feat: disable prometheus for homeassistant

darwin/kuro/configuration.nix

@@ -22,6 +22,7 @@
         "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
         # "mirai:bcVPoFGBZ0i7JAKMXIqLj2GY3CulLC4kP7rQyqes1RM="
       ];
+      download-buffer-size = 524288000;
     };
     extraOptions = ''
       build-users-group = nixbld

darwin/kuro/homebrew.nix

@@ -6,10 +6,7 @@
     casks = [
       "1password"
       "lunar"
-      "orcaslicer"
       "raycast"
-      "zed"
-      "zen"
     ];
   };
 }

darwin/shiro/homebrew.nix

@@ -2,15 +2,12 @@
   homebrew = {
     enable = true;
     brews = [
-      "docker-compose"
     ];
     casks = [
       "1password"
-      "docker"
       "raycast"
       "lunar"
       "orcaslicer"
-      "zed"
       "zen"
     ];
   };

darwin/shiro/services/default.nix

@@ -1,15 +1,18 @@
 {...}: {
   imports = [
     # ../../../modules/darwin/caddy
-    ./yabai.nix
-    ./skhd.nix
-    ./tailscale.nix
-    ./autossh.nix
-    # ./caddy.nix
-    ./sops.nix
-    # ./lmstudio.nix
-    # ./colima.nix
-    # ./zerotier.nix
+
     # ./aerospace.nix
+    # ./caddy.nix
+    # ./colima.nix
+    # ./lmstudio.nix
+    # ./zerotier.nix
+
+    ./autossh.nix
+    ./skhd.nix
+    ./sops.nix
+    ./sunshine.nix
+    ./tailscale.nix
+    ./yabai.nix
   ];
 }

darwin/shiro/services/sunshine.nix

@@ -0,0 +1,10 @@
+{...}: {
+  homebrew = {
+    taps = [
+      "lizardbyte/homebrew"
+    ];
+    brews = [
+      "lizardbyte/homebrew/sunshine-beta"
+    ];
+  };
+}

deploy.nix

@@ -5,14 +5,6 @@
   ...
 }: {
   nodes = {
-    mirai = {
-      hostname = "mirai.darksailor.dev";
-      profiles.system = {
-        sshUser = "fs0c131y";
-        path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.mirai;
-        user = "root";
-      };
-    };
     tsuba = {
       hostname = "tsuba.darksailor.dev";
       profiles.system = {

flake.nix

@@ -17,10 +17,6 @@
       url = "github:nix-community/stylix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    stylix-stable = {
-      url = "github:nix-community/stylix/release-25.11";
-      inputs.nixpkgs.follows = "nixpkgs-stable";
-    };
     home-manager-stable = {
       url = "github:nix-community/home-manager/release-25.11";
       inputs.nixpkgs.follows = "nixpkgs-stable";
@@ -51,26 +47,10 @@
       inputs.nixpkgs.follows = "nixpkgs";
     };
     nur.url = "github:nix-community/nur";
-    hyprland = {
-      url = "github:hyprwm/Hyprland";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-    hyprlock = {
-      url = "github:hyprwm/hyprlock";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
     zjstatus = {
       url = "github:dj95/zjstatus";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    rust-overlay = {
-      url = "github:oxalica/rust-overlay";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-    openapi-tui = {
-      url = "github:zaghaghi/openapi-tui";
-      flake = false;
-    };
     musnix = {
       url = "github:musnix/musnix";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -83,26 +63,10 @@
       url = "github:Mic92/sops-nix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    csshacks = {
-      url = "github:MrOtherGuy/firefox-csshacks";
-      flake = false;
-    };
     nno = {
       url = "github:nvim-neorg/nixpkgs-neorg-overlay";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    pets = {
-      url = "github:giusgad/pets.nvim";
-      flake = false;
-    };
-    rest-nvim = {
-      url = "github:rest-nvim/rest.nvim";
-      flake = false;
-    };
-    neogit = {
-      url = "github:NeogitOrg/neogit/nightly";
-      flake = false;
-    };
     d2 = {
       url = "github:terrastruct/d2-vim";
       flake = false;
@@ -127,25 +91,6 @@
       url = "github:pest-parser/tree-sitter-pest";
       flake = false;
     };
-    navigator = {
-      url = "github:ray-x/navigator.lua";
-      flake = false;
-    };
-    guihua = {
-      url = "github:ray-x/guihua.lua";
-      flake = false;
-    };
-    ghostty = {
-      url = "github:ghostty-org/ghostty";
-    };
-    typr = {
-      url = "github:nvzone/typr";
-      flake = false;
-    };
-    volt = {
-      url = "github:nvzone/volt";
-      flake = false;
-    };
     arion = {
       url = "github:hercules-ci/arion";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -169,18 +114,10 @@
       url = "github:uttarayan21/anyrun-hyprwin";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    anyrun-rink = {
-      url = "github:uttarayan21/anyrun-rink";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
     onepassword-shell-plugins = {
       url = "github:1Password/shell-plugins";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    zeronsd = {
-      url = "github:uttarayan21/zeronsd";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
     tmux-float = {
       url = "github:uttarayan21/tmux-float";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -199,24 +136,6 @@
     #   url = "path:/home/servius/Projects/ALVR";
     #   inputs.nixpkgs.follows = "nixpkgs";
     # };
-    ik_llama = {
-      url = "github:ikawrakow/ik_llama.cpp?submodules=1";
-      # submodules = true;
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-    llama-cpp = {
-      # url = "https://github.com/ggml-org/llama.cpp";
-      url = "github:ggml-org/llama.cpp/b6178?submodules=1";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-    yabai = {
-      url = "github:koekeishiya/yabai";
-      flake = false;
-    };
-    nix-auth = {
-      url = "github:numtide/nix-auth";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
     nixpkgs-xr = {
       url = "github:nix-community/nixpkgs-xr";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -241,16 +160,33 @@
       url = "github:vicinaehq/vicinae";
       # inputs.nixpkgs.follows = "nixpkgs";
     };
-    wivrn = {
-      url = "github:uttarayan21/wivrn?submodules=1";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
     eilmeldung = {
       url = "github:christo-auer/eilmeldung";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    hytale-launcher = {
-      url = "github:JPyke3/hytale-launcher-nix";
+    servius-website = {
+      url = "git+https://git.darksailor.dev/servius/servius.neocities.org";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    nixify = {
+      url = "github:uttarayan21/nixify";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    tangled-core = {
+      url = "git+https://tangled.org/tangled.org/core";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    hyprland = {
+      url = "github:hyprwm/Hyprland";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    iamb = {
+      url = "github:ulyssa/iamb/latest";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    cinny = {
+      url = "github:cinnyapp/cinny/dev";
+      flake = false;
     };
   };
 
@@ -429,16 +365,20 @@
           };
           config.allowUnfree = true;
         };
+        cratesNix = inputs.crates-nix.mkLib {inherit pkgs;};
       in {
-        # packages = rec {
-        #   default = neovim;
-        #   neovim = pkgs.nixvim.makeNixvim (pkgs.callPackage ./neovim);
-        # };
         devShells = {
           default = pkgs.mkShell {
             packages = with pkgs; [sops just openssl ast-grep];
           };
         };
+        packages = {
+          default = cratesNix.buildCrate "ironclaw" {
+            nativeBuildInputs = [pkgs.pkg-config];
+            buildInputs = [pkgs.openssl];
+            doCheck = false;
+          };
+        };
       }
     );
 }

home/accounts/fastmail.nix

@@ -52,9 +52,13 @@
           khal = {
             enable = true;
             addresses = ["email@uttarayan.me"];
+            type = "discover";
           };
           vdirsyncer = {
             enable = true;
+            conflictResolution = "remote wins";
+            collections = ["from a"];
+            metadata = ["color" "displayname"];
           };
         };
       };

home/apps/cinny.nix

@@ -0,0 +1 @@
+{pkgs, ...}: {home.packages = [pkgs.cinny-desktop];}

home/apps/default.nix

@@ -7,6 +7,7 @@ lib.optionalAttrs device.hasGui {
   imports = [
     # ./audacity.nix
     # ./bottles.nix
+    # ./cinny.nix
     # ./cursor.nix
     # ./gimp.nix
     # ./guitarix.nix
@@ -26,11 +27,15 @@ lib.optionalAttrs device.hasGui {
     # ./vial.nix
     # ./vlc.nix
     # ./vscode.nix
+    # ./zen.nix
+
+    ./moonlight.nix
+    # ./zed.nix
 
