commit 42a612f9f18164e58fd822619b0d428cedb86a11 · aylac.top/nixcfg-own-knot

.gitignore

···

       1
       1
       +
       result

     

       2
       2
       +
       secrets/fonts/emoji

+598

LICENSE.md

···

       1
       1
       +
       # GNU General Public License

     

       2
       2
       +
       

     

       3
       3
       +
       _Version 3, 29 June 2007_\

     

       4
       4
       +
       _Copyright © 2007 Free Software Foundation, Inc. \<<http://fsf.org/>>_

     

       5
       5
       +
       

     

       6
       6
       +
       Everyone is permitted to copy and distribute verbatim copies of this license

     

       7
       7
       +
       document, but changing it is not allowed.

     

       8
       8
       +
       

     

       9
       9
       +
       ## Preamble

     

       10
       10
       +
       

     

       11
       11
       +
       The GNU General Public License is a free, copyleft license for software and other

     

       12
       12
       +
       kinds of works.

     

       13
       13
       +
       

     

       14
       14
       +
       The licenses for most software and other practical works are designed to take away

     

       15
       15
       +
       your freedom to share and change the works. By contrast, the GNU General Public

     

       16
       16
       +
       License is intended to guarantee your freedom to share and change all versions of a

     

       17
       17
       +
       program--to make sure it remains free software for all its users. We, the Free

     

       18
       18
       +
       Software Foundation, use the GNU General Public License for most of our software; it

     

       19
       19
       +
       applies also to any other work released this way by its authors. You can apply it to

     

       20
       20
       +
       your programs, too.

     

       21
       21
       +
       

     

       22
       22
       +
       When we speak of free software, we are referring to freedom, not price. Our General

     

       23
       23
       +
       Public Licenses are designed to make sure that you have the freedom to distribute

     

       24
       24
       +
       copies of free software (and charge for them if you wish), that you receive source

     

       25
       25
       +
       code or can get it if you want it, that you can change the software or use pieces of

     

       26
       26
       +
       it in new free programs, and that you know you can do these things.

     

       27
       27
       +
       

     

       28
       28
       +
       To protect your rights, we need to prevent others from denying you these rights or

     

       29
       29
       +
       asking you to surrender the rights. Therefore, you have certain responsibilities if

     

       30
       30
       +
       you distribute copies of the software, or if you modify it: responsibilities to

     

       31
       31
       +
       respect the freedom of others.

     

       32
       32
       +
       

     

       33
       33
       +
       For example, if you distribute copies of such a program, whether gratis or for a fee,

     

       34
       34
       +
       you must pass on to the recipients the same freedoms that you received. You must make

     

       35
       35
       +
       sure that they, too, receive or can get the source code. And you must show them these

     

       36
       36
       +
       terms so they know their rights.

     

       37
       37
       +
       

     

       38
       38
       +
       Developers that use the GNU GPL protect your rights with two steps: **(1)** assert

     

       39
       39
       +
       copyright on the software, and **(2)** offer you this License giving you legal permission

     

       40
       40
       +
       to copy, distribute and/or modify it.

     

       41
       41
       +
       

     

       42
       42
       +
       For the developers' and authors' protection, the GPL clearly explains that there is

     

       43
       43
       +
       no warranty for this free software. For both users' and authors' sake, the GPL

     

       44
       44
       +
       requires that modified versions be marked as changed, so that their problems will not

     

       45
       45
       +
       be attributed erroneously to authors of previous versions.

     

       46
       46
       +
       

     

       47
       47
       +
       Some devices are designed to deny users access to install or run modified versions of

     

       48
       48
       +
       the software inside them, although the manufacturer can do so. This is fundamentally

     

       49
       49
       +
       incompatible with the aim of protecting users' freedom to change the software. The

     

       50
       50
       +
       systematic pattern of such abuse occurs in the area of products for individuals to

     

       51
       51
       +
       use, which is precisely where it is most unacceptable. Therefore, we have designed

     

       52
       52
       +
       this version of the GPL to prohibit the practice for those products. If such problems

     

       53
       53
       +
       arise substantially in other domains, we stand ready to extend this provision to

     

       54
       54
       +
       those domains in future versions of the GPL, as needed to protect the freedom of

     

       55
       55
       +
       users.

     

       56
       56
       +
       

     

       57
       57
       +
       Finally, every program is threatened constantly by software patents. States should

     

       58
       58
       +
       not allow patents to restrict development and use of software on general-purpose

     

       59
       59
       +
       computers, but in those that do, we wish to avoid the special danger that patents

     

       60
       60
       +
       applied to a free program could make it effectively proprietary. To prevent this, the

     

       61
       61
       +
       GPL assures that patents cannot be used to render the program non-free.

     

       62
       62
       +
       

     

       63
       63
       +
       The precise terms and conditions for copying, distribution and modification follow.

     

       64
       64
       +
       

     

       65
       65
       +
       ## TERMS AND CONDITIONS

     

       66
       66
       +
       

     

       67
       67
       +
       ### 0. Definitions

     

       68
       68
       +
       

     

       69
       69
       +
       “This License” refers to version 3 of the GNU General Public License.

     

       70
       70
       +
       

     

       71
       71
       +
       “Copyright” also means copyright-like laws that apply to other kinds of

     

       72
       72
       +
       works, such as semiconductor masks.

     

       73
       73
       +
       

     

       74
       74
       +
       “The Program” refers to any copyrightable work licensed under this

     

       75
       75
       +
       License. Each licensee is addressed as “you”. “Licensees” and

     

       76
       76
       +
       “recipients” may be individuals or organizations.

     

       77
       77
       +
       

     

       78
       78
       +
       To “modify” a work means to copy from or adapt all or part of the work in

     

       79
       79
       +
       a fashion requiring copyright permission, other than the making of an exact copy. The

     

       80
       80
       +
       resulting work is called a “modified version” of the earlier work or a

     

       81
       81
       +
       work “based on” the earlier work.

     

       82
       82
       +
       

     

       83
       83
       +
       A “covered work” means either the unmodified Program or a work based on

     

       84
       84
       +
       the Program.

     

       85
       85
       +
       

     

       86
       86
       +
       To “propagate” a work means to do anything with it that, without

     

       87
       87
       +
       permission, would make you directly or secondarily liable for infringement under

     

       88
       88
       +
       applicable copyright law, except executing it on a computer or modifying a private

     

       89
       89
       +
       copy. Propagation includes copying, distribution (with or without modification),

     

       90
       90
       +
       making available to the public, and in some countries other activities as well.

     

       91
       91
       +
       

     

       92
       92
       +
       To “convey” a work means any kind of propagation that enables other

     

       93
       93
       +
       parties to make or receive copies. Mere interaction with a user through a computer

     

       94
       94
       +
       network, with no transfer of a copy, is not conveying.

     

       95
       95
       +
       

     

       96
       96
       +
       An interactive user interface displays “Appropriate Legal Notices” to the

     

       97
       97
       +
       extent that it includes a convenient and prominently visible feature that **(1)**

     

       98
       98
       +
       displays an appropriate copyright notice, and **(2)** tells the user that there is no

     

       99
       99
       +
       warranty for the work (except to the extent that warranties are provided), that

     

       100
       100
       +
       licensees may convey the work under this License, and how to view a copy of this

     

       101
       101
       +
       License. If the interface presents a list of user commands or options, such as a

     

       102
       102
       +
       menu, a prominent item in the list meets this criterion.

     

       103
       103
       +
       

     

       104
       104
       +
       ### 1. Source Code

     

       105
       105
       +
       

     

       106
       106
       +
       The “source code” for a work means the preferred form of the work for

     

       107
       107
       +
       making modifications to it. “Object code” means any non-source form of a

     

       108
       108
       +
       work.

     

       109
       109
       +
       

     

       110
       110
       +
       A “Standard Interface” means an interface that either is an official

     

       111
       111
       +
       standard defined by a recognized standards body, or, in the case of interfaces

     

       112
       112
       +
       specified for a particular programming language, one that is widely used among

     

       113
       113
       +
       developers working in that language.

     

       114
       114
       +
       

     

       115
       115
       +
       The “System Libraries” of an executable work include anything, other than

     

       116
       116
       +
       the work as a whole, that **(a)** is included in the normal form of packaging a Major

     

       117
       117
       +
       Component, but which is not part of that Major Component, and **(b)** serves only to

     

       118
       118
       +
       enable use of the work with that Major Component, or to implement a Standard

     

       119
       119
       +
       Interface for which an implementation is available to the public in source code form.

     

       120
       120
       +
       A “Major Component”, in this context, means a major essential component

     

       121
       121
       +
       (kernel, window system, and so on) of the specific operating system (if any) on which

     

       122
       122
       +
       the executable work runs, or a compiler used to produce the work, or an object code

     

       123
       123
       +
       interpreter used to run it.

     

       124
       124
       +
       

     

       125
       125
       +
       The “Corresponding Source” for a work in object code form means all the

     

       126
       126
       +
       source code needed to generate, install, and (for an executable work) run the object

     

       127
       127
       +
       code and to modify the work, including scripts to control those activities. However,

     

       128
       128
       +
       it does not include the work's System Libraries, or general-purpose tools or

     

       129
       129
       +
       generally available free programs which are used unmodified in performing those

     

       130
       130
       +
       activities but which are not part of the work. For example, Corresponding Source

     

       131
       131
       +
       includes interface definition files associated with source files for the work, and

     

       132
       132
       +
       the source code for shared libraries and dynamically linked subprograms that the work

     

       133
       133
       +
       is specifically designed to require, such as by intimate data communication or

     

       134
       134
       +
       control flow between those subprograms and other parts of the work.

     

       135
       135
       +
       

     

       136
       136
       +
       The Corresponding Source need not include anything that users can regenerate

     

       137
       137
       +
       automatically from other parts of the Corresponding Source.

     

       138
       138
       +
       

     

       139
       139
       +
       The Corresponding Source for a work in source code form is that same work.

     

       140
       140
       +
       

     

       141
       141
       +
       ### 2. Basic Permissions

     

       142
       142
       +
       

     

       143
       143
       +
       All rights granted under this License are granted for the term of copyright on the

     

       144
       144
       +
       Program, and are irrevocable provided the stated conditions are met. This License

     

       145
       145
       +
       explicitly affirms your unlimited permission to run the unmodified Program. The

     

       146
       146
       +
       output from running a covered work is covered by this License only if the output,

     

       147
       147
       +
       given its content, constitutes a covered work. This License acknowledges your rights

     

       148
       148
       +
       of fair use or other equivalent, as provided by copyright law.

     

       149
       149
       +
       

     

       150
       150
       +
       You may make, run and propagate covered works that you do not convey, without

     

       151
       151
       +
       conditions so long as your license otherwise remains in force. You may convey covered

     

       152
       152
       +
       works to others for the sole purpose of having them make modifications exclusively

     

       153
       153
       +
       for you, or provide you with facilities for running those works, provided that you

     

       154
       154
       +
       comply with the terms of this License in conveying all material for which you do not

     

       155
       155
       +
       control copyright. Those thus making or running the covered works for you must do so

     

       156
       156
       +
       exclusively on your behalf, under your direction and control, on terms that prohibit

     

       157
       157
       +
       them from making any copies of your copyrighted material outside their relationship

     

       158
       158
       +
       with you.

     

       159
       159
       +
       

     

       160
       160
       +
       Conveying under any other circumstances is permitted solely under the conditions

     

       161
       161
       +
       stated below. Sublicensing is not allowed; section 10 makes it unnecessary.

     

       162
       162
       +
       

     

       163
       163
       +
       ### 3. Protecting Users' Legal Rights From Anti-Circumvention Law

     

       164
       164
       +
       

     

       165
       165
       +
       No covered work shall be deemed part of an effective technological measure under any

     

       166
       166
       +
       applicable law fulfilling obligations under article 11 of the WIPO copyright treaty

     

       167
       167
       +
       adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention

     

       168
       168
       +
       of such measures.

     

       169
       169
       +
       

     

       170
       170
       +
       When you convey a covered work, you waive any legal power to forbid circumvention of

     

       171
       171
       +
       technological measures to the extent such circumvention is effected by exercising

     

       172
       172
       +
       rights under this License with respect to the covered work, and you disclaim any

     

       173
       173
       +
       intention to limit operation or modification of the work as a means of enforcing,

     

       174
       174
       +
       against the work's users, your or third parties' legal rights to forbid circumvention

     

       175
       175
       +
       of technological measures.

     

       176
       176
       +
       

     

       177
       177
       +
       ### 4. Conveying Verbatim Copies

     

       178
       178
       +
       

     

       179
       179
       +
       You may convey verbatim copies of the Program's source code as you receive it, in any

     

       180
       180
       +
       medium, provided that you conspicuously and appropriately publish on each copy an

     

       181
       181
       +
       appropriate copyright notice; keep intact all notices stating that this License and

     

       182
       182
       +
       any non-permissive terms added in accord with section 7 apply to the code; keep

     

       183
       183
       +
       intact all notices of the absence of any warranty; and give all recipients a copy of

     

       184
       184
       +
       this License along with the Program.

     

       185
       185
       +
       

     

       186
       186
       +
       You may charge any price or no price for each copy that you convey, and you may offer

     

       187
       187
       +
       support or warranty protection for a fee.

     

       188
       188
       +
       

     

       189
       189
       +
       ### 5. Conveying Modified Source Versions

     

       190
       190
       +
       

     

       191
       191
       +
       You may convey a work based on the Program, or the modifications to produce it from

     

       192
       192
       +
       the Program, in the form of source code under the terms of section 4, provided that

     

       193
       193
       +
       you also meet all of these conditions:

     

       194
       194
       +
       

     

       195
       195
       +
       - **a)** The work must carry prominent notices stating that you modified it, and giving a

     

       196
       196
       +
         relevant date.

     

       197
       197
       +
       - **b)** The work must carry prominent notices stating that it is released under this

     

       198
       198
       +
         License and any conditions added under section 7. This requirement modifies the

     

       199
       199
       +
         requirement in section 4 to “keep intact all notices”.

     

       200
       200
       +
       - **c)** You must license the entire work, as a whole, under this License to anyone who

     

       201
       201
       +
         comes into possession of a copy. This License will therefore apply, along with any

     

       202
       202
       +
         applicable section 7 additional terms, to the whole of the work, and all its parts,

     

       203
       203
       +
         regardless of how they are packaged. This License gives no permission to license the

     

       204
       204
       +
         work in any other way, but it does not invalidate such permission if you have

     

       205
       205
       +
         separately received it.

     

       206
       206
       +
       - **d)** If the work has interactive user interfaces, each must display Appropriate Legal

     

       207
       207
       +
         Notices; however, if the Program has interactive interfaces that do not display

     

       208
       208
       +
         Appropriate Legal Notices, your work need not make them do so.

     

       209
       209
       +
       

     

       210
       210
       +
       A compilation of a covered work with other separate and independent works, which are

     

       211
       211
       +
       not by their nature extensions of the covered work, and which are not combined with

     

       212
       212
       +
       it such as to form a larger program, in or on a volume of a storage or distribution

     

       213
       213
       +
       medium, is called an “aggregate” if the compilation and its resulting

     

       214
       214
       +
       copyright are not used to limit the access or legal rights of the compilation's users

     

       215
       215
       +
       beyond what the individual works permit. Inclusion of a covered work in an aggregate

     

       216
       216
       +
       does not cause this License to apply to the other parts of the aggregate.

     

       217
       217
       +
       

     

       218
       218
       +
       ### 6. Conveying Non-Source Forms

     

       219
       219
       +
       

     

       220
       220
       +
       You may convey a covered work in object code form under the terms of sections 4 and

     

       221
       221
       +
       5, provided that you also convey the machine-readable Corresponding Source under the

     

       222
       222
       +
       terms of this License, in one of these ways:

     

       223
       223
       +
       

     

       224
       224
       +
       - **a)** Convey the object code in, or embodied in, a physical product (including a

     

       225
       225
       +
         physical distribution medium), accompanied by the Corresponding Source fixed on a

     

       226
       226
       +
         durable physical medium customarily used for software interchange.

     

       227
       227
       +
       - **b)** Convey the object code in, or embodied in, a physical product (including a

     

       228
       228
       +
         physical distribution medium), accompanied by a written offer, valid for at least

     

       229
       229
       +
         three years and valid for as long as you offer spare parts or customer support for

     

       230
       230
       +
         that product model, to give anyone who possesses the object code either **(1)** a copy of

     

       231
       231
       +
         the Corresponding Source for all the software in the product that is covered by this

     

       232
       232
       +
         License, on a durable physical medium customarily used for software interchange, for

     

       233
       233
       +
         a price no more than your reasonable cost of physically performing this conveying of

     

       234
       234
       +
         source, or **(2)** access to copy the Corresponding Source from a network server at no

     

       235
       235
       +
         charge.

     

       236
       236
       +
       - **c)** Convey individual copies of the object code with a copy of the written offer to

     

       237
       237
       +
         provide the Corresponding Source. This alternative is allowed only occasionally and

     

       238
       238
       +
         noncommercially, and only if you received the object code with such an offer, in

     

       239
       239
       +
         accord with subsection 6b.

     

       240
       240
       +
       - **d)** Convey the object code by offering access from a designated place (gratis or for

     

       241
       241
       +
         a charge), and offer equivalent access to the Corresponding Source in the same way

     

       242
       242
       +
         through the same place at no further charge. You need not require recipients to copy

     

       243
       243
       +
         the Corresponding Source along with the object code. If the place to copy the object

     

       244
       244
       +
         code is a network server, the Corresponding Source may be on a different server

     

       245
       245
       +
         (operated by you or a third party) that supports equivalent copying facilities,

     

       246
       246
       +
         provided you maintain clear directions next to the object code saying where to find

     

       247
       247
       +
         the Corresponding Source. Regardless of what server hosts the Corresponding Source,

     

       248
       248
       +
         you remain obligated to ensure that it is available for as long as needed to satisfy

     

       249
       249
       +
         these requirements.

     

       250
       250
       +
       - **e)** Convey the object code using peer-to-peer transmission, provided you inform

     

       251
       251
       +
         other peers where the object code and Corresponding Source of the work are being

     

       252
       252
       +
         offered to the general public at no charge under subsection 6d.

     

       253
       253
       +
       

     

       254
       254
       +
       A separable portion of the object code, whose source code is excluded from the

     

       255
       255
       +
       Corresponding Source as a System Library, need not be included in conveying the

     

       256
       256
       +
       object code work.

     

       257
       257
       +
       

     

       258
       258
       +
       A “User Product” is either **(1)** a “consumer product”, which

     

       259
       259
       +
       means any tangible personal property which is normally used for personal, family, or

     

       260
       260
       +
       household purposes, or **(2)** anything designed or sold for incorporation into a

     

       261
       261
       +
       dwelling. In determining whether a product is a consumer product, doubtful cases

     

       262
       262
       +
       shall be resolved in favor of coverage. For a particular product received by a

     

       263
       263
       +
       particular user, “normally used” refers to a typical or common use of

     

       264
       264
       +
       that class of product, regardless of the status of the particular user or of the way

     

       265
       265
       +
       in which the particular user actually uses, or expects or is expected to use, the

     

       266
       266
       +
       product. A product is a consumer product regardless of whether the product has

     

       267
       267
       +
       substantial commercial, industrial or non-consumer uses, unless such uses represent

     

       268
       268
       +
       the only significant mode of use of the product.

     

       269
       269
       +
       

     

       270
       270
       +
       “Installation Information” for a User Product means any methods,

     

       271
       271
       +
       procedures, authorization keys, or other information required to install and execute

     

       272
       272
       +
       modified versions of a covered work in that User Product from a modified version of

     

       273
       273
       +
       its Corresponding Source. The information must suffice to ensure that the continued

     

       274
       274
       +
       functioning of the modified object code is in no case prevented or interfered with

     

       275
       275
       +
       solely because modification has been made.

     

       276
       276
       +
       

     

       277
       277
       +
       If you convey an object code work under this section in, or with, or specifically for

     

       278
       278
       +
       use in, a User Product, and the conveying occurs as part of a transaction in which

     

       279
       279
       +
       the right of possession and use of the User Product is transferred to the recipient

     

       280
       280
       +
       in perpetuity or for a fixed term (regardless of how the transaction is

     

       281
       281
       +
       characterized), the Corresponding Source conveyed under this section must be

     

       282
       282
       +
       accompanied by the Installation Information. But this requirement does not apply if

     

       283
       283
       +
       neither you nor any third party retains the ability to install modified object code

     

       284
       284
       +
       on the User Product (for example, the work has been installed in ROM).

     

       285
       285
       +
       

     

       286
       286
       +
       The requirement to provide Installation Information does not include a requirement to

     

       287
       287
       +
       continue to provide support service, warranty, or updates for a work that has been

     

       288
       288
       +
       modified or installed by the recipient, or for the User Product in which it has been

     

       289
       289
       +
       modified or installed. Access to a network may be denied when the modification itself

     

       290
       290
       +
       materially and adversely affects the operation of the network or violates the rules

     

       291
       291
       +
       and protocols for communication across the network.

     

       292
       292
       +
       

     

       293
       293
       +
       Corresponding Source conveyed, and Installation Information provided, in accord with

     

       294
       294
       +
       this section must be in a format that is publicly documented (and with an

     

       295
       295
       +
       implementation available to the public in source code form), and must require no

     

       296
       296
       +
       special password or key for unpacking, reading or copying.

     

       297
       297
       +
       

     

       298
       298
       +
       ### 7. Additional Terms

     

       299
       299
       +
       

     

       300
       300
       +
       “Additional permissions” are terms that supplement the terms of this

     

       301
       301
       +
       License by making exceptions from one or more of its conditions. Additional

     

       302
       302
       +
       permissions that are applicable to the entire Program shall be treated as though they

     

       303
       303
       +
       were included in this License, to the extent that they are valid under applicable

     

       304
       304
       +
       law. If additional permissions apply only to part of the Program, that part may be

     

       305
       305
       +
       used separately under those permissions, but the entire Program remains governed by

     

       306
       306
       +
       this License without regard to the additional permissions.

     

       307
       307
       +
       

     

       308
       308
       +
       When you convey a copy of a covered work, you may at your option remove any

     

       309
       309
       +
       additional permissions from that copy, or from any part of it. (Additional

     

       310
       310
       +
       permissions may be written to require their own removal in certain cases when you

     

       311
       311
       +
       modify the work.) You may place additional permissions on material, added by you to a

     

       312
       312
       +
       covered work, for which you have or can give appropriate copyright permission.

     

       313
       313
       +
       

     

       314
       314
       +
       Notwithstanding any other provision of this License, for material you add to a

     

       315
       315
       +
       covered work, you may (if authorized by the copyright holders of that material)

     

       316
       316
       +
       supplement the terms of this License with terms:

     

       317
       317
       +
       

     

       318
       318
       +
       - **a)** Disclaiming warranty or limiting liability differently from the terms of

     

       319
       319
       +
         sections 15 and 16 of this License; or

     

       320
       320
       +
       - **b)** Requiring preservation of specified reasonable legal notices or author

     

       321
       321
       +
         attributions in that material or in the Appropriate Legal Notices displayed by works

     

       322
       322
       +
         containing it; or

     

       323
       323
       +
       - **c)** Prohibiting misrepresentation of the origin of that material, or requiring that

     

       324
       324
       +
         modified versions of such material be marked in reasonable ways as different from the

     

       325
       325
       +
         original version; or

     

       326
       326
       +
       - **d)** Limiting the use for publicity purposes of names of licensors or authors of the

     

       327
       327
       +
         material; or

     

       328
       328
       +
       - **e)** Declining to grant rights under trademark law for use of some trade names,

     

       329
       329
       +
         trademarks, or service marks; or

     

       330
       330
       +
       - **f)** Requiring indemnification of licensors and authors of that material by anyone

     

       331
       331
       +
         who conveys the material (or modified versions of it) with contractual assumptions of

     

       332
       332
       +
         liability to the recipient, for any liability that these contractual assumptions

     

       333
       333
       +
         directly impose on those licensors and authors.

     

       334
       334
       +
       

     

       335
       335
       +
       All other non-permissive additional terms are considered “further

     

       336
       336
       +
       restrictions” within the meaning of section 10. If the Program as you received

     

       337
       337
       +
       it, or any part of it, contains a notice stating that it is governed by this License

     

       338
       338
       +
       along with a term that is a further restriction, you may remove that term. If a

     

       339
       339
       +
       license document contains a further restriction but permits relicensing or conveying

     

       340
       340
       +
       under this License, you may add to a covered work material governed by the terms of

     

       341
       341
       +
       that license document, provided that the further restriction does not survive such

     

       342
       342
       +
       relicensing or conveying.

     

       343
       343
       +
       

     

       344
       344
       +
       If you add terms to a covered work in accord with this section, you must place, in

     

       345
       345
       +
       the relevant source files, a statement of the additional terms that apply to those

     

       346
       346
       +
       files, or a notice indicating where to find the applicable terms.

     

       347
       347
       +
       

     

       348
       348
       +
       Additional terms, permissive or non-permissive, may be stated in the form of a

     

       349
       349
       +
       separately written license, or stated as exceptions; the above requirements apply

     

       350
       350
       +
       either way.

     

       351
       351
       +
       

     

       352
       352
       +
       ### 8. Termination

     

       353
       353
       +
       

     

       354
       354
       +
       You may not propagate or modify a covered work except as expressly provided under

     

       355
       355
       +
       this License. Any attempt otherwise to propagate or modify it is void, and will

     

       356
       356
       +
       automatically terminate your rights under this License (including any patent licenses

     

       357
       357
       +
       granted under the third paragraph of section 11).

     

       358
       358
       +
       

     

       359
       359
       +
       However, if you cease all violation of this License, then your license from a

     

       360
       360
       +
       particular copyright holder is reinstated **(a)** provisionally, unless and until the

     

       361
       361
       +
       copyright holder explicitly and finally terminates your license, and **(b)** permanently,

     

       362
       362
       +
       if the copyright holder fails to notify you of the violation by some reasonable means

     

       363
       363
       +
       prior to 60 days after the cessation.

     

       364
       364
       +
       

     

       365
       365
       +
       Moreover, your license from a particular copyright holder is reinstated permanently

     

       366
       366
       +
       if the copyright holder notifies you of the violation by some reasonable means, this

     

       367
       367
       +
       is the first time you have received notice of violation of this License (for any

     

       368
       368
       +
       work) from that copyright holder, and you cure the violation prior to 30 days after

     

       369
       369
       +
       your receipt of the notice.

     

       370
       370
       +
       

     

       371
       371
       +
       Termination of your rights under this section does not terminate the licenses of

     

       372
       372
       +
       parties who have received copies or rights from you under this License. If your

     

       373
       373
       +
       rights have been terminated and not permanently reinstated, you do not qualify to

     

       374
       374
       +
       receive new licenses for the same material under section 10.

     

       375
       375
       +
       

     

       376
       376
       +
       ### 9. Acceptance Not Required for Having Copies

     

       377
       377
       +
       

     

       378
       378
       +
       You are not required to accept this License in order to receive or run a copy of the

     

       379
       379
       +
       Program. Ancillary propagation of a covered work occurring solely as a consequence of

     

       380
       380
       +
       using peer-to-peer transmission to receive a copy likewise does not require

     

       381
       381
       +
       acceptance. However, nothing other than this License grants you permission to

     

       382
       382
       +
       propagate or modify any covered work. These actions infringe copyright if you do not

     

       383
       383
       +
       accept this License. Therefore, by modifying or propagating a covered work, you

     

       384
       384
       +
       indicate your acceptance of this License to do so.

     

       385
       385
       +
       

     

       386
       386
       +
       ### 10. Automatic Licensing of Downstream Recipients

     

       387
       387
       +
       

     

       388
       388
       +
       Each time you convey a covered work, the recipient automatically receives a license

     

       389
       389
       +
       from the original licensors, to run, modify and propagate that work, subject to this

     

       390
       390
       +
       License. You are not responsible for enforcing compliance by third parties with this

     

       391
       391
       +
       License.

     

       392
       392
       +
       

     

       393
       393
       +
       An “entity transaction” is a transaction transferring control of an

     

       394
       394
       +
       organization, or substantially all assets of one, or subdividing an organization, or

     

       395
       395
       +
       merging organizations. If propagation of a covered work results from an entity

     

       396
       396
       +
       transaction, each party to that transaction who receives a copy of the work also

     

       397
       397
       +
       receives whatever licenses to the work the party's predecessor in interest had or

     

       398
       398
       +
       could give under the previous paragraph, plus a right to possession of the

     

       399
       399
       +
       Corresponding Source of the work from the predecessor in interest, if the predecessor

     

       400
       400
       +
       has it or can get it with reasonable efforts.

     

       401
       401
       +
       

     

       402
       402
       +
       You may not impose any further restrictions on the exercise of the rights granted or

     

       403
       403
       +
       affirmed under this License. For example, you may not impose a license fee, royalty,

     

       404
       404
       +
       or other charge for exercise of rights granted under this License, and you may not

     

       405
       405
       +
       initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging

     

       406
       406
       +
       that any patent claim is infringed by making, using, selling, offering for sale, or

     

       407
       407
       +
       importing the Program or any portion of it.

     

       408
       408
       +
       

     

       409
       409
       +
       ### 11. Patents

     

       410
       410
       +
       

     

       411
       411
       +
       A “contributor” is a copyright holder who authorizes use under this

     

       412
       412
       +
       License of the Program or a work on which the Program is based. The work thus

     

       413
       413
       +
       licensed is called the contributor's “contributor version”.

     

       414
       414
       +
       

     

       415
       415
       +
       A contributor's “essential patent claims” are all patent claims owned or

     

       416
       416
       +
       controlled by the contributor, whether already acquired or hereafter acquired, that

     

       417
       417
       +
       would be infringed by some manner, permitted by this License, of making, using, or

     

       418
       418
       +
       selling its contributor version, but do not include claims that would be infringed

     

       419
       419
       +
       only as a consequence of further modification of the contributor version. For

     

       420
       420
       +
       purposes of this definition, “control” includes the right to grant patent

     

       421
       421
       +
       sublicenses in a manner consistent with the requirements of this License.

     

       422
       422
       +
       

     

       423
       423
       +
       Each contributor grants you a non-exclusive, worldwide, royalty-free patent license

     

       424
       424
       +
       under the contributor's essential patent claims, to make, use, sell, offer for sale,

     

       425
       425
       +
       import and otherwise run, modify and propagate the contents of its contributor

     

       426
       426
       +
       version.

     

       427
       427
       +
       

     

       428
       428
       +
       In the following three paragraphs, a “patent license” is any express

     

       429
       429
       +
       agreement or commitment, however denominated, not to enforce a patent (such as an

     

       430
       430
       +
       express permission to practice a patent or covenant not to sue for patent

     

       431
       431
       +
       infringement). To “grant” such a patent license to a party means to make

     

       432
       432
       +
       such an agreement or commitment not to enforce a patent against the party.

     

       433
       433
       +
       

     

       434
       434
       +
       If you convey a covered work, knowingly relying on a patent license, and the

     

       435
       435
       +
       Corresponding Source of the work is not available for anyone to copy, free of charge

     

       436
       436
       +
       and under the terms of this License, through a publicly available network server or

     

       437
       437
       +
       other readily accessible means, then you must either **(1)** cause the Corresponding

     

       438
       438
       +
       Source to be so available, or **(2)** arrange to deprive yourself of the benefit of the

     

       439
       439
       +
       patent license for this particular work, or **(3)** arrange, in a manner consistent with

     

       440
       440
       +
       the requirements of this License, to extend the patent license to downstream

     

       441
       441
       +
       recipients. “Knowingly relying” means you have actual knowledge that, but

     

       442
       442
       +
       for the patent license, your conveying the covered work in a country, or your

     

       443
       443
       +
       recipient's use of the covered work in a country, would infringe one or more

     

       444
       444
       +
       identifiable patents in that country that you have reason to believe are valid.

     

       445
       445
       +
       

     

       446
       446
       +
       If, pursuant to or in connection with a single transaction or arrangement, you

     

       447
       447
       +
       convey, or propagate by procuring conveyance of, a covered work, and grant a patent

     

       448
       448
       +
       license to some of the parties receiving the covered work authorizing them to use,

     

       449
       449
       +
       propagate, modify or convey a specific copy of the covered work, then the patent

     

       450
       450
       +
       license you grant is automatically extended to all recipients of the covered work and

     

       451
       451
       +
       works based on it.

     

       452
       452
       +
       

     

       453
       453
       +
       A patent license is “discriminatory” if it does not include within the

     

       454
       454
       +
       scope of its coverage, prohibits the exercise of, or is conditioned on the

     

       455
       455
       +
       non-exercise of one or more of the rights that are specifically granted under this

     

       456
       456
       +
       License. You may not convey a covered work if you are a party to an arrangement with

     

       457
       457
       +
       a third party that is in the business of distributing software, under which you make

     

       458
       458
       +
       payment to the third party based on the extent of your activity of conveying the

     

       459
       459
       +
       work, and under which the third party grants, to any of the parties who would receive

     

       460
       460
       +
       the covered work from you, a discriminatory patent license **(a)** in connection with

     

       461
       461
       +
       copies of the covered work conveyed by you (or copies made from those copies), or **(b)**

     

       462
       462
       +
       primarily for and in connection with specific products or compilations that contain

     

       463
       463
       +
       the covered work, unless you entered into that arrangement, or that patent license

     

       464
       464
       +
       was granted, prior to 28 March 2007.

     

       465
       465
       +
       

     

       466
       466
       +
       Nothing in this License shall be construed as excluding or limiting any implied

     

       467
       467
       +
       license or other defenses to infringement that may otherwise be available to you

     

       468
       468
       +
       under applicable patent law.

     

       469
       469
       +
       

     

       470
       470
       +
       ### 12. No Surrender of Others' Freedom

     

       471
       471
       +
       

     

       472
       472
       +
       If conditions are imposed on you (whether by court order, agreement or otherwise)

     

       473
       473
       +
       that contradict the conditions of this License, they do not excuse you from the

     

       474
       474
       +
       conditions of this License. If you cannot convey a covered work so as to satisfy

     

       475
       475
       +
       simultaneously your obligations under this License and any other pertinent

     

       476
       476
       +
       obligations, then as a consequence you may not convey it at all. For example, if you

     

       477
       477
       +
       agree to terms that obligate you to collect a royalty for further conveying from

     

       478
       478
       +
       those to whom you convey the Program, the only way you could satisfy both those terms

     

       479
       479
       +
       and this License would be to refrain entirely from conveying the Program.

     

       480
       480
       +
       

     

       481
       481
       +
       ### 13. Use with the GNU Affero General Public License

     

       482
       482
       +
       

     

       483
       483
       +
       Notwithstanding any other provision of this License, you have permission to link or

     

       484
       484
       +
       combine any covered work with a work licensed under version 3 of the GNU Affero

     

       485
       485
       +
       General Public License into a single combined work, and to convey the resulting work.

