuntu_admin";
+          #       homeDirectory = "/home/ubuntu_admin";
+          #       shellInitExtra = ''
+          #       '' + x11_wsl;
+          #     };
+          #   };
+          # };
+
+          # Personal laptop
+          hwtr = home-manager.lib.homeManagerConfiguration {
+            inherit pkgs;
+            modules = base.modules ++ [
               ./home.nix
               ./base/graphics.nix
               {
@@ -258,17 +244,17 @@
               ./base/productive_desktop.nix
             ];
 
-          extraSpecialArgs = mkModuleArgs {
+            extraSpecialArgs = mkModuleArgs {
-            inherit pkgs;
+              inherit pkgs;
-            myHome = {
+              myHome = {
-              username = "hwtr";
+                username = "hwtr";
-              homeDirectory = "/home/hwtr";
+                homeDirectory = "/home/hwtr";
-              packages = [
+                packages = [
-                pkgs.postman
+                  pkgs.postman
-              ];
+                ];
+              };
             };
           };
         };
-      };
     });
 }

nix-conf/home-manager/fromYamlSandbox/flake.lock

@@ -0,0 +1,44 @@
+{
+  "nodes": {
+    "from-yaml": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1667993008,
+        "narHash": "sha256-X5RWyebq+j56mUGGCmZTVcJBy6Y/QgFEMHklaz+GOt0=",
+        "owner": "pegasust",
+        "repo": "fromYaml",
+        "rev": "23d2616051f5a781dcfe2915a526925fd9cdd08c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "pegasust",
+        "repo": "fromYaml",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1667811565,
+        "narHash": "sha256-HYml7RdQPQ7X13VNe2CoDMqmifsXbt4ACTKxHRKQE3Q=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "667e5581d16745bcda791300ae7e2d73f49fff25",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "from-yaml": "from-yaml",
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

nix-conf/home-manager/fromYamlSandbox/flake.nix

@@ -0,0 +1,111 @@
+{
+  inputs = {
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    from-yaml = {
+      url = "github:pegasust/fromYaml";
+      flake = false;
+    };
+  };
+  outputs = { nixpkgs, from-yaml, ... }:
+    let
+      system = "x86_64-linux";
+      pkgs = import nixpkgs { inherit system; };
+      lib = {
+        fromYaml = import "${from-yaml}/fromYaml.nix" { lib = pkgs.lib; };
+      };
+    in
+    {
+      inherit nixpkgs;
+      inherit from-yaml;
+      inherit lib;
+      inherit pkgs;
+      fromYamlFn = lib.fromYaml;
+      yamlCmd = str: (builtins.fromJSON (pkgs.runCommand "echo ${str} | yq"));
+      test_0 = ''
+        key_bindings:
+          - hello:
+              "N"
+      '';
+      key_bind = ''
+        key_bindings:
+          - { key: N, mods: Control, action: CreateNewWindow }
+          # - { key: Paste,                                       action: Paste          }
+          # - { key: Copy,                                        action: Copy           }
+          #- { key: L,         mods: Control,                    action: ClearLogNotice }
+          #- { key: L,         mods: Control, mode: ~Vi|~Search, chars: "\x0c"          }
+          #- { key: PageUp,    mods: Shift,   mode: ~Alt,        action: ScrollPageUp   }
+          #- { key: PageDown,  mods: Shift,   mode: ~Alt,        action: ScrollPageDown }
+          #- { key: Home,      mods: Shift,   mode: ~Alt,        action: ScrollToTop    }
+          #- { key: End,       mods: Shift,   mode: ~Alt,        action: ScrollToBottom }
+
+          # Vi Mode
+          #- { key: Space,  mods: Shift|Control, mode: ~Search,    action: ToggleViMode            }
+          - { key: Escape, mods: Shift, mode: ~Search, action: ToggleViMode }
+          #- { key: Space,  mods: Shift|Control, mode: Vi|~Search, action: ScrollToBottom          }
+          #- { key: Escape,                      mode: Vi|~Search, action: ClearSelection          }
+          #- { key: I,                           mode: Vi|~Search, action: ToggleViMode            }
+          #- { key: I,                           mode: Vi|~Search, action: ScrollToBottom          }
+          #- { key: C,      mods: Control,       mode: Vi|~Search, action: ToggleViMode            }
+          #- { key: Y,      mods: Control,       mode: Vi|~Search, action: ScrollLineUp            }
+          #- { key: E,      mods: Control,       mode: Vi|~Search, action: ScrollLineDown          }
+          #- { key: G,                           mode: Vi|~Search, action: ScrollToTop             }
+          #- { key: G,      mods: Shift,         mode: Vi|~Search, action: ScrollToBottom          }
+          #- { key: B,      mods: Control,       mode: Vi|~Search, action: ScrollPageUp            }
+          #- { key: F,      mods: Control,       mode: Vi|~Search, action: ScrollPageDown          }
+          #- { key: U,      mods: Control,       mode: Vi|~Search, action: ScrollHalfPageUp        }
+          #- { key: D,      mods: Control,       mode: Vi|~Search, action: ScrollHalfPageDown      }
+          #- { key: Y,                           mode: Vi|~Search, action: Copy                    }
+          #- { key: Y,                           mode: Vi|~Search, action: ClearSelection          }
+          #- { key: Copy,                        mode: Vi|~Search, action: ClearSelection          }
+          #- { key: V,                           mode: Vi|~Search, action: ToggleNormalSelection   }
+          #- { key: V,      mods: Shift,         mode: Vi|~Search, action: ToggleLineSelection     }
+          #- { key: V,      mods: Control,       mode: Vi|~Search, action: ToggleBlockSelection    }
+          #- { key: V,      mods: Alt,           mode: Vi|~Search, action: ToggleSemanticSelection }
+          #- { key: Return,                      mode: Vi|~Search, action: Open                    }
+          #- { key: Z,                           mode: Vi|~Search, action: CenterAroundViCursor    }
+          #- { key: K,                           mode: Vi|~Search, action: Up                      }
+          #- { key: J,                           mode: Vi|~Search, action: Down                    }
+          #- { key: H,                           mode: Vi|~Search, action: Left                    }
+          #- { key: L,                           mode: Vi|~Search, action: Right                   }
+          #- { key: Up,                          mode: Vi|~Search, action: Up                      }
+          #- { key: Down,                        mode: Vi|~Search, action: Down                    }
+          #- { key: Left,                        mode: Vi|~Search, action: Left                    }
+          #- { key: Right,                       mode: Vi|~Search, action: Right                   }
+          #- { key: Key0,                        mode: Vi|~Search, action: First                   }
+          #- { key: Key4,   mods: Shift,         mode: Vi|~Search, action: Last                    }
+          #- { key: Key6,   mods: Shift,         mode: Vi|~Search, action: FirstOccupied           }
+          #- { key: H,      mods: Shift,         mode: Vi|~Search, action: High                    }
+          #- { key: M,      mods: Shift,         mode: Vi|~Search, action: Middle                  }
+          #- { key: L,      mods: Shift,         mode: Vi|~Search, action: Low                     }
+          #- { key: B,                           mode: Vi|~Search, action: SemanticLeft            }
+          #- { key: W,                           mode: Vi|~Search, action: SemanticRight           }
+          #- { key: E,                           mode: Vi|~Search, action: SemanticRightEnd        }
+          #- { key: B,      mods: Shift,         mode: Vi|~Search, action: WordLeft                }
+          #- { key: W,      mods: Shift,         mode: Vi|~Search, action: WordRight               }
+          #- { key: E,      mods: Shift,         mode: Vi|~Search, action: WordRightEnd            }
+          #- { key: Key5,   mods: Shift,         mode: Vi|~Search, action: Bracket                 }
+          #- { key: Slash,                       mode: Vi|~Search, action: SearchForward           }
+          #- { key: Slash,  mods: Shift,         mode: Vi|~Search, action: SearchBackward          }
+          #- { key: N,                           mode: Vi|~Search, action: SearchNext              }
+          #- { key: N,      mods: Shift,         mode: Vi|~Search, action: SearchPrevious          }
+
+          # Search Mode
+          #- { key: Return,                mode: Search|Vi,  action: SearchConfirm         }
+          #- { key: Escape,                mode: Search,     action: SearchCancel          }
+          #- { key: C,      mods: Control, mode: Search,     action: SearchCancel          }
+          #- { key: U,      mods: Control, mode: Search,     action: SearchClear           }
+          #- { key: W,      mods: Control, mode: Search,     action: SearchDeleteWord      }
+          #- { key: P,      mods: Control, mode: Search,     action: SearchHistoryPrevious }
+          #- { key: N,      mods: Control, mode: Search,     action: SearchHistoryNext     }
+          #- { key: Up,                    mode: Search,     action: SearchHistoryPrevious }
+          #- { key: Down,                  mode: Search,     action: SearchHistoryNext     }
+          #- { key: Return,                mode: Search|~Vi, action: SearchFocusNext       }
+          #- { key: Return, mods: Shift,   mode: Search|~Vi, action: SearchFocusPrevious   }
+
+          # (Windows, Linux, and BSD only)
+          - { key: V,              mods: Control|Shift, mode: ~Vi,        action: Paste            }
+          - { key: C,              mods: Control|Shift,                   action: Copy             }
+      '';
+    };
+}
+

nix-conf/home-manager/home.nix

@@ -3,20 +3,18 @@
 # This file represents the base settings for each machine
 # Additional configurations goes to profiles/<user>
 # or inlined in flake.nix
-{
+{ config # Represents the realized final configuration
-  config,
+, pkgs # This is by default just ``= import <nixpkgs>{}`
-  # Represents the realized final configuration
+, myHome
-  pkgs,
+, myLib
-  # This is by default just ``= import <nixpkgs>{}`
+, option # The options we're given, this might be useful for typesafety?
-  myHome,
+, proj_root
-  myLib,
+, ...
-  option,
+}:
-  # The options we're given, this might be useful for typesafety?
+let
-  proj_root,
-  ...
-}: let
   inherit (myLib) fromYaml;
-in {
+in
+{
   imports = [
     ./base/neovim.nix
     ./base/keepass.nix
@@ -26,47 +24,43 @@ in {
     homeDirectory = myHome.homeDirectory;
     stateVersion = myHome.stateVersion or "22.05";
   };
-  home.packages = pkgs.lib.unique (
+  home.packages = pkgs.lib.unique ([
-    [
+    # pkgs.ncdu
-      # pkgs.ncdu
+    pkgs.rclone # cloud file operations
-      pkgs.rclone # cloud file operations
+    pkgs.htop # system diagnostics in CLI
-      pkgs.htop # system diagnostics in CLI
+    pkgs.ripgrep # content fuzzy search
-      pkgs.ripgrep # content fuzzy search
+    pkgs.unzip # compression
-      pkgs.unzip # compression
+    pkgs.zip # compression
-      pkgs.zip # compression
 
-      # cool utilities
+    # cool utilities
-      pkgs.yq-go # Yaml adaptor for jq (only pretty print, little query)
+    pkgs.yq # Yaml adaptor for jq (only pretty print, little query)
-      # pkgs.xorg.xclock # TODO: only include if have gui # For testing GL installation
+    # pkgs.xorg.xclock # TODO: only include if have gui # For testing GL installation
-      # pkgs.logseq # TODO: only include if have GL # Obsidian alt
+    # pkgs.logseq # TODO: only include if have GL # Obsidian alt
-      pkgs.mosh # Parsec for SSH
+    pkgs.mosh # Parsec for SSH
-      # pkgs.nixops_unstable # nixops v2 # insecure for now
+    pkgs.nixops_unstable # nixops v2 # insecure for now
-      pkgs.lynx # Web browser at your local terminal
+    pkgs.lynx # Web browser at your local terminal
-      pkgs.zk
+    pkgs.zk
 
-      # pkgs.tailscale # VPC;; This should be installed in system-nix
+    # pkgs.tailscale # VPC;; This should be installed in system-nix
-      pkgs.python310 # dev packages should be in project
+    pkgs.python310 # dev packages should be in project
-      # pkgs.python310.numpy
+    # pkgs.python310.numpy
-      # pkgs.python310Packages.tensorflow
+    # pkgs.python310Packages.tensorflow
-      # pkgs.python310Packages.scikit-learn
+    # pkgs.python310Packages.scikit-learn
-    ]
+  ] ++ (myHome.packages or [ ]) ++ (if pkgs.system == "x86_64-linux" then [
-    ++ (myHome.packages or [])
+    pkgs.logseq
-    ++ (
+  ] else [ ])
-      if pkgs.system == "x86_64-linux"
-      then [
-        pkgs.logseq
-      ]
-      else []
-    )
   );
 
-  ## Configs ##
+  ## Configs ## 
   xdg.configFile."zk/config.toml".source = "${proj_root.config.path}//zk/config.toml";
 
