WIP: fix hyprland

WIP: treewide: fixes for nixos 26.05
xps16/disks: fix zstd compress mount option
2026-05-21 14:37:36 +09:00 · 2026-05-21 14:36:13 +09:00 · 2026-04-27 05:36:17 +09:00 · 2026-04-13 14:28:31 +09:00 · 2026-04-13 14:27:48 +09:00 · 2026-04-13 14:26:58 +09:00
246 changed files with 8877 additions and 3923 deletions
@@ -1,10 +1,11 @@
 keys:
  - &gpg_h7x4 F7D37890228A907440E1FD4846B9228E814A2AAC
-  - &host_tsuki age1c92j4w0gqh32hwssl5m2mfrggssxax9pge8qxwytv9lmrnfttcvqdrgsst
+  - &host_tsuki age1ue7uv559wf6tfjsutn9dsh07vpk53sgrfkdzqy4ltg6dnxcxeg7srx800u
  - &host_kasei age1eu2a6m3adakfzelfa9pqpl74a5dz0wkyr0v7gegm5ajnx7aqmqcqsp2ftc
-  - &host_dosei age179y7apa80p9unvyjtsphpzyhve90ex986vlxkx43xt9n6m7en3csqnug7c
-  - &host_europa age14mer45e52r2q4uz8n3fmv69tvk8gvwany4m4ndudud8ajv3jm4nqdj9m6a
+  - &host_dosei age1s6s4w7cdfgajm30z9gy8va8pvs2lrzk5gnsg0hmn5z2sl8z36seqej406r
+  - &host_xps16 age1np3fg9ue2tp4l47x7waapvjxh5zcaye2j54laapy7uklamve2c4qv3gytm
  - &home age10f4a5acpar8vwz3v298r3nv7gggfpmyh4wxpkc2hwq9paq0scf8qee8lau
+  - &home_dosei age17acs5lw7npma4sughxq3wj3cs5gjkenqdzscyvaks0er33n8gupsce7jlp

 creation_rules:
  - path_regex: secrets/common.yaml
@@ -15,8 +16,9 @@ creation_rules:
        - *host_tsuki
        - *host_kasei
        - *host_dosei
-        - *host_europa
+        - *host_xps16
        - *home
+        - *home_dosei

  - path_regex: secrets/home.yaml
    key_groups:
@@ -24,6 +26,14 @@ creation_rules:
        - *gpg_h7x4
        age:
        - *home
+        - *home_dosei
+
+  - path_regex: secrets/xps16.yaml
+    key_groups:
+      - pgp:
+        - *gpg_h7x4
+        age:
+        - *host_xps16

  - path_regex: secrets/kasei.yaml
    key_groups:
@@ -45,10 +55,3 @@ creation_rules:
        - *gpg_h7x4
        age:
        - *host_dosei
-
-  - path_regex: secrets/europa.yaml
-    key_groups:
-      - pgp:
-        - *gpg_h7x4
-        age:
-        - *host_europa
@@ -1,5 +1,7 @@
 [![built with nix](https://builtwithnix.org/badge.svg)](https://builtwithnix.org)

+![works on my machine](https://img.shields.io/badge/status-works_on_my_machine-blue)
+
 # Nix Dotfiles

 These are my dotfiles for several nix machines.
@@ -14,7 +16,8 @@ Here are some of the interesting files and dirs:
 | `/modules` | Custom nixos modules that I use in my own configuration. If you see options that does not appear in [NixOS Search][nixos-search], they might be defined here. |
 | `/package-overrides` | Updated or pinned versions of packages that have not been upstreamed to nixpkgs (yet). |
 | `/secrets` | Encrypted [sops-nix][sops-nix] secrets. |
-| `flake.nix` | The root of everyting. Defines the inputs and outputs of the project. Also applies misc overlays and adds config-wide modules. See [Nix Flakes][nix-flakes] for more information. |
+| `flake.nix` | The root of everything. Defines the inputs and outputs of the project. Also applies misc overlays and adds config-wide modules. See [Nix Flakes][nix-flakes] for more information. |
+

 ## Hosts

@@ -22,8 +25,7 @@ Here are some of the interesting files and dirs:
 |------|--------------|---------|
 | `Tsuki` | Dell Poweredge r710 server | Data storage / Build server / Selfhosted services. This server hosts a wide variety of services, including websites, matrix server, git repos, CI/CD and more. **This is probably the most interesting machine to pick config from** |
 | `Kasei` | AMD Zen 2 CPU / AMD GPU - desktop computer | Semi-daily driver. This is my main computer at home. |
-| `Dosei` | Dell Optiplex | Work computer, mostly used for development and testing. |
-| `Europa` | Dell Optiplex | Other work computer, used as nix builder for `Dosei`. |
+

 ## home-manager configuration

@@ -36,6 +38,74 @@ Here are some of the interesting files and dirs:
 | `/home/services` | Configuration for services/daemons that are user-specific. |
 | `/home/shell.nix` | Shell-agnostic configuration. This includes aliases, envvars, functions, etc. |