     

       486
       486
       +
       The terms of this License will continue to apply to the part which is the covered

     

       487
       487
       +
       work, but the special requirements of the GNU Affero General Public License, section

     

       488
       488
       +
       13, concerning interaction through a network will apply to the combination as such.

     

       489
       489
       +
       

     

       490
       490
       +
       ### 14. Revised Versions of this License

     

       491
       491
       +
       

     

       492
       492
       +
       The Free Software Foundation may publish revised and/or new versions of the GNU

     

       493
       493
       +
       General Public License from time to time. Such new versions will be similar in spirit

     

       494
       494
       +
       to the present version, but may differ in detail to address new problems or concerns.

     

       495
       495
       +
       

     

       496
       496
       +
       Each version is given a distinguishing version number. If the Program specifies that

     

       497
       497
       +
       a certain numbered version of the GNU General Public License “or any later

     

       498
       498
       +
       version” applies to it, you have the option of following the terms and

     

       499
       499
       +
       conditions either of that numbered version or of any later version published by the

     

       500
       500
       +
       Free Software Foundation. If the Program does not specify a version number of the GNU

     

       501
       501
       +
       General Public License, you may choose any version ever published by the Free

     

       502
       502
       +
       Software Foundation.

     

       503
       503
       +
       

     

       504
       504
       +
       If the Program specifies that a proxy can decide which future versions of the GNU

     

       505
       505
       +
       General Public License can be used, that proxy's public statement of acceptance of a

     

       506
       506
       +
       version permanently authorizes you to choose that version for the Program.

     

       507
       507
       +
       

     

       508
       508
       +
       Later license versions may give you additional or different permissions. However, no

     

       509
       509
       +
       additional obligations are imposed on any author or copyright holder as a result of

     

       510
       510
       +
       your choosing to follow a later version.

     

       511
       511
       +
       

     

       512
       512
       +
       ### 15. Disclaimer of Warranty

     

       513
       513
       +
       

     

       514
       514
       +
       THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.

     

       515
       515
       +
       EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES

     

       516
       516
       +
       PROVIDE THE PROGRAM “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER

     

       517
       517
       +
       EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF

     

       518
       518
       +
       MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE

     

       519
       519
       +
       QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE

     

       520
       520
       +
       DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

     

       521
       521
       +
       

     

       522
       522
       +
       ### 16. Limitation of Liability

     

       523
       523
       +
       

     

       524
       524
       +
       IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY

     

       525
       525
       +
       COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS

     

       526
       526
       +
       PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL,

     

       527
       527
       +
       INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE

     

       528
       528
       +
       PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE

     

       529
       529
       +
       OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE

     

       530
       530
       +
       WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE

     

       531
       531
       +
       POSSIBILITY OF SUCH DAMAGES.

     

       532
       532
       +
       

     

       533
       533
       +
       ### 17. Interpretation of Sections 15 and 16

     

       534
       534
       +
       

     

       535
       535
       +
       If the disclaimer of warranty and limitation of liability provided above cannot be

     

       536
       536
       +
       given local legal effect according to their terms, reviewing courts shall apply local

     

       537
       537
       +
       law that most closely approximates an absolute waiver of all civil liability in

     

       538
       538
       +
       connection with the Program, unless a warranty or assumption of liability accompanies

     

       539
       539
       +
       a copy of the Program in return for a fee.

     

       540
       540
       +
       

     

       541
       541
       +
       _END OF TERMS AND CONDITIONS_

     

       542
       542
       +
       

     

       543
       543
       +
       ## How to Apply These Terms to Your New Programs

     

       544
       544
       +
       

     

       545
       545
       +
       If you develop a new program, and you want it to be of the greatest possible use to

     

       546
       546
       +
       the public, the best way to achieve this is to make it free software which everyone

     

       547
       547
       +
       can redistribute and change under these terms.

     

       548
       548
       +
       

     

       549
       549
       +
       To do so, attach the following notices to the program. It is safest to attach them

     

       550
       550
       +
       to the start of each source file to most effectively state the exclusion of warranty;

     

       551
       551
       +
       and each file should have at least the “copyright” line and a pointer to

     

       552
       552
       +
       where the full notice is found.

     

       553
       553
       +
       

     

       554
       554
       +
       ```

     

       555
       555
       +
       <one line to give the program's name and a brief idea of what it does.>

     

       556
       556
       +
       Copyright (C) <year>  <name of author>

     

       557
       557
       +
       

     

       558
       558
       +
       This program is free software: you can redistribute it and/or modify

     

       559
       559
       +
       it under the terms of the GNU General Public License as published by

     

       560
       560
       +
       the Free Software Foundation, either version 3 of the License, or

     

       561
       561
       +
       (at your option) any later version.

     

       562
       562
       +
       

     

       563
       563
       +
       This program is distributed in the hope that it will be useful,

     

       564
       564
       +
       but WITHOUT ANY WARRANTY; without even the implied warranty of

     

       565
       565
       +
       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

     

       566
       566
       +
       GNU General Public License for more details.

     

       567
       567
       +
       

     

       568
       568
       +
       You should have received a copy of the GNU General Public License

     

       569
       569
       +
       along with this program.  If not, see <http://www.gnu.org/licenses/>.

     

       570
       570
       +
       ```

     

       571
       571
       +
       

     

       572
       572
       +
       Also add information on how to contact you by electronic and paper mail.

     

       573
       573
       +
       

     

       574
       574
       +
       If the program does terminal interaction, make it output a short notice like this

     

       575
       575
       +
       when it starts in an interactive mode:

     

       576
       576
       +
       

     

       577
       577
       +
       ```

     

       578
       578
       +
       <program>  Copyright (C) <year>  <name of author>

     

       579
       579
       +
       This program comes with ABSOLUTELY NO WARRANTY; for details type 'show w'.

     

       580
       580
       +
       This is free software, and you are welcome to redistribute it

     

       581
       581
       +
       under certain conditions; type 'show c' for details.

     

       582
       582
       +
       ```

     

       583
       583
       +
       

     

       584
       584
       +
       The hypothetical commands `show w` and `show c` should show the appropriate parts of

     

       585
       585
       +
       the General Public License. Of course, your program's commands might be different;

     

       586
       586
       +
       for a GUI interface, you would use an “about box”.

     

       587
       587
       +
       

     

       588
       588
       +
       You should also get your employer (if you work as a programmer) or school, if any, to

     

       589
       589
       +
       sign a “copyright disclaimer” for the program, if necessary. For more

     

       590
       590
       +
       information on this, and how to apply and follow the GNU GPL, see

     

       591
       591
       +
       \<<http://www.gnu.org/licenses/>>.

     

       592
       592
       +
       

     

       593
       593
       +
       The GNU General Public License does not permit incorporating your program into

     

       594
       594
       +
       proprietary programs. If your program is a subroutine library, you may consider it

     

       595
       595
       +
       more useful to permit linking proprietary applications with the library. If this is

     

       596
       596
       +
       what you want to do, use the GNU Lesser General Public License instead of this

     

       597
       597
       +
       License. But first, please read

     

       598
       598
       +
       \<<http://www.gnu.org/philosophy/why-not-lgpl.html>>.

README.md

···

       1
       1
       +
       My NixOS config!

     

       2
       2
       +
       

     

       3
       3
       +
       Heavily inspired/stolen from https://github.com/alyraffauf/nixcfg, aly you're really cool!!!

+404

flake.lock

···

       1
       1
       +
       {

     

       2
       2
       +
         "nodes": {

     

       3
       3
       +
           "agenix": {

     

       4
       4
       +
             "inputs": {

     

       5
       5
       +
               "darwin": "darwin",

     

       6
       6
       +
               "home-manager": "home-manager",

     

       7
       7
       +
               "nixpkgs": [

     

       8
       8
       +
                 "nixpkgs"

     

       9
       9
       +
               ],

     

       10
       10
       +
               "systems": "systems"

     

       11
       11
       +
             },

     

       12
       12
       +
             "locked": {

     

       13
       13
       +
               "lastModified": 1754433428,

     

       14
       14
       +
               "narHash": "sha256-NA/FT2hVhKDftbHSwVnoRTFhes62+7dxZbxj5Gxvghs=",

     

       15
       15
       +
               "owner": "ryantm",

     

       16
       16
       +
               "repo": "agenix",

     

       17
       17
       +
               "rev": "9edb1787864c4f59ae5074ad498b6272b3ec308d",

     

       18
       18
       +
               "type": "github"

     

       19
       19
       +
             },

     

       20
       20
       +
             "original": {

     

       21
       21
       +
               "owner": "ryantm",

     

       22
       22
       +
               "repo": "agenix",

     

       23
       23
       +
               "type": "github"

     

       24
       24
       +
             }

     

       25
       25
       +
           },

     

       26
       26
       +
           "crane": {

     

       27
       27
       +
             "locked": {

     

       28
       28
       +
               "lastModified": 1731098351,

     

       29
       29
       +
               "narHash": "sha256-HQkYvKvaLQqNa10KEFGgWHfMAbWBfFp+4cAgkut+NNE=",

     

       30
       30
       +
               "owner": "ipetkov",

     

       31
       31
       +
               "repo": "crane",

     

       32
       32
       +
               "rev": "ef80ead953c1b28316cc3f8613904edc2eb90c28",

     

       33
       33
       +
               "type": "github"

     

       34
       34
       +
             },

     

       35
       35
       +
             "original": {

     

       36
       36
       +
               "owner": "ipetkov",

     

       37
       37
       +
               "repo": "crane",

     

       38
       38
       +
               "type": "github"

     

       39
       39
       +
             }

     

       40
       40
       +
           },

     

       41
       41
       +
           "darwin": {

     

       42
       42
       +
             "inputs": {

     

       43
       43
       +
               "nixpkgs": [

     

       44
       44
       +
                 "agenix",

     

       45
       45
       +
                 "nixpkgs"

     

       46
       46
       +
               ]

     

       47
       47
       +
             },

     

       48
       48
       +
             "locked": {

     

       49
       49
       +
               "lastModified": 1744478979,

     

       50
       50
       +
               "narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=",

     

       51
       51
       +
               "owner": "lnl7",

     

       52
       52
       +
               "repo": "nix-darwin",

     

       53
       53
       +
               "rev": "43975d782b418ebf4969e9ccba82466728c2851b",

     

       54
       54
       +
               "type": "github"

     

       55
       55
       +
             },

     

       56
       56
       +
             "original": {

     

       57
       57
       +
               "owner": "lnl7",

     

       58
       58
       +
               "ref": "master",

     

       59
       59
       +
               "repo": "nix-darwin",

     

       60
       60
       +
               "type": "github"

     

       61
       61
       +
             }

     

       62
       62
       +
           },

     

       63
       63
       +
           "flake-compat": {

     

       64
       64
       +
             "flake": false,

     

       65
       65
       +
             "locked": {

     

       66
       66
       +
               "lastModified": 1696426674,

     

       67
       67
       +
               "narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=",

     

       68
       68
       +
               "owner": "edolstra",

     

       69
       69
       +
               "repo": "flake-compat",

     

       70
       70
       +
               "rev": "0f9255e01c2351cc7d116c072cb317785dd33b33",

     

       71
       71
       +
               "type": "github"

     

       72
       72
       +
             },

     

       73
       73
       +
             "original": {

     

       74
       74
       +
               "owner": "edolstra",

     

       75
       75
       +
               "repo": "flake-compat",

     

       76
       76
       +
               "type": "github"

     

       77
       77
       +
             }

     

       78
       78
       +
           },

     

       79
       79
       +
           "flake-parts": {

     

       80
       80
       +
             "inputs": {

     

       81
       81
       +
               "nixpkgs-lib": "nixpkgs-lib"

     

       82
       82
       +
             },

     

       83
       83
       +
             "locked": {

     

       84
       84
       +
               "lastModified": 1754487366,

     

       85
       85
       +
               "narHash": "sha256-pHYj8gUBapuUzKV/kN/tR3Zvqc7o6gdFB9XKXIp1SQ8=",

     

       86
       86
       +
               "owner": "hercules-ci",

     

       87
       87
       +
               "repo": "flake-parts",

     

       88
       88
       +
               "rev": "af66ad14b28a127c5c0f3bbb298218fc63528a18",

     

       89
       89
       +
               "type": "github"

     

       90
       90
       +
             },

     

       91
       91
       +
             "original": {

     

       92
       92
       +
               "owner": "hercules-ci",

     

       93
       93
       +
               "repo": "flake-parts",

     

       94
       94
       +
               "type": "github"

     

       95
       95
       +
             }

     

       96
       96
       +
           },

     

       97
       97
       +
           "flake-parts_2": {

     

       98
       98
       +
             "inputs": {

     

       99
       99
       +
               "nixpkgs-lib": [

     

       100
       100
       +
                 "lanzaboote",

     

       101
       101
       +
                 "nixpkgs"

     

       102
       102
       +
               ]

     

       103
       103
       +
             },

     

       104
       104
       +
             "locked": {

     

       105
       105
       +
               "lastModified": 1730504689,

     

       106
       106
       +
               "narHash": "sha256-hgmguH29K2fvs9szpq2r3pz2/8cJd2LPS+b4tfNFCwE=",

     

       107
       107
       +
               "owner": "hercules-ci",

     

       108
       108
       +
               "repo": "flake-parts",

     

       109
       109
       +
               "rev": "506278e768c2a08bec68eb62932193e341f55c90",

     

       110
       110
       +
               "type": "github"

     

       111
       111
       +
             },

     

       112
       112
       +
             "original": {

     

       113
       113
       +
               "owner": "hercules-ci",

     

       114
       114
       +
               "repo": "flake-parts",

     

       115
       115
       +
               "type": "github"

     

       116
       116
       +
             }

     

       117
       117
       +
           },

     

       118
       118
       +
           "flake-parts_3": {

     

       119
       119
       +
             "inputs": {

     

       120
       120
       +
               "nixpkgs-lib": [

     

       121
       121
       +
                 "nur",

     

       122
       122
       +
                 "nixpkgs"

     

       123
       123
       +
               ]

     

       124
       124
       +
             },

     

       125
       125
       +
             "locked": {

     

       126
       126
       +
               "lastModified": 1733312601,

     

       127
       127
       +
               "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",

     

       128
       128
       +
               "owner": "hercules-ci",

     

       129
       129
       +
               "repo": "flake-parts",

     

       130
       130
       +
               "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",

     

       131
       131
       +
               "type": "github"

     

       132
       132
       +
             },

     

       133
       133
       +
             "original": {

     

       134
       134
       +
               "owner": "hercules-ci",

     

       135
       135
       +
               "repo": "flake-parts",

     

       136
       136
       +
               "type": "github"

     

       137
       137
       +
             }

     

       138
       138
       +
           },

     

       139
       139
       +
           "gitignore": {

     

       140
       140
       +
             "inputs": {

     

       141
       141
       +
               "nixpkgs": [

     

       142
       142
       +
                 "lanzaboote",

     

       143
       143
       +
                 "pre-commit-hooks-nix",

     

       144
       144
       +
                 "nixpkgs"

     

       145
       145
       +
               ]

     

       146
       146
       +
             },

     

       147
       147
       +
             "locked": {

     

       148
       148
       +
               "lastModified": 1709087332,

     

       149
       149
       +
               "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",

     

       150
       150
       +
               "owner": "hercules-ci",

     

       151
       151
       +
               "repo": "gitignore.nix",

     

       152
       152
       +
               "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",

     

       153
       153
       +
               "type": "github"

     

       154
       154
       +
             },

     

       155
       155
       +
             "original": {

     

       156
       156
       +
               "owner": "hercules-ci",

     

       157
       157
       +
               "repo": "gitignore.nix",

     

       158
       158
       +
               "type": "github"

     

       159
       159
       +
             }

     

       160
       160
       +
           },

     

       161
       161
       +
           "home-manager": {

     

       162
       162
       +
             "inputs": {

     

       163
       163
       +
               "nixpkgs": [

     

       164
       164
       +
                 "agenix",

     

       165
       165
       +
                 "nixpkgs"

     

       166
       166
       +
               ]

     

       167
       167
       +
             },

     

       168
       168
       +
             "locked": {

     

       169
       169
       +
               "lastModified": 1745494811,

     

       170
       170
       +
               "narHash": "sha256-YZCh2o9Ua1n9uCvrvi5pRxtuVNml8X2a03qIFfRKpFs=",

     

       171
       171
       +
               "owner": "nix-community",

     

       172
       172
       +
               "repo": "home-manager",

     

       173
       173
       +
               "rev": "abfad3d2958c9e6300a883bd443512c55dfeb1be",

     

       174
       174
       +
               "type": "github"

     

       175
       175
       +
             },

     

       176
       176
       +
             "original": {

     

       177
       177
       +
               "owner": "nix-community",

     

       178
       178
       +
               "repo": "home-manager",

     

       179
       179
       +
               "type": "github"

     

       180
       180
       +
             }

     

       181
       181
       +
           },

     

       182
       182
       +
           "home-manager_2": {

     

       183
       183
       +
             "inputs": {

     

       184
       184
       +
               "nixpkgs": [

     

       185
       185
       +
                 "nixpkgs"

     

       186
       186
       +
               ]

     

       187
       187
       +
             },

     

       188
       188
       +
             "locked": {

     

       189
       189
       +
               "lastModified": 1754842705,

     

       190
       190
       +
               "narHash": "sha256-2vvncPLsBWV6dRM5LfGHMGYZ+vzqRDqSPBzxPAS0R/A=",

     

       191
       191
       +
               "owner": "nix-community",

     

       192
       192
       +
               "repo": "home-manager",

     

       193
       193
       +
               "rev": "91586008a23c01cc32894ee187dca8c0a7bd20a4",

     

       194
       194
       +
               "type": "github"

     

       195
       195
       +
             },

     

       196
       196
       +
             "original": {

     

       197
       197
       +
               "owner": "nix-community",

     

       198
       198
       +
               "ref": "master",

     

       199
       199
       +
               "repo": "home-manager",

     

       200
       200
       +
               "type": "github"

     

       201
       201
       +
             }

     

       202
       202
       +
           },

     

       203
       203
       +
           "lanzaboote": {

     

       204
       204
       +
             "inputs": {

     

       205
       205
       +
               "crane": "crane",

     

       206
       206
       +
               "flake-compat": "flake-compat",

     

       207
       207
       +
               "flake-parts": "flake-parts_2",

     

       208
       208
       +
               "nixpkgs": [

     

       209
       209
       +
                 "nixpkgs"

     

       210
       210
       +
               ],

     

       211
       211
       +
               "pre-commit-hooks-nix": "pre-commit-hooks-nix",

     

       212
       212
       +
               "rust-overlay": "rust-overlay"

     

       213
       213
       +
             },

     

       214
       214
       +
             "locked": {

     

       215
       215
       +
               "lastModified": 1737639419,

     

       216
       216
       +
               "narHash": "sha256-AEEDktApTEZ5PZXNDkry2YV2k6t0dTgLPEmAZbnigXU=",

     

       217
       217
       +
               "owner": "nix-community",

     

       218
       218
       +
               "repo": "lanzaboote",

     

       219
       219
       +
               "rev": "a65905a09e2c43ff63be8c0e86a93712361f871e",

     

       220
       220
       +
               "type": "github"

     

       221
       221
       +
             },

     

       222
       222
       +
             "original": {

     

       223
       223
       +
               "owner": "nix-community",

     

       224
       224
       +
               "ref": "v0.4.2",

     

       225
       225
       +
               "repo": "lanzaboote",

     

       226
       226
       +
               "type": "github"

     

       227
       227
       +
             }

     

       228
       228
       +
           },

     

       229
       229
       +
           "nixpkgs": {

     

       230
       230
       +
             "locked": {

     

       231
       231
       +
               "lastModified": 1754725699,

     

       232
       232
       +
               "narHash": "sha256-iAcj9T/Y+3DBy2J0N+yF9XQQQ8IEb5swLFzs23CdP88=",

     

       233
       233
       +
               "owner": "NixOS",

     

       234
       234
       +
               "repo": "nixpkgs",

     

       235
       235
       +
               "rev": "85dbfc7aaf52ecb755f87e577ddbe6dbbdbc1054",

     

       236
       236
       +
               "type": "github"

     

       237
       237
       +
             },

     

       238
       238
       +
             "original": {

     

       239
       239
       +
               "owner": "NixOS",

     

       240
       240
       +
               "ref": "nixos-unstable",

     

       241
       241
       +
               "repo": "nixpkgs",

     

       242
       242
       +
               "type": "github"

     

       243
       243
       +
             }

     

       244
       244
       +
           },

     

       245
       245
       +
           "nixpkgs-lib": {

     

       246
       246
       +
             "locked": {

     

       247
       247
       +
               "lastModified": 1753579242,

     

       248
       248
       +
               "narHash": "sha256-zvaMGVn14/Zz8hnp4VWT9xVnhc8vuL3TStRqwk22biA=",

     

       249
       249
       +
               "owner": "nix-community",

     

       250
       250
       +
               "repo": "nixpkgs.lib",

     

       251
       251
       +
               "rev": "0f36c44e01a6129be94e3ade315a5883f0228a6e",

     

       252
       252
       +
               "type": "github"

     

       253
       253
       +
             },

     

       254
       254
       +
             "original": {

     

       255
       255
       +
               "owner": "nix-community",

     

       256
       256
       +
               "repo": "nixpkgs.lib",

     

       257
       257
       +
               "type": "github"

     

       258
       258
       +
             }

     

       259
       259
       +
           },

     

       260
       260
       +
           "nixpkgs-stable": {

     

       261
       261
       +
             "locked": {

     

       262
       262
       +
               "lastModified": 1730741070,

     

       263
       263
       +
               "narHash": "sha256-edm8WG19kWozJ/GqyYx2VjW99EdhjKwbY3ZwdlPAAlo=",

     

       264
       264
       +
               "owner": "NixOS",

     

       265
       265
       +
               "repo": "nixpkgs",

     

       266
       266
       +
               "rev": "d063c1dd113c91ab27959ba540c0d9753409edf3",

     

       267
       267
       +
               "type": "github"

     

       268
       268
       +
             },

     

       269
       269
       +
             "original": {

     

       270
       270
       +
               "owner": "NixOS",

     

       271
       271
       +
               "ref": "nixos-24.05",

     

       272
       272
       +
               "repo": "nixpkgs",

     

       273
       273
       +
               "type": "github"

     

       274
       274
       +
             }

     

       275
       275
       +
           },

     

       276
       276
       +
           "nixpkgs-unstable": {

     

       277
       277
       +
             "locked": {

     

       278
       278
       +
               "lastModified": 1754800730,

     

       279
       279
       +
               "narHash": "sha256-HfVZCXic9XLBgybP0318ym3cDnGwBs/+H5MgxFVYF4I=",

     

       280
       280
       +
               "owner": "NixOS",

     

       281
       281
       +
               "repo": "nixpkgs",

     

       282
       282
       +
               "rev": "641d909c4a7538f1539da9240dedb1755c907e40",

     

       283
       283
       +
               "type": "github"

     

       284
       284
       +
             },

     

       285
       285
       +
             "original": {

     

       286
       286
       +
               "owner": "NixOS",

     

       287
       287
       +
               "ref": "nixpkgs-unstable",

     

       288
       288
       +
               "repo": "nixpkgs",

     

       289
       289
       +
               "type": "github"

     

       290
       290
       +
             }

     

       291
       291
       +
           },

     

       292
       292
       +
           "nixpkgs_2": {

     

       293
       293
       +
             "locked": {

     

       294
       294
       +
               "lastModified": 1754725699,

     

       295
       295
       +
               "narHash": "sha256-iAcj9T/Y+3DBy2J0N+yF9XQQQ8IEb5swLFzs23CdP88=",

     

       296
       296
       +
               "owner": "nixos",

     

       297
       297
       +
               "repo": "nixpkgs",

     

       298
       298
       +
               "rev": "85dbfc7aaf52ecb755f87e577ddbe6dbbdbc1054",

     

       299
       299
       +
               "type": "github"

     

       300
       300
       +
             },

     

       301
       301
       +
             "original": {

     

       302
       302
       +
               "owner": "nixos",

     

       303
       303
       +
               "ref": "nixos-unstable",

     

       304
       304
       +
               "repo": "nixpkgs",

     

       305
       305
       +
               "type": "github"

     

       306
       306
       +
             }

     

       307
       307
       +
           },

     

       308
       308
       +
           "nur": {

     

       309
       309
       +
             "inputs": {

     

       310
       310
       +
               "flake-parts": "flake-parts_3",

     

       311
       311
       +
               "nixpkgs": "nixpkgs_2"

     

       312
       312
       +
             },

     

       313
       313
       +
             "locked": {

     

       314
       314
       +
               "lastModified": 1754883319,

     

       315
       315
       +
               "narHash": "sha256-DUddNJ5q6sxzQ8SZaWt2KgNIATwSviQnpoeoUWCGopY=",

     

       316
       316
       +
               "owner": "nix-community",

     

       317
       317
       +
               "repo": "NUR",

     

       318
       318
       +
               "rev": "f657c3820a06481f3a037ffba0e69d01f2cedfb2",

     

       319
       319
       +
               "type": "github"

     

       320
       320
       +
             },

     

       321
       321
       +
             "original": {

     

       322
       322
       +
               "owner": "nix-community",

     

       323
       323
       +
               "repo": "NUR",

     

       324
       324
       +
               "type": "github"

     

       325
       325
       +
             }

     

       326
       326
       +
           },

     

       327
       327
       +
           "pre-commit-hooks-nix": {

     

       328
       328
       +
             "inputs": {

     

       329
       329
       +
               "flake-compat": [

     

       330
       330
       +
                 "lanzaboote",

     

       331
       331
       +
                 "flake-compat"

     

       332
       332
       +
               ],

     

       333
       333
       +
               "gitignore": "gitignore",

     

       334
       334
       +
               "nixpkgs": [

     

       335
       335
       +
                 "lanzaboote",

     

       336
       336
       +
                 "nixpkgs"

     

       337
       337
       +
               ],

     

       338
       338
       +
               "nixpkgs-stable": "nixpkgs-stable"

     

       339
       339
       +
             },

     

       340
       340
       +
             "locked": {

     

       341
       341
       +
               "lastModified": 1731363552,

     

       342
       342
       +
               "narHash": "sha256-vFta1uHnD29VUY4HJOO/D6p6rxyObnf+InnSMT4jlMU=",

     

       343
       343
       +
               "owner": "cachix",

     

       344
       344
       +
               "repo": "pre-commit-hooks.nix",

     

       345
       345
       +
               "rev": "cd1af27aa85026ac759d5d3fccf650abe7e1bbf0",

     

       346
       346
       +
               "type": "github"

     

       347
       347
       +
             },

     

       348
       348
       +
             "original": {

     

       349
       349
       +
               "owner": "cachix",

     

       350
       350
       +
               "repo": "pre-commit-hooks.nix",

     

       351
       351
       +
               "type": "github"

     

       352
       352
       +
             }

     

       353
       353
       +
           },

     

       354
       354
       +
           "root": {

     

       355
       355
       +
             "inputs": {

     

       356
       356
       +
               "agenix": "agenix",

     

       357
       357
       +
               "flake-parts": "flake-parts",

     

       358
       358
       +
               "home-manager": "home-manager_2",

     

       359
       359
       +
               "lanzaboote": "lanzaboote",

     

       360
       360
       +
               "nixpkgs": "nixpkgs",

     

       361
       361
       +
               "nixpkgs-unstable": "nixpkgs-unstable",

     

       362
       362
       +
               "nur": "nur"

     

       363
       363
       +
             }

     

       364
       364
       +
           },

     

       365
       365
       +
           "rust-overlay": {

     

       366
       366
       +
             "inputs": {

     

       367
       367
       +
               "nixpkgs": [

     

       368
       368
       +
                 "lanzaboote",

     

       369
       369
       +
                 "nixpkgs"

     

       370
       370
       +
               ]

     

       371
       371
       +
             },

     

       372
       372
       +
             "locked": {

     

       373
       373
       +
               "lastModified": 1731897198,

     

       374
       374
       +
               "narHash": "sha256-Ou7vLETSKwmE/HRQz4cImXXJBr/k9gp4J4z/PF8LzTE=",

     

       375
       375
       +
               "owner": "oxalica",

     

       376
       376
       +
               "repo": "rust-overlay",

     

       377
       377
       +
               "rev": "0be641045af6d8666c11c2c40e45ffc9667839b5",

     

       378
       378
       +
               "type": "github"

     

       379
       379
       +
             },

     

       380
       380
       +
             "original": {

     

       381
       381
       +
               "owner": "oxalica",

     

       382
       382
       +
               "repo": "rust-overlay",

     

       383
       383
       +
               "type": "github"

     

       384
       384
       +
             }

     

       385
       385
       +
           },

     

       386
       386
       +
           "systems": {

     

       387
       387
       +
             "locked": {

     

       388
       388
       +
               "lastModified": 1681028828,

     

       389
       389
       +
               "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",

     

       390
       390
       +
               "owner": "nix-systems",

     

       391
       391
       +
               "repo": "default",

     

       392
       392
       +
               "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",

     

       393
       393
       +
               "type": "github"

     

       394
       394
       +
             },

     

       395
       395
       +
             "original": {

     

       396
       396
       +
               "owner": "nix-systems",

     

       397
       397
       +
               "repo": "default",

     

       398
       398
       +
               "type": "github"

     

       399
       399
       +
             }

     

       400
       400
       +
           }

     

       401
       401
       +
         },

     

       402
       402
       +
         "root": "root",

     

       403
       403
       +
         "version": 7

     

       404
       404
       +
       }

+43

flake.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         description = "Aly's NixOS flake with flake-parts";

     

       3
       3
       +
       

     

       4
       4
       +
         inputs = {

     

       5
       5
       +
           nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";

     

       6
       6
       +
           nixpkgs-unstable.url = "github:NixOS/nixpkgs/nixpkgs-unstable";

     

       7
       7
       +
       

     

       8
       8
       +
           agenix = {

     

       9
       9
       +
             url = "github:ryantm/agenix";

     

       10
       10
       +
             inputs.nixpkgs.follows = "nixpkgs";

     

       11
       11
       +
           };

     

       12
       12
       +
       

     

       13
       13
       +
           flake-parts.url = "github:hercules-ci/flake-parts";

     

       14
       14
       +
       

     

       15
       15
       +
           home-manager = {

     

       16
       16
       +
             url = "github:nix-community/home-manager/master";

     

       17
       17
       +
             inputs.nixpkgs.follows = "nixpkgs";

     

       18
       18
       +
           };

     

       19
       19
       +
       

     

       20
       20
       +
           lanzaboote = {

     

       21
       21
       +
             url = "github:nix-community/lanzaboote/v0.4.2";

     

       22
       22
       +
             inputs.nixpkgs.follows = "nixpkgs";

     

       23
       23
       +
           };

     

       24
       24
       +
       

     

       25
       25
       +
           nur.url = "github:nix-community/NUR";

     

       26
       26
       +
         };

     

       27
       27
       +
       

     

       28
       28
       +
         nixConfig = {

     

       29
       29
       +
           accept-flake-config = true;

     

       30
       30
       +
         };

     

       31
       31
       +
       

     

       32
       32
       +
         outputs = inputs @ {flake-parts, ...}:

     

       33
       33
       +
           flake-parts.lib.mkFlake {inherit inputs;} {

     

       34
       34
       +
             systems = [

     

       35
       35
       +
               "x86_64-linux"

     

       36
       36
       +
             ];

     

       37
       37
       +
       

     

       38
       38
       +
             imports = [

     

       39
       39
       +
               ./modules/flake

     

       40
       40
       +
               inputs.home-manager.flakeModules.home-manager

     

       41
       41
       +
             ];

     

       42
       42
       +
           };

     

       43
       43
       +
       }

+89

homes/ayla/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         pkgs,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         self,

     

       5
       5
       +
         config,

     

       6
       6
       +
         ...

     

       7
       7
       +
       }: {

     

       8
       8
       +
         imports = [

     

       9
       9
       +
           self.homeModules.default

     

       10
       10
       +
         ];

     

       11
       11
       +
       

     

       12
       12
       +
         config = lib.mkMerge [

     

       13
       13
       +
           {

     

       14
       14
       +
             home = {

     

       15
       15
       +
               packages = with pkgs; [

     

       16
       16
       +
                 rclone

     

       17
       17
       +
               ];

     

       18
       18
       +
       

     

       19
       19
       +
               username = "ayla";

     

       20
       20
       +
             };

     

       21
       21
       +
       

     

       22
       22
       +
             programs.home-manager.enable = true;

     

       23
       23
       +
             xdg.enable = true;

     

       24
       24
       +
       

     

       25
       25
       +
             myHome = {

     

       26
       26
       +
               desktop = {

     

       27
       27
       +
                 gnome.enable = true;

     

       28
       28
       +
               };

     

       29
       29
       +
       

     

       30
       30
       +
               programs = {

     

       31
       31
       +
                 chromium.enable = true;

     

       32
       32
       +
                 fastfetch.enable = true;

     

       33
       33
       +
                 firefox.enable = true;

     

       34
       34
       +
                 git.enable = true;

     

       35
       35
       +
                 micro.enable = true;

     

       36
       36
       +
                 mpv.enable = true;

     

       37
       37
       +
                 obs-studio.enable = true;

     

       38
       38
       +
                 zed-editor.enable = true;

     

       39
       39
       +
               };

     

       40
       40
       +
       

     

       41
       41
       +
               profiles = {

     

       42
       42
       +
                 shell.enable = true;

     

       43
       43
       +
                 defaultApps = {

     

       44
       44
       +
                   enable = true;

     

       45
       45
       +
                   forceMimeAssociations = true;

     

       46
       46
       +
                   audioPlayer.package = config.programs.mpv.finalPackage;

     

       47
       47
       +
                   videoPlayer.package = config.programs.mpv.finalPackage;

     

       48
       48
       +
                   editor.package = pkgs.gnome-text-editor;

     

       49
       49
       +
                   fileManager.package = pkgs.nautilus;

     

       50
       50
       +
                   imageViewer.package = pkgs.loupe;

     

       51
       51
       +
                   pdfViewer.package = pkgs.papers;

     

       52
       52
       +
                   terminal.package = pkgs.gnome-console;

     

       53
       53
       +
                   terminalEditor.package = config.programs.micro.package;

     

       54
       54
       +
                   webBrowser.package = config.programs.firefox.finalPackage;

     

       55
       55
       +
                 };

     

       56
       56
       +
               };

     

       57
       57
       +
       

     

       58
       58
       +
               services = {

     

       59
       59
       +
                 aria2.enable = true;

     

       60
       60
       +
                 syncthing.enable = true;

     

       61
       61
       +
               };

     

       62
       62
       +
       

     

       63
       63
       +
               style = {

     

       64
       64
       +
                 fonts.enable = true;

     

       65
       65
       +
               };

     

       66
       66
       +
             };

     

       67
       67
       +
           }

     

       68
       68
       +
       

     

       69
       69
       +
           (lib.mkIf pkgs.stdenv.isLinux {

     

       70
       70
       +
             gtk.gtk3.bookmarks = lib.mkAfter [

     

       71
       71
       +
               "file://home/Data/DCMI"

     

       72
       72
       +
               "file://home/Data"

     

       73
       73
       +
             ];

     

       74
       74
       +
       

     

       75
       75
       +
             home = {

     

       76
       76
       +
               homeDirectory = "/home/ayla";

     

       77
       77
       +
       

     

       78
       78
       +
               packages = with pkgs; [

     

       79
       79
       +
                 nicotine-plus

     

       80
       80
       +
               ];

     

       81
       81
       +
       

     

       82
       82
       +
               stateVersion = "25.05";

     

       83
       83
       +
               username = "ayla";

     

       84
       84
       +
             };

     

       85
       85
       +
       

     

       86
       86
       +
             systemd.user.startServices = true; # Needed for auto-mounting agenix secrets.

