···

       
1
       
-
       
name: Deploy NixOS Configurations

     

       
2
       
-
       


     

       
3
       
-
       
on:

     

       
4
       
-
       
  push:

     

       
5
       
-
       
    branches:

     

       
6
       
-
       
      - main

     

       
7
       
-
       
  workflow_dispatch:

     

       
8
       
-
       


     

       
9
       
-
       
jobs:

     

       
10
       
-
       
  deploy:

     

       
11
       
-
       
    runs-on: ubuntu-latest

     

       
12
       
-
       
    steps:

     

       
13
       
-
       
      - uses: actions/checkout@v4

     

       
14
       
-
       
      

     

       
15
       
-
       
      - name: Install Nix

     

       
16
       
-
       
        uses: DeterminateSystems/determinate-nix-action@main

     

       
17
       
-
       
      

     

       
18
       
-
       
      - name: Setup Tailscale

     

       
19
       
-
       
        uses: tailscale/github-action@v3

     

       
20
       
-
       
        with:

     

       
21
       
-
       
          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}

     

       
22
       
-
       
          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}

     

       
23
       
-
       
          tags: tag:deploy

     

       
24
       
-
       
          use-cache: "true"

     

       
25
       
-
       
      

     

       
26
       
-
       
      - name: Configure SSH

     

       
27
       
-
       
        run: |

     

       
28
       
-
       
          mkdir -p ~/.ssh

     

       
29
       
-
       
          echo "StrictHostKeyChecking accept-new" >> ~/.ssh/config

     

       
30
       
-
       
      

     

       
31
       
-
       
      - name: Deploy all configurations

     

       
32
       
-
       
        run: |

     

       
33
       
-
       
          nix run github:serokell/deploy-rs -- \

     

       
34
       
-
       
            --skip-checks \

     

       
35
       
-
       
            --remote-build \

     

       
36
       
-
       
            --ssh-user kierank \

     

       
37
       
-
       
            --ssh-opts="-o StrictHostKeyChecking=accept-new" \

     

       
38
       
-
       
            .

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
-
       
.crush

     

       
2
       
-
       
.DS_Store

     

···

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
-
       
The MIT License (MIT)

     

       
2
       
-
       
=====================

     

       
3
       
-
       


     

       
4
       
-
       
Copyright © `2025` `Kieran Klukas`

     

       
5
       
-
       


     

       
6
       
-
       
Permission is hereby granted, free of charge, to any person

     

       
7
       
-
       
obtaining a copy of this software and associated documentation

     

       
8
       
-
       
files (the “Software”), to deal in the Software without

     

       
9
       
-
       
restriction, including without limitation the rights to use,

     

       
10
       
-
       
copy, modify, merge, publish, distribute, sublicense, and/or sell

     

       
11
       
-
       
copies of the Software, and to permit persons to whom the

     

       
12
       
-
       
Software is furnished to do so, subject to the following

     

       
13
       
-
       
conditions:

     

       
14
       
-
       


     

       
15
       
-
       
The above copyright notice and this permission notice shall be

     

       
16
       
-
       
included in all copies or substantial portions of the Software.

     

       
17
       
-
       


     

       
18
       
-
       
THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND,

     

       
19
       
-
       
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES

     

       
20
       
-
       
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND

     

       
21
       
-
       
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT

     

       
22
       
-
       
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,

     

       
23
       
-
       
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING

     

       
24
       
-
       
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR

     

       
25
       
-
       
OTHER DEALINGS IN THE SOFTWARE.

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
 
       
# Kieran's Dots

     

       
2
       
 
       


     

       
3
       
-
       
![nix rebuild with flake update](.github/images/nix-update.webp)

     

       
4
       
 
       


     

       
5
       
 
       
> [!CAUTION]

     

       
6
       
-
       
> These dots are highly prone to change / breakage.

     

       
7
       
-
       
>

     

       
8
       
-
       
> ~I am not a nix os expert (this is my first time touching nix), so I'm not sure if this will work or not. I'm just trying to get my dots up on github.~

     

       
9
       
-
       
>

     

       
10
       
-
       
> After `284` successful days of these dots being in constant operation, many many rebuilds, and `364` commits these dots have been rock solid and I have no complaints.

     

       
11
       
-
       


     

       
12
       
-
       
## The layout

     

       
13
       
-
       


     

       
14
       
-
       
```bash

     

       
15
       
-
       
~/dots # symlinked to /etc/nixos

     

       
16
       
-
       
├── dots # any config files that need to be symlinked go here, e.g. my hyprland config

     

       
17
       
-
       
│   └── wallpapers

     

       
18
       
-
       
├── machines

     

       
19
       
-
       
│   ├── atalanta # my macOS M4 machine

     

       
20
       
-
       
│   ├── ember # my dell r210 server (in my basement)

     

       
21
       
-
       
│   ├── john # shared server for cedarville

     

       
22
       
-
       
│   ├── moonlark # my framework 13 <dead>

     

       
23
       
-
       
│   ├── nest # shared tilde server through hc

     

       
24
       
-
       
│   ├── prattle # oracle cloud x86_64 server

     

       
25
       
-
       
│   ├── tacyon # rpi 5

     

       
26
       
-
       
│   └── terebithia # oracle cloud aarch64 server

     

       
27
       
-
       
├── modules

     

       
28
       
-
       
│   ├── home # home-manager modules

     

       
29
       
-
       
│   │   ├── aesthetics # theming and wallpapers

     

       
30
       
-
       
│   │   ├── apps # any app specific config

     

       
31
       
-
       
│   │   │   └── crush # vendored for now

     

       
32
       
-
       
│   │   ├── system # home-manager system configs

     

       
33
       
-
       
│   │   └── wm # window managers; just hyprland for now

     

       
34
       
-
       
│   │       └── hyprland

     

       
35
       
-
       
│   └── nixos # nixos modules

     

       
36
       
-
       
│       ├── apps # also app specific configs

     

       
37
       
-
       
│       └── system # pam and my fancy wifi module for now

     

       
38
       
-
       
└── secrets # keep your grubby hands (or paws) off my data

     

       
39
       
-
       


     

       
40
       
-
       
16 directories

     

       
41
       
-
       
```

     

       
42
       
 
       


     

       
43
       
 
       
## Installation

     

       
44
       
 
       


     

       
45
       
-
       
> [!WARNING]

     

       
46
       
-
       
> Also to note that this configuration will **not** work if you do not change any of the [secrets](./secrets) since they are encrypted.