   ## Programs ##
   programs.jq = {
     enable = true;
   };
+  # not exist in home-manager
+  # have to do it at system level
+  # services.ntp.enable = true; # automatic time
   programs.nix-index = {
     enable = true;
     enableBashIntegration = true;

nix-conf/home-manager/htran/nix.conf

@@ -1,6 +0,0 @@
-accept-flake-config = true
-experimental-features = nix-command flakes
-post-build-hook = /etc/nix/upload-to-cache.sh
-trusted-users = root htran hungtran hwtr
-max-jobs = 8
-cores = 12

nix-conf/home-manager/hwtr/nix.conf

@@ -1,5 +1,3 @@
 accept-flake-config = true
 experimental-features = nix-command flakes
-post-build-hook = /etc/nix/upload-to-cache.sh
-trusted-users = root htran hungtran hwtr
 

nix-conf/home-manager/nix.conf

@@ -1,4 +0,0 @@
-accept-flake-config = true
-experimental-features = nix-command flakes
-post-build-hook = /etc/nix/upload-to-cache.sh
-trusted-users = root htran hungtran hwtr

nix-conf/home-manager/overlays.nix

@@ -1,71 +0,0 @@
-flake_input @ {
-  kpcli-py,
-  nixgl,
-  rust-overlay,
-  neovim-nightly-overlay,
-  system,
-  nix-boost,
-  nixpkgs-latest,
-  ...
-}: let
-  kpcli-py = final: prev: {
-    # use python3.9, which works because of cython somehow?
-    kpcli-py = final.poetry2nix.mkPoetryApplication {
-      projectDir = flake_input.kpcli-py;
-      overrides = final.poetry2nix.defaultPoetryOverrides.extend (self: super: {
-        # tableformatter requires setuptools
-        tableformatter = super.tableformatter.overridePythonAttrs (
-          old: {
-            buildInputs = (old.buildInputs or []) ++ [self.setuptools self.cython_3];
-            src = old.src;
-          }
-        );
-        kpcli = super.kpcli.overridePythonAttrs (old: {
-          buildInputs = (old.buildInputs or []) ++ [self.setuptools];
-        });
-
-        # ubersmith = super.ubersmith.overridePythonAttrs (old: {
-        #   buildInputs = builtins.filter (x: ! builtins.elem x [ ]) ((old.buildInputs or [ ]) ++ [
-        #     py-final.setuptools
-        #     py-final.pip
-        #   ]);
-        #
-        #   src = final.fetchFromGitHub {
-        #     owner = "jasonkeene";
-        #     repo = "python-ubersmith";
-        #     rev = "0c594e2eb41066d1fe7860e3a6f04b14c14f6e6a";
-        #     sha256 = "sha256-Dystt7CBtjpLkgzCsAif8WkkYYeLyh7VMehAtwoDGuM=";
-        #   };
-        # });
-      });
-    };
-  };
-
-  rust = final: prev: let
-    nightlyRustWithExts = exts:
-      final.rust-bin.selectLatestNightlyWith (
-        toolchain: (toolchain.minimal.override {
-          extensions = exts;
-        })
-      );
-    # https://rust-lang.github.io/rustup/concepts/profiles.html
-    rust-default-components = ["rust-docs" "rustfmt" "clippy"];
-    rust-dev-components = rust-default-components ++ ["rust-src" "rust-analyzer" "miri"];
-  in {
-    rust4devs = nightlyRustWithExts rust-dev-components;
-    rust4cargo = nightlyRustWithExts [];
-    rust4normi = nightlyRustWithExts rust-default-components;
-  };
-
-  vimPlugins = final: prev: {
-    inherit (nixpkgs-latest.legacyPackages.${system}) vimPlugins;
-  };
-in [
-  nix-boost.overlays.default
-  nixgl.overlays.default
-  rust-overlay.overlays.default
-  neovim-nightly-overlay.overlay
-  rust
-  kpcli-py
-  vimPlugins
-]

nix-conf/home-manager/profiles/default.nix

@@ -1,8 +1,5 @@
 # main module exporter for different configuration profiles
+{ pkgs, libs, ... } @ inputs:
 {
-  pkgs,
-  libs,
-  ...
-} @ inputs: {
   hwtr = import ./hwtr.nix;
 }

nix-conf/lib/default.nix

@@ -1,12 +1,12 @@
-{
+{ pkgs
-  pkgs,
+, lib ? pkgs.lib
-  lib ? pkgs.lib,
+, ...
-  ...
+}@flake_import:
-} @ flake_import: let
+let
-  serde = import ./serde {inherit pkgs lib;};
+  serde = import ./serde { inherit pkgs lib; };
   recursiveUpdate = lib.recursiveUpdate;
 in
-  recursiveUpdate (recursiveUpdate pkgs.lib lib) {
+recursiveUpdate (recursiveUpdate pkgs.lib lib) {
-    fromYaml = serde.fromYaml;
+  fromYaml = serde.fromYaml;
-    fromYamlPath = serde.fromYamlPath;
+  fromYamlPath = serde.fromYamlPath;
-  }
+}

nix-conf/lib/serde/default.nix

@@ -1,39 +1,30 @@
 # Takes care of serializing and deserializing to some formats
 # Blame: Pegasust<pegasucksgg@gmail.com>
 # TODO: Add to* formats from pkgs.formats.*
-{
+{ pkgs
-  pkgs,
+, lib
-  lib,
+} @ inputs:
-} @ inputs: let
+let
-  yamlToJsonDrv = yamlContent: outputPath:
+  yamlToJsonDrv = yamlContent: outputPath: pkgs.callPackage
-    pkgs.callPackage
+    ({ runCommand }:
-    ({runCommand}:
       # runCommand source: https://github.com/NixOS/nixpkgs/blob/master/pkgs/build-support/trivial-builders.nix#L33
-        runCommand outputPath
+      runCommand outputPath { inherit yamlContent; nativeBuildInputs = [ pkgs.yq ]; }
-        {
-          inherit yamlContent;
-          nativeBuildInputs = [pkgs.yq];
-        }
         # run yq which outputs '.' (no filter) on file at yamlPath
         # note that $out is passed onto the bash/sh script for execution
         ''
           echo "$yamlContent" | yq >$out
         '')
-    {};
+    { };
-in {
+in
+{
   # Takes in a yaml string and produces a derivation with translated JSON at $outputPath
   # similar to builtins.fromJSON, turns a YAML string to nix attrset
   fromYaml = yamlContent: builtins.fromJSON (builtins.readFile (yamlToJsonDrv yamlContent "any_output.json"));
-  fromYamlPath = yamlPath:
+  fromYamlPath = yamlPath: builtins.fromJSON (
-    builtins.fromJSON (
+    builtins.readFile (
-      builtins.readFile (
+      yamlToJsonDrv
-        yamlToJsonDrv
         (
-          builtins.readFile yamlPath
+          builtins.readFile yamlPath)
-        )
+        "any-output.json"));
-        "any-output.json"
+  # TODO: fromToml?
-      )
-    );
-  fromTOML = builtins.fromTOML;
-  fromJSON = builtins.fromJSON;
 }

nix-conf/pkgs/default.nix

@@ -1,12 +1,10 @@
 # This module aims to be merge (not inject/override) with top-level pkgs to provide
 # personalized/custom packages
-{
+{ pkgs
-  pkgs,
+, lib
-  lib,
+, naersk # rust packages
-  naersk,
+, ...
-  # rust packages
+}@pkgs_input: {
-  ...
-} @ pkgs_input: {
   # dot-hwtr = import "./dot-hwtr" pkgs_input;
   cargo-bacon = pkgs.rustPlatform.buildRustPackage rec {
     pname = "bacon";

nix-conf/pkgs/flake.nix

@@ -4,12 +4,10 @@
     rust-overlay.url = "github:oxalica/rust-overlay";
     naersk.url = "gihub:nix-community/naersk";
   };
-  outputs = {
+  outputs = { nixpkgs, rust-overlay, naersk }:
-    nixpkgs,
+    let
-    rust-overlay,
+      pkgs = import nixpkgs { overlays = [ rust-overlay.overlays.default ]; };
-    naersk,
+      lib = pkgs.lib;
-  }: let
+    in
-    pkgs = import nixpkgs {overlays = [rust-overlay.overlays.default];};
+    (import ./default.nix { inherit pkgs lib naersk; });
-    lib = pkgs.lib;
-  in (import ./default.nix {inherit pkgs lib naersk;});
 }

nix-conf/secrets.nix

@@ -10,8 +10,10 @@ let
   all = users // systems;
   # stands for calculus
   c_ = builtins;
-in {
+in
-  "system/secrets/s3fs.age".publicKeys = c_.attrValues all;
+{
-  "system/secrets/s3fs.digital-garden.age".publicKeys = c_.attrValues all;
+  "system/secrets/s3fs.age".publicKeys = c_.attrValues (all);
-  "system/secrets/_nhitrl.age".publicKeys = c_.attrValues all;
+  "system/secrets/s3fs.digital-garden.age".publicKeys = c_.attrValues (all);
+  "system/secrets/_nhitrl.age".publicKeys = c_.attrValues (all);
+
 }

nix-conf/system/configuration.nix

@@ -1,71 +1,61 @@
-{
+{ lib, pkgs, config, modulesPath, specialArgs, ... }:
-  lib,
+let
-  pkgs,
-  config,
-  modulesPath,
-  specialArgs,
-  ...
-}: let
   hostname = specialArgs.hostname;
   enableSSH = specialArgs.enableSSH or true;
-  _networking = lib.recursiveUpdate {hostName = hostname;} (specialArgs._networking or {});
+  _networking = lib.recursiveUpdate { hostName = hostname; } (specialArgs._networking or { });
-  _boot = specialArgs._boot or {};
+  _boot = specialArgs._boot or { };
-  _services = specialArgs._services or {};
+  _services = specialArgs._services or { };
   includeHardware = specialArgs.includeHardware or true;
   proj_root = builtins.toString ./../..;
 in
-  with lib; {
+with lib;
-    imports =
+{
-      (
+  imports = (if includeHardware then [
-        if includeHardware
+    "${proj_root}/hosts/${hostname}/hardware-configuration.nix"
-        then [
+  ] else [ ]) ++ [
-          "${proj_root}/hosts/${hostname}/hardware-configuration.nix"
+    "${modulesPath}/profiles/minimal.nix"
-        ]
+    "${proj_root}/modules/tailscale.sys.nix"
-        else []
+    "${proj_root}/modules/mosh.sys.nix"
-      )
+  ];
-      ++ [
+  boot = _boot;
-        "${modulesPath}/profiles/minimal.nix"
-        "${proj_root}/modules/tailscale.sys.nix"
-        "${proj_root}/modules/mosh.sys.nix"
-      ];
-    boot = _boot;
 
-    # prune old builds
+  # prune old builds
-    nix.settings.auto-optimise-store = true;
+  nix.settings.auto-optimise-store = true;
 
-    # Enable nix flakes
+  # Enable nix flakes
-    nix.package = pkgs.nixFlakes;
+  nix.package = pkgs.nixFlakes;
-    nix.extraOptions = ''
+  nix.extraOptions = ''
-      experimental-features = nix-command flakes
+    experimental-features = nix-command flakes
-    '';
+  '';
-    users.users.hungtr = {
+  users.users.hungtr = {
-      isNormalUser = true;
+    isNormalUser = true;
-      home = "/home/hungtr";
+    home = "/home/hungtr";
-      description = "pegasust/hungtr";
+    description = "pegasust/hungtr";
-      extraGroups = ["wheel" "networkmanager" "audio"];
+    extraGroups = [ "wheel" "networkmanager" "audio" ];
-    };
+  };
-    users.users.root = {
+  users.users.root = {
-      # openssh runs in root, no? This is because port < 1024 requires root.
+    # openssh runs in root, no? This is because port < 1024 requires root.
-      openssh.authorizedKeys.keys = lib.strings.splitString "\n" (builtins.readFile "${proj_root}/native_configs/ssh/authorized_keys");
+    openssh.authorizedKeys.keys = lib.strings.splitString "\n" (builtins.readFile "${proj_root}/native_configs/ssh/authorized_keys");
-    };
+  };
 
-    # Some basic programs
+  # Some basic programs
-    programs.neovim = {
+  programs.neovim = {
-      enable = true;
+    enable = true;
-      defaultEditor = true;
+    defaultEditor = true;
-    };
+  };
 
-    programs.git = {
+  programs.git = {
-      enable = true;
+    enable = true;
-      # more information should be configured under user level
+    # more information should be configured under user level
-      # See other config at @/home-nix
+    # See other config at @/home-nix
-    };
+  };
+
+  environment.systemPackages = [
+    pkgs.gnumake
+    pkgs.wget
+    pkgs.inetutils # network diag
+    pkgs.mtr # network diag
+    pkgs.sysstat # sys diag
+  ];
+}
 
-    environment.systemPackages = [
-      pkgs.gnumake
-      pkgs.wget
-      pkgs.inetutils # network diag
-      pkgs.mtr # network diag
-      pkgs.sysstat # sys diag
-    ];
-  }

nix-conf/system/flake.nix

@@ -7,227 +7,208 @@
     };
   };
 
