.github/images/cool-retro-term.webp
This is a binary file and will not be displayed.
.github/images/github.png
This is a binary file and will not be displayed.
.github/images/github.webp
This is a binary file and will not be displayed.
.github/images/nautilus.png
This is a binary file and will not be displayed.
.github/images/nautilus.webp
This is a binary file and will not be displayed.
.github/images/neofetch.png
This is a binary file and will not be displayed.
.github/images/neofetch.webp
This is a binary file and will not be displayed.
.github/images/nix-update.webp
This is a binary file and will not be displayed.
.github/images/spotify.png
This is a binary file and will not be displayed.
.github/images/spotify.webp
This is a binary file and will not be displayed.
.github/images/zed.webp
This is a binary file and will not be displayed.
-46
.github/workflows/deploy.yaml
···
-25
LICENSE.md
···
+24
-267
README.md
···-> ~I am not a nix os expert (this is my first time touching nix), so I'm not sure if this will work or not. I'm just trying to get my dots up on github.~-> After `284` successful days of these dots being in constant operation, many many rebuilds, and `364` commits these dots have been rock solid and I have no complaints.+> These dots are highly prone to change / breakage. I am not a nix os expert (this is my first time touching nix), so I'm not sure if this will work or not. I'm just trying to get my dots up on github. If you have any suggestions, please let me know.-> Also to note that this configuration will **not** work if you do not change any of the [secrets](./secrets) since they are encrypted.-You could either install a NixOS machine (rn there is just `moonlark`), use the home-manager instructions, or use nix-darwin for macOS.+3. Enable git with `sed -i 's/^{$/{\n programs.git.enable = true;/' /etc/nixos/configuration.nix` and then run `nixos-rebuild switch`+4. Download the disk config with `curl https://github.com/kcoderhtml/dots/raw/master/moonlark/disk-config.nix -o /tmp/disk-config.nix`+5. Run disko with `nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode disko /tmp/disk-config.nix`+7. Clone this repo to your `/mnt/etc/nixos` folder with `git clone https://github.com/kcoderhtml/dots.git .`-> These instructions have been validated by installing on my friend's machine ([`Nat2-Dev/dots`](https://github.com/Nat2-Dev/dots))-> This only currently works with `prattle` and `terebithia` as they have the proper disko configs setup.-For remote installations (like Oracle Cloud), use [nixos-anywhere](https://github.com/nix-community/nixos-anywhere):-Replace `prattle` with your machine configuration and `<ip-address>` with your target machine's IP.-> **Note**: Make sure your SSH key is in the target machine's `authorized_keys` and the machine configuration has the correct network settings. The `--generate-hardware-config nixos-facter` flag will generate a comprehensive hardware report using [nixos-facter](https://github.com/numtide/nixos-facter) instead of the traditional `nixos-generate-config`.-curl -L https://github.com/taciturnaxolotl/dots/raw/main/moonlark/disk-config.nix -o /tmp/disk-config.nix-nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode destroy,format,mount /tmp/disk-config.nix-If it worked then you should be able to login with the user `kierank` and the password `lolzthisaintsecure!`-17. Setup the fingerprint reader and verify it works (you may need to swipe your finger across the fingerprint sensor instead of simply laying it there)-for helix if you want the grammar to work you must run the following as per [this helix discussion](https://github.com/helix-editor/helix/discussions/10035#discussioncomment-13852637)+12. If it worked then you should be able to login with the user `kierank` and the password `lolzthisaintsecure!`+16. Change the config permissions: `sudo chown -R $(id -un):users ~/etc/nixos`, `sudo chown kierank -R ~/etc/nixos`, and `sudo chown kierank -R ~/etc/nixos/.*`+17. Setup the fingerprint reader with `sudo fprintd-enroll -f right-index-finger kierank` and then verify it worked with `sudo fprintd-verify kierank` (you may need to swipe your finger across the fingerprint sensor instead of simply laying it there)···- [gtk with home manager](https://hoverbear.org/blog/declarative-gnome-configuration-in-nixos/)- [tuigreet setup](https://github.com/sjcobb2022/nixos-config/blob/29077cee1fc82c5296908f0594e28276dacbe0b0/hosts/common/optional/greetd.nix)-The code is licensed under `MIT`! That means MIT allows for free use, modification, and distribution of the software, requiring only that the original copyright notice and disclaimer are included in copies. All artwork and images are copyright reserved but may be used with proper attribution to the authors.-<img src="https://raw.githubusercontent.com/taciturnaxolotl/carriage/master/.github/images/line-break.svg" />-<i><code>© 2025-present <a href="https://github.com/taciturnaxolotl">Kieran Klukas</a></code></i>-<a href="https://github.com/taciturnaxolotl/dots/blob/master/LICENSE.md"><img src="https://img.shields.io/static/v1.svg?style=for-the-badge&label=License&message=MIT&logoColor=d9e0ee&colorA=363a4f&colorB=b7bdf8"/></a>
-1
dots/README.md
···
-51
dots/charge-alert.sh
···
-272
dots/copilot.sh
···-local oauth_token=$(grep -o "\"github.com:${client_id}\":{[^}]*\"oauth_token\":\"[^\"]*" "$GITHUB_COPILOT_APPS_FILE" | grep -o '"oauth_token":"[^"]*' | cut -d'"' -f4)-VERIFICATION_URI=$(echo "$DEVICE_RESPONSE" | grep -o '"verification_uri":"[^"]*' | cut -d'"' -f4)-<a href="$VERIFICATION_URI" class="button" target="_blank" onclick="navigator.clipboard.writeText('$USER_CODE')">Copy Code & Continue to GitHub</a>--d "client_id=${CLIENT_ID}&device_code=${DEVICE_CODE}&grant_type=urn:ietf:params:oauth:grant-type:device_code")
-36
dots/dump-keybinds-mac.sh
···
dots/face.jpeg
This is a binary file and will not be displayed.