     

       
47
       
-
       


     

       
48
       
-
       
You could either install a NixOS machine (rn there is just `moonlark`), use the home-manager instructions, or use nix-darwin for macOS.

     

       
49
       
-
       


     

       
50
       
-
       
### macOS with nix-darwin

     

       
51
       
-
       


     

       
52
       
-
       
For macOS machines, you can use nix-darwin:

     

       
53
       
-
       


     

       
54
       
-
       
1. Install Nix using the determinate systems installer:

     

       
55
       
-
       


     

       
56
       
-
       
```bash

     

       
57
       
-
       
curl -fsSL https://install.determinate.systems/nix | sh -s -- install

     

       
58
       
-
       
```

     

       
59
       
-
       


     

       
60
       
-
       
2. Clone the repository:

     

       
61
       
-
       


     

       
62
       
-
       
```bash

     

       
63
       
-
       
git clone git@github.com:taciturnaxolotl/dots.git

     

       
64
       
-
       
cd dots

     

       
65
       
-
       
```

     

       
66
       
-
       


     

       
67
       
-
       
3. Apply the configuration:

     

       
68
       
-
       


     

       
69
       
-
       
```bash

     

       
70
       
-
       
darwin-rebuild switch --flake .#atalanta

     

       
71
       
-
       
```

     

       
72
       
-
       


     

       
73
       
-
       
### Home Manager

     

       
74
       
-
       


     

       
75
       
-
       
Install nix via the determinate systems installer

     

       
76
       
-
       


     

       
77
       
-
       
```bash

     

       
78
       
-
       
curl -fsSL https://install.determinate.systems/nix | sh -s -- install --determinate

     

       
79
       
-
       
```

     

       
80
       
-
       


     

       
81
       
-
       
then copy ssh keys and chmod them

     

       
82
       
-
       


     

       
83
       
-
       
```bash

     

       
84
       
-
       
scp .ssh/id_rsa* nest:/home/kierank/.ssh/

     

       
85
       
-
       
ssh nest chmod 600 ~/.ssh/id_rsa*

     

       
86
       
-
       
```

     

       
87
       
-
       


     

       
88
       
-
       
and then clone the repo

     

       
89
       
-
       


     

       
90
       
-
       
```bash

     

       
91
       
-
       
git clone git@github.com:taciturnaxolotl/dots.git

     

       
92
       
-
       
cd dots

     

       
93
       
-
       
```

     

       
94
       
-
       


     

       
95
       
-
       
and execute the machine profile

     

       
96
       
-
       


     

       
97
       
-
       
```bash

     

       
98
       
-
       
nix-shell -p home-manager

     

       
99
       
-
       
home-manager switch --flake .#nest

     

       
100
       
-
       
```

     

       
101
       
-
       


     

       
102
       
-
       
setup atuin and import previous shell history

     

       
103
       
-
       


     

       
104
       
-
       
```bash

     

       
105
       
-
       
atuin login

     

       
106
       
-
       
atuin import

     

       
107
       
-
       
```

     

       
108
       
-
       


     

       
109
       
-
       
### NixOS

     

       
110
       
-
       


     

       
111
       
-
       
> These instructions have been validated by installing on my friend's machine ([`Nat2-Dev/dots`](https://github.com/Nat2-Dev/dots))

     

       
112
       
-
       


     

       
113
       
-
       
#### Using nixos-anywhere (Recommended for remote installations)

     

       
114
       
-
       


     

       
115
       
-
       
> [!INFO]

     

       
116
       
-
       
> This only currently works with `prattle` and `terebithia` as they have the proper disko configs setup.

     

       
117
       
-
       


     

       
118
       
-
       
For remote installations (like Oracle Cloud), use [nixos-anywhere](https://github.com/nix-community/nixos-anywhere):

     

       
119
       
-
       


     

       
120
       
-
       
```bash

     

       
121
       
-
       
nix run github:nix-community/nixos-anywhere -- \

     

       
122
       
-
       
  --flake .#prattle \

     

       
123
       
-
       
  --generate-hardware-config nixos-facter ./machines/prattle/facter.json \

     

       
124
       
-
       
  --build-on-remote \

     

       
125
       
-
       
  root@<ip-address>

     

       
126
       
-
       
```

     

       
127
       
-
       


     

       
128
       
-
       
Replace `prattle` with your machine configuration and `<ip-address>` with your target machine's IP.

     

       
129
       
-
       


     

       
130
       
-
       
> **Note**: Make sure your SSH key is in the target machine's `authorized_keys` and the machine configuration has the correct network settings. The `--generate-hardware-config nixos-facter` flag will generate a comprehensive hardware report using [nixos-facter](https://github.com/numtide/nixos-facter) instead of the traditional `nixos-generate-config`.