-  outputs = {
+  outputs = { self, nixpkgs, agenix, ... }:
-    self,
+    let
-    nixpkgs,
+      lib = nixpkgs.lib;
-    agenix,
+      proj_root = ./../..;
-    ...
+      # TODO: Change respectively to the system or make a nix shell to alias `nix run github:ryantm/agenix -- `
-  }: let
+      base_modules = [
-    lib = nixpkgs.lib;
+        agenix.nixosModule
-    proj_root = ./../..;
+        {
-    # TODO: Change respectively to the system or make a nix shell to alias `nix run github:ryantm/agenix -- `
+          age.secrets.s3fs = {
-    base_modules = [
+            file = ./secrets/s3fs.age;
-      agenix.nixosModule
+            # mode = "600";  # owner + group only
-      {
+            # owner = "hungtr";
-        age.secrets.s3fs = {
+            # group = "users";
-          file = ../../secrets/s3fs.age;
+          };
-          # mode = "600";  # owner + group only
+          age.secrets."s3fs.digital-garden" = {
-          # owner = "hungtr";
+            file = ./secrets/s3fs.digital-garden.age;
-          # group = "users";
+          };
-        };
+          age.secrets._nhitrl_cred = {
-        age.secrets."s3fs.digital-garden" = {
+            file = ./secrets/_nhitrl.age;
-          file = ../../secrets/s3fs.digital-garden.age;
+          };
-        };
+          environment.systemPackages = [ agenix.defaultPackage.x86_64-linux ];
-        age.secrets._nhitrl_cred = {
+        }
-          file = ../../secrets/_nhitrl.age;
+      ];
-        };
+    in
-        environment.systemPackages = [agenix.defaultPackage.x86_64-linux];
+    {
-      }
+      # Windows with NixOS WSL
-    ];
+      nixosConfigurations.Felia = nixpkgs.lib.nixosSystem {
-  in {
+        system = "x86_64-linux";
-    # Windows with NixOS WSL
+        modules = base_modules ++ [
-    nixosConfigurations.Felia = nixpkgs.lib.nixosSystem {
-      system = "x86_64-linux";
-      modules =
-        base_modules
-        ++ [
           ./wsl-configuration.nix
           {
             system.stateVersion = "22.05";
           }
         ];
-      specialArgs = {
+        specialArgs = {
-        # includeHardware = false;
+          # includeHardware = false;
-        hostname = "Felia";
+          hostname = "Felia";
-        _services.openssh = {
+          _services.openssh = {
-          permitRootLogin = "no";
+            permitRootLogin = "no";
-          enable = true;
+            enable = true;
+          };
         };
       };
-    };
+      nixosConfigurations.lizzi = nixpkgs.lib.nixosSystem {
-    nixosConfigurations.lizzi = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
-      system = "x86_64-linux";
+        modules = base_modules ++ [
-      modules =
-        base_modules
-        ++ [
           ./configuration.nix
           {
             system.stateVersion = "22.05";
             mod.tailscale.enable = true;
           }
         ];
-      specialArgs = {
+        specialArgs = {
-        hostname = "lizzi";
+          hostname = "lizzi";
-        _networking = {
+          _networking = {
-          interfaces.eth1.ipv4.addresses = [
+            interfaces.eth1.ipv4.addresses = [{
-            {
               address = "71.0.0.1";
               prefixLength = 24;
-            }
+            }];
-          ];
+            firewall = {
-          firewall = {
+              enable = true;
+              allowedTCPPorts = [ 80 443 22 ];
+            };
+            useDHCP = false;
+            # required so that we get IP address from linode
+            interfaces.eth0.useDHCP = true;
+          };
+          _boot.loader.grub.enable = true;
+          _boot.loader.grub.version = 2;
+          _services.openssh = {
+            permitRootLogin = "no";
             enable = true;
-            allowedTCPPorts = [80 443 22];
           };
-          useDHCP = false;
+          _services.gitea = {
-          # required so that we get IP address from linode
+            enable = true;
-          interfaces.eth0.useDHCP = true;
+            stateDir = "/gitea";
-        };
+            rootUrl = "https://git.pegasust.com";
-        _boot.loader.grub.enable = true;
+            settings = {
-        _boot.loader.grub.version = 2;
+              repository = {
-        _services.openssh = {
+                "ENABLE_PUSH_CREATE_USER" = true;
-          permitRootLogin = "no";
+                "ENABLE_PUSH_CREATE_ORG" = true;
-          enable = true;
+              };
-        };
+            };
-        _services.gitea = {
+          };
-          enable = true;
+          # Highly suspect that thanks to nginx, ipv6 is disabled?
-          stateDir = "/gitea";
+          _services.nginx = {
-          rootUrl = "https://git.pegasust.com";
+            enable = true;
-          settings = {
+            clientMaxBodySize = "100m"; # Allow big file transfers over git :^)
-            repository = {
+            recommendedGzipSettings = true;
-              "ENABLE_PUSH_CREATE_USER" = true;
+            recommendedOptimisation = true;
-              "ENABLE_PUSH_CREATE_ORG" = true;
+            recommendedProxySettings = true;
+            recommendedTlsSettings = true;
+            virtualHosts."git.pegasust.com" = {
+              # Gitea hostname
+              sslCertificate = "/var/lib/acme/git.pegasust.com/fullchain.pem";
+              sslCertificateKey = "/var/lib/acme/git.pegasust.com/key.pem";
+              forceSSL = true; # Runs on port 80 and 443
+              locations."/".proxyPass = "http://localhost:3000/"; # Proxy to Gitea
             };
           };
         };
-        # Highly suspect that thanks to nginx, ipv6 is disabled?
-        _services.nginx = {
-          enable = true;
-          clientMaxBodySize = "100m"; # Allow big file transfers over git :^)
-          recommendedGzipSettings = true;
-          recommendedOptimisation = true;
-          recommendedProxySettings = true;
-          recommendedTlsSettings = true;
-          virtualHosts."git.pegasust.com" = {
-            # Gitea hostname
-            sslCertificate = "/var/lib/acme/git.pegasust.com/fullchain.pem";
-            sslCertificateKey = "/var/lib/acme/git.pegasust.com/key.pem";
-            forceSSL = true; # Runs on port 80 and 443
-            locations."/".proxyPass = "http://localhost:3000/"; # Proxy to Gitea
-          };
-        };
       };
-    };
+      # Generic machine
-    # Generic machine
+      nixosConfigurations.pixi = nixpkgs.lib.nixosSystem {
-    nixosConfigurations.pixi = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
-      system = "x86_64-linux";
+        modules = base_modules ++ [
-      modules =
-        base_modules
-        ++ [
           ./configuration.nix
           {
             system.stateVersion = "22.05";
           }
         ];
-      specialArgs = {
+        specialArgs = {
-        hostname = "pixi";
+          hostname = "pixi";
-        _networking = {
+          _networking = {
-          # interfaces.eth1.ipv4.addresses = [{
+            # interfaces.eth1.ipv4.addresses = [{
-          #   address = "71.0.0.1";
+            #   address = "71.0.0.1";
-          #   prefixLength = 24;
+            #   prefixLength = 24;
-          # }];
+            # }];
-          firewall = {
+            firewall = {
-            enable = false;
+              enable = false;
-            allowedTCPPorts = [80 443 22];
+              allowedTCPPorts = [ 80 443 22 ];
+            };
+            useDHCP = false;
+            # interfaces.eth0.useDHCP = true;
           };
-          useDHCP = false;
+          _boot.loader.grub.enable = true;
-          # interfaces.eth0.useDHCP = true;
+          _boot.loader.grub.version = 2;
-        };
+          _services.openssh = {
-        _boot.loader.grub.enable = true;
+            permitRootLogin = "no";
-        _boot.loader.grub.version = 2;
+            enable = true;
-        _services.openssh = {
+          };
-          permitRootLogin = "no";
+          _services.gitea = {
-          enable = true;
+            enable = true;
-        };
+            stateDir = "/gitea";
-        _services.gitea = {
+            rootUrl = "https://git.pegasust.com";
-          enable = true;
+            settings = {
-          stateDir = "/gitea";
+              repository = {
-          rootUrl = "https://git.pegasust.com";
+                "ENABLE_PUSH_CREATE_USER" = true;
-          settings = {
+                "ENABLE_PUSH_CREATE_ORG" = true;
-            repository = {
+              };
-              "ENABLE_PUSH_CREATE_USER" = true;
+            };
-              "ENABLE_PUSH_CREATE_ORG" = true;
+          };
+          _services.nginx = {
+            enable = true;
+            clientMaxBodySize = "100m"; # Allow big file transfers over git :^)
+            recommendedGzipSettings = true;
+            recommendedOptimisation = true;
+            recommendedProxySettings = true;
+            recommendedTlsSettings = true;
+            virtualHosts."git.pegasust.com" = {
+              # Gitea hostname
+              sslCertificate = "/var/lib/acme/git.pegasust.com/fullchain.pem";
+              sslCertificateKey = "/var/lib/acme/git.pegasust.com/key.pem";
+              forceSSL = true; # Runs on port 80 and 443
+              locations."/".proxyPass = "http://localhost:3000/"; # Proxy to Gitea
             };
           };
         };
-        _services.nginx = {
-          enable = true;
-          clientMaxBodySize = "100m"; # Allow big file transfers over git :^)
-          recommendedGzipSettings = true;
-          recommendedOptimisation = true;
-          recommendedProxySettings = true;
-          recommendedTlsSettings = true;
-          virtualHosts."git.pegasust.com" = {
-            # Gitea hostname
-            sslCertificate = "/var/lib/acme/git.pegasust.com/fullchain.pem";
-            sslCertificateKey = "/var/lib/acme/git.pegasust.com/key.pem";
-            forceSSL = true; # Runs on port 80 and 443
-            locations."/".proxyPass = "http://localhost:3000/"; # Proxy to Gitea
-          };
-        };
       };
-    };
+      nixosConfigurations.nyx = nixpkgs.lib.nixosSystem {
-    nixosConfigurations.nyx = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
-      system = "x86_64-linux";
+        modules = base_modules ++ [
-      modules =
-        base_modules
-        ++ [
           ./configuration.nix
           {
             system.stateVersion = "22.05";
           }
         ];
-      specialArgs = {
+        specialArgs = {
-        hostname = "nyx";
+          hostname = "nyx";
-        _networking = {
+          _networking = {
-          enableIPv6 = false;
+            enableIPv6 = false;
-          interfaces.eth1.ipv4.addresses = [
+            interfaces.eth1.ipv4.addresses = [{
-            {
               address = "71.0.0.2";
               prefixLength = 24;
-            }
+            }];
-          ];
+            firewall.enable = true;
-          firewall.enable = true;
+            useDHCP = false;
-          useDHCP = false;
+            interfaces.eth0.useDHCP = true;
-          interfaces.eth0.useDHCP = true;
+          };
-        };
+          _boot.loader.grub.enable = true;
-        _boot.loader.grub.enable = true;
+          _boot.loader.grub.version = 2;
-        _boot.loader.grub.version = 2;
+          _services.openssh = {
-        _services.openssh = {
+            permitRootLogin = "no";
-          permitRootLogin = "no";
+            enable = true;
-          enable = true;
+          };
         };
       };
-    };
+      nixosConfigurations.nixos = nixpkgs.lib.nixosSystem {
-    nixosConfigurations.nixos = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
-      system = "x86_64-linux";
+        modules = base_modules ++ [
-      modules =
-        base_modules
-        ++ [
           ./configuration.nix
           {
             system.stateVersion = "22.05";
           }
         ];
-      specialArgs = {
+        specialArgs = {
-        hostname = "nixos";
+          hostname = "nixos";
+        };
       };
-    };
+      nixosConfigurations.htran-dev = nixpkgs.lib.nixosSystem {
-    nixosConfigurations.htran-dev = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
-      system = "x86_64-linux";
+        modules = base_modules ++ [
-      modules =
-        base_modules
-        ++ [
           ./configuration.nix
           {
             system.stateVersion = "22.11";
@@ -237,98 +218,189 @@
               # interface = "ens32";
             };
             networking.interfaces.ens32.ipv4.addresses = [
-              {
+              {address = "10.100.200.230"; prefixLength = 24;}
-                address = "10.100.200.230";
-                prefixLength = 24;
-              }
             ];
           }
         ];
-      specialArgs = {
+        specialArgs = {
-        hostname = "htran-dev";
+          hostname = "htran-dev";
-        _networking = {
+          _networking = {
-          firewall.enable = true;
+            firewall.enable = true;
-          useDHCP = false;
+            useDHCP = false;
-          interfaces.eth0.useDHCP = true;
+            interfaces.eth0.useDHCP = true;
-        };
+          };
-        _boot.loader.grub.enable = true;
+          _boot.loader.grub.enable = true;
-        _boot.loader.grub.version = 2;
+          _boot.loader.grub.version = 2;
-        _services.openssh = {
+          _services.openssh = {
-          permitRootLogin = "no";
+            permitRootLogin = "no";
-          enable = true;
+            enable = true;
+          };
         };
       };
-    };
+      nixosConfigurations.bao = nixpkgs.lib.nixosSystem {
-    nixosConfigurations.bao = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
-      system = "x86_64-linux";
+        specialArgs.hostname = "bao";
-      specialArgs.hostname = "bao";
+        modules = base_modules ++ [
-      modules =
-        base_modules
-        ++ [
           ./configuration.nix
           ./../../modules/storage.perso.sys.nix
-          ./../../modules/kde.sys.nix
           # GPU, sound, networking stuffs
-          ./../../modules/pulseaudio.sys.nix
+          ({ config, pkgs, lib, ... }:
-          ./../../modules/opengl.sys.nix
+            let
-          ./../../modules/nvgpu.sys.nix
+              gpu_pkgs = [ pkgs.clinfo pkgs.lshw pkgs.glxinfo pkgs.pciutils pkgs.vulkan-tools ];
-          ({
+              gpu_conf = {
-            config,
+                # openCL
-            pkgs,
+                hardware.opengl = {
-            lib,
+                  enable = true;
-            ...
+                  extraPackages =
-          }: {
+                    let
-            mod.tailscale.enable = true;
+                      inherit (pkgs) rocm-opencl-icd rocm-opencl-runtime;
-            # Use UEFI
+                    in
-            boot.loader.systemd-boot.enable = true;
+                    [ rocm-opencl-icd rocm-opencl-runtime ];
+                  # Vulkan
+                  driSupport = true;
+                  driSupport32Bit = true;
+                  package = pkgs.mesa.drivers;
+                  package32 = pkgs.pkgsi686Linux.mesa.drivers;
+                };
+              };
+              amd_rx470 = {
+                # early amd gpu usage
+                boot.initrd.kernelModules = [ "amdgpu" ];
+                services.xserver.enable = true;
+                services.xserver.videoDrivers = [ "amdgpu" ];
+              };
+              nv_rtx3060 = {
+                nixpkgs.config.allowUnfree = true;
+                services.xserver.enable = true;
+                services.xserver.videoDrivers = [ "nvidia" ];
+                hardware.nvidia.package = config.boot.kernelPackages.nvidiaPackages.stable;
+              };
+              systemPackages = [ ] ++ gpu_pkgs;
+            in
+            lib.recursiveUpdate gpu_conf (lib.recursiveUpdate nv_rtx3060 {
+              # Use UEFI
+              boot.loader.systemd-boot.enable = true;
 
