Fix recursion on self

.sops.yaml

@@ -1,17 +1,15 @@
 keys:
   - &primary age1ee5udznhadk6m7jtglu4709rep080yjyd2ukzdl8jma4mm92y3psv0slpg
   - &aspi-ssh age1q8lc5340gz5xw2f57nglrss68wv0j0hf36py2pdtrl6ky3yrq9qqk0njr4
-  - &pianonix-ssh age1tguyu2yd5xv8rgjjl50cq6dq5rr7umqgv098dgre4u9wyj30ea7sexw62c
   - &builder-ssh age1kw4kmdm45zprvdkrrpvgq966l7585vhusmum083qlwnr0xxgd3uqatcyja
   - &kardorf-ssh age15lxw97z03q40xrdscnxqqugh5ky5aqrerg2t2rphkcqm6rnllurq8v98q5
 
 creation_rules:
-  - path_regex: hosts/common/secrets.yaml$
+  - path_regex: hosts/secrets-common.yaml$
     key_groups:
     - age:
       - *primary
       - *aspi-ssh
-      - *pianonix-ssh
       - *kardorf-ssh
 
   - path_regex: hosts/builder/secrets.yaml$
@@ -19,9 +17,3 @@ creation_rules:
     - age:
       - *primary
       - *builder-ssh
-
-  - path_regex: hosts/pianonix/secrets*
-    key_groups:
-    - age:
-      - *primary
-      - *pianonix-ssh

features-nixos/base/auto-upgrade.nix

@@ -1,18 +0,0 @@
-{
-  flake.nixosModules.base = {
-    inputs,
-    config,
-    ...
-  }: {
-    system.hydraAutoUpgrade = {
-      # Only enable if not dirty
-      enable = inputs.self ? rev;
-      dates = "*:0/10"; # Every 10 minutes
-      instance = "http://hydra.julian-mutter.de";
-      project = "dotfiles";
-      jobset = "main";
-      job = "hosts.${config.networking.hostName}";
-      oldFlakeRef = "self";
-    };
-  };
-}

features-nixos/base/default.nix

@@ -1,40 +0,0 @@
-# Common config for all hosts
-{
-  flake.nixosModules.base = {
-    inputs,
-    outputs,
-    pkgs,
-    lib,
-    ...
-  }: {
-    imports = [
-      inputs.home-manager.nixosModules.home-manager
-    ];
-
-    # Replaces the (modulesPath + "/installer/scan/not-detected.nix") from default hardware-configuration.nix
-    # Enables non-free firmware
-    hardware.enableRedistributableFirmware = true;
-
-    # Networking
-    networking.networkmanager = {
-      enable = true;
-      plugins = with pkgs; [
-        networkmanager-openconnect
-      ];
-    };
-    services.resolved.enable = false;
-    # MDNS Taken by avahi
-    # networking.networkmanager.dns = "none";
-    networking.nameservers = lib.mkDefault [
-      "1.1.1.1"
-      "8.8.8.8"
-    ];
-
-    # HM module
-    home-manager.useGlobalPkgs = true; # hm module uses the pkgs of the nixos config
-    home-manager.backupFileExtension = "hm-backup"; # backup conflicting files. So hm activation never fails
-    home-manager.extraSpecialArgs = {
-      inherit inputs outputs;
-    };
-  };
-}

features-nixos/base/fish.nix

@@ -1,12 +0,0 @@
-{
-  flake.nixosModules.base = {
-    programs.fish = {
-      enable = true;
-      vendor = {
-        completions.enable = true;
-        config.enable = true;
-        functions.enable = true;
-      };
-    };
-  };
-}

features-nixos/base/locale.nix

@@ -1,28 +0,0 @@
-{
-  flake.nixosModules.base = {
-    # Select internationalisation properties.
-    i18n.defaultLocale = "en_US.UTF-8";
-
-    i18n.extraLocaleSettings = {
-      LC_ADDRESS = "de_DE.UTF-8";
-      LC_IDENTIFICATION = "de_DE.UTF-8";
-      LC_MEASUREMENT = "de_DE.UTF-8";
-      LC_MONETARY = "de_DE.UTF-8";
-      LC_NAME = "de_DE.UTF-8";
-      LC_NUMERIC = "en_US.UTF-8";
-      LC_PAPER = "de_DE.UTF-8";
-      LC_TELEPHONE = "de_DE.UTF-8";
-      LC_TIME = "de_DE.UTF-8";
-    };
-
-    # Keymap
-    services.xserver.xkb = {
-      layout = "de";
-      variant = "";
-    };
-
-    console.keyMap = "de";
-
-    time.timeZone = "Europe/Berlin";
-  };
-}

features-nixos/base/nix.nix

@@ -1,48 +0,0 @@
-{
-  flake.nixosModules.base = {outputs, ...}: {
-    # Apply overlays
-    nixpkgs = {
-      # TODO: apply this to hm and nixos without duplicate code
-      overlays = builtins.attrValues outputs.overlays;
-      config = {
-        nvidia.acceptLicense = true;
-        allowUnfree = true;
-        allowUnfreePredicate = _: true; # TODO: what is this
-        warn-dirty = false;
-        permittedInsecurePackages = [
-          "olm-3.2.16"
-        ];
-      };
-    };
-
-    # optimize at every build, slows down builds
-    # better to do optimise.automatic for regular optimising
-    # nix.settings.auto-optimise-store = lib.mkDefault true;
-    nix.settings.experimental-features = [
-      "nix-command"
-      "flakes"
-      "ca-derivations"
-    ];
-    # warn-dirty = false;
-
-    nix.gc = {
-      automatic = true;
-      dates = "weekly";
-      options = "--delete-older-than 30d";
-      persistent = true;
-    };
-    nix.optimise = {
-      automatic = true;
-      dates = ["weekly"]; # Optional; allows customizing optimisation schedule
-      persistent = true;
-    };
-
-    programs.nix-ld.enable = true;
-
-    # TODO: is this useful?, what does it do?
-    # nix.settings.flake-registry = ""; # Disable global flake registry
-    # Add each flake input as a registry and nix_path
-    # registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;
-    # nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;
-  };
-}

features-nixos/base/root.nix

@@ -1,11 +0,0 @@
-{
-  flake.nixosModules.base = {pkgs, ...}: {
-    # Packages needed as root
-    environment.systemPackages = with pkgs; [
-      vim
-      htop
-      mc
-      gparted-xhost # needs to be installed as system package so it can be actually opened
-    ];
-  };
-}

features-nixos/base/sops/sops.nix

@@ -1,24 +0,0 @@
-{
-  flake.nixosModules.base = {
-    inputs,
-    config,
-    ...
-  }: let
-    isEd25519 = k: k.type == "ed25519";
-    getKeyPath = k: k.path;
-    keys = builtins.filter isEd25519 config.services.openssh.hostKeys;
-  in {
-    imports = [inputs.sops-nix.nixosModules.sops];
-
-    sops.age = {
-      sshKeyPaths = map getKeyPath keys;
-
-      # TODO: remove? only rely on ssh or pgp keys (e.g. ubikey like misterio is using!!!)
-      # keyFile = "/home/julian/.config/sops/age/keys.txt";
-      # Generate key if none of the above worked. With this, building will still work, just without secrets
-      generateKey = false; # TODO: building should not work without secrets!?
-    };
-
-    sops.defaultSopsFile = ./secrets.yaml;
-  };
-}