     

       
131
       
-
       


     

       
132
       
-
       
#### Using the install script

     

       
133
       
-
       


     

       
134
       
-
       
```bash

     

       
135
       
-
       
curl -L https://raw.githubusercontent.com/taciturnaxolotl/dots/main/install.sh -o install.sh

     

       
136
       
-
       
chmod +x install.sh

     

       
137
       
-
       
./install.sh

     

       
138
       
-
       
```

     

       
139
       
-
       


     

       
140
       
-
       
#### The manual way

     

       
141
       
-
       


     

       
142
       
-
       
Install NixOS via the [official guide](https://nixos.org/download.html)

     

       
143
       
-
       


     

       
144
       
-
       
Connect to wifi

     

       
145
       
-
       


     

       
146
       
-
       
```bash

     

       
147
       
-
       
wpa_passphrase your-ESSID your-passphrase | sudo tee /etc/wpa_supplicant.conf

     

       
148
       
-
       
sudo systemctl restart wpa_supplicant

     

       
149
       
-
       
```

     

       
150
       
-
       


     

       
151
       
-
       
Check with `ping 1.1.1.1` if that doesn't work then use `wpa_cli`

     

       
152
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
153
       
 
       
```bash

     

       
154
       
-
       
sudo systemctl start wpa_supplicant

     

       
155
       
-
       
wpa_cli

     

       
156
       
-
       


     

       
157
       
-
       
add_network 0

     

       
158
       
-
       


     

       
159
       
-
       
set_network 0 ssid "put your ssid here"

     

       
160
       
-
       


     

       
161
       
-
       
set_network 0 psk "put your password here"

     

       
162
       
-
       


     

       
163
       
-
       
enable network 0

     

       
164
       
-
       


     

       
165
       
-
       
exit

     

       
166
       
-
       
```

     

       
167
       
-
       


     

       
168
       
-
       
Aquire root permissions while keeping your current context with

     

       
169
       
-
       


     

       
170
       
-
       
```bash

     

       
171
       
-
       
sudo -i

     

       
172
       
-
       
```

     

       
173
       
-
       


     

       
174
       
-
       
Enable git and rebuild your flake with the following

     

       
175
       
-
       


     

       
176
       
-
       
```bash

     

       
177
       
-
       
sed -i 's/^{$/{\n  programs.git.enable = true;/' /etc/nixos/configuration.nix

     

       
178
       
-
       
nixos-rebuild switch

     

       
179
       
-
       
```

     

       
180
       
-
       


     

       
181
       
-
       
Download the disk configuration and run it

     

       
182
       
-
       


     

       
183
       
-
       
```bash

     

       
184
       
-
       
curl -L https://github.com/taciturnaxolotl/dots/raw/main/moonlark/disk-config.nix -o /tmp/disk-config.nix

     

       
185
       
-
       
nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode destroy,format,mount /tmp/disk-config.nix

     

       
186
       
-
       
```

     

       
187
       
-
       


     

       
188
       
-
       
Run nixos generate config and cd into it

     

       
189
       
-
       


     

       
190
       
-
       
```bash

     

       
191
       
-
       
nixos-generate-config --root /mnt

     

       
192
       
-
       
cd /mnt/etc/nixos

     

       
193
       
-
       
```

     

       
194
       
-
       


     

       
195
       
-
       
Clone this repo to your `/mnt/etc/nixos` folder

     

       
196
       
-
       


     

       
197
       
-
       
```bash

     

       
198
       
-
       
rm *

     

       
199
       
-
       
git clone https://github.com/taciturnaxolotl/dots.git .

     

       
200
       
-
       
```

     

       
201
       
-
       


     

       
202
       
-
       
Add your ssh private key to `/mnt/etc/ssh/id_rsa`

     

       
203
       
-
       


     

       
204
       
-
       
install the flake, and umount the filesystem, and then reboot

     

       
205
       
-
       


     

       
206
       
-
       
```bash

     

       
207
       
-
       
nixos-install --flake .#moonlark --no-root-passwd

     

       
208
       
 
       
reboot

     

       
209
       
 
       
```

     

       
210
       
-
       


     

       
211
       
-
       
Pray to the nix gods that it works 🙏

     

       
212
       
-
       


     

       
213
       
-
       
If it worked then you should be able to login with the user `kierank` and the password `lolzthisaintsecure!`

     

       
214
       
-
       


     

       
215
       
-
       
You should immediately change the password

     

       
216
       
-
       


     

       
217
       
-
       
```bash

     

       
218
       
-
       
passwd kierank

     

       
219
       
-
       
```

     

       
220
       
-
       


     

       
221
       
-
       
Move the config to your local directory, link to `/etc/nixos`, and change permissions

     

       
222
       
-
       


     

       
223
       
-
       
```bash

     

       
224
       
-
       
sudo mv /etc/nixos ~/dots

     

       
225
       
-
       
sudo ln -s ~/dots /etc/nixos

     

       
226
       
-
       
sudo chown -R $(id -un):users ~/dots

     

       
227
       
-
       
sudo chown kierank -R ~/dots

     

       
228
       
-
       
sudo chown kierank -R ~/dots/.*

     

       
229
       
-
       
```

     

       
230
       
-
       


     

       
231
       
-
       
17. Setup the fingerprint reader and verify it works (you may need to swipe your finger across the fingerprint sensor instead of simply laying it there)

     

       
232
       
-
       


     

       
233
       
-
       
```bash

     

       
234
       
-
       
sudo fprintd-enroll -f right-index-finger kierank

     

       
235
       
-
       
sudo fprintd-verify kierank

     

       
236
       
-
       
```

     

       
237
       
-
       


     

       
238
       
-
       
Finally enable [atuin](https://atuin.sh/)

     

       
239
       
-
       


     

       
240
       
-
       
```bash

     

       
241
       
-
       
atuin login

     

       
242
       
-
       
atuin sync

     

       
243
       
-
       
```

     

       
244
       
-
       


     

       
245
       
-
       
## some odd things

     

       
246
       
-
       


     

       
247
       
-
       
for helix if you want the grammar to work you must run the following as per [this helix discussion](https://github.com/helix-editor/helix/discussions/10035#discussioncomment-13852637)

     

       
248
       
-
       


     

       
249
       
-
       
```bash

     

       
250
       
-
       
hx -g fetch

     

       
251
       
-
       
hx -g build

     

       
252
       
-
       
```

     

       
253
       
 
       


     

       
254
       
 
       
## Screenshots

     

       
255
       
-
       


     

       
256
       
 
       
<details>

     

       
257
       
 
       
    <summary>I've stuck the rest of the screenshots in a spoiler to preserve space</summary>

     

       
258
       
-
       
<br/>

     

       
259
       
 
       


     

       
260
       
-
       
**Last updated: 2024-12-27**

     

       
261
       
-
       


     