     ./affine.nix
     ./blueman.nix
     ./chromium.nix
-    ./discord.nix
+    # ./discord.nix
     ./firefox.nix
     ./ghostty.nix
     ./hyprpicker.nix
@@ -43,7 +48,6 @@ lib.optionalAttrs device.hasGui {
     ./vicinae.nix
     ./wezterm.nix
     ./zathura.nix
-    ./zed.nix
     ./zen.nix
   ];
 }

home/apps/discord.nix

@@ -3,13 +3,13 @@
   lib,
   ...
 }: {
-  home.packages = lib.optionals pkgs.stdenv.isLinux [
-    (pkgs.discord.override {
-      withOpenASAR = true;
-      withVencord = true;
-    })
-    # pkgs.vesktop
-    # pkgs.discord-canary
-    # pkgs.discord-ptb
-  ];
+  # home.packages = lib.optionals pkgs.stdenv.isLinux [
+  #   (pkgs.discord.override {
+  #     withOpenASAR = true;
+  #     withVencord = true;
+  #   })
+  #   # pkgs.vesktop
+  #   # pkgs.discord-canary
+  #   # pkgs.discord-ptb
+  # ];
 }

home/apps/kitty.nix

@@ -8,11 +8,8 @@
   stylix.targets.kitty.enable = false;
   programs.kitty = {
     enable = true;
-    # enable = false;
     font = {
-      # name = "FiraCode Nerd Font Mono";
       name = "Hasklug Nerd Font Mono";
-      # name = "Monaspace Krypton Var Light";
       size = lib.mkForce 13;
     };
     settings = {

home/apps/matrix.nix

@@ -6,7 +6,7 @@
 }: {
   home.packages = lib.optionals (device.is "ryu") [
     pkgs.fluffychat
-    pkgs.fractal
+    pkgs.element-desktop
     # pkgs.quaternion
   ];
 }

home/apps/moonlight.nix

@@ -0,0 +1,8 @@
+{
+  lib,
+  pkgs,
+  device,
+  ...
+}: {
+  home.packages = lib.optionals (device.name == "ryu") [pkgs.moonlight-qt];
+}

home/apps/zen.nix

@@ -8,9 +8,10 @@
   imports = [
     inputs.zen-browser.homeModules.beta
   ];
+  programs.zen-browser.darwinDefaultsId = "org.mozilla.firefox.plist";
   programs.zen-browser = {
     enable = true;
-    profiles.default = {
+    profiles.default = rec {
       containersForce = true;
       containers = {
         Personal = {
@@ -34,36 +35,118 @@
         containers = config.programs.zen-browser.profiles."default".containers;
       in {
         "Personal" = {
-          id = "";
+          id = "0b4dab19-9b39-4f2c-8ad1-0268d9fa2e49";
           icon = "👤";
           container = containers."Personal".id;
           position = 1000;
         };
         "Work" = {
-          id = "00bdd434-e31b-4e2b-b8f5-fa7055631a64";
+          id = "8f687163-6b15-4c3c-885f-8ffe465b386f";
           icon = "💼";
           container = containers."Work".id;
           position = 2000;
         };
         "Shopping" = {
-          id = "77452260-56e6-4c9e-8d5f-417958bc4fa4";
+          id = "74f46a1b-cdd7-408c-98d7-382a2b11bd51";
           icon = "💸";
           container = containers."Shopping".id;
           position = 3000;
         };
       };
       extensions.packages = with pkgs.nur.repos.rycee.firefox-addons; [
-        privacy-badger
-        violentmonkey
-        tridactyl
         clearurls
-        onepassword-password-manager
-        ublock-origin
+        floccus
         i-dont-care-about-cookies
         keepa
+        onepassword-password-manager
+        privacy-badger
         sponsorblock
-        floccus
+        tridactyl
+        ublock-origin
+        violentmonkey
       ];
+      search = {
+        force = true;
+        default = "ddg";
+        engines = {
+          mynixos = {
+            name = "My NixOS";
+            urls = [
+              {
+                template = "https://mynixos.com/search?q={searchTerms}";
+              }
+            ];
+
+            icon = "${pkgs.nixos-icons}/share/icons/hicolor/scalable/apps/nix-snowflake.svg";
+            definedAliases = ["@nx"]; # Keep in mind that aliases defined here only work if they start with "@"
+          };
+          hm = {
+            name = "Home Manager Options";
+            urls = [
+              {
+                template = "https://home-manager-options.extranix.com/?query={searchTerms}&release=master";
+              }
+            ];
+            definedAliases = ["@hm"];
+          };
+          nv = {
+            name = "NixVim";
+            urls = [
+              {
+                template = "https://nix-community.github.io/nixvim/search";
+                params = [
+                  {
+                    name = "query";
+                    value = "{searchTerms}";
+                  }
+                ];
+              }
+            ];
+            definedAliases = ["@nv"];
+          };
+          lib = {
+            name = "Lib.rs";
+            urls = [
+              {
+                template = "https://lib.rs/search";
+                params = [
+                  {
+                    name = "q";
+                    value = "{searchTerms}";
+                  }
+                ];
+              }
+            ];
+            definedAliases = ["@lib"];
+          };
+          searchix = {
+            name = "Searchix";
+            urls = [
+              {
+                template = "https://searchix.ovh/?query={searchTerms}";
+              }
+            ];
+            definedAliases = ["sx"];
+          };
+        };
+      };
+      pins = {
+        dashboard = {
+          id = "d163f090-67b7-47d2-8f76-7d638b9f742b";
+          workspace = spaces.Personal.id;
+          url = "https://dashboard.darksailor.dev";
+          isEssential = true;
+          position = 101;
+        };
+        github = {
+          id = "db2f3e36-9279-4b8d-8b5d-52a90f34ea0d";
+          workspace = spaces.Personal.id;
+          url = "https://github.com";
+          isEssential = true;
+          position = 102;
+        };
+      };
+      pinsForce = true;
     };
     nativeMessagingHosts = [pkgs.tridactyl-native];
     policies = {
@@ -84,6 +167,5 @@
         Fingerprinting = true;
       };
     };
-    suppressXdgMigrationWarning = true;
   };
 }

home/programs/calendar.nix

@@ -1,6 +1,17 @@
 {pkgs, ...}: {
-  programs.khal.enable = true;
+  programs.khal = {
+    enable = true;
+    settings = {
+      default = {
+        # default_calendar = "fastmail";
+      };
+      view = {
+        agenda_event_format = "{calendar-color}{cancelled}{start-end-time-style} {title}{repeat-symbol}{reset}";
+      };
+    };
+  };
   programs.qcal.enable = true;
   programs.vdirsyncer.enable = true;
+  services.vdirsyncer.enable = true;
   accounts.calendar.accounts.fastmail.qcal.enable = true;
 }

home/programs/cargo.nix

@@ -4,7 +4,9 @@
   cratesNix,
   ...
 }: let
-  cargo-credential-1password = cratesNix.buildCrate "cargo-credential-1password" {};
+  cargo-credential-1password = cratesNix.buildCrate "cargo-credential-1password" {
+    meta.mainProgram = "cargo-credential-1password";
+  };
 in
   lib.mkIf (!device.isServer) {
     home.file.".cargo/config.toml".text =

home/programs/codex.nix

@@ -0,0 +1 @@
+{pkgs, ...}: {home.packages = [pkgs.codex];}

home/programs/default.nix

@@ -7,6 +7,7 @@
     # ./bluetui.nix
     # ./goread.nix
     # ./helix.nix
+    # ./iamb.nix
     # ./magika.nix
     # ./mpd.nix
     # ./mpris-scrobbler.nix
@@ -19,6 +20,7 @@
     # ./template.nix
     # ./tuifeed.nix
     # ./xh.nix
+    # ./yt-dlp.nix
     # ./zellij.nix
 