-246
dots/hyprland.conf
···-windowrule = opacity 0.88 override 0.8 override 0.88 override, class:^(com\.mitchellh\.ghostty)$ # set opacity to 0.88 active, 0.8 inactive and 0.88 fullscreen for ghostty-windowrule = opacity 0.88 override 0.8 override 0.88 override, initialClass:^(org\.gnome\.Nautilus)$-pseudotile = yes # master switch for pseudotiling. Enabling is bound to mainMod + P in the keybinds section below-bind = $mainMod, S, exec, pgrep -x tofi-run && kill $(pgrep -x tofi-run) || tofi-run | xargs xargs hyprctl dispatch exec ---bind = CTRL + ALT, period, exec, pgrep -x tofi && kill $(pgrep -x tofi) || bash ~/.config/hypr/tofi-emoji.sh --width 1400-bind=CTRL,PRINT,exec,grimblast copy area; notify-desktop "copied screenshot of selection to the clipboard"-bind=,PRINT,exec,grimblast copy output; notify-desktop "copied screenshot of screen to the clipboard"-bind=CTRL + SHIFT, PRINT, exec, START_TIME=$(date +%s); bash ~/.config/hypr/prettify-ss.sh; notify-desktop "Prettified Screenshot" "Taking $(($(date +%s) - START_TIME))s"-bindel =,XF86MonBrightnessDown, exec, brightnessctl set 5%-; notify-desktop "brightness decreased 5%" "Curretly; $(echo "scale=1; 100 * $(brightnessctl g) / $(brightnessctl m)" | bc)%" -t 1200-bindel =,XF86MonBrightnessUp, exec, brightnessctl set 5%+; notify-desktop "brightness increased 5%" "Curretly; $(echo "scale=1; 100 * $(brightnessctl g) / $(brightnessctl m)" | bc)%" -t 1200-bindl =,XF86AudioPlay, exec, playerctl play-pause; notify-desktop "toggled media playback" -t 1800-bindl=, XF86AudioMute, exec, wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle; notify-desktop "$(wpctl get-volume @DEFAULT_AUDIO_SINK@)" -t 800-bindel=, XF86AudioRaiseVolume, exec, wpctl set-volume -l 2.0 @DEFAULT_AUDIO_SINK@ 5%+; notify-desktop "$(wpctl get-volume @DEFAULT_AUDIO_SINK@)" -t 800-bindel=, XF86AudioLowerVolume, exec, wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%-; notify-desktop "$(wpctl get-volume @DEFAULT_AUDIO_SINK@)" -t 800-bindel=, XF86RFKill, exec, notify-desktop "$(rfkill list | grep -q '^\s*Soft blocked: yes' && echo 'Airplane Mode is ON' || echo 'Airplane Mode is OFF')" -t 800
-78
dots/hyprlock.conf
···-placeholder_text = <span foreground="##$textAlpha"><i> Logged in as </i><span foreground="##$accentAlpha">$USER</span></span>
-2
dots/hyprpaper.conf
-78
dots/hyprrec.sh
···-DEFAULT_DEVICE=$(wpctl status | grep "Default Configured Devices" -A 2 | grep "Audio/Sink" | awk '{print $NF}')-wpctl inspect $(wpctl status | grep -A 1 "Built-in Audio Analog Stereo" | grep -o '[0-9]\+\.' | head -1 | tr -d '.') > /dev/null 2>&1-ffmpeg -i "$FILE" -ss 00:00:00 -vframes 1 -update 1 -frames:v 1 /tmp/screenrec_thumbnail.png -y && \
-795
dots/lxde-pi-rc.xml
···-<command>sh -c "lxpanelctl command volumepulse volu; lxpanelctl command volumealsabt volu"</command>-<command>sh -c "lxpanelctl command volumepulse vold; lxpanelctl command volumealsabt vold"</command>-<command>sh -c "lxpanelctl command volumepulse mute; lxpanelctl command volumealsabt mute"</command>-<command>sh -c "if test -e /usr/bin/pt-brightness; then /usr/bin/pt-brightness -d; fi"</command>-<command>sh -c "if test -e /usr/bin/pt-brightness; then /usr/bin/pt-brightness -i; fi"</command>
-78
dots/macchiato.conf
···
-47
dots/prettify-ss.sh
···-magick -size "${WIDTH}x${HEIGHT}" xc:none -draw "roundrectangle 0,0,$WIDTH,$HEIGHT,15,15" "$MASK_IMAGE"-magick "$TEMP_IMAGE" -page +15+15 \( +clone -background black -shadow 60x10+15+15 \) +swap -background none -layers merge +repage "$SHADOWED_IMAGE"
-45
dots/sunpaperconfig
···
-1864
dots/tofi-emoji.sh