     

       87
       87
       +
           })

     

       88
       88
       +
         ];

     

       89
       89
       +
       }

hosts/morgana/README.md

···

       1
       1
       +
       That's the poor acer laptop that I daily drive.

+75

hosts/morgana/default.nix

···

       1
       1
       +
       {self, ...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./home.nix

     

       4
       4
       +
           self.nixosModules.locale-en-gb

     

       5
       5
       +
         ];

     

       6
       6
       +
       

     

       7
       7
       +
         networking.hostName = "morgana";

     

       8
       8
       +
         system.stateVersion = "25.05";

     

       9
       9
       +
         time.timeZone = "America/Sao_Paulo";

     

       10
       10
       +
         myHardware.acer.aspire.A515-52G.enable = true;

     

       11
       11
       +
       

     

       12
       12
       +
         myNixOS = {

     

       13
       13
       +
           programs = {

     

       14
       14
       +
             lanzaboote.enable = true;

     

       15
       15
       +
             nix.enable = true;

     

       16
       16
       +
             nix-ld.enable = true;

     

       17
       17
       +
             steam.enable = true;

     

       18
       18
       +
             firefox.enable = true;

     

       19
       19
       +
           };

     

       20
       20
       +
           profiles = {

     

       21
       21
       +
             base.enable = true;

     

       22
       22
       +
             workstation.enable = true;

     

       23
       23
       +
           };

     

       24
       24
       +
           desktop.gnome.enable = true;

     

       25
       25
       +
           services = {

     

       26
       26
       +
             tailscale.enable = true;

     

       27
       27
       +
             aria2.enable = true;

     

       28
       28
       +
           };

     

       29
       29
       +
           style.fonts.enable = true;

     

       30
       30
       +
         };

     

       31
       31
       +
       

     

       32
       32
       +
         myUsers = {

     

       33
       33
       +
           ayla = {

     

       34
       34
       +
             password = "REDACTED";

     

       35
       35
       +
           };

     

       36
       36
       +
         };

     

       37
       37
       +
       

     

       38
       38
       +
         boot.initrd = {

     

       39
       39
       +
           availableKernelModules = [

     

       40
       40
       +
             "xhci_pci"

     

       41
       41
       +
             "ahci"

     

       42
       42
       +
             "usb_storage"

     

       43
       43
       +
             "sd_mod"

     

       44
       44
       +
             "rtsx_pci_sdmmc"

     

       45
       45
       +
           ];

     

       46
       46
       +
       

     

       47
       47
       +
           luks.devices."luks-cc030211-13e5-4411-a906-94c6ef45a0c6".device = "/dev/disk/by-uuid/cc030211-13e5-4411-a906-94c6ef45a0c6";

     

       48
       48
       +
         };

     

       49
       49
       +
       

     

       50
       50
       +
         fileSystems = {

     

       51
       51
       +
           "/" = {

     

       52
       52
       +
             device = "/dev/disk/by-uuid/8ed468ba-610b-49c8-8b93-5a20d4bf14da";

     

       53
       53
       +
             fsType = "btrfs";

     

       54
       54
       +
             options = [

     

       55
       55
       +
               "subvol=@"

     

       56
       56
       +
               "compress=zstd"

     

       57
       57
       +
               "noatime"

     

       58
       58
       +
             ];

     

       59
       59
       +
           };

     

       60
       60
       +
       

     

       61
       61
       +
           "/boot" = {

     

       62
       62
       +
             device = "/dev/disk/by-uuid/4831-1B0D";

     

       63
       63
       +
             fsType = "vfat";

     

       64
       64
       +
             options = [

     

       65
       65
       +
               "fmask=0077"

     

       66
       66
       +
               "dmask=0077"

     

       67
       67
       +
             ];

     

       68
       68
       +
           };

     

       69
       69
       +
       

     

       70
       70
       +
           "/home/Data" = {

     

       71
       71
       +
             device = "/dev/disk/by-uuid/6cfb1f47-51d6-4ece-ab1c-6ad3c2d41542";

     

       72
       72
       +
             fsType = "ext4";

     

       73
       73
       +
           };

     

       74
       74
       +
         };

     

       75
       75
       +
       }

hosts/morgana/home.nix

···

       1
       1
       +
       {self, ...}: {

     

       2
       2
       +
         home-manager.users = {

     

       3
       3
       +
           inherit (self.homeConfigurations) ayla;

     

       4
       4
       +
         };

     

       5
       5
       +
       }

modules/flake/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./home-manager.nix

     

       4
       4
       +
           ./nixos.nix

     

       5
       5
       +
         ];

     

       6
       6
       +
       }

+11

modules/flake/home-manager.nix

···

       1
       1
       +
       _: {

     

       2
       2
       +
         flake = {

     

       3
       3
       +
           homeConfigurations = {

     

       4
       4
       +
             ayla = ../../homes/ayla;

     

       5
       5
       +
           };

     

       6
       6
       +
       

     

       7
       7
       +
           homeModules = {

     

       8
       8
       +
             default = ../home;

     

       9
       9
       +
           };

     

       10
       10
       +
         };

     

       11
       11
       +
       }

+48

modules/flake/nixos.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         self,

     

       3
       3
       +
         inputs,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         flake = {

     

       7
       7
       +
           nixosModules = {

     

       8
       8
       +
             hardware = ../hardware;

     

       9
       9
       +
             locale-en-gb = ../locale/en-gb;

     

       10
       10
       +
             nixos = ../nixos;

     

       11
       11
       +
             users = ../users;

     

       12
       12
       +
           };

     

       13
       13
       +
       

     

       14
       14
       +
           nixosConfigurations = let

     

       15
       15
       +
             modules = self.nixosModules;

     

       16
       16
       +
           in

     

       17
       17
       +
             inputs.nixpkgs.lib.genAttrs ["morgana"] (

     

       18
       18
       +
               host:

     

       19
       19
       +
                 inputs.nixpkgs.lib.nixosSystem {

     

       20
       20
       +
                   modules = [

     

       21
       21
       +
                     ../../hosts/${host}

     

       22
       22
       +
                     inputs.home-manager.nixosModules.home-manager

     

       23
       23
       +
                     inputs.lanzaboote.nixosModules.lanzaboote

     

       24
       24
       +
                     modules.hardware

     

       25
       25
       +
                     modules.nixos

     

       26
       26
       +
                     modules.users

     

       27
       27
       +
       

     

       28
       28
       +
                     {

     

       29
       29
       +
                       home-manager = {

     

       30
       30
       +
                         useGlobalPkgs = true;

     

       31
       31
       +
                         useUserPackages = true;

     

       32
       32
       +
                         extraSpecialArgs = {inherit inputs self;};

     

       33
       33
       +
                         backupFileExtension = "backup";

     

       34
       34
       +
                       };

     

       35
       35
       +
       

     

       36
       36
       +
                       nixpkgs = {

     

       37
       37
       +
                         overlays = [

     

       38
       38
       +
                           self.inputs.nur.overlays.default

     

       39
       39
       +
                         ];

     

       40
       40
       +
                         config.allowUnfree = true;

     

       41
       41
       +
                       };

     

       42
       42
       +
                     }

     

       43
       43
       +
                   ];

     

       44
       44
       +
                   specialArgs = {inherit self;};

     

       45
       45
       +
                 }

     

       46
       46
       +
             );

     

       47
       47
       +
         };

     

       48
       48
       +
       }

+28

modules/hardware/acer/aspire/A515-52G/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHardware.acer.aspire.A515-52G.enable =

     

       7
       7
       +
           lib.mkEnableOption "Acer Aspire A515-52G hardware configuration.";

     

       8
       8
       +
       

     

       9
       9
       +
         config = lib.mkIf config.myHardware.acer.aspire.A515-52G.enable {

     

       10
       10
       +
           hardware.nvidia.prime = {

     

       11
       11
       +
             intelBusId = "PCI:0:2:0";

     

       12
       12
       +
             nvidiaBusId = "PCI:1:0:0";

     

       13
       13
       +
           };

     

       14
       14
       +
       

     

       15
       15
       +
           myHardware = {

     

       16
       16
       +
             nvidia.gpu.enable = true;

     

       17
       17
       +
             intel = {

     

       18
       18
       +
               cpu.enable = true;

     

       19
       19
       +
               gpu.enable = true;

     

       20
       20
       +
             };

     

       21
       21
       +
       

     

       22
       22
       +
             profiles = {

     

       23
       23
       +
               base.enable = true;

     

       24
       24
       +
               laptop.enable = true;

     

       25
       25
       +
             };

     

       26
       26
       +
           };

     

       27
       27
       +
         };

     

       28
       28
       +
       }

modules/hardware/acer/aspire/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./A515-52G

     

       4
       4
       +
         ];

     

       5
       5
       +
       }

modules/hardware/acer/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./aspire

     

       4
       4
       +
         ];

     

       5
       5
       +
       }

modules/hardware/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./nvidia

     

       4
       4
       +
           ./intel

     

       5
       5
       +
           ./acer

     

       6
       6
       +
           ./profiles

     

       7
       7
       +
         ];

     

       8
       8
       +
       }

+13

modules/hardware/intel/cpu/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHardware.intel.cpu.enable = lib.mkEnableOption "Intel CPU configuration.";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myHardware.intel.cpu.enable {

     

       9
       9
       +
           boot.kernelModules = ["kvm-intel"];

     

       10
       10
       +
           hardware.cpu.intel.updateMicrocode = true;

     

       11
       11
       +
           nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";

     

       12
       12
       +
         };

     

       13
       13
       +
       }

modules/hardware/intel/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./cpu

     

       4
       4
       +
           ./gpu

     

       5
       5
       +
         ];

     

       6
       6
       +
       }

+39

modules/hardware/intel/gpu/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myHardware.intel.gpu.enable = lib.mkEnableOption "Intel GPU configuration.";

     

       8
       8
       +
       

     

       9
       9
       +
         config = lib.mkIf config.myHardware.intel.gpu.enable {

     

       10
       10
       +
           boot.initrd.kernelModules = ["i915"];

     

       11
       11
       +
       

     

       12
       12
       +
           environment.sessionVariables = {

     

       13
       13
       +
             LIBVA_DRIVER_NAME = "iHD";

     

       14
       14
       +
             VDPAU_DRIVER = "va_gl";

     

       15
       15
       +
           };

     

       16
       16
       +
       

     

       17
       17
       +
           hardware = {

     

       18
       18
       +
             intel-gpu-tools.enable = true;

     

       19
       19
       +
       

     

       20
       20
       +
             graphics = {

     

       21
       21
       +
               enable = true;

     

       22
       22
       +
       

     

       23
       23
       +
               extraPackages = [

     

       24
       24
       +
                 pkgs.intel-media-driver # LIBVA_DRIVER_NAME=iHD

     

       25
       25
       +
                 (pkgs.intel-vaapi-driver.override {enableHybridCodec = true;})

     

       26
       26
       +
                 pkgs.libvdpau-va-gl

     

       27
       27
       +
               ];

     

       28
       28
       +
       

     

       29
       29
       +
               extraPackages32 = [

     

       30
       30
       +
                 pkgs.driversi686Linux.intel-media-driver # LIBVA_DRIVER_NAME=iHD

     

       31
       31
       +
                 (pkgs.driversi686Linux.intel-vaapi-driver.override {enableHybridCodec = true;})

     

       32
       32
       +
                 pkgs.driversi686Linux.libvdpau-va-gl

     

       33
       33
       +
               ];

     

       34
       34
       +
             };

     

       35
       35
       +
           };

     

       36
       36
       +
       

     

       37
       37
       +
           services.xserver.videoDrivers = ["modesetting"];

     

       38
       38
       +
         };

     

       39
       39
       +
       }

modules/hardware/nvidia/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./gpu

     

       4
       4
       +
         ];

     

       5
       5
       +
       }

+54

modules/hardware/nvidia/gpu/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHardware.nvidia.gpu.enable = lib.mkEnableOption "Use the NVIDIA proprietary GPU drivers.";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myHardware.nvidia.gpu.enable {

     

       9
       9
       +
           # Load nvidia driver for Xorg and Wayland

     

       10
       10
       +
           services.xserver.videoDrivers = [

     

       11
       11
       +
             "modesetting"

     

       12
       12
       +
             "nvidia"

     

       13
       13
       +
           ];

     

       14
       14
       +
       

     

       15
       15
       +
           # Enable OpenGL

     

       16
       16
       +
           hardware = {

     

       17
       17
       +
             graphics = {

     

       18
       18
       +
               enable = true;

     

       19
       19
       +
               enable32Bit = true;

     

       20
       20
       +
             };

     

       21
       21
       +
       

     

       22
       22
       +
             nvidia = {

     

       23
       23
       +
               # Modesetting is required.

     

       24
       24
       +
               modesetting.enable = true;

     

       25
       25
       +
       

     

       26
       26
       +
               # Nvidia power management. Experimental, and can cause sleep/suspend to fail.

     

       27
       27
       +
               # Enable this if you have graphical corruption issues or application crashes after waking

     

       28
       28
       +
               # up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead

     

       29
       29
       +
               # of just the bare essentials.

     

       30
       30
       +
               powerManagement.enable = false;

     

       31
       31
       +
       

     

       32
       32
       +
               # Use the NVidia open source kernel module (not to be confused with the

     

       33
       33
       +
               # independent third-party "nouveau" open source driver).

     

       34
       34
       +
               # Support is limited to the Turing and later architectures. Full list of

     

       35
       35
       +
               # supported GPUs is at:

     

       36
       36
       +
               # https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus

     

       37
       37
       +
               # Only available from driver 515.43.04+

     

       38
       38
       +
               open = false;

     

       39
       39
       +
       

     

       40
       40
       +
               # Enable the Nvidia settings menu,

     

       41
       41
       +
               # accessible via `nvidia-settings`.

     

       42
       42
       +
               nvidiaSettings = true;

     

       43
       43
       +
       

     

       44
       44
       +
               # Optionally, you may need to select the appropriate driver version for your specific GPU.

     

       45
       45
       +
               package = config.boot.kernelPackages.nvidiaPackages.stable;

     

       46
       46
       +
       

     

       47
       47
       +
               prime.offload = {

     

       48
       48
       +
                 enable = true;

     

       49
       49
       +
                 enableOffloadCmd = true;

     

       50
       50
       +
               };

     

       51
       51
       +
             };

     

       52
       52
       +
           };

     

       53
       53
       +
         };

     

       54
       54
       +
       }

+38

modules/hardware/profiles/base/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHardware.profiles.base.enable = lib.mkEnableOption "Base common hardware configuration";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myHardware.profiles.base.enable {

     

       9
       9
       +
           console.useXkbConfig = true;

     

       10
       10
       +
       

     

       11
       11
       +
           hardware = {

     

       12
       12
       +
             enableAllFirmware = true;

     

       13
       13
       +
       

     

       14
       14
       +
             bluetooth = {

     

       15
       15
       +
               enable = false;

     

       16
       16
       +
               powerOnBoot = true;

     

       17
       17
       +
             };

     

       18
       18
       +
       

     

       19
       19
       +
             keyboard.qmk.enable = true;

     

       20
       20
       +
           };

     

       21
       21
       +
       

     

       22
       22
       +
           services = {

     

       23
       23
       +
             fstrim.enable = true;

     

       24
       24
       +
       

     

       25
       25
       +
             logind = {

     

       26
       26
       +
               powerKey = "suspend";

     

       27
       27
       +
               powerKeyLongPress = "poweroff";

     

       28
       28
       +
             };

     

       29
       29
       +
       

     

       30
       30
       +
             xserver.xkb = {

     

       31
       31
       +
               layout = "us";

     

       32
       32
       +
               variant = "colemak";

     

       33
       33
       +
             };

     

       34
       34
       +
           };

     

       35
       35
       +
       

     

       36
       36
       +
           zramSwap.enable = lib.mkDefault true;

     

       37
       37
       +
         };

     

       38
       38
       +
       }

modules/hardware/profiles/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./base

     

       4
       4
       +
           ./laptop

     

       5
       5
       +
         ];

     

       6
       6
       +
       }

+33

modules/hardware/profiles/laptop/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHardware.profiles.laptop.enable = lib.mkEnableOption "Laptop hardware configuration.";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkMerge [

     

       9
       9
       +
           (lib.mkIf config.myHardware.profiles.laptop.enable {

     

       10
       10
       +
             boot.kernel.sysctl."kernel.nmi_watchdog" = lib.mkDefault 0;

     

       11
       11
       +
       

     

       12
       12
       +
             services = {

     

       13
       13
       +
               tuned = {

     

       14
       14
       +
                 enable = lib.mkDefault true;

     

       15
       15
       +
                 settings.dynamic_tuning = true;

     

       16
       16
       +
               };

     

       17
       17
       +
       

     

       18
       18
       +
               # udev.extraRules = lib.mkIf config.services.power-profiles-daemon.enable ''

     

       19
       19
       +
               #   ## Automatically switch power profiles based on AC power status.

     

       20
       20
       +
               #   ACTION=="change", SUBSYSTEM=="power_supply", ATTRS{type}=="Mains", ATTRS{online}=="0", RUN+="${lib.getExe pkgs.power-profiles-daemon} set power-saver"

     

       21
       21
       +
               #   ACTION=="change", SUBSYSTEM=="power_supply", ATTRS{type}=="Mains", ATTRS{online}=="1", RUN+="${lib.getExe pkgs.power-profiles-daemon} set balanced"

     

       22
       22
       +
               # '';

     

       23
       23
       +
       

     

       24
       24
       +
               upower.enable = true;

     

       25
       25
       +
             };

     

       26
       26
       +
           })

     

       27
       27
       +
       

     

       28
       28
       +
           (lib.mkIf (config.myHardware.intel.cpu.enable && config.myHardware.profiles.laptop.enable) {

     

       29
       29
       +
             # powerManagement.powertop.enable = true;

     

       30
       30
       +
             services.thermald.enable = true;

     

       31
       31
       +
           })

     

       32
       32
       +
         ];

     

       33
       33
       +
       }

+20

modules/home/default.nix

···

       1
       1
       +
       {inputs, ...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./desktop

     

       4
       4
       +
           ./programs

     

       5
       5
       +
           ./services

     

       6
       6
       +
           ./profiles

     

       7
       7
       +
           ./style

     

       8
       8
       +
           ./packages.nix

     

       9
       9
       +
           ./hidden.nix

     

       10
       10
       +
           inputs.agenix.homeManagerModules.default

     

       11
       11
       +
         ];

     

       12
       12
       +
       

     

       13
       13
       +
         home.username = "ayla";

     

       14
       14
       +
         home.homeDirectory = "/home/ayla";

     

       15
       15
       +
       

     

       16
       16
       +
         home.stateVersion = "25.05";

     

       17
       17
       +
         home.shell.enableFishIntegration = true;

     

       18
       18
       +
       

     

       19
       19
       +
         programs.home-manager.enable = true;

     

       20
       20
       +
       }

+53

modules/home/desktop/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         imports = [

     

       8
       8
       +
           ./gnome

     

       9
       9
       +
         ];

     

       10
       10
       +
       

     

       11
       11
       +
         options.myHome.desktop.enable = lib.mkOption {

     

       12
       12
       +
           default = config.myHome.desktop.gnome.enable;

     

       13
       13
       +
           description = "Desktop environment configuration.";

     

       14
       14
       +
           type = lib.types.bool;

     

       15
       15
       +
         };

     

       16
       16
       +
       

     

       17
       17
       +
         config = lib.mkIf config.myHome.desktop.enable {

     

       18
       18
       +
           home.packages = [

     

       19
       19
       +
             pkgs.adwaita-icon-theme

     

       20
       20
       +
           ];

     

       21
       21
       +
       

     

       22
       22
       +
           dconf = {

     

       23
       23
       +
             enable = true;

     

       24
       24
       +
       

     

       25
       25
       +
             settings = {

     

       26
       26
       +
               "org/gnome/nm-applet".disable-connected-notifications = true;

     

       27
       27
       +
               "org/gtk/gtk4/settings/file-chooser".sort-directories-first = true;

     

       28
       28
       +
               "org/gtk/settings/file-chooser".sort-directories-first = true;

     

       29
       29
       +
             };

     

       30
       30
       +
           };

     

       31
       31
       +
       

     

       32
       32
       +
           gtk.gtk3.bookmarks = [

     

       33
       33
       +
             "file://${config.xdg.userDirs.documents}"

     

       34
       34
       +
             "file://${config.xdg.userDirs.download}"

     

       35
       35
       +
             "file://${config.xdg.userDirs.music}"

     

       36
       36
       +
             "file://${config.xdg.userDirs.videos}"

     

       37
       37
       +
             "file://${config.xdg.userDirs.pictures}"

     

       38
       38
       +
           ];

     

       39
       39
       +
       

     

       40
       40
       +
           xdg.userDirs = {

     

       41
       41
       +
             enable = true;

     

       42
       42
       +
             createDirectories = true;

     

       43
       43
       +
             desktop = lib.mkDefault "${config.home.homeDirectory}/Desktop";

     

       44
       44
       +
             documents = lib.mkDefault "${config.home.homeDirectory}/Documents";

     

       45
       45
       +
             download = lib.mkDefault "${config.home.homeDirectory}/Downloads";

     

       46
       46
       +
             music = lib.mkDefault "${config.home.homeDirectory}/Music";

     

       47
       47
       +
             pictures = lib.mkDefault "${config.home.homeDirectory}/Pictures";

     

       48
       48
       +
             publicShare = lib.mkDefault "${config.home.homeDirectory}/Public";

     

       49
       49
       +
             templates = lib.mkDefault "${config.home.homeDirectory}/Templates";

     

       50
       50
       +
             videos = lib.mkDefault "${config.home.homeDirectory}/Videos";

     

       51
       51
       +
           };

     

       52
       52
       +
         };

     

       53
       53
       +
       }

+151

modules/home/desktop/gnome/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myHome.desktop.gnome = {

     

       8
       8
       +
           enable = lib.mkEnableOption "GNOME desktop environment";

     

       9
       9
       +
         };

     

       10
       10
       +
       

     

       11
       11
       +
         config = lib.mkIf config.myHome.desktop.gnome.enable {

     

       12
       12
       +
           dconf = {

     

       13
       13
       +
             enable = true;

     

       14
       14
       +
       

     

       15
       15
       +
             settings = let

     

       16
       16
       +
               defaultApps = {

     

       17
       17
       +
                 terminal = config.myHome.profiles.defaultApps.terminal.exec or (lib.getExe pkgs.gnome-console);

     

       18
       18
       +
                 webBrowser =

     

       19
       19
       +
                   config.myHome.profiles.defaultApps.webBrowser.exec

     

       20
       20
       +
                       or (lib.getExe config.programs.firefox.finalPackage);

     

       21
       21
       +
                 fileManager = config.myHome.profiles.defaultApps.fileManager.exec or (lib.getExe pkgs.nautilus);

     

       22
       22
       +
                 editor = config.myHome.profiles.defaultApps.editor.exec or (lib.getExe pkgs.gnome-text-editor);

     

       23
       23
       +
               };

     

       24
       24
       +
             in {

     

       25
       25
       +
               "org/gnome/desktop/datetime".automatic-timezone = true;

     

       26
       26
       +
       

     

       27
       27
       +
               "org/gnome/desktop/interface" = {

     

       28
       28
       +
                 clock-format = "24h";

     

       29
       29
       +
                 enable-hot-corners = false;

     

       30
       30
       +
               };

     

       31
       31
       +
       

     

       32
       32
       +
               "org/gnome/desktop/peripherals/touchpad".tap-to-click = true;

     

       33
       33
       +
       

     

       34
       34
       +
               "org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0" = {

     

       35
       35
       +
                 binding = "<Super>Return";

     

       36
       36
       +
                 command = "${defaultApps.terminal}";

     

       37
       37
       +
                 name = "Terminal";

     

       38
       38
       +
               };

     

       39
       39
       +
       

     

       40
       40
       +
               "org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1" = {

     

       41
       41
       +
                 binding = "<Super>e";

     

       42
       42
       +
                 command = "${defaultApps.fileManager}";

     

       43
       43
       +
                 name = "File Manager";

     

       44
       44
       +
               };

     

       45
       45
       +
       

     

       46
       46
       +
               "org/gnome/shell" = {

     

       47
       47
       +
                 welcome-dialog-last-shown-version = "9999999999"; # No welcome dialog.

     

       48
       48
       +
               };

     

       49
       49
       +
       

     

       50
       50
       +
               "org/gnome/shell/keybindings" = {

     

       51
       51
       +
                 switch-to-application-1 = [];

     

       52
       52
       +
                 switch-to-application-2 = [];

     

       53
       53
       +
                 switch-to-application-3 = [];

     

       54
       54
       +
                 switch-to-application-4 = [];

     

       55
       55
       +
                 switch-to-application-5 = [];

     

       56
       56
       +
                 switch-to-application-6 = [];

     

       57
       57
       +
                 switch-to-application-7 = [];

     

       58
       58
       +
                 switch-to-application-8 = [];

     

       59
       59
       +
                 switch-to-application-9 = [];

     

       60
       60
       +
                 switch-to-application-10 = [];

     

       61
       61
       +
               };

     

       62
       62
       +
       

     

       63
       63
       +
               "org/gnome/system/location".enabled = true;

     

       64
       64
       +
       

     

       65
       65
       +
               "org/gnome/desktop/wm/keybindings" = {

     

       66
       66
       +
                 move-to-monitor-down = [

     

       67
       67
       +
                   "<Ctrl><Shift><Super>e"

     

       68
       68
       +
                   "<Ctrl><Shift><Super>Down"

     

       69
       69
       +
                 ];

     

       70
       70
       +
                 move-to-monitor-left = [

     

       71
       71
       +
                   "<Ctrl><Shift><Super>n"

     

       72
       72
       +
                   "<Ctrl><Shift><Super>Left"

     

       73
       73
       +
                 ];

     

       74
       74
       +
                 move-to-monitor-right = [

     

       75
       75
       +
                   "<Ctrl><Shift><Super>o"

     

       76
       76
       +
                   "<Ctrl><Shift><Super>Right"

     

       77
       77
       +
                 ];

     

       78
       78
       +
                 move-to-monitor-up = [

     

       79
       79
       +
                   "<Ctrl><Shift><Super>i"

     

       80
       80
       +
                   "<Ctrl><Shift><Super>Up"

     

       81
       81
       +
                 ];

     

       82
       82
       +
                 move-to-workspace-1 = ["<Shift><Super>1"];

     

       83
       83
       +
                 move-to-workspace-10 = ["<Shift><Super>0"];

     

       84
       84
       +
                 move-to-workspace-2 = ["<Shift><Super>2"];

     

       85
       85
       +
                 move-to-workspace-3 = ["<Shift><Super>3"];

     

       86
       86
       +
                 move-to-workspace-4 = ["<Shift><Super>4"];

     

       87
       87
       +
                 move-to-workspace-5 = ["<Shift><Super>5"];

     

       88
       88
       +
                 move-to-workspace-6 = ["<Shift><Super>6"];

     

       89
       89
       +
                 move-to-workspace-7 = ["<Shift><Super>7"];

     

       90
       90
       +
                 move-to-workspace-8 = ["<Shift><Super>8"];

     

       91
       91
       +
                 move-to-workspace-9 = ["<Shift><Super>9"];

     

       92
       92
       +
                 move-to-workspace-down = ["<Shift><Super>j"];

     

       93
       93
       +
                 move-to-workspace-left = [

     

       94
       94
       +
                   "<Shift><Super>n"

     

       95
       95
       +
                   "<Shift><Super>Comma"

     

       96
       96
       +
                 ];

     

       97
       97
       +
                 move-to-workspace-right = [

     

       98
       98
       +
                   "<Shift><Super>o"

     

       99
       99
       +
                   "<Shift><Super>Period"

     

       100
       100
       +
                 ];

     

       101
       101
       +
                 move-to-workspace-up = ["<Shift><Super>k"];

     

       102
       102
       +
                 switch-to-workspace-1 = ["<Super>1"];

     

       103
       103
       +
                 switch-to-workspace-10 = ["<Super>0"];

     

       104
       104
       +
                 switch-to-workspace-2 = ["<Super>2"];

     

       105
       105
       +
                 switch-to-workspace-3 = ["<Super>3"];

     

       106
       106
       +
                 switch-to-workspace-4 = ["<Super>4"];

     

       107
       107
       +
                 switch-to-workspace-5 = ["<Super>5"];

     

       108
       108
       +
                 switch-to-workspace-6 = ["<Super>6"];

     

       109
       109
       +
                 switch-to-workspace-7 = ["<Super>7"];

     

       110
       110
       +
                 switch-to-workspace-8 = ["<Super>8"];

     

       111
       111
       +
                 switch-to-workspace-9 = ["<Super>9"];

     

       112
       112
       +
                 switch-to-workspace-down = [];

     

       113
       113
       +
                 switch-to-workspace-left = ["<Super>Comma"];

     

       114
       114
       +
                 switch-to-workspace-right = ["<Super>Period"];

     

       115
       115
       +
                 switch-to-workspace-up = [];

     

       116
       116
       +
                 toggle-fullscreen = ["<Super>w"];

     

       117
       117
       +
               };

     

       118
       118
       +
             };

     

       119
       119
       +
           };

     

       120
       120
       +
       

     

       121
       121
       +
           programs = {

     

       122
       122
       +
             firefox.nativeMessagingHosts = [pkgs.gnome-browser-connector];

     

       123
       123
       +
       

     

       124
       124
       +
             gnome-shell = {

     

       125
       125
       +
               enable = true;

     

       126
       126
       +
       

     

       127
       127
       +
               extensions = [

     

       128
       128
       +
                 {package = pkgs.gnomeExtensions.appindicator;}

     

       129
       129
       +
                 {package = pkgs.gnomeExtensions.night-theme-switcher;}

     

       130
       130
       +
                 {package = pkgs.gnomeExtensions.gsconnect;}

     

       131
       131
       +
               ];

     

       132
       132
       +
             };

     

       133
       133
       +
           };

     

       134
       134
       +
       

     

       135
       135
       +
           home.packages = with pkgs; [

     

       136
       136
       +
             gnome-tweaks

     

       137
       137
       +
             adw-gtk3

     

       138
       138
       +
             gnome-extension-manager

     

       139
       139
       +
           ];

     

       140
       140
       +
       

     

       141
       141
       +
           myHome.profiles.defaultApps = {

     

       142
       142
       +
             audioPlayer.package = lib.mkDefault pkgs.mpv;

     

       143
       143
       +
             editor.package = lib.mkDefault pkgs.gnome-text-editor;

     

       144
       144
       +
             fileManager.package = lib.mkDefault pkgs.nautilus;

     

       145
       145
       +
             imageViewer.package = lib.mkDefault pkgs.loupe;

     

       146
       146
       +
             pdfViewer.package = lib.mkDefault pkgs.papers;

     

       147
       147
       +
             terminal.package = lib.mkDefault pkgs.gnome-console;

     

       148
       148
       +
             videoPlayer.package = lib.mkDefault pkgs.mpv;

     

       149
       149
       +
           };

     

       150
       150
       +
         };

     

       151
       151
       +
       }

modules/home/hidden.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         home.file.".hidden" = {

     

       3
       3
       +
           text = "result";

     

       4
       4
       +
         };

     

       5
       5
       +
       }

+51

modules/home/packages.nix

···

       1
       1
       +
       {pkgs, ...}: {

     

       2
       2
       +
         home.packages = with pkgs; [

     

       3
       3
       +
           # --- System Utilities ---

     

       4
       4
       +
           zip

     

       5
       5
       +
           xz

     

       6
       6
       +
           unzip

     

       7
       7
       +
           p7zip

     

       8
       8
       +
           wl-clipboard

     

       9
       9
       +
           libnotify

     

       10
       10
       +
       

     

       11
       11
       +
           # --- Development ---

     

       12
       12
       +
           alejandra

     

       13
       13
       +
           nixd

     

       14
       14
       +
           gcc

     

       15
       15
       +
           nodejs

     

       16
       16
       +
           pnpm

     

       17
       17
       +
           typescript

     

       18
       18
       +
           ffmpeg

     

       19
       19
       +
           luajit

     

       20
       20
       +
           love

     

       21
       21
       +
       

     

       22
       22
       +
           # --- Applications ---

     

       23
       23
       +
           keepassxc

     

       24
       24
       +
           libsecret

     

       25
       25
       +
           qbittorrent

     

       26
       26
       +
           flare-signal

     

       27
       27
       +
           kdePackages.kdenlive

     

       28
       28
       +
           krita

     

       29
       29
       +
           gimp3

     

       30
       30
       +
           yt-dlp

     

       31
       31
       +
           aseprite

     

       32
       32
       +
           inkscape

     

       33
       33
       +
           jellyfin-media-player

     

       34
       34
       +
           calibre

     

       35
       35
       +
           picard

     

       36
       36
       +
           freac

     

       37
       37
       +
           audacious

     

       38
       38
       +
           audacious-plugins

     

       39
       39
       +
           lmms

     

       40
       40
       +
       

     

       41
       41
       +
           # --- Gaming ---

     

       42
       42
       +
           wine

     

       43
       43
       +
           steam-run

     

       44
       44
       +
           lutris

     

       45
       45
       +
           mgba

     

       46
       46
       +
           melonDS

     

       47
       47
       +
           openttd

     

       48
       48
       +
           prismlauncher

     

       49
       49
       +
           mindustry

     

       50
       50
       +
         ];

     

       51
       51
       +
       }

modules/home/profiles/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./shell

     

       4
       4
       +
           ./defaultApps

     

       5
       5
       +
         ];

     

       6
       6
       +
       }

+231

modules/home/profiles/defaultApps/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: let

     

       7
       7
       +
         cfg = config.myHome.profiles.defaultApps;

     

       8
       8
       +
         mimeTypes = import ./mimeTypes.nix;

     

       9
       9
       +
       in {

     