-            networking.hostName = "bao"; # Define your hostname.
+              networking.hostName = "bao"; # Define your hostname.
-            # Pick only one of the below networking options.
+              # Pick only one of the below networking options.
-            # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
+              # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
-            networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
+              networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
 
-            time.timeZone = "America/Phoenix";
+              # Enable the X11 windowing system.
-            # Configure keymap in X11
+              services.xserver.enable = true;
-            services.xserver.layout = "us";
+              # KDE & Plasma 5
-            # services.xserver.xkbOptions = {
+              services.xserver.displayManager.sddm.enable = true;
-            #   "eurosign:e";
+              services.xserver.desktopManager.plasma5 = {
-            #   "caps:escape" # map caps to escape.
+                enable = true;
-            # };
+                excludePackages = let plasma5 = pkgs.libsForQt5; in
+                  [
+                    plasma5.elisa # audio viewer
+                    plasma5.konsole # I use alacritty instaed
+                    plasma5.plasma-browser-integration
+                    plasma5.print-manager # will enable if I need
+                    plasma5.khelpcenter # why not just write manpages instead :(
+                    # plasma5.ksshaskpass   # pls just put prompts on my dear terminal
+                  ];
+              };
 
-            # Enable CUPS to print documents.
+              # disables KDE's setting of askpassword
-            # services.printing.enable = true;
+              programs.ssh.askPassword = "";
+              programs.ssh.enableAskPassword = false;
 
-            # Enable touchpad support (enabled default in most desktopManager).
+              time.timeZone = "America/Phoenix";
-            # services.xserver.libinput.enable = true;
+              # Configure keymap in X11
-            # Just an initial user to get this started lol
+              services.xserver.layout = "us";
-            users.users.user = {
+              # services.xserver.xkbOptions = {
-              initialPassword = "pw123";
+              #   "eurosign:e";
-              extraGroups = ["wheel" "networkmanager" "audio"];
+              #   "caps:escape" # map caps to escape.
-              isNormalUser = true;
+              # };
-            };
 
-            # Some programs need SUID wrappers, can be configured further or are
+              # Enable CUPS to print documents.
-            # started in user sessions.
+              # services.printing.enable = true;
-            # programs.mtr.enable = true;
-            # programs.gnupg.agent = {
-            #   enable = true;
-            #   enableSSHSupport = true;
-            # };
 
-            # List services that you want to enable:
+              # Enable sound. (pulse audio)
+              sound.enable = true;
+              programs.dconf.enable = true;
+              hardware.pulseaudio.enable = true;
+              hardware.pulseaudio.support32Bit = true;
+              nixpkgs.config.pulseaudio = true;
+              hardware.pulseaudio.extraConfig = "load-module module-combine-sink";
+              mod.tailscale.enable = true;
 
-            # Enable the OpenSSH daemon.
+              # Sound: pipewire
-            services.openssh.enable = true;
+              # sound.enable = false;
+              # hardware.pulseaudio.enable = false;
+              # services.pipewire = {
+              #   enable = true;
+              #   alsa.enable = true;
+              #   alsa.support32Bit = true;
+              #   pulse.enable = true;
+              #   # Might want to use JACK in the future
+              #   jack.enable = true;
+              # };
+              #
+              # security.rtkit.enable = true;
 
-            # This value determines the NixOS release from which the default
+
-            # settings for stateful data, like file locations and database versions
+              # Enable touchpad support (enabled default in most desktopManager).
-            # on your system were taken. It‘s perfectly fine and recommended to leave
+              # services.xserver.libinput.enable = true;
-            # this value at the release version of the first install of this system.
+
-            # Before changing this value read the documentation for this option
+              # Define a user account. Don't forget to set a password with ‘passwd’.
-            # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+              # users.users.alice = {
-            system.stateVersion = "22.11"; # Did you read the comment?
+              #   isNormalUser = true;
-          })
+              #   extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
+              #   packages = with pkgs; [
+              #     firefox
+              #     thunderbird
+              #   ];
+              # };
+              # Just an initial user to get this started lol
+              users.users.user = {
+                initialPassword = "pw123";
+                extraGroups = [ "wheel" "networkmanager" "audio" ];
+                isNormalUser = true;
+              };
+
+              # List packages installed in system profile. To search, run:
+              # $ nix search wget
+              environment.systemPackages = with pkgs; [
+                neovim
+                wget
+              ] ++ systemPackages;
+
+              # Some programs need SUID wrappers, can be configured further or are
+              # started in user sessions.
+              # programs.mtr.enable = true;
+              # programs.gnupg.agent = {
+              #   enable = true;
+              #   enableSSHSupport = true;
+              # };
+
+              # List services that you want to enable:
+
+              # Enable the OpenSSH daemon.
+              services.openssh.enable = true;
+
+              # Open ports in the firewall.
+              # networking.firewall.allowedTCPPorts = [ ... ];
+              # networking.firewall.allowedUDPPorts = [ ... ];
+              # Or disable the firewall altogether.
+              # networking.firewall.enable = false;
+
+              # Copy the NixOS configuration file and link it from the resulting system
+              # (/run/current-system/configuration.nix). This is useful in case you
+              # accidentally delete configuration.nix.
+              # system.copySystemConfiguration = true;
+
+              # This value determines the NixOS release from which the default
+              # settings for stateful data, like file locations and database versions
+              # on your system were taken. It‘s perfectly fine and recommended to leave
+              # this value at the release version of the first install of this system.
+              # Before changing this value read the documentation for this option
+              # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+              system.stateVersion = "22.11"; # Did you read the comment?
+            }))
         ];
+      };
     };
-  };
 }

nix-conf/system/hardware-configuration.nix

@@ -1,20 +1,17 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+{
-  boot.initrd.kernelModules = [];
+  imports =
-  boot.kernelParams = ["console=ttyS0,19200n8"];
+    [
+      (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
   boot.loader.grub.extraConfig = ''
     serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1
     terminal_input serial;
@@ -23,15 +20,17 @@
   boot.loader.grub.forceInstall = true;
   boot.loader.grub.device = "nodev";
   boot.loader.timeout = 10;
-  boot.kernelModules = [];
+  boot.kernelModules = [ ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
-  fileSystems."/" = {
+  fileSystems."/" =
-    device = "/dev/sda";
+    {
-    fsType = "ext4";
+      device = "/dev/sda";
-  };
+      fsType = "ext4";
+    };
 
-  swapDevices = [{device = "/dev/sdb";}];
+  swapDevices =
+    [{ device = "/dev/sdb"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

nix-conf/system/nixos-wsl/default.nix

@@ -3,12 +3,11 @@
     let
       lock = builtins.fromJSON (builtins.readFile ./flake.lock);
     in
-      fetchTarball {
+    fetchTarball {
-        url = "https://github.com/edolstra/flake-compat/archive/${lock.nodes.flake-compat.locked.rev}.tar.gz";
+      url = "https://github.com/edolstra/flake-compat/archive/${lock.nodes.flake-compat.locked.rev}.tar.gz";
-        sha256 = lock.nodes.flake-compat.locked.narHash;
+      sha256 = lock.nodes.flake-compat.locked.narHash;
-      }
+    }
   )
   {
     src = ./.;
-  })
+  }).defaultNix
-.defaultNix

nix-conf/system/nixos-wsl/flake.nix

@@ -11,13 +11,9 @@
     };
   };
 
-  outputs = {
+  outputs = { self, nixpkgs, flake-utils, ... }:
-    self,
-    nixpkgs,
-    flake-utils,
-    ...
-  }:
     {
+
       nixosModules.wsl = {
         imports = [
           ./modules/build-tarball.nix
@@ -35,25 +31,26 @@
           ./configuration.nix
         ];
       };
-    }
+
-    // flake-utils.lib.eachSystem
+    } //
-    (with flake-utils.lib.system; ["x86_64-linux" "aarch64-linux"])
+    flake-utils.lib.eachSystem
-    (
+      (with flake-utils.lib.system; [ "x86_64-linux" "aarch64-linux" ])
-      system: let
+      (system:
-        pkgs = import nixpkgs {inherit system;};
+        let
-      in {
+          pkgs = import nixpkgs { inherit system; };
-        checks.check-format =
+        in
-          pkgs.runCommand "check-format"
+        {
-          {
+          checks.check-format = pkgs.runCommand "check-format"
-            buildInputs = with pkgs; [nixpkgs-fmt];
+            {
-          } ''
+              buildInputs = with pkgs; [ nixpkgs-fmt ];
+            } ''
             nixpkgs-fmt --check ${./.}
             mkdir $out # success
           '';
 
-        devShell = pkgs.mkShell {
+          devShell = pkgs.mkShell {
-          nativeBuildInputs = with pkgs; [nixpkgs-fmt];
+            nativeBuildInputs = with pkgs; [ nixpkgs-fmt ];
-        };
+          };
-      }
+        }
-    );
+      );
 }

nix-conf/system/nixos-wsl/modules/build-tarball.nix

@@ -1,24 +1,12 @@
-{
+{ config, pkgs, lib, ... }:
-  config,
+with builtins; with lib;
-  pkgs,
+let
-  lib,
+  pkgs2storeContents = l: map (x: { object = x; symlink = "none"; }) l;
-  ...
-}:
-with builtins;
-with lib; let
-  pkgs2storeContents = l:
-    map
-    (x: {
-      object = x;
-      symlink = "none";
-    })
-    l;
 
   nixpkgs = lib.cleanSource pkgs.path;
 
-  channelSources =
+  channelSources = pkgs.runCommand "nixos-${config.system.nixos.version}"
-    pkgs.runCommand "nixos-${config.system.nixos.version}"
+    { preferLocalBuild = true; }
-    {preferLocalBuild = true;}
     ''
       mkdir -p $out
       cp -prd ${nixpkgs.outPath} $out/nixos
@@ -70,7 +58,10 @@ with lib; let
       sed -i 's|import \./default\.nix|import \./nixos-wsl|' ./etc/nixos/configuration.nix
     ''}
   '';
-in {
+
+in
+{
+
   options.wsl.tarball = {
     includeConfig = mkOption {
       type = types.bool;
@@ -79,12 +70,13 @@ in {
     };
   };
 
+
   config = mkIf config.wsl.enable {
     # These options make no sense without the wsl-distro module anyway
 
     system.build.tarball = pkgs.callPackage "${nixpkgs}/nixos/lib/make-system-tarball.nix" {
       # No contents, structure will be added by prepare script
-      contents = [];
+      contents = [ ];
 
       fileName = "nixos-wsl-${pkgs.hostPlatform.system}";
 
@@ -100,5 +92,6 @@ in {
       compressCommand = "gzip";
       compressionExtension = ".gz";
     };
+
   };
 }

nix-conf/system/nixos-wsl/modules/docker-desktop.nix

@@ -1,23 +1,20 @@
-{
+{ config, lib, pkgs, ... }:
-  config,
+with builtins; with lib; {
-  lib,
+
-  pkgs,
-  ...
-}:
-with builtins;
-with lib; {
   imports = [
-    (mkRenamedOptionModule ["wsl" "docker"] ["wsl" "docker-desktop"])
+    (mkRenamedOptionModule [ "wsl" "docker" ] [ "wsl" "docker-desktop" ])
   ];
 
   options.wsl.docker-desktop = with types; {
     enable = mkEnableOption "Docker Desktop integration";
   };
 