features-nixos/global/auto-upgrade.nix

@@ -0,0 +1,16 @@
+{
+  inputs,
+  config,
+  ...
+}: {
+  system.hydraAutoUpgrade = {
+    # Only enable if not dirty
+    enable = inputs.self ? rev;
+    dates = "*:0/10"; # Every 10 minutes
+    instance = "http://hydra.julian-mutter.de";
+    project = "dotfiles";
+    jobset = "main";
+    job = "hosts.${config.networking.hostName}";
+    oldFlakeRef = "self";
+  };
+}

features-nixos/global/default.nix

@@ -0,0 +1,47 @@
+# Common config for all hosts
+{
+  inputs,
+  outputs,
+  pkgs,
+  lib,
+  ...
+}: {
+  imports =
+    [
+      ./fish.nix # fish for admin
+      ./locale.nix
+      ./nix.nix
+      ./sops.nix
+      ./root.nix
+    ]
+    ++ [
+      inputs.home-manager.nixosModules.home-manager
+    ]
+    ++ (builtins.attrValues outputs.nixosModules);
+
+  # Replaces the (modulesPath + "/installer/scan/not-detected.nix") from default hardware-configuration.nix
+  # Enables non-free firmware
+  hardware.enableRedistributableFirmware = true;
+
+  # Networking
+  networking.networkmanager = {
+    enable = true;
+    plugins = with pkgs; [
+      networkmanager-openconnect
+    ];
+  };
+  services.resolved.enable = false;
+  # MDNS Taken by avahi
+  # networking.networkmanager.dns = "none";
+  networking.nameservers = lib.mkDefault [
+    "1.1.1.1"
+    "8.8.8.8"
+  ];
+
+  # HM module
+  home-manager.useGlobalPkgs = true; # hm module uses the pkgs of the nixos config
+  home-manager.backupFileExtension = "hm-backup"; # backup conflicting files. So hm activation never fails
+  home-manager.extraSpecialArgs = {
+    inherit inputs outputs;
+  };
+}

features-nixos/global/fish.nix

@@ -0,0 +1,10 @@
+{
+  programs.fish = {
+    enable = true;
+    vendor = {
+      completions.enable = true;
+      config.enable = true;
+      functions.enable = true;
+    };
+  };
+}

features-nixos/global/locale.nix

@@ -0,0 +1,26 @@
+{
+  # Select internationalisation properties.
+  i18n.defaultLocale = "en_US.UTF-8";
+
+  i18n.extraLocaleSettings = {
+    LC_ADDRESS = "de_DE.UTF-8";
+    LC_IDENTIFICATION = "de_DE.UTF-8";
+    LC_MEASUREMENT = "de_DE.UTF-8";
+    LC_MONETARY = "de_DE.UTF-8";
+    LC_NAME = "de_DE.UTF-8";
+    LC_NUMERIC = "en_US.UTF-8";
+    LC_PAPER = "de_DE.UTF-8";
+    LC_TELEPHONE = "de_DE.UTF-8";
+    LC_TIME = "de_DE.UTF-8";
+  };
+
+  # Keymap
+  services.xserver.xkb = {
+    layout = "de";
+    variant = "";
+  };
+
+  console.keyMap = "de";
+
+  time.timeZone = "Europe/Berlin";
+}

features-nixos/global/nix.nix

@@ -0,0 +1,46 @@
+{outputs, ...}: {
+  # Apply overlays
+  nixpkgs = {
+    # TODO: apply this to hm and nixos without duplicate code
+    overlays = builtins.attrValues outputs.overlays;
+    config = {
+      nvidia.acceptLicense = true;
+      allowUnfree = true;
+      allowUnfreePredicate = _: true; # TODO: what is this
+      warn-dirty = false;
+      permittedInsecurePackages = [
+        "olm-3.2.16"
+      ];
+    };
+  };
+
+  # optimize at every build, slows down builds
+  # better to do optimise.automatic for regular optimising
+  # nix.settings.auto-optimise-store = lib.mkDefault true;
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+    "ca-derivations"
+  ];
+  # warn-dirty = false;
+
+  nix.gc = {
+    automatic = true;
+    dates = "weekly";
+    options = "--delete-older-than 30d";
+    persistent = true;
+  };
+  nix.optimise = {
+    automatic = true;
+    dates = ["weekly"]; # Optional; allows customizing optimisation schedule
+    persistent = true;
+  };
+
+  programs.nix-ld.enable = true;
+
+  # TODO: is this useful?, what does it do?
+  # nix.settings.flake-registry = ""; # Disable global flake registry
+  # Add each flake input as a registry and nix_path
+  # registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;
+  # nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;
+}

features-nixos/global/root.nix

@@ -0,0 +1,9 @@
+{pkgs, ...}: {
+  # Packages needed as root
+  environment.systemPackages = with pkgs; [
+    vim
+    htop
+    mc
+    gparted-xhost # needs to be installed as system package so it can be actually opened
+  ];
+}

features-nixos/global/sops.nix

@@ -0,0 +1,23 @@
+{
+  pwd,
+  inputs,
+  config,
+  ...
+}: let
+  isEd25519 = k: k.type == "ed25519";
+  getKeyPath = k: k.path;
+  keys = builtins.filter isEd25519 config.services.openssh.hostKeys;
+in {
+  imports = [inputs.sops-nix.nixosModules.sops];
+
+  sops.age = {
+    sshKeyPaths = map getKeyPath keys;
+
+    # TODO: remove? only rely on ssh or pgp keys (e.g. ubikey like misterio is using!!!)
+    # keyFile = "/home/julian/.config/sops/age/keys.txt";
+    # Generate key if none of the above worked. With this, building will still work, just without secrets
+    generateKey = false; # TODO: building should not work without secrets!?
+  };
+
+  sops.defaultSopsFile = "${pwd}/hosts/secrets-common.yaml";
+}

features-nixos/optional/authentication.nix

@@ -1,30 +1,28 @@
 {
-  flake.nixosModules.authentication = {
+  pkgs,
-    pkgs,
+  lib,
-    lib,
+  ...
-    ...
+}: {
-  }: {
+  # Make programs like nextcloud client access saved passwords
-    # Make programs like nextcloud client access saved passwords
+  services.gnome.gnome-keyring.enable = true;
-    services.gnome.gnome-keyring.enable = true;
 
-    programs.seahorse.enable = true;
+  programs.seahorse.enable = true;
-    programs.ssh.askPassword = lib.mkForce "${pkgs.seahorse}/libexec/seahorse/ssh-askpass"; # Solve conflicting definition in seahorse and plasma6
+  programs.ssh.askPassword = lib.mkForce "${pkgs.seahorse}/libexec/seahorse/ssh-askpass"; # Solve conflicting definition in seahorse and plasma6
 