       
262
       
-
       
![the github page of this repo](.github/images/github.webp)

     

       
263
       
-
       
![nautilus file manager](.github/images/nautilus.webp)

     

       
264
       
-
       
![neofetch](.github/images/neofetch.webp)

     

       
265
       
-
       
![spotify with cava next to it](.github/images/spotify.webp)

     

       
266
       
-
       
![zed with the hyprland config open](.github/images/zed.webp)

     

       
267
       
-
       
![cool-retro-term with neofetch](.github/images/cool-retro-term.webp)

     

       
268
       
-
       


     

       
269
       
 
       
</details>

     

       
270
       
 
       


     

       
271
       
 
       
## Credits

     
···

       
289
       
 
       
- [gtk with home manager](https://hoverbear.org/blog/declarative-gnome-configuration-in-nixos/)

     

       
290
       
 
       
- [setting up the proper portals](https://github.com/NixOS/nixpkgs/issues/274554)

     

       
291
       
 
       
- [tuigreet setup](https://github.com/sjcobb2022/nixos-config/blob/29077cee1fc82c5296908f0594e28276dacbe0b0/hosts/common/optional/greetd.nix)

     

       
292
       
-
       


     

       
293
       
-
       
## 📜 License

     

       
294
       
-
       


     

       
295
       
-
       
The code is licensed under `MIT`! That means MIT allows for free use, modification, and distribution of the software, requiring only that the original copyright notice and disclaimer are included in copies. All artwork and images are copyright reserved but may be used with proper attribution to the authors.

     

       
296
       
-
       


     

       
297
       
-
       
<p align="center">

     

       
298
       
-
       
        <img src="https://raw.githubusercontent.com/taciturnaxolotl/carriage/master/.github/images/line-break.svg" />

     

       
299
       
-
       
</p>

     

       
300
       
-
       


     

       
301
       
-
       
<p align="center">

     

       
302
       
-
       
        <i><code>&copy 2025-present <a href="https://github.com/taciturnaxolotl">Kieran Klukas</a></code></i>

     

       
303
       
-
       
</p>

     

       
304
       
-
       


     

       
305
       
-
       
<p align="center">

     

       
306
       
-
       
        <a href="https://github.com/taciturnaxolotl/dots/blob/master/LICENSE.md"><img src="https://img.shields.io/static/v1.svg?style=for-the-badge&label=License&message=MIT&logoColor=d9e0ee&colorA=363a4f&colorB=b7bdf8"/></a>

     

       
307
       
-
       
</p>

     

···

       
1
       
 
       
# Kieran's Dots

     

       
2
       
 
       


     

       
3
       
+
       
![spotify with cava next to it](.github/images/spotify.png)

     

       
4
       
 
       


     

       
5
       
 
       
> [!CAUTION]

     

       
6
       
+
       
> These dots are highly prone to change / breakage. I am not a nix os expert (this is my first time touching nix), so I'm not sure if this will work or not. I'm just trying to get my dots up on github. If you have any suggestions, please let me know.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
7
       
 
       


     

       
8
       
 
       
## Installation

     

       
9
       
 
       


     

       
10
       
+
       
~~I have absolutely no idea~~ I kinda understand now?

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
11
       
 
       


     

       
12
       
+
       
1. Install NixOS via the [official guide](https://nixos.org/download.html)

     

       
13
       
+
       
2. `sudo -i`

     

       
14
       
+
       
3. Enable git with `sed -i 's/^{$/{\n  programs.git.enable = true;/' /etc/nixos/configuration.nix` and then run `nixos-rebuild switch`

     

       
15
       
+
       
4. Download the disk config with `curl https://github.com/kcoderhtml/dots/raw/master/moonlark/disk-config.nix -o /tmp/disk-config.nix`

     

       
16
       
+
       
5. Run disko with `nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode disko /tmp/disk-config.nix`

     

       
17
       
+
       
6. Mount disk with `mount | grep /mnt` and then `cd /mnt/etc/nixos`

     

       
18
       
+
       
7. Clone this repo to your `/mnt/etc/nixos` folder with `git clone https://github.com/kcoderhtml/dots.git .`

     

       
19
       
+
       
8. Add your ssh private key to `/mtn/etc/ssh/id_rsa` 

     

       
20
       
+
       
9. install the flake: `nixos-install --flake .#moonlark --no-root-passwd`

     

       
21
       
+
       
10. Once it finishes run nix install and then reboot

     

       
22
       
 
       
```bash

     

       
23
       
+
       
nixos-install

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
24
       
 
       
reboot

     

       
25
       
 
       
```

     

       
26
       
+
       
11. Pray to the nix gods that it works 🙏

     

       
27
       
+
       
12. If it worked then you should be able to login with the user `kierank` and the password `lolzthisaintsecure!`

     

       
28
       
+
       
13. Change the password with `passwd kierank`

     

       
29
       
+
       
14. Move the config to your local directory with `mkdir ~/etc; sudo mv /etc/nixos ~/etc`

     

       
30
       
+
       
15. Link the config back to `/etc/nixos` with `sudo ln -s ~/etc/nixos /etc`

     

       
31
       
+
       
16. Change the config permissions: `sudo chown -R $(id -un):users ~/etc/nixos`, `sudo chown kierank -R ~/etc/nixos`, and `sudo chown kierank -R ~/etc/nixos/.*`

     

       
32
       
+
       
17. Setup the fingerprint reader with `sudo fprintd-enroll -f right-index-finger kierank` and then verify it worked with `sudo fprintd-verify kierank` (you may need to swipe your finger across the fingerprint sensor instead of simply laying it there)

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
33
       
 
       


     

       
34
       
 
       
## Screenshots

     

       
0
       
 
       

     

       
35
       
 
       
<details>

     

       
36
       
 
       
    <summary>I've stuck the rest of the screenshots in a spoiler to preserve space</summary>

     

       
0
       
 
       

     

       
37
       
 
       


     

       
38
       
+
       
![the github page of this repo](.github/images/github.png)

     

       
39
       
+
       
![nautilus file manager](.github/images/nautilus.png)