···-## All credit goes to github.com/akselaase/tofi-emoji this is a barely modified version of their script-😒 unamused face indifference bored straight face serious sarcasm unimpressed skeptical dubious side eye-👩💻 woman technologist coder developer engineer programmer software woman human laptop computer-👫 woman and man holding hands pair people human love date dating like affection valentines marriage-👩❤️👩 couple with heart woman woman pair love like affection human dating valentines marriage-📈 chart increasing graph presentation stats recovery business economics money sales good success-📉 chart decreasing graph presentation stats recession business economics money sales bad failure-🏳️🌈 rainbow flag flag rainbow pride gay lgbt glbt queer homosexual lesbian bisexual transgender-🇦🇪 flag united arab emirates united arab emirates flag nation country banner united arab emirates-🇨🇫 flag central african republic central african republic flag nation country banner central african republic-🇫🇰 flag falkland islands falkland islands malvinas flag nation country banner falkland islands-🇬🇧 flag united kingdom united kingdom great britain northern ireland flag nation country banner british UK english england union jack united kingdom-🇬🇸 flag south georgia south sandwich islands south georgia sandwich islands flag nation country banner south georgia south sandwich islands-🇮🇴 flag british indian ocean territory british indian ocean territory flag nation country banner british indian ocean territory-🇲🇵 flag northern mariana islands northern mariana islands flag nation country banner northern mariana islands-🇵🇲 flag st pierre miquelon saint pierre miquelon flag nation country banner st pierre miquelon-🇵🇸 flag palestinian territories palestine palestinian territories flag nation country banner palestinian territories-🇹🇨 flag turks caicos islands turks caicos islands flag nation country banner turks caicos islands-🇹🇫 flag french southern territories french southern territories flag nation country banner french southern territories-🇻🇨 flag st vincent grenadines saint vincent grenadines flag nation country banner st vincent grenadines-🇻🇬 flag british virgin islands british virgin islands bvi flag nation country banner british virgin islands
-144
dots/update-crush-models.sh
···-echo "$COPILOT_MODELS" | jq -r '.data[] | select(.model_picker_enabled == true) | " ✓ \(.id) - \(.name)"'-echo " • Copilot models: $(echo "$COPILOT_MODELS" | jq '[.data[] | select(.model_picker_enabled == true)] | length')"
-309
dots/user.js
···
dots/wallpapers/acon-forest.jpg
This is a binary file and will not be displayed.
dots/wallpapers/acon-fsh.jpg
This is a binary file and will not be displayed.
dots/wallpapers/acon-gradient-clouds.jpg
This is a binary file and will not be displayed.
dots/wallpapers/acon-pier.jpg
This is a binary file and will not be displayed.
dots/wallpapers/acon-rocks.jpg
This is a binary file and will not be displayed.
dots/wallpapers/acon-star.jpg
This is a binary file and will not be displayed.
dots/wallpapers/annie-athena.jpg
This is a binary file and will not be displayed.
dots/wallpapers/candy-stained-glass.jpg
This is a binary file and will not be displayed.
dots/wallpapers/highway.jpg
This is a binary file and will not be displayed.
dots/wallpapers/kailing-canyon.jpg
This is a binary file and will not be displayed.
dots/wallpapers/kailing-comet.jpg
This is a binary file and will not be displayed.
dots/wallpapers/kailing-shooting-star.jpg
This is a binary file and will not be displayed.
dots/wallpapers/kailing-swirls.jpg
This is a binary file and will not be displayed.
dots/wallpapers/tongyu-catcat.jpg
This is a binary file and will not be displayed.
dots/wallpapers/tongyu-waves.jpg
This is a binary file and will not be displayed.
dots/wallpapers/yessa-cat.jpg
This is a binary file and will not be displayed.
+308
-1043
flake.lock
·········+"url": "https://api.flakehub.com/f/pinned/catppuccin/vscode/3.14.0/018f15b6-7a7e-7bae-80f2-cf902f1db7fe/source.tar.gz"···············-"url": "https://git.lix.systems/api/v1/repos/lix-project/flake-compat/archive/549f2762aebeff29a2e5ece7a7dc0f955281a1d1.tar.gz?rev=549f2762aebeff29a2e5ece7a7dc0f955281a1d1"·········-"url": "https://github.com/lucide-icons/lucide/releases/download/0.536.0/lucide-icons-0.536.0.zip"-"url": "https://github.com/lucide-icons/lucide/releases/download/0.536.0/lucide-icons-0.536.0.zip"·····················
+48
-254
flake.nix
······-checks = builtins.mapAttrs (system: deployLib: deployLib.deployChecks self.deploy) deploy-rs.lib;
home-manager/dots/face.png
This is a binary file and will not be displayed.