-  config = let
+  config =
-    cfg = config.wsl.docker-desktop;
+    let
-  in
+      cfg = config.wsl.docker-desktop;
+    in
     mkIf (config.wsl.enable && cfg.enable) {
+
       environment.systemPackages = with pkgs; [
         docker
         docker-compose
@@ -28,7 +25,7 @@ with lib; {
         script = ''
           ${config.wsl.automountPath}/wsl/docker-desktop/docker-desktop-user-distro proxy --docker-desktop-root ${config.wsl.automountPath}/wsl/docker-desktop
         '';
-        wantedBy = ["multi-user.target"];
+        wantedBy = [ "multi-user.target" ];
         serviceConfig = {
           Restart = "on-failure";
           RestartSec = "30s";
@@ -38,5 +35,7 @@ with lib; {
       users.groups.docker.members = [
         config.wsl.defaultUser
       ];
+
     };
+
 }

nix-conf/system/nixos-wsl/modules/docker-native.nix

@@ -1,11 +1,6 @@
-{
+{ config, lib, pkgs, ... }:
-  config,
+with builtins; with lib; {
-  lib,
+
-  pkgs,
-  ...
-}:
-with builtins;
-with lib; {
   options.wsl.docker-native = with types; {
     enable = mkEnableOption "Native Docker integration in NixOS.";
 
@@ -20,13 +15,14 @@ with lib; {
     };
   };
 
-  config = let
+  config =
-    cfg = config.wsl.docker-native;
+    let
-  in
+      cfg = config.wsl.docker-native;
+    in
     mkIf (config.wsl.enable && cfg.enable) {
       nixpkgs.overlays = [
         (self: super: {
-          docker = super.docker.override {iptables = pkgs.iptables-legacy;};
+          docker = super.docker.override { iptables = pkgs.iptables-legacy; };
         })
       ];
 

nix-conf/system/nixos-wsl/modules/installer.nix

@@ -1,19 +1,11 @@
-{
+{ config, lib, pkgs, ... }:
-  config,
+with builtins; with lib; {
-  lib,
+
-  pkgs,
-  ...
-}:
-with builtins;
-with lib; {
   config = mkIf config.wsl.enable (
     let
       mkTarball = pkgs.callPackage "${lib.cleanSource pkgs.path}/nixos/lib/make-system-tarball.nix";
 
-      pkgs2storeContents = map (x: {
+      pkgs2storeContents = map (x: { object = x; symlink = "none"; });
-        object = x;
-        symlink = "none";
-      });
 
       rootfs = let tarball = config.system.build.tarball; in "${tarball}/tarball/${tarball.fileName}.tar${tarball.extension}";
 
@@ -47,39 +39,25 @@ with lib; {
       passwd = pkgs.writeText "passwd" ''
         root:x:0:0:System administrator:/root:${installer}
       '';
-    in {
+    in
+    {
+
       system.build.installer = mkTarball {
         fileName = "nixos-wsl-installer";
         compressCommand = "gzip";
         compressionExtension = ".gz";
         extraArgs = "--hard-dereference";
 
-        storeContents = with pkgs;
+        storeContents = with pkgs; pkgs2storeContents [
-          pkgs2storeContents [
+          installer
-            installer
+        ];
-          ];
 
         contents = [
-          {
+          { source = config.environment.etc."wsl.conf".source; target = "/etc/wsl.conf"; }
-            source = config.environment.etc."wsl.conf".source;
+          { source = config.environment.etc."fstab".source; target = "/etc/fstab"; }
-            target = "/etc/wsl.conf";
+          { source = passwd; target = "/etc/passwd"; }
-          }
+          { source = "${pkgs.busybox}/bin/busybox"; target = "/bin/sh"; }
-          {
+          { source = "${pkgs.busybox}/bin/busybox"; target = "/bin/mount"; }
-            source = config.environment.etc."fstab".source;
-            target = "/etc/fstab";
-          }
-          {
-            source = passwd;
-            target = "/etc/passwd";
-          }
-          {
-            source = "${pkgs.busybox}/bin/busybox";
-            target = "/bin/sh";
-          }
-          {
-            source = "${pkgs.busybox}/bin/busybox";
-            target = "/bin/mount";
-          }
         ];
 
         extraCommands = pkgs.writeShellScript "prepare" ''
@@ -88,6 +66,8 @@ with lib; {
           ln -s /init bin/wslpath
         '';
       };
+
     }
   );
+
 }

nix-conf/system/nixos-wsl/modules/interop.nix

@@ -1,13 +1,9 @@
+{ lib, pkgs, config, ... }:
+
+with builtins; with lib;
 {
-  lib,
-  pkgs,
-  config,
-  ...
-}:
-with builtins;
-with lib; {
   imports = [
-    (mkRenamedOptionModule ["wsl" "compatibility" "interopPreserveArgvZero"] ["wsl" "interop" "preserveArgvZero"])
+    (mkRenamedOptionModule [ "wsl" "compatibility" "interopPreserveArgvZero" ] [ "wsl" "interop" "preserveArgvZero" ])
   ];
 
   options.wsl.interop = with types; {
@@ -36,56 +32,57 @@ with lib; {
     };
   };
 
-  config = let
+  config =
-    cfg = config.wsl.interop;
+    let
-  in
+      cfg = config.wsl.interop;
+    in
     mkIf config.wsl.enable {
+
       boot.binfmt.registrations = mkIf cfg.register {
-        WSLInterop = let
+        WSLInterop =
-          compat = cfg.preserveArgvZero;
+          let
+            compat = cfg.preserveArgvZero;
 
-          # WSL Preview 0.58 and up registers the /init binfmt interp for Windows executable
+            # WSL Preview 0.58 and up registers the /init binfmt interp for Windows executable
-          # with the "preserve argv[0]" flag, so if you run `./foo.exe`, the interp gets invoked
+            # with the "preserve argv[0]" flag, so if you run `./foo.exe`, the interp gets invoked
-          # as `/init foo.exe ./foo.exe`.
+            # as `/init foo.exe ./foo.exe`.
-          #   argv[0] --^        ^-- actual path
+            #   argv[0] --^        ^-- actual path
-          #
+            #
-          # Older versions expect to be called without the argv[0] bit, simply as `/init ./foo.exe`.
+            # Older versions expect to be called without the argv[0] bit, simply as `/init ./foo.exe`.
-          #
+            #
-          # We detect that by running `/init /known-not-existing-path.exe` and checking the exit code:
+            # We detect that by running `/init /known-not-existing-path.exe` and checking the exit code:
-          # the new style interp expects at least two arguments, so exits with exit code 1,
+            # the new style interp expects at least two arguments, so exits with exit code 1,
-          # presumably meaning "parsing error"; the old style interp attempts to actually run
+            # presumably meaning "parsing error"; the old style interp attempts to actually run
-          # the executable, fails to find it, and exits with 255.
+            # the executable, fails to find it, and exits with 255.
-          compatWrapper = pkgs.writeShellScript "nixos-wsl-binfmt-hack" ''
+            compatWrapper = pkgs.writeShellScript "nixos-wsl-binfmt-hack" ''
-            /init /nixos-wsl-does-not-exist.exe
+              /init /nixos-wsl-does-not-exist.exe
-            [ $? -eq 255 ] && shift
+              [ $? -eq 255 ] && shift
-            exec /init "$@"
+              exec /init "$@"
-          '';
+            '';
 
-          # use the autodetect hack if unset, otherwise call /init directly
+            # use the autodetect hack if unset, otherwise call /init directly
-          interpreter =
+            interpreter = if compat == null then compatWrapper else "/init";
-            if compat == null
-            then compatWrapper
-            else "/init";
 
-          # enable for the wrapper and autodetect hack
+            # enable for the wrapper and autodetect hack
-          preserveArgvZero =
+            preserveArgvZero = if compat == false then false else true;
-            if compat == false
+          in
-            then false
+          {
-            else true;
+            magicOrExtension = "MZ";
-        in {
+            fixBinary = true;
-          magicOrExtension = "MZ";
+            wrapInterpreterInShell = false;
-          fixBinary = true;
+            inherit interpreter preserveArgvZero;
-          wrapInterpreterInShell = false;
+          };
-          inherit interpreter preserveArgvZero;
-        };
       };
 
       # Include Windows %PATH% in Linux $PATH.
       environment.extraInit = mkIf cfg.includePath ''PATH="$PATH:$WSLPATH"'';
 
-      warnings = let
+      warnings =
-        registrations = config.boot.binfmt.registrations;
+        let
-      in
+          registrations = config.boot.binfmt.registrations;
+        in
         optional (!(registrations ? WSLInterop) && (length (attrNames config.boot.binfmt.registrations)) != 0) "Having any binfmt registrations without re-registering WSLInterop (wsl.interop.register) will break running .exe files from WSL2";
     };
+
+
 }

nix-conf/system/nixos-wsl/modules/wsl-distro.nix

@@ -1,46 +1,42 @@
-{
+{ lib, pkgs, config, ... }:
-  lib,
-  pkgs,
-  config,
-  ...
-}:
-with builtins;
-with lib; {
-  options.wsl = with types; let
-    coercedToStr = coercedTo (oneOf [bool path int]) toString str;
-  in {
-    enable = mkEnableOption "support for running NixOS as a WSL distribution";
-    automountPath = mkOption {
-      type = str;
-      default = "/mnt";
-      description = "The path where windows drives are mounted (e.g. /mnt/c)";
-    };
-    automountOptions = mkOption {
-      type = str;
-      default = "metadata,uid=1000,gid=100";
-      description = "Options to use when mounting windows drives";
-    };
-    defaultUser = mkOption {
-      type = str;
-      default = "nixos";
-      description = "The name of the default user";
-    };
-    startMenuLaunchers = mkEnableOption "shortcuts for GUI applications in the windows start menu";
-    wslConf = mkOption {
-      type = attrsOf (attrsOf (oneOf [string int bool]));
-      description = "Entries that are added to /etc/wsl.conf";
-    };
-  };
 
-  config = let
+with builtins; with lib;
-    cfg = config.wsl;
+{
-    syschdemd = import ../syschdemd.nix {
+  options.wsl = with types;
-      inherit lib pkgs config;
+    let
-      inherit (cfg) automountPath defaultUser;
+      coercedToStr = coercedTo (oneOf [ bool path int ]) (toString) str;
-      defaultUserHome = config.users.users.${cfg.defaultUser}.home;
+    in
+    {
+      enable = mkEnableOption "support for running NixOS as a WSL distribution";
+      automountPath = mkOption {
+        type = str;
+        default = "/mnt";
+        description = "The path where windows drives are mounted (e.g. /mnt/c)";
+      };
+      automountOptions = mkOption {
+        type = str;
+        default = "metadata,uid=1000,gid=100";
+        description = "Options to use when mounting windows drives";
+      };
+      defaultUser = mkOption {
+        type = str;
+        default = "nixos";
+        description = "The name of the default user";
+      };
+      startMenuLaunchers = mkEnableOption "shortcuts for GUI applications in the windows start menu";
+      wslConf = mkOption {
+        type = attrsOf (attrsOf (oneOf [ string int bool ]));
+        description = "Entries that are added to /etc/wsl.conf";
+      };
     };
-  in
+
+  config =
+    let
+      cfg = config.wsl;
+      syschdemd = import ../syschdemd.nix { inherit lib pkgs config; inherit (cfg) automountPath defaultUser; defaultUserHome = config.users.users.${cfg.defaultUser}.home; };
+    in
     mkIf cfg.enable {
+
       wsl.wslConf = {
         automount = {
           enabled = true;
@@ -61,8 +57,9 @@ with lib; {
       hardware.opengl.enable = true; # Enable GPU acceleration
 
       environment = {
+
         etc = {
-          "wsl.conf".text = generators.toINI {} cfg.wslConf;
+          "wsl.conf".text = generators.toINI { } cfg.wslConf;
 
           # DNS settings are managed by WSL
           hosts.enable = !config.wsl.wslConf.network.generateHosts;
@@ -70,7 +67,7 @@ with lib; {
         };
 
         systemPackages = [
-          (pkgs.runCommand "wslpath" {} ''
+          (pkgs.runCommand "wslpath" { } ''
             mkdir -p $out/bin
             ln -s /init $out/bin/wslpath
           '')
@@ -82,13 +79,13 @@ with lib; {
       users.users.${cfg.defaultUser} = {
         isNormalUser = true;
         uid = 1000;
-        extraGroups = ["wheel"]; # Allow the default user to use sudo
+        extraGroups = [ "wheel" ]; # Allow the default user to use sudo
       };
 
       users.users.root = {
         shell = "${syschdemd}/bin/syschdemd";
         # Otherwise WSL fails to login as root with "initgroups failed 5"
-        extraGroups = ["root"];
+        extraGroups = [ "root" ];
       };
 
       security.sudo = {
@@ -100,7 +97,7 @@ with lib; {
 
       system.activationScripts = {
         copy-launchers = mkIf cfg.startMenuLaunchers (
-          stringAfter [] ''
+          stringAfter [ ] ''
             for x in applications icons; do
               echo "Copying /usr/share/$x"
               mkdir -p /usr/share/$x
@@ -108,7 +105,7 @@ with lib; {
             done
           ''
         );
-        populateBin = stringAfter [] ''
+        populateBin = stringAfter [ ] ''
           echo "setting up /bin..."
           ln -sf /init /bin/wslpath
           ln -sf ${pkgs.bashInteractive}/bin/bash /bin/sh
@@ -137,6 +134,6 @@ with lib; {
         enableEmergencyMode = false;
       };
 