+
+## Some useful long commands
+
+Build configuration without switching:
+
+```
+nix build .#nixosConfigurations.tsuki.config.system.build.toplevel -L
+```
+
+Check why configuration depends on package:
+
+```
+NIXPKGS_ALLOW_INSECURE=1 nix why-depends .#nixosConfigurations.tsuki.config.system.build.toplevel .#pkgs.suspiciousPackage
+```
+
+Re-encrypt sops secrets with new key:
+
+```
+sops updatekeys secrets/hosts/file.yml
+```
+
+## Setting up a new machine
+
+### 1. Move gpg keys to
+
+```console
+# Export on some machine
+gpg --export-secret-keys --armor nani.wtf > ~/SD/gpg_keys.pem
+
+# Import
+gpg --import ~/SD/gpg_keys.pem
+```
+
+### 2. Generating host keys, and converting to age keys for nix-sops host secrets
+
+```console
+# Create host keys
+ssh-keygen -A
+
+# Convert public key to age format
+nix-shell -p ssh-to-age --run 'cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age'
+
+# Register this key in `.sops.yaml`
+$EDITOR .sops.yaml
+
+# Update keys
+sops updatekeys secrets/common.yaml
+sops updatekeys secrets/$(hostname).yaml # if present
+```
+
+### 3. Creating new ssh key for nix-sops home secrets
+
+```console
+# Create new key
+ssh-keygen -t ed25519 -b 4096 -C "sops-nix home key" -f ~/.ssh/id_ed25519_home_sops -N ''
+
+# Convert public key to age format
+nix-shell -p ssh-to-age --run 'cat ~/.ssh/id_ed25519_home_sops.pub | ssh-to-age'
+
+# Register this key in `.sops.yaml`
+$EDITOR .sops.yaml
+
+# Update keys
+sops updatekeys secrets/common.yaml
+sops updatekeys secrets/home.yaml
+```
+
+
 [home-manager]: https://github.com/nix-community/home-manager
 [nixos-search]: https://search.nixos.org/options
 [sops-nix]: https://github.com/Mic92/sops-nix
@@ -1,30 +1,34 @@
 {
  "nodes": {
-    "dotfiles": {
-      "flake": false,
+    "disko": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
      "locked": {
-        "lastModified": 1654179945,
-        "narHash": "sha256-vnD7vu/hRBPoqL6Wse9CELitW30a9P++QTPnNm1qHjE=",
-        "ref": "master",
-        "rev": "37bdd48de4bfa8e03a8ab5ef840b2509e193e6a1",
-        "revCount": 96,
-        "type": "git",
-        "url": "https://git.pvv.ntnu.no/oysteikt/dotfiles"
+        "lastModified": 1768920986,
+        "narHash": "sha256-CNzzBsRhq7gg4BMBuTDObiWDH/rFYHEuDRVOwCcwXw4=",
+        "owner": "nix-community",
+        "repo": "disko",
+        "rev": "de5708739256238fb912c62f03988815db89ec9a",
+        "type": "github"
      },
      "original": {
-        "ref": "master",
-        "type": "git",
-        "url": "https://git.pvv.ntnu.no/oysteikt/dotfiles"
+        "owner": "nix-community",
+        "ref": "v1.13.0",
+        "repo": "disko",
+        "type": "github"
      }
    },
    "flake-compat": {
      "flake": false,
      "locked": {
-        "lastModified": 1673956053,
-        "narHash": "sha256-4gtG9iQuiKITOjNQQeQIpoIB6b16fm+504Ch3sNKLd8=",
+        "lastModified": 1747046372,
+        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
        "owner": "edolstra",
        "repo": "flake-compat",
-        "rev": "35bb57c0c8d8b62bbfd284272c928ceb64ddbde9",
+        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
        "type": "github"
      },
      "original": {
@@ -33,55 +37,6 @@
        "type": "github"
      }
    },
-    "flake-utils": {
-      "inputs": {
-        "systems": "systems"
-      },
-      "locked": {
-        "lastModified": 1681202837,
-        "narHash": "sha256-H+Rh19JDwRtpVPAWp64F+rlEtxUWBAQW28eAi3SRSzg=",
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "rev": "cfacdce06f30d2b68473a46042957675eebb3401",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "type": "github"
-      }
-    },
-    "flake-utils_2": {
-      "inputs": {
-        "systems": "systems_2"
-      },
-      "locked": {
-        "lastModified": 1681202837,
-        "narHash": "sha256-H+Rh19JDwRtpVPAWp64F+rlEtxUWBAQW28eAi3SRSzg=",
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "rev": "cfacdce06f30d2b68473a46042957675eebb3401",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "type": "github"
-      }
-    },
-    "fonts": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1668957008,
-        "narHash": "sha256-er2eUfNSG9qdBh0JvtxtftQjFfTFjRqqD8dnk5nZ1qw=",
-        "path": "/home/h7x4/git/fonts",
-        "type": "path"
-      },
-      "original": {
-        "path": "/home/h7x4/git/fonts",
-        "type": "path"
-      }
-    },
    "home-manager": {
      "inputs": {
        "nixpkgs": [
@@ -89,40 +44,20 @@
        ]
      },
      "locked": {
-        "lastModified": 1718530513,
-        "narHash": "sha256-BmO8d0r+BVlwWtMLQEYnwmngqdXIuyFzMwvmTcLMee8=",
+        "lastModified": 1769580047,
+        "narHash": "sha256-tNqCP/+2+peAXXQ2V8RwsBkenlfWMERb+Uy6xmevyhM=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "a1fddf0967c33754271761d91a3d921772b30d0e",
+        "rev": "366d78c2856de6ab3411c15c1cb4fb4c2bf5c826",
        "type": "github"
      },
      "original": {
        "owner": "nix-community",
-        "ref": "release-24.05",
+        "ref": "release-25.11",
        "repo": "home-manager",
        "type": "github"
      }
    },
-    "home-manager-local": {
-      "inputs": {
-        "nixpkgs": [
-          "nixpkgs-unstable"
-        ]
-      },
-      "locked": {
-        "lastModified": 1719170506,
-        "narHash": "sha256-AROqng7/S3mTByq8DBVR6r0iW1yZH+otJkqOwLHvELE=",
-        "ref": "refs/heads/fix-stalonetrayrc-path",
-        "rev": "0e5656163c2f9ac6e2cc4de3b44beb7a137abbe6",
-        "revCount": 3588,
-        "type": "git",
-        "url": "file:///home/h7x4/git/home-manager"
-      },
-      "original": {
-        "type": "git",
-        "url": "file:///home/h7x4/git/home-manager"
-      }
-    },
    "matrix-synapse-next": {
      "inputs": {
        "nixpkgs": [
@@ -130,18 +65,18 @@
        ]
      },
      "locked": {
-        "lastModified": 1717234745,
-        "narHash": "sha256-MFyKRdw4WQD6V3vRGbP6MYbtJhZp712zwzjW6YiOBYM=",
-        "owner": "dali99",
-        "repo": "nixos-matrix-modules",
-        "rev": "d7dc42c9bbb155c5e4aa2f0985d0df75ce978456",
-        "type": "github"
+        "lastModified": 1769430305,
+        "narHash": "sha256-ae92wLbdzLAFIHP3EigPCQzG4MSrxN4Nq4QQjQNqPvg=",
+        "ref": "main",
+        "rev": "45e302b9ff3835229cf9b76c62bceb11904725d8",
+        "revCount": 87,
+        "type": "git",
+        "url": "https://git.pvv.ntnu.no/oysteikt/nixos-matrix-modules"
      },
      "original": {
-        "owner": "dali99",
-        "ref": "v0.6.0",
-        "repo": "nixos-matrix-modules",
-        "type": "github"
+        "ref": "main",
+        "type": "git",
+        "url": "https://git.pvv.ntnu.no/oysteikt/nixos-matrix-modules"
      }
    },