       10
       10
       +
         options.myHome.profiles.defaultApps = {

     

       11
       11
       +
           enable = lib.mkEnableOption "enforce default applications";

     

       12
       12
       +
           forceMimeAssociations = lib.mkEnableOption "force mime associations for defaultApps";

     

       13
       13
       +
       

     

       14
       14
       +
           audioPlayer = {

     

       15
       15
       +
             package = lib.mkOption {

     

       16
       16
       +
               type = lib.types.package;

     

       17
       17
       +
               default = pkgs.celluloid;

     

       18
       18
       +
               description = "The default audio player package.";

     

       19
       19
       +
             };

     

       20
       20
       +
       

     

       21
       21
       +
             exec = lib.mkOption {

     

       22
       22
       +
               type = lib.types.str;

     

       23
       23
       +
               default = lib.getExe cfg.audioPlayer.package;

     

       24
       24
       +
               description = "The executable path for the default audio player.";

     

       25
       25
       +
             };

     

       26
       26
       +
           };

     

       27
       27
       +
       

     

       28
       28
       +
           editor = {

     

       29
       29
       +
             package = lib.mkOption {

     

       30
       30
       +
               type = lib.types.package;

     

       31
       31
       +
               default = pkgs.gnome-text-editor;

     

       32
       32
       +
               description = "The default text editor package.";

     

       33
       33
       +
             };

     

       34
       34
       +
       

     

       35
       35
       +
             exec = lib.mkOption {

     

       36
       36
       +
               type = lib.types.str;

     

       37
       37
       +
               default = lib.getExe cfg.editor.package;

     

       38
       38
       +
               description = "The executable path for the default text editor.";

     

       39
       39
       +
             };

     

       40
       40
       +
           };

     

       41
       41
       +
       

     

       42
       42
       +
           fileManager = {

     

       43
       43
       +
             package = lib.mkOption {

     

       44
       44
       +
               type = lib.types.package;

     

       45
       45
       +
               default = pkgs.nemo;

     

       46
       46
       +
               description = "The default file manager package.";

     

       47
       47
       +
             };

     

       48
       48
       +
       

     

       49
       49
       +
             exec = lib.mkOption {

     

       50
       50
       +
               type = lib.types.str;

     

       51
       51
       +
               default = lib.getExe cfg.fileManager.package;

     

       52
       52
       +
               description = "The executable path for the default file manager.";

     

       53
       53
       +
             };

     

       54
       54
       +
           };

     

       55
       55
       +
       

     

       56
       56
       +
           imageViewer = {

     

       57
       57
       +
             package = lib.mkOption {

     

       58
       58
       +
               type = lib.types.package;

     

       59
       59
       +
               default = pkgs.eog;

     

       60
       60
       +
               description = "The default image viewer package.";

     

       61
       61
       +
             };

     

       62
       62
       +
       

     

       63
       63
       +
             exec = lib.mkOption {

     

       64
       64
       +
               type = lib.types.str;

     

       65
       65
       +
               default = lib.getExe cfg.imageViewer.package;

     

       66
       66
       +
               description = "The executable path for the default image viewer.";

     

       67
       67
       +
             };

     

       68
       68
       +
           };

     

       69
       69
       +
       

     

       70
       70
       +
           pdfViewer = {

     

       71
       71
       +
             package = lib.mkOption {

     

       72
       72
       +
               type = lib.types.package;

     

       73
       73
       +
               default = pkgs.papers;

     

       74
       74
       +
               description = "The default PDF viewer package.";

     

       75
       75
       +
             };

     

       76
       76
       +
       

     

       77
       77
       +
             exec = lib.mkOption {

     

       78
       78
       +
               type = lib.types.str;

     

       79
       79
       +
               default = lib.getExe cfg.pdfViewer.package;

     

       80
       80
       +
               description = "The executable path for the default PDF viewer.";

     

       81
       81
       +
             };

     

       82
       82
       +
           };

     

       83
       83
       +
       

     

       84
       84
       +
           terminal = {

     

       85
       85
       +
             package = lib.mkOption {

     

       86
       86
       +
               type = lib.types.package;

     

       87
       87
       +
               default = pkgs.ghostty;

     

       88
       88
       +
               description = "The default terminal emulator package.";

     

       89
       89
       +
             };

     

       90
       90
       +
       

     

       91
       91
       +
             exec = lib.mkOption {

     

       92
       92
       +
               type = lib.types.str;

     

       93
       93
       +
               default = lib.getExe cfg.terminal.package;

     

       94
       94
       +
               description = "The executable path for the default terminal emulator.";

     

       95
       95
       +
             };

     

       96
       96
       +
           };

     

       97
       97
       +
       

     

       98
       98
       +
           terminalEditor = {

     

       99
       99
       +
             package = lib.mkOption {

     

       100
       100
       +
               type = lib.types.package;

     

       101
       101
       +
               default = pkgs.neovim;

     

       102
       102
       +
               description = "The default terminal text editor package.";

     

       103
       103
       +
             };

     

       104
       104
       +
       

     

       105
       105
       +
             exec = lib.mkOption {

     

       106
       106
       +
               type = lib.types.str;

     

       107
       107
       +
               default = lib.getExe cfg.terminalEditor.package;

     

       108
       108
       +
               description = "The executable path for the default terminal text editor.";

     

       109
       109
       +
             };

     

       110
       110
       +
           };

     

       111
       111
       +
       

     

       112
       112
       +
           videoPlayer = {

     

       113
       113
       +
             package = lib.mkOption {

     

       114
       114
       +
               type = lib.types.package;

     

       115
       115
       +
               default = pkgs.celluloid;

     

       116
       116
       +
               description = "The default video player package.";

     

       117
       117
       +
             };

     

       118
       118
       +
       

     

       119
       119
       +
             exec = lib.mkOption {

     

       120
       120
       +
               type = lib.types.str;

     

       121
       121
       +
               default = lib.getExe cfg.videoPlayer.package;

     

       122
       122
       +
               description = "The executable path for the default video player.";

     

       123
       123
       +
             };

     

       124
       124
       +
           };

     

       125
       125
       +
       

     

       126
       126
       +
           webBrowser = {

     

       127
       127
       +
             package = lib.mkOption {

     

       128
       128
       +
               type = lib.types.package;

     

       129
       129
       +
               default = config.programs.firefox.finalPackage;

     

       130
       130
       +
               description = "The default web browser package.";

     

       131
       131
       +
             };

     

       132
       132
       +
       

     

       133
       133
       +
             exec = lib.mkOption {

     

       134
       134
       +
               type = lib.types.str;

     

       135
       135
       +
               default = lib.getExe cfg.webBrowser.package;

     

       136
       136
       +
               description = "The executable path for the default web browser.";

     

       137
       137
       +
             };

     

       138
       138
       +
           };

     

       139
       139
       +
         };

     

       140
       140
       +
       

     

       141
       141
       +
         config = lib.mkIf cfg.enable {

     

       142
       142
       +
           dconf = {

     

       143
       143
       +
             enable = true;

     

       144
       144
       +
       

     

       145
       145
       +
             settings = {

     

       146
       146
       +
               "org/cinnamon/desktop/applications/terminal".exec = "${cfg.terminal.exec}";

     

       147
       147
       +
               "org/cinnamon/desktop/default-applications/terminal".exec = "${cfg.terminal.exec}";

     

       148
       148
       +
             };

     

       149
       149
       +
           };

     

       150
       150
       +
       

     

       151
       151
       +
           home = {

     

       152
       152
       +
             packages = with cfg; [

     

       153
       153
       +
               audioPlayer.package

     

       154
       154
       +
               editor.package

     

       155
       155
       +
               fileManager.package

     

       156
       156
       +
               imageViewer.package

     

       157
       157
       +
               pdfViewer.package

     

       158
       158
       +
               terminal.package

     

       159
       159
       +
               terminalEditor.package

     

       160
       160
       +
               videoPlayer.package

     

       161
       161
       +
               webBrowser.package

     

       162
       162
       +
             ];

     

       163
       163
       +
       

     

       164
       164
       +
             sessionVariables = {

     

       165
       165
       +
               BROWSER = "${builtins.baseNameOf cfg.webBrowser.exec}";

     

       166
       166
       +
               EDITOR = "${builtins.baseNameOf cfg.terminalEditor.exec}";

     

       167
       167
       +
               TERMINAL = "${builtins.baseNameOf cfg.terminal.exec}";

     

       168
       168
       +
             };

     

       169
       169
       +
           };

     

       170
       170
       +
       

     

       171
       171
       +
           xdg = {

     

       172
       172
       +
             configFile."xfce4/helpers.rc".text = ''

     

       173
       173
       +
               FileManager=${builtins.baseNameOf cfg.fileManager.exec}

     

       174
       174
       +
               TerminalEmulator=${builtins.baseNameOf cfg.terminal.exec}

     

       175
       175
       +
               WebBrowser=${builtins.baseNameOf cfg.webBrowser.exec}

     

       176
       176
       +
             '';

     

       177
       177
       +
       

     

       178
       178
       +
             mimeApps = lib.mkIf cfg.forceMimeAssociations {

     

       179
       179
       +
               enable = true;

     

       180
       180
       +
       

     

       181
       181
       +
               defaultApplications = let

     

       182
       182
       +
                 mkDefaults = files: desktopFile: lib.genAttrs files (_: [desktopFile]);

     

       183
       183
       +
                 audioTypes = mkDefaults mimeTypes.audioFiles "defaultAudioPlayer.desktop";

     

       184
       184
       +
       

     

       185
       185
       +
                 browserTypes = mkDefaults mimeTypes.browserFiles "defaultWebBrowser.desktop";

     

       186
       186
       +
       

     

       187
       187
       +
                 documentTypes = mkDefaults mimeTypes.documentFiles "defaultPdfViewer.desktop";

     

       188
       188
       +
       

     

       189
       189
       +
                 editorTypes = mkDefaults mimeTypes.editorFiles "defaultEditor.desktop";

     

       190
       190
       +
       

     

       191
       191
       +
                 folderTypes = {

     

       192
       192
       +
                   "inode/directory" = "defaultFileManager.desktop";

     

       193
       193
       +
                 };

     

       194
       194
       +
       

     

       195
       195
       +
                 imageTypes = mkDefaults mimeTypes.imageFiles "defaultImageViewer.desktop";

     

       196
       196
       +
       

     

       197
       197
       +
                 videoTypes = mkDefaults mimeTypes.videoFiles "defaultVideoPlayer.desktop";

     

       198
       198
       +
               in

     

       199
       199
       +
                 audioTypes

     

       200
       200
       +
                 // browserTypes

     

       201
       201
       +
                 // documentTypes

     

       202
       202
       +
                 // editorTypes

     

       203
       203
       +
                 // folderTypes

     

       204
       204
       +
                 // imageTypes

     

       205
       205
       +
                 // videoTypes;

     

       206
       206
       +
             };

     

       207
       207
       +
       

     

       208
       208
       +
             desktopEntries = let

     

       209
       209
       +
               mkDefaultEntry = name: exec: {

     

       210
       210
       +
                 exec = "${exec} %U";

     

       211
       211
       +
                 icon = "${builtins.baseNameOf exec}";

     

       212
       212
       +
                 name = "Default ${name}";

     

       213
       213
       +
                 terminal = false;

     

       214
       214
       +
       

     

       215
       215
       +
                 settings = {

     

       216
       216
       +
                   NoDisplay = "true";

     

       217
       217
       +
                 };

     

       218
       218
       +
               };

     

       219
       219
       +
             in

     

       220
       220
       +
               lib.mkIf cfg.forceMimeAssociations {

     

       221
       221
       +
                 defaultAudioPlayer = mkDefaultEntry "Audio Player" cfg.audioPlayer.exec;

     

       222
       222
       +
                 defaultEditor = mkDefaultEntry "Editor" cfg.editor.exec;

     

       223
       223
       +
                 defaultFileManager = mkDefaultEntry "File Manager" cfg.fileManager.exec;

     

       224
       224
       +
                 defaultImageViewer = mkDefaultEntry "Image Viewer" cfg.imageViewer.exec;

     

       225
       225
       +
                 defaultPdfViewer = mkDefaultEntry "PDF Viewer" cfg.pdfViewer.exec;

     

       226
       226
       +
                 defaultVideoPlayer = mkDefaultEntry "Video Player" cfg.videoPlayer.exec;

     

       227
       227
       +
                 defaultWebBrowser = mkDefaultEntry "Web Browser" cfg.webBrowser.exec;

     

       228
       228
       +
               };

     

       229
       229
       +
           };

     

       230
       230
       +
         };

     

       231
       231
       +
       }

+220

modules/home/profiles/defaultApps/mimeTypes.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         audioFiles = [

     

       3
       3
       +
           "application/mpeg4-iod"

     

       4
       4
       +
           "application/mpeg4-muxcodetable"

     

       5
       5
       +
           "application/mxf"

     

       6
       6
       +
           "application/ogg"

     

       7
       7
       +
           "application/vnd.apple.mpegurl"

     

       8
       8
       +
           "application/vnd.ms-asf"

     

       9
       9
       +
           "application/vnd.rn-realmedia-vbr"

     

       10
       10
       +
           "application/vnd.rn-realmedia"

     

       11
       11
       +
           "application/x-extension-m4a"

     

       12
       12
       +
           "application/x-flac"

     

       13
       13
       +
           "application/x-ogg"

     

       14
       14
       +
           "application/x-streamingmedia"

     

       15
       15
       +
           "audio/3gpp"

     

       16
       16
       +
           "audio/3gpp2"

     

       17
       17
       +
           "audio/aac"

     

       18
       18
       +
           "audio/ac3"

     

       19
       19
       +
           "audio/amr-wb"

     

       20
       20
       +
           "audio/amr"

     

       21
       21
       +
           "audio/basic"

     

       22
       22
       +
           "audio/dv"

     

       23
       23
       +
           "audio/eac3"

     

       24
       24
       +
           "audio/flac"

     

       25
       25
       +
           "audio/m4a"

     

       26
       26
       +
           "audio/midi"

     

       27
       27
       +
           "audio/mp1"

     

       28
       28
       +
           "audio/mp2"

     

       29
       29
       +
           "audio/mp3"

     

       30
       30
       +
           "audio/mp4"

     

       31
       31
       +
           "audio/mpeg"

     

       32
       32
       +
           "audio/mpegurl"

     

       33
       33
       +
           "audio/mpg"

     

       34
       34
       +
           "audio/ogg"

     

       35
       35
       +
           "audio/opus"

     

       36
       36
       +
           "audio/scpls"

     

       37
       37
       +
           "audio/vnd.dolby.heaac.1"

     

       38
       38
       +
           "audio/vnd.dolby.heaac.2"

     

       39
       39
       +
           "audio/vnd.dolby.mlp"

     

       40
       40
       +
           "audio/vnd.dts.hd"

     

       41
       41
       +
           "audio/vnd.dts"

     

       42
       42
       +
           "audio/vnd.rn-realaudio"

     

       43
       43
       +
           "audio/wav"

     

       44
       44
       +
           "audio/webm"

     

       45
       45
       +
           "audio/x-aac"

     

       46
       46
       +
           "audio/x-aiff"

     

       47
       47
       +
           "audio/x-ape"

     

       48
       48
       +
           "audio/x-flac"

     

       49
       49
       +
           "audio/x-gsm"

     

       50
       50
       +
           "audio/x-it"

     

       51
       51
       +
           "audio/x-m4a"

     

       52
       52
       +
           "audio/x-matroska"

     

       53
       53
       +
           "audio/x-mod"

     

       54
       54
       +
           "audio/x-mp1"

     

       55
       55
       +
           "audio/x-mp2"

     

       56
       56
       +
           "audio/x-mp3"

     

       57
       57
       +
           "audio/x-mpeg"

     

       58
       58
       +
           "audio/x-mpegurl"

     

       59
       59
       +
           "audio/x-mpg"

     

       60
       60
       +
           "audio/x-ms-asf"

     

       61
       61
       +
           "audio/x-ms-wma"

     

       62
       62
       +
           "audio/x-musepack"

     

       63
       63
       +
           "audio/x-opus+ogg"

     

       64
       64
       +
           "audio/x-pn-aiff"

     

       65
       65
       +
           "audio/x-pn-au"

     

       66
       66
       +
           "audio/x-pn-realaudio"

     

       67
       67
       +
           "audio/x-pn-wav"

     

       68
       68
       +
           "audio/x-real-audio"

     

       69
       69
       +
           "audio/x-realaudio"

     

       70
       70
       +
           "audio/x-s3m"

     

       71
       71
       +
           "audio/x-scpls"

     

       72
       72
       +
           "audio/x-shorten"

     

       73
       73
       +
           "audio/x-speex"

     

       74
       74
       +
           "audio/x-tta"

     

       75
       75
       +
           "audio/x-vorbis"

     

       76
       76
       +
           "audio/x-vorbis+ogg"

     

       77
       77
       +
           "audio/x-wav"

     

       78
       78
       +
           "audio/x-wavpack"

     

       79
       79
       +
           "audio/x-xm"

     

       80
       80
       +
           "x-content/audio-cdda"

     

       81
       81
       +
           "x-content/audio-player"

     

       82
       82
       +
         ];

     

       83
       83
       +
       

     

       84
       84
       +
         browserFiles = [

     

       85
       85
       +
           "application/vnd.mozilla.xul+xml"

     

       86
       86
       +
           "application/x-extension-htm"

     

       87
       87
       +
           "application/x-extension-html"

     

       88
       88
       +
           "application/x-extension-shtml"

     

       89
       89
       +
           "application/x-extension-xht"

     

       90
       90
       +
           "application/x-extension-xhtml"

     

       91
       91
       +
           "application/xhtml+xml"

     

       92
       92
       +
           "text/html"

     

       93
       93
       +
           "text/xml"

     

       94
       94
       +
           "x-scheme-handler/chrome"

     

       95
       95
       +
           "x-scheme-handler/ftp"

     

       96
       96
       +
           "x-scheme-handler/http"

     

       97
       97
       +
           "x-scheme-handler/http"

     

       98
       98
       +
           "x-scheme-handler/https"

     

       99
       99
       +
         ];

     

       100
       100
       +
       

     

       101
       101
       +
         documentFiles = [

     

       102
       102
       +
           "application/illustrator"

     

       103
       103
       +
           "application/oxps"

     

       104
       104
       +
           "application/pdf"

     

       105
       105
       +
           "application/postscript"

     

       106
       106
       +
           "application/vnd.comicbook-rar"

     

       107
       107
       +
           "application/vnd.comicbook+zip"

     

       108
       108
       +
           "application/vnd.ms-xpsdocument"

     

       109
       109
       +
           "application/x-bzdvi"

     

       110
       110
       +
           "application/x-bzpdf"

     

       111
       111
       +
           "application/x-bzpostscript"

     

       112
       112
       +
           "application/x-cb7"

     

       113
       113
       +
           "application/x-cbr"

     

       114
       114
       +
           "application/x-cbt"

     

       115
       115
       +
           "application/x-cbz"

     

       116
       116
       +
           "application/x-dvi"

     

       117
       117
       +
           "application/x-ext-cb7"

     

       118
       118
       +
           "application/x-ext-cbr"

     

       119
       119
       +
           "application/x-ext-cbt"

     

       120
       120
       +
           "application/x-ext-cbz"

     

       121
       121
       +
           "application/x-ext-djv"

     

       122
       122
       +
           "application/x-ext-djvu"

     

       123
       123
       +
           "application/x-ext-dvi"

     

       124
       124
       +
           "application/x-ext-eps"

     

       125
       125
       +
           "application/x-ext-pdf"

     

       126
       126
       +
           "application/x-ext-ps"

     

       127
       127
       +
           "application/x-gzdvi"

     

       128
       128
       +
           "application/x-gzpdf"

     

       129
       129
       +
           "application/x-gzpostscript"

     

       130
       130
       +
           "application/x-xzpdf"

     

       131
       131
       +
           "image/tiff"

     

       132
       132
       +
           "image/vnd.djvu"

     

       133
       133
       +
           "image/x-bzeps"

     

       134
       134
       +
           "image/x-eps"

     

       135
       135
       +
           "image/x-gzeps"

     

       136
       136
       +
         ];

     

       137
       137
       +
       

     

       138
       138
       +
         editorFiles = [

     

       139
       139
       +
           "application/json"

     

       140
       140
       +
           "application/x-shellscript"

     

       141
       141
       +
           "application/x-shellscript"

     

       142
       142
       +
           "text/markdown"

     

       143
       143
       +
           "text/plain"

     

       144
       144
       +
           "text/x-python"

     

       145
       145
       +
         ];

     

       146
       146
       +
       

     

       147
       147
       +
         imageFiles = [

     

       148
       148
       +
           "image/bmp"

     

       149
       149
       +
           "image/gif"

     

       150
       150
       +
           "image/jpeg"

     

       151
       151
       +
           "image/jpg"

     

       152
       152
       +
           "image/pjpeg"

     

       153
       153
       +
           "image/png"

     

       154
       154
       +
           "image/svg+xml-compressed"

     

       155
       155
       +
           "image/svg+xml"

     

       156
       156
       +
           "image/tiff"

     

       157
       157
       +
           "image/vnd.wap.wbmp"

     

       158
       158
       +
           "image/webp"

     

       159
       159
       +
           "image/x-bmp"

     

       160
       160
       +
           "image/x-gray"

     

       161
       161
       +
           "image/x-icb"

     

       162
       162
       +
           "image/x-icns"

     

       163
       163
       +
           "image/x-ico"

     

       164
       164
       +
           "image/x-pcx"

     

       165
       165
       +
           "image/x-png"

     

       166
       166
       +
           "image/x-portable-anymap"

     

       167
       167
       +
           "image/x-portable-bitmap"

     

       168
       168
       +
           "image/x-portable-graymap"

     

       169
       169
       +
           "image/x-portable-pixmap"

     

       170
       170
       +
           "image/x-xbitmap"

     

       171
       171
       +
           "image/x-xpixmap"

     

       172
       172
       +
         ];

     

       173
       173
       +
       

     

       174
       174
       +
         videoFiles = [

     

       175
       175
       +
           "application/mpeg4-iod"

     

       176
       176
       +
           "application/mpeg4-muxcodetable"

     

       177
       177
       +
           "application/vnd.apple.mpegurl"

     

       178
       178
       +
           "application/x-extension-m4a"

     

       179
       179
       +
           "application/x-extension-mp4"

     

       180
       180
       +
           "application/x-flash-video"

     

       181
       181
       +
           "application/x-matroska"

     

       182
       182
       +
           "video/3gp"

     

       183
       183
       +
           "video/3gpp"

     

       184
       184
       +
           "video/3gpp2"

     

       185
       185
       +
           "video/divx"

     

       186
       186
       +
           "video/dv"

     

       187
       187
       +
           "video/fli"

     

       188
       188
       +
           "video/flv"

     

       189
       189
       +
           "video/mp2t"

     

       190
       190
       +
           "video/mp4"

     

       191
       191
       +
           "video/mp4v-es"

     

       192
       192
       +
           "video/mpeg-system"

     

       193
       193
       +
           "video/mpeg"

     

       194
       194
       +
           "video/msvideo"

     

       195
       195
       +
           "video/ogg"

     

       196
       196
       +
           "video/quicktime"

     

       197
       197
       +
           "video/vnd.mpegurl"

     

       198
       198
       +
           "video/vnd.rn-realvideo"

     

       199
       199
       +
           "video/webm"

     

       200
       200
       +
           "video/x-avi"

     

       201
       201
       +
           "video/x-flc"

     

       202
       202
       +
           "video/x-fli"

     

       203
       203
       +
           "video/x-flv"

     

       204
       204
       +
           "video/x-m4v"

     

       205
       205
       +
           "video/x-matroska"

     

       206
       206
       +
           "video/x-mpeg-system"

     

       207
       207
       +
           "video/x-mpeg"

     

       208
       208
       +
           "video/x-mpeg2"

     

       209
       209
       +
           "video/x-ms-asf"

     

       210
       210
       +
           "video/x-ms-wm"

     

       211
       211
       +
           "video/x-ms-wmv"

     

       212
       212
       +
           "video/x-ms-wmx"

     

       213
       213
       +
           "video/x-msvideo"

     

       214
       214
       +
           "video/x-nsv"

     

       215
       215
       +
           "video/x-ogm+ogg"

     

       216
       216
       +
           "video/x-theora"

     

       217
       217
       +
           "video/x-theora+ogg"

     

       218
       218
       +
           "x-content/video-dvd"

     

       219
       219
       +
         ];

     

       220
       220
       +
       }

+64

modules/home/profiles/shell/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myHome.profiles.shell.enable = lib.mkEnableOption "basic shell environment";

     

       8
       8
       +
       

     

       9
       9
       +
         config = lib.mkIf config.myHome.profiles.shell.enable {

     

       10
       10
       +
           home = {

     

       11
       11
       +
             packages = with pkgs; [

     

       12
       12
       +
               (lib.hiPrio uutils-coreutils-noprefix)

     

       13
       13
       +
               curl

     

       14
       14
       +
               btop

     

       15
       15
       +
               nixos-rebuild

     

       16
       16
       +
               wget

     

       17
       17
       +
             ];

     

       18
       18
       +
       

     

       19
       19
       +
             shellAliases = {

     

       20
       20
       +
               l = "eza -lah";

     

       21
       21
       +
               tree = "eza --tree";

     

       22
       22
       +
               top = "btop";

     

       23
       23
       +
               npm = "pnpm";

     

       24
       24
       +
               ytmusic = "yt-dlp -f 251 --remux-video opus --embed-metadata --embed-thumbnail -o \"%(album)s/%(disc_number>0)s%(disc_number)02d-%(track_number)02d %(title)s.%(ext)s\"";

     

       25
       25
       +
             };

     

       26
       26
       +
           };

     

       27
       27
       +
       

     

       28
       28
       +
           programs = {

     

       29
       29
       +
             bat.enable = true;

     

       30
       30
       +
       

     

       31
       31
       +
             eza = {

     

       32
       32
       +
               enable = true;

     

       33
       33
       +
               enableFishIntegration = true;

     

       34
       34
       +
               extraOptions = [

     

       35
       35
       +
                 "--group-directories-first"

     

       36
       36
       +
                 "--header"

     

       37
       37
       +
               ];

     

       38
       38
       +
               git = true;

     

       39
       39
       +
               icons = "auto";

     

       40
       40
       +
             };

     

       41
       41
       +
       

     

       42
       42
       +
             fish = {

     

       43
       43
       +
               enable = true;

     

       44
       44
       +
               interactiveShellInit = ''

     

       45
       45
       +
                 set -gx PATH $PATH /home/$USER/.local/bin

     

       46
       46
       +
               '';

     

       47
       47
       +
             };

     

       48
       48
       +
       

     

       49
       49
       +
             fzf.enable = true;

     

       50
       50
       +
             btop.enable = true;

     

       51
       51
       +
       

     

       52
       52
       +
             zellij = {

     

       53
       53
       +
               enable = true;

     

       54
       54
       +
               enableFishIntegration = false;

     

       55
       55
       +
             };

     

       56
       56
       +
       

     

       57
       57
       +
             zoxide = {

     

       58
       58
       +
               enable = true;

     

       59
       59
       +
               enableFishIntegration = true;

     

       60
       60
       +
               options = ["--cmd cd"];

     

       61
       61
       +
             };

     

       62
       62
       +
           };

     

       63
       63
       +
         };

     

       64
       64
       +
       }

+13

modules/home/programs/aria2/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHome.services.aria2.enable = lib.mkEnableOption "aria2 downloader";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myHome.services.aria2.enable {

     

       9
       9
       +
           programs.aria2 = {

     

       10
       10
       +
             enable = true;

     

       11
       11
       +
           };

     

       12
       12
       +
         };

     

       13
       13
       +
       }

+37

modules/home/programs/chromium/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myHome.programs.chromium.enable = lib.mkEnableOption "chromium web browser";

     

       8
       8
       +
       

     

       9
       9
       +
         config = lib.mkIf config.myHome.programs.chromium.enable {

     

       10
       10
       +
           programs.chromium = {

     

       11
       11
       +
             enable = true;

     

       12
       12
       +
       

     

       13
       13
       +
             extensions = [

     

       14
       14
       +
               {id = "ddkjiahejlhfcafbddmgiahcphecmpfh";} # ublock origin lite

     

       15
       15
       +
               {id = "mdjildafknihdffpkfmmpnpoiajfjnjd";} # consent-o-matic

     

       16
       16
       +
               {id = "clngdbkpkpeebahjckkjfobafhncgmne";} # stylus

     

       17
       17
       +
               {id = "oboonakemofpalcgghocfoadofidjkkk";} # keepassxc

     

       18
       18
       +
               {id = "jinjaccalgkegednnccohejagnlnfdag";} # violentmonkey

     

       19
       19
       +
       

     

       20
       20
       +
               rec {

     

       21
       21
       +
                 id = "libredirectlibredirectlibredirec"; # libredirect

     

       22
       22
       +
                 version = "3.2.0";

     

       23
       23
       +
       

     

       24
       24
       +
                 crxPath = pkgs.fetchurl {

     

       25
       25
       +
                   url = "https://github.com/libredirect/browser_extension/releases/download/v${version}/libredirect-${version}.crx";

     

       26
       26
       +
                   sha256 = "sha256-Neja0pJ7rMV+riINeMcWxU2SzZ+ZETp6bV1MaYLHz1Y=";

     

       27
       27
       +
                 };

     

       28
       28
       +
               }

     

       29
       29
       +
             ];

     

       30
       30
       +
       

     

       31
       31
       +
             package =

     

       32
       32
       +
               if pkgs.stdenv.isDarwin

     

       33
       33
       +
               then (pkgs.runCommand "chromium-0.0.0" {} "mkdir $out")

     

       34
       34
       +
               else pkgs.ungoogled-chromium;

     

       35
       35
       +
           };

     

       36
       36
       +
         };

     

       37
       37
       +
       }

+13

modules/home/programs/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./zed-editor

     

       4
       4
       +
           ./firefox

     

       5
       5
       +
           ./chromium

     

       6
       6
       +
           ./git

     

       7
       7
       +
           ./obs-studio

     

       8
       8
       +
           ./fastfetch

     

       9
       9
       +
           ./mpv

     

       10
       10
       +
           ./aria2

     

       11
       11
       +
           ./micro

     

       12
       12
       +
         ];

     

       13
       13
       +
       }

+13

modules/home/programs/fastfetch/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHome.programs.fastfetch.enable = lib.mkEnableOption "fastfetch system information";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myHome.programs.fastfetch.enable {

     

       9
       9
       +
           programs.fastfetch = {

     

       10
       10
       +
             enable = true;

     

       11
       11
       +
           };

     

       12
       12
       +
         };

     

       13
       13
       +
       }

+176

modules/home/programs/firefox/betterfox/fastfox.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         # ****************************************************************************

     

       3
       3
       +
         # Fastfox

     

       4
       4
       +
         # "Non ducor duco"

     

       5
       5
       +
         # priority: speedy browsing

     

       6
       6
       +
         # version: 137

     

       7
       7
       +
         # url: https://github.com/yokoffing/Betterfox

     

       8
       8
       +
         # ****************************************************************************

     

       9
       9
       +
       

     

       10
       10
       +
         #############################################################

     

       11
       11
       +
         # SECTION: GENERAL

     

       12
       12
       +
         #############################################################

     

       13
       13
       +
       

     

       14
       14
       +
         # "nglayout.initialpaint.delay" = 5;                    # DEFAULT; formerly 250

     

       15
       15
       +
         # "nglayout.initialpaint.delay_in_oopif" = 5;           # DEFAULT

     

       16
       16
       +
         # "content.notify.ontimer" = true;                      # DEFAULT

     

       17
       17
       +
         "content.notify.interval" = 100000; # (.10s); default=120000 (.12s)

     

       18
       18
       +
       

     

       19
       19
       +
         # "browser.newtab.preload" = true;                       # DEFAULT

     

       20
       20
       +
         # "dom.ipc.processPriorityManager.backgroundUsesEcoQoS" = false;

     

       21
       21
       +
         # "browser.sessionstore.restore_on_demand" = true;       # DEFAULT

     

       22
       22
       +
         # "browser.sessionstore.restore_pinned_tabs_on_demand" = true;

     

       23
       23
       +
         # "browser.sessionstore.restore_tabs_lazily" = true;     # DEFAULT

     

       24
       24
       +
         # "browser.startup.preXulSkeletonUI" = false;

     

       25
       25
       +
         # "dom.iframe_lazy_loading.enabled" = true;              # DEFAULT [FF121+]

     

       26
       26
       +
       

     

       27
       27
       +
         #############################################################

     

       28
       28
       +
         # SECTION: GFX RENDERING TWEAKS

     

       29
       29
       +
         #############################################################

     

       30
       30
       +
       

     

       31
       31
       +
         # "gfx.webrender.all" = true;

     

       32
       32
       +
         # "gfx.webrender.precache-shaders" = true;

     

       33
       33
       +
         # "gfx.webrender.compositor" = true;

     

       34
       34
       +
         # "gfx.webrender.compositor.force-enabled" = true;

     

       35
       35
       +
         # "gfx.webrender.software" = true;

     

       36
       36
       +
         # "gfx.webrender.software.opengl" = true;

     

       37
       37
       +
         # "gfx.canvas.accelerated" = true;

     

       38
       38
       +
         # "gfx.canvas.accelerated.cache-items" = 8192;

     

       39
       39
       +
         "gfx.canvas.accelerated.cache-size" = 512; # default=256; Chrome=512

     

       40
       40
       +
         "gfx.content.skia-font-cache-size" = 20; # default=5; Chrome=20

     

       41
       41
       +
       

     

       42
       42
       +
         # "layers.gpu-process.enabled" = true;                   # DEFAULT WINDOWS

     

       43
       43
       +
         # "layers.gpu-process.force-enabled" = true;

     

       44
       44
       +
         # "layers.mlgpu.enabled" = true;                         # LINUX

     

       45
       45
       +
         # "media.hardware-video-decoding.enabled" = true;        # DEFAULT WINDOWS macOS

     

       46
       46
       +
         # "media.hardware-video-decoding.force-enabled" = true;

     

       47
       47
       +
         # "media.gpu-process-decoder" = true;                    # DEFAULT WINDOWS

     

       48
       48
       +
         # "media.ffmpeg.vaapi.enabled" = true;                   # LINUX

     

       49
       49
       +
       

     

       50
       50
       +
         #############################################################

     

       51
       51
       +
         # SECTION: DISK CACHE

     

       52
       52
       +
         #############################################################

     

       53
       53
       +
       

     

       54
       54
       +
         "browser.cache.disk.enable" = false;

     

       55
       55
       +
         # "browser.cache.disk.smart_size.enabled" = false;

     

       56
       56
       +
         # "browser.cache.disk.capacity" = 512000;

     

       57
       57
       +
         # "browser.cache.disk.max_entry_size" = 51200;

     

       58
       58
       +
       

     