     

       
40
       
+
       
![neofetch](.github/images/neofetch.png)

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
41
       
 
       
</details>

     

       
42
       
 
       


     

       
43
       
 
       
## Credits

     
···

       
61
       
 
       
- [gtk with home manager](https://hoverbear.org/blog/declarative-gnome-configuration-in-nixos/)

     

       
62
       
 
       
- [setting up the proper portals](https://github.com/NixOS/nixpkgs/issues/274554)

     

       
63
       
 
       
- [tuigreet setup](https://github.com/sjcobb2022/nixos-config/blob/29077cee1fc82c5296908f0594e28276dacbe0b0/hosts/common/optional/greetd.nix)

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
-
       
all credit for the pier background goes to [github.com/acornitum](https://github.com/acornitum)

     

···

       
0
       
 
       

     

···

       
1
       
-
       
#!/usr/bin/env bash

     

       
2
       
-
       


     

       
3
       
-
       
# Function to calculate temperature based on battery percentage

     

       
4
       
-
       
calculate_temperature() {

     

       
5
       
-
       
    local bat_percent=$1

     

       
6
       
-
       
    local temp

     

       
7
       
-
       


     

       
8
       
-
       
    if [ "$bat_percent" -le 1 ]; then

     

       
9
       
-
       
        temp=1000

     

       
10
       
-
       
    elif [ "$bat_percent" -le 10 ]; then

     

       
11
       
-
       
        # Linear interpolation between 1% (1000K) and 10% (4000K)

     

       
12
       
-
       
        local range=$((4000 - 1000))

     

       
13
       
-
       
        local factor=$(( (bat_percent - 1) * 100 / 9 ))

     

       
14
       
-
       
        temp=$(( 1000 + (range * factor) / 100 ))

     

       
15
       
-
       
    else

     

       
16
       
-
       
        temp=6500  # Default temperature

     

       
17
       
-
       
    fi

     

       
18
       
-
       


     

       
19
       
-
       
    echo $temp

     

       
20
       
-
       
}

     

       
21
       
-
       


     

       
22
       
-
       
# Initialize variables

     

       
23
       
-
       
PREV_STATUS=""

     

       
24
       
-
       


     

       
25
       
-
       
# Main loop

     

       
26
       
-
       
while true; do

     

       
27
       
-
       
    # Get battery percentage

     

       
28
       
-
       
    battery_info=$(cat /sys/class/power_supply/BAT1/capacity)

     

       
29
       
-
       
    percent=$(echo $battery_info | tr -d '\n')

     

       
30
       
-
       


     

       
31
       
-
       
    # Check if the battery is charging

     

       
32
       
-
       
    is_plugged=$(cat /sys/class/power_supply/BAT1/status)

     

       
33
       
-
       


     

       
34
       
-
       
    # Create a status string to track changes

     

       
35
       
-
       
    CURRENT_STATUS="${percent}_${is_plugged}"

     

       
36
       
-
       


     

       
37
       
-
       
    # Only update if status has changed or first run

     

       
38
       
-
       
    if [ "$CURRENT_STATUS" != "$PREV_STATUS" ] || [ -z "$PREV_STATUS" ]; then

     

       
39
       
-
       
        if [ "$percent" -le 10 ] && [ "$is_plugged" != "Charging" ]; then

     

       
40
       
-
       
            temp=$(calculate_temperature $percent)

     

       
41
       
-
       
            hyprctl hyprsunset temperature $temp

     

       
42
       
-
       
        else

     

       
43
       
-
       
            # Reset to default temperature

     

       
44
       
-
       
            hyprctl hyprsunset identity

     

       
45
       
-
       
        fi

     

       
46
       
-
       


     

       
47
       
-
       
        PREV_STATUS="$CURRENT_STATUS"

     

       
48
       
-
       
    fi

     

       
49
       
-
       


     

       
50
       
-
       
    sleep 5

     

       
51
       
-
       
done

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
-
       
#!/bin/sh

     

       
2
       
-
       


     

       
3
       
-
       
# GitHub Copilot client ID

     

       
4
       
-
       
CLIENT_ID="Iv1.b507a08c87ecfe98"

     

       
5
       
-
       


     

       
6
       
-
       
# Token cache file location

     

       
7
       
-
       
CACHE_DIR="${HOME}/.config/crush/github-copilot"

     

       
8
       
-
       
CACHE_FILE="${CACHE_DIR}/bearer_token"

     

       
9
       
-
       
GITHUB_TOKEN_FILE="${CACHE_DIR}/github_token"

     

       
10
       
-
       
GITHUB_COPILOT_APPS_FILE="${HOME}/.config/github-copilot/apps.json"

     

       
11
       
-
       


     

       
12
       
-
       
# Function to extract OAuth token from GitHub Copilot apps.json

     

       
13
       
-
       
extract_oauth_token() {

     

       
14
       
-
       
  local client_id="$1"

     

       
15
       
-
       
  if [ -f "$GITHUB_COPILOT_APPS_FILE" ]; then

     

       
16
       
-
       
    # Extract the oauth_token for our client ID (key format is "github.com:CLIENT_ID")

     

       
17
       
-
       
    local oauth_token=$(grep -o "\"github.com:${client_id}\":{[^}]*\"oauth_token\":\"[^\"]*" "$GITHUB_COPILOT_APPS_FILE" | grep -o '"oauth_token":"[^"]*' | cut -d'"' -f4)

     

       
18
       
-
       
    echo "$oauth_token"

     

       
19
       
-
       
  fi

     

       
20
       
-
       
}

     

       
21
       
-
       


     

       
22
       
-
       
# Function to extract expiration from token

     

       
23
       
-
       
extract_expiration() {

     

       
24
       
-
       
  local token="$1"

     

       
25
       
-
       
  echo "$token" | grep -o 'exp=[0-9]*' | cut -d'=' -f2

     

       
26
       
-
       
}

     

       
27
       
-
       


     

       
28
       
-
       
# Function to check if token is valid

     

       
29
       
-
       
is_token_valid() {

     