    "maunium-stickerpicker": {
@@ -185,71 +120,88 @@
    "minecraft": {
      "inputs": {
        "flake-compat": "flake-compat",
-        "flake-utils": "flake-utils",
        "nixpkgs": [
          "nixpkgs-unstable"
-        ]
+        ],
+        "systems": "systems"
      },
      "locked": {
-        "lastModified": 1719278718,
-        "narHash": "sha256-gWQb4P9CZgKzTn4F4eWMYeUv2AQOXFlcFmFXh2apoyA=",
+        "lastModified": 1770000653,
+        "narHash": "sha256-QO/twGynxjOSUDtxbqJLshc/Q5/wImLH5O6KV2p9eoE=",
        "owner": "infinidoge",
        "repo": "nix-minecraft",
-        "rev": "b6ff85f3b416a700ac35e33c214d7c9f4fe071fa",
+        "rev": "6a2ddb643aaf7949caa6158e718c5efc3dda7dc1",
        "type": "github"
      },
      "original": {
        "owner": "infinidoge",
+        "ref": "master",
        "repo": "nix-minecraft",
        "type": "github"
      }
    },
+    "nixos-hardware": {
+      "locked": {
+        "lastModified": 1769302137,
+        "narHash": "sha256-QEDtctEkOsbx8nlFh4yqPEOtr4tif6KTqWwJ37IM2ds=",
+        "owner": "NixOS",
+        "repo": "nixos-hardware",
+        "rev": "a351494b0e35fd7c0b7a1aae82f0afddf4907aa8",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "master",
+        "repo": "nixos-hardware",
+        "type": "github"
+      }
+    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1719145550,
-        "narHash": "sha256-K0i/coxxTEl30tgt4oALaylQfxqbotTSNb1/+g+mKMQ=",
+        "lastModified": 1769900590,
+        "narHash": "sha256-I7Lmgj3owOTBGuauy9FL6qdpeK2umDoe07lM4V+PnyA=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "e4509b3a560c87a8d4cb6f9992b8915abf9e36d8",
+        "rev": "41e216c0ca66c83b12ab7a98cc326b5db01db646",
        "type": "github"
      },
      "original": {
        "id": "nixpkgs",
-        "ref": "nixos-24.05",
+        "ref": "nixos-25.11",
        "type": "indirect"
      }
    },
-    "nixpkgs-stable": {
-      "locked": {
-        "lastModified": 1719099622,
-        "narHash": "sha256-YzJECAxFt+U5LPYf/pCwW/e1iUd2PF21WITHY9B/BAs=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "5e8e3b89adbd0be63192f6e645e0a54080004924",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "release-23.11",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
    "nixpkgs-unstable": {
      "locked": {
-        "lastModified": 1719254875,
-        "narHash": "sha256-ECni+IkwXjusHsm9Sexdtq8weAq/yUyt1TWIemXt3Ko=",
+        "lastModified": 1769983348,
+        "narHash": "sha256-mXYq4h7AFmbLMQtINwejLLL3DiW/ERJbg5UXqMTEV2M=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "2893f56de08021cffd9b6b6dfc70fd9ccd51eb60",
+        "rev": "eb8d947de7b05897b2b5f4117d184f9c9846cd06",
        "type": "github"
      },
      "original": {
        "id": "nixpkgs",
-        "ref": "nixos-unstable",
+        "ref": "nixpkgs-unstable",
        "type": "indirect"
      }
    },
+    "nixpkgs-yet-unstabler": {
+      "locked": {
+        "lastModified": 1770025348,
+        "narHash": "sha256-nUJyE7QwmFQZ46YpgKdhkvacWnxiPVG0H1u96yTbnGI=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "0b407490c176a5e0d0af9e105108e534e93bbeeb",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "master",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
    "osuchan": {
      "inputs": {
        "nixpkgs": [
@@ -257,11 +209,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1672838459,
-        "narHash": "sha256-SIXzj9fbSvr/jfhhil+0cS7I6KONijdH80PFGxJi+CA=",
+        "lastModified": 1742203788,
+        "narHash": "sha256-nRqyf+msCPEXvvXF6bvfiYH/B089dqWPc7ljRXieA7g=",
        "ref": "refs/heads/master",
-        "rev": "392fb541ce39f1f52908eee336d5ed409cd798ed",
-        "revCount": 42,
+        "rev": "c4e353e745b4012feb75dd1c4405a71f6318ed02",
+        "revCount": 51,
        "type": "git",
        "url": "file:///home/h7x4/git/osuchan-line-bot"
      },
@@ -272,53 +224,31 @@
    },
    "root": {
      "inputs": {
-        "dotfiles": "dotfiles",
-        "fonts": "fonts",
+        "disko": "disko",
        "home-manager": "home-manager",
-        "home-manager-local": "home-manager-local",
        "matrix-synapse-next": "matrix-synapse-next",
        "maunium-stickerpicker": "maunium-stickerpicker",
        "minecraft": "minecraft",
+        "nixos-hardware": "nixos-hardware",
        "nixpkgs": "nixpkgs",
        "nixpkgs-unstable": "nixpkgs-unstable",
+        "nixpkgs-yet-unstabler": "nixpkgs-yet-unstabler",
        "osuchan": "osuchan",
-        "secrets": "secrets",
-        "sops-nix": "sops-nix",
-        "vscode-server": "vscode-server"
-      }
-    },
-    "secrets": {
-      "inputs": {
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "dirtyRev": "1d1e3c1a3293e22be504749eb92ac3b050cd8622-dirty",
-        "dirtyShortRev": "1d1e3c1-dirty",
-        "lastModified": 1683506783,
-        "narHash": "sha256-iwnpd6v4tKXFDTRomzJxwYPr2mm2JR9DCCnkqsofX5c=",
-        "type": "git",
-        "url": "file:///home/h7x4/git/nix-secrets"
-      },
-      "original": {
-        "type": "git",
-        "url": "file:///home/h7x4/git/nix-secrets"
+        "sops-nix": "sops-nix"
      }
    },
    "sops-nix": {
      "inputs": {
        "nixpkgs": [
          "nixpkgs"
-        ],
-        "nixpkgs-stable": "nixpkgs-stable"
+        ]
      },
      "locked": {
-        "lastModified": 1719268571,
-        "narHash": "sha256-pcUk2Fg5vPXLUEnFI97qaB8hto/IToRfqskFqsjvjb8=",
+        "lastModified": 1769921679,
+        "narHash": "sha256-twBMKGQvaztZQxFxbZnkg7y/50BW9yjtCBWwdjtOZew=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "c2ea1186c0cbfa4d06d406ae50f3e4b085ddc9b3",
+        "rev": "1e89149dcfc229e7e2ae24a8030f124a31e4f24f",
        "type": "github"
      },
      "original": {
@@ -341,42 +271,6 @@
        "repo": "default",
        "type": "github"
      }
-    },
-    "systems_2": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
-    "vscode-server": {
-      "inputs": {
-        "flake-utils": "flake-utils_2",
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1713958148,
-        "narHash": "sha256-8PDNi/dgoI2kyM7uSiU4eoLBqUKoA+3TXuz+VWmuCOc=",
-        "owner": "nix-community",
-        "repo": "nixos-vscode-server",
-        "rev": "fc900c16efc6a5ed972fb6be87df018bcf3035bc",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "nixos-vscode-server",
-        "type": "github"
-      }
    }
  },
  "root": "root",
@@ -1,18 +1,23 @@
 {
  inputs = {
-    nixpkgs.url = "nixpkgs/nixos-24.05";
-    nixpkgs-unstable.url = "nixpkgs/nixos-unstable";
+    nixpkgs.url = "nixpkgs/nixos-25.11";
+    # nixpkgs.url = "nixpkgs/nixos-unstable";
+    nixpkgs-unstable.url = "nixpkgs/nixpkgs-unstable";
+    nixpkgs-yet-unstabler.url = "github:NixOS/nixpkgs/master";