     ../../modules
@@ -40,6 +42,7 @@
     ./carapace.nix
     ./cargo.nix
     ./cfcli.nix
+    ./codex.nix
     ./ddcbacklight.nix
     ./deploy-rs.nix
     ./direnv.nix
@@ -64,6 +67,7 @@
     ./neomutt.nix
     ./neovim.nix
     ./nix-index.nix
+    ./nixify.nix
     ./nushell.nix
     ./omnix.nix
     ./opencode.nix
@@ -80,8 +84,7 @@
     ./tmux.nix
     ./uv.nix
     ./yazi.nix
-    ./yt-dlp.nix
-    ./zoxide.nix
     ./yq.nix
+    ./zoxide.nix
   ];
 }

home/programs/deploy-rs.nix

@@ -1 +1,8 @@
-{pkgs, ...}: {home.packages = [pkgs.deploy-rs.deploy-rs];}
+{
+  pkgs,
+  lib,
+  device,
+  ...
+}: {
+  home.packages = lib.optionals (device.is "ryu") [pkgs.deploy-rs.deploy-rs];
+}

home/programs/fish.nix

@@ -23,6 +23,7 @@
       j = "just --choose";
       # t = "zellij a -c --index 0";
       t = "tmux";
+      neorg = "nvim -c ':Neorg index'";
     };
     shellAliases = {
       g = "git";
@@ -33,7 +34,7 @@
     '';
     # ${pkgs.spotify-player}/bin/spotify_player generate fish | source
     interactiveShellInit = ''
-      if test -n "$TMUX"; ${lib.getExe pkgs.fastfetch} --logo-type sixel; else ${lib.getExe pkgs.fastfetch}; end
+      if test -n "$TMUX"; ${lib.getExe pkgs.fastfetch} --logo-type kitty-icat; else ${lib.getExe pkgs.fastfetch}; end
       # ${pkgs.nb}/bin/nb todo undone
       ${lib.optionalString (device.isLinux && !device.isNix) "source /etc/profile.d/nix-daemon.fish"}
       ${lib.optionalString (device.is "ryu") ''
@@ -44,6 +45,15 @@
     '';
   };
   home.shell.enableFishIntegration = true;
+
+  # programs.bash = {
+  #   enable = true;
+  #   initExtra = ''
+  #     if [[ $- == *i* && -z "$FISH_VERSION" ]]; then
+  #       ${lib.getExe pkgs.fish}
+  #     fi
+  #   '';
+  # };
 }
 // lib.optionalAttrs (!(device.is "tsuba")) {
   stylix.targets.fish.enable = false;

home/programs/iamb.nix

@@ -0,0 +1,3 @@
+{pkgs, ...}: {
+  home.packages = [pkgs.iamb];
+}

home/programs/nixify.nix

@@ -0,0 +1,9 @@
+{
+  pkgs,
+  inputs,
+  ...
+}: {
+  home.packages = [
+    inputs.nixify.packages.${pkgs.system}.default
+  ];
+}

home/programs/ssh.nix

@@ -16,11 +16,6 @@
         user = "git";
         host = "github.com";
       };
-      # mirai = {
-      #   user = "fs0c131y";
-      #   hostname = "mirai.darksailor.dev";
-      #   forwardAgent = true;
-      # };
       tako = {
         user = "servius";
         hostname = "tako.darksailor.dev";

home/scripts.nix

@@ -36,11 +36,11 @@ in {
       pkgs.writeShellApplication {
         name = "git-install-prepare-commit-msg";
         text = ''
-          cp ${../scripts/prepare-commit-msg} .git/hooks/prepare-commit-msg
+          ln -sf ${../scripts/prepare-commit-msg} .git/hooks/prepare-commit-msg
         '';
       }
     )
-    (mkScript ../scripts/yt-dlp.sh (with pkgs; [yt-dlp]))
-    (mkScript ../scripts/autossh.sh (with pkgs; [autossh openssh]))
+    # (mkScript ../scripts/yt-dlp.sh (with pkgs; [yt-dlp]))
+    # (mkScript ../scripts/autossh.sh (with pkgs; [autossh openssh]))
   ];
 }

home/services/default.nix

@@ -1,18 +1,20 @@
 {...}: {
   imports = [
+    ./gtk.nix
+    ./gui.nix
+    ./hyprland.nix
+    ./hyprmon.nix
+    ./hyprpaper.nix
+    ./ironbar
+    ./kdeconnect.nix
+    ./remmina.nix
+    # ./ollama.nix
     ./swaync.nix
     ./swayosd.nix
-    ./kdeconnect.nix
-    ./gtk.nix
-    # ./anyrun.nix
-    ./ironbar
-    ./gui.nix
-    # ./eww.nix
     ./xdg.nix
-    ./hyprmon.nix
-    ./hyprland.nix
-    ./hyprpaper.nix
-    ./remmina.nix
+    ./ironclaw.nix
+    # ./anyrun.nix
+    # ./eww.nix
     # ./wallpaperengine.nix
   ];
 }

home/services/hyprland.nix

@@ -2,6 +2,7 @@
   pkgs,
   device,
   lib,
+  inputs,
   ...
 }:
 # lib.optionalAttrs device.isNix
@@ -31,6 +32,8 @@
   wayland.windowManager.hyprland = {
     enable = device.is "ryu";
     systemd.enable = true;
+    package = pkgs.hyprland;
+    portalPackage = pkgs.xdph;
 
     settings = {
       # source = "${pkgs.catppuccinThemes.hyprland}/themes/mocha.conf";
@@ -172,7 +175,7 @@
 
       exec-once = [
         # "${pkgs.polkit-kde-agent}/libexec/polkit-kde-authentication-agent-1"
-        "${pkgs.mate.mate-polkit}/libexec/polkit-mate-authentication-agent-1"
+        "${pkgs.mate-polkit}/libexec/polkit-mate-authentication-agent-1"
         # "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1"
         # "${pkgs.swww}/bin/swww init; swww img ~/.local/share/dotfiles/images/wallpaper.jpg"
         # "${pkgs.ironbar}/bin/ironbar"
@@ -203,7 +206,7 @@
         "$mainMod, d, exec, ${lib.getExe pkgs.vicinae} toggle"
         "$mainMod, Space, exec, ${lib.getExe pkgs.vicinae} toggle"
         "$mainMod, p, pseudo, # dwindle"
-        "$mainMod, v, togglesplit,"
+        "$mainMod, v, layoutmsg, togglesplit"
         "$mainMod, a, exec, ${pkgs.swaynotificationcenter}/bin/swaync-client -t"
         "$mainMod, Tab, cyclenext"
         # Audio

home/services/hyprpaper.nix

@@ -8,8 +8,10 @@
     wallpapers = import ../../utils/wallhaven.nix {inherit pkgs;};
     nextcloudWallpapers = name: config.home.homeDirectory + "/Nextcloud/Wallpapers/" + name;
     # silksongFleas = nextcloudWallpapers "silksong-fleas.jpg";
-    bocchiVertical = nextcloudWallpapers "bocchi-vertical.jpg";
-    silksongShadeLord = nextcloudWallpapers "silksong-shadelord.jpg";
+
+    # The artist https://www.bilibili.com/video/BV1s44y1S7MM/
+    bocchiVertical = nextcloudWallpapers "bocchi-guitar.jpg";
+    frieren = nextcloudWallpapers "frieren.png";
   in {
     enable = device.is "ryu";
     settings = {
@@ -17,12 +19,12 @@
       wallpaper = [
         {
           monitor = device.monitors.primary;
-          path = silksongShadeLord;
+          path = wallpapers.moon;
           fit_mode = "cover";
         }
         {
           monitor = device.monitors.secondary;
-          path = wallpapers.frieren_3;
+          path = frieren;
           fit_mode = "cover";
         }
         {