       
30
       
-
       
  local token="$1"

     

       
31
       
-
       
  local exp=$(extract_expiration "$token")

     

       
32
       
-
       


     

       
33
       
-
       
  if [ -z "$exp" ]; then

     

       
34
       
-
       
    return 1

     

       
35
       
-
       
  fi

     

       
36
       
-
       


     

       
37
       
-
       
  local current_time=$(date +%s)

     

       
38
       
-
       
  # Add 60 second buffer before expiration

     

       
39
       
-
       
  local buffer_time=$((exp - 60))

     

       
40
       
-
       


     

       
41
       
-
       
  if [ "$current_time" -lt "$buffer_time" ]; then

     

       
42
       
-
       
    return 0

     

       
43
       
-
       
  else

     

       
44
       
-
       
    return 1

     

       
45
       
-
       
  fi

     

       
46
       
-
       
}

     

       
47
       
-
       


     

       
48
       
-
       
# Function to exchange GitHub token for bearer token

     

       
49
       
-
       
exchange_github_token() {

     

       
50
       
-
       
  local github_token="$1"

     

       
51
       
-
       
  local bearer_response=$(curl -s -X GET "https://api.github.com/copilot_internal/v2/token" \

     

       
52
       
-
       
    -H "Authorization: Token ${github_token}" \

     

       
53
       
-
       
    -H "User-Agent: CRUSH/1.0")

     

       
54
       
-
       


     

       
55
       
-
       
  local bearer_token=$(echo "$bearer_response" | grep -o '"token":"[^"]*' | cut -d'"' -f4)

     

       
56
       
-
       
  echo "$bearer_token"

     

       
57
       
-
       
}

     

       
58
       
-
       


     

       
59
       
-
       
# Check for cached bearer token

     

       
60
       
-
       
if [ -f "$CACHE_FILE" ]; then

     

       
61
       
-
       
  CACHED_TOKEN=$(cat "$CACHE_FILE")

     

       
62
       
-
       
  if is_token_valid "$CACHED_TOKEN"; then

     

       
63
       
-
       
    # Token is still valid, output and exit

     

       
64
       
-
       
    echo "$CACHED_TOKEN"

     

       
65
       
-
       
    exit 0

     

       
66
       
-
       
  fi

     

       
67
       
-
       
fi

     

       
68
       
-
       


     

       
69
       
-
       
# Bearer token is expired/missing, try to use cached GitHub token

     

       
70
       
-
       
if [ -f "$GITHUB_TOKEN_FILE" ]; then

     

       
71
       
-
       
  GITHUB_TOKEN=$(cat "$GITHUB_TOKEN_FILE")

     

       
72
       
-
       
  if [ -n "$GITHUB_TOKEN" ]; then

     

       
73
       
-
       
    # Try to exchange GitHub token for new bearer token

     

       
74
       
-
       
    BEARER_TOKEN=$(exchange_github_token "$GITHUB_TOKEN")

     

       
75
       
-
       
    if [ -n "$BEARER_TOKEN" ]; then

     

       
76
       
-
       
      # Successfully got new bearer token, cache it

     

       
77
       
-
       
      echo "$BEARER_TOKEN" > "$CACHE_FILE"

     

       
78
       
-
       
      chmod 600 "$CACHE_FILE"

     

       
79
       
-
       
      echo "$BEARER_TOKEN"

     

       
80
       
-
       
      exit 0

     

       
81
       
-
       
    fi

     

       
82
       
-
       
  fi

     

       
83
       
-
       
fi

     

       
84
       
-
       


     

       
85
       
-
       
# Try to get OAuth token from GitHub Copilot apps.json

     

       
86
       
-
       
OAUTH_TOKEN=$(extract_oauth_token "$CLIENT_ID")

     

       
87
       
-
       
if [ -n "$OAUTH_TOKEN" ]; then

     

       
88
       
-
       
  # Try to exchange OAuth token for new bearer token

     

       
89
       
-
       
  BEARER_TOKEN=$(exchange_github_token "$OAUTH_TOKEN")

     

       
90
       
-
       
  if [ -n "$BEARER_TOKEN" ]; then

     

       
91
       
-
       
    # Successfully got new bearer token, cache it

     

       
92
       
-
       
    mkdir -p "$CACHE_DIR"

     

       
93
       
-
       
    echo "$BEARER_TOKEN" > "$CACHE_FILE"

     

       
94
       
-
       
    chmod 600 "$CACHE_FILE"

     

       
95
       
-
       
    echo "$OAUTH_TOKEN" > "$GITHUB_TOKEN_FILE"

     

       
96
       
-
       
    chmod 600 "$GITHUB_TOKEN_FILE"

     

       
97
       
-
       
    echo "$BEARER_TOKEN"

     

       
98
       
-
       
    exit 0

     

       
99
       
-
       
  fi

     

       
100
       
-
       
fi

     

       
101
       
-
       


     

       
102
       
-
       
# Step 1: Get device code

     

       
103
       
-
       
DEVICE_RESPONSE=$(curl -s -X POST "https://github.com/login/device/code" \

     

       
104
       
-
       
  -H "Content-Type: application/x-www-form-urlencoded" \

     

       
105
       
-
       
  -H "User-Agent: CRUSH/1.0" \

     

       
106
       
-
       
  -H "Accept: application/json" \

     

       
107
       
-
       
  -d "client_id=${CLIENT_ID}&scope=user:email read:user copilot")

     

       
108
       
-
       


     

       
109
       
-
       
# Extract values from response

     

       
110
       
-
       
DEVICE_CODE=$(echo "$DEVICE_RESPONSE" | grep -o '"device_code":"[^"]*' | cut -d'"' -f4)

     

       
111
       
-
       
USER_CODE=$(echo "$DEVICE_RESPONSE" | grep -o '"user_code":"[^"]*' | cut -d'"' -f4)

     

       
112
       
-
       
VERIFICATION_URI=$(echo "$DEVICE_RESPONSE" | grep -o '"verification_uri":"[^"]*' | cut -d'"' -f4)