    home-manager = {
-      url = "github:nix-community/home-manager/release-24.05";
+      url = "github:nix-community/home-manager/release-25.11";
+      # url = "github:nix-community/home-manager/master";
      inputs.nixpkgs.follows = "nixpkgs";
    };

-    dotfiles = {
-      url = "git+https://git.pvv.ntnu.no/oysteikt/dotfiles?ref=master";
-      flake = false;
+    disko = {
+      url = "github:nix-community/disko/v1.13.0";
+      inputs.nixpkgs.follows = "nixpkgs";
    };

+    nixos-hardware.url = "github:NixOS/nixos-hardware/master";
+
    sops-nix = {
      url = "github:Mic92/sops-nix";
      inputs.nixpkgs.follows = "nixpkgs";
@@ -23,45 +28,18 @@
      inputs.nixpkgs.follows = "nixpkgs";
    };

-    # TODO: fix website
-    # website = {
-    #   url = "git+https://git.pvv.ntnu.no/oysteikt/nani.wtf?ref=main";
-      # url = "path:/home/h7x4/git/nani.wtf";
-      # inputs.nixpkgs.follows = "nixpkgs";
-    # };
-
    maunium-stickerpicker = {
      url = "github:h7x4/maunium-stickerpicker-nix/0.1.0";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    minecraft = {
-      url = "github:infinidoge/nix-minecraft";
+      url = "github:infinidoge/nix-minecraft/master";
      inputs.nixpkgs.follows = "nixpkgs-unstable";
    };

    matrix-synapse-next = {
-      url = "github:dali99/nixos-matrix-modules/v0.6.0";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-
-    vscode-server = {
-      url = "github:nix-community/nixos-vscode-server";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-
-    ra-multiplex = {
-      url = "github:pr2502/ra-multiplex";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-
-    # Nix expressions and keys (TODO: move keys to another solution like agenix)
-    # which should be kept from the main repo for privacy reasons.
-    #
-    # Includes stuff like usernames, emails, ports, other server users, ssh hosts, etc.
-    secrets = {
-      # TODO: Push this to a remote.
-      url = "git+file:///home/h7x4/git/nix-secrets";
+      url = "git+https://git.pvv.ntnu.no/oysteikt/nixos-matrix-modules?ref=main";
      inputs.nixpkgs.follows = "nixpkgs";
    };
  };
@@ -70,18 +48,17 @@
    self,
    nixpkgs,
    nixpkgs-unstable,
+    nixpkgs-yet-unstabler,
    home-manager,
+    disko,
+    nixos-hardware,

-    dotfiles,
    matrix-synapse-next,
    maunium-stickerpicker,
    minecraft,
    osuchan,
-    secrets,
    sops-nix,
-    vscode-server,
-    ra-multiplex
-    # website
+    # anyrun,
  }: let
    system = "x86_64-linux";

@@ -89,55 +66,108 @@
      inherit system;

      config = {
-        allowUnfree = true;
+        allowUnfreePredicate = pkg: nixpkgs.lib.elem (nixpkgs.lib.getName pkg) [
+          "discord"
+          "geogebra"
+          "ipu6-camera-bins"
+          "ipu6-camera-bins-unstable"
+          "ivsc-firmware"
+          "ivsc-firmware-unstable"
+          "semshi"
+          "vim-polyglot"
+          "vim-trailing-whitespace"
+        ];
        android_sdk.accept_license = true;
        segger-jlink.acceptLicense = true;
        permittedInsecurePackages = [
-          "segger-jlink-qt4-794l"
+          "segger-jlink-qt4-810"
        ];
      };

-      overlays = let
-        nonrecursive-unstable-pkgs = import nixpkgs-unstable {
-          inherit system;
-          config.allowUnfree = true;
-        };
-      in [
-        (self: super: {
-          inherit (nonrecursive-unstable-pkgs) atuin wstunnel;
-        })
+      overlays = [
+        self.overlays.pcloud
+        self.overlays.unstableLinuxPackages
+        self.overlays.waylandImeIntegration
+        self.overlays.gitoxide