       59
       59
       +
         # "network.http.rcwn.enabled" = false;

     

       60
       60
       +
         # "network.http.rcwn.small_resource_size_kb" = 256;

     

       61
       61
       +
       

     

       62
       62
       +
         # "browser.cache.disk.metadata_memory_limit" = 500;

     

       63
       63
       +
         # "browser.cache.disk.preload_chunk_count" = 4;

     

       64
       64
       +
         # "browser.cache.frecency_half_life_hours" = 6;

     

       65
       65
       +
         # "browser.cache.disk.max_chunks_memory_usage" = 40960;

     

       66
       66
       +
         # "browser.cache.disk.max_priority_chunks_memory_usage" = 40960;

     

       67
       67
       +
         # "browser.cache.check_doc_frequency" = 3;

     

       68
       68
       +
         # "browser.cache.disk.free_space_soft_limit" = 10240;

     

       69
       69
       +
         # "browser.cache.disk.free_space_hard_limit" = 2048;

     

       70
       70
       +
         # "browser.cache.jsbc_compression_level" = 3;

     

       71
       71
       +
         # "dom.script_loader.bytecode_cache.enabled" = true;

     

       72
       72
       +
         # "dom.script_loader.bytecode_cache.strategy" = 0;

     

       73
       73
       +
       

     

       74
       74
       +
         #############################################################

     

       75
       75
       +
         # SECTION: MEMORY CACHE

     

       76
       76
       +
         #############################################################

     

       77
       77
       +
       

     

       78
       78
       +
         # "browser.cache.memory.capacity" = -1;

     

       79
       79
       +
         # "browser.cache.memory.max_entry_size" = 10240;

     

       80
       80
       +
         # "browser.sessionhistory.max_total_viewers" = 4;

     

       81
       81
       +
       

     

       82
       82
       +
         #############################################################

     

       83
       83
       +
         # SECTION: MEDIA CACHE

     

       84
       84
       +
         #############################################################

     

       85
       85
       +
       

     

       86
       86
       +
         "media.memory_cache_max_size" = 65536; # default=8192; AF=65536; alt=131072

     

       87
       87
       +
         # "media.memory_caches_combined_limit_kb" = 524288;

     

       88
       88
       +
         # "media.memory_caches_combined_limit_pc_sysmem" = 5;

     

       89
       89
       +
         # "media.mediasource.enabled" = true;

     

       90
       90
       +
         "media.cache_readahead_limit" = 7200; # 120 min; default=60

     

       91
       91
       +
         "media.cache_resume_threshold" = 3600; # 60 min; default=30

     

       92
       92
       +
       

     

       93
       93
       +
         #############################################################

     

       94
       94
       +
         # SECTION: IMAGE CACHE

     

       95
       95
       +
         #############################################################

     

       96
       96
       +
       

     

       97
       97
       +
         # "image.cache.size" = 5242880;

     

       98
       98
       +
         "image.mem.decode_bytes_at_a_time" = 32768; # default=16384; alt=65536

     

       99
       99
       +
         # "image.mem.shared.unmap.min_expiration_ms" = 120000;

     

       100
       100
       +
       

     

       101
       101
       +
         #############################################################

     

       102
       102
       +
         # SECTION: NETWORK

     

       103
       103
       +
         #############################################################

     

       104
       104
       +
       

     

       105
       105
       +
         # "network.buffer.cache.size" = 65535;

     

       106
       106
       +
         # "network.buffer.cache.count" = 48;

     

       107
       107
       +
         "network.http.max-connections" = 1800; # default=900

     

       108
       108
       +
         "network.http.max-persistent-connections-per-server" = 10; # default=6

     

       109
       109
       +
         "network.http.max-urgent-start-excessive-connections-per-host" = 5; # default=3

     

       110
       110
       +
         # "network.http.max-persistent-connections-per-proxy" = 48;

     

       111
       111
       +
         # "network.websocket.max-connections" = 200;

     

       112
       112
       +
       

     

       113
       113
       +
         "network.http.pacing.requests.enabled" = false;

     

       114
       114
       +
         # "network.http.pacing.requests.min-parallelism" = 10;

     

       115
       115
       +
         # "network.http.pacing.requests.burst" = 14;

     

       116
       116
       +
       

     

       117
       117
       +
         # "network.dnsCacheEntries" = 1000;

     

       118
       118
       +
         "network.dnsCacheExpiration" = 3600;

     

       119
       119
       +
         # "network.dnsCacheExpirationGracePeriod" = 240;

     

       120
       120
       +
         # "network.dns.max_high_priority_threads" = 40;

     

       121
       121
       +
         # "network.dns.max_any_priority_threads" = 24;

     

       122
       122
       +
       

     

       123
       123
       +
         "network.ssl_tokens_cache_capacity" = 10240; # default=2048

     

       124
       124
       +
       

     

       125
       125
       +
         #############################################################

     

       126
       126
       +
         # SECTION: SPECULATIVE LOADING

     

       127
       127
       +
         #############################################################

     

       128
       128
       +
       

     

       129
       129
       +
         "network.dns.disablePrefetch" = true;

     

       130
       130
       +
         "network.dns.disablePrefetchFromHTTPS" = true; # [FF127+ false]

     

       131
       131
       +
         # "network.preconnect" = true;

     

       132
       132
       +
         # "browser.urlbar.speculativeConnect.enabled" = false;

     

       133
       133
       +
         # "browser.places.speculativeConnect.enabled" = false;

     

       134
       134
       +
         # "network.modulepreload" = true;

     

       135
       135
       +
         "network.prefetch-next" = false;

     

       136
       136
       +
         # "network.fetchpriority.enabled" = true;

     

       137
       137
       +
         # "network.early-hints.enabled" = true;

     

       138
       138
       +
         # "network.early-hints.preconnect.enabled" = true;

     

       139
       139
       +
         # "network.early-hints.preconnect.max_connections" = 10;

     

       140
       140
       +
         "network.predictor.enabled" = false;

     

       141
       141
       +
         # "network.predictor.enable-prefetch" = false;

     

       142
       142
       +
         # "network.predictor.enable-hover-on-ssl" = false;

     

       143
       143
       +
         # "network.predictor.preresolve-min-confidence" = 60;

     

       144
       144
       +
         # "network.predictor.preconnect-min-confidence" = 90;

     

       145
       145
       +
         # "network.predictor.prefetch-min-confidence" = 100;

     

       146
       146
       +
         # "network.predictor.prefetch-force-valid-for" = 10;

     

       147
       147
       +
         # "network.predictor.prefetch-rolling-load-count" = 10;

     

       148
       148
       +
         # "network.predictor.max-resources-per-entry" = 250;

     

       149
       149
       +
         # "network.predictor.max-uri-length" = 1000;

     

       150
       150
       +
       

     

       151
       151
       +
         #############################################################

     

       152
       152
       +
         # SECTION: EXPERIMENTAL

     

       153
       153
       +
         #############################################################

     

       154
       154
       +
       

     

       155
       155
       +
         "layout.css.grid-template-masonry-value.enabled" = true;

     

       156
       156
       +
         # "dom.enable_web_task_scheduling" = true;

     

       157
       157
       +
       

     

       158
       158
       +
         #############################################################

     

       159
       159
       +
         # SECTION: TAB UNLOAD

     

       160
       160
       +
         #############################################################

     

       161
       161
       +
       

     

       162
       162
       +
         # "browser.tabs.unloadOnLowMemory" = true;

     

       163
       163
       +
         # "browser.low_commit_space_threshold_mb" = 3276;

     

       164
       164
       +
         # "browser.low_commit_space_threshold_percent" = 20;

     

       165
       165
       +
         # "browser.tabs.min_inactive_duration_before_unload" = 300000;

     

       166
       166
       +
       

     

       167
       167
       +
         #############################################################

     

       168
       168
       +
         # SECTION: PROCESS COUNT

     

       169
       169
       +
         #############################################################

     

       170
       170
       +
       

     

       171
       171
       +
         # "dom.ipc.processCount" = 8;

     

       172
       172
       +
         # "dom.ipc.processCount.webIsolated" = 1;

     

       173
       173
       +
         # "dom.ipc.processPrelaunch.fission.number" = 1;

     

       174
       174
       +
         # "fission.webContentIsolationStrategy" = 1;

     

       175
       175
       +
         # "browser.preferences.defaultPerformanceSettings.enabled" = true;

     

       176
       176
       +
       }

+164

modules/home/programs/firefox/betterfox/peskyfox.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         # ****************************************************************************

     

       3
       3
       +
         # Peskyfox

     

       4
       4
       +
         # "Aquila non capit muscas"

     

       5
       5
       +
         # priority: remove annoyances

     

       6
       6
       +
         # version: 137

     

       7
       7
       +
         # url: https://github.com/yokoffing/Betterfox

     

       8
       8
       +
         # credit: Some prefs are reproduced and adapted from the arkenfox project

     

       9
       9
       +
         # credit URL: https://github.com/arkenfox/user.js

     

       10
       10
       +
         # ****************************************************************************

     

       11
       11
       +
       

     

       12
       12
       +
         #############################################################

     

       13
       13
       +
         # SECTION: MOZILLA UI

     

       14
       14
       +
         #############################################################

     

       15
       15
       +
       

     

       16
       16
       +
         "browser.privatebrowsing.vpnpromourl" = "";

     

       17
       17
       +
         # "browser.vpn_promo.enabled" = false;

     

       18
       18
       +
       

     

       19
       19
       +
         "extensions.getAddons.showPane" = false;

     

       20
       20
       +
         "extensions.htmlaboutaddons.recommendations.enabled" = false;

     

       21
       21
       +
       

     

       22
       22
       +
         "browser.discovery.enabled" = false;

     

       23
       23
       +
       

     

       24
       24
       +
         "browser.shell.checkDefaultBrowser" = false;

     

       25
       25
       +
       

     

       26
       26
       +
         "browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons" = false;

     

       27
       27
       +
         "browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features" = false;

     

       28
       28
       +
       

     

       29
       29
       +
         "browser.preferences.moreFromMozilla" = false;

     

       30
       30
       +
       

     

       31
       31
       +
         "browser.aboutConfig.showWarning" = false;

     

       32
       32
       +
       

     

       33
       33
       +
         "browser.aboutwelcome.enabled" = false;

     

       34
       34
       +
         # "browser.startup.homepage_override.mstone" = "ignore";

     

       35
       35
       +
         # "startup.homepage_welcome_url" = "";

     

       36
       36
       +
         # "startup.homepage_welcome_url.additional" = "";

     

       37
       37
       +
         # "startup.homepage_override_url" = "";

     

       38
       38
       +
       

     

       39
       39
       +
         "browser.profiles.enabled" = true;

     

       40
       40
       +
       

     

       41
       41
       +
         # "widget.gtk.non-native-titlebar-buttons.enabled" = true;

     

       42
       42
       +
       

     

       43
       43
       +
         #############################################################

     

       44
       44
       +
         # SECTION: THEME ADJUSTMENTS

     

       45
       45
       +
         #############################################################

     

       46
       46
       +
       

     

       47
       47
       +
         "toolkit.legacyUserProfileCustomizations.stylesheets" = true;

     

       48
       48
       +
         "browser.compactmode.show" = true;

     

       49
       49
       +
         # "browser.theme.dark-private-windows" = false;

     

       50
       50
       +
         # "browser.search.widget.inNavBar" = true;

     

       51
       51
       +
       

     

       52
       52
       +
         "layout.css.prefers-color-scheme.content-override" = 2;

     

       53
       53
       +
       

     

       54
       54
       +
         "browser.privateWindowSeparation.enabled" = false;

     

       55
       55
       +
       

     

       56
       56
       +
         #############################################################

     

       57
       57
       +
         # SECTION: COOKIE BANNER HANDLING

     

       58
       58
       +
         #############################################################

     

       59
       59
       +
       

     

       60
       60
       +
         # "cookiebanners.service.mode" = 1;

     

       61
       61
       +
         # "cookiebanners.service.mode.privateBrowsing" = 1;

     

       62
       62
       +
         # "cookiebanners.service.enableGlobalRules" = true;

     

       63
       63
       +
         # "cookiebanners.service.enableGlobalRules.subFrames" = true;

     

       64
       64
       +
       

     

       65
       65
       +
         #############################################################

     

       66
       66
       +
         # SECTION: TRANSLATIONS

     

       67
       67
       +
         #############################################################

     

       68
       68
       +
       

     

       69
       69
       +
         # "browser.translations.enable" = true;

     

       70
       70
       +
         # "browser.translations.autoTranslate" = true;

     

       71
       71
       +
       

     

       72
       72
       +
         #############################################################

     

       73
       73
       +
         # SECTION: FULLSCREEN NOTICE

     

       74
       74
       +
         #############################################################

     

       75
       75
       +
       

     

       76
       76
       +
         "full-screen-api.transition-duration.enter" = "0 0";

     

       77
       77
       +
         "full-screen-api.transition-duration.leave" = "0 0";

     

       78
       78
       +
       

     

       79
       79
       +
         "full-screen-api.warning.delay" = -1;

     

       80
       80
       +
         "full-screen-api.warning.timeout" = 0;

     

       81
       81
       +
       

     

       82
       82
       +
         #############################################################

     

       83
       83
       +
         # SECTION: FONT APPEARANCE

     

       84
       84
       +
         #############################################################

     

       85
       85
       +
       

     

       86
       86
       +
         # "gfx.webrender.quality.force-subpixel-aa-where-possible" = true;

     

       87
       87
       +
         # "gfx.font_rendering.cleartype_params.rendering_mode" = 5;

     

       88
       88
       +
         # "gfx.font_rendering.cleartype_params.cleartype_level" = 100;

     

       89
       89
       +
         # "gfx.font_rendering.cleartype_params.force_gdi_classic_for_families" = "";

     

       90
       90
       +
         # "gfx.font_rendering.directwrite.use_gdi_table_loading" = false;

     

       91
       91
       +
         # "gfx.font_rendering.cleartype_params.gamma" = 1750;

     

       92
       92
       +
         # "gfx.font_rendering.cleartype_params.enhanced_contrast" = 100;

     

       93
       93
       +
         # "gfx.font_rendering.cleartype_params.pixel_structure" = 1;

     

       94
       94
       +
         # "gfx.use_text_smoothing_setting" = true;

     

       95
       95
       +
       

     

       96
       96
       +
         #############################################################

     

       97
       97
       +
         # SECTION: URL BAR

     

       98
       98
       +
         #############################################################

     

       99
       99
       +
       

     

       100
       100
       +
         # "browser.urlbar.suggest.history" = false;

     

       101
       101
       +
         # "browser.urlbar.suggest.bookmark" = true;

     

       102
       102
       +
         # "browser.urlbar.suggest.clipboard" = false;

     

       103
       103
       +
         # "browser.urlbar.suggest.openpage" = false;

     

       104
       104
       +
       

     

       105
       105
       +
         "browser.urlbar.suggest.engines" = false;

     

       106
       106
       +
         # "browser.urlbar.suggest.searches" = false;

     

       107
       107
       +
       

     

       108
       108
       +
         # "browser.urlbar.quickactions.enabled" = false;

     

       109
       109
       +
         # "browser.urlbar.shortcuts.quickactions" = false;

     

       110
       110
       +
         # "browser.urlbar.suggest.weather" = true;

     

       111
       111
       +
       

     

       112
       112
       +
         "browser.urlbar.unitConversion.enabled" = true;

     

       113
       113
       +
         "browser.urlbar.trending.featureGate" = false;

     

       114
       114
       +
       

     

       115
       115
       +
         #############################################################

     

       116
       116
       +
         # SECTION: NEW TAB PAGE

     

       117
       117
       +
         #############################################################

     

       118
       118
       +
       

     

       119
       119
       +
         # "browser.newtabpage.activity-stream.newtabWallpapers.v2.enabled" = true;

     

       120
       120
       +
       

     

       121
       121
       +
         "browser.newtabpage.activity-stream.showSponsoredTopSites" = false;

     

       122
       122
       +
         "browser.newtabpage.activity-stream.feeds.section.topstories" = false;

     

       123
       123
       +
         "browser.newtabpage.activity-stream.showSponsored" = false;

     

       124
       124
       +
       

     

       125
       125
       +
         "browser.newtabpage.activity-stream.default.sites" = "";

     

       126
       126
       +
       

     

       127
       127
       +
         #############################################################

     

       128
       128
       +
         # SECTION: POCKET

     

       129
       129
       +
         #############################################################

     

       130
       130
       +
       

     

       131
       131
       +
         "extensions.pocket.enabled" = false;

     

       132
       132
       +
       

     

       133
       133
       +
         #############################################################

     

       134
       134
       +
         # SECTION: DOWNLOADS

     

       135
       135
       +
         #############################################################

     

       136
       136
       +
       

     

       137
       137
       +
         # "browser.download.folderList" = 1;

     

       138
       138
       +
         # "browser.download.always_ask_before_handling_new_types" = true;

     

       139
       139
       +
         # "browser.download.useDownloadDir" = false;

     

       140
       140
       +
         # "browser.download.autohideButton" = true;

     

       141
       141
       +
       

     

       142
       142
       +
         "browser.download.manager.addToRecentDocs" = false;

     

       143
       143
       +
       

     

       144
       144
       +
         #############################################################

     

       145
       145
       +
         # SECTION: PDF

     

       146
       146
       +
         #############################################################

     

       147
       147
       +
       

     

       148
       148
       +
         # "pdfjs.disabled" = false;

     

       149
       149
       +
         # "browser.helperApps.showOpenOptionForPdfJS" = true;

     

       150
       150
       +
       

     

       151
       151
       +
         "browser.download.open_pdf_attachments_inline" = true;

     

       152
       152
       +
       

     

       153
       153
       +
         #############################################################

     

       154
       154
       +
         # SECTION: TAB BEHAVIOR

     

       155
       155
       +
         #############################################################

     

       156
       156
       +
       

     

       157
       157
       +
         # "browser.search.openintab" = true;

     

       158
       158
       +
         # "browser.urlbar.openintab" = true;

     

       159
       159
       +
       

     

       160
       160
       +
         "browser.bookmarks.openInTabClosesMenu" = false;

     

       161
       161
       +
         "browser.menu.showViewImageInfo" = true;

     

       162
       162
       +
         "findbar.highlightAll" = true;

     

       163
       163
       +
         "layout.word_select.eat_space_to_next_word" = false;

     

       164
       164
       +
       }

+483

modules/home/programs/firefox/betterfox/securefox.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         # ****************************************************************************

     

       3
       3
       +
         # Securefox

     

       4
       4
       +
         # "Natura non contristatur"

     

       5
       5
       +
         # priority: provide sensible security and privacy

     

       6
       6
       +
         # version: 137

     

       7
       7
       +
         # url: https://github.com/yokoffing/Betterfox

     

       8
       8
       +
         # credit: Most prefs are reproduced and adapted from the arkenfox project

     

       9
       9
       +
         # credit urL: https://github.com/arkenfox/user.js

     

       10
       10
       +
         # ****************************************************************************

     

       11
       11
       +
       

     

       12
       12
       +
         #############################################################

     

       13
       13
       +
         # SECTION: TRACKING PROTECTION

     

       14
       14
       +
         #############################################################

     

       15
       15
       +
       

     

       16
       16
       +
         ## Enhanced Tracking Protection (ETP)

     

       17
       17
       +
         "browser.contentblocking.category" = "strict"; # [HIDDEN]

     

       18
       18
       +
         # "privacy.trackingprotection.enabled" = true;            # enabled with "Strict"

     

       19
       19
       +
         # "privacy.trackingprotection.pbmode.enabled" = true;     # DEFAULT

     

       20
       20
       +
         # "browser.contentblocking.customBlockList.preferences.ui.enabled" = false;  # DEFAULT

     

       21
       21
       +
         # "privacy.trackingprotection.socialtracking.enabled" = true;  # enabled with "Strict"

     

       22
       22
       +
         #   "privacy.socialtracking.block_cookies.enabled" = true;  # DEFAULT

     

       23
       23
       +
         # "privacy.trackingprotection.cryptomining.enabled" = true;  # DEFAULT

     

       24
       24
       +
         # "privacy.trackingprotection.fingerprinting.enabled" = true;  # DEFAULT

     

       25
       25
       +
         # "privacy.trackingprotection.emailtracking.enabled" = true;  # enabled with "Strict"

     

       26
       26
       +
         # "network.http.referer.disallowCrossSiteRelaxingDefault" = true;  # DEFAULT

     

       27
       27
       +
         #   "network.http.referer.disallowCrossSiteRelaxingDefault.pbmode" = true;  # DEFAULT

     

       28
       28
       +
         #   "network.http.referer.disallowCrossSiteRelaxingDefault.pbmode.top_navigation" = true;  # DEFAULT

     

       29
       29
       +
         #   "network.http.referer.disallowCrossSiteRelaxingDefault.top_navigation" = true;  # enabled with "Strict"

     

       30
       30
       +
         # "privacy.annotate_channels.strict_list.enabled" = true;  # enabled with "Strict"

     

       31
       31
       +
         #   "privacy.annotate_channels.strict_list.pbmode.enabled" = true;  # DEFAULT

     

       32
       32
       +
         # "privacy.fingerprintingProtection" = true;  # [FF114+] [ETP FF119+] enabled with "Strict"

     

       33
       33
       +
         #   "privacy.fingerprintingProtection.pbmode" = true;  # DEFAULT

     

       34
       34
       +
         # "privacy.bounceTrackingProtection.mode" = 1;  # [FF131+] [ETP FF133+]

     

       35
       35
       +
       

     

       36
       36
       +
         ## Query Stripping

     

       37
       37
       +
         # "privacy.query_stripping.enabled" = true;         # enabled with "Strict"

     

       38
       38
       +
         # "privacy.query_stripping.enabled.pbmode" = true;  # enabled with "Strict"

     

       39
       39
       +
         # "privacy.query_stripping.strip_list" = "";        # DEFAULT

     

       40
       40
       +
         # "privacy.query_stripping.strip_on_share.enabled" = true;

     

       41
       41
       +
       

     

       42
       42
       +
         ## Smartblock

     

       43
       43
       +
         # "extensions.webcompat.enable_shims" = true;       # [HIDDEN] enabled with "Strict"

     

       44
       44
       +
         # "extensions.webcompat.smartblockEmbeds.enabled" = true;  # enabled with "Strict"

     

       45
       45
       +
       

     

       46
       46
       +
         ## Embedded Social Content

     

       47
       47
       +
         # "urlclassifier.trackingSkipURLs" = "embed.reddit.com, *.twitter.com, *.twimg.com";  # MANUAL [FF136+]

     

       48
       48
       +
         # "urlclassifier.features.socialtracking.skipURLs" = "*.twitter.com, *.twimg.com";    # MANUAL [FF136+]

     

       49
       49
       +
         # "urlclassifier.trackingSkipURLs" = "*.reddit.com, *.twitter.com, *.twimg.com, *.tiktok.com";  # MANUAL

     

       50
       50
       +
         # "urlclassifier.features.socialtracking.skipURLs" = "*.instagram.com, *.twitter.com, *.twimg.com";  # MANUAL

     

       51
       51
       +
       

     

       52
       52
       +
         ## Lower Network Priority for Trackers

     

       53
       53
       +
         # "privacy.trackingprotection.lower_network_priority" = true;

     

       54
       54
       +
       

     

       55
       55
       +
         ## Site Isolation (Fission)

     

       56
       56
       +
         # "fission.autostart" = true;                       # DEFAULT [DO NOT TOUCH]

     

       57
       57
       +
         # "fission.webContentIsolationStrategy" = 1;         # DEFAULT

     

       58
       58
       +
       

     

       59
       59
       +
         ## GPU Sandboxing [WINDOWS]

     

       60
       60
       +
         # "security.sandbox.gpu.level" = 1;                  # DEFAULT WINDOWS

     

       61
       61
       +
       

     

       62
       62
       +
         ## State Partitioning & Cookie Behavior

     

       63
       63
       +
         # "network.cookie.cookieBehavior" = 5;               # DEFAULT FF103+

     

       64
       64
       +
         # "network.cookie.cookieBehavior.optInPartitioning" = true;  # [ETP FF132+]

     

       65
       65
       +
         # "browser.contentblocking.reject-and-isolate-cookies.preferences.ui.enabled" = true;  # DEFAULT

     

       66
       66
       +
       

     

       67
       67
       +
         ## Network Partitioning

     

       68
       68
       +
         # "privacy.partition.network_state" = true;           # DEFAULT

     

       69
       69
       +
         #   "privacy.partition.serviceWorkers" = true;        # DEFAULT: true FF105+

     

       70
       70
       +
         #   "privacy.partition.network_state.ocsp_cache" = true;  # DEFAULT: true FF123+

     

       71
       71
       +
         #   "privacy.partition.bloburl_per_partition_key" = true;  # FF118+

     

       72
       72
       +
         # "privacy.partition.always_partition_third_party_non_cookie_storage" = true;    # DEFAULT: true FF109+

     

       73
       73
       +
         # "privacy.partition.always_partition_third_party_non_cookie_storage.exempt_sessionstorage" = false;  # DEFAULT: false FF109+

     

       74
       74
       +
       

     

       75
       75
       +
         ## Redirect Tracking Prevention

     

       76
       76
       +
         # "privacy.purge_trackers.enabled" = true;            # DEFAULT

     

       77
       77
       +
       

     

       78
       78
       +
         ## SameSite Cookies

     

       79
       79
       +
         # "network.cookie.sameSite.laxByDefault" = true;

     

       80
       80
       +
         # "network.cookie.sameSite.noneRequiresSecure" = true;      # DEFAULT FF131+

     

       81
       81
       +
         # "network.cookie.sameSite.schemeful" = true;

     

       82
       82
       +
       

     

       83
       83
       +
         ## Hyperlink Auditing

     

       84
       84
       +
         # "browser.send_pings" = false;                     # DEFAULT

     

       85
       85
       +
       

     

       86
       86
       +
         ## Beacon API

     

       87
       87
       +
         # "beacon.enabled" = false;

     

       88
       88
       +
       

     

       89
       89
       +
         ## Battery Status API

     

       90
       90
       +
         # "dom.battery.enabled" = false;

     

       91
       91
       +
       

     

       92
       92
       +
         ## Temporary-File Handling

     

       93
       93
       +
         "browser.download.start_downloads_in_tmp_dir" = true; # [FF102+]

     

       94
       94
       +
         "browser.helperApps.deleteTempFileOnExit" = true;

     

       95
       95
       +
       

     

       96
       96
       +
         ## UITour

     

       97
       97
       +
         "browser.uitour.enabled" = false;

     

       98
       98
       +
         # "browser.uitour.url" = "";

     

       99
       99
       +
       

     

       100
       100
       +
         ## Remote Debugging

     

       101
       101
       +
         # "devtools.debugger.remote-enabled" = false;       # DEFAULT

     

       102
       102
       +
       

     

       103
       103
       +
         ## Global Privacy Control (GPC)

     

       104
       104
       +
         "privacy.globalprivacycontrol.enabled" = true;

     

       105
       105
       +
         # "privacy.globalprivacycontrol.functionality.enabled" = true;  # [FF120+]

     

       106
       106
       +
         # "privacy.globalprivacycontrol.pbmode.enabled" = true;         # [FF120+]

     

       107
       107
       +
       

     

       108
       108
       +
         #############################################################

     

       109
       109
       +
         # SECTION: OSCP & CERTS / HPKP

     

       110
       110
       +
         #############################################################

     

       111
       111
       +
       

     

       112
       112
       +
         ## OCSP

     

       113
       113
       +
         "security.OCSP.enabled" = 0;

     

       114
       114
       +
         # "security.OCSP.require" = true;

     

       115
       115
       +
       

     

       116
       116
       +
         ## CRLite

     

       117
       117
       +
         # "security.remote_settings.crlite_filters.enabled" = true;  # DEFAULT: true FF137+

     

       118
       118
       +
         "security.pki.crlite_mode" = 2;

     

       119
       119
       +
       

     

       120
       120
       +
         ## HPKP

     

       121
       121
       +
         # "security.cert_pinning.enforcement_level" = 2;

     

       122
       122
       +
       

     

       123
       123
       +
         ## Enterprise Roots

     

       124
       124
       +
         # "security.enterprise_roots.enabled" = false;

     

       125
       125
       +
         #   "security.certerrors.mitm.auto_enable_enterprise_roots" = false;

     

       126
       126
       +
       

     

       127
       127
       +
         ## DLP Content Analysis

     

       128
       128
       +
         # "browser.contentanalysis.enabled" = false;  # [FF121+] [DEFAULT]

     

       129
       129
       +
         # "browser.contentanalysis.default_result" = 0;  # [FF127+] [DEFAULT]

     

       130
       130
       +
       

     

       131
       131
       +
         #############################################################

     

       132
       132
       +
         # SECTION: SSL / TLS

     

       133
       133
       +
         #############################################################

     

       134
       134
       +
       

     

       135
       135
       +
         "security.ssl.treat_unsafe_negotiation_as_broken" = true;

     

       136
       136
       +
         # "security.ssl.require_safe_negotiation" = true;

     

       137
       137
       +
       

     

       138
       138
       +
         "browser.xul.error_pages.expert_bad_cert" = true;

     

       139
       139
       +
         "security.tls.enable_0rtt_data" = false;

     

       140
       140
       +
         # "security.tls.enable_kyber" = true;

     

       141
       141
       +
         # "network.http.http3.enable_kyber" = true;

     

       142
       142
       +
       

     

       143
       143
       +
         #############################################################

     

       144
       144
       +
         # SECTION: FINGERPRINT PROTECTION (FPP)

     

       145
       145
       +
         #############################################################

     

       146
       146
       +
       

     

       147
       147
       +
         # "privacy.resistFingerprinting.randomization.daily_reset.enabled" = true;

     

       148
       148
       +
         # "privacy.resistFingerprinting.randomization.daily_reset.private.enabled" = true;

     

       149
       149
       +
       

     

       150
       150
       +
         #############################################################

     

       151
       151
       +
         # SECTION: RESIST FINGERPRINTING (RFP)

     

       152
       152
       +
         #############################################################

     

       153
       153
       +
       

     

       154
       154
       +
         # "privacy.resistFingerprinting" = true;

     

       155
       155
       +
         # "privacy.window.maxInnerWidth" = 1600;

     

       156
       156
       +
         # "privacy.window.maxInnerHeight" = 900;

     

       157
       157
       +
         # "browser.startup.blankWindow" = false;

     

       158
       158
       +
         # "browser.display.use_system_colors" = false;

     

       159
       159
       +
       

     

       160
       160
       +
         #############################################################

     

       161
       161
       +
         # SECTION: DISK AVOIDANCE

     

       162
       162
       +
         #############################################################

     

       163
       163
       +
       

     

       164
       164
       +
         "browser.privatebrowsing.forceMediaMemoryCache" = true;

     

       165
       165
       +
         "browser.sessionstore.interval" = 60000; # 1 min; default=15000

     

       166
       166
       +
       

     

       167
       167
       +
         # "browser.sessionstore.privacy_level" = 2;

     

       168
       168
       +
         # "toolkit.winRegisterApplicationRestart" = false;

     

       169
       169
       +
         # "browser.shell.shortcutFavicons" = false;

     

       170
       170
       +
         # "browser.helperApps.deleteTempFileOnExit" = true;

     

       171
       171
       +
         # "browser.pagethumbnails.capturing_disabled" = true;

     

       172
       172
       +
       

     

       173
       173
       +
         #############################################################

     

       174
       174
       +
         # SECTION: SANITIZE HISTORY

     

       175
       175
       +
         #############################################################

     

       176
       176
       +
       

     

       177
       177
       +
         # "privacy.sanitize.timeSpan" = 0;

     

       178
       178
       +
         # "privacy.clearSiteData.cache" = true;

     

       179
       179
       +
         # "privacy.clearSiteData.cookiesAndStorage" = false;

     

       180
       180
       +
         # "privacy.clearSiteData.historyFormDataAndDownloads" = true;

     

       181
       181
       +
         "browser.privatebrowsing.resetPBM.enabled" = true;

     

       182
       182
       +
       

     

       183
       183
       +
         #############################################################

     

       184
       184
       +
         # SECTION: SHUTDOWN & SANITIZING

     

       185
       185
       +
         #############################################################

     

       186
       186
       +
       

     

       187
       187
       +
         "privacy.history.custom" = true;

     

       188
       188
       +
         # "privacy.sanitize.sanitizeOnShutdown" = true;

     

       189
       189
       +
         # "privacy.clearOnShutdown.cache" = true;

     

       190
       190
       +
         # "privacy.clearOnShutdown_v2.cache" = true;

     

       191
       191
       +
         # "privacy.clearOnShutdown.downloads" = true;

     

       192
       192
       +
         # "privacy.clearOnShutdown.formdata" = true;

     

       193
       193
       +
         # "privacy.clearOnShutdown.history" = true;

     

       194
       194
       +
         # "privacy.clearOnShutdown_v2.historyFormDataAndDownloads" = true;

     

       195
       195
       +
         # "privacy.clearOnShutdown.siteSettings" = false;

     

       196
       196
       +
         # "privacy.clearOnShutdown_v2.siteSettings" = false;

     

       197
       197
       +
         # "privacy.clearOnShutdown.cookies" = true;

     

       198
       198
       +
         # "privacy.clearOnShutdown.offlineApps" = true;

     

       199
       199
       +
         # "privacy.clearOnShutdown.sessions" = true;

     

       200
       200
       +
         # "privacy.clearOnShutdown_v2.cookiesAndStorage" = true;

     

       201
       201
       +
         # "privacy.clearOnShutdown.openWindows" = true;

     

       202
       202
       +
       

     

       203
       203
       +
         #############################################################

     

       204
       204
       +
         # SECTION: SEARCH / URL BAR

     

       205
       205
       +
         #############################################################

     

       206
       206
       +
       

     

       207
       207
       +
         # "browser.urlbar.trimURLs" = true;

     

       208
       208
       +
         "browser.urlbar.trimHttps" = true;

     

       209
       209
       +
         "browser.urlbar.untrimOnUserInteraction.featureGate" = true;

     

       210
       210
       +
         # "security.insecure_connection_text.enabled" = true;

     

       211
       211
       +
         # "security.insecure_connection_text.pbmode.enabled" = true;

     

       212
       212
       +
       

     

       213
       213
       +
         # "browser.search.separatePrivateDefault.ui.enabled" = true;

     

       214
       214
       +
         # "browser.search.separatePrivateDefault" = true;

     

       215
       215
       +
       

     

       216
       216
       +
         "browser.urlbar.update2.engineAliasRefresh" = true;

     

       217
       217
       +
         "browser.search.suggest.enabled" = false;

     

       218
       218
       +
         # "browser.search.suggest.enabled.private" = false;

     

       219
       219
       +
       

     

       220
       220
       +
         "browser.urlbar.quicksuggest.enabled" = false;

     

       221
       221
       +
         # "browser.urlbar.suggest.quicksuggest.sponsored" = false;