+197
home-manager/dots/hyprland.conf
···+pseudotile = yes # master switch for pseudotiling. Enabling is bound to mainMod + P in the keybinds section below+bind=CTRL,PRINT,exec,grimblast copy area; notify-desktop "copied screenshot of selection to the clipboard"+bind=ALT,PRINT,exec,grimblast copy active; notify-desktop "copied screenshot of active window to clipboard"+bind=,PRINT,exec,grimblast copy output; notify-desktop "copied screenshot of screen to the clipboard"+bindel =,XF86MonBrightnessDown, exec, brightnessctl set 5%-; notify-desktop "brightness decreased 5%" "Curretly; $(echo "scale=1; 100 * $(brightnessctl g) / $(brightnessctl m)" | bc)%" -t 1200+bindel =,XF86MonBrightnessUp, exec, brightnessctl set 5%+; notify-desktop "brightness increased 5%" "Curretly; $(echo "scale=1; 100 * $(brightnessctl g) / $(brightnessctl m)" | bc)%" -t 1200+bindl =,XF86AudioPlay, exec, playerctl play-pause; notify-desktop "toggled media playback" -t 1800+bindl=, XF86AudioMute, exec, wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle; notify-desktop "$(wpctl get-volume @DEFAULT_AUDIO_SINK@)" -t 800+bindel=, XF86AudioRaiseVolume, exec, wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%+; notify-desktop "$(wpctl get-volume @DEFAULT_AUDIO_SINK@)" -t 800+bindel=, XF86AudioLowerVolume, exec, wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%-; notify-desktop "$(wpctl get-volume @DEFAULT_AUDIO_SINK@)" -t 800
+78
home-manager/dots/hyprlock.conf
···+placeholder_text = <span foreground="##$textAlpha"><i> Logged in as </i><span foreground="##$accentAlpha">$USER</span></span>
+78
home-manager/dots/macchiato.conf
···
+45
home-manager/dots/sunpaperconfig
···
+444
home-manager/home.nix
···
+100
home-manager/hyprland/config.nix
···
+28
home-manager/hyprland/default.nix
···
+224
home-manager/hyprland/keybinds.nix
···
+132
home-manager/hyprland/windowrules.nix
···
+47
home-manager/hyprland.nix
···
+126
home-manager/neovim.nix
···+-- treesitter handled by xdg.configFile."nvim/parser", put this line at the end of spec to clear ensure_installed+# https://github.com/nvim-treesitter/nvim-treesitter#i-get-query-error-invalid-node-type-at-position
+481
home-manager/waybar.nix
···+format-connected-battery = " {device_alias} ({device_battery_percentage}%) ({num_connections})";+player="$(playerctl status -f "{{playerName}}" 2>/dev/null || echo "No player active" | cut -d '.' -f1)"+jq -s 'if length > 0 then {text: " ", tooltip: (map(.tooltip) | join("\r"))} else {text: "", tooltip: ""} end' |\+format = ''{"text": "{{title}} - {{artist}}", "alt": "{{status}}", "tooltip": "{{title}} - {{artist}} ({{album}})"}'';+toRGBA = color: opacity: "rgba(${hexToRGBString "," (lib.removePrefix "#" color)},${opacity})";
-140
install.sh
···-curl -L https://github.com/taciturnaxolotl/dots/raw/main/moonlark/disk-config.nix -o /tmp/disk-config.nix-sudo nix --experimental-features "nix-command flakes" run github:nix-community/disko -- --mode destroy,format,mount /tmp/disk-config.nix-read -p "Which configuration would you like to use? (Press Enter for moonlark): " hostname_choice-echo "5. Setup fingerprint reader (optional): sudo fprintd-enroll -f right-index-finger \$(whoami)"
-228
machines/atalanta/default.nix
···
-183
machines/atalanta/home/default.nix
···-sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain "$MITM_CERT" &&-if security find-certificate -c mitmproxy /Library/Keychains/System.keychain > /dev/null 2>&1; then
-22
machines/atalanta/home-manager.nix
···
-49
machines/ember/default.nix
···
-469
machines/moonlark/default.nix
···-"ssh-rsa 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 kierank@mockingjay"-"ssh-rsa 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 kierank@mockingjay"-localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers-# no need to set devices, disko will add all devices that have a EF02 partition to the list already