-        (self: super: {
-          ra-multiplex = ra-multiplex.packages.${system}.default;
-        })
-
-        # https://github.com/NixOS/nixpkgs/pull/251706
-        (self: super: {
-          mozc = self.qt6Packages.callPackage ./package-overrides/mozc.nix { };
-          fcitx5-mozc = self.callPackage ./package-overrides/fcitx5-mozc.nix { };
-        })
-
-        (self: super: {
-          mpv-unwrapped = super.mpv-unwrapped.override {
-            ffmpeg = super.ffmpeg_6-full;
-          };
-        })
+        minecraft.overlays.default
+        osuchan.overlays.default
      ];
    };

    pkgs = import nixpkgs pkgs-config;
    unstable-pkgs = import nixpkgs-unstable pkgs-config;
+    yet-unstabler-pkgs = import nixpkgs-yet-unstabler pkgs-config;
  in {
+    inherit pkgs;
+    inherit (nixpkgs) lib;
+
    extendedLib = import ./lib { stdlib = pkgs.lib; };

-    inherit pkgs;
+    inputs = pkgs.lib.mapAttrs (_: src: src.outPath) inputs;

-    packages.${system} = {
-      inherit (pkgs) kanidm pcloud;
+    devShells.${system}.default = pkgs.mkShellNoCC {
+      packages = with pkgs; [ sops ];
    };

-    devShells.${system}.default = pkgs.mkShell {
-      packages = with pkgs; [ sops ];
+    packages.${system} = {
+      bcachefsInstallerIso = let
+        nixosSystem = nixpkgs.lib.nixosSystem {
+          inherit system;
+          modules = [
+            "${nixpkgs}/nixos/modules/installer/cd-dvd/installation-cd-minimal-new-kernel-no-zfs.nix"
+            ({ lib, pkgs, ... }: {
+              boot.supportedFilesystems = [ "bcachefs" ];
+              boot.kernelPackages = lib.mkOverride 0 pkgs.linuxPackages_latest;
+            })
+          ];
+        };
+      in nixosSystem.config.system.build.isoImage;
+    };
+
+    overlays = let
+      nonrecursive-unstable-pkgs = import nixpkgs-unstable {
+        inherit system;
+        config.allowUnfree = true;
+        config.segger-jlink.acceptLicense = true;
+        config.permittedInsecurePackages = [
+          "segger-jlink-qt4-796s"
+        ];
+      };
+    in {
+      pcloud = import ./overlays/pcloud.nix {
+        inherit (nixpkgs) lib;
+        pkgs = nonrecursive-unstable-pkgs;
+      };
+
+      gitoxide = _: _: {
+        gitoxide = nonrecursive-unstable-pkgs.gitoxide;
+      };
+
+      unstableLinuxPackages = _: _: {
+        linuxPackages_latest = nonrecursive-unstable-pkgs.linuxPackages_latest;
+      };
+
+      waylandImeIntegration = import ./overlays/wayland-ime-integration.nix;
+    };
+
+    nixosModules = {
+      machineVars = ./modules/machineVars.nix;
+      socketActivation = ./modules/socketActivation.nix;
+      duperemove = ./modules/duperemove.nix;
+    };
+
+    homeModules = {
+      colors = ./home/modules/colors.nix;
+      direnv-auto-prune = ./home/modules/programs/direnv/auto-prune.nix;
+      downloads-sorter = ./home/modules/services/downloads-sorter.nix;
+      gpg = ./home/modules/programs/gpg;
+      mpd-auto-updater = ./home/modules/services/mpd.nix;
+      neovim-auto-clean-swapfiles = ./home/modules/programs/neovim/auto-clean-swapfiles.nix;
+      nix-index-auto-update-database = ./home/modules/programs/nix-index/auto-update-database.nix;
+      prism-launcher = ./home/modules/programs/prism-launcher;
+      shellAliases = ./home/modules/shellAliases.nix;
+      systemd-tmpfiles = ./home/modules/systemd-tmpfiles.nix;
    };

    homeConfigurations = {
@@ -147,12 +177,12 @@

        username = "h7x4";
        homeDirectory = "/home/h7x4";
-        stateVersion = "22.05";
+        stateVersion = "25.05";
        configuration = {
          imports = [
            ./home/home.nix
            ./modules/machineVars.nix
-          ];
+          ] ++ (builtins.attrValues self.homeModules);

          machineVars = {
            headless = false;
@@ -163,6 +193,55 @@
          };
        };
      };
+
+      pvv = home-manager.lib.homeManagerConfiguration {
+        inherit pkgs;
+
+        extraSpecialArgs = {
+          inherit inputs;
+          inherit unstable-pkgs;
+          inherit yet-unstabler-pkgs;
+          inherit (self) extendedLib;
+          machineName = "pvv-machine";
+          machineVars = {
+            headless = true;
+            # fixDisplayCommand = "echo 'not available'";
+            gaming = false;
+            development = true;
+            laptop = false;
+            battery = null;
+            wlanInterface = null;
+            wayland = false;
+          };
+        };
+
+        modules = [
+          ./home/home.nix
+          ./modules/machineVars.nix
+          inputs.sops-nix.homeManagerModules.sops
+          ({ config, pkgs, lib, ... }: {
+            home = {
+              username = lib.mkForce "oysteikt";
+              homeDirectory = lib.mkForce "/home/pvv/d/oysteikt";
+              stateVersion = "25.05";
+              packages = [
+                # NOTE: nix on pvv machines is severely outdated
+                #       putting it in the path of home-manager
+                #       will ensure we use the new one by default
+                config.nix.package
+              ];
+            };
+
+            nix.package = pkgs.nix;
+            nix.settings.use-xdg-base-directories = lib.mkForce false;
+
+            local.shell.aliases."Nix Stuff" = {
+              nxr = lib.mkForce "echo \"Local rebuilds are not available on this machine\"";
+              nxrl = lib.mkForce "echo \"Local rebuilds are not available on this machine\"";
+            };
+          })
+        ] ++ (builtins.attrValues self.homeModules);
+      };
    };

    nixosConfigurations = let
@@ -176,8 +255,8 @@
            specialArgs = {
              inherit inputs;
              inherit unstable-pkgs;
+              inherit yet-unstabler-pkgs;
              inherit (self) extendedLib;
-              secrets = secrets.outputs.settings;
            } // (extraConfig.specialArgs or { });

            modules = [
@@ -189,7 +268,6 @@
              ./modules/machineVars.nix
              ./modules/socketActivation.nix

-              secrets.outputs.nixos-config
              sops-nix.nixosModules.sops