-      warnings = optional (config.systemd.services.systemd-resolved.enable && config.wsl.wslConf.network.generateResolvConf) "systemd-resolved is enabled, but resolv.conf is managed by WSL";
+      warnings = (optional (config.systemd.services.systemd-resolved.enable && config.wsl.wslConf.network.generateResolvConf) "systemd-resolved is enabled, but resolv.conf is managed by WSL");
     };
 }

nix-conf/system/nixos-wsl/syschdemd.nix

@@ -1,19 +1,19 @@
-{
+{ lib
-  lib,
+, pkgs
-  pkgs,
+, config
-  config,
+, automountPath
-  automountPath,
+, defaultUser
-  defaultUser,
+, defaultUserHome ? "/home/${defaultUser}"
-  defaultUserHome ? "/home/${defaultUser}",
+, ...
-  ...
 }:
+
 pkgs.substituteAll {
   name = "syschdemd";
   src = ./syschdemd.sh;
   dir = "bin";
   isExecutable = true;
 
-  buildInputs = with pkgs; [daemonize];
+  buildInputs = with pkgs; [ daemonize ];
 
   inherit defaultUser defaultUserHome;
   inherit (pkgs) daemonize;

nix-conf/system/profiles/Felia/hardware-configuration.nix

@@ -1,19 +1,15 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [];
 
-  boot.initrd.availableKernelModules = [];
+{
-  boot.initrd.kernelModules = [];
+  imports = [ ];
-  boot.kernelModules = [];
+
-  boot.extraModulePackages = [];
+  boot.initrd.availableKernelModules = [ ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
 
   ## NOTE: These filesystems are mounted by a wrapper script from nix-wsl
 
@@ -47,22 +43,25 @@
   #     fsType = "drvfs";
   #   };
 
-  fileSystems."/mnt/c" = {
+  fileSystems."/mnt/c" =
-    device = "C:";
+    {
-    fsType = "drvfs";
+      device = "C:";
-  };
+      fsType = "drvfs";
+    };
 
-  fileSystems."/mnt/d" = {
+  fileSystems."/mnt/d" =
-    device = "D:";
+    {
-    fsType = "drvfs";
+      device = "D:";
-  };
+      fsType = "drvfs";
+    };
 
-  fileSystems."/mnt/f" = {
+  fileSystems."/mnt/f" =
-    device = "F:";
+    {
-    fsType = "drvfs";
+      device = "F:";
-  };
+      fsType = "drvfs";
+    };
 
-  swapDevices = [];
+  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

nix-conf/system/profiles/bao/hardware-configuration.nix

@@ -1,22 +1,19 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [
-    (modulesPath + "/installer/scan/not-detected.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
+{
+  imports =
+    [
+      (modulesPath + "/installer/scan/not-detected.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
   # boot.initrd.kernelModules = [ "amdgpu" ];
-  boot.initrd.kernelModules = [];
+  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = ["kvm-amd" "coretemp"];
+  boot.kernelModules = [ "kvm-amd" "coretemp" ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
   fileSystems."/" =
     # Might be wise to use /dev/nvme0p1 instead
@@ -32,7 +29,7 @@
       fsType = "vfat";
     };
 
-  swapDevices = [];
+  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

nix-conf/system/profiles/homeless/hardware-configuration.nix

@@ -1,20 +1,17 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+{
-  boot.initrd.kernelModules = [];
+  imports =
-  boot.kernelParams = ["console=ttyS0,19200n8"];
+    [
+      (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
   boot.loader.grub.extraConfig = ''
     serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1
     terminal_input serial;
@@ -23,15 +20,17 @@
   boot.loader.grub.forceInstall = true;
   boot.loader.grub.device = "nodev";
   boot.loader.timeout = 10;
-  boot.kernelModules = [];
+  boot.kernelModules = [ ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
-  fileSystems."/" = {
+  fileSystems."/" =
-    device = "/dev/sda";
+    {
-    fsType = "ext4";
+      device = "/dev/sda";
-  };
+      fsType = "ext4";
+    };
 
-  swapDevices = [{device = "/dev/sdb";}];
+  swapDevices =
+    [{ device = "/dev/sdb"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

nix-conf/system/profiles/lester/hardware-configuration.nix

@@ -1,20 +1,17 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+{
-  boot.initrd.kernelModules = [];
+  imports =
-  boot.kernelParams = ["console=ttyS0,19200n8"];
+    [
+      (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
   boot.loader.grub.extraConfig = ''
     serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1
     terminal_input serial;
@@ -23,15 +20,17 @@
   boot.loader.grub.forceInstall = true;
   boot.loader.grub.device = "nodev";
   boot.loader.timeout = 10;
-  boot.kernelModules = [];
+  boot.kernelModules = [ ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
-  fileSystems."/" = {
+  fileSystems."/" =
-    device = "/dev/sda";
+    {
-    fsType = "ext4";
+      device = "/dev/sda";
-  };
+      fsType = "ext4";
+    };
 
-  swapDevices = [{device = "/dev/sdb";}];
+  swapDevices =
+    [{ device = "/dev/sdb"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

nix-conf/system/profiles/lizzi/hardware-configuration.nix

@@ -1,20 +1,17 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{
+{ config, lib, pkgs, modulesPath, ... }:
-  config,
-  lib,
-  pkgs,
-  modulesPath,
-  ...
-}: {
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+{
-  boot.initrd.kernelModules = [];
+  imports =
-  boot.kernelParams = ["console=ttyS0,19200n8"];
+    [
+      (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
   boot.loader.grub.extraConfig = ''
     serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1
     terminal_input serial;
@@ -23,8 +20,8 @@
   boot.loader.grub.forceInstall = true;
   boot.loader.grub.device = "nodev";
   boot.loader.timeout = 10;
-  boot.kernelModules = [];
+  boot.kernelModules = [ ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
   fileSystems = {
     "/" = {
@@ -38,7 +35,8 @@
     };
   };
 
-  swapDevices = [{device = "/dev/sdb";}];
+  swapDevices =
+    [{ device = "/dev/sdb"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

nix-conf/system/profiles/nyx/hardware-configuration.nix

@@ -1,23 +1,20 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
 {
-  config,
+  imports =
-  lib,
+    [
-  pkgs,
+      (modulesPath + "/profiles/qemu-guest.nix")
-  modulesPath,
+    ];
-  ...
-}: {
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
 
-  boot.initrd.availableKernelModules = ["virtio_pci" "virtio_scsi" "ahci" "sd_mod"];
+  boot.initrd.availableKernelModules = [ "virtio_pci" "virtio_scsi" "ahci" "sd_mod" ];
-  boot.initrd.kernelModules = [];
+  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [];
+  boot.kernelModules = [ ];
-  boot.extraModulePackages = [];
+  boot.extraModulePackages = [ ];
 
-  boot.kernelParams = ["console=ttyS0,19200n8"];
+  boot.kernelParams = [ "console=ttyS0,19200n8" ];
   boot.loader.grub.extraConfig = ''
     serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1
     terminal_input serial;
@@ -26,12 +23,14 @@
   boot.loader.grub.forceInstall = true;
   boot.loader.grub.device = "nodev";
   boot.loader.timeout = 10;
-  fileSystems."/" = {
+  fileSystems."/" =
-    device = "/dev/sda";
+    {
-    fsType = "ext4";
+      device = "/dev/sda";
-  };
+      fsType = "ext4";
+    };
 
-  swapDevices = [{device = "/dev/sdb";}];
+  swapDevices =
+    [{ device = "/dev/sdb"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

nix-conf/system/wsl-configuration.nix

@@ -1,7 +1,10 @@
-{lib, ...}:
+{ lib, ... }:
-with lib; let
+
+with lib;
+let
   nixos-wsl = import ./nixos-wsl;
-in {
+in
+{
   imports = [
     ./configuration.nix
     nixos-wsl.nixosModules.wsl
@@ -18,7 +21,9 @@ in {
 
     # Enable integration with Docker Desktop (needs to be installed)
     docker-desktop.enable = true;
+
   };
   # users.users.<defaultUser>.uid = 1000;
   # networking.hostName = "nixos";
+
 }

nix/cells/dotfiles/devshells.nix

@@ -1,11 +0,0 @@
-{
-  inputs,
-  cell,
-}: let
-  inherit (inputs) std nixpkgs;
-in {
-  default = std.lib.dev.mkShell {
-    name = "default";
-    imports = [inputs.std.std.devshellProfiles.default];
-  };
-}

nix/cells/dotfiles/packages/default.nix

@@ -1,24 +0,0 @@
-{
-  inputs,
-  cell,
-}: let
-  inherit (inputs.nixpkgs) system;
-  inherit (inputs.nix-boost.pkgs."${system}".mypkgs) poetry2nix;
-  inherit (poetry2nix) mkPoetryApplication defaultPoetryOverrides;
-in {
-  kpcli-py = mkPoetryApplication {
-    projectDir = inputs.kpcli-py;
-    overrides = defaultPoetryOverrides.extend (self: super: {
-      # TODO: add this to upstream poetry2nix
-      tableformatter = super.tableformatter.overridePythonAttrs (old: {
-        buildInputs = (old.buildInputs or []) ++ [self.setuptools self.cython_3];
-        src = old.src;
-      });
-
-      kpcli = super.kpcli.overridePythonAttrs (old: {
-        buildInputs = (old.buildInputs or []) ++ [self.setuptools];
-      });
-    });
-  };
-
-}

nix/cells/repo/home-configs/default.nix

@@ -1,47 +0,0 @@
-# TODO: this should use winnow with a fair matching of supported systems
-{
-  inputs,
-  cell,
-}: let
-  inherit (cell) home-profiles home-modules;
-  inherit (inputs) home-manager;
-  pkgs = inputs.nixpkgs;
-
-  # hm is derivation that is compatible with homeConfigurations
-  home-config = {supported_systems, hm, tested_systems ? []}: 
-  hm // { 
-    _supported_systems = supported_systems; 
-    _tested_systems = tested_systems;
-  };
-
-  base-modules = [
-    home-profiles.alacritty
-    # home-profiles.git
-    home-profiles.ssh
-    home-profiles.shells
-    ({config.programs.home-manager.enable = true;})
-    home-profiles.nix-index
-    home-profiles.neovim
-  ];
-in {
-  homeConfigurations.htran = home-config {
-    supported_systems = ["aarch64-darwin" "x86_64-darwin"];
-    tested_systems = ["aarch64-darwin"];
-    hm = home-manager.lib.homeManagerConfiguration {
-      inherit pkgs;
-      modules = base-modules ++ [
-        home-profiles.nerd_font_module
-        home-profiles.git-htran
-        home-profiles.dev-packages
-        home-profiles.zk
-        home-modules.darwin-spotlight
-
-        ({
-          home.username = "htran";
-          home.homeDirectory = "/Users/htran";
-          home.stateVersion = "23.11";
-        })
-      ];
-    };
-  };
-}