-    # Make authentication work for e.g. gparted
+  # Make authentication work for e.g. gparted
-    security.polkit.enable = true;
+  security.polkit.enable = true;
-    systemd = {
+  systemd = {
-      user.services.polkit-gnome-authentication-agent-1 = {
+    user.services.polkit-gnome-authentication-agent-1 = {
-        description = "polkit-gnome-authentication-agent-1";
+      description = "polkit-gnome-authentication-agent-1";
-        wantedBy = ["graphical-session.target"];
+      wantedBy = ["graphical-session.target"];
-        wants = ["graphical-session.target"];
+      wants = ["graphical-session.target"];
-        after = ["graphical-session.target"];
+      after = ["graphical-session.target"];
-        serviceConfig = {
+      serviceConfig = {
-          Type = "simple";
+        Type = "simple";
-          ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
+        ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
-          Restart = "on-failure";
+        Restart = "on-failure";
-          RestartSec = 1;
+        RestartSec = 1;
-          TimeoutStopSec = 10;
+        TimeoutStopSec = 10;
-        };
       };
     };
   };

features-nixos/optional/avahi.nix

@@ -1,14 +1,12 @@
 {
-  flake.nixosModules.avahi = {
+  # MDNS on local network
-    # MDNS on local network
+  services.avahi = {
-    services.avahi = {
+    enable = true;
-      enable = true;
+    nssmdns4 = true;
-      nssmdns4 = true;
+    nssmdns6 = true;
-      nssmdns6 = true;
+    publish.enable = true;
-      publish.enable = true;
+    publish.addresses = true;
-      publish.addresses = true;
+    ipv4 = true;
-      ipv4 = true;
+    ipv6 = true;
-      ipv6 = true;
-    };
   };
 }

features-nixos/optional/binarycaches.nix

@@ -1,33 +1,31 @@
 {
-  flake.nixosModules.binarycaches = {
+  lib,
-    lib,
+  outputs,
-    outputs,
+  ...
-    ...
+}: {
-  }: {
+  # Setup binary caches
-    # Setup binary caches
+  nix.settings = {
-    nix.settings = {
+    substituters = [
-      substituters = [
+      "https://nix-community.cachix.org"
-        "https://nix-community.cachix.org"
+      "https://cache.nixos.org/"
-        "https://cache.nixos.org/"
+      "https://hyprland.cachix.org"
-        "https://hyprland.cachix.org"
+      "http://binarycache.julian-mutter.de"
-        "http://binarycache.julian-mutter.de"
+      "https://devenv.cachix.org"
-        "https://devenv.cachix.org"
+    ];
-      ];
+    trusted-public-keys = [
-      trusted-public-keys = [
+      "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+      "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
-        "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
+      "binarycache.julian-mutter.de:oJ67uRFwRhNPKL58CHzy3QQLv38Kx7OA1K+6xlEPu7E="
-        "binarycache.julian-mutter.de:oJ67uRFwRhNPKL58CHzy3QQLv38Kx7OA1K+6xlEPu7E="
+      "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
-        "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
+      "devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw="
-        "devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw="
+    ];
-      ];
 
-      trusted-users = [
+    trusted-users = [
-        "root"
+      "root"
-        "@wheel"
+      "@wheel"
-      ]; # needed for devenv to add custom caches
+    ]; # needed for devenv to add custom caches
 
-      # Ensure we can still build when missing-server is not accessible
+    # Ensure we can still build when missing-server is not accessible
-      fallback = true;
+    fallback = true;
-    };
   };
 }

features-nixos/optional/boot-efi.nix

@@ -1,19 +1,17 @@
 {
-  flake.nixosModules.boot-efi = {
+  # Bootloader
-    # Bootloader
+  # Use this for simple nix boot menu, if no dual boot required
-    # Use this for simple nix boot menu, if no dual boot required
+  boot.loader.systemd-boot.enable = true;
-    boot.loader.systemd-boot.enable = true;
+  boot.loader.systemd-boot.configurationLimit = 10;
-    boot.loader.systemd-boot.configurationLimit = 10;
+  boot.loader.efi.canTouchEfiVariables = true;
-    boot.loader.efi.canTouchEfiVariables = true;
 
-    # https://github.com/NixOS/nixpkgs/blob/c32c39d6f3b1fe6514598fa40ad2cf9ce22c3fb7/nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix#L66
+  # https://github.com/NixOS/nixpkgs/blob/c32c39d6f3b1fe6514598fa40ad2cf9ce22c3fb7/nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix#L66
-    boot.loader.systemd-boot.editor = false;
+  boot.loader.systemd-boot.editor = false;
 
-    boot.supportedFilesystems = [
+  boot.supportedFilesystems = [
-      "btrfs"
+    "btrfs"
-      "ntfs"
+    "ntfs"
-      "nfs"
+    "nfs"
-      "cifs"
+    "cifs"
-    ];
+  ];
-  };
 }

features-nixos/optional/docker.nix

@@ -1,7 +1,5 @@
 {
-  flake.nixosModules.docker = {
+  virtualisation.docker = {
-    virtualisation.docker = {
+    enable = true;
-      enable = true;
-    };
   };
 }

features-nixos/optional/flatpak.nix

@@ -1,8 +1,6 @@
-{
+{pkgs, ...}: {
-  flake.nixosModules.flatpak = {pkgs, ...}: {
+  services.flatpak.enable = true;
-    services.flatpak.enable = true;
+  xdg.portal.enable = true;
-    xdg.portal.enable = true;
+  xdg.portal.extraPortals = [pkgs.xdg-desktop-portal-gtk];
-    xdg.portal.extraPortals = [pkgs.xdg-desktop-portal-gtk];
+  xdg.portal.config.common.default = "*"; # Use first portal implementation found
-    xdg.portal.config.common.default = "*"; # Use first portal implementation found
-  };
 }

features-nixos/optional/gamemode.nix

@@ -1,22 +1,20 @@
-{
+{pkgs, ...}: {
-  flake.nixosModules.gamemode = {pkgs, ...}: {
+  programs.gamemode = {
-    programs.gamemode = {
+    enable = true;
-      enable = true;
+    settings = {
-      settings = {
+      general = {
-        general = {
+        softrealtime = "auto";
-          softrealtime = "auto";
+        inhibit_screensaver = 1;
-          inhibit_screensaver = 1;
+        renice = 5;
-          renice = 5;
+      };
-        };
+      # gpu = {
-        # gpu = {
+      #   apply_gpu_optimisations = "accept-responsibility";
-        #   apply_gpu_optimisations = "accept-responsibility";
+      #   gpu_device = 1;
-        #   gpu_device = 1;
+      #   amd_performance_level = "high";
-        #   amd_performance_level = "high";
+      # };
-        # };
+      custom = {
-        custom = {
+        start = "${pkgs.libnotify}/bin/notify-send 'GameMode started'";
-          start = "${pkgs.libnotify}/bin/notify-send 'GameMode started'";
+        end = "${pkgs.libnotify}/bin/notify-send 'GameMode ended'";
-          end = "${pkgs.libnotify}/bin/notify-send 'GameMode ended'";
-        };
       };
     };
   };