              ({ config, ... }:
@@ -198,14 +276,16 @@
                  useGlobalPkgs = true;
                  extraSpecialArgs = {
                    inherit inputs;
+                    inherit unstable-pkgs;
+                    inherit yet-unstabler-pkgs;
                    inherit (self) extendedLib;
                    inherit (config) machineVars;
-                    secrets = secrets.outputs.settings;
+                    machineName = name;
                  };

                  sharedModules = [
                    inputs.sops-nix.homeManagerModules.sops
-                  ];
+                  ] ++ (builtins.attrValues self.homeModules);

                  users.h7x4.imports = [
                    ./home/home.nix
@@ -221,14 +301,35 @@
            "specialArgs"
          ]));
    in {
-      dosei = nixSys "dosei" { };
-      kasei = nixSys "kasei" { };
-      europa = nixSys "europa" { };
+      kasei = nixSys "kasei" {
+        modules = [
+          nixos-hardware.nixosModules.common-pc
+          nixos-hardware.nixosModules.common-pc-ssd
+          nixos-hardware.nixosModules.common-cpu-amd
+          nixos-hardware.nixosModules.common-cpu-amd-pstate
+          nixos-hardware.nixosModules.common-gpu-nvidia-nonprime
+        ];
+      };
+      xps16 = nixSys "xps16" {
+        modules = [
+          nixos-hardware.nixosModules.common-hidpi
+          nixos-hardware.nixosModules.common-pc-laptop
+          nixos-hardware.nixosModules.common-pc-laptop-ssd
+          nixos-hardware.nixosModules.common-cpu-intel
+          nixos-hardware.nixosModules.common-gpu-intel
+
+          disko.nixosModules.default
+        ];
+      };
      tsuki = nixSys "tsuki" {
        modules = [
+          nixos-hardware.nixosModules.common-cpu-amd
+          nixos-hardware.nixosModules.common-pc-ssd
+
+          disko.nixosModules.default
+
          matrix-synapse-next.nixosModules.default
          osuchan.outputs.nixosModules.default
-          vscode-server.nixosModules.default
          maunium-stickerpicker.nixosModules.default