home/services/ironclaw.nix

@@ -0,0 +1,12 @@
+{
+  pkgs,
+  lib,
+  device,
+  ...
+}: {
+  home.packages =
+    lib.optionals (device.is "ryu")
+    [
+      pkgs.ironclaw
+    ];
+}

home/services/ollama.nix

@@ -0,0 +1,7 @@
+{
+  pkgs,
+  device,
+  ...
+}: {
+  services.ollama.enable = device.is "shiro";
+}

home/services/xdg.nix

@@ -2,6 +2,7 @@
   pkgs,
   lib,
   device,
+  inputs,
   ...
 }: {
   xdg.portal = {
@@ -10,10 +11,9 @@
       hyprland.default = ["hyprland"];
       common.default = ["*" "hyprland"];
     };
-    extraPortals = with pkgs; [
-      kdePackages.xdg-desktop-portal-kde
-      xdg-desktop-portal-hyprland
-      xdg-desktop-portal-gtk
-    ];
   };
 }
+# // lib.optionalAttrs (device.is "ryu") {
+#   environment.pathsToLink = ["/share/xdg-desktop-portal" "/share/applications"];
+# }
+

modules/nixos/substituters.nix

@@ -1,50 +1,19 @@
-{
-  config,
-  lib,
-  ...
-}:
-with lib; let
-  cfg = config.nix.substituters;
-in {
-  options.nix.substituters = {
-    enableCuda = mkOption {
-      type = types.bool;
-      default = false;
-      description = "Enable NixOS CUDA cache";
-    };
-
-    enableLlamaCpp = mkOption {
-      type = types.bool;
-      default = false;
-      description = "Enable llama-cpp cache";
-    };
-  };
-
+{...}: {
   config = {
     nix.settings = {
-      trusted-substituters =
-        [
-          "https://nix-community.cachix.org"
-          "https://nixos-raspberrypi.cachix.org"
-        ]
-        ++ optionals cfg.enableLlamaCpp [
-          "https://llama-cpp.cachix.org"
-        ]
-        ++ optionals cfg.enableCuda [
-          "https://cache.nixos-cuda.org"
-        ];
+      trusted-substituters = [
+        "https://nix-community.cachix.org"
+        "https://nixos-raspberrypi.cachix.org"
+        "https://llama-cpp.cachix.org"
+        "https://cache.nixos-cuda.org"
+      ];
 
-      trusted-public-keys =
-        [
-          "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-          "nixos-raspberrypi.cachix.org-1:4iMO9LXa8BqhU+Rpg6LQKiGa2lsNh/j2oiYLNOQ5sPI="
-        ]
-        ++ optionals cfg.enableLlamaCpp [
-          "llama-cpp.cachix.org-1:H75X+w83wUKTIPSO1KWy9ADUrzThyGs8P5tmAbkWhQc="
-        ]
-        ++ optionals cfg.enableCuda [
-          "cache.nixos-cuda.org:74DUi4Ye579gUqzH4ziL9IyiJBlDpMRn9MBN8oNan9M="
-        ];
+      trusted-public-keys = [
+        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+        "nixos-raspberrypi.cachix.org-1:4iMO9LXa8BqhU+Rpg6LQKiGa2lsNh/j2oiYLNOQ5sPI="
+        "llama-cpp.cachix.org-1:H75X+w83wUKTIPSO1KWy9ADUrzThyGs8P5tmAbkWhQc="
+        "cache.nixos-cuda.org:74DUi4Ye579gUqzH4ziL9IyiJBlDpMRn9MBN8oNan9M="
+      ];
     };
   };
 }

neovim/default.nix

@@ -289,7 +289,7 @@ in {
         "core.keybinds" = {
           config = {
             default_keybinds = true;
-            neorg_leader = "<C-m>";
+            neorg_leader = "<C-i>";
           };
         };
         "core.integrations.treesitter" = {
@@ -686,7 +686,7 @@ in {
     blink-ripgrep.enable = true;
     blink-cmp-git.enable = true;
     blink-cmp-dictionary.enable = true;
-    blink-cmp-copilot.enable = true;
+    # blink-cmp-copilot.enable = true;
     blink-cmp-spell.enable = true;
     blink-cmp-tmux.enable = true;
     blink-compat = {

neovim/overlays.nix

@@ -42,8 +42,8 @@
       };
   };
 in [
-  inputs.nno.overlays.default
   inputs.nixvim.overlays.default
-  vimPlugins
+  inputs.nno.overlays.default
   tree-sitter-grammars
+  vimPlugins
 ]

nixos/default.nix

@@ -28,6 +28,7 @@
           inputs.sops-nix.nixosModules.sops
           inputs.stylix.nixosModules.stylix
           inputs.headplane.nixosModules.headplane
+          inputs.tangled-core.nixosModules.knot
 
           ./${device.name}/configuration.nix
           ../home/module.nix

nixos/documentation.nix

@@ -4,5 +4,5 @@
   documentation.dev.enable = true;
   documentation.doc.enable = true;
   documentation.nixos.enable = true;
-  documentation.man.generateCaches = true;
+  documentation.man.cache.enable = true;
 }

nixos/ryu/apps/crosspipe.nix

@@ -0,0 +1,3 @@
+{pkgs, ...}: {
+  environment.systemPackages = with pkgs; [crosspipe];
+}

nixos/ryu/apps/default.nix

@@ -7,7 +7,7 @@
     # ./alvr.nix
     ./easyeffects.nix
     ./vr.nix
-    ./helvum.nix
+    ./crosspipe.nix
     # ./wine.nix
     # ./virt.nix
     ./gparted.nix

nixos/ryu/apps/helvum.nix

@@ -1,3 +0,0 @@
-{pkgs, ...}: {
-  environment.systemPackages = with pkgs; [helvum];
-}

nixos/ryu/configuration.nix

@@ -3,6 +3,7 @@
   lib,
   device,
   config,
+  inputs,
   ...
 }: {
   imports = [
@@ -22,15 +23,6 @@
     tctiEnvironment.enable = true;
   };
 
-  programs = {
-    hyprland = {
-      enable = true;
-      withUWSM = true;
-      xwayland.enable = true;
-    };
-    uwsm.enable = true;
-  };
-
   systemd.services.NetworkManager-wait-online.enable = lib.mkForce false;
   # systemd.tmpfiles.rules = [
   #   "L+ /etc/gdm/.config/monitors.xml - - - - ${./monitors.xml}"
@@ -49,6 +41,7 @@
       extra-experimental-features = "nix-command flakes auto-allocate-uids";
       trusted-users = [device.user];
       extra-sandbox-paths = [config.programs.ccache.cacheDir];
+      download-buffer-size = 524288000;
     };
     extraOptions = ''
       build-users-group = nixbld
@@ -67,11 +60,6 @@
       # ../../builders/tsuba.nix
     ];
     distributedBuilds = true;
-    # Enable CUDA and llama-cpp caches
-    substituters = {
-      enableCuda = true;
-      enableLlamaCpp = true;
-    };
   };
 
   users.users.${device.user} = {

nixos/ryu/programs/default.nix

@@ -22,5 +22,6 @@
     ./foot.nix
     ./ddcutil.nix
     ./libnotify.nix
+    ./fish.nix
   ];
 }

nixos/ryu/programs/fish.nix

@@ -0,0 +1,7 @@
+{...}: {
+  programs.fish = {
+    enable = true;
+    generateCompletions = true;
+  };
+  stylix.targets.fish.enable = false;
+}

nixos/ryu/programs/gamemode.nix

@@ -1,6 +1,7 @@
 {
   pkgs,
   device,
+  lib,
   ...
 }: {
   programs.gamemode = {
@@ -12,7 +13,7 @@
       custom = {
         start = let
           out = pkgs.writeScriptBin "gamemode-start" ''
-            ${pkgs.lmstudio}/bin/lms unload
+            ${lib.getExe pkgs.ollama} ps | tail +2 | cut -d' ' -f1 | xargs ${lib.getExe pkgs.ollama} stop
             ${pkgs.libnotify}/bin/notify-send 'GameMode started'
           '';
         in "${out}/bin/gamemode-start";

nixos/ryu/programs/hyprland.nix

@@ -1,6 +1,19 @@
-{pkgs, ...}: {
+{
+  pkgs,
+  inputs,
+  ...
+}: {
   environment.systemPackages = with pkgs; [
-    hyprland
-    xorg.xhost
+    xhost
   ];
+  programs = {
+    hyprland = {
+      enable = true;
+      withUWSM = true;
+      xwayland.enable = true;
+      package = pkgs.hyprland;
+      portalPackage = pkgs.xdph;
+    };
+    uwsm.enable = true;
+  };
 }

nixos/ryu/programs/wireshark.nix

@@ -7,8 +7,5 @@
     enable = true;
     dumpcap.enable = true;
   };
-  environment.systemPackages = with pkgs; [
-    wireshark-qt
-  ];
   users.users.${device.user}.extraGroups = ["wireshark"];
 }

nixos/ryu/ryu.nix

@@ -130,11 +130,10 @@
     options = ["nofail"];
   };
 