features-nixos/optional/gdm.nix

@@ -1,15 +1,13 @@
 {
-  flake.nixosModules.gdm = {
+  config,
-    config,
+  lib,
-    lib,
+  pkgs,
-    pkgs,
+  ...
-    ...
+}: {
-  }: {
+  services.xserver.displayManager.gdm = {
-    services.xserver.displayManager.gdm = {
+    enable = true;
-      enable = true;
-    };
-
-    # unlock GPG keyring on login
-    security.pam.services.gdm.enableGnomeKeyring = true;
   };
+
+  # unlock GPG keyring on login
+  security.pam.services.gdm.enableGnomeKeyring = true;
 }

features-nixos/optional/greetd.nix

@@ -1,39 +1,37 @@
-{
+{config, ...}: let
-  flake.nixosModules.greetd = {config, ...}: let
+  homeCfgs = config.home-manager.users;
-    homeCfgs = config.home-manager.users;
+  julianCfg = homeCfgs.julian;
-    julianCfg = homeCfgs.julian;
+in {
-  in {
+  users.extraUsers.greeter = {
-    users.extraUsers.greeter = {
+    # For caching
-      # For caching
+    home = "/tmp/greeter-home";
-      home = "/tmp/greeter-home";
+    createHome = true;
-      createHome = true;
+  };
-    };
 
-    programs.regreet = {
+  programs.regreet = {
-      enable = true;
+    enable = true;
-      iconTheme = julianCfg.gtk.iconTheme;
+    iconTheme = julianCfg.gtk.iconTheme;
-      theme = julianCfg.gtk.theme;
+    theme = julianCfg.gtk.theme;
-      # font = julianCfg.fontProfiles.regular; # TODO: do
+    # font = julianCfg.fontProfiles.regular; # TODO: do
-      cursorTheme = {
+    cursorTheme = {
-        inherit (julianCfg.gtk.cursorTheme) name package;
+      inherit (julianCfg.gtk.cursorTheme) name package;
-      };
-      cageArgs = [
-        "-s"
-        "-m"
-        "last"
-      ]; # multimonitor use last monitor
-      # settings.background = {
-      #   path = julianCfg.wallpaper;
-      #   fit = "Cover";
-      # }; # TODO: fix
-
-      # TODO: setting keyboard language does not work
-      # settings = {
-      #   env = {
-      #     XKB_DEFAULT_LAYOUT = "de";
-      #     # XKB_DEFAULT_VARIANT = "altgr-intl";
-      #   };
-      # };
     };
+    cageArgs = [
+      "-s"
+      "-m"
+      "last"
+    ]; # multimonitor use last monitor
+    # settings.background = {
+    #   path = julianCfg.wallpaper;
+    #   fit = "Cover";
+    # }; # TODO: fix
+
+    # TODO: setting keyboard language does not work
+    # settings = {
+    #   env = {
+    #     XKB_DEFAULT_LAYOUT = "de";
+    #     # XKB_DEFAULT_VARIANT = "altgr-intl";
+    #   };
+    # };
   };
 }

features-nixos/optional/i3.nix

@@ -1,18 +1,16 @@
 {
-  flake.nixosModules.i3 = {
+  config,
-    config,
+  lib,
-    lib,
+  pkgs,
-    pkgs,
+  ...
-    ...
+}: {
-  }: {
+  services.xserver.windowManager.i3.enable = true;
-    services.xserver.windowManager.i3.enable = true;
+  services.xserver.windowManager.i3.package = pkgs.i3-gaps;
-    services.xserver.windowManager.i3.package = pkgs.i3-gaps;
+  services.displayManager.defaultSession = "none+i3";
-    services.displayManager.defaultSession = "none+i3";
 
-    programs.xss-lock = {
+  programs.xss-lock = {
-      # responds to "loginctl lock-session" via dbus
+    # responds to "loginctl lock-session" via dbus
-      enable = true;
+    enable = true;
-      lockerCommand = "${pkgs.i3lock}/bin/i3lock --ignore-empty-password --color=000000";
+    lockerCommand = "${pkgs.i3lock}/bin/i3lock --ignore-empty-password --color=000000";
-    };
   };
 }

features-nixos/optional/kerberos.nix

@@ -1,24 +1,22 @@
 {
-  flake.nixosModules.kerberos = {
+  security.krb5.enable = true;
-    security.krb5.enable = true;
+  security.krb5.settings = {
-    security.krb5.settings = {
+    # domain_realm = {
-      # domain_realm = {
+    #   ".julian-mutter.de" = "julian-mutter.de";
-      #   ".julian-mutter.de" = "julian-mutter.de";
+    #   "julian-mutter.de" = "julian-mutter.de";
-      #   "julian-mutter.de" = "julian-mutter.de";
+    # };
-      # };
+    libdefaults = {
-      libdefaults = {
+      default_realm = "julian-mutter.de";
-        default_realm = "julian-mutter.de";
+      #   dns_lookup_realm = true;
-        #   dns_lookup_realm = true;
+      #   dns_lookup_kdc = true;
-        #   dns_lookup_kdc = true;
+      #   ticket_lifetime = "24h";
-        #   ticket_lifetime = "24h";
+      #   renew_lifetime = "7d";
-        #   renew_lifetime = "7d";
+    };
-      };
+    realms = {
-      realms = {
+      "julian-mutter.de" = {
-        "julian-mutter.de" = {
+        kdc = ["kerberos.julian-mutter.de"];
-          kdc = ["kerberos.julian-mutter.de"];
+        admin_server = "kerberos-admin.julian-mutter.de";
-          admin_server = "kerberos-admin.julian-mutter.de";
+        default_domain = "julian-mutter.de";
-          default_domain = "julian-mutter.de";
-        };
       };
     };
   };

features-nixos/optional/openssh.nix

@@ -1,51 +1,49 @@
 {
-  flake.nixosModules.openssh = {
+  outputs,
-    outputs,
+  lib,
-    lib,
+  config,
-    config,
+  ...
-    ...
+}: let
-  }: let
+  hosts = lib.attrNames outputs.nixosConfigurations;
-    hosts = lib.attrNames outputs.nixosConfigurations;
+in {
-  in {
+  services.openssh = {
-    services.openssh = {
+    enable = true;
-      enable = true;
+    settings = {
-      settings = {
+      # Harden
-        # Harden
+      PasswordAuthentication = false;
-        PasswordAuthentication = false;
+      PermitRootLogin = "no";
-        PermitRootLogin = "no";
 
-        # TODO: what does this do
+      # TODO: what does this do
-        # Let WAYLAND_DISPLAY be forwarded
+      # Let WAYLAND_DISPLAY be forwarded
-        AcceptEnv = "WAYLAND_DISPLAY";
+      AcceptEnv = "WAYLAND_DISPLAY";
-        X11Forwarding = true;
+      X11Forwarding = true;
-      };
-
-      hostKeys = [
-        {
-          path = "/etc/ssh/ssh_host_ed25519_key";
-          type = "ed25519";
-        }
-      ];
     };
 