nix/cells/repo/home-modules/default.nix

@@ -1,250 +0,0 @@
-# This is an interface for home-profiles and should not contain opinionated
-# configurations. It should provide alternative configurations, aggregates
-# or new configurations
-_imports@{ inputs, cell }:
-let
-  namespace = "repo";
-  imports = _imports // { inherit namespace; };
-in
-{
-  git = { config, lib, ... }:
-    let
-      cfg = config."${namespace}".git;
-      baseAliases = {
-        a = "add";
-        c = "commit";
-        ca = "commit --amend";
-        cm = "commit -m";
-        lol = "log --graph --decorate --pretty=oneline --abbrev-commit";
-        lola = "log --graph --decorate --pretty=oneline --abbrev-commit --all";
-        sts = "status";
-        co = "checkout";
-        b = "branch";
-      };
-      default-user = "Pegasust";
-      default-email = "pegasucksgg@gmail.com";
-    in
-    {
-      options."${namespace}".git = {
-        aliases = lib.mkOption {
-          type = lib.types.attrs;
-          default = { };
-          example = baseAliases;
-          description = ''
-            Additional git aliases. This settings comes with base configuration.
-            Redeclaring the base config will override the values.
-          ''; # TODO: Add baseAliases as string here (builtins.toString doesn't work)
-        };
-        name = lib.mkOption {
-          type = lib.types.str;
-          default = default-user;
-          description = "Git username that appears on commits";
-          example = default-user;
-        };
-        email = lib.mkOption {
-          type = lib.types.str;
-          default = default-email;
-          example = default-email;
-          description = "Git email that appears on commits";
-        };
-        ignores = lib.mkOption {
-          type = lib.types.listOf lib.types.str;
-          default = [
-            ".vscode" # vscode settings
-            ".direnv" # .envrc cached outputs
-            ".DS_Store" # MacOS users, amrite
-          ];
-          description = ''
-            .gitignore patterns that are applied in every "${namespace}"sitory.
-            This is useful for IDE-specific settings.
-          '';
-          example = [ ".direnv" "node_modules" ];
-        };
-        enable = lib.mkOption {
-          type = lib.types.bool;
-          default = true;
-          description = ''
-            Enables git
-          '';
-          example = false;
-        };
-        credentialCacheTimeoutSeconds = lib.mkOption {
-          type = lib.types.int;
-          default = 3000;
-          description = "Credential cache (in-memory store) for Git in seconds.";
-          example = 3000;
-        };
-      };
-      # TODO : anyway to override configuration?
-      # idk wtf I was thinking about. there is no context in this question
-      config.programs.git = {
-        inherit (cfg) enable ignores;
-        userName = cfg.name;
-        userEmail = cfg.email;
-        aliases = baseAliases // cfg.aliases;
-        extraConfig = {
-          # TODO: in the case of darwin, git always open up the built-in keychain.
-          # possibly something we can't really control since we don't have access to `nix-darwin`
-          credential.helper = "cache --timeout=${builtins.toString cfg.credentialCacheTimeoutSeconds}";
-        };
-        lfs.enable = true;
-      };
-    };
-
-  alacritty = { config, lib, ... }:
-    let
-      inherit (inputs.cells.repo.lib) fromYAML;
-      cfg = config."${namespace}".alacritty;
-    in
-    {
-      options."${namespace}".alacritty = {
-        font.family = lib.mkOption {
-          type = lib.types.nullOr lib.types.singleLineStr;
-          default = null;
-          description = ''
-            The font family for Alacritty
-          '';
-          example = "DroidSansMono NF";
-        };
-        font.size = lib.mkOption {
-          type = lib.types.nullOr lib.types.number;
-          default = 11.0;
-          description = ''
-            The default font size for Alacritty. This is probably measured in px.
-          '';
-          example = 7.0;
-        };
-        enable = lib.mkOption {
-          type = lib.types.bool;
-          default = false;
-          description = ''
-            Enables alacritty
-          '';
-          example = true;
-        };
-        config-path = lib.mkOption {
-          type = lib.types.path;
-          description = "Path to alacritty yaml";
-          default = null;
-          example = "./config/alacritty.yaml";
-        };
-      };
-      config.programs.alacritty = {
-        enable = cfg.enable;
-        settings =
-          let
-            actualConfig =
-              if cfg.config-path != null then fromYAML (builtins.readFile cfg.config-path) else { };
-          in
-          lib.recursiveUpdate actualConfig {
-            font.normal.family = lib.mkIf (cfg.font.family != null) cfg.font.family;
-            font.size = lib.mkIf (cfg.font.size != null) cfg.font.size;
-          };
-      };
-    };
-
-  # TODO: chromium is not really supported on darwin
-  private_chromium = { config, pkgs, lib, ... }:
-    let
-      cfg = config."${namespace}".private_chromium;
-    in
-    {
-      options."${namespace}".private_chromium = {
-        enable = lib.mkOption {
-          type = lib.types.bool;
-          default = true;
-          example = false;
-          description = ''
-            Enable extremely lightweight chromium with vimium plugin
-          '';
-        };
-      };
-      config = lib.mkIf (cfg.enable) {
-        # home.packages = [pkgs.ungoogled-chromium];
-        programs.chromium = {
-          enable = true;
-          package = pkgs.ungoogled-chromium;
-          extensions =
-            let
-              # TODO: how about a chrome extension registry?
-              mkChromiumExtForVersion = browserVersion: { id, sha256, extVersion, ... }:
-                {
-                  inherit id;
-                  crxPath = builtins.fetchurl {
-                    url = "https://clients2.google.com/service/update2/crx" +
-                      "?response=redirect" +
-                      "&acceptformat=crx2,crx3" +
-                      "&prodversion=${browserVersion}" +
-                      "&x=id%3D${id}%26installsource%3Dondemand%26uc";
-                    name = "${id}.crx";
-                    inherit sha256;
-                  };
-                  version = extVersion;
-                };
-              mkChromiumExt = mkChromiumExtForVersion (lib.versions.major pkgs.ungoogled-chromium.version);
-            in
-            [
-              # vimium
-              (mkChromiumExt {
-                id = "dbepggeogbaibhgnhhndojpepiihcmeb";
-                sha256 = "00qhbs41gx71q026xaflgwzzridfw1sx3i9yah45cyawv8q7ziic";
-                extVersion = "1.67.4";
-              })
-            ];
-        };
-      };
-    };
-
-  darwin-spotlight = { lib, pkgs, config, ... }: {
-    # This patch exists since Darwin's search bar requires solid apps and not
-    # symlinked
-    # TODO: QA
-    # - [x] works for base case
-    # - [x] works for repeated case
-    # - [ ] works after base case, then removed 
-    # - [ ] works for repeated case, then removed
-
-    # Copy GUI apps to "~/Applications/Home Manager Apps"
-    # Based on this comment: https://github.com/nix-community/home-manager/issues/1341#issuecomment-778820334
-    home.activation.patch-spotlight =
-      if pkgs.stdenv.isDarwin then
-        let
-          apps = pkgs.buildEnv {
-            name = "home-manager-applications";
-            paths = config.home.packages;
-            pathsToLink = "/Applications";
-          };
-        in
-        lib.hm.dag.entryAfter [ "linkGeneration" ] ''
-          # Install MacOS applications to the user environment.
-          HM_APPS="$HOME/Applications/Home Manager Apps"
-          # Reset current state
-          if [ -e "$HM_APPS" ]; then
-            $DRY_RUN_CMD mv "$HM_APPS" "$HM_APPS.$(date +%Y%m%d%H%M%S)"
-          fi
-          $DRY_RUN_CMD mkdir -p "$HM_APPS"
-          # .app dirs need to be actual directories for Finder to detect them as Apps.
-          # In the env of Apps we build, the .apps are symlinks. We pass all of them as
-          # arguments to cp and make it dereference those using -H
-          $DRY_RUN_CMD cp --archive -H --dereference ${apps}/Applications/* "$HM_APPS"
-          $DRY_RUN_CMD chmod +w -R "$HM_APPS"
-        ''
-      else
-        "";
-    # We need this in case upstream home-manager changes the behavior of linking
-    # applications
-    home.activation.remove-patch-spotlight =
-      if pkgs.stdenv.isDarwin then
-        lib.hm.dag.entryBefore [ "checkLinkTargets" ] ''
-          HM_APPS="$HOME/Applications/Home Manager Apps"
-          # Reset current state
-          if [ -e "$HM_APPS" ]; then
-            $DRY_RUN_CMD mv "$HM_APPS" "$HM_APPS.$(date +%Y%m%d%H%M%S)"
-          fi
-        ''
-      else
-        "";
-  };
-
-}
-

nix/cells/repo/home-modules/nixgl.nix

@@ -1,47 +0,0 @@
-{
-  inputs,
-  cell,
-  namespace,
-}: {
-  pkgs,
-  config,
-  lib,
-  ...
-}: let
-  cfg = config."${namespace}".graphics;
-  cfgEnable = cfg.enable or (cfg.useNixGL.defaultPackage != null);
-  types = lib.types;
-in {
-  imports = [./shells.nix];
-  options."${namespace}".nixgl = {
-    enable = lib.mkEnableOption "nixgl";
-    useNixGL = {
-      package = lib.mkPackageOption pkgs "nixGL package" {
-        default = [
-          "nixgl"
-          "auto"
-          "nixGLDefault"
-        ];
-      };
-      defaultPackage = lib.mkOption {
-        type = types.nullOr (types.enum ["nixGLIntel" "nixGLNvidia" "nixGLNvidiaBumblebee"]);
-        description = "Which nixGL package to be aliased as `nixGL` on the shell";
-        default = null;
-        example = "nixGLIntel";
-      };
-    };
-  };
-  # NOTE: importing shells does not mean we're enabling everything, if we do mkDefault false
-  # but the dilemma is, if the user import BOTH graphics.nix and shells.nix
-  # they will also need to do `config."${namespace}".shells.enable`
-  # generally, we want the behavior: import means enable
-  config = lib.mkIf cfgEnable {
-    "${namespace}".graphics._enable = lib.mkForce true;
-    "${namespace}".shells = {
-      shellAliases = lib.mkIf (cfg.useNixGL.defaultPackage != null) {
-        nixGL = cfg.useNixGL.defaultPackage;
-      };
-    };
-    home.packages = [cfg.useNixGL.package];
-  };
-}

nix/cells/repo/home-profiles/default.nix

@@ -1,200 +0,0 @@
-# This creates a layer that is specific to some profiles, but may require
-# some variants in environment like username/email, work-oriented or personal
-# and many more
-_imports @ {
-  inputs,
-  cell,
-}: let
-  # TODO: I don't think abstracting namespace away is a good idea in this case
-  namespace = "repo";
-  imports = _imports // {inherit namespace;};
-  inherit (cell) home-modules;
-in {
-  neovim = import ./neovim.nix imports;
-  nerd_font_module = {
-    config,
-    pkgs,
-    ...
-  }: {
-    config.fonts.fontconfig.enable = true;
-    config.home.packages = [
-      (pkgs.nerdfonts.override {fonts = ["Hack"];})
-    ];
-    config."${namespace}".alacritty.font.family = "Hack Nerd Font Mono";
-  };
-
-  secrets = {
-    age.secrets.s3fs = {
-      file = "${inputs.self}/secrets/s3fs.age";
-      # mode = "600";  # owner + group only
-      # owner = "hungtr";
-      # group = "users";
-    };
-    age.secrets."s3fs.digital-garden" = {
-      file = "${inputs.self}/secrets/s3fs.digital-garden.age";
-    };
-    age.secrets._nhitrl_cred = {
-      file = "${inputs.self}/secrets/_nhitrl.age";
-    };
-    age.secrets."wifi.env" = {
-      file = "${inputs.self}/secrets/wifi.env.age";
-    };
-  };
-
-  ssh = {
-    config,
-    lib,
-    ...
-  }: let
-    cfg = config."${namespace}".ssh;
-  in {
-    options."${namespace}".ssh.enable = lib.mkOption {
-      type = lib.types.bool;
-      default = true;
-      example = false;
-      description = ''
-        Enables SSH
-      '';
-    };
-    config.programs.ssh = {
-      inherit (cfg) enable;
-      forwardAgent = true;
-      includes = ["${inputs.self}/native_configs/ssh/config"];
-    };
-  };
-
-  alacritty = {
-    config,
-    lib,
-    ...
-  }: let
-    cfg = config."${namespace}".alacritty;
-  in {
-    imports = [
-      inputs.cells.repo.home-modules.alacritty
-    ];
-    config."${namespace}".alacritty = {
-      enable = true;
-      config-path = "${inputs.self}//native_configs/alacritty/alacritty.yml";
-      font.size = 11.0;
-      font.family = "Hack Nerd Font Mono";
-    };
-  };
-
-  shells = import ./shells.nix imports;
-
-  git = {
-    config,
-    pkgs,
-    lib,
-    ...
-  }: let
-    baseAliases = {
-      a = "add";
-      c = "commit";
-      ca = "commit --amend";
-      cm = "commit -m";
-      lol = "log --graph --decorate --pretty=oneline --abbrev-commit";
-      lola = "log --graph --decorate --pretty=oneline --abbrev-commit --all";
-      sts = "status";
-      co = "checkout";
-      b = "branch";
-    };
-    cfg = config."${namespace}".profile.git;
-  in {
-    imports = [
-      home-modules.git
-    ];
-    options."${namespace}".profile.git = {
-      aliases = lib.mkOption {
-        type = lib.types.attrs;
-        default = {};
-        example = baseAliases;
-        description = ''
-          Additional git aliases. This config is merged on top of base aliases.
-        '';
-      };
-      name = lib.mkOption {
-        type = lib.types.str;
-        default = "Pegasust";
-        description = "Git username that appears on commits";
-        example = "Pegasust";
-      };
-      email = lib.mkOption {
-        type = lib.types.str;
-        default = "pegasucksgg@gmail.com";
-        example = "peagsucksgg@gmail.com";
-        description = "Git email that appears on commits";
-      };
-      ignores = lib.mkOption {
-        type = lib.types.listOf lib.types.str;
-        default = [
-          ".vscode" # vscode settings
-          ".direnv" # .envrc cached outputs
-          ".DS_Store" # MacOS users, amrite
-        ];
-        description = ''
-          .gitignore patterns that are applied in every repository.
-          This is useful for IDE-specific or environment-specific settings.
-        '';
-        example = [".direnv" "node_modules"];
-      };
-    };
-    # WARNING: This should be completed wtf
-    config."${namespace}".git = {
-      inherit (cfg) name email ignores aliases;
-      enable = true;
-    };
-  };
-
-  git-htran = {
-    imports = [inputs.cells.repo.home-profiles.git];
-    config."${namespace}".profile.git = {
-      name = "htran";
-      email = "htran@egihosting.com";
-    };
-  };
-
-  git-pegasust = {
-    imports = [inputs.cells.repo.home-profiles.git];
-    config."${namespace}".profile.git = {
-      email = "pegasucksgg@gmail.com";
-      name = "pegasust";
-    };
-  };
-
-  dev-packages = let pkgs = inputs.nixpkgs; in {
-    programs.jq.enable = true;
-    home.packages = [
-      pkgs.htop
-      pkgs.ripgrep
-      pkgs.unzip
-      pkgs.zip
-
-      pkgs.yq-go
-      pkgs.mosh
-      pkgs.python310
-    ];
-  };
-
-  # Local nixpkgs search and fallback if command not found to search from nixpkgs
-  nix-index = {
-    imports = [
-      inputs.nix-index-database.hmModules.nix-index
-    ];
-    config.programs.nix-index = {
-      enable = true;
-      enableBashIntegration = true;
-      enableZshIntegration = true;
-    };
-  };
-
-  # digital garden stack
-  zk = {
-    config.xdg.configFile."zk/config.toml".source = "${inputs.self}/native_configs/zk/config.toml";
-    # NB: this is done with lib.mkMerge
-    config.home.packages = [
-      inputs.nixpkgs.zk
-    ];
-  };
-}