          (args: import minecraft.outputs.nixosModules.minecraft-servers (args // {
@@ -0,0 +1,192 @@
+{ config, lib, machineVars, ... }:
+let
+  inherit (lib) mkForce mkIf optionals;
+  graphics = !machineVars.headless;
+in
+{
+  imports = [
+    ./config/gtk.nix
+
+    ./programs/nix.nix
+
+    ./programs/ahoviewer.nix
+    ./programs/alacritty.nix
+    ./programs/anki.nix
+    ./programs/anyrun
+    ./programs/aria2.nix
+    ./programs/atuin.nix
+    ./programs/bash.nix
+    ./programs/bat.nix
+    ./programs/beets.nix
+    ./programs/bottom.nix
+    ./programs/cargo.nix
+    # ./programs/comma.nix
+    ./programs/delta.nix
+    ./programs/direnv
+    ./programs/element-desktop.nix
+    ./programs/emacs
+    ./programs/eza.nix
+    ./programs/fastfetch.nix
+    ./programs/feh.nix
+    ./programs/firefox.nix
+    ./programs/fzf.nix
+    ./programs/gdb.nix
+    ./programs/gh-dash.nix
+    ./programs/gh.nix
+    ./programs/ghci.nix
+    ./programs/git
+    ./programs/gpg.nix
+    ./programs/home-manager.nix
+    ./programs/hyprland
+    ./programs/jq.nix
+    ./programs/less.nix
+    ./programs/man.nix
+    ./programs/meli.nix
+    ./programs/mpv.nix
+    ./programs/ncmpcpp.nix
+    ./programs/neomutt.nix
+    ./programs/neovim
+    ./programs/newsboat
+    ./programs/nix-index
+    ./programs/nushell.nix
+    ./programs/nyxt.nix
+    ./programs/obs-studio.nix
+    ./programs/obsidian.nix
+    ./programs/pandoc.nix
+    ./programs/prism-launcher.nix
+    ./programs/python.nix
+    ./programs/qutebrowser.nix
+    ./programs/rclone.nix
+    ./programs/ripgrep.nix
+    ./programs/rofi
+    ./programs/skim.nix
+    ./programs/sqlite.nix
+    ./programs/ssh
+    ./programs/taskwarrior.nix
+    ./programs/tealdeer
+    ./programs/texlive.nix
+    ./programs/thunderbird.nix
+    ./programs/tmux
+    ./programs/uv.nix
+    ./programs/vscode
+    ./programs/waybar.nix
+    ./programs/yazi.nix
+    ./programs/yt-dlp.nix
+    ./programs/zathura.nix
+    ./programs/zed
+    ./programs/zoxide.nix
+    ./programs/zsh
+
+    ./services/copyq.nix
+    ./services/dunst.nix
+    ./services/fcitx5.nix
+    ./services/gnome-keyring.nix
+    ./services/mpd.nix
+    ./services/mpris-proxy.nix
+    ./services/network-manager.nix
+    ./services/nix-channel-update.nix
+    ./services/psd.nix
+    ./services/pueue.nix
+    ./services/tumblerd.nix
+  ] ++ (optionals (!machineVars.wayland) [
+    ./programs/xmonad
+    # ./programs/xmobar
+
+    ./services/picom.nix
+    ./services/polybar.nix
+    ./services/screen-locker.nix
+    # ./services/stalonetray.nix
+    ./services/sxhkd.nix
+  ]);
+
+  programs.aria2.enable = true;
+  programs.atuin.enable = true;
+  programs.bash.enable = true;
+  programs.bat.enable = true;
+  programs.beets.enable = true;
+  programs.bottom.enable = true;
+  programs.cargo.enable = true;
+  # programs.comma.enable = true;
+  programs.direnv.enable = true;
+  programs.eza.enable = true;
+  programs.fastfetch.enable = true;
+  programs.fzf.enable = true;
+  programs.gdb.enable = true;
+  programs.gh-dash.enable = true;
+  programs.gh.enable = true;
+  programs.ghci.enable = true;
+  programs.git.enable = true;
+  programs.gpg.enable = true;
+  programs.helix.enable = true;
+  programs.home-manager.enable = true;
+  programs.jq.enable = true;
+  programs.less.enable = true;
+  programs.man.enable = true;
+  programs.meli.enable = true;
+  programs.neomutt.enable = true;
+  programs.neovim.enable = true;
+  programs.nix-index.enable = true;
+  programs.nushell.enable = true;
+  programs.pandoc.enable = true;
+  programs.python.enable = true;
+  programs.rclone.enable = true;
+  programs.ripgrep.enable = true;
+  programs.skim.enable = true;
+  programs.sqlite.enable = true;
+  programs.ssh.enable = true;
+  programs.tealdeer.enable = true;
+  programs.tmux.enable = true;
+  programs.uv.enable = true;
+  programs.yazi.enable = true;
+  programs.yt-dlp.enable = true;
+  programs.zoxide.enable = true;
+  programs.zsh.enable = true;
+
+  services.pueue.enable = true;
+
+  gtk.enable = graphics;
+
+  programs.ahoviewer.enable = graphics;
+  programs.alacritty.enable = graphics;
+  programs.anki.enable = graphics;
+  programs.chromium.enable = graphics;
+  programs.element-desktop.enable = graphics;
+  programs.emacs.enable = graphics;
+  programs.feh.enable = graphics;
+  programs.firefox.enable = graphics;
+  programs.mpv.enable = graphics;
+  programs.ncmpcpp.enable = graphics;
+  programs.newsboat.enable = graphics;
+  programs.nyxt.enable = graphics;
+  programs.obs-studio.enable = graphics;
+  programs.obsidian.enable = false;
+  programs.prism-launcher.enable = graphics;
+  programs.qutebrowser.enable = graphics;
+  programs.rofi.enable = graphics;
+  programs.taskwarrior.enable = graphics;
+  programs.texlive.enable = graphics;
+  programs.thunderbird.enable = graphics;
+  programs.vscode.enable = graphics;
+  programs.zathura.enable = graphics;
+  programs.zed-editor.enable = graphics;
+
+  services.copyq.enable = graphics;
+  services.dunst.enable = graphics;
+  services.gnome-keyring.enable = graphics;
+  services.kbfs.enable = graphics;
+  services.keybase.enable = graphics;
+  services.mpd.enable = graphics;
+  services.mpris-proxy.enable = graphics;
+  services.network-manager-applet.enable = graphics;
+  services.psd.enable = graphics;
+  services.tumblerd.enable = graphics;
+
+  i18n.inputMethod = mkIf graphics {
+    enable = true;
+    type = "fcitx5";
+  };
+
+  programs.anyrun.enable = machineVars.wayland;
+  programs.waybar.enable = machineVars.wayland;
+  wayland.windowManager.hyprland.enable = machineVars.wayland;
+}
@@ -0,0 +1,129 @@
+{ config, lib, ... }:
+let
+  cfg = config.services.downloads-sorter;
+in
+{
+  services.downloads-sorter = {
+    enable = true;
+    mappings = {
+      "archives" = [
+        "*.rar"
+        "*.zip"
+        "*.7z"
+        "*.tar"
+
+        "*.tar.bz2"
+        "*.tar.gz"
+        "*.tar.lz4"
+        "*.tar.lzma"
+        "*.tar.sz"
+        "*.tar.sz"
+        "*.tar.xz"
+        "*.tar.zst"
+
+        "*.tbz"
+        "*.tbz2"
+        "*.tgz"
+        "*.tlz4"
+        "*.tlzma"
+        "*.tsz"
+        "*.txz"
+        "*.tzst"
+
+        "*.bz2"
+        "*.gz"
+        "*.lz4"
+        "*.lzma"
+        "*.sz"
+        "*.sz"
+        "*.xz"
+        "*.zst"
+      ];
+
+      "pictures" = {
+        createDirIfNotExists = false;
+        globs = [
+          "*.gif"
+          "*.jpeg"
+          "*.jpg"
+          "*.png"
+          "*.svg"
+          "*.webp"
+        ];
+      };
+
+      "docs" = {
+        createDirIfNotExists = false;
+        globs = [
+          "*.md"
+
+          "*.pdf"
+          "*.PDF" # why do people do this
+
+          "*.docx"
+          "*.doc"
+
+          "*.xlsx"
+          "*.xls"
+
+          "*.ppt"
+          "*.pptx"
+
+          "*.odt"
+          "*.ods"
+          "*.odp"
+          "*.odg"
+          "*.odf"
+        ];
+      };
+
+      "books" = {
+        createDirIfNotExists = false;
+        globs = [ "*.epub" ];
+      };
+
+      "videos" = {
+        createDirIfNotExists = false;
+        globs = [
+          "*.mp4"
+          "*.webm"
+          "*.mov"
+        ];
+      };
+
+      "isos" = [
+        "*.iso"
+        "*.img"
+      ];
+      "jars" = [ "*.jar" ];
+      "txt" = [ "*.txt" ];
+      "patches" = [
+        "*.patch"
+        "*.diff"
+      ];
+    };
+  };
+
+  systemd.user.tmpfiles.settings."10-downloads-sorter-service" = let
+    inherit (cfg) downloadsDirectory;
+    inherit (config.xdg) userDirs;
+
+    symlink = link: target: {
+      "${link}".L = {
+        user = config.home.username;
+        mode = "0770";
+        argument = "${target}";
+      };
+
+      "${target}".d = {
+        user = config.home.username;
+        mode = "0770";
+      };
+    };
+  in lib.mkMerge [
+    (symlink "${downloadsDirectory}/books" "${userDirs.documents}/books/downloads")
+    (symlink "${downloadsDirectory}/docs" "${userDirs.documents}/downloads")
+    (symlink "${downloadsDirectory}/pictures" "${userDirs.pictures}/downloads")
+    (symlink "${downloadsDirectory}/videos" "${userDirs.videos}/downloads")
+  ];
+}
@@ -0,0 +1,46 @@
+{ config, ... }:
+{
+  systemd.user.tmpfiles.settings."05-homedir" = let
+    home = config.home.homeDirectory;
+    user = config.home.username;
+
+    defaultDirConf = {
+      d = {
+        inherit user;
+        mode = "0700";
+      };
+    };
+
+    symlink = target: {
+      L = {
+        inherit user;
+        argument = target;
+        mode = "0600";
+      };
+    };
+  in {
+    "${home}/SD" = defaultDirConf;
+    "${home}/ctf" = defaultDirConf;
+    "${home}/git" = defaultDirConf;
+    "${home}/pvv" = defaultDirConf;
+    "${home}/tmp" = defaultDirConf;
+    "${home}/work" = defaultDirConf;
+
+    "${home}/pictures/icons" = defaultDirConf;
+    "${home}/pictures/photos" = defaultDirConf;
+    "${home}/pictures/screenshots" = defaultDirConf;
+    "${home}/pictures/stickers" = defaultDirConf;
+    "${home}/pictures/wallpapers" = defaultDirConf;
+
+    "${home}/documents/books" = defaultDirConf;
+    "${home}/documents/manuals" = defaultDirConf;
+    "${home}/documents/music-sheets" = defaultDirConf;
+    "${home}/documents/scans" = defaultDirConf;
+    "${home}/documents/schematics" = defaultDirConf;
+
+    "${home}/Downloads" = symlink "${home}/downloads";
+
+    "${config.xdg.dataHome}/wallpapers" = symlink "${home}/pictures/wallpapers";
+    "${config.systemd.user.sessionVariables.TEXMFHOME}" = symlink "${home}/git/texmf";
+  };
+}
@@ -1,18 +1,18 @@
-{ pkgs, config, machineVars, ... }:
+{ pkgs, config, ... }:
 {
-  gtk = pkgs.lib.mkIf (!machineVars.headless) {
-    enable = true;
-    font = {
-      name = "Droid Sans";
-    };
+  gtk = {
+    font.name = "Droid Sans";
+
    iconTheme = {
-      package = pkgs.papirus-icon-theme;
      name = "Papirus";
+      package = pkgs.papirus-icon-theme;
    };
+
    theme = {
-      package = pkgs.vimix-gtk-themes;
-      name = "VimixDark";
+      name = "Adwaita-dark";
+      package = pkgs.gnome-themes-extra;
    };
+
    gtk2.configLocation = "${config.xdg.configHome}/gtk-2.0/gtkrc";