-    # TODO: is automatic known hosts file even necessary?
+    hostKeys = [
-    # programs.ssh = {
+      {
-    #   # Each hosts public key
+        path = "/etc/ssh/ssh_host_ed25519_key";
-    #   knownHosts = lib.genAttrs hosts (hostname: {
+        type = "ed25519";
-    #     publicKeyFile = ../../${hostname}/ssh_host_ed25519_key.pub;
+      }
-    #     extraHostNames =
+    ];
-    #       [
-    #         # "${hostname}.m7.rs"
-    #       ]
-    #       ++
-    #         # Alias for localhost if it's the same host
-    #         (lib.optional (hostname == config.networking.hostName) "localhost")
-    #       # Alias to m7.rs and git.m7.rs if it's alcyone
-    #       ++ (lib.optionals (hostname == "alcyone") [
-    #         "m7.rs"
-    #         "git.m7.rs"
-    #       ]);
-    #   });
-    # };
   };
+
+  # TODO: is automatic known hosts file even necessary?
+  # programs.ssh = {
+  #   # Each hosts public key
+  #   knownHosts = lib.genAttrs hosts (hostname: {
+  #     publicKeyFile = ../../${hostname}/ssh_host_ed25519_key.pub;
+  #     extraHostNames =
+  #       [
+  #         # "${hostname}.m7.rs"
+  #       ]
+  #       ++
+  #         # Alias for localhost if it's the same host
+  #         (lib.optional (hostname == config.networking.hostName) "localhost")
+  #       # Alias to m7.rs and git.m7.rs if it's alcyone
+  #       ++ (lib.optionals (hostname == "alcyone") [
+  #         "m7.rs"
+  #         "git.m7.rs"
+  #       ]);
+  #   });
+  # };
 }

features-nixos/optional/pcmanfm.nix

@@ -1,11 +1,9 @@
-{
+{pkgs, ...}: {
-  flake.nixosModules.pcmanfm = {pkgs, ...}: {
+  environment.systemPackages = with pkgs; [
-    environment.systemPackages = with pkgs; [
+    shared-mime-info # extended mimetype support
-      shared-mime-info # extended mimetype support
+    lxmenu-data # open with "Installed Applications"
-      lxmenu-data # open with "Installed Applications"
+    pcmanfm
-      pcmanfm
+  ];
-    ];
 
-    services.gvfs.enable = true; # Mount, trash, and other functionalities
+  services.gvfs.enable = true; # Mount, trash, and other functionalities
-  };
 }

features-nixos/optional/pipewire.nix

@@ -1,28 +1,26 @@
 {
-  flake.nixosModules.pipewire = {
+  security.rtkit.enable = true;
-    security.rtkit.enable = true;
+  services.pulseaudio.enable = false;
-    services.pulseaudio.enable = false;
+  services.pipewire = {
-    services.pipewire = {
+    enable = true;
-      enable = true;
+    wireplumber.enable = true;
-      wireplumber.enable = true;
+    alsa.enable = true;
-      alsa.enable = true;
+    alsa.support32Bit = true;
-      alsa.support32Bit = true;
+    pulse.enable = true;
-      pulse.enable = true;
+    jack.enable = true;
-      jack.enable = true;
+    extraConfig.pipewire = {
-      extraConfig.pipewire = {
+      "99-no-bell" = {
-        "99-no-bell" = {
+        # Disable bell sound
-          # Disable bell sound
+        "context.properties" = {
-          "context.properties" = {
+          "module.x11.bell" = false;
-            "module.x11.bell" = false;
-          };
         };
-        "10-increase-buffer" = {
+      };
-          "context.properties" = {
+      "10-increase-buffer" = {
-            "default.clock.rate" = 48000;
+        "context.properties" = {
-            "default.clock.quantum" = 1024;
+          "default.clock.rate" = 48000;
-            "default.clock.min-quantum" = 1024;
+          "default.clock.quantum" = 1024;
-            "default.clock.max-quantum" = 2048;
+          "default.clock.min-quantum" = 1024;
-          };
+          "default.clock.max-quantum" = 2048;
         };
       };
     };

features-nixos/optional/podman.nix

@@ -1,12 +1,10 @@
-{
+{config, ...}: let
-  flake.nixosModules.podman = {config, ...}: let
+  dockerEnabled = config.virtualisation.docker.enable;
-    dockerEnabled = config.virtualisation.docker.enable;
+in {
-  in {
+  virtualisation.podman = {
-    virtualisation.podman = {
+    enable = true;
-      enable = true;
+    dockerCompat = !dockerEnabled;
-      dockerCompat = !dockerEnabled;
+    dockerSocket.enable = !dockerEnabled;
-      dockerSocket.enable = !dockerEnabled;
+    defaultNetwork.settings.dns_enabled = true;
-      defaultNetwork.settings.dns_enabled = true;
-    };
   };
 }

features-nixos/optional/redshift.nix

@@ -1,14 +1,12 @@
 {
-  flake.nixosModules.redshift = {
+  config,
-    config,
+  lib,
-    lib,
+  pkgs,
-    pkgs,
+  ...
-    ...
+}: {
-  }: {
+  # Set location used by redshift
-    # Set location used by redshift
+  location.provider = "manual";
-    location.provider = "manual";
+  location.latitude = 47.92;
-    location.latitude = 47.92;
+  location.longitude = 10.12;
-    location.longitude = 10.12;
+  services.redshift.enable = true;
-    services.redshift.enable = true;
-  };
 }

features-nixos/optional/remote-builder.nix

@@ -1,36 +1,34 @@
 {
-  flake.nixosModules.remote-builder = {
+  nix.distributedBuilds = true;
-    nix.distributedBuilds = true;
+  nix.settings.builders-use-substitutes = true;
-    nix.settings.builders-use-substitutes = true;
 
-    nix.buildMachines = [
+  nix.buildMachines = [
-      {
+    {
-        hostName = "builder.julian-mutter.de";
+      hostName = "builder.julian-mutter.de";
-        protocol = "ssh";
+      protocol = "ssh";
-        sshUser = "nix";
+      sshUser = "nix";
-        systems = [
+      systems = [
-          "x86_64-linux"
+        "x86_64-linux"
-          "aarch64-linux"
+        "aarch64-linux"
-        ];
+      ];
-        maxJobs = 4;
+      maxJobs = 4;
-        speedFactor = 3;
+      speedFactor = 3;
-        supportedFeatures = [
+      supportedFeatures = [
-          "nixos-test"
+        "nixos-test"
-          "benchmark"
+        "benchmark"
-          "big-parallel"
+        "big-parallel"
-          "kvm"
+        "kvm"
-        ];
+      ];
-        mandatoryFeatures = [];
+      mandatoryFeatures = [];
-      }
+    }
-      # {
+    # {
-      #   hostName = "localhost";
+    #   hostName = "localhost";
-      #   protocol = null;
+    #   protocol = null;
-      #   systems = [
+    #   systems = [
-      #     "x86_64-linux"
+    #     "x86_64-linux"
-      #   ];
+    #   ];
-      #   maxJobs = 4;
+    #   maxJobs = 4;
-      #   speedFactor = 1;
+    #   speedFactor = 1;
-      # }
+    # }
-    ];
+  ];
-  };
 }