     

       222
       222
       +
         # "browser.urlbar.suggest.quicksuggest.nonsponsored" = false;

     

       223
       223
       +
       

     

       224
       224
       +
         "browser.urlbar.groupLabels.enabled" = false;

     

       225
       225
       +
         "browser.formfill.enable" = false;

     

       226
       226
       +
       

     

       227
       227
       +
         # "browser.fixup.alternate.enabled" = false;

     

       228
       228
       +
         # "browser.urlbar.autoFill" = false;

     

       229
       229
       +
         "network.IDN_show_punycode" = true;

     

       230
       230
       +
       

     

       231
       231
       +
         #############################################################

     

       232
       232
       +
         # SECTION: HTTPS-FIRST POLICY

     

       233
       233
       +
         #############################################################

     

       234
       234
       +
       

     

       235
       235
       +
         # "dom.security.https_first" = true;

     

       236
       236
       +
         # "dom.security.https_first_pbm" = true;

     

       237
       237
       +
         # "dom.security.https_first_schemeless" = true;

     

       238
       238
       +
       

     

       239
       239
       +
         #############################################################

     

       240
       240
       +
         # SECTION: HTTPS-ONLY MODE

     

       241
       241
       +
         #############################################################

     

       242
       242
       +
       

     

       243
       243
       +
         # "dom.security.https_only_mode_pbm" = true;

     

       244
       244
       +
         # "dom.security.https_only_mode" = true;

     

       245
       245
       +
         # "dom.security.https_only_mode_error_page_user_suggestions" = true;

     

       246
       246
       +
         # "dom.security.https_only_mode_send_http_background_request" = true;

     

       247
       247
       +
         #   "dom.security.https_only_fire_http_request_background_timer_ms" = 3000;

     

       248
       248
       +
         # "dom.security.https_only_mode.upgrade_local" = false;

     

       249
       249
       +
       

     

       250
       250
       +
         #############################################################

     

       251
       251
       +
         # SECTION: DNS-over-HTTPS

     

       252
       252
       +
         #############################################################

     

       253
       253
       +
       

     

       254
       254
       +
         # "network.trr.mode" = 0;

     

       255
       255
       +
         # "network.trr.max-fails" = 5;

     

       256
       256
       +
         # "network.trr_ui.show_fallback_warning_option" = false;

     

       257
       257
       +
         # "network.trr.display_fallback_warning" = false;

     

       258
       258
       +
         # "network.trr.uri" = "https://xxxx/dns-query";

     

       259
       259
       +
         #   "network.trr.custom_uri" = "https://xxxx/dns-query";

     

       260
       260
       +
         # "network.trr.bootstrapAddr" = "10.0.0.1";

     

       261
       261
       +
         # "network.trr.resolvers" = '[{"name":"Cloudflare","url":"https://mozilla.cloudflare-dns.com/dns-query"}, …]';

     

       262
       262
       +
         # "network.trr.disable-ECS" = true;

     

       263
       263
       +
         # "network.trr.allow-rfc1918" = false;

     

       264
       264
       +
         # "network.trr.confirmationNS" = "skip";

     

       265
       265
       +
         # "network.trr.skip-AAAA-when-not-supported" = true;

     

       266
       266
       +
         # "network.trr.clear-cache-on-pref-change" = true;

     

       267
       267
       +
         # "network.trr.wait-for-portal" = false;

     

       268
       268
       +
         # "network.trr.excluded-domains" = "";

     

       269
       269
       +
         # "network.trr.builtin-excluded-domains" = "localhost,local";

     

       270
       270
       +
         # "network.trr.ohttp.config_uri" = "https://dooh.cloudflare-dns.com/.well-known/doohconfig";

     

       271
       271
       +
         # "network.trr.ohttp.uri" = "https://dooh.cloudflare-dns.com/dns-query";

     

       272
       272
       +
         # "network.trr.ohttp.relay_uri" = "";

     

       273
       273
       +
         # "network.trr.use_ohttp" = true;

     

       274
       274
       +
         # "network.dns.echconfig.enabled" = true;

     

       275
       275
       +
         # "network.dns.http3_echconfig.enabled" = true;

     

       276
       276
       +
         # "network.dns.echconfig.fallback_to_origin_when_all_failed" = false;

     

       277
       277
       +
       

     

       278
       278
       +
         #############################################################

     

       279
       279
       +
         # SECTION: PROXY / SOCKS / IPv6

     

       280
       280
       +
         #############################################################

     

       281
       281
       +
       

     

       282
       282
       +
         # "network.dns.disableIPv6" = true;

     

       283
       283
       +
         # "network.proxy.socks_remote_dns" = true;

     

       284
       284
       +
         # "network.file.disable_unc_paths" = true;

     

       285
       285
       +
         # "network.gio.supported-protocols" = "";

     

       286
       286
       +
         # "network.notify.checkForProxies" = false;

     

       287
       287
       +
       

     

       288
       288
       +
         #############################################################

     

       289
       289
       +
         # SECTION: PASSWORDS

     

       290
       290
       +
         #############################################################

     

       291
       291
       +
       

     

       292
       292
       +
         # "signon.rememberSignons" = false;

     

       293
       293
       +
         #   "signon.schemeUpgrades" = true;

     

       294
       294
       +
         #   "signon.showAutoCompleteFooter" = true;

     

       295
       295
       +
         #   "signon.autologin.proxy" = false;

     

       296
       296
       +
       

     

       297
       297
       +
         # "signon.autofillForms" = false;

     

       298
       298
       +
         # "signon.autofillForms.autocompleteOff" = true;

     

       299
       299
       +
         "signon.formlessCapture.enabled" = false;

     

       300
       300
       +
         "signon.privateBrowsingCapture.enabled" = false;

     

       301
       301
       +
         # "signon.autofillForms.http" = false;

     

       302
       302
       +
         # "signon.generation.enabled" = false;

     

       303
       303
       +
         #   "signon.management.page.breach-alerts.enabled" = false;

     

       304
       304
       +
         #   "signon.management.page.breachAlertUrl" = "";

     

       305
       305
       +
         # "browser.contentblocking.report.lockwise.enabled" = false;

     

       306
       306
       +
         # "signon.firefoxRelay.feature" = "";

     

       307
       307
       +
         # "signon.storeWhenAutocompleteOff" = false;

     

       308
       308
       +
         "network.auth.subresource-http-auth-allow" = 1;

     

       309
       309
       +
         "editor.truncate_user_pastes" = false;

     

       310
       310
       +
         # "layout.forms.reveal-password-context-menu.enabled" = true;

     

       311
       311
       +
         # "layout.forms.reveal-password-button.enabled" = true;

     

       312
       312
       +
       

     

       313
       313
       +
         #############################################################

     

       314
       314
       +
         # SECTION: ADDRESS + CREDIT CARD MANAGER

     

       315
       315
       +
         #############################################################

     

       316
       316
       +
       

     

       317
       317
       +
         # "extensions.formautofill.addresses.enabled" = false;

     

       318
       318
       +
         # "extensions.formautofill.creditCards.enabled" = false;

     

       319
       319
       +
       

     

       320
       320
       +
         #############################################################

     

       321
       321
       +
         # SECTION: MIXED CONTENT + CROSS-SITE

     

       322
       322
       +
         #############################################################

     

       323
       323
       +
       

     

       324
       324
       +
         "security.mixed_content.block_display_content" = true;

     

       325
       325
       +
         "pdfjs.enableScripting" = false;

     

       326
       326
       +
         # "browser.tabs.searchclipboardfor.middleclick" = false;

     

       327
       327
       +
         # "network.http.windows-sso.enabled" = false;

     

       328
       328
       +
       

     

       329
       329
       +
         #############################################################

     

       330
       330
       +
         # SECTION: EXTENSIONS

     

       331
       331
       +
         #############################################################

     

       332
       332
       +
       

     

       333
       333
       +
         "extensions.enabledScopes" = 5;

     

       334
       334
       +
         # "extensions.autoDisableScopes" = 15;

     

       335
       335
       +
         # "extensions.postDownloadThirdPartyPrompt" = false;

     

       336
       336
       +
         # "privacy.resistFingerprinting.block_mozAddonManager" = true;

     

       337
       337
       +
         # "extensions.webextensions.restrictedDomains" = "";

     

       338
       338
       +
         # "xpinstall.signatures.required" = false;

     

       339
       339
       +
         # "extensions.quarantinedDomains.enabled" = false;

     

       340
       340
       +
       

     

       341
       341
       +
         #############################################################

     

       342
       342
       +
         # SECTION: HEADERS / REFERERS

     

       343
       343
       +
         #############################################################

     

       344
       344
       +
       

     

       345
       345
       +
         # "network.http.referer.defaultPolicy" = 2;

     

       346
       346
       +
         # "network.http.referer.defaultPolicy.pbmode" = 2;

     

       347
       347
       +
         # "network.http.referer.defaultPolicy.trackers" = 1;

     

       348
       348
       +
         # "network.http.referer.defaultPolicy.trackers.pbmode" = 1;

     

       349
       349
       +
         # "network.http.sendRefererHeader" = 2;

     

       350
       350
       +
         # "network.http.referer.XOriginPolicy" = 0;

     

       351
       351
       +
         "network.http.referer.XOriginTrimmingPolicy" = 2;

     

       352
       352
       +
       

     

       353
       353
       +
         #############################################################

     

       354
       354
       +
         # SECTION: CONTAINERS

     

       355
       355
       +
         #############################################################

     

       356
       356
       +
       

     

       357
       357
       +
         "privacy.userContext.ui.enabled" = true;

     

       358
       358
       +
         # "privacy.userContext.enabled" = true;

     

       359
       359
       +
         # "privacy.userContext.newTabContainerOnLeftClick.enabled" = true;

     

       360
       360
       +
         # "browser.link.force_default_user_context_id_for_external_opens" = true;

     

       361
       361
       +
       

     

       362
       362
       +
         #############################################################

     

       363
       363
       +
         # SECTION: WEBRTC

     

       364
       364
       +
         #############################################################

     

       365
       365
       +
       

     

       366
       366
       +
         # "media.peerconnection.enabled" = false;

     

       367
       367
       +
         # "privacy.webrtc.globalMuteToggles" = true;

     

       368
       368
       +
         # "media.peerconnection.ice.proxy_only_if_behind_proxy" = true;

     

       369
       369
       +
         # "media.peerconnection.ice.default_address_only" = true;

     

       370
       370
       +
         # "media.peerconnection.ice.no_host" = true;

     

       371
       371
       +
       

     

       372
       372
       +
         #############################################################

     

       373
       373
       +
         # SECTION: PLUGINS

     

       374
       374
       +
         #############################################################

     

       375
       375
       +
       

     

       376
       376
       +
         # "media.gmp-provider.enabled" = false;

     

       377
       377
       +
         # "media.gmp-widevinecdm.enabled" = false;

     

       378
       378
       +
         # "media.eme.enabled" = false;

     

       379
       379
       +
         #   "browser.eme.ui.enabled" = false;

     

       380
       380
       +
       

     

       381
       381
       +
         #############################################################

     

       382
       382
       +
         # SECTION: VARIOUS

     

       383
       383
       +
         #############################################################

     

       384
       384
       +
       

     

       385
       385
       +
         # "browser.urlbar.decodeURLsOnCopy" = false;

     

       386
       386
       +
         # "devtools.selfxss.count" = 5;

     

       387
       387
       +
         # "javascript.options.asmjs" = false;

     

       388
       388
       +
         # "javascript.options.ion" = false;

     

       389
       389
       +
         # "javascript.options.baselinejit" = false;

     

       390
       390
       +
         # "javascript.options.jit_trustedprincipals" = true;

     

       391
       391
       +
         # "javascript.options.wasm" = false;

     

       392
       392
       +
       

     

       393
       393
       +
         #############################################################

     

       394
       394
       +
         # SECTION: SAFE BROWSING (SB)

     

       395
       395
       +
         #############################################################

     

       396
       396
       +
       

     

       397
       397
       +
         # "browser.safebrowsing.malware.enabled" = false;

     

       398
       398
       +
         # "browser.safebrowsing.phishing.enabled" = false;

     

       399
       399
       +
         # "browser.safebrowsing.blockedURIs.enabled" = false;

     

       400
       400
       +
         #   "browser.safebrowsing.provider.google4.gethashURL" = "";

     

       401
       401
       +
         #   "browser.safebrowsing.provider.google4.updateURL" = "";

     

       402
       402
       +
         #   "browser.safebrowsing.provider.google.gethashURL" = "";

     

       403
       403
       +
         #   "browser.safebrowsing.provider.google.updateURL" = "";

     

       404
       404
       +
         # "browser.safebrowsing.downloads.enabled" = false;

     

       405
       405
       +
         "browser.safebrowsing.downloads.remote.enabled" = false;

     

       406
       406
       +
         #   "browser.safebrowsing.downloads.remote.url" = "";

     

       407
       407
       +
         #   "browser.safebrowsing.downloads.remote.block_potentially_unwanted" = false;

     

       408
       408
       +
         #   "browser.safebrowsing.downloads.remote.block_uncommon" = false;

     

       409
       409
       +
         # "browser.safebrowsing.allowOverride" = true;

     

       410
       410
       +
       

     

       411
       411
       +
         #############################################################

     

       412
       412
       +
         # SECTION: MOZILLA

     

       413
       413
       +
         #############################################################

     

       414
       414
       +
       

     

       415
       415
       +
         # "accessibility.force_disabled" = 1;

     

       416
       416
       +
         #   "devtools.accessibility.enabled" = false;

     

       417
       417
       +
         # "identity.fxaccounts.enabled" = false;

     

       418
       418
       +
         #   "identity.fxaccounts.autoconfig.uri" = "";

     

       419
       419
       +
       

     

       420
       420
       +
         #############################################################

     

       421
       421
       +
         # SECTION: TELEMETRY

     

       422
       422
       +
         #############################################################

     

       423
       423
       +
       

     

       424
       424
       +
         "datareporting.policy.dataSubmissionEnabled" = false;

     

       425
       425
       +
         "datareporting.healthreport.uploadEnabled" = false;

     

       426
       426
       +
         "toolkit.telemetry.unified" = false;

     

       427
       427
       +
         "toolkit.telemetry.enabled" = false;

     

       428
       428
       +
         "toolkit.telemetry.server" = "data:,";

     

       429
       429
       +
         "toolkit.telemetry.archive.enabled" = false;

     

       430
       430
       +
         "toolkit.telemetry.newProfilePing.enabled" = false;

     

       431
       431
       +
         "toolkit.telemetry.shutdownPingSender.enabled" = false;

     

       432
       432
       +
         "toolkit.telemetry.updatePing.enabled" = false;

     

       433
       433
       +
         "toolkit.telemetry.bhrPing.enabled" = false;

     

       434
       434
       +
         "toolkit.telemetry.firstShutdownPing.enabled" = false;

     

       435
       435
       +
         # "toolkit.telemetry.dap_enabled" = false;

     

       436
       436
       +
         "toolkit.telemetry.coverage.opt-out" = true;

     

       437
       437
       +
         "toolkit.coverage.opt-out" = true;

     

       438
       438
       +
         "toolkit.coverage.endpoint.base" = "";

     

       439
       439
       +
         "browser.newtabpage.activity-stream.feeds.telemetry" = false;

     

       440
       440
       +
         "browser.newtabpage.activity-stream.telemetry" = false;

     

       441
       441
       +
         # "datareporting.usage.uploadEnabled" = false;

     

       442
       442
       +
       

     

       443
       443
       +
         #############################################################

     

       444
       444
       +
         # SECTION: EXPERIMENTS

     

       445
       445
       +
         #############################################################

     

       446
       446
       +
       

     

       447
       447
       +
         "app.shield.optoutstudies.enabled" = false;

     

       448
       448
       +
         "app.normandy.enabled" = false;

     

       449
       449
       +
         "app.normandy.api_url" = "";

     

       450
       450
       +
       

     

       451
       451
       +
         #############################################################

     

       452
       452
       +
         # SECTION: CRASH REPORTS

     

       453
       453
       +
         #############################################################

     

       454
       454
       +
       

     

       455
       455
       +
         "breakpad.reportURL" = "";

     

       456
       456
       +
         "browser.tabs.crashReporting.sendReport" = false;

     

       457
       457
       +
         # "browser.crashReports.unsubmittedCheck.enabled" = false;

     

       458
       458
       +
       

     

       459
       459
       +
         #############################################################

     

       460
       460
       +
         # SECTION: DETECTION

     

       461
       461
       +
         #############################################################

     

       462
       462
       +
       

     

       463
       463
       +
         "captivedetect.canonicalURL" = "";

     

       464
       464
       +
         "network.captive-portal-service.enabled" = false;

     

       465
       465
       +
         "network.connectivity-service.enabled" = false;

     

       466
       466
       +
         # "dom.private-attribution.submission.enabled" = false;

     

       467
       467
       +
         #   "toolkit.telemetry.dap_helper" = "";

     

       468
       468
       +
         #   "toolkit.telemetry.dap_leader" = "";

     

       469
       469
       +
         # "default-browser-agent.enabled" = false;

     

       470
       470
       +
         # "extensions.abuseReport.enabled" = false;

     

       471
       471
       +
         # "browser.search.serpEventTelemetryCategorization.enabled" = false;

     

       472
       472
       +
         # "doh-rollout.disable-heuristics" = true;

     

       473
       473
       +
         # "dom.security.unexpected_system_load_telemetry_enabled" = false;

     

       474
       474
       +
         # "messaging-system.rsexperimentloader.enabled" = false;

     

       475
       475
       +
         # "network.trr.confirmation_telemetry_enabled" = false;

     

       476
       476
       +
         # "security.app_menu.recordEventTelemetry" = false;

     

       477
       477
       +
         # "security.certerrors.mitm.priming.enabled" = false;

     

       478
       478
       +
         # "security.certerrors.recordEventTelemetry" = false;

     

       479
       479
       +
         # "security.protectionspopup.recordEventTelemetry" = false;

     

       480
       480
       +
         # "signon.recipes.remoteRecipes.enabled" = false;

     

       481
       481
       +
         # "privacy.trackingprotection.emailtracking.data_collection.enabled" = false;

     

       482
       482
       +
         # "messaging-system.askForFeedback" = true;  # DEFAULT [FF120+]

     

       483
       483
       +
       }

+97

modules/home/programs/firefox/betterfox/smoothfox.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         # ********************************************************************************

     

       3
       3
       +
         # Smoothfox

     

       4
       4
       +
         # "Faber est suae quisque fortunae"

     

       5
       5
       +
         # priority: better scrolling

     

       6
       6
       +
         # version: 137

     

       7
       7
       +
         # url: https://github.com/yokoffing/Betterfox

     

       8
       8
       +
         # ********************************************************************************

     

       9
       9
       +
       

     

       10
       10
       +
         #############################################################

     

       11
       11
       +
         # OPTION: SHARPEN SCROLLING

     

       12
       12
       +
         #############################################################

     

       13
       13
       +
       

     

       14
       14
       +
         # # DEFAULT NON-LINUX: apz.overscroll.enabled = true;

     

       15
       15
       +
         # "apz.overscroll.enabled" = true;

     

       16
       16
       +
       

     

       17
       17
       +
         # # DEFAULT: general.smoothScroll = true;

     

       18
       18
       +
         # "general.smoothScroll" = true;

     

       19
       19
       +
       

     

       20
       20
       +
         # # default=5

     

       21
       21
       +
         # "mousewheel.min_line_scroll_amount" = 10;

     

       22
       22
       +
       

     

       23
       23
       +
         # # default=50

     

       24
       24
       +
         # "general.smoothScroll.mouseWheel.durationMinMS" = 80;

     

       25
       25
       +
       

     

       26
       26
       +
         # # default=.25

     

       27
       27
       +
         # "general.smoothScroll.currentVelocityWeighting" = "0.15";

     

       28
       28
       +
       

     

       29
       29
       +
         # # default=.4

     

       30
       30
       +
         # "general.smoothScroll.stopDecelerationWeighting" = "0.6";

     

       31
       31
       +
       

     

       32
       32
       +
         # # [FF122+ Nightly default]=true

     

       33
       33
       +
         # "general.smoothScroll.msdPhysics.enabled" = false;

     

       34
       34
       +
       

     

       35
       35
       +
         #############################################################

     

       36
       36
       +
         # OPTION: INSTANT SCROLLING (SIMPLE ADJUSTMENT)

     

       37
       37
       +
         #############################################################

     

       38
       38
       +
       

     

       39
       39
       +
         # # DEFAULT NON-LINUX: apz.overscroll.enabled = true;

     

       40
       40
       +
         # "apz.overscroll.enabled" = true;

     

       41
       41
       +
       

     

       42
       42
       +
         # # DEFAULT: general.smoothScroll = true;

     

       43
       43
       +
         # "general.smoothScroll" = true;

     

       44
       44
       +
       

     

       45
       45
       +
         # # 250–400; adjust to your liking

     

       46
       46
       +
         # "mousewheel.default.delta_multiplier_y" = 275;

     

       47
       47
       +
       

     

       48
       48
       +
         # # [FF122+ Nightly default]=true

     

       49
       49
       +
         # "general.smoothScroll.msdPhysics.enabled" = false;

     

       50
       50
       +
       

     

       51
       51
       +
         #############################################################

     

       52
       52
       +
         # OPTION: SMOOTH SCROLLING

     

       53
       53
       +
         #############################################################

     

       54
       54
       +
       

     

       55
       55
       +
         # # DEFAULT NON-LINUX: apz.overscroll.enabled = true;

     

       56
       56
       +
         # "apz.overscroll.enabled" = true;

     

       57
       57
       +
       

     

       58
       58
       +
         # # DEFAULT: general.smoothScroll = true;

     

       59
       59
       +
         # "general.smoothScroll" = true;

     

       60
       60
       +
       

     

       61
       61
       +
         # # [FF122+ Nightly default]=true

     

       62
       62
       +
         # "general.smoothScroll.msdPhysics.enabled" = true;

     

       63
       63
       +
       

     

       64
       64
       +
         # # 250–400; adjust to your liking

     

       65
       65
       +
         # "mousewheel.default.delta_multiplier_y" = 300;

     

       66
       66
       +
       

     

       67
       67
       +
         #############################################################

     

       68
       68
       +
         # OPTION: NATURAL SMOOTH SCROLLING V3 [MODIFIED]

     

       69
       69
       +
         #############################################################

     

       70
       70
       +
       

     

       71
       71
       +
         # DEFAULT NON-LINUX: apz.overscroll.enabled = true;

     

       72
       72
       +
         "apz.overscroll.enabled" = true;

     

       73
       73
       +
       

     

       74
       74
       +
         # DEFAULT: general.smoothScroll = true;

     

       75
       75
       +
         "general.smoothScroll" = true;

     

       76
       76
       +
       

     

       77
       77
       +
         # control rate of continuous-motion updates

     

       78
       78
       +
         #"general.smoothScroll.msdPhysics.continuousMotionMaxDeltaMS" = 12;

     

       79
       79
       +
       

     

       80
       80
       +
         # [FF122+ Nightly default]=true

     

       81
       81
       +
         #"general.smoothScroll.msdPhysics.enabled" = true;

     

       82
       82
       +
         #

     

       83
       83
       +
         #"general.smoothScroll.msdPhysics.motionBeginSpringConstant" = 600;

     

       84
       84
       +
         #"general.smoothScroll.msdPhysics.regularSpringConstant" = 650;

     

       85
       85
       +
         #"general.smoothScroll.msdPhysics.slowdownMinDeltaMS" = 25;

     

       86
       86
       +
         ## ratio; default undefined

     

       87
       87
       +
         #"general.smoothScroll.msdPhysics.slowdownMinDeltaRatio" = "2";

     

       88
       88
       +
         #"general.smoothScroll.msdPhysics.slowdownSpringConstant" = 250;

     

       89
       89
       +
         #

     

       90
       90
       +
         ## default=.25

     

       91
       91
       +
         #"general.smoothScroll.currentVelocityWeighting" = "1";

     

       92
       92
       +
         ## default=.4

     

       93
       93
       +
         #"general.smoothScroll.stopDecelerationWeighting" = "1";

     

       94
       94
       +
         #

     

       95
       95
       +
         ## 250–400; adjust to your liking

     

       96
       96
       +
         #"mousewheel.default.delta_multiplier_y" = 300;

     

       97
       97
       +
       }

+110

modules/home/programs/firefox/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: let

     

       7
       7
       +
         engines = import ./engines.nix;

     

       8
       8
       +
       in {

     

       9
       9
       +
         options.myHome.programs.firefox.enable = lib.mkEnableOption "firefox web browser";

     

       10
       10
       +
       

     

       11
       11
       +
         config = lib.mkIf config.myHome.programs.firefox.enable {

     

       12
       12
       +
           programs.firefox = {

     

       13
       13
       +
             enable = true;

     

       14
       14
       +
             languagePacks = [

     

       15
       15
       +
               "en-GB"

     

       16
       16
       +
               "en"

     

       17
       17
       +
               "en-US"

     

       18
       18
       +
             ];

     

       19
       19
       +
       

     

       20
       20
       +
             profiles = {

     

       21
       21
       +
               default = {

     

       22
       22
       +
                 id = 0;

     

       23
       23
       +
                 isDefault = true;

     

       24
       24
       +
       

     

       25
       25
       +
                 extensions.packages = with pkgs.nur.repos.rycee.firefox-addons; [

     

       26
       26
       +
                   consent-o-matic

     

       27
       27
       +
                   ublock-origin

     

       28
       28
       +
                   aria2-integration

     

       29
       29
       +
                   adaptive-tab-bar-colour

     

       30
       30
       +
                   keepassxc-browser

     

       31
       31
       +
                   libredirect

     

       32
       32
       +
                   stylus

     

       33
       33
       +
                   violentmonkey

     

       34
       34
       +
                   ublacklist

     

       35
       35
       +
                   steam-database

     

       36
       36
       +
                   snowflake

     

       37
       37
       +
                   sponsorblock

     

       38
       38
       +
                   search-by-image

     

       39
       39
       +
                   ff2mpv

     

       40
       40
       +
                 ];

     

       41
       41
       +
       

     

       42
       42
       +
                 search = {

     

       43
       43
       +
                   inherit engines;

     

       44
       44
       +
                   default = "Unduck";

     

       45
       45
       +
                   force = true;

     

       46
       46
       +
       

     

       47
       47
       +
                   order = [

     

       48
       48
       +
                     "Unduck"

     

       49
       49
       +
                     "Home Manager Options"

     

       50
       50
       +
                     "NixOS Wiki"

     

       51
       51
       +
                     "nixpkgs"

     

       52
       52
       +
                     "Wikipedia"

     

       53
       53
       +
                     "Wiktionary"

     

       54
       54
       +
                   ];

     

       55
       55
       +
                 };

     

       56
       56
       +
       

     

       57
       57
       +
                 settings =

     

       58
       58
       +
                   (import ./betterfox/fastfox.nix)

     

       59
       59
       +
                   // (import ./betterfox/peskyfox.nix)

     

       60
       60
       +
                   // (import ./betterfox/securefox.nix)

     

       61
       61
       +
                   // (import ./betterfox/smoothfox.nix)

     

       62
       62
       +
                   // {

     

       63
       63
       +
                     "browser.tabs.groups.enabled" = true;

     

       64
       64
       +
                     "browser.tabs.groups.smart.enabled" = true;

     

       65
       65
       +
                     "browser.toolbars.bookmarks.visibility" = "newtab";

     

       66
       66
       +
                     "svg.context-properties.content.enabled" = true;

     

       67
       67
       +
                     "browser.uidensity" = 1;

     

       68
       68
       +
                     "general.autoScroll" = true;

     

       69
       69
       +
                     "ui.key.menuAccessKeyFocuses" = false;

     

       70
       70
       +
                     "browser.search.separatePrivateDefault" = false;

     

       71
       71
       +
       

     

       72
       72
       +
                     "media.videocontrols.picture-in-picture.video-toggle.enabled" = false;

     

       73
       73
       +
                     "browser.safebrowsing.malware.enabled" = false;

     

       74
       74
       +
                     "browser.safebrowsing.phishing.enabled" = false;

     

       75
       75
       +
                     "browser.safebrowsing.blockedURIs.enabled" = false;

     

       76
       76
       +
                     "browser.safebrowsing.provider.google4.gethashURL" = "";

     

       77
       77
       +
                     "browser.safebrowsing.provider.google4.updateURL" = "";

     

       78
       78
       +
                     "browser.safebrowsing.provider.google.gethashURL" = "";

     

       79
       79
       +
                     "browser.safebrowsing.provider.google.updateURL" = "";

     

       80
       80
       +
                     "browser.safebrowsing.downloads.enabled" = false;

     

       81
       81
       +
                     "browser.safebrowsing.downloads.remote.enabled" = false;

     

       82
       82
       +
                     "browser.safebrowsing.downloads.remote.url" = "";

     

       83
       83
       +
                     "browser.safebrowsing.downloads.remote.block_potentially_unwanted" = false;

     

       84
       84
       +
                     "browser.safebrowsing.downloads.remote.block_uncommon" = false;

     

       85
       85
       +
                     "browser.safebrowsing.allowOverride" = true;

     

       86
       86
       +
                   };

     

       87
       87
       +
       

     

       88
       88
       +
                 userContent = ''

     

       89
       89
       +
                   @font-face {

     

       90
       90
       +
                       font-family: "Segoe UI";

     

       91
       91
       +
                       src: url("${pkgs.roboto-flex}/share/fonts/truetype/RobotoFlex[GRAD,XOPQ,XTRA,YOPQ,YTAS,YTDE,YTFI,YTLC,YTUC,opsz,slnt,wdth,wght].ttf");

     

       92
       92
       +
                   }

     

       93
       93
       +
                   @font-face {

     

       94
       94
       +
                       font-family: "system-ui";

     

       95
       95
       +
                       src: url("${pkgs.roboto-flex}/share/fonts/truetype/RobotoFlex[GRAD,XOPQ,XTRA,YOPQ,YTAS,YTDE,YTFI,YTLC,YTUC,opsz,slnt,wdth,wght].ttf");

     

       96
       96
       +
                   }

     

       97
       97
       +
                   @font-face {

     

       98
       98
       +
                       font-family: "-apple-system";

     

       99
       99
       +
                       src: url("${pkgs.roboto-flex}/share/fonts/truetype/RobotoFlex[GRAD,XOPQ,XTRA,YOPQ,YTAS,YTDE,YTFI,YTLC,YTUC,opsz,slnt,wdth,wght].ttf");

     

       100
       100
       +
                   }

     

       101
       101
       +
                   @font-face {

     

       102
       102
       +
                       font-family: "BlinkMacSystemFont";

     

       103
       103
       +
                       src: url("${pkgs.roboto-flex}/share/fonts/truetype/RobotoFlex[GRAD,XOPQ,XTRA,YOPQ,YTAS,YTDE,YTFI,YTLC,YTUC,opsz,slnt,wdth,wght].ttf");

     

       104
       104
       +
                   }

     

       105
       105
       +
                 '';

     

       106
       106
       +
               };

     

       107
       107
       +
             };

     

       108
       108
       +
           };

     

       109
       109
       +
         };

     

       110
       110
       +
       }

+91

modules/home/programs/firefox/engines.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         "Unduck" = {

     

       3
       3
       +
           icon = "https://unducking.pages.dev/search.svg";

     

       4
       4
       +
       

     

       5
       5
       +
           urls = [

     

       6
       6
       +
             {

     

       7
       7
       +
               template = "https://unducking.pages.dev/?q={searchTerms}&d=ddg";

     

       8
       8
       +
             }

     

       9
       9
       +
           ];

     

       10
       10
       +
         };

     

       11
       11
       +
       

     

       12
       12
       +
         "Home Manager Options" = {

     

       13
       13
       +
           icon = "https://home-manager-options.extranix.com/images/favicon.png";

     

       14
       14
       +
           definedAliases = ["!hm"];

     

       15
       15
       +
       

     

       16
       16
       +
           urls = [

     

       17
       17
       +
             {

     

       18
       18
       +
               template = "https://home-manager-options.extranix.com/?release=master&query={searchTerms}";

     

       19
       19
       +
             }

     

       20
       20
       +
           ];

     

       21
       21
       +
         };

     

       22
       22
       +
       

     

       23
       23
       +
         "NixOS Wiki" = {

     

       24
       24
       +
           definedAliases = [

     

       25
       25
       +
             "!nw"

     

       26
       26
       +
             "!nixwiki"

     

       27
       27
       +
           ];

     

       28
       28
       +
           icon = "https://wiki.nixos.org/favicon.ico";

     

       29
       29
       +
           updateInterval = 24 * 60 * 60 * 1000; # every day

     

       30
       30
       +
           metaData.hidden = true;

     

       31
       31
       +
       

     

       32
       32
       +
           urls = [

     

       33
       33
       +
             {

     

       34
       34
       +
               template = "https://wiki.nixos.org/w/index.php?search={searchTerms}";

     

       35
       35
       +
             }

     

       36
       36
       +
           ];

     

       37
       37
       +
         };

     

       38
       38
       +
       

     

       39
       39
       +
         "nixpkgs" = {

     

       40
       40
       +
           definedAliases = ["!nix"];

     

       41
       41
       +
           icon = "https://search.nixos.org/favicon.png";

     

       42
       42
       +
       

     

       43
       43
       +
           urls = [

     

       44
       44
       +
             {

     

       45
       45
       +
               template = "https://search.nixos.org/packages";

     

       46
       46
       +
               params = [

     

       47
       47
       +
                 {

     

       48
       48
       +
                   name = "type";

     

       49
       49
       +
                   value = "packages";

     

       50
       50
       +
                 }

     

       51
       51
       +
                 {

     

       52
       52
       +
                   name = "query";

     

       53
       53
       +
                   value = "{searchTerms}";

     

       54
       54
       +
                 }

     

       55
       55
       +
               ];

     

       56
       56
       +
             }

     

       57
       57
       +
           ];

     

       58
       58
       +
         };

     

       59
       59
       +
       

     

       60
       60
       +
         "Wiktionary" = {

     

       61
       61
       +
           definedAliases = ["!wikt"];

     

       62
       62
       +
           icon = "https://en.wiktionary.org/favicon.ico";

     

       63
       63
       +
           updateInterval = 24 * 60 * 60 * 1000; # every day

     

       64
       64
       +
       

     

       65
       65
       +
           urls = [

     

       66
       66
       +
             {

     

       67
       67
       +
               template = "https://en.wiktionary.org/wiki/{searchTerms}";

     

       68
       68
       +
             }

     

       69
       69
       +
           ];

     

       70
       70
       +
         };

     

       71
       71
       +
       

     

       72
       72
       +
         "bing" = {

     

       73
       73
       +
           metaData = {

     

       74
       74
       +
             hidden = true;

     

       75
       75
       +
           };

     

       76
       76
       +
         };

     

       77
       77
       +
       

     