-32
machines/moonlark/disk-config.nix
···
-36
machines/moonlark/hardware-configuration.nix
···-hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
-38
machines/moonlark/home/default.nix
···
-18
machines/moonlark/home-manager.nix
···
-44
machines/nest/default.nix
···
-207
machines/prattle/default.nix
···-"ssh-rsa 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 kierank@mockingjay"-"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzEEjvbL/ttqmYoDjxYQmDIq36BabROJoXgQKeh9liBxApwp+2PmgxROzTg42UrRc9pyrkq5kVfxG5hvkqCinhL1fMiowCSEs2L2/Cwi40g5ZU+QwdcwI8a4969kkI46PyB19RHkxg54OUORiIiso/WHGmqQsP+5wbV0+4riSnxwn/JXN4pmnE//stnyAyoiEZkPvBtwJjKb3Ni9n3eNLNs6gnaXrCtaygEZdebikr9kS2g9mM696HvIFgM6cdR/wZ7DcLbG3IdTXuHN7PC3xxL+Y4ek5iMreQIPmuvs4qslbthPGYoYbYLUQiRa9XO5s/ksIj5Z14f7anHE6cuTQVpvNWdGDOigyIVS5qU+4ZF7j+rifzOXVL48gmcAvw/uV68m5Wl/p0qsC/d8vI3GYwEsWG/EzpAlc07l8BU2LxWgN+d7uwBFaJV9VtmUDs5dcslsh8IbzmtC9gq3OLGjklxTfIl6qPiL8U33oc/UwqzvZUrI2BlbagvIZYy6rP+q0= kierank@mockingjay"
-32
machines/prattle/disk-config.nix
···
-1696
machines/prattle/facter.json
···
-24
machines/prattle/home/default.nix
···
-16
machines/prattle/home-manager.nix
-64
machines/tacyon/default.nix
···
-372
machines/terebithia/default.nix
···-"ssh-rsa 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 kierank@mockingjay"-"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzEEjvbL/ttqmYoDjxYQmDIq36BabROJoXgQKeh9liBxApwp+2PmgxROzTg42UrRc9pyrkq5kVfxG5hvkqCinhL1fMiowCSEs2L2/Cwi40g5ZU+QwdcwI8a4969kkI46PyB19RHkxg54OUORiIiso/WHGmqQsP+5wbV0+4riSnxwn/JXN4pmnE//stnyAyoiEZkPvBtwJjKb3Ni9n3eNLNs6gnaXrCtaygEZdebikr9kS2g9mM696HvIFgM6cdR/wZ7DcLbG3IdTXuHN7PC3xxL+Y4ek5iMreQIPmuvs4qslbthPGYoYbYLUQiRa9XO5s/ksIj5Z14f7anHE6cuTQVpvNWdGDOigyIVS5qU+4ZF7j+rifzOXVL48gmcAvw/uV68m5Wl/p0qsC/d8vI3GYwEsWG/EzpAlc07l8BU2LxWgN+d7uwBFaJV9VtmUDs5dcslsh8IbzmtC9gq3OLGjklxTfIl6qPiL8U33oc/UwqzvZUrI2BlbagvIZYy6rP+q0= kierank@mockingjay"
-32
machines/terebithia/disk-config.nix
···
-3449
machines/terebithia/facter.json
···-"sysfs_device_link": "/devices/pci0000:00/0000:00:05.7/0000:18:00.0/virtio2/host0/target0:0:0/0:0:0:1",
-31
machines/terebithia/home/default.nix
···
-16
machines/terebithia/home-manager.nix
-46
modules/home/aesthetics/theming.nix
···
-45
modules/home/aesthetics/wallpapers.nix
···-WALLPAPER=$(find -L "$WALLPAPER_DIR" -type f ! -name "$(basename "$CURRENT_WALL")" | shuf -n 1)-xdg.configFile."wallpapers/tongyu-waves.jpg".source = ../../../dots/wallpapers/tongyu-waves.jpg;-xdg.configFile."wallpapers/kailing-comet.jpg".source = ../../../dots/wallpapers/kailing-comet.jpg;-xdg.configFile."wallpapers/kailing-canyon.jpg".source = ../../../dots/wallpapers/kailing-canyon.jpg;-xdg.configFile."wallpapers/kailing-swirls.jpg".source = ../../../dots/wallpapers/kailing-swirls.jpg;-xdg.configFile."wallpapers/annie-athena.jpg".source = ../../../dots/wallpapers/annie-athena.jpg;-xdg.configFile."wallpapers/tongyu-catcat.jpg".source = ../../../dots/wallpapers/tongyu-catcat.jpg;
-40
modules/home/apps/alacritty.nix
···-options.atelier.terminal.alacritty.enable = lib.mkEnableOption "Enable Alacritty terminal config";
-107
modules/home/apps/bore/bore.1.md
···-**bore** is a tunneling service that uses frp (fast reverse proxy) to expose local services to the internet via bore.dunkirk.sh. It provides a simple CLI for creating and managing HTTP tunnels with optional labels and persistent configuration.-: The subdomain to use for the tunnel (e.g., "myapp" creates myapp.bore.dunkirk.sh). Must contain only lowercase letters, numbers, and hyphens.-Tunnel configurations can be saved to a **bore.toml** file in the current directory. This file uses TOML format and can be committed to repositories.-When running **bore** without arguments in a directory with bore.toml, you'll be prompted to choose between creating a new tunnel or using a saved configuration.