features-nixos/optional/thunar.nix

@@ -1,18 +1,16 @@
 {
-  flake.nixosModules.thunar = {
+  config,
-    config,
+  lib,
-    lib,
+  pkgs,
-    pkgs,
+  ...
-    ...
+}: {
-  }: {
+  programs.thunar.enable = true;
-    programs.thunar.enable = true;
+  programs.xfconf.enable = true; # Persist saved preferences
-    programs.xfconf.enable = true; # Persist saved preferences
+  programs.thunar.plugins = with pkgs.xfce; [
-    programs.thunar.plugins = with pkgs.xfce; [
+    thunar-archive-plugin
-      thunar-archive-plugin
+    thunar-volman
-      thunar-volman
+    thunar-media-tags-plugin
-      thunar-media-tags-plugin
+  ];
-    ];
+  services.gvfs.enable = true; # Mount, trash, and other functionalities
-    services.gvfs.enable = true; # Mount, trash, and other functionalities
+  services.tumbler.enable = true; # Thumbnail support for images
-    services.tumbler.enable = true; # Thumbnail support for images
-  };
 }

features-nixos/optional/virtualbox.nix

@@ -1,14 +1,12 @@
 {
-  flake.nixosModules.virtualbox = {
+  config,
-    config,
+  lib,
-    lib,
+  pkgs,
-    pkgs,
+  ...
-    ...
+}: {
-  }: {
+  virtualisation.virtualbox.host.enable = true;
-    virtualisation.virtualbox.host.enable = true;
+  # virtualisation.virtualbox.host.enableExtensionPack = true;
-    # virtualisation.virtualbox.host.enableExtensionPack = true;
+  # virtualisation.virtualbox.guest.enable = true;
-    # virtualisation.virtualbox.guest.enable = true;
+  # virtualisation.virtualbox.guest.x11 = true;
-    # virtualisation.virtualbox.guest.x11 = true;
+  users.extraGroups.vboxusers.members = ["julian"];
-    users.extraGroups.vboxusers.members = ["julian"];
-  };
 }

features-nixos/optional/wireguard.nix

@@ -1,14 +1,12 @@
 {
-  flake.nixosModules.wireguard = {
+  networking.wg-quick.interfaces = {
-    networking.wg-quick.interfaces = {
+    julian = {
-      julian = {
+      configFile = "/etc/wireguard/julian.conf";
-        configFile = "/etc/wireguard/julian.conf";
+      autostart = true; # This interface is started on boot
-        autostart = true; # This interface is started on boot
+    };
-      };
+    comu = {
-      comu = {
+      configFile = "/etc/wireguard/comu.conf";
-        configFile = "/etc/wireguard/comu.conf";
+      autostart = false;
-        autostart = false;
-      };
     };
   };
 }

features-nixos/optional/wireshark.nix

@@ -1,11 +1,9 @@
 {
-  flake.nixosModules.wireshark = {
+  programs.wireshark = {
-    programs.wireshark = {
+    enable = true;
-      enable = true;
+    dumpcap.enable = true;
-      dumpcap.enable = true;
+    usbmon.enable = true;
-      usbmon.enable = true;
-    };
-
-    users.users.julian.extraGroups = ["wireshark"];
   };
+
+  users.users.julian.extraGroups = ["wireshark"];
 }

features-nixos/optional/xserver.nix

@@ -1,8 +1,6 @@
 {
-  flake.nixosModules.xserver = {
+  services.xserver = {
-    services.xserver = {
+    enable = true;
-      enable = true;
+    wacom.enable = true;
-      wacom.enable = true;
-    };
   };
 }

features-nixos/users/julian/default.nix

@@ -1,52 +1,51 @@
 {
-  flake.nixosModules.users.julian = {
+  pwd,
-    pkgs,
+  pkgs,
-    config,
+  config,
-    lib,
+  lib,
-    ...
+  ...
-  }: let
+}: let
-    ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
+  ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
-  in {
+in {
-    users.mutableUsers = false;
+  users.mutableUsers = false;
-    users.users.julian = {
+  users.users.julian = {
-      description = "Julian";
+    description = "Julian";
-      group = "julian";
+    group = "julian";
-      isNormalUser = true;
+    isNormalUser = true;
-      uid = 1000;
+    uid = 1000;
-      shell = pkgs.fish;
+    shell = pkgs.fish;
-      extraGroups = ifTheyExist [
+    extraGroups = ifTheyExist [
-        "networkmanager"
+      "networkmanager"
-        "wheel"
+      "wheel"
-        "audio"
+      "audio"
-        "realtime"
+      "realtime"
-        "rtkit"
+      "rtkit"
-        "network"
+      "network"
-        "video"
+      "video"
-        "podman"
+      "podman"
-        "docker"
+      "docker"
-        "git"
+      "git"
-        "gamemode"
+      "gamemode"
-        "dialout"
+      "dialout"
-      ];
+    ];
 
-      openssh.authorizedKeys.keys = lib.splitString "\n" (
+    openssh.authorizedKeys.keys = lib.splitString "\n" (
-        builtins.readFile ../../../../homes/julian/ssh.pub
+      builtins.readFile ./ssh.pub
-      );
+    );
-      # hashedPasswordFile = config.sops.secrets.julian-password.path;
+    # hashedPasswordFile = config.sops.secrets.julian-password.path;
-      hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A";
+    hashedPassword = "$y$j9T$N33kLJQbV8soUoCbDkpwA1$r/yahJDgOPo4GGOrAi6BUG5zLTzmaBrA5NQ4nno561A";
-      packages = [pkgs.home-manager];
+    packages = [pkgs.home-manager];
-    };
-    users.groups.julian = {
-      gid = 1000;
-    };
-
-    sops.secrets.julian-password = {
-      sopsFile = ../../secrets.yaml;
-      neededForUsers = true;
-    };
-
-    home-manager.users.julian = import ../../../../homes/julian/${config.networking.hostName}.nix;
-
-    security.pam.services.swaylock = {}; # Make swaylock unlocking work
   };
+  users.groups.julian = {
+    gid = 1000;
+  };
+
+  sops.secrets.julian-password = {
+    sopsFile = "${pwd}/hosts/secrets-common.yaml";
+    neededForUsers = true;
+  };
+
+  home-manager.users.julian = import "${pwd}/homes/julian/${config.networking.hostName}.nix";
+
+  security.pam.services.swaylock = {}; # Make swaylock unlocking work
 }

features-nixos/users/pob/default.nix

@@ -1,30 +0,0 @@
-{
-  flake.nixosModules.users.pob = {
-    pkgs,
-    config,
-    ...
-  }: let
-    ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
-  in {
-    users.mutableUsers = false;
-    users.users.pob = {
-      description = "A helper user to use another profile for some applications";
-      group = "pob";
-      isNormalUser = true;
-      shell = pkgs.fish;
-      extraGroups = ifTheyExist [
-        "networkmanager"
-      ];
-      packages = with pkgs; [
-        firefox
-        wineWowPackages.stable # 32-bit and 64-bit wine
-        winetricks
-      ];
-    };
-    users.groups.pob = {};
-
-    security.sudo.extraConfig = ''
-      julian ALL=(pob) NOPASSWD: ALL
-    '';
-  };
-}