-  # fileSystems."/volumes/windows-games" = {
-  #   device = "/dev/disk/by-partuuid/56359fb7-7d33-44d2-bebd-b0c53daeeb73";
-  #   fsType = "ntfs3";
-  #   options = ["nofail"];
-  # };
+  fileSystems."/var" = {
+    device = "/dev/disk/by-uuid/ff874913-dc21-43f3-82f8-cdf45dd888f7";
+    fsType = "ext4";
+  };
 
   swapDevices = [
     {

nixos/tako/configuration.nix

@@ -57,9 +57,6 @@
     };
     package = pkgs.nixVersions.nix_2_32; # deploy-rs doesn't work with nix >= 2.32
     distributedBuilds = true;
-    substituters = {
-      enableCuda = true;
-    };
   };
 
   users.users.${device.user} = {

nixos/tako/services/default.nix

@@ -12,6 +12,7 @@
     ./resolved.nix
     ./tailscale.nix
     ./gitea.nix
+    ./knot.nix
 
     ./affine.nix
     ./attic.nix
@@ -24,10 +25,11 @@
     ./llms.nix
     ./matrix
     ./monitoring.nix
+    # ./servius-website.nix
     # ./paperless.nix
     ./prowlarr.nix
     # ./searxng.nix
-    # ./shitpost.nix
+    ./shitpost.nix
   ];
   services = {
     nix-serve = {

nixos/tako/services/homepage.nix

@@ -59,6 +59,14 @@
                 siteMonitor = "https://deluge.tsuba.darksailor.dev";
               };
             }
+            {
+              "Aria2" = {
+                icon = "aria2.png";
+                description = "Aria2: Download Manager";
+                href = "https://aria2.tsuba.darksailor.dev";
+                siteMonitor = "https://aria2.tsuba.darksailor.dev";
+              };
+            }
             {
               "Home Assistant" = {
                 icon = "home-assistant.png";

nixos/tako/services/knot.nix

@@ -0,0 +1,31 @@
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}: {
+  services.tangled.knot = {
+    enable = true;
+    package = inputs.tangled-core.packages.${pkgs.system}.knot;
+    server = {
+      hostname = "tangled.darksailor.dev";
+      owner = "did:plc:tllyvpa5oxw6fwwhkj3kv6dr";
+      listenAddr = "127.0.0.1:5969";
+    };
+  };
+
+  services.caddy.virtualHosts."tangled.darksailor.dev".extraConfig = ''
+    reverse_proxy ${config.services.tangled.knot.server.listenAddr} {
+        header_up Host {host}
+        header_up X-Real-IP {remote}
+        header_up X-Forwarded-For {remote}
+        header_up X-Forwarded-Proto {scheme}
+    }
+    handle /events/* {
+        reverse_proxy ${config.services.tangled.knot.server.listenAddr} {
+            header_up X-Forwarded-For {remote}
+            header_up Host {host}
+        }
+    }
+  '';
+}

nixos/tako/services/matrix/cinny.nix

@@ -0,0 +1,66 @@
+{
+  pkgs,
+  config,
+  inputs,
+  ...
+}: let
+  base_domain = "darksailor.dev";
+  cinnyConfig = builtins.toJSON {
+    defaultHomeserver = 0;
+    homeserverList = ["darksailor.dev" "matrix.org"];
+    allowCustomHomeservers = false;
+    hashRouter = {
+      enabled = true;
+      basename = "/";
+    };
+  };
+  cinnyConfigFile = pkgs.writeText "cinny-config.json" cinnyConfig;
+  cinny = with pkgs;
+    buildNpmPackage rec {
+      pname = "cinny-unwrapped";
+      version = "4.11.1";
+      src = inputs.cinny;
+
+      nodejs = nodejs_22;
+
+      npmDepsHash = "sha256-27WFjb08p09aJRi0S2PvYq3bivEuG5+z2QhFahTSj4Q=";
+
+      nativeBuildInputs = [
+        python3
+        pkg-config
+      ];
+
+      buildInputs =
+        [
+          pixman
+          cairo
+          pango
+        ]
+        ++ lib.optionals stdenv.hostPlatform.isDarwin [giflib];
+
+      installPhase = ''
+        runHook preInstall
+
+        cp -r dist $out
+
+        runHook postInstall
+      '';
+    };
+in {
+  services.caddy.virtualHosts = {
+    "matrix.${base_domain}".extraConfig = ''
+      handle /_matrix/* {
+        reverse_proxy /_matrix/* localhost:${toString (builtins.elemAt config.services.matrix-tuwunel.settings.global.port 0)}
+      }
+      handle_path /config.json  {
+        file_server
+        root ${cinnyConfigFile}
+      }
+      handle {
+          root * ${cinny}
+          try_files {path} /index.html
+          file_server
+      }
+    '';
+  };
+}

nixos/tako/services/matrix/default.nix

@@ -1,7 +1,8 @@
 {...}: {
   imports = [
     ./tuwunel.nix
-    # ./signal.nix // libolm deprecated
+    ./cinny.nix
+    # ./signal.nix
     # ./discord.nix
   ];
 }

nixos/tako/services/matrix/tuwunel.nix

@@ -8,12 +8,6 @@
   client_id = "tuwunel";
   rtc_domain = "matrix-rtc.${base_domain}";
   jwt_port = 8081;
-  cinnyConfig = builtins.toJSON {
-    defaultHomeserver = 0;
-    homeserverList = ["darksailor.dev" "matrix.org"];
-    allowCustomHomeservers = false;
-  };
-  cinnyConfigFile = pkgs.writeText "cinny-config.json" cinnyConfig;
 in {
   sops = {
     secrets."tuwunel/client_id" = {
@@ -67,16 +61,20 @@ in {
     package = pkgs.matrix-tuwunel;
   };
   services.caddy.virtualHosts = {
-    "matrix.${base_domain}".extraConfig = ''
-      reverse_proxy /_matrix/* localhost:${toString port}
-      handle_path /config.json  {
-        file_server
-        root ${cinnyConfigFile}
-      }
-      root * ${pkgs.cinny}
-      try_files {path} / index.html
-      file_server
-    '';
+    # "matrix.${base_domain}".extraConfig = ''
+    #   handle /_matrix/* {
+    #     reverse_proxy /_matrix/* localhost:${toString port}
+    #   }
+    #   handle_path /config.json  {
+    #     file_server
+    #     root ${cinnyConfigFile}
+    #   }
+    #   handle {
+    #       root * ${cinny}
+    #       try_files {path} /index.html
+    #       file_server
+    #   }
+    # '';
     "${base_domain}".extraConfig = ''
       reverse_proxy /.well-known/* localhost:${toString port}
     '';

nixos/tako/services/monitoring.nix

@@ -23,6 +23,9 @@
     caddy = 2019;
   };
 in {
+  sops.secrets."grafana/secret_key" = {
+    owner = "grafana";
+  };
   # Grafana configuration with Authelia integration
   services.grafana = {
     enable = true;
@@ -54,6 +57,7 @@ in {
       security = {
         disable_gravatar = true;
         cookie_secure = true;
+        secret_key = ''$__file{${config.sops.secrets."grafana/secret_key".path}}'';
       };
 