nix/cells/repo/home-profiles/neovim.nix

@@ -1,178 +0,0 @@
-# TODO: vim-plug and Mason supports laziness. Probably worth it to explore incremental dependencies based on the project TODO: just install these things, then symlink to mason's bin directory
-#
-# One thing to consider, though, /nix/store of `nix-shell` or `nix-develop`
-# might be different from `home-manager`'s (~/.nix_profile/bin/jq)
-{
-  inputs,
-  cell,
-  namespace,
-}: {
-  pkgs,
-  lib,
-  config,
-  ...
-}: let
-  # NOTE: Add packages to nvim_pkgs instead, so that it's available at userspace
-  # and is added to the path after wrapping.
-  # check: nix repl `homeConfigurations.hungtr.config.programs.neovim.finalPackage.buildCommand`
-  # see: :/--suffix.*PATH
-  # there should be mentions of additional packages
-  my_neovim = pkgs.neovim-unwrapped;
-  inherit (inputs.nixpkgs) system;
-  nvim_pkgs =
-    [
-      # pkgs.gccStdenv
-      pkgs.tree-sitter
-      pkgs.fzf # file name fuzzy search
-      pkgs.ripgrep # content fuzzy search
-      pkgs.zk # Zettelkasten (limited support)
-      pkgs.fd # Required by a Telescope plugin (?)
-      pkgs.stdenv.cc.cc.lib
-      pkgs.nil  # oxalica's better nix language server
-      inputs.nix-boost.packages."${system}".rust4cargo
-      pkgs.nickel
-      pkgs.nls
-
-      pkgs.go # doesn't work, Mason installs from runtime path
-
-      # Language-specific stuffs
-      pkgs.sumneko-lua-language-server
-      # pkgs.python3Packages.python-lsp-server
-      pkgs.nodePackages.pyright
-      pkgs.python3Packages.pylint
-      pkgs.python3Packages.flake8
-      # FIXME: installing ansible from here just doesn't work :/
-      # pkgs.ansible-lint
-      # pkgs.python38Packages.ansible
-      # pkgs.ansible-language-server
-      # TODO: the devShell should provide rust-analyzer so that
-      # cargo test builds binaries compatible with rust-analyzer
-
-      # pkgs.rust-analyzer
-      # rust_pkgs
-      # pkgs.evcxr # Rust REPL for Conjure!
-    ]
-    ++ lib.optionals (pkgs.stdenv.isDarwin) (
-      let
-        inherit (pkgs.darwin.apple_sdk.frameworks) System CoreFoundation;
-      in [
-        System
-        CoreFoundation
-      ]
-    );
-in {
-  options.base.neovim = {
-    enable = lib.mkOption {
-      default = true;
-      description = "enable personalized neovim as default editor";
-      type = lib.types.bool;
-      example = false;
-    };
-  };
-  config = lib.mkIf config.base.neovim.enable {
-    # home-manager
-    programs.neovim = {
-      enable = true;
-      package = my_neovim;
-      viAlias = true;
-      vimAlias = true;
-      withPython3 = true;
-      withNodeJs = true;
-      # NOTE: this adds path to the wrapped version of neovim
-      extraPackages = nvim_pkgs;
-      extraLuaConfig = builtins.readFile "${inputs.self}/native_configs/neovim/init.lua";
-      plugins = let
-        inherit
-          (inputs.nixpkgs-latest.legacyPackages.${system}.vimPlugins)
-          plenary-nvim
-          nvim-treesitter
-          nvim-treesitter-textobjects
-          nvim-treesitter-context
-          telescope-fzf-native-nvim
-          telescope-file-browser-nvim
-          telescope-nvim
-          nvim-lspconfig
-          gruvbox-community
-          neodev-nvim
-          cmp-nvim-lsp
-          cmp-path
-          cmp-buffer
-          cmp-cmdline
-          nvim-cmp
-          lspkind-nvim
-          nvim-autopairs
-          nvim-ts-autotag
-          guess-indent-nvim
-          harpoon
-          zk-nvim
-          luasnip
-          fidget-nvim
-          rust-tools-nvim
-          cmp_luasnip
-          gitsigns-nvim
-          indent-blankline-nvim
-          lualine-nvim
-          mason-lspconfig-nvim
-          mason-nvim
-          neogit
-          nlua-nvim
-          nvim-jqx
-          nvim-surround
-          nvim-web-devicons
-          playground
-          todo-comments-nvim
-          trouble-nvim
-          vim-dispatch
-          vim-dispatch-neovim
-          vim-fugitive
-          vim-jack-in
-          ;
-      in [
-        plenary-nvim
-        nvim-treesitter.withAllGrammars
-        nvim-treesitter-textobjects
-        telescope-fzf-native-nvim
-        telescope-file-browser-nvim
-        telescope-nvim
-        nvim-lspconfig
-        gruvbox-community
-        neodev-nvim
-        cmp-nvim-lsp
-        cmp-path
-        cmp-buffer
-        cmp-cmdline
-        nvim-cmp
-        lspkind-nvim
-        nvim-autopairs
-        nvim-ts-autotag
-        guess-indent-nvim
-        harpoon
-        zk-nvim
-        luasnip
-        nvim-treesitter-context
-        fidget-nvim
-        rust-tools-nvim
-
-        cmp_luasnip
-        gitsigns-nvim
-        indent-blankline-nvim
-        lualine-nvim
-        mason-lspconfig-nvim
-        mason-nvim
-        neogit
-        nlua-nvim
-        nvim-jqx
-        nvim-surround
-        nvim-web-devicons
-        playground
-        todo-comments-nvim
-        trouble-nvim
-        vim-dispatch
-        vim-dispatch-neovim
-        vim-fugitive
-        vim-jack-in
-      ];
-    };
-    # home.packages = nvim_pkgs;
-  };
-}

nix/cells/repo/home-profiles/shells.nix

@@ -1,133 +0,0 @@
-{
-  inputs,
-  cell,
-  namespace,
-}: {
-  config,
-  lib,
-  pkgs,
-  ...
-}: let
-  cfg = config."${namespace}".shells;
-in {
-  options."${namespace}".shells = {
-    enable = lib.mkOption {
-      type = lib.types.bool;
-      description = "Enable umbrella shell configuration";
-      default = true;
-      example = false;
-    };
-    shellInitExtra = lib.mkOption {
-      type = lib.types.str;
-      description = "Extra shell init. The syntax should be sh-compliant";
-      default = "";
-      example = ''
-        # X11 support for WSL
-        export DISPLAY=$(ip route list default | awk '{print $3}'):0
-        export LIBGL_ALWAYS_INDIRECT=1
-      '';
-    };
-    shellAliases = lib.mkOption {
-      type = lib.types.attrs;
-      description = "Shell command aliases";
-      default = {};
-      example = {
-        nixGL = "nixGLIntel";
-      };
-    };
-  };
-  config = lib.mkIf cfg.enable {
-    # nix: Propagates the environment with packages and vars when enter (children of)
-    # a directory with shell.nix-compatible and .envrc
-    programs.direnv = {
-      enable = true;
-      nix-direnv.enable = true;
-      # nix-direnv.enableFlakes = true; # must remove. this will always be supported.
-    };
-    # z <path> as smarter cd
-    programs.zoxide = {
-      enable = true;
-      enableZshIntegration = true;
-    };
-    programs.tmux = {
-      enable = true;
-      plugins = let inherit (pkgs.tmuxPlugins) cpu net-speed; in [cpu net-speed];
-      extraConfig = builtins.readFile "${inputs.self}/native_configs/tmux/tmux.conf";
-    };
-    xdg.configFile."tmux/tmux.conf".text = lib.mkOrder 600 ''
-      set -g status-right '#{cpu_bg_color} CPU: #{cpu_icon} #{cpu_percentage} | %a %h-%d %H:%M '
-    '';
-    # Colored ls
-    programs.exa = {
-      enable = true;
-      enableAliases = true;
-    };
-    # Make the shell look beautiful
-    programs.starship = {
-      enable = true;
-      enableZshIntegration = true;
-      settings = let
-        native = builtins.fromTOML (builtins.readFile "${inputs.self}/native_configs/starship/starship.toml");
-        patch-nix = pkgs.lib.recursiveUpdate native {
-          # WARNING: home-manager fails on here for some reason. Likely not at the 
-          # validation phase (type-checking), but at evaluation phaase (stringify)
-          # I'm thinking when `settings` are evaluated, it has some sort of
-          # recursive processing before it gets turned into a toml
-          # c.commands = [
-          #   ["nix" "run" "nixpkgs#clang" "--" "--version"]
-          #   ["nix" "run" "nixpkgs#gcc" "--" "--version"]
-          # ];
-          c.disabled = true;
-        };
-      in
-        patch-nix;
-    };
-    # Fuzzy finder. `fzf` for TUI, `fzf -f '<fuzzy query>'` for UNIX piping
-    programs.fzf.enable = true;
-    programs.bash = {
-      enable = true;
-      enableCompletion = true;
-      initExtra = cfg.shellInitExtra or "";
-    };
-    programs.zsh = {
-      enable = true;
-      enableCompletion = true;
-      enableAutosuggestions = true;
-      shellAliases =
-        {
-          nix-rebuild = "sudo nixos-rebuild switch";
-          hm-switch = "home-manager switch --flake";
-        }
-        // (cfg.shellAliases or {});
-      history = {
-        size = 10000;
-        path = "${config.xdg.dataHome}/zsh/history";
-      };
-      oh-my-zsh = {
-        enable = true;
-        plugins = [
-          "git" # git command aliases: https://github.com/ohmyzsh/ohmyzsh/tree/master/plugins/git#aliases
-          "command-not-found" # suggests which package to install; does not support nixos (we have solution already)
-          "gitignore" # `gi list` -> `gi java >>.gitignore`
-          "ripgrep" # adds completion for `rg`
-          "rust" # compe for rustc/cargo
-          "poetry" # compe for poetry - Python's cargo
-        ];
-      };
-      sessionVariables = {
-        # Vim mode on the terminal
-        # VI_MODE_RESET_PROMPT_ON_MODE_CHANGE = true;
-        # VI_MODE_SET_CURSOR = true;
-        # ZVM_VI_ESCAPE_BINDKEY = "";
-        ZVM_READKEY_ENGINE = "$ZVM_READKEY_ENGINE_NEX";
-        ZVM_KEYTIMEOUT = 0.004; # 40ms, or subtly around 25 FPS. I'm a gamer :)
-        ZVM_ESCAPE_KEYTIMEOUT = 0.004; # 40ms, or subtly around 25 FPS. I'm a gamer :)
-      };
-      initExtra =
-        (cfg.shellInitExtra or "")
-        + ''
-          source ${pkgs.zsh-vi-mode}/share/zsh-vi-mode/zsh-vi-mode.plugin.zsh
-        '';
-    };
-  };
-}

nix/cells/repo/lib/default.nix

@@ -1,16 +0,0 @@
-{ inputs, cell }:
-let
-  namespace = "repo"; # ignore: unused
-
-  yamlToJsonDrv = pkgs: yamlContent: outputPath: (pkgs.runCommand
-    outputPath
-    { inherit yamlContent; nativeBuildInputs = [ pkgs.yq ]; }
-    # run yq which outputs '.' (no filter) on file at yamlPath
-    # note that $out is passed onto the bash/sh script for execution
-    ''
-      echo "$yamlContent" | yq >$out
-    '');
-in
-{
-  fromYAML = yamlContent: builtins.fromJSON (builtins.readFile (yamlToJsonDrv inputs.nixpkgs yamlContent "fromYaml.json"));
-}