features-nixos/users/wolfi/default.nix

@@ -1,32 +1,30 @@
 {
-  flake.nixosModules.users.wolfi = {
+  pkgs,
-    pkgs,
+  config,
-    config,
+  ...
-    ...
+}: let
-  }: let
+  ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
-    ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
+in {
-  in {
+  users.mutableUsers = false;
-    users.mutableUsers = false;
+  users.users.wolfi = {
-    users.users.wolfi = {
+    description = "Wolfi";
-      description = "Wolfi";
+    group = "wolfi";
-      group = "wolfi";
+    isNormalUser = true;
-      isNormalUser = true;
+    shell = pkgs.fish;
-      shell = pkgs.fish;
+    extraGroups = ifTheyExist [
-      extraGroups = ifTheyExist [
+      "networkmanager"
-        "networkmanager"
+      "wheel"
-        "wheel"
+      "audio"
-        "audio"
+      "network"
-        "network"
+      "video"
-        "video"
+      "podman"
-        "podman"
+      "docker"
-        "docker"
+      "git"
-        "git"
+      "gamemode"
-        "gamemode"
+    ];
-      ];
 
-      hashedPassword = "$y$j9T$ifzWjoZaRtPUOOfMYnbJ20$uFOO1EyDApL52vRUicZYgupaTA/a6sGNUj3imZ/lcb6";
+    hashedPassword = "$y$j9T$ifzWjoZaRtPUOOfMYnbJ20$uFOO1EyDApL52vRUicZYgupaTA/a6sGNUj3imZ/lcb6";
-      packages = [pkgs.home-manager];
+    packages = [pkgs.home-manager];
-    };
-    users.groups.wolfi = {};
   };
+  users.groups.wolfi = {};
 }

features-nixos/users/yukari/default.nix

@@ -1,99 +0,0 @@
-{
-  flake.nixosModules.users.yukari = {
-    pkgs,
-    config,
-    lib,
-    outputs,
-    ...
-  }: let
-    ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
-  in {
-    users.mutableUsers = false;
-    users.users.yukari = {
-      description = "Yukari";
-      group = "yukari";
-      isNormalUser = true;
-      shell = pkgs.fish;
-      extraGroups = ifTheyExist [
-        "networkmanager"
-        "audio"
-        "network"
-        "video"
-        "podman"
-        "docker"
-        "git"
-        "gamemode"
-      ];
-
-      createHome = true;
-      hashedPassword = "$y$j9T$rGuTL0rfiy7ht8L58BGCw0$fN.KwHjYlIitFEPHndKvV06ezgeWzP3/58o1kkviZwB";
-      packages = [pkgs.home-manager];
-    };
-    users.groups.yukari = {};
-
-    home-manager.users.yukari = {
-      imports =
-        [
-          ../../../../homes/julian/features/fonts
-          ../../../../homes/julian/features/suites/cli
-        ]
-        ++ (builtins.attrValues outputs.homeManagerModules);
-
-      home = {
-        username = lib.mkDefault "yukari";
-        homeDirectory = lib.mkDefault "/home/${config.home.username}";
-        stateVersion = lib.mkDefault "23.11";
-
-        sessionPath = ["$HOME/.local/bin"];
-
-        packages = with pkgs; [
-          arandr
-          calibre # ebook manager and viewer
-          # digikam
-          discord
-          discord-ptb # in case discord updates take their time
-          # dvdisaster
-          # element-desktop
-          # rocketchat-desktop
-          thunderbird
-          telegram-desktop # telegram
-          # schildichat-desktop # not updated regularly
-          nheko
-          evince # Simple pdf reader, good for focusing on document content
-          firefox
-          vivaldi
-          # geogebra
-          cheese
-          handbrake
-          # kitty # Terminal, already available as feature
-          libnotify
-          libreoffice
-          mate.engrampa
-          nomacs # Image viewer
-          kdePackages.okular # Pdf reader with many features, good for commenting documents
-          pavucontrol
-          qalculate-gtk # Nice gui calculator
-          qpdfview
-          # qutebrowser
-          # realvnc-vnc-viewer
-          # rustdesk
-          tor-browser
-          # frajul.pob-dev-version # Path of Building
-          vlc
-          wineWowPackages.stable # 32-bit and 64-bit wine
-          winetricks
-          xclip # x11 clipboard access from terminal
-          xfce.mousepad # simple text editor
-          xournalpp # Edit pdf files
-          zoom-us # Video conferencing
-          zotero # Manage papers and other sources
-          pdfpc # Present slides in pdf form
-        ];
-      };
-      programs = {
-        home-manager.enable = true;
-        git.enable = true;
-      };
-    };
-  };
-}

flake.nix

@@ -36,9 +36,6 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
 
-    flake-parts.url = "github:hercules-ci/flake-parts";
-    import-tree.url = "github:vic/import-tree";
-
     # Various flakes
     yazi-flavors = {
       url = "github:yazi-rs/flavors";
@@ -64,163 +61,99 @@
     };
   };
 
-  outputs = inputs:
+  outputs = {
-    inputs.flake-parts.lib.mkFlake {inherit inputs;} (inputs.import-tree
+    self,
-      [
+    nixpkgs,
-        ./hosts
+    home-manager,
-        ./features-nixos
+    systems,
-        ./homes
+    ...
-        ./features-home-manager
+  } @ inputs: let
-        # ./modules
+    inherit (self) outputs;
-        # ./overlays
+    lib = nixpkgs.lib // home-manager.lib;
-        # ./packages
+    forEachSystem = f: lib.genAttrs (import systems) (system: f pkgsFor.${system});
-      ]);
+    pkgsFor = lib.genAttrs (import systems) (
-  # let
+      system:
-  #   inherit (self) outputs;
+        import nixpkgs {
-  #   lib = nixpkgs.lib // home-manager.lib;
+          inherit system;
-  #   forEachSystem = f: lib.genAttrs (import systems) (system: f pkgsFor.${system});
+          config.allowUnfree = true;
-  #   pkgsFor = lib.genAttrs (import systems) (
+        }
-  #     system:
+    );
-  #       import nixpkgs {
+  in {
-  #         inherit system;
+    inherit lib;
-  #         config.allowUnfree = true;
-  #         config.permittedInsecurePackages = [
-  #           "olm-3.2.16"
-  #         ];
-  #         warn-dirty = false;
-  #       }
-  #   );
-  # in {
-  #   inherit lib;
 
-  #   nixosModules = import ./modules/nixos;
+    nixosModules = import ./modules/nixos;
-  #   homeManagerModules = import ./modules/home-manager;
+    homeManagerModules = import ./modules/home-manager;
 
-  #   overlays = import ./overlays {inherit inputs outputs;};
+    overlays = import ./overlays {inherit inputs outputs;};
-  #   # hydraJobs = import ./hydra.nix { inherit inputs outputs; }; # TODO add hydra jobs here?
 