-32
modules/home/apps/bore/completions/bore.bash
···
-20
modules/home/apps/bore/completions/bore.fish
···
-40
modules/home/apps/bore/completions/bore.zsh
···
-355
modules/home/apps/bore/default.nix
···-echo "$tunnels" | ${pkgs.jq}/bin/jq -r '.proxies[] | select(.status == "online" and .conf != null) | "\(.name) → https://\(.conf.subdomain).${cfg.domain}"' | while read -r line; do-saved_names=$(${pkgs.gnugrep}/bin/grep '^\[' "$CONFIG_FILE" | ${pkgs.gnused}/bin/sed 's/^\[\(.*\)\]$/\1/')-${pkgs.gum}/bin/gum style --foreground 35 "✓ Loaded from bore.toml: $subdomain → localhost:$port''${label:+ [$label]}"-${pkgs.gum}/bin/gum style --foreground 196 "Invalid subdomain (use only lowercase letters, numbers, and hyphens)"-labels=$(${pkgs.gum}/bin/gum choose --no-limit --header "Labels (select multiple):" "dev" "prod" "custom")-if [ -f "$CONFIG_FILE" ] && ${pkgs.gnugrep}/bin/grep -q "^\[$subdomain\]" "$CONFIG_FILE"; then-${pkgs.gum}/bin/gum style --foreground 214 "Connecting to ${cfg.serverAddr}:${toString cfg.serverPort}..."
-301
modules/home/apps/crush/_crush-options.nix
···
-24
modules/home/apps/crush/crush-module.nix
···
-335
modules/home/apps/crush.nix
···
-24
modules/home/apps/ghostty.nix
···-window-decoration = ${if config.atelier.terminal.ghostty.windowDecoration then "true" else "false"}
-175
modules/home/apps/git.nix
···-filters = "is:open author:@me updated:>={{ nowModify \"-3w\" }} sort:updated-desc archived:false";-command = "tmux new-window -c {{.RepoPath}} 'nvim -c \":silent Octo pr edit {{.PrNumber}}\"'";-command = "gh pr review --repo {{.RepoName}} --approve --body \"$(gum input --prompt='Approval Comment: ')\" {{.PrNumber}}";
-46
modules/home/apps/halloy.nix
···
-310
modules/home/apps/helix.nix
···
-25
modules/home/apps/irssi.nix
···
-48
modules/home/apps/qutebrowser.nix
···
-30
modules/home/apps/spotify.nix
···
-183
modules/home/apps/ssh.nix
···
-43
modules/home/apps/tofi.nix
···
-26
modules/home/system/nixpkgs.nix.disabled
···
-637
modules/home/system/shell.nix
···-${pkgs.gum}/bin/gum style --bold --foreground 212 "Configuring tangled remotes for: $repo_name"-github_username=$(echo "$origin_url" | ${pkgs.gnused}/bin/sed -E 's/.*github\.com[:/]([^/]+)\/.*$/\1/')-plc_id=$(${pkgs.gum}/bin/gum input --placeholder "$default_plc_id" --prompt "PLC ID: " --value "$default_plc_id")-${pkgs.gum}/bin/gum style --foreground 35 "✓ Configured origin → git@$default_knot_host:''${plc_id}/''${repo_name}"-username=$(${pkgs.gum}/bin/gum input --placeholder "$github_username" --prompt "GitHub username: " --value "$github_username")-${pkgs.gum}/bin/gum style --foreground 35 "✓ Configured github → git@github.com:''${username}/''${repo_name}.git"-${pkgs.gum}/bin/gum style --foreground 212 "Connecting to $host:$port (auto-reconnect enabled)..."-${pkgs.gum}/bin/gum spin --spinner dot --title "Fetching summary from $host for $user_id..." -- \-${pkgs.gum}/bin/gum style --foreground 35 "Total time: ''${hours}h ''${minutes}m ''${seconds}s"-${pkgs.gum}/bin/gum style --foreground 196 "Error: Bluesky credentials file not found at /run/agenix/bluesky"-message=$(${pkgs.gum}/bin/gum input --placeholder "What's happening?" --prompt "$ACCOUNT1 is: ")-if [[ \$(echo "\$account1_post_response" | ${pkgs.jq}/bin/jq -r 'has("error")') == "true" ]]; then-if [[ \$(echo "\$account2_post_response" | ${pkgs.jq}/bin/jq -r 'has("error")') == "true" ]]; then-${pkgs.gum}/bin/gum spin --spinner dot --title "Installing xterm-ghostty terminfo on $target..." -- \-bash -c "${pkgs.ncurses}/bin/infocmp -x xterm-ghostty | ${pkgs.openssh}/bin/ssh '$target' 'tic -x -'" 2>&1-template = "{{if not .Detached}}{{ .HEAD }}{{else}}@{{ printf \"%.7s\" .Commit.Sha }}{{end}}{{ if .Staging.Changed }} ({{ .Staging.String }}){{ end }}{{ if .Working.Changed }}*{{ end }} <cyan>{{ if .BranchStatus }}{{ .BranchStatus }}{{ end }}</>";
-57
modules/home/wm/hyprland/default.nix
···
-41
modules/home/wm/hyprland/hypridle.nix
···
-405
modules/home/wm/hyprland/waybar.nix
···-format-connected-battery = " {device_alias} ({device_battery_percentage}%) ({num_connections})";-echo "$process_info" | awk '{command=$2; for(i=3;i<=NF;i++) command=command" "$i; print "{\"tooltip\": \""command"\"}"}'-jq -s 'if length > 0 then {text: " ", tooltip: (map(.tooltip) | join("\r"))} else {text: "", tooltip: ""} end'
-296
modules/nixos/apps/tuigreet.nix
···-default = "WARNING: UNAUTHORIZED ACCESS WILL RESULT IN TERMINATION OF SESSION. IDENTIFY YOURSELF";
-212
modules/nixos/services/README.md
···
-162
modules/nixos/services/battleship-arena.nix
···-${pkgs.openssh}/bin/ssh-keygen -t ed25519 -f /var/lib/battleship-arena/.ssh/battleship_arena -N ""
-97
modules/nixos/services/bore/404.html
···-href="data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 100 100%22><text y=%22.9em%22 font-size=%2290%22>🚇</text></svg>">
-32
modules/nixos/services/bore/README.md
···--Bore is a lightweight wrapper around `frp` which provides a dashboard and a nice `gum` based cli. If you would like to run this in your own nix flake then simplify vendor this folder and `./modules/home/bore` and import the folders into the appropriate home manager and nixos configurations.-The secret file is just a oneline file with the key in it. If you do end up deploying this feel free to email me and let me know! I would love to hear about your setup!