    gtk3.bookmarks = map (s: "file://${config.home.homeDirectory}/${s}") [
@@ -22,10 +22,14 @@
      "music"
      ".config"
      ".local/share"
-      # "Dropbox"
+      "SD"
      "git"
-      "git/pvv"
+      "pvv"
      "nix"
+      "work"
+      "ctf"
    ];
+
+    gtk4.theme = config.gtk.theme;
  };
 }
@@ -1,21 +1,50 @@
-{ config, ... }:
+{ config, lib, ... }:
+let
+  cfg = config.xdg.userDirs;
+
+in
 {
  imports = [
    ./mimetypes.nix
    ./directory-spec-overrides.nix
  ];
+
  xdg = {
    enable = true;
    userDirs = {
      enable = true;
-      desktop = "${config.home.homeDirectory}/Desktop";
-      documents = "${config.home.homeDirectory}/documents";
-      download = "${config.home.homeDirectory}/Downloads";
-      music = "${config.home.homeDirectory}/music";
-      pictures = "${config.home.homeDirectory}/pictures";
-      publicShare = "${config.home.homeDirectory}/public";
-      templates = "${config.home.homeDirectory}/templates";
-      videos = "${config.home.homeDirectory}/videos";
+      setSessionVariables = true;
+
+      desktop = lib.mkDefault "${config.home.homeDirectory}/Desktop";
+      documents = lib.mkDefault "${config.home.homeDirectory}/documents";
+      download = lib.mkDefault "${config.home.homeDirectory}/downloads";
+      music = lib.mkDefault "${config.home.homeDirectory}/music";
+      pictures = lib.mkDefault "${config.home.homeDirectory}/pictures";
+      projects = lib.mkDefault "${config.home.homeDirectory}/git";
+      publicShare = lib.mkDefault "${config.home.homeDirectory}/public";
+      templates = lib.mkDefault "${config.home.homeDirectory}/templates";
+      videos = lib.mkDefault "${config.home.homeDirectory}/videos";
    };
  };
+
+  systemd.user.sessionVariables.XDG_SCREENSHOTS_DIR = "${cfg.pictures}/screenshots";
+
+  systemd.user.tmpfiles.settings."05-xdg-userdirs" = let
+    dirCfg = {
+      d = {
+        user = config.home.username;
+        mode = "0700";
+      };
+    };
+  in {
+    "${cfg.desktop}" = dirCfg;
+    "${cfg.documents}" = dirCfg;
+    "${cfg.download}" = dirCfg;
+    "${cfg.music}" = dirCfg;
+    "${cfg.pictures}" = dirCfg;
+    "${cfg.publicShare}" = dirCfg;
+    "${cfg.templates}" = dirCfg;
+    "${cfg.videos}" = dirCfg;
+    "${config.systemd.user.sessionVariables.XDG_SCREENSHOTS_DIR}" = dirCfg;
+  };
 }
@@ -2,46 +2,87 @@
 {
  nix.settings.use-xdg-base-directories = true;

-  home.sessionVariables = let
+  home.preferXdgDirectories = true;
+
+  systemd.user.sessionVariables = let
    inherit (config.xdg) dataHome cacheHome configHome userDirs;
+    runtimeDir = "/run/user/${toString config.home.uid}";
  in {
    TEXMFHOME = "${dataHome}/texmf";
    TEXMFVAR = "${cacheHome}/texlive";
    TEXMFCONFIG = "${configHome}/texlive";

+    EM_CONFIG = "${configHome}/emscripten/config";
+    EM_CACHE = "${cacheHome}/emscripten/cache";
+    EM_PORTS = "${dataHome}/emscripten/cache";
+
    PSQL_HISTORY = "${dataHome}/psql_history";
-    SQLITE_HISTORY= "${dataHome}/sqlite_history";
    MYSQL_HISTFILE = "${dataHome}/mysql_history";
    NODE_REPL_HISTORY = "${dataHome}/node_repl_history";
    GDB_HISTFILE = "${dataHome}/gdb_history";
-    PYTHON_HISTORY = "${dataHome}/python_history";
+    HISTFILE = "${dataHome}/bash_history";
+    CALCHISTFILE = "${dataHome}/calc_history";

    GHCUP_USE_XDG_DIRS = "true";
+    MIX_XDG = "true";

+    __GL_SHADER_DISK_CACHE_PATH = "${cacheHome}/nv";
+    _JAVA_OPTIONS = "-Djava.