       78
       78
       +
         "ddg" = {

     

       79
       79
       +
           metaData = {

     

       80
       80
       +
             hidden = true;

     

       81
       81
       +
             alias = "!ddg";

     

       82
       82
       +
           };

     

       83
       83
       +
         };

     

       84
       84
       +
       

     

       85
       85
       +
         "google" = {

     

       86
       86
       +
           metaData = {

     

       87
       87
       +
             hidden = true;

     

       88
       88
       +
             alias = "!google";

     

       89
       89
       +
           };

     

       90
       90
       +
         };

     

       91
       91
       +
       }

+26

modules/home/programs/git/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHome.programs.git.enable = lib.mkEnableOption "git version control";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myHome.programs.git.enable {

     

       9
       9
       +
           programs.git = {

     

       10
       10
       +
             enable = true;

     

       11
       11
       +
             userName = "ayla";

     

       12
       12
       +
             userEmail = "ayla-git.barcode041@silomails.com";

     

       13
       13
       +
             extraConfig = {

     

       14
       14
       +
               color.ui = true;

     

       15
       15
       +
               github.user = "ayla6";

     

       16
       16
       +
               init = {

     

       17
       17
       +
                 defaultBranch = "main";

     

       18
       18
       +
               };

     

       19
       19
       +
               push = {

     

       20
       20
       +
                 autoSetupRemote = true;

     

       21
       21
       +
                 default = "current";

     

       22
       22
       +
               };

     

       23
       23
       +
             };

     

       24
       24
       +
           };

     

       25
       25
       +
         };

     

       26
       26
       +
       }

+20

modules/home/programs/micro/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHome.programs.micro.enable = lib.mkEnableOption "micro editor";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myHome.programs.micro.enable {

     

       9
       9
       +
           programs.micro = {

     

       10
       10
       +
             enable = true;

     

       11
       11
       +
             settings = {

     

       12
       12
       +
               colorscheme = "simple";

     

       13
       13
       +
               mkparents = true;

     

       14
       14
       +
               scrollspeed = 1;

     

       15
       15
       +
               tabsize = 2;

     

       16
       16
       +
               tabstospaces = true;

     

       17
       17
       +
             };

     

       18
       18
       +
           };

     

       19
       19
       +
         };

     

       20
       20
       +
       }

+213

modules/home/programs/mpv/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         pkgs,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         config,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myHome.programs.mpv.enable = lib.mkEnableOption "mpv";

     

       8
       8
       +
       

     

       9
       9
       +
         config = lib.mkIf config.myHome.programs.mpv.enable {

     

       10
       10
       +
           programs.mpv = {

     

       11
       11
       +
             enable = true;

     

       12
       12
       +
             scripts = with pkgs.mpvScripts; [

     

       13
       13
       +
               uosc

     

       14
       14
       +
               sponsorblock-minimal

     

       15
       15
       +
               thumbfast

     

       16
       16
       +
               eisa01.simplehistory

     

       17
       17
       +
               eisa01.smart-copy-paste-2

     

       18
       18
       +
               autoload

     

       19
       19
       +
             ];

     

       20
       20
       +
             config = {

     

       21
       21
       +
               # Video output and rendering

     

       22
       22
       +
               vo = "gpu-next";

     

       23
       23
       +
               hwdec = "vaapi";

     

       24
       24
       +
               dither-depth = "auto";

     

       25
       25
       +
       

     

       26
       26
       +
               # Window and display

     

       27
       27
       +
               osd-bar = false;

     

       28
       28
       +
               border = false;

     

       29
       29
       +
               geometry = "50%:50%";

     

       30
       30
       +
               autofit-larger = "1280x720";

     

       31
       31
       +
               keep-open = true;

     

       32
       32
       +
               reset-on-next-file = "video-rotate,video-zoom,panscan";

     

       33
       33
       +
       

     

       34
       34
       +
               # Debanding

     

       35
       35
       +
               deband = false;

     

       36
       36
       +
               deband-iterations = 2;

     

       37
       37
       +
               deband-threshold = 64;

     

       38
       38
       +
               deband-range = 17;

     

       39
       39
       +
               deband-grain = 12;

     

       40
       40
       +
       

     

       41
       41
       +
               # OSD and fonts

     

       42
       42
       +
               osd-font = "Roboto Flex";

     

       43
       43
       +
       

     

       44
       44
       +
               # Audio and subtitle languages

     

       45
       45
       +
               alang = "ja,jp,jpn,en,eng";

     

       46
       46
       +
               slang = "en,eng,pt-br,br,pt";

     

       47
       47
       +
       

     

       48
       48
       +
               # Subtitle settings

     

       49
       49
       +
               demuxer-mkv-subtitle-preroll = true;

     

       50
       50
       +
               sub-fix-timing = false;

     

       51
       51
       +
               sub-auto = "fuzzy";

     

       52
       52
       +
               sub-scale = 0.5;

     

       53
       53
       +
               sub-font = "Roboto";

     

       54
       54
       +
       

     

       55
       55
       +
               # Screenshot settings

     

       56
       56
       +
               screenshot-format = "png";

     

       57
       57
       +
               screenshot-high-bit-depth = false;

     

       58
       58
       +
               screenshot-png-compression = 3;

     

       59
       59
       +
               screenshot-directory = "~/Pictures/mpv-screenshots";

     

       60
       60
       +
               screenshot-template = "%wH.%wM.%wS.%wT-#%#00n";

     

       61
       61
       +
       

     

       62
       62
       +
               # YouTube-dl format

     

       63
       63
       +
               ytdl-format = "bv*[vcodec^=vp9][height<=?1080][vcodec!=av01]+ba/best";

     

       64
       64
       +
             };

     

       65
       65
       +
             profiles = {

     

       66
       66
       +
               video = {

     

       67
       67
       +
                 profile-cond = "not get('current-tracks/video/image') and not get('current-tracks/video/albumart')";

     

       68
       68
       +
                 correct-downscaling = true;

     

       69
       69
       +
                 linear-downscaling = false;

     

       70
       70
       +
                 sigmoid-upscaling = true;

     

       71
       71
       +
               };

     

       72
       72
       +
               "protocol.http" = {

     

       73
       73
       +
                 hls-bitrate = "max";

     

       74
       74
       +
                 cache = true;

     

       75
       75
       +
                 no-cache-pause = true;

     

       76
       76
       +
               };

     

       77
       77
       +
               "protocol.https" = {

     

       78
       78
       +
                 hls-bitrate = "max";

     

       79
       79
       +
                 cache = true;

     

       80
       80
       +
                 no-cache-pause = true;

     

       81
       81
       +
               };

     

       82
       82
       +
               "image-hq" = {

     

       83
       83
       +
                 profile-cond = "get('current-tracks/video/image') and width < 10000";

     

       84
       84
       +
                 profile-restore = "copy";

     

       85
       85
       +
                 scale = "spline36";

     

       86
       86
       +
                 cscale = "spline36";

     

       87
       87
       +
                 dscale = "mitchell";

     

       88
       88
       +
                 dither-depth = "auto";

     

       89
       89
       +
                 correct-downscaling = true;

     

       90
       90
       +
                 sigmoid-upscaling = true;

     

       91
       91
       +
               };

     

       92
       92
       +
             };

     

       93
       93
       +
       

     

       94
       94
       +
             bindings = {

     

       95
       95
       +
               # VIDEO

     

       96
       96
       +
               d = "cycle deband";

     

       97
       97
       +
               D = "cycle deinterlace";

     

       98
       98
       +
               n = "cycle video-unscaled";

     

       99
       99
       +
               C = "cycle-values video-aspect-override \"16:9\" \"4:3\" \"2.35:1\" \"-1\""; # cycle the video aspect ratio ("-1" is the container aspect)

     

       100
       100
       +
       

     

       101
       101
       +
               # increase subtitle font size

     

       102
       102
       +
               "ALT+e" = "add sub-scale +0.1";

     

       103
       103
       +
       

     

       104
       104
       +
               # decrease subtitle font size

     

       105
       105
       +
               "ALT+n" = "add sub-scale -0.1";

     

       106
       106
       +
       

     

       107
       107
       +
               m = "cycle ao-mute";

     

       108
       108
       +
       

     

       109
       109
       +
               "Ctrl+q" = "script-binding pickshader";

     

       110
       110
       +
       

     

       111
       111
       +
               # IMAGES

     

       112
       112
       +
               "SPACE" = "{image} repeatable playlist-next force";

     

       113
       113
       +
               "]" = "{image} no-osd add playlist-pos 10";

     

       114
       114
       +
               "[" = "{image} no-osd add playlist-pos -10";

     

       115
       115
       +
       

     

       116
       116
       +
               # pan-image is a wrapper around altering video-align that pans

     

       117
       117
       +
               # relatively to the window's dimensions instead of the image's.

     

       118
       118
       +
               # +1 scrolls one screen width/height.

     

       119
       119
       +
               h = "{image} repeatable script-message pan-image x -.33";

     

       120
       120
       +
               j = "{image} repeatable script-message pan-image y +.33";

     

       121
       121
       +
               k = "{image} repeatable script-message pan-image y -.33";

     

       122
       122
       +
               l = "{image} repeatable script-message pan-image x +.33";

     

       123
       123
       +
               LEFT = "{image} repeatable script-message pan-image x -.33";

     

       124
       124
       +
               DOWN = "{image} repeatable script-message pan-image y +.33";

     

       125
       125
       +
               UP = "{image} repeatable script-message pan-image y -.33";

     

       126
       126
       +
               RIGHT = "{image} repeatable script-message pan-image x +.33";

     

       127
       127
       +
               H = "{image} repeatable script-message pan-image x -.033";

     

       128
       128
       +
               J = "{image} repeatable script-message pan-image y +.033";

     

       129
       129
       +
               K = "{image} repeatable script-message pan-image y -.033";

     

       130
       130
       +
               L = "{image} repeatable script-message pan-image x +.033";

     

       131
       131
       +
               "Shift+LEFT" = "{image} repeatable script-message pan-image x -.033";

     

       132
       132
       +
               "Shift+DOWN" = "{image} repeatable script-message pan-image y +.033";

     

       133
       133
       +
               "Shift+UP" = "{image} repeatable script-message pan-image y -.033";

     

       134
       134
       +
               "Shift+RIGHT" = "{image} repeatable script-message pan-image x +.033";

     

       135
       135
       +
               "Ctrl+h" = "{image} no-osd set video-align-x -1";

     

       136
       136
       +
               "Ctrl+j" = "{image} no-osd set video-align-y 1";

     

       137
       137
       +
               "Ctrl+k" = "{image} no-osd set video-align-y -1";

     

       138
       138
       +
               "Ctrl+l" = "{image} no-osd set video-align-x 1";

     

       139
       139
       +
               "Ctrl+LEFT" = "{image} no-osd set video-align-x -1";

     

       140
       140
       +
               "Ctrl+DOWN" = "{image} no-osd set video-align-y 1";

     

       141
       141
       +
               "Ctrl+UP" = "{image} no-osd set video-align-y -1";

     

       142
       142
       +
               "Ctrl+RIGHT" = "{image} no-osd set video-align-x 1";

     

       143
       143
       +
       

     

       144
       144
       +
               "9" = "{image} add video-zoom +.25"; # easier to reach than =

     

       145
       145
       +
               "-" = "{image} add video-zoom -.25";

     

       146
       146
       +
               "(" = "{image} add video-zoom +.05";

     

       147
       147
       +
               "_" = "{image} add video-zoom -.05";

     

       148
       148
       +
               "0" = "{image} no-osd set video-zoom 0; no-osd set panscan 0";

     

       149
       149
       +
       

     

       150
       150
       +
               # Toggle scaling the image to the window.

     

       151
       151
       +
               u = "{image} no-osd cycle-values video-unscaled yes no; no-osd set video-zoom 0; no-osd set panscan 0";

     

       152
       152
       +
               # cycle video-unscaled will also cycle through downscale-big.

     

       153
       153
       +
               # autofit=100%x100% makes the window bigger than necessary with downscale-big

     

       154
       154
       +
               # though so you may want to replace it with autofit-larger=100%x100%

     

       155
       155
       +
       

     

       156
       156
       +
               # panscan crops scaled videos with different aspect ratio than the window.

     

       157
       157
       +
               # At 1 it fills black bars completely.

     

       158
       158
       +
               o = "{image} no-osd set panscan 1; no-osd set video-unscaled no; no-osd set video-zoom 0";

     

       159
       159
       +
       

     

       160
       160
       +
               # Toggle slideshow mode.

     

       161
       161
       +
               s = "{image} cycle-values image-display-duration 5 inf; no-osd set video-zoom 0; no-osd set panscan 0; no-osd set video-unscaled no";

     

       162
       162
       +
       

     

       163
       163
       +
               # Compare the image quality with and without profile=gpu-hq.

     

       164
       164
       +
               "Ctrl+a" = "{image} apply-profile image-hq restore";

     

       165
       165
       +
               a = "{image} apply-profile image-hq";

     

       166
       166
       +
       

     

       167
       167
       +
               # This mouse gesture executes one of 5 commands configured in

     

       168
       168
       +
               # script-opts/image_bindings.conf depending on the direction you drag the

     

       169
       169
       +
               # mouse. To use it without an input section you need window-dragging=no in

     

       170
       170
       +
               # mpv.conf.

     

       171
       171
       +
               MBTN_LEFT = "{image} script-binding gesture";

     

       172
       172
       +
               MBTN_LEFT_DBL = "{image} ignore";

     

       173
       173
       +
               MBTN_MID = "{image} script-binding align-to-cursor";

     

       174
       174
       +
               MBTN_RIGHT = "{image} script-binding drag-to-pan";

     

       175
       175
       +
               WHEEL_UP = "{image} script-message cursor-centric-zoom .1";

     

       176
       176
       +
               WHEEL_DOWN = "{image} script-message cursor-centric-zoom -.1";

     

       177
       177
       +
       

     

       178
       178
       +
               GAMEPAD_DPAD_RIGHT = "seek +5";

     

       179
       179
       +
               GAMEPAD_DPAD_LEFT = "seek -5";

     

       180
       180
       +
       

     

       181
       181
       +
               GAMEPAD_RIGHT_TRIGGER = "add chapter 1";

     

       182
       182
       +
               GAMEPAD_LEFT_TRIGGER = "add chapter -1";

     

       183
       183
       +
       

     

       184
       184
       +
               GAMEPAD_ACTION_DOWN = "cycle pause";

     

       185
       185
       +
       

     

       186
       186
       +
               GAMEPAD_LEFT_SHOULDER = "cycle sub";

     

       187
       187
       +
               GAMEPAD_RIGHT_SHOULDER = "cycle audio";

     

       188
       188
       +
             };

     

       189
       189
       +
             scriptOpts = {

     

       190
       190
       +
               "SimpleHistory" = {

     

       191
       191
       +
                 open_list_keybind = "[[h,all],[H,all],[r,recents],[R,recents],[GAMEPAD_BACK,all]]";

     

       192
       192
       +
                 same_entry_limit = 0;

     

       193
       193
       +
                 list_move_up_keybind = "[UP,WHEEL_UP,GAMEPAD_DPAD_UP]";

     

       194
       194
       +
                 list_move_down_keybind = "[DOWN,WHEEL_DOWN,GAMEPAD_DPAD_DOWN]";

     

       195
       195
       +
                 list_page_up_keybind = "[PGUP,GAMEPAD_LEFT_TRIGGER]";

     

       196
       196
       +
                 list_page_down_keybind = "[PGDWN,GAMEPAD_RIGHT_TRIGGER]";

     

       197
       197
       +
                 list_select_keybind = "[ENTER,MBTN_MID,GAMEPAD_ACTION_DOWN]";

     

       198
       198
       +
                 list_add_playlist_keybind = "[CTRL+ENTER,GAMEPAD_ACTION_RIGHT]";

     

       199
       199
       +
                 list_close_keybind = "[ESC,MBTN_RIGHT,GAMEPAD_BACK]";

     

       200
       200
       +
               };

     

       201
       201
       +
               "thumbfast" = {

     

       202
       202
       +
                 max_height = 250;

     

       203
       203
       +
                 max_width = 250;

     

       204
       204
       +
                 spawn_first = "yes";

     

       205
       205
       +
                 network = "yes";

     

       206
       206
       +
                 hwdec = "yes";

     

       207
       207
       +
               };

     

       208
       208
       +
               "uosc" = {

     

       209
       209
       +
               };

     

       210
       210
       +
             };

     

       211
       211
       +
           };

     

       212
       212
       +
         };

     

       213
       213
       +
       }

+13

modules/home/programs/obs-studio/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHome.programs.obs-studio.enable = lib.mkEnableOption "obs studio";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myHome.programs.obs-studio.enable {

     

       9
       9
       +
           programs.obs-studio = {

     

       10
       10
       +
             enable = true;

     

       11
       11
       +
           };

     

       12
       12
       +
         };

     

       13
       13
       +
       }

+87

modules/home/programs/zed-editor/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myHome.programs.zed-editor.enable = lib.mkEnableOption "zed editor";

     

       8
       8
       +
       

     

       9
       9
       +
         config = lib.mkIf config.myHome.programs.zed-editor.enable {

     

       10
       10
       +
           programs.zed-editor = {

     

       11
       11
       +
             enable = true;

     

       12
       12
       +
             extensions = [

     

       13
       13
       +
               "env"

     

       14
       14
       +
               "fish"

     

       15
       15
       +
               "git-firefly"

     

       16
       16
       +
               "github-theme"

     

       17
       17
       +
               "html"

     

       18
       18
       +
               "lua"

     

       19
       19
       +
               "nix"

     

       20
       20
       +
               "scss"

     

       21
       21
       +
               "toml"

     

       22
       22
       +
             ];

     

       23
       23
       +
             userSettings = {

     

       24
       24
       +
               auto_indent_on_paste = true;

     

       25
       25
       +
               auto_update = false;

     

       26
       26
       +
               buffer_font_size = 14;

     

       27
       27
       +
               buffer_font_family = "JetBrains Mono NL";

     

       28
       28
       +
               use_on_type_format = true;

     

       29
       29
       +
               wrap_guides = [80];

     

       30
       30
       +
               minimap.show = "auto";

     

       31
       31
       +
               preferred_line_length = 80;

     

       32
       32
       +
               soft_wrap = "preferred_line_length";

     

       33
       33
       +
       

     

       34
       34
       +
               agent = {

     

       35
       35
       +
                 default_model = {

     

       36
       36
       +
                   provider = "google";

     

       37
       37
       +
                   model = "gemini-2.5-pro";

     

       38
       38
       +
                 };

     

       39
       39
       +
                 inline_assistant_model = {

     

       40
       40
       +
                   provider = "google";

     

       41
       41
       +
                   model = "gemini-2.5-pro";

     

       42
       42
       +
                 };

     

       43
       43
       +
                 default_profile = "ask";

     

       44
       44
       +
               };

     

       45
       45
       +
       

     

       46
       46
       +
               languages = {

     

       47
       47
       +
                 JavaScript = {

     

       48
       48
       +
                   formatter = {

     

       49
       49
       +
                     code_actions = {

     

       50
       50
       +
                       "source.fixAll.eslint" = true;

     

       51
       51
       +
                     };

     

       52
       52
       +
                   };

     

       53
       53
       +
                 };

     

       54
       54
       +
                 TypeScript = {

     

       55
       55
       +
                   formatter = {

     

       56
       56
       +
                     code_actions = {

     

       57
       57
       +
                       "source.fixAll.eslint" = true;

     

       58
       58
       +
                     };

     

       59
       59
       +
                   };

     

       60
       60
       +
                 };

     

       61
       61
       +
                 TSX = {

     

       62
       62
       +
                   formatter = {

     

       63
       63
       +
                     code_actions = {

     

       64
       64
       +
                       "source.fixAll.eslint" = true;

     

       65
       65
       +
                     };

     

       66
       66
       +
                   };

     

       67
       67
       +
                 };

     

       68
       68
       +
                 Nix = {

     

       69
       69
       +
                   format_on_save = "on";

     

       70
       70
       +
                   formatter = "language_server";

     

       71
       71
       +
                   language_servers = [

     

       72
       72
       +
                     "nixd"

     

       73
       73
       +
                   ];

     

       74
       74
       +
                 };

     

       75
       75
       +
               };

     

       76
       76
       +
               lsp.nixd = {

     

       77
       77
       +
                 binary.path = lib.getExe pkgs.nixd;

     

       78
       78
       +
                 settings.formatting.command = [(lib.getExe pkgs.alejandra) "--quiet" "--"];

     

       79
       79
       +
               };

     

       80
       80
       +
               telemetry = {

     

       81
       81
       +
                 diagnostics = false;

     

       82
       82
       +
                 metrics = false;

     

       83
       83
       +
               };

     

       84
       84
       +
             };

     

       85
       85
       +
           };

     

       86
       86
       +
         };

     

       87
       87
       +
       }

modules/home/services/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./syncthing

     

       4
       4
       +
         ];

     

       5
       5
       +
       }

+13

modules/home/services/syncthing/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myHome.services.syncthing.enable = lib.mkEnableOption "syncthing";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myHome.services.syncthing.enable {

     

       9
       9
       +
           services.syncthing = {

     

       10
       10
       +
             enable = true;

     

       11
       11
       +
           };

     

       12
       12
       +
         };

     

       13
       13
       +
       }

modules/home/style/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./fonts

     

       4
       4
       +
         ];

     

       5
       5
       +
       }

+40

modules/home/style/fonts/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         self,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: let

     

       7
       7
       +
         fontSourceDir = self + "/secrets/fonts";

     

       8
       8
       +
       

     

       9
       9
       +
         # Calculate the destination directory relative to home (e.g., ".local/share/fonts").

     

       10
       10
       +
         fontTargetDir = lib.removePrefix (config.home.homeDirectory + "/") (config.xdg.dataHome + "/fonts");

     

       11
       11
       +
       

     

       12
       12
       +
         # A helper function to recursively find all file paths in a directory.

     

       13
       13
       +
         # This approach avoids Nix's string "tainting" issue.

     

       14
       14
       +
         findFilesRecursive = dir: let

     

       15
       15
       +
           entries = builtins.readDir dir;

     

       16
       16
       +
           processEntry = name: type: let

     

       17
       17
       +
             path = dir + "/${name}";

     

       18
       18
       +
           in

     

       19
       19
       +
             if type == "regular"

     

       20
       20
       +
             then [name]

     

       21
       21
       +
             else if type == "directory"

     

       22
       22
       +
             then map (sub: "${name}/${sub}") (findFilesRecursive path)

     

       23
       23
       +
             else [];

     

       24
       24
       +
         in

     

       25
       25
       +
           lib.flatten (lib.mapAttrsToList processEntry entries);

     

       26
       26
       +
       

     

       27
       27
       +
         # Build the final attribute set for `home.file`.

     

       28
       28
       +
         fontFileEntries = lib.listToAttrs (

     

       29
       29
       +
           map (relativePath: {

     

       30
       30
       +
             name = "${fontTargetDir}/${relativePath}";

     

       31
       31
       +
             value.source = fontSourceDir + "/${relativePath}";

     

       32
       32
       +
           }) (findFilesRecursive fontSourceDir)

     

       33
       33
       +
         );

     

       34
       34
       +
       in {

     

       35
       35
       +
         options.myHome.style.fonts.enable = lib.mkEnableOption "custom fonts";

     

       36
       36
       +
       

     

       37
       37
       +
         config = lib.mkIf config.myHome.style.fonts.enable {

     

       38
       38
       +
           home.file = fontFileEntries;

     

       39
       39
       +
         };

     

       40
       40
       +
       }

+23

modules/locale/en-gb/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         config = {

     

       7
       7
       +
           i18n = {

     

       8
       8
       +
             defaultLocale = lib.mkDefault "en_GB.UTF-8";

     

       9
       9
       +
       

     

       10
       10
       +
             extraLocaleSettings = {

     

       11
       11
       +
               LC_ADDRESS = config.i18n.defaultLocale;

     

       12
       12
       +
               LC_IDENTIFICATION = config.i18n.defaultLocale;

     

       13
       13
       +
               LC_MEASUREMENT = config.i18n.defaultLocale;

     

       14
       14
       +
               LC_MONETARY = config.i18n.defaultLocale;

     

       15
       15
       +
               LC_NAME = config.i18n.defaultLocale;

     

       16
       16
       +
               LC_NUMERIC = config.i18n.defaultLocale;

     

       17
       17
       +
               LC_PAPER = config.i18n.defaultLocale;

     

       18
       18
       +
               LC_TELEPHONE = config.i18n.defaultLocale;

     

       19
       19
       +
               LC_TIME = config.i18n.defaultLocale;

     

       20
       20
       +
             };

     

       21
       21
       +
           };

     

       22
       22
       +
         };

     

       23
       23
       +
       }

+85

modules/nixos/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         imports = [

     

       8
       8
       +
           ./desktop

     

       9
       9
       +
           ./profiles

     

       10
       10
       +
           ./style

     

       11
       11
       +
           ./programs

     

       12
       12
       +
           ./services

     

       13
       13
       +
         ];

     

       14
       14
       +
       

     

       15
       15
       +
         options.myNixOS.desktop.enable = lib.mkOption {

     

       16
       16
       +
           default =

     

       17
       17
       +
             config.myNixOS.desktop.gnome.enable or config.myNixOS.desktop.hyprland.enable

     

       18
       18
       +
               or config.myNixOS.desktop.kde.enable;

     

       19
       19
       +
           description = "Desktop environment configuration.";

     

       20
       20
       +
           type = lib.types.bool;

     

       21
       21
       +
         };

     

       22
       22
       +
       

     

       23
       23
       +
         config = lib.mkIf config.myNixOS.desktop.enable {

     

       24
       24
       +
           boot = {

     

       25
       25
       +
             consoleLogLevel = 0;

     

       26
       26
       +
             initrd.verbose = false;

     

       27
       27
       +
             plymouth.enable = true;

     

       28
       28
       +
           };

     

       29
       29
       +
       

     

       30
       30
       +
           environment.sessionVariables.NIXOS_OZONE_WL = "1";

     

       31
       31
       +
       

     

       32
       32
       +
           home-manager.sharedModules = [

     

       33
       33
       +
             {

     

       34
       34
       +
               config.myHome.desktop.enable = true;

     

       35
       35
       +
             }

     

       36
       36
       +
           ];

     

       37
       37
       +
       

     

       38
       38
       +
           programs.system-config-printer.enable = true;

     

       39
       39
       +
       

     

       40
       40
       +
           services = {

     

       41
       41
       +
             avahi = {

     

       42
       42
       +
               enable = true;

     

       43
       43
       +
               nssmdns4 = true;

     

       44
       44
       +
               openFirewall = true;

     

       45
       45
       +
       

     

       46
       46
       +
               publish = {

     

       47
       47
       +
                 enable = true;

     

       48
       48
       +
                 addresses = true;

     

       49
       49
       +
                 userServices = true;

     

       50
       50
       +
                 workstation = true;

     

       51
       51
       +
               };

     

       52
       52
       +
             };

     

       53
       53
       +
       

     

       54
       54
       +
             gnome.gnome-keyring.enable = true;

     

       55
       55
       +
             gvfs.enable = true; # Mount, trash, etc.

     

       56
       56
       +
             libinput.enable = true;

     

       57
       57
       +
       

     

       58
       58
       +
             pipewire = {

     

       59
       59
       +
               enable = true;

     

       60
       60
       +
       

     

       61
       61
       +
               alsa = {

     

       62
       62
       +
                 enable = true;

     

       63
       63
       +
                 support32Bit = true;

     

       64
       64
       +
               };

     

       65
       65
       +
       

     

       66
       66
       +
               pulse.enable = true;

     

       67
       67
       +
             };

     

       68
       68
       +
       

     

       69
       69
       +
             printing.enable = false;

     

       70
       70
       +
       

     

       71
       71
       +
             pulseaudio = {

     

       72
       72
       +
               support32Bit = true;

     

       73
       73
       +
             };

     

       74
       74
       +
       

     

       75
       75
       +
             system-config-printer.enable = true;

     

       76
       76
       +
       

     

       77
       77
       +
             xserver = {

     

       78
       78
       +
               enable = true;

     

       79
       79
       +
               excludePackages = with pkgs; [xterm];

     

       80
       80
       +
             };

     

       81
       81
       +
           };

     

       82
       82
       +
       

     

       83
       83
       +
           system.nixos.tags = ["desktop"];

     

       84
       84
       +
         };

     

       85
       85
       +
       }

modules/nixos/desktop/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [./gnome];

     

       3
       3
       +
       }

+52

modules/nixos/desktop/gnome/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         pkgs,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         config,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myNixOS.desktop.gnome.enable = lib.mkEnableOption "use gnome desktop environment";

     

       8
       8
       +
       

     

       9
       9
       +
         config = lib.mkIf config.myNixOS.desktop.gnome.enable {

     

       10
       10
       +
           home-manager.sharedModules = [

     

       11
       11
       +
             {

     

       12
       12
       +
               config.myHome.desktop.gnome.enable = true;

     

       13
       13
       +
             }

     

       14
       14
       +
           ];

     

       15
       15
       +
       

     

       16
       16
       +
           services.displayManager.gdm.enable = true;

     

       17
       17
       +
           services.desktopManager.gnome.enable = true;

     

       18
       18
       +
       

     

       19
       19
       +
           environment.gnome.excludePackages = with pkgs; [

     

       20
       20
       +
             epiphany # web browser

     

       21
       21
       +
             geary # email reader

     

       22
       22
       +
             gedit # text editor

     

       23
       23
       +
             gnome-characters

     

       24
       24
       +
             gnome-music

     

       25
       25
       +
             gnome-user-docs

     

       26
       26
       +
             gnome-tour

     

       27
       27
       +
             decibels

     

       28
       28
       +
           ];

     

       29
       29
       +
       

     

       30
       30
       +
           security.pam.services.greetd.enableGnomeKeyring = true;

     

       31
       31
       +
           services.gnome.gcr-ssh-agent.enable = true;

     

       32
       32
       +
       

     

       33
       33
       +
           programs.kdeconnect = {

     

       34
       34
       +
             enable = true;

     

       35
       35
       +
             package = pkgs.gnomeExtensions.gsconnect;

     

       36
       36
       +
           };

     

       37
       37
       +
       

     

       38
       38
       +
           environment.variables.QT_QPA_PLATFORMTHEME = "qt6ct";

     

       39
       39
       +
           environment.systemPackages = with pkgs; [

     

       40
       40
       +
             libsForQt5.qt5ct

     

       41
       41
       +
             qt6ct

     

       42
       42
       +
           ];

     

       43
       43
       +
       

     

       44
       44
       +
           myNixOS.desktop.enable = true;

     

       45
       45
       +
       

     

       46
       46
       +
           #qt = {

     

       47
       47
       +
           #  enable = true;

     

       48
       48
       +
           #  platformTheme = "gnome";

     

       49
       49
       +
           #  style = "adwaita";

     

       50
       50
       +
           #};

     

       51
       51
       +
         };

     

       52
       52
       +
       }

+66

modules/nixos/profiles/base/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         self,

     

       6
       6
       +
         ...

     

       7
       7
       +
       }: {

     

       8
       8
       +
         options.myNixOS.profiles.base.enable = lib.mkEnableOption "base system configuration";

     

       9
       9
       +
       

     

       10
       10
       +
         config = lib.mkIf config.myNixOS.profiles.base.enable {

     

       11
       11
       +
           environment = {

     

       12
       12
       +
             etc."nixos".source = self;

     

       13
       13
       +
       

     

       14
       14
       +
             systemPackages = with pkgs; [

     

       15
       15
       +
               (lib.hiPrio uutils-coreutils-noprefix)

     

       16
       16
       +
               wget

     

       17
       17
       +
               micro

     

       18
       18
       +
               git

     

       19
       19
       +
               wget

     

       20
       20
       +
               btop

     

       21
       21
       +
             ];

     

       22
       22
       +
           };

     

       23
       23
       +
       

     

       24
       24
       +
           programs = {

     

       25
       25
       +
             dconf.enable = true; # Needed for home-manager

     

       26
       26
       +
       

     

       27
       27
       +
             nh.enable = true;

     

       28
       28
       +
           };

     

       29
       29
       +
       

     

       30
       30
       +
           networking.networkmanager.enable = true;

     

       31
       31
       +
       

     

       32
       32
       +
           security = {

     

       33
       33
       +
             polkit.enable = true;

     

       34
       34
       +
             rtkit.enable = true;

     

       35
       35
       +
       

     

       36
       36
       +
             sudo-rs = {

     

       37
       37
       +
               enable = true;

     

       38
       38
       +
               wheelNeedsPassword = false;

     

       39
       39
       +
             };

     

       40
       40
       +
           };

     

       41
       41
       +
       

     

       42
       42
       +
           services = {

     

       43
       43
       +
             cachefilesd = {

     

       44
       44
       +
               enable = true;

     

       45
       45
       +
       

     

       46
       46
       +
               extraConfig = ''

     

       47
       47
       +
                 brun 20%

     

       48
       48
       +
                 bcull 10%

     

       49
       49
       +
                 bstop 5%

     

       50
       50
       +
               '';

     

       51
       51
       +
             };

     

       52
       52
       +
       

     

       53
       53
       +
             openssh = {

     

       54
       54
       +
               enable = true;

     

       55
       55
       +
               openFirewall = true;

     

       56
       56
       +
               settings.PasswordAuthentication = false;

     

       57
       57
       +
             };

     

       58
       58
       +
           };

     

       59
       59
       +
       

     

       60
       60
       +
           system = {

     

       61
       61
       +
             configurationRevision = self.rev or self.dirtyRev or null;

     

       62
       62
       +
             nixos.tags = ["base"];

     

       63
       63
       +
             rebuild.enableNg = true;

     

       64
       64
       +
           };

     

       65
       65
       +
         };

     

       66
       66
       +
       }

modules/nixos/profiles/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./base

     

       4
       4
       +
           ./workstation

     

       5
       5
       +
         ];

     

       6
       6
       +
       }

+121

modules/nixos/profiles/workstation/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options = {

     

       8
       8
       +
           myNixOS.profiles.workstation.enable = lib.mkEnableOption "workstation optimizations for gaming, media, and desktop use.";

     

       9
       9
       +
         };

     

       10
       10
       +
       

     

       11
       11
       +
         config = lib.mkIf config.myNixOS.profiles.workstation.enable {

     

       12
       12
       +
           assertions = [

     

       13
       13
       +
             {

     

       14
       14
       +
               assertion = !(config.programs.gamemode.enable && config.services.ananicy.enable);

     

       15
       15
       +
               message = "Ananicy and GameMode cannot be enabled at the same time.";

     

       16
       16
       +
             }

     

       17
       17
       +
           ];

     

       18
       18
       +
       

     

       19
       19
       +
           boot = {

     

       20
       20
       +
             kernel.sysctl = {

     

       21
       21
       +
               # Improved file monitoring

     

       22
       22
       +
               "fs.file-max" = lib.mkDefault 2097152; # Set size of file handles and inode cache

     

       23
       23
       +
               "fs.inotify.max_user_instances" = lib.mkOverride 100 8192; # Re-use the default from Bazzite even though the default NixOS value is higher.