       analytics = {
@@ -281,7 +285,7 @@ in {
           {
             targets = [
               "tsuba:8096" # jellyfin (built-in /metrics endpoint)
-              "tsuba:8123" # homeassistant (configure prometheus integration)
+              # "tsuba:8123" # homeassistant (configure prometheus integration)
               "tsuba:9617" # pihole-exporter
             ];
             labels = {
@@ -298,12 +302,12 @@ in {
             target_label = "__metrics_path__";
             replacement = "/metrics";
           }
-          {
-            source_labels = ["__address__"];
-            regex = "tsuba:8123";
-            target_label = "__metrics_path__";
-            replacement = "/api/prometheus";
-          }
+          # {
+          #   source_labels = ["__address__"];
+          #   regex = "tsuba:8123";
+          #   target_label = "__metrics_path__";
+          #   replacement = "/api/prometheus";
+          # }
         ];
       }
 

nixos/tako/services/nextcloud.nix

@@ -17,7 +17,7 @@
   services = {
     nextcloud = {
       enable = true;
-      package = pkgs.nextcloud32;
+      package = pkgs.nextcloud33;
       extraApps = {
         inherit (config.services.nextcloud.package.packages.apps) contacts calendar bookmarks user_oidc;
       };

nixos/tako/services/servius-website.nix

@@ -0,0 +1,12 @@
+{
+  inputs,
+  pkgs,
+  ...
+}: let
+  website = inputs.servius-website.packages.${pkgs.system}.default;
+in {
+  services.caddy.virtualHosts."servius.darksailor.dev".extraConfig = ''
+    root * ${website}
+    file_server
+  '';
+}

nixos/tsuba/services/aria2.nix

@@ -0,0 +1,33 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  sops.secrets."aria2/rpc-secret" = {};
+
+  services.aria2 = {
+    enable = true;
+    rpcSecretFile = config.sops.secrets."aria2/rpc-secret".path;
+    settings = {
+      continue = true;
+      dir = "/media/downloads";
+      enable-rpc = true;
+      file-allocation = "none";
+      max-concurrent-downloads = 5;
+      max-connection-per-server = 16;
+      rpc-listen-all = true;
+      rpc-listen-port = 6809;
+      split = 16;
+    };
+  };
+
+  services.caddy.virtualHosts."aria2.tsuba.darksailor.dev".extraConfig = ''
+    import cloudflare
+    root * ${pkgs.ariang}/share/ariang
+    file_server
+  '';
+  services.caddy.virtualHosts."aria2.tsuba.darksailor.dev:6800".extraConfig = ''
+    import cloudflare
+    reverse_proxy localhost:${toString config.services.aria2.settings.rpc-listen-port}
+  '';
+}

nixos/tsuba/services/default.nix

@@ -6,6 +6,7 @@
     ./caddy.nix
     ./servarr.nix
     ./deluge.nix
+    ./aria2.nix
     ./homeassistant.nix
     ./flaresolverr.nix
     ./caddy.nix

overlays.nix

@@ -1,5 +1,7 @@
 {inputs, ...} @ self: let
-  shell-scipts = final: prev: {
+  cratesNix = pkgs: inputs.crates-nix.mkLib {inherit pkgs;};
+  # --- Shell / CLI utilities ---
+  shell-scripts = final: prev: {
     handlr-xdg = final.pkgs.writeShellApplication {
       name = "xdg-open";
       runtimeInputs = [final.pkgs.handlr-regex];
@@ -8,184 +10,9 @@
       '';
     };
   };
-  misc-applications = final: prev: {
-    command-runner = inputs.command-runner.packages.${prev.system}.command-runner;
-    goread = final.pkgs.buildGoModule {
-      pname = "goread";
-      version = "v1.6.4";
-      vendorHash = "sha256-/kxEnw8l9S7WNMcPh1x7xqiQ3L61DSn6DCIvJlyrip0";
-      src = final.pkgs.fetchFromGitHub {
-        owner = "TypicalAM";
-        repo = "goread";
-        rev = "v1.6.4";
-        sha256 = "sha256-m6reRaJNeFhJBUatfPNm66LwTXPdD/gioT8HTv52QOw";
-      };
-      patches = [patches/goread.patch];
-      checkPhase = null;
-    };
-    music-player-git = inputs.music-player.packages.${prev.system}.default;
-    davis = let
-      davis-src = final.pkgs.fetchFromGitHub {
-        owner = "SimonPersson";
-        repo = "davis";
-        rev = "main";
-        sha256 = "sha256-p4l1nF6M28OyIaPorgsyR7NJtmVwpmuws67KvVnJa8s";
-      };
-      cargoToml =
-        builtins.fromTOML (builtins.readFile "${davis-src}/Cargo.toml");
-    in
-      final.rustPlatform.buildRustPackage {
-        pname = cargoToml.package.name;
-        version = cargoToml.package.version;
-        src = davis-src;
-        cargoLock = {lockFile = "${davis-src}/Cargo.lock";};
-        buildPhase = ''
-          runHook cargoBuildHook
-          runHook cargoInstallPostBuildHook
-        '';
-        runtimeInputs = [final.pkgs.picat];
-        buildInputs = [final.pkgs.picat];
-        installPhase = ''
-          mkdir -p $out/bin
-          cp $bins $out/bin
-          cp $src/subcommands/cur/davis-cur-vertical $out/bin
-          cp $src/subcommands/cur/davis-cur-horizontal $out/bin
-          cp $src/subcommands/cover/davis-cover $out/bin
-        '';
-      };
 