-169
modules/nixos/services/bore/bore.nix
···
-13
modules/nixos/services/bore/bore.toml.example
-626
modules/nixos/services/bore/dashboard.html
···-<meta name="description" content="bore - secure tunneling service for exposing local services to the internet">-<meta property="og:description" content="secure tunneling service powered by frp on bore.dunkirk.sh">-<meta name="twitter:description" content="secure tunneling service powered by frp on bore.dunkirk.sh">-href="data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 100 100%22><text y=%22.9em%22 font-size=%2290%22>🚇</text></svg>">-document.getElementById('totalUpload').textContent = formatBytes(serverData.totalTrafficOut || 0);-document.getElementById('totalDownload').textContent = formatBytes(serverData.totalTrafficIn || 0);-const totalTraffic = formatBytes((serverData.totalTrafficIn || 0) + (serverData.totalTrafficOut || 0));-return `<span class="tunnel-label" style="color: ${style.color}; background: ${style.bgColor}; border-color: ${style.borderColor};">${trimmedLabel}</span>`;-started: <span data-start-time="${proxy.lastStartTime || ''}"></span> • traffic in: <span data-traffic-in="${proxy.name}">0 B</span> • out: <span data-traffic-out="${proxy.name}">0 B</span>-html += '<div style="color: #8b949e; font-size: 0.85rem; margin-bottom: 0.75rem;">recently disconnected</div>';-<span class="offline-tunnel-stats">in: <span data-traffic-in="${proxy.name}">0 B</span> • out: <span data-traffic-out="${proxy.name}">0 B</span></span>-<span class="offline-tunnel-stats">in: <span data-traffic-in="${proxy.name}">0 B</span> • out: <span data-traffic-out="${proxy.name}">0 B</span></span>-const inputDate = new Date(now.getFullYear(), parseInt(month) - 1, parseInt(day), parseInt(hour), parseInt(minute), parseInt(second));
-131
modules/nixos/services/cachet.nix
···-description = "Path to secrets file containing SLACK_TOKEN, SLACK_SIGNING_SECRET, BEARER_TOKEN";-ExecStart = "${pkgs.bash}/bin/bash -c 'cd ${cfg.dataDir}/app && ${pkgs.unstable.bun}/bin/bun run src/index.ts'";
-139
modules/nixos/services/emojibot.nix
···-ExecStart = "${pkgs.bash}/bin/bash -c 'cd ${cfg.dataDir}/app && ${pkgs.unstable.bun}/bin/bun run src/index.ts'";
-124
modules/nixos/services/hn-alerts.nix
···-description = "Path to secrets file containing SLACK_BOT_TOKEN, SLACK_SIGNING_SECRET, SLACK_CHANNEL, SENTRY_DSN, DATABASE_URL";-ExecStart = "${pkgs.bash}/bin/bash -c 'cd ${cfg.dataDir}/app && ${pkgs.unstable.bun}/bin/bun start'";
-185
modules/nixos/services/knot-sync.nix
···-expected_url="https://''${GITHUB_USERNAME}:''${GITHUB_TOKEN}@github.com/''${GITHUB_USERNAME}/''${REPO_NAME}.git"-echo "0000000000000000000000000000000000000000 $(${pkgs.git}/bin/git rev-parse HEAD) refs/heads/main" | \-${pkgs.findutils}/bin/find "$REPO_DIR" -mindepth 1 -maxdepth 1 -type d \! -name ".*" -print0 |
-99
modules/nixos/system/authentication.nix
···-options.atelier.authentication.enable = lib.mkEnableOption "Enable authentication stack (polkit, keyring, PAM with fprintd)";-session optional pam_xauth.so systemuser=99 xauthpath=${pkgs.xorg.xauth}/bin/xauth # xauth (order 12100)
-182
modules/nixos/system/wifi.nix
···
+284
moonlark/configuration.nix