     

       24
       24
       +
               "fs.inotify.max_user_watches" = lib.mkOverride 100 524288;

     

       25
       25
       +
       

     

       26
       26
       +
               "kernel.nmi_watchdog" = lib.mkOverride 100 0; # Disable watchdogs for maximum performance at the cost of resiliency

     

       27
       27
       +
               "kernel.sched_cfs_bandwidth_slice_u" = lib.mkDefault 3000;

     

       28
       28
       +
               "kernel.sched_latency_ns" = lib.mkDefault 3000000;

     

       29
       29
       +
               "kernel.sched_migration_cost_ns" = lib.mkDefault 50000;

     

       30
       30
       +
               "kernel.sched_min_granularity_ns" = lib.mkDefault 300000;

     

       31
       31
       +
               "kernel.sched_nr_migrate" = lib.mkDefault 128;

     

       32
       32
       +
               "kernel.sched_wakeup_granularity_ns" = lib.mkDefault 500000;

     

       33
       33
       +
               "kernel.soft_watchdog" = lib.mkDefault 0;

     

       34
       34
       +
               "kernel.split_lock_mitigate" = lib.mkDefault 0;

     

       35
       35
       +
               # "kernel.unprivileged_userns_clone" = lib.mkDefault 1;

     

       36
       36
       +
               "kernel.watchdog" = lib.mkDefault 0;

     

       37
       37
       +
       

     

       38
       38
       +
               # Network optimizations

     

       39
       39
       +
               "net.core.default_qdisc" = lib.mkDefault "fq";

     

       40
       40
       +
               "net.core.netdev_max_backlog" = lib.mkDefault 16384; # Increase netdev receive queue

     

       41
       41
       +
               "net.ipv4.tcp_congestion_control" = lib.mkDefault "bbr";

     

       42
       42
       +
               "net.ipv4.tcp_ecn" = lib.mkDefault 1;

     

       43
       43
       +
               "net.ipv4.tcp_fastopen" = lib.mkDefault 3;

     

       44
       44
       +
               "net.ipv4.tcp_fin_timeout" = lib.mkDefault 5;

     

       45
       45
       +
               "net.ipv4.tcp_mtu_probing" = lib.mkForce 1;

     

       46
       46
       +
               "net.ipv4.tcp_rfc1337" = lib.mkDefault 1; # Protect against tcp time-wait assassination hazards, drop RST packets for sockets in the time-wait state. Not widely supported outside of Linux, but conforms to RFC.

     

       47
       47
       +
               "net.ipv4.tcp_slow_start_after_idle" = 0; # Disable TCP slow start after idle

     

       48
       48
       +
               # "net.ipv4.tcp_timestamps" = lib.mkDefault 0; # https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux_for_real_time/7/html/tuning_guide/reduce_tcp_performance_spikes

     

       49
       49
       +
       

     

       50
       50
       +
               # Memory management

     

       51
       51
       +
               "vm.dirty_background_bytes" = lib.mkDefault 134217728;

     

       52
       52
       +
               "vm.dirty_bytes" = lib.mkDefault 268435456;

     

       53
       53
       +
               "vm.dirty_writeback_centisecs" = lib.mkDefault 1500;

     

       54
       54
       +
               "vm.max_map_count" = lib.mkOverride 100 2147483642;

     

       55
       55
       +
               "vm.page-cluster" = lib.mkDefault 0;

     

       56
       56
       +
               "vm.swappiness" = lib.mkDefault 150;

     

       57
       57
       +
               "vm.vfs_cache_pressure" = lib.mkDefault 50;

     

       58
       58
       +
               "vm.watermark_boost_factor" = lib.mkDefault 0;

     

       59
       59
       +
               "vm.watermark_scale_factor" = lib.mkDefault 125;

     

       60
       60
       +
             };

     

       61
       61
       +
       

     

       62
       62
       +
             # kernelModules = ["ntsync"];

     

       63
       63
       +
             kernelPackages = pkgs.linuxPackages_latest;

     

       64
       64
       +
           };

     

       65
       65
       +
       

     

       66
       66
       +
           services = {

     

       67
       67
       +
             ananicy = {

     

       68
       68
       +
               enable = true; # Incompatible/not recommended with gamemode.

     

       69
       69
       +
       

     

       70
       70
       +
               extraRules = [

     

       71
       71
       +
                 {

     

       72
       72
       +
                   name = ".easyeffects-wr";

     

       73
       73
       +
                   type = "LowLatency_RT";

     

       74
       74
       +
                 }

     

       75
       75
       +
               ];

     

       76
       76
       +
       

     

       77
       77
       +
               package = pkgs.ananicy-cpp;

     

       78
       78
       +
               rulesProvider = pkgs.ananicy-rules-cachyos;

     

       79
       79
       +
             };

     

       80
       80
       +
       

     

       81
       81
       +
             bpftune.enable = true;

     

       82
       82
       +
             preload.enable = true;

     

       83
       83
       +
       

     

       84
       84
       +
             udev.extraRules = ''

     

       85
       85
       +
               ## SD cards use BFQ scheduler.

     

       86
       86
       +
               ACTION=="add|change", KERNEL=="mmcblk[0-9]p[0-9]", ATTR{queue/rotational}=="0", ATTR{queue/scheduler}="bfq"

     

       87
       87
       +
       

     

       88
       88
       +
               ## NVMe SSDs use kyber scheduler.

     

       89
       89
       +
               ACTION=="add|change", KERNEL=="nvme[0-9]n[0-9]", ATTR{queue/rotational}=="0", ATTR{queue/scheduler}="kyber"

     

       90
       90
       +
       

     

       91
       91
       +
               ## SSDs use kyber scheduler.

     

       92
       92
       +
               ACTION=="add|change", KERNEL=="sd[a-z]", ATTR{queue/rotational}=="0", ATTR{queue/scheduler}="kyber"

     

       93
       93
       +
       

     

       94
       94
       +
               ## HDDs use BFQ scheduler.

     

       95
       95
       +
               ACTION=="add|change", KERNEL=="sd[a-z]", ATTR{queue/rotational}=="1", ATTR{queue/scheduler}="bfq"

     

       96
       96
       +
       

     

       97
       97
       +
               ## Allow @audio to write to /dev/cpu_dma_latency.

     

       98
       98
       +
               DEVPATH=="/devices/virtual/misc/cpu_dma_latency", OWNER="root",GROUP="audio", MODE="0660"

     

       99
       99
       +
       

     

       100
       100
       +
               ## Allow users to write to /dev/ntsync.

     

       101
       101
       +
               # KERNEL=="ntsync", MODE="0644"

     

       102
       102
       +
             '';

     

       103
       103
       +
           };

     

       104
       104
       +
       

     

       105
       105
       +
           system.nixos.tags = ["workstation"];

     

       106
       106
       +
       

     

       107
       107
       +
           systemd.oomd = {

     

       108
       108
       +
             enable = true;

     

       109
       109
       +
             enableRootSlice = true;

     

       110
       110
       +
             enableSystemSlice = true;

     

       111
       111
       +
             enableUserSlices = true;

     

       112
       112
       +
           };

     

       113
       113
       +
       

     

       114
       114
       +
           zramSwap = {

     

       115
       115
       +
             enable = lib.mkDefault true;

     

       116
       116
       +
             algorithm = lib.mkDefault "lz4";

     

       117
       117
       +
             priority = lib.mkDefault 100;

     

       118
       118
       +
             memoryPercent = lib.mkDefault 100;

     

       119
       119
       +
           };

     

       120
       120
       +
         };

     

       121
       121
       +
       }

+10

modules/nixos/programs/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./lanzaboote

     

       4
       4
       +
           ./nix-ld

     

       5
       5
       +
           ./steam

     

       6
       6
       +
           ./nix

     

       7
       7
       +
           ./firefox

     

       8
       8
       +
           ./systemd-boot

     

       9
       9
       +
         ];

     

       10
       10
       +
       }

+117

modules/nixos/programs/firefox/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myNixOS.programs.firefox.enable = lib.mkEnableOption "firefox browser";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myNixOS.programs.firefox.enable {

     

       9
       9
       +
           programs.firefox = {

     

       10
       10
       +
             enable = true;

     

       11
       11
       +
       

     

       12
       12
       +
             policies = {

     

       13
       13
       +
               Cookies.Behavior = "reject-foreign";

     

       14
       14
       +
               DisableAppUpdate = true;

     

       15
       15
       +
               DisableFirefoxStudies = true;

     

       16
       16
       +
               DisableMasterPasswordCreation = true;

     

       17
       17
       +
               DisablePocket = true;

     

       18
       18
       +
               DisableProfileImport = true;

     

       19
       19
       +
               DisableSetDesktopBackground = true;

     

       20
       20
       +
               DisableTelemetry = true;

     

       21
       21
       +
               DisplayBookmarksToolbar = "newtab";

     

       22
       22
       +
               DisableFirefoxAccounts = true;

     

       23
       23
       +
               DisableSafeMode = true;

     

       24
       24
       +
       

     

       25
       25
       +
               AutofillAddressEnabled = false;

     

       26
       26
       +
               AutofillCreditCardEnabled = false;

     

       27
       27
       +
       

     

       28
       28
       +
               HttpsOnlyMode = "enabled";

     

       29
       29
       +
       

     

       30
       30
       +
               DNSOverHTTPS = {

     

       31
       31
       +
                 Enabled = true;

     

       32
       32
       +
                 Fallback = true;

     

       33
       33
       +
               };

     

       34
       34
       +
       

     

       35
       35
       +
               DontCheckDefaultBrowser = true;

     

       36
       36
       +
       

     

       37
       37
       +
               EnableTrackingProtection = {

     

       38
       38
       +
                 Cryptomining = true;

     

       39
       39
       +
                 Fingerprinting = true;

     

       40
       40
       +
                 EmailTracking = true;

     

       41
       41
       +
                 Locked = false;

     

       42
       42
       +
                 Value = true;

     

       43
       43
       +
               };

     

       44
       44
       +
       

     

       45
       45
       +
               EncryptedMediaExtensions = {

     

       46
       46
       +
                 Enabled = true;

     

       47
       47
       +
                 Locked = false;

     

       48
       48
       +
               };

     

       49
       49
       +
       

     

       50
       50
       +
               FirefoxHome = {

     

       51
       51
       +
                 Highlights = false;

     

       52
       52
       +
                 Locked = false;

     

       53
       53
       +
                 Pocket = false;

     

       54
       54
       +
                 Search = true;

     

       55
       55
       +
                 Snippets = false;

     

       56
       56
       +
                 SponsoredPocket = false;

     

       57
       57
       +
                 SponsoredTopSites = false;

     

       58
       58
       +
                 TopSites = false;

     

       59
       59
       +
               };

     

       60
       60
       +
       

     

       61
       61
       +
               FirefoxSuggest = {

     

       62
       62
       +
                 ImproveSuggest = false;

     

       63
       63
       +
                 Locked = false;

     

       64
       64
       +
                 SponsoredSuggestions = false;

     

       65
       65
       +
                 WebSuggestions = false;

     

       66
       66
       +
               };

     

       67
       67
       +
       

     

       68
       68
       +
               HardwareAcceleration = true;

     

       69
       69
       +
       

     

       70
       70
       +
               Homepage = {

     

       71
       71
       +
                 Locked = false;

     

       72
       72
       +
                 StartPage = "previous-session";

     

       73
       73
       +
               };

     

       74
       74
       +
       

     

       75
       75
       +
               NewTabPage = false;

     

       76
       76
       +
               NoDefaultBookmarks = true; # Enabling this prevents declaratively setting bookmarks.

     

       77
       77
       +
               OfferToSaveLoginsDefault = false;

     

       78
       78
       +
               OverrideFirstRunPage = "";

     

       79
       79
       +
               OverridePostUpdatePage = "";

     

       80
       80
       +
       

     

       81
       81
       +
               PDFjs = {

     

       82
       82
       +
                 Enabled = true;

     

       83
       83
       +
                 EnablePermissions = false;

     

       84
       84
       +
               };

     

       85
       85
       +
       

     

       86
       86
       +
               Preferences = {

     

       87
       87
       +
                 # Do not add the extra "Import Bookmarks" button in the bookmarks interface

     

       88
       88
       +
                 "browser.bookmarks.addedImportButton" = false;

     

       89
       89
       +
       

     

       90
       90
       +
                 # Mark that the user has accepted the data reporting (telemetry) policy

     

       91
       91
       +
                 "datareporting.policy.dataSubmissionPolicyAccepted" = false;

     

       92
       92
       +
       

     

       93
       93
       +
                 # Allow extensions from all scopes (profile, system, etc.) without auto-disabling them

     

       94
       94
       +
                 "extensions.autoDisableScopes" = 0;

     

       95
       95
       +
       

     

       96
       96
       +
                 # Enable VA-API hardware video decoding via FFmpeg (useful on Linux systems)

     

       97
       97
       +
                 "media.ffmpeg.vaapi.enabled" = true;

     

       98
       98
       +
       

     

       99
       99
       +
                 # Enable the VP8/VP9 media data decoder, used in WebRTC and video playback

     

       100
       100
       +
                 "media.navigator.mediadatadecoder_vpx_enabled" = true;

     

       101
       101
       +
       

     

       102
       102
       +
                 # Enable the Remote Data Decoder (RDD) process for FFmpeg to isolate media decoding tasks

     

       103
       103
       +
                 "media.rdd-ffmpeg.enabled" = true;

     

       104
       104
       +
               };

     

       105
       105
       +
       

     

       106
       106
       +
               UserMessaging = {

     

       107
       107
       +
                 ExtensionRecommendations = false;

     

       108
       108
       +
                 FeatureRecommendations = false;

     

       109
       109
       +
                 MoreFromMozilla = false;

     

       110
       110
       +
                 SkipOnboarding = true;

     

       111
       111
       +
               };

     

       112
       112
       +
       

     

       113
       113
       +
               UseSystemPrintDialog = true;

     

       114
       114
       +
             };

     

       115
       115
       +
           };

     

       116
       116
       +
         };

     

       117
       117
       +
       }

+54

modules/nixos/programs/lanzaboote/README.md

···

       1
       1
       +
       # Secure Boot + Automatic LUKS decryption

     

       2
       2
       +
       

     

       3
       3
       +
       1. Generate secure boot keys:

     

       4
       4
       +
       

     

       5
       5
       +
          ```bash

     

       6
       6
       +
          sudo nix run nixpkgs#sbctl create-keys

     

       7
       7
       +
          ```

     

       8
       8
       +
       

     

       9
       9
       +
       1. Include `nixos-programs-lanzaboote` or manually enable lanzaboote in NixOS host configuration:

     

       10
       10
       +
       

     

       11
       11
       +
          ```nix

     

       12
       12
       +
          boot = {

     

       13
       13
       +
            initrd.systemd.enable = true; # For automatic decryption with TPM.

     

       14
       14
       +
            loader.systemd-boot.enable = lib.mkForce false; # Interferes with lanzaboote and must be force-disabled.

     

       15
       15
       +
       

     

       16
       16
       +
            lanzaboote = {

     

       17
       17
       +
              enable = true;

     

       18
       18
       +
              pkiBundle = "/var/lib/sbctl";

     

       19
       19
       +
            };

     

       20
       20
       +
          };

     

       21
       21
       +
          ```

     

       22
       22
       +
       

     

       23
       23
       +
       1. In UEFI, set secure boot to "setup mode" or erase platform keys.

     

       24
       24
       +
       

     

       25
       25
       +
       1. Enroll your secure boot keys:

     

       26
       26
       +
       

     

       27
       27
       +
          ```bash

     

       28
       28
       +
          sudo nix run nixpkgs#sbctl -- enroll-keys --microsoft

     

       29
       29
       +
          ```

     

       30
       30
       +
       

     

       31
       31
       +
       1. Reboot, make sure secure boot is enabled in UEFI.

     

       32
       32
       +
       

     

       33
       33
       +
       1. Check secure boot status with `bootctl status`:

     

       34
       34
       +
       

     

       35
       35
       +
          ```bash

     

       36
       36
       +
          System:

     

       37
       37
       +
                Firmware: UEFI 2.70 (American Megatrends 5.17)

     

       38
       38
       +
          Firmware Arch: x64

     

       39
       39
       +
            Secure Boot: enabled (user)

     

       40
       40
       +
            TPM2 Support: yes

     

       41
       41
       +
            Measured UKI: yes

     

       42
       42
       +
            Boot into FW: supported

     

       43
       43
       +
          ```

     

       44
       44
       +
       

     

       45
       45
       +
       1. If your root drive is encrypted with LUKS, you can have the TPM automatically decrypt it on boot:

     

       46
       46
       +
       

     

       47
       47
       +
          ```bash

     

       48
       48
       +
          sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+2+7+12 --wipe-slot=tpm2 /dev/nvme0n1p2

     

       49
       49
       +
          ```

     

       50
       50
       +
       

     

       51
       51
       +
          Replace `/dev/nvme0n1p2` with your root partition.

     

       52
       52
       +
          Check the [Linux TPM PCR Registry](https://uapi-group.org/specifications/specs/linux_tpm_pcr_registry/) for more details.

     

       53
       53
       +
       

     

       54
       54
       +
          **NOTE:** This requires a TPM2 module, devices with prior versions will not work.

+25

modules/nixos/programs/lanzaboote/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myNixOS.programs.lanzaboote.enable = lib.mkEnableOption "secure boot with lanzaboote";

     

       8
       8
       +
       

     

       9
       9
       +
         config = lib.mkIf config.myNixOS.programs.lanzaboote.enable {

     

       10
       10
       +
           boot = {

     

       11
       11
       +
             initrd.systemd.enable = true;

     

       12
       12
       +
       

     

       13
       13
       +
             lanzaboote = {

     

       14
       14
       +
               enable = true;

     

       15
       15
       +
               configurationLimit = 10;

     

       16
       16
       +
               pkiBundle = lib.mkDefault "/var/lib/sbctl";

     

       17
       17
       +
               sortKey = "lanza";

     

       18
       18
       +
             };

     

       19
       19
       +
       

     

       20
       20
       +
             loader.systemd-boot.enable = lib.mkForce false;

     

       21
       21
       +
           };

     

       22
       22
       +
       

     

       23
       23
       +
           environment.systemPackages = [pkgs.sbctl];

     

       24
       24
       +
         };

     

       25
       25
       +
       }

+24

modules/nixos/programs/nix-ld/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         pkgs,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         config,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myNixOS.programs.nix-ld.enable = lib.mkEnableOption "so you can run non nix apps!";

     

       8
       8
       +
       

     

       9
       9
       +
         config = lib.mkIf config.myNixOS.programs.nix.enable {

     

       10
       10
       +
           # Enable nix-ld for running non-NixOS binaries like language servers

     

       11
       11
       +
           programs.nix-ld = {

     

       12
       12
       +
             enable = true;

     

       13
       13
       +
             libraries = with pkgs; [

     

       14
       14
       +
               # Common libraries that might be needed by language servers

     

       15
       15
       +
               stdenv.cc.cc

     

       16
       16
       +
               openssl

     

       17
       17
       +
               zlib

     

       18
       18
       +
               curl

     

       19
       19
       +
               glibc

     

       20
       20
       +
               (pkgs.runCommand "steamrun-lib" {} "mkdir $out; ln -s ${pkgs.steam-run.fhsenv}/usr/lib64 $out/lib")

     

       21
       21
       +
             ];

     

       22
       22
       +
           };

     

       23
       23
       +
         };

     

       24
       24
       +
       }

+31

modules/nixos/programs/nix/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myNixOS.programs.nix.enable = lib.mkEnableOption "sane nix configuration";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myNixOS.programs.nix.enable {

     

       9
       9
       +
           nix = {

     

       10
       10
       +
             gc = {

     

       11
       11
       +
               automatic = true;

     

       12
       12
       +
       

     

       13
       13
       +
               options = "--delete-older-than 3d";

     

       14
       14
       +
       

     

       15
       15
       +
               persistent = true;

     

       16
       16
       +
               randomizedDelaySec = "60min";

     

       17
       17
       +
             };

     

       18
       18
       +
       

     

       19
       19
       +
             optimise = {

     

       20
       20
       +
               automatic = true;

     

       21
       21
       +
               persistent = true;

     

       22
       22
       +
               randomizedDelaySec = "60min";

     

       23
       23
       +
             };

     

       24
       24
       +
       

     

       25
       25
       +
             settings.experimental-features = [

     

       26
       26
       +
               "nix-command"

     

       27
       27
       +
               "flakes"

     

       28
       28
       +
             ];

     

       29
       29
       +
           };

     

       30
       30
       +
         };

     

       31
       31
       +
       }

+16

modules/nixos/programs/steam/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myNixOS.programs.steam.enable = lib.mkEnableOption "the game launcher that sucks";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myNixOS.programs.steam.enable {

     

       9
       9
       +
           programs.steam = {

     

       10
       10
       +
             enable = true;

     

       11
       11
       +
             remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play

     

       12
       12
       +
             dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server

     

       13
       13
       +
             localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers

     

       14
       14
       +
           };

     

       15
       15
       +
         };

     

       16
       16
       +
       }

+22

modules/nixos/programs/systemd-boot/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         options.myNixOS.programs.systemd-boot.enable = lib.mkEnableOption "boot with systemd-boot";

     

       7
       7
       +
       

     

       8
       8
       +
         config = lib.mkIf config.myNixOS.programs.systemd-boot.enable {

     

       9
       9
       +
           boot = {

     

       10
       10
       +
             initrd.systemd.enable = lib.mkDefault true;

     

       11
       11
       +
       

     

       12
       12
       +
             loader = {

     

       13
       13
       +
               efi.canTouchEfiVariables = lib.mkDefault true;

     

       14
       14
       +
       

     

       15
       15
       +
               systemd-boot = {

     

       16
       16
       +
                 enable = lib.mkDefault true;

     

       17
       17
       +
                 configurationLimit = lib.mkDefault 10;

     

       18
       18
       +
               };

     

       19
       19
       +
             };

     

       20
       20
       +
           };

     

       21
       21
       +
         };

     

       22
       22
       +
       }

+26

modules/nixos/services/aria2/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         pkgs,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         config,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myNixOS.services.aria2 = {

     

       8
       8
       +
           enable = lib.mkEnableOption "Aria2 service";

     

       9
       9
       +
         };

     

       10
       10
       +
       

     

       11
       11
       +
         config = lib.mkIf config.myNixOS.services.aria2.enable {

     

       12
       12
       +
           systemd.user.services.aria2 = {

     

       13
       13
       +
             description = "aria2 daemon";

     

       14
       14
       +
             after = ["network.target"];

     

       15
       15
       +
             wantedBy = ["default.target"];

     

       16
       16
       +
             serviceConfig = {

     

       17
       17
       +
               ExecStart = "${pkgs.aria2}/bin/aria2c --enable-rpc --rpc-listen-all --rpc-allow-origin-all --dir=%h/Downloads";

     

       18
       18
       +
               Restart = "always";

     

       19
       19
       +
               RestartSec = "10";

     

       20
       20
       +
               Type = "forking";

     

       21
       21
       +
               WorkingDirectory = "%h";

     

       22
       22
       +
               Environment = "HOME=%h";

     

       23
       23
       +
             };

     

       24
       24
       +
           };

     

       25
       25
       +
         };

     

       26
       26
       +
       }

modules/nixos/services/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./tailscale

     

       4
       4
       +
           ./aria2

     

       5
       5
       +
         ];

     

       6
       6
       +
       }

+31

modules/nixos/services/tailscale/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         config,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         options.myNixOS.services.tailscale = {

     

       8
       8
       +
           enable = lib.mkEnableOption "Tailscale VPN service";

     

       9
       9
       +
         };

     

       10
       10
       +
       

     

       11
       11
       +
         config = lib.mkIf config.myNixOS.services.tailscale.enable (

     

       12
       12
       +
           lib.mkMerge [

     

       13
       13
       +
             (lib.mkIf config.myNixOS.desktop.gnome.enable {

     

       14
       14
       +
               environment.systemPackages = with pkgs; [

     

       15
       15
       +
                 gnomeExtensions.tailscale-qs

     

       16
       16
       +
               ];

     

       17
       17
       +
             })

     

       18
       18
       +
       

     

       19
       19
       +
             {

     

       20
       20
       +
               services.tailscale = {

     

       21
       21
       +
                 enable = true;

     

       22
       22
       +
                 extraUpFlags = ["--ssh"];

     

       23
       23
       +
                 extraSetFlags = ["--advertise-exit-node"];

     

       24
       24
       +
                 extraDaemonFlags = ["--no-logs-no-support"];

     

       25
       25
       +
                 openFirewall = true;

     

       26
       26
       +
                 useRoutingFeatures = "both";

     

       27
       27
       +
               };

     

       28
       28
       +
             }

     

       29
       29
       +
           ]

     

       30
       30
       +
         );

     

       31
       31
       +
       }

modules/nixos/style/default.nix

···

       1
       1
       +
       {...}: {

     

       2
       2
       +
         imports = [

     

       3
       3
       +
           ./fonts

     

       4
       4
       +
         ];

     

       5
       5
       +
       }

+112

modules/nixos/style/fonts/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         pkgs,

     

       3
       3
       +
         lib,

     

       4
       4
       +
         config,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: let

     

       7
       7
       +
         emojiFont = "Noto Color Emoji";

     

       8
       8
       +
       in {

     

       9
       9
       +
         options.myNixOS.style.fonts = {

     

       10
       10
       +
           enable = lib.mkEnableOption "enable fonts";

     

       11
       11
       +
         };

     

       12
       12
       +
       

     

       13
       13
       +
         config = lib.mkIf config.myNixOS.style.fonts.enable {

     

       14
       14
       +
           environment.variables = {

     

       15
       15
       +
             FREETYPE_PROPERTIES = "autofitter:no-stem-darkening=0 autofitter:darkening-parameters=500,0,1000,500,2500,500,4000,0 cff:no-stem-darkening=0 type1:no-stem-darkening=0 t1cid:no-stem-darkening=0";

     

       16
       16
       +
             QT_NO_SYNTHESIZED_BOLD = 1;

     

       17
       17
       +
           };

     

       18
       18
       +
           fonts.packages = with pkgs; [

     

       19
       19
       +
             noto-fonts

     

       20
       20
       +
             noto-fonts-cjk-sans

     

       21
       21
       +
             noto-fonts-emoji

     

       22
       22
       +
             noto-fonts-color-emoji

     

       23
       23
       +
             roboto-flex

     

       24
       24
       +
             roboto

     

       25
       25
       +
             nerd-fonts.jetbrains-mono

     

       26
       26
       +
             jetbrains-mono

     

       27
       27
       +
             source-code-pro

     

       28
       28
       +
             liberation_ttf

     

       29
       29
       +
           ];

     

       30
       30
       +
       

     

       31
       31
       +
           fonts.fontconfig = {

     

       32
       32
       +
             enable = true;

     

       33
       33
       +
             includeUserConf = false;

     

       34
       34
       +
             defaultFonts = {

     

       35
       35
       +
               serif = [

     

       36
       36
       +
                 "Noto Serif"

     

       37
       37
       +
                 "NotoSerifCJK"

     

       38
       38
       +
                 "Noto Serif CJK JP"

     

       39
       39
       +
               ];

     

       40
       40
       +
               sansSerif = [

     

       41
       41
       +
                 "Roboto Flex"

     

       42
       42
       +
                 "Roboto"

     

       43
       43
       +
                 "Noto Sans"

     

       44
       44
       +
                 "NotoSansCJK"

     

       45
       45
       +
                 "Noto Sans CJK JP"

     

       46
       46
       +
               ];

     

       47
       47
       +
               monospace = [

     

       48
       48
       +
                 "JetBrains Mono NL"

     

       49
       49
       +
                 "Source Code Pro"

     

       50
       50
       +
                 "Noto Sans CJK JP"

     

       51
       51
       +
               ];

     

       52
       52
       +
             };

     

       53
       53
       +
             useEmbeddedBitmaps = true;

     

       54
       54
       +
             subpixel = {

     

       55
       55
       +
               lcdfilter = "none";

     

       56
       56
       +
               rgba = "none";

     

       57
       57
       +
             };

     

       58
       58
       +
             antialias = true;

     

       59
       59
       +
             hinting = {

     

       60
       60
       +
               enable = true;

     

       61
       61
       +
               style = "slight";

     

       62
       62
       +
               autohint = false;

     

       63
       63
       +
             };

     

       64
       64
       +
             localConf = ''

     

       65
       65
       +
               <?xml version="1.0"?>

     

       66
       66
       +
               <!DOCTYPE fontconfig SYSTEM "fonts.dtd">

     

       67
       67
       +
               <fontconfig>

     

       68
       68
       +
                 <match target="pattern">

     

       69
       69
       +
                   <test qual="any" name="family"><string>emoji</string></test>

     

       70
       70
       +
                   <edit name="family" mode="assign" binding="same"><string>${emojiFont}</string></edit>

     

       71
       71
       +
                 </match>

     

       72
       72
       +
                 <match target="pattern">

     

       73
       73
       +
                   <test name="family"><string>sans</string></test>

     

       74
       74
       +
                   <edit name="family" mode="append"><string>${emojiFont}</string></edit>

     

       75
       75
       +
                 </match>

     

       76
       76
       +
                 <match target="pattern">

     

       77
       77
       +
                   <test name="family"><string>serif</string></test>

     

       78
       78
       +
                   <edit name="family" mode="append"><string>${emojiFont}</string></edit>

     

       79
       79
       +
                 </match>

     

       80
       80
       +
                 <match target="pattern">

     

       81
       81
       +
                   <test name="family"><string>sans-serif</string></test>

     

       82
       82
       +
                   <edit name="family" mode="append"><string>${emojiFont}</string></edit>

     

       83
       83
       +
                 </match>

     

       84
       84
       +
                 <match target="pattern">

     

       85
       85
       +
                   <test name="family"><string>monospace</string></test>

     

       86
       86
       +
                   <edit name="family" mode="append"><string>${emojiFont}</string></edit>

     

       87
       87
       +
                 </match>

     

       88
       88
       +
                 <match target="pattern">

     

       89
       89
       +
                   <test name="family"><string>system-ui</string></test>

     

       90
       90
       +
                   <edit name="family" mode="append"><string>${emojiFont}</string></edit>

     

       91
       91
       +
                 </match>

     

       92
       92
       +
       

     

       93
       93
       +
                 <match target="font">

     

       94
       94
       +
                   <test name="family"><string>Calibri</string></test>

     

       95
       95
       +
                   <edit name="embeddedbitmap" mode="assign"><bool>false</bool></edit>

     

       96
       96
       +
                 </match>

     

       97
       97
       +
                 <match target="font">

     

       98
       98
       +
                   <test name="family"><string>Cambria</string></test>

     

       99
       99
       +
                   <edit name="embeddedbitmap" mode="assign"><bool>false</bool></edit>

     

       100
       100
       +
                 </match>

     

       101
       101
       +
       

     

       102
       102
       +
                 <selectfont>

     

       103
       103
       +
                   <rejectfont>

     

       104
       104
       +
                     <pattern><patelt name="family"><string>Droid Sans Fallback</string></patelt></pattern>

     

       105
       105
       +
                     <pattern><patelt name="family"><string>Droid Sans Japanese</string></patelt></pattern>

     

       106
       106
       +
                   </rejectfont>

     

       107
       107
       +
                 </selectfont>

     

       108
       108
       +
               </fontconfig>

     

       109
       109
       +
             '';

     

       110
       110
       +
           };

     

       111
       111
       +
         };

     

       112
       112
       +
       }

+14

modules/users/ayla/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         pkgs,

     

       3
       3
       +
         config,

     

       4
       4
       +
         ...

     

       5
       5
       +
       }: {

     

       6
       6
       +
         users.users.ayla = {

     

       7
       7
       +
           description = "Ayla";

     

       8
       8
       +
           isNormalUser = true;

     

       9
       9
       +
           extraGroups = config.myUsers.defaultGroups;

     

       10
       10
       +
           hashedPassword = config.myUsers.ayla.password;

     

       11
       11
       +
           uid = 1000;

     

       12
       12
       +
           shell = pkgs.fish;

     

       13
       13
       +
         };

     

       14
       14
       +
       }

+20

modules/users/default.nix

···

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }: {

     

       7
       7
       +
         imports = [

     

       8
       8
       +
           ./ayla

     

       9
       9
       +
           ./options.nix

     

       10
       10
       +
         ];

     

       11
       11
       +
       

     

       12
       12
       +
         config = lib.mkIf (config.myUsers.root.enable or config.myUsers.ayla) {

     

       13
       13
       +
           programs.fish.enable = true;

     

       14
       14
       +
       

     

       15
       15
       +
           users = {

     

       16
       16
       +
             defaultUserShell = pkgs.fish;

     

       17
       17
       +
             mutableUsers = false;

     

       18
       18
       +
           };

     

       19
       19
       +
         };

     

       20
       20
       +
       }

+37

modules/users/options.nix

···

       1
       1
       +
       {lib, ...}: {

     

       2
       2
       +
         options.myUsers = let

     

       3
       3
       +
           mkUser = user: {

     

       4
       4
       +
             enable = lib.mkEnableOption "${user}.";

     

       5
       5
       +
       

     

       6
       6
       +
             password = lib.mkOption {

     

       7
       7
       +
               default = null;

     

       8
       8
       +
               description = "Hashed password for ${user}.";

     

       9
       9
       +
               type = lib.types.nullOr lib.types.str;

     

       10
       10
       +
             };

     

       11
       11
       +
           };

     

       12
       12
       +
         in {

     

       13
       13
       +
           defaultGroups = lib.mkOption {

     

       14
       14
       +
             description = "Default groups for desktop users.";

     

       15
       15
       +
             default = [

     

       16
       16
       +
               "cdrom"

     

       17
       17
       +
               "dialout"

     

       18
       18
       +
               "docker"

     

       19
       19
       +
               "libvirtd"

     

       20
       20
       +
               "lp"

     

       21
       21
       +
               "networkmanager"

     

       22
       22
       +
               "plugdev"

     

       23
       23
       +
               "scanner"

     

       24
       24
       +
               "transmission"

     

       25
       25
       +
               "video"

     

       26
       26
       +
               "wheel"

     

       27
       27
       +
             ];

     

       28
       28
       +
           };

     

       29
       29
       +
       

     

       30
       30
       +
           root.enable =

     

       31
       31
       +
             lib.mkEnableOption "root user configuration."

     

       32
       32
       +
             // {

     

       33
       33
       +
               default = true;

     

       34
       34
       +
             };

     

       35
       35
       +
           ayla = mkUser "ayla";

     

       36
       36
       +
         };

     

       37
       37
       +
       }