-    openapi-tui = let
-      cargoToml = builtins.fromTOML (builtins.readFile "${inputs.openapi-tui}/Cargo.toml");
-    in
-      final.rustPlatform.buildRustPackage {
-        pname = cargoToml.package.name;
-        version = cargoToml.package.version;
-        src = inputs.openapi-tui;
-        cargoLock = {lockFile = "${inputs.openapi-tui}/Cargo.lock";};
-        buildInputs = with final;
-          pkgs.lib.optionals pkgs.stdenv.isDarwin [
-            pkgs.apple-sdk_13
-          ]
-          ++ pkgs.lib.optionals pkgs.stdenv.isLinux [
-            pkgs.openssl
-          ];
-        PKG_CONFIG_PATH = with final; pkgs.lib.makeSearchPath "lib/pkgconfig" [pkgs.openssl.dev];
-        nativeBuildInputs = with final; [pkgs.pkg-config];
-      };
-    picat = let
-      picat-src = final.pkgs.fetchFromGitHub {
-        owner = "SimonPersson";
-        repo = "picat";
-        rev = "main";
-        sha256 = "sha256-HheBinHW4RLjRtiE8Xe5BoEuSCdtZTA9XkRJgtDkXaM";
-      };
-      cargoToml =
-        builtins.fromTOML (builtins.readFile "${picat-src}/Cargo.toml");
-    in
-      final.rustPlatform.buildRustPackage {
-        pname = cargoToml.package.name;
-        version = cargoToml.package.version;
-        src = picat-src;
-        cargoLock = {lockFile = "${picat-src}/Cargo.lock";};
-      };
-    psst =
-      if final.pkgs.stdenv.isLinux
-      then
-        (prev.psst.overrideAttrs (finalAttrs: prevAttrs: {
-          postInstall =
-            (prevAttrs.postInstall or "")
-            + ''
-              patch $out/share/applications/Psst.desktop < ${./patches/psst.patch}
-            '';
-        }))
-      else
-        final.rustPlatform.buildRustPackage rec {
-          pname = "psst";
-          version = "1";
-          src = final.pkgs.fetchFromGitHub {
-            owner = "jpochyla";
-            repo = "psst";
-            rev = "master";
-            sha256 = "sha256-W+MFToyvYDQuC/8DqigvENxzJ6QGQOAeAdmdWG6+qZk";
-          };
-          buildInputs = with final; [
-            pkgs.apple-sdk_13
-          ];
-          cargoLock = {
-            lockFile = "${src}/Cargo.lock";
-            outputHashes = {
-              "cubeb-0.10.3" = "sha256-gV1KHOhq678E/Rj+u8jX9Fw+TepPwuZdV5y/D+Iby+o";
-              "druid-0.8.3" = "sha256-hTB9PQf2TAhcLr64VjjQIr18mczwcNogDSRSN5dQULA";
-              "druid-enums-0.1.0" = "sha256-KJvAgKxicx/g+4QRZq3iHt6MGVQbfOpyN+EhS6CyDZk";
-            };
-          };
-        };
-    ddcbacklight = inputs.ddcbacklight.packages.${prev.system}.ddcbacklight;
-    # ik_llama = prev.llama-cpp.overrideAttrs (oldAttrs: {
-    #   src = inputs.ik_llama;
-    #   version = "5995";
-    # });
-    # llama-cpp = prev.llama-cpp.overrideAttrs (oldAttrs: {
-    #   src = inputs.llama-cpp;
-    #   version = "6178";
-    #   cmakeFlags = oldAttrs.cmakeFlags;
-    # });
-    python312 = prev.python312.override {
-      packageOverrides = final: prev: {
-        pysaml2 = prev.pysaml2.overridePythonAttrs (orig: {
-          doCheck = false;
-          # disabledTests =
-          #   orig.disabledTests
-          #   ++ [
-          #     "test_encrypted_response_6"
-          #     "test_validate_cert_chains"
-          #     "test_validate_with_root_cert"
-          #   ];
-        });
-      };
-    };
-    zeronsd = let
-      src = inputs.zeronsd;
-    in
-      final.rustPlatform.buildRustPackage {
-        inherit src;
-        pname = "zeronsd";
-        version = "0.6";
-
-        strictDeps = true;
-        buildInputs = [final.pkgs.openssl];
-        nativeBuildInputs = [final.pkgs.pkg-config];
-
-        doCheck = false;
-        RUSTFMT = "${final.pkgs.rustfmt}/bin/rustfmt";
-
-        cargoLock = {lockFile = "${src}/Cargo.lock";};
-      };
-    # alvr-master = inputs.alvr.packages.${prev.system}.default;
-    caddyWithCloudflare = inputs.nixpkgs.legacyPackages.${final.system}.caddy.withPlugins {
-      plugins = ["github.com/caddy-dns/cloudflare@v0.2.2"];
-      hash = "sha256-dnhEjopeA0UiI+XVYHYpsjcEI6Y1Hacbi28hVKYQURg=";
-    };
-    nix-auth = inputs.nix-auth.packages.${prev.system}.nix-auth;
-    kitty = inputs.nixpkgs-stable.legacyPackages.${prev.system}.kitty;
-    yabai = prev.yabai.overrideAttrs (oldAttrs: rec {
-      version = "7.1.16";
-      src = final.fetchzip {
-        url = "https://github.com/koekeishiya/yabai/releases/download/v${version}/yabai-v${version}.tar.gz";
-        hash = "sha256-rEO+qcat6heF3qrypJ02Ivd2n0cEmiC/cNUN53oia4w=";
-      };
-    });
-  };
-
-  anyrun-overlay = final: prev: {
-    anyrun =
-      inputs.anyrun.packages.${prev.system}.anyrun.overrideAttrs
-      (finalAttrs: prevAttrs: {patches = [./patches/ctrl-np.patch];});
-    hyprwin = inputs.anyrun-hyprwin.packages.${prev.system}.hyprwin;
-    nixos-options = inputs.anyrun-nixos-options.packages.${prev.system}.default;
-    anyrun-rink = inputs.anyrun-rink.packages.${prev.system}.default;
-  };
-  tmuxPlugins = final: prev: {
+  # --- Terminal multiplexers ---
+  terminal = final: prev: {
     tmuxPlugins =
       prev.tmuxPlugins
       // {
@@ -200,28 +27,18 @@
           };
         };
       };
-    tmux-float = inputs.tmux-float.packages.${prev.system}.default;
-  };
-  catppuccinThemes = final: prev: {
-    catppuccinThemes = import ./themes/catppuccin.nix {pkgs = final.pkgs;};
-  };
-  nix-index-db = final: prev: {
-    nix-index-database = final.runCommandLocal "nix-index-database" {} ''
-      mkdir -p $out
-      ln -s ${
-        inputs.nix-index-database.legacyPackages.${prev.system}.database
-      } $out/files
-    '';
-  };
-  zellij = final: prev: {
+    tmux-float = inputs.tmux-float.packages.${prev.stdenv.hostPlatform.system}.default;
     zellijPlugins = {
-      zjstatus = inputs.zjstatus.packages.${prev.system}.default;
+      zjstatus = inputs.zjstatus.packages.${prev.stdenv.hostPlatform.system}.default;
     };
   };
-  libfprint = final: prev: {
+
+  # --- System libraries ---
+  system-libs = final: prev: {
+    # Custom libfprint with CS9711 fingerprint reader support
+    # https://github.com/archeYR/libfprint-CS9711/commits/cs9711-rebase/
     libfprint = prev.libfprint.overrideAttrs (oldAttrs: {
       version = "git";
-      # https://github.com/archeYR/libfprint-CS9711/commits/cs9711-rebase/
       src = final.fetchFromGitHub {
         owner = "archeYR";
         repo = "libfprint-CS9711";
@@ -237,66 +54,73 @@
           final.doctest
         ];
     });
-    # fprintd = inputs.nixpkgs-stable.legacyPackages.${prev.system}.fprintd;
-    # fprintd = prev.fprintd.overrideAttrs (oldAttrs: {
-    #   src = inputs.nixpkgs-stable.legacyPackages.${prev.system}.fprintd.src;
-    # });
   };
-  csshacks = final: prev: {
-    csshacks = inputs.csshacks;
+
+  # --- Networking ---
+  networking = final: prev: {
+    caddyWithCloudflare = inputs.nixpkgs.legacyPackages.${prev.stdenv.hostPlatform.system}.caddy.withPlugins {
+      plugins = ["github.com/caddy-dns/cloudflare@v0.2.2"];
+      hash = "sha256-Gb1nC5fZfj7IodQmKmEPGygIHNYhKWV1L0JJiqnVtbs=";
+    };
   };
-  jellyfin = final: prev: {
-    jellyfin-web = prev.jellyfin-web.overrideAttrs (finalAttrs: previousAttrs: {
-      installPhase = ''
-        runHook preInstall
 
-        # this is the important line
-        sed -i "s#</head>#<script src=\"configurationpage?name=skip-intro-button.js\"></script></head>#" dist/index.html
+  # --- Media ---
+  media = final: prev: {
+    ddcbacklight = inputs.ddcbacklight.packages.${prev.stdenv.hostPlatform.system}.ddcbacklight;
+    music-player-git = inputs.music-player.packages.${prev.stdenv.hostPlatform.system}.default;
+  };
 