     

       
113
       
-
       
INTERVAL=$(echo "$DEVICE_RESPONSE" | grep -o '"interval":[0-9]*' | cut -d':' -f2)

     

       
114
       
-
       
EXPIRES_IN=$(echo "$DEVICE_RESPONSE" | grep -o '"expires_in":[0-9]*' | cut -d':' -f2)

     

       
115
       
-
       


     

       
116
       
-
       
# Ensure minimum interval

     

       
117
       
-
       
if [ "$INTERVAL" -lt 5 ]; then

     

       
118
       
-
       
  INTERVAL=5

     

       
119
       
-
       
fi

     

       
120
       
-
       


     

       
121
       
-
       
# Step 2: Create a temporary HTML file with the code

     

       
122
       
-
       
TEMP_HTML="/tmp/copilot_auth_$$.html"

     

       
123
       
-
       
cat > "$TEMP_HTML" << EOF

     

       
124
       
-
       
<!DOCTYPE html>

     

       
125
       
-
       
<html>

     

       
126
       
-
       
<head>

     

       
127
       
-
       
    <title>GitHub Copilot Authentication</title>

     

       
128
       
-
       
    <style>

     

       
129
       
-
       
        body {

     

       
130
       
-
       
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif;

     

       
131
       
-
       
            display: flex;

     

       
132
       
-
       
            justify-content: center;

     

       
133
       
-
       
            align-items: center;

     

       
134
       
-
       
            height: 100vh;

     

       
135
       
-
       
            margin: 0;

     

       
136
       
-
       
            background-color: #f6f8fa;

     

       
137
       
-
       
        }

     

       
138
       
-
       
        .container {

     

       
139
       
-
       
            text-align: center;

     

       
140
       
-
       
            background: white;

     

       
141
       
-
       
            padding: 40px;

     

       
142
       
-
       
            border-radius: 8px;

     

       
143
       
-
       
            box-shadow: 0 2px 8px rgba(0,0,0,0.1);

     

       
144
       
-
       
            max-width: 400px;

     

       
145
       
-
       
        }

     

       
146
       
-
       
        .code {

     

       
147
       
-
       
            font-size: 32px;

     

       
148
       
-
       
            font-weight: bold;

     

       
149
       
-
       
            font-family: monospace;

     

       
150
       
-
       
            background: #f3f4f6;

     

       
151
       
-
       
            padding: 20px;

     

       
152
       
-
       
            border-radius: 6px;

     

       
153
       
-
       
            margin: 20px 0;

     

       
154
       
-
       
            user-select: all;

     

       
155
       
-
       
            cursor: pointer;

     

       
156
       
-
       
        }

     

       
157
       
-
       
        .button {

     

       
158
       
-
       
            display: inline-block;

     

       
159
       
-
       
            background: #2ea44f;

     

       
160
       
-
       
            color: white;

     

       
161
       
-
       
            padding: 12px 24px;

     

       
162
       
-
       
            text-decoration: none;

     

       
163
       
-
       
            border-radius: 6px;

     

       
164
       
-
       
            font-weight: 500;

     

       
165
       
-
       
            margin-top: 20px;

     

       
166
       
-
       
        }

     

       
167
       
-
       
        .button:hover {

     

       
168
       
-
       
            background: #2c974b;

     

       
169
       
-
       
        }

     

       
170
       
-
       
        .info {

     

       
171
       
-
       
            color: #586069;

     

       
172
       
-
       
            margin-top: 20px;

     

       
173
       
-
       
            font-size: 14px;

     

       
174
       
-
       
        }

     

       
175
       
-
       
    </style>

     

       
176
       
-
       
</head>

     

       
177
       
-
       
<body>

     

       
178
       
-
       
    <div class="container">

     

       
179
       
-
       
        <h1>GitHub Copilot Authentication</h1>

     

       
180
       
-
       
        <p>Copy this code:</p>

     

       
181
       
-
       
        <div class="code" onclick="navigator.clipboard.writeText('$USER_CODE')">$USER_CODE</div>

     

       
182
       
-
       
        <a href="$VERIFICATION_URI" class="button" target="_blank" onclick="navigator.clipboard.writeText('$USER_CODE')">Copy Code & Continue to GitHub</a>

     

       
183
       
-
       
        <p class="info">Click the button to copy the code and go to GitHub</p>

     

       
184
       
-
       
    </div>

     

       
185
       
-
       
    <script>

     

       
186
       
-
       
        // Auto-close after 2 minutes

     

       
187
       
-
       
        setTimeout(() => window.close(), 120000);

     

       
188
       
-
       
    </script>

     

       
189
       
-
       
</body>

     

       
190
       
-
       
</html>

     

       
191
       
-
       
EOF

     

       
192
       
-
       


     

       
193
       
-
       
# Open the HTML file (suppress all output to avoid issues in POSIX shell)

     

       
194
       
-
       
if command -v xdg-open >/dev/null 2>&1; then

     

       
195
       
-
       
  xdg-open "$TEMP_HTML" >/dev/null 2>&1 &

     

       
196
       
-
       
elif command -v open >/dev/null 2>&1; then

     

       
197
       
-
       
  open "$TEMP_HTML" >/dev/null 2>&1 &

     

       
198
       
-
       
elif command -v start >/dev/null 2>&1; then

     

       
199
       
-
       
  start "$TEMP_HTML" >/dev/null 2>&1 &

     

       
200
       
-
       
fi

     

       
201
       
-
       


     

       
202
       
-
       
# Step 3: Poll for token

     

       
203
       
-
       
POLL_COUNT=0

     

       
204
       
-
       
MAX_POLLS=60

     

       
205
       
-
       
GITHUB_TOKEN=""

     

       
206
       
-
       


     

       
207
       
-
       
# Initial delay

     

       
208
       
-
       
sleep 2

     

       
209
       
-
       


     

       
210
       
-
       
while [ $POLL_COUNT -lt $MAX_POLLS ] && [ -z "$GITHUB_TOKEN" ]; do

     