···+"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzEEjvbL/ttqmYoDjxYQmDIq36BabROJoXgQKeh9liBxApwp+2PmgxROzTg42UrRc9pyrkq5kVfxG5hvkqCinhL1fMiowCSEs2L2/Cwi40g5ZU+QwdcwI8a4969kkI46PyB19RHkxg54OUORiIiso/WHGmqQsP+5wbV0+4riSnxwn/JXN4pmnE//stnyAyoiEZkPvBtwJjKb3Ni9n3eNLNs6gnaXrCtaygEZdebikr9kS2g9mM696HvIFgM6cdR/wZ7DcLbG3IdTXuHN7PC3xxL+Y4ek5iMreQIPmuvs4qslbthPGYoYbYLUQiRa9XO5s/ksIj5Z14f7anHE6cuTQVpvNWdGDOigyIVS5qU+4ZF7j+rifzOXVL48gmcAvw/uV68m5Wl/p0qsC/d8vI3GYwEsWG/EzpAlc07l8BU2LxWgN+d7uwBFaJV9VtmUDs5dcslsh8IbzmtC9gq3OLGjklxTfIl6qPiL8U33oc/UwqzvZUrI2BlbagvIZYy6rP+q0= kierank@mockingjay"+"ssh-rsa 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 kierank@mockingjay"+kernelPackages = lib.mkIf (lib.versionOlder pkgs.linux.version "5.16") (lib.mkDefault pkgs.linuxPackages_latest);+# no need to set devices, disko will add all devices that have a EF02 partition to the list already
+32
moonlark/disk-config.nix
···
+36
moonlark/greetd.nix
···+command = "${tuigreet} --time -g 'WARNING: UNAUTHORIZED ACCESS WILL RESULT IN TERMINATION OF SESSION. IDENTIFY YOURSELF' --remember --cmd Hyprland";
+25
moonlark/hardware-configuration.nix
···+boot.initrd.availableKernelModules = [ "xhci_pci" "thunderbolt" "nvme" "usb_storage" "sd_mod" ];+hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+14
moonlark/home-manager.nix
···
+68
moonlark/pam.nix
···+session optional pam_xauth.so systemuser=99 xauthpath=${pkgs.xorg.xauth}/bin/xauth # xauth (order 12100)
-48
packages/zmx.nix
···
-84
post-install.sh
···-echo "You may need to swipe your finger across the fingerprint sensor instead of simply laying it there."-echo "Your NixOS setup is now complete! You may need to restart some applications or services for all changes to take effect."-echo "To rebuild your system in the future, run: cd ~/dots && sudo nixos-rebuild switch --flake .#$(hostname)"
secrets/battleship-arena.age
This is a binary file and will not be displayed.
-23
secrets/bluesky.age
···-0�Q��\7��s�Hv�*��܌����::��P8�7�r���e�A��&L`��?��x���V2���Dax��mH���.H䂠5LF]g��(Y�8 ��_SȊ��oW햸G�w��j��v�k|����[�EǻM⏙@��й� Z�j�wJ�
secrets/cachet.age
This is a binary file and will not be displayed.
secrets/cloudflare.age
This is a binary file and will not be displayed.
-13
secrets/context7.age
···
-13
secrets/crush.age
···
secrets/emojibot.age
This is a binary file and will not be displayed.
-13
secrets/frp-auth-token.age
···
-13
secrets/github-knot-sync.age
···-mn̂�;�צ$`_�p�vR�1�7Fl�ç������+!����3�-�EYG��Q�*���������V�Զ����a�F��O����'}H��b���IHG�Z)t�����$�lXv�����F~sw%]G��H�s�LTv(�
secrets/hn-alerts.age
This is a binary file and will not be displayed.
secrets/iodine.age
This is a binary file and will not be displayed.
+6
-42
secrets/secrets.nix
···kierank = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzEEjvbL/ttqmYoDjxYQmDIq36BabROJoXgQKeh9liBxApwp+2PmgxROzTg42UrRc9pyrkq5kVfxG5hvkqCinhL1fMiowCSEs2L2/Cwi40g5ZU+QwdcwI8a4969kkI46PyB19RHkxg54OUORiIiso/WHGmqQsP+5wbV0+4riSnxwn/JXN4pmnE//stnyAyoiEZkPvBtwJjKb3Ni9n3eNLNs6gnaXrCtaygEZdebikr9kS2g9mM696HvIFgM6cdR/wZ7DcLbG3IdTXuHN7PC3xxL+Y4ek5iMreQIPmuvs4qslbthPGYoYbYLUQiRa9XO5s/ksIj5Z14f7anHE6cuTQVpvNWdGDOigyIVS5qU+4ZF7j+rifzOXVL48gmcAvw/uV68m5Wl/p0qsC/d8vI3GYwEsWG/EzpAlc07l8BU2LxWgN+d7uwBFaJV9VtmUDs5dcslsh8IbzmtC9gq3OLGjklxTfIl6qPiL8U33oc/UwqzvZUrI2BlbagvIZYy6rP+q0=";+moonlark = "ssh-rsa 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";
-14
secrets/wakatime.age
···
secrets/wifi.age
This is a binary file and will not be displayed.