-        mkdir -p $out/share
-        cp -a dist $out/share/jellyfin-web
-
-        runHook postInstall
-      '';
+  # --- macOS-specific ---
+  darwin = final: prev: {
+    kitty = inputs.nixpkgs-stable.legacyPackages.${prev.stdenv.hostPlatform.system}.kitty;
+    yabai = prev.yabai.overrideAttrs (oldAttrs: rec {
+      version = "7.1.16";
+      src = final.fetchzip {
+        url = "https://github.com/koekeishiya/yabai/releases/download/v${version}/yabai-v${version}.tar.gz";
+        hash = "sha256-rEO+qcat6heF3qrypJ02Ivd2n0cEmiC/cNUN53oia4w=";
+      };
     });
   };
-  # immich = final: prev: {
-  #   immich-latest = prev.immich.overrideAttrs (oldAttrs: {
-  #     version = "v1.142.0";
-  #     src = inputs.immich;
-  #   });
-  # };
-  vr = final: prev: {
-    # wivrn-nightly = prev.wivrn.overrideAttrs (oldAttrs: {
-    #   version = "v25.11.1";
-    #   src = inputs.wivrn;
-    # });
-    wivrn-nightly = inputs.wivrn.packages.${prev.system}.default;
+
+  applications = final: prev: {
+    iamb = inputs.iamb.packages.${prev.stdenv.hostPlatform.system}.default;
+    hyprland = inputs.hyprland.packages.${prev.stdenv.hostPlatform.system}.hyprland;
+    xdg-desktop-portal-hyprland = prev.enableDebugging inputs.hyprland.packages.${prev.stdenv.hostPlatform.system}.xdg-desktop-portal-hyprland;
+    xdph = inputs.nixpkgs-master.legacyPackages.${prev.stdenv.hostPlatform.system}.xdg-desktop-portal-hyprland;
+    ironclaw = (cratesNix prev).buildCrate "ironclaw" {
+      nativeBuildInputs = [prev.pkg-config];
+      buildInputs = [prev.openssl];
+      doCheck = false;
+    };
   };
-  games = final: prev: {
-    hytale-launcher = inputs.hytale-launcher.packages.${prev.system}.default;
+
+  # --- Themes and assets ---
+  themes = final: prev: {
+    catppuccinThemes = import ./themes/catppuccin.nix {pkgs = final.pkgs;};
+    nix-index-database = final.runCommandLocal "nix-index-database" {} ''
+      mkdir -p $out
+      ln -s ${inputs.nix-index-database.legacyPackages.${prev.stdenv.hostPlatform.system}.database} $out/files
+    '';
   };
 in
   [
-    games
-    vr
-    anyrun-overlay
-    catppuccinThemes
-    csshacks
+    # Local overlays
+    shell-scripts
+    terminal
+    system-libs
+    networking
+    media
+    darwin
+    themes
+    applications
+
+    # External input overlays
     inputs.deploy-rs.overlays.default
-    inputs.nix-minecraft.overlay
-    inputs.nur.overlays.default
-    inputs.rust-overlay.overlays.default
+    inputs.eilmeldung.overlays.default
     inputs.handoff.overlays.default
     inputs.headplane.overlays.default
+    inputs.nix-minecraft.overlay
+    inputs.nur.overlays.default
     inputs.vicinae.overlays.default
-    inputs.eilmeldung.overlays.default
-    jellyfin
-    libfprint
-    misc-applications
-    nix-index-db
-    shell-scipts
-    tmuxPlugins
-    zellij
   ]
   ++ (import ./neovim/overlays.nix {inherit inputs;})

secrets/secrets.yaml

@@ -79,7 +79,7 @@ minecraft:
     modded: ENC[AES256_GCM,data:6itrol9NObR3TczEeOa7wkykgqkpDus0VkHBRpU6VdQ=,iv:F56uYdHozJvkJ+m18aviTWzCrLfW2VcxkbOqpnRiniA=,tag:WLKA+uIJJtlDfMMOn0ak7Q==,type:str]
 grafana:
     adminPassword: ENC[AES256_GCM,data:im6FJVlVUoZg+9W6KmsqtloH4nB6AhXOcia5waRyFKj2DoQlt4jhPH1CFvw=,iv://D6aD/fGl7h4KmtQcQ0TQLWLfKdIs4+EMg2LWjPHvg=,tag:6gHu/V0V0a8GpcgA/hUwXg==,type:str]
-    secretKey: ENC[AES256_GCM,data:LD0x8Fa6SU1+6mwxLkKa/o+ZqeuRIr7o/AKS7EmrDYj0vzrA3/FjViVJNfkOJDch9TbVyjIpk2ZLwxHXOZx7MA==,iv:t6UwZj2JZpMIDsDDeJ4rZah4aBoMIKaoiu9VU2VhViE=,tag:MIz/b8JWYtOpUCcg6gYhJg==,type:str]
+    secret_key: ENC[AES256_GCM,data:QkNTWQyQGgD/zJ0C0nkqTuxJXCx/hqwFH1XrJEGcIB7U3PUNdMpvTYrazgGRUcfEUjMeCIbUgYcamrPJJgaBsA==,iv:RZa79OtDS74JErBk/j5wg/p02Rd4zCXLi4LQGffHLmU=,tag:sbsovzFXj3xmDIF+ACwPgQ==,type:str]
 discord:
     token: ENC[AES256_GCM,data:M6TayHpIa0J1w3zVRKPPU0P/f18UXOpxzU7fjKNCx8YxzSAaQfY52S5XpiqDgjPWfWdSxzG2VVDqu1708Vwofa8IRKwWafam,iv:x0ySoaS68aLRVUcQin096RoeQGRELvNwdFJxezPj/cA=,tag:Omv5uL97y7ZTI8juVJFNug==,type:str]
 lastfm:
@@ -108,6 +108,8 @@ coturn:
     static_auth_secret: ENC[AES256_GCM,data:osEBYgWGZl+SnqVV1G9IxMys/qDm6WTtj4nILYVw0klDjiB6vd21yA0ik/rLv9E6Y539uMCk3oB0NS7I72U1hQ==,iv:jruS3vfe0fVHY67qNhEgaCEp/9cR57UIu8a/LhdTC1o=,tag:vhxXhh9u4bOSu/lxINjvew==,type:str]
 affine:
     db_password: ENC[AES256_GCM,data:AbpoEbmeihtVIoRaWxVL8+v3oCk5iiia9qZLKgyy98qTuNZruiaV3kQN6clYvWgHbzJta5/H9e+xocrEtw8C/A==,iv:2vPeDAJuVujPgM+kr6AFAvat2MCJnsblebx23Ey7YNA=,tag:ukuK30aZ//MKabhSRtLNXw==,type:str]
+aria2:
+    rpc-secret: ENC[AES256_GCM,data:peFtDURHjlQOAM1v1AP9BBHmXhpPTE0kKRcL9eBV9rIFnDcKw5+nAP9+8sW4CRcE6l9DoxZFau7+IsnDgrFp5g==,iv:DkHiaZlPcHMnOPLflxlF4fs/bdOe799/SQQZ9WZ1Tq4=,tag:R1aWdUQdtzySOmYitNxD1Q==,type:str]
 sops:
     age:
         - recipient: age1pw7kluxp7872c63ne4jecq75glj060jkmqwzkk6esatuyck9egfswufdpk
@@ -119,7 +121,7 @@ sops:
             VGZKdHpVeFRpQUxtSEkyaEhLMlBJcGsKLb0DvPNZosPBUuiX6qz1s5IO5INQh8CK
             ZtXTVClwMSmaUYhdSB2gKFrKVZHXTJZ4oAL5t/BpC0pOHyr+o96T3Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-02-19T21:23:49Z"
-    mac: ENC[AES256_GCM,data:Pey0VPpH1lZazbAqHrrwuoEHZL2Pi7uMV/tR8aLGI958JHDxuHZK41YEOsMa+aiOtiJclgRvO8iOb0oDESsVO5hDTCou7/sJe2Epk62lEclTiho+QnjhnEmP2qYcuWfR1PVwk/n/wkPWm+rBsYGH7PpQZeYUznWQaHPZPFNnIPw=,iv:KTe0Quu/MJA17BivQDCTnBi5IAGtq6x0GKaqm4MuUUo=,tag:IPehj8blXzuEr0HN85y4eg==,type:str]
+    lastmodified: "2026-03-13T17:35:01Z"
+    mac: ENC[AES256_GCM,data:6VfirvrqmBLDg3XnJzBY5z1Fy/yAOhuLF6YnFH0pJ17beIHfkQQ/BbL0vBI1YfjyGjqQannp/0SpEwqA5uhvaHpQV2F1eFwotjrgFiGBrnhirLSXiHLGcnQtIeu2ue1McwbtJVZNWaOtdcz71+QeKn53+4jcDnb/wu/46+Q/nB0=,iv:eQ61Bpyom1cvTRZMiAMes2lrAGlAtuKTAxR/k2Caxh4=,tag:i+SBR1/V6jb3c3mGT4XykQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0