       
211
       
-
       
  TOKEN_RESPONSE=$(curl -s -X POST "https://github.com/login/oauth/access_token" \

     

       
212
       
-
       
    -H "Content-Type: application/x-www-form-urlencoded" \

     

       
213
       
-
       
    -H "User-Agent: CRUSH/1.0" \

     

       
214
       
-
       
    -H "Accept: application/json" \

     

       
215
       
-
       
    -d "client_id=${CLIENT_ID}&device_code=${DEVICE_CODE}&grant_type=urn:ietf:params:oauth:grant-type:device_code")

     

       
216
       
-
       


     

       
217
       
-
       
  # Check for access token

     

       
218
       
-
       
  ACCESS_TOKEN=$(echo "$TOKEN_RESPONSE" | grep -o '"access_token":"[^"]*' | cut -d'"' -f4)

     

       
219
       
-
       


     

       
220
       
-
       
  if [ -n "$ACCESS_TOKEN" ]; then

     

       
221
       
-
       
    GITHUB_TOKEN="$ACCESS_TOKEN"

     

       
222
       
-
       
    break

     

       
223
       
-
       
  fi

     

       
224
       
-
       


     

       
225
       
-
       
  # Check for errors

     

       
226
       
-
       
  ERROR=$(echo "$TOKEN_RESPONSE" | grep -o '"error":"[^"]*' | cut -d'"' -f4)

     

       
227
       
-
       


     

       
228
       
-
       
  case "$ERROR" in

     

       
229
       
-
       
    "authorization_pending")

     

       
230
       
-
       
      # Still waiting, continue

     

       
231
       
-
       
      ;;

     

       
232
       
-
       
    "slow_down")

     

       
233
       
-
       
      # Rate limiting

     

       
234
       
-
       
      exit 1

     

       
235
       
-
       
      ;;

     

       
236
       
-
       
    "expired_token")

     

       
237
       
-
       
      # Token expired

     

       
238
       
-
       
      exit 1

     

       
239
       
-
       
      ;;

     

       
240
       
-
       
    *)

     

       
241
       
-
       
      if [ -n "$ERROR" ]; then

     

       
242
       
-
       
        exit 1

     

       
243
       
-
       
      fi

     

       
244
       
-
       
      ;;

     

       
245
       
-
       
  esac

     

       
246
       
-
       


     

       
247
       
-
       
  POLL_COUNT=$((POLL_COUNT + 1))

     

       
248
       
-
       
  sleep $INTERVAL

     

       
249
       
-
       
done

     

       
250
       
-
       


     

       
251
       
-
       
if [ -z "$GITHUB_TOKEN" ]; then

     

       
252
       
-
       
  exit 1

     

       
253
       
-
       
fi

     

       
254
       
-
       


     

       
255
       
-
       
# Step 4: Exchange GitHub token for Copilot bearer token

     

       
256
       
-
       
BEARER_TOKEN=$(exchange_github_token "$GITHUB_TOKEN")

     

       
257
       
-
       


     

       
258
       
-
       
if [ -z "$BEARER_TOKEN" ]; then

     

       
259
       
-
       
  exit 1

     

       
260
       
-
       
fi

     

       
261
       
-
       


     

       
262
       
-
       
# Create cache directory if it doesn't exist

     

       
263
       
-
       
mkdir -p "$CACHE_DIR"

     

       
264
       
-
       


     

       
265
       
-
       
# Cache both tokens

     

       
266
       
-
       
echo "$BEARER_TOKEN" > "$CACHE_FILE"

     

       
267
       
-
       
chmod 600 "$CACHE_FILE"

     

       
268
       
-
       
echo "$GITHUB_TOKEN" > "$GITHUB_TOKEN_FILE"

     

       
269
       
-
       
chmod 600 "$GITHUB_TOKEN_FILE"

     

       
270
       
-
       


     

       
271
       
-
       
# Output only the bearer token to stdout

     

       
272
       
-
       
echo "$BEARER_TOKEN"

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
-
       
#!/usr/bin/env bash

     

       
2
       
-
       


     

       
3
       
-
       
defaults export com.apple.symbolichotkeys - > /tmp/symbolichotkeys.plist

     

       
4
       
-
       
plutil -convert json -o /tmp/symbolichotkeys.json /tmp/symbolichotkeys.plist

     

       
5
       
-
       
cat /tmp/symbolichotkeys.json | \

     

       
6
       
-
       
jq -r '

     

       
7
       
-
       
  .AppleSymbolicHotKeys

     

       
8
       
-
       
  | to_entries

     

       
9
       
-
       
  | map(

     

       
10
       
-
       
      "    \"" + .key + "\" = {\n" +

     

       
11
       
-
       
      "      enabled = " + (

     

       
12
       
-
       
        if (.value.enabled == 1 or .value.enabled == true) then

     

       
13
       
-
       
          "true"

     

       
14
       
-
       
        else

     

       
15
       
-
       
          "false"

     

       
16
       
-
       
        end

     

       
17
       
-
       
      ) + ";\n" +

     

       
18
       
-
       
      (

     

       
19
       
-
       
        if (.value.value? and .value.value.parameters? and .value.value.type?) then

     

       
20
       
-
       
          "      value = {\n" +

     

       
21
       
-
       
          "        parameters = [ " + (

     

       
22
       
-
       
            .value.value.parameters

     

       
23
       
-
       
            | map(tostring)

     

       
24
       
-
       
            | join(" ")

     

       
25
       
-
       
          ) + " ];\n" +

     

       
26
       
-
       
          "        type = \"" + .value.value.type + "\";\n" +

     

       
27
       
-
       
          "      };\n"

     

       
28
       
-
       
        else

     

       
29
       
-
       
          ""

     

       
30
       
-
       
        end

     

       
31
       
-
       
      ) +

     

       
32
       
-
       
      "    };\n"

     

       
33
       
-
       
    )

     

       
34
       
-
       
  | "  AppleSymbolicHotKeys = {\n" + ( join("") ) + "  };\n"

     

       
35
       
-
       
'

     

       
36
       
-