-  #   packages = forEachSystem (pkgs: import ./pkgs {inherit pkgs;});
+    packages = forEachSystem (pkgs: import ./packages {inherit pkgs;});
-  #   devShells = forEachSystem (pkgs: import ./shell.nix {inherit pkgs;});
+    devShells = forEachSystem (pkgs: import ./shell.nix {inherit pkgs;});
-  #   formatter = forEachSystem (pkgs: pkgs.alejandra); # nix fmt *
+    formatter = forEachSystem (pkgs: pkgs.alejandra); # nix fmt *
 
-  #   nixosConfigurations = {
+    nixosConfigurations = {
-  #     # Main laptop
+      # Main laptop
-  #     aspi = lib.nixosSystem {
+      aspi = lib.nixosSystem {
-  #       modules = [
+        modules = [
-  #         ./hosts/aspi
+          ./hosts/aspi
-  #       ];
+        ];
-  #       specialArgs = {
+        specialArgs = {
-  #         inherit inputs outputs;
+          inherit inputs outputs;
-  #       };
+          pwd = "${self}";
-  #     };
+        };
-  #     # Piano raspberry pi
+      };
-  #     # pianonix = lib.nixosSystem {
+      kardorf = lib.nixosSystem {
-  #     #   modules = [./hosts/pianonix];
+        modules = [./hosts/kardorf];
-  #     #   specialArgs = {
+        specialArgs = {
-  #     #     inherit inputs outputs;
+          inherit inputs outputs;
-  #     #   };
+          pwd = "${self}";
-  #     # };
+        };
-  #     kardorf = lib.nixosSystem {
+      };
-  #       modules = [./hosts/kardorf];
+      builder = lib.nixosSystem {
-  #       specialArgs = {
+        modules = [./hosts/builder];
-  #         inherit inputs outputs;
+        specialArgs = {
-  #       };
+          inherit inputs outputs;
-  #     };
+          pwd = "${self}";
-  #     builder = lib.nixosSystem {
+        };
-  #       modules = [./hosts/builder];
+      };
-  #       specialArgs = {
+    };
-  #         inherit inputs outputs;
-  #       };
-  #     };
-  #   };
 
-  #   # Standalone HM
+    # Standalone HM
-  #   homeConfigurations = {
+    homeConfigurations = {
-  #     # Main laptop
+      "julian@v3ms" = lib.homeManagerConfiguration {
-  #     "julian@aspi" = lib.homeManagerConfiguration {
+        modules = [
-  #       modules = [
+          ./homes/julian/v3ms
-  #         ./homes/julian/aspi.nix
+          ./homes/julian/hm-standalone-config.nix
-  #         ./homes/julian/hm-standalone-config.nix
+        ];
-  #       ];
+        pkgs = pkgsFor.x86_64-linux;
-  #       pkgs = pkgsFor.x86_64-linux;
+        extraSpecialArgs = {
-  #       extraSpecialArgs = {
+          inherit inputs outputs;
-  #         inherit inputs outputs;
+          pwd = "${self}";
-  #       };
+        };
-  #     };
+      };
-  #     # Media server (RPi)
+      "julian@quickstart" = lib.homeManagerConfiguration {
-  #     # "julian@pianonix" = lib.homeManagerConfiguration {
+        modules = [
-  #     #   modules = [
+          ./homes/julian/quickstart.nix
-  #     #     ./homes/julian/pianonix.nix
+          ./homes/julian/hm-standalone-config.nix
-  #     #     ./homes/julian/hm-standalone-config.nix
+        ];
-  #     #   ];
+        pkgs = pkgsFor.x86_64-linux;
-  #     #   pkgs = pkgsFor.aarch64-linux;
+        extraSpecialArgs = {
-  #     #   extraSpecialArgs = {
+          inherit inputs outputs;
-  #     #     inherit inputs outputs;
+          pwd = "${self}";
-  #     #   };
+        };
-  #     # };
+      };
-  #     "julian@kardorf" = lib.homeManagerConfiguration {
+    };
-  #       modules = [
-  #         ./homes/julian/kardorf.nix
-  #         ./homes/julian/hm-standalone-config.nix
-  #       ];
-  #       pkgs = pkgsFor.x86_64-linux;
-  #       extraSpecialArgs = {
-  #         inherit inputs outputs;
-  #       };
-  #     };
-  #     "julian@v3ms" = lib.homeManagerConfiguration {
-  #       modules = [
-  #         ./homes/julian/v3ms
-  #         ./homes/julian/hm-standalone-config.nix
-  #       ];
-  #       pkgs = pkgsFor.x86_64-linux;
-  #       extraSpecialArgs = {
-  #         inherit inputs outputs;
-  #       };
-  #     };
-  #     "julian@quickstart" = lib.homeManagerConfiguration {
-  #       modules = [
-  #         ./homes/julian/quickstart.nix
-  #         ./homes/julian/hm-standalone-config.nix
-  #       ];
-  #       pkgs = pkgsFor.x86_64-linux;
-  #       extraSpecialArgs = {
-  #         inherit inputs outputs;
-  #       };
-  #     };
-  #   };
 
-  #   # deploy-rs node configuration
+    # deploy-rs node configuration
-  #   deploy.nodes = {
+    deploy.nodes = {
-  #     # pianonix = {
+      builder = {
-  #     #   hostname = "pianonix.local";
+        hostname = "builder.julian-mutter.de";
-  #     #   profiles.system = {
+        profiles.system = {
-  #     #     sshUser = "root";
+          sshUser = "root";
-  #     #     user = "root";
+          user = "root";
-  #     #     path = inputs.deploy-rs.lib.aarch64-linux.activate.nixos self.nixosConfigurations.pianonix;
+          path = inputs.deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.builder;
-  #     #     confirmTimeout = 90; # default: 30s; raspberrypi takes a little longer restarting services
+          remoteBuild = true;
-  #     #   };
+        };
-  #     # };
+      };
-
+    };
-  #     builder = {
+  };
-  #       hostname = "builder.julian-mutter.de";
-  #       profiles.system = {
-  #         sshUser = "root";
-  #         user = "root";
-  #         path = inputs.deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.builder;
-  #         remoteBuild = true;
-  #       };
-  #     };
-  #   };
-
-  #   # substitutes: nixos-generate --flake .#pianonix -f sd-aarch64 --system aarch64-linux
-  #   pianonix-image = inputs.nixos-generators.nixosGenerate {
-  #     system = "aarch64-linux";
-  #     format = "sd-aarch64";
-  #     modules = [./hosts/pianonix];
-  #     specialArgs = {
-  #       inherit inputs outputs;
-  #     };
-  #   };
-  # };
 }

homes/julian/features/suites/desktop/default.nix

@@ -52,7 +52,6 @@
     # rustdesk
     tor-browser
     rusty-path-of-building # Path of Building for poe1 and poe2
-    # frajul.pob-dev-version # Path of Building
     vlc
     wineWowPackages.stable # 32-bit and 64-bit wine
     winetricks
@@ -69,6 +68,5 @@
     ## My scripts
     frajul.open-messaging
     frajul.xwacomcalibrate
-    frajul.pob2-frajul
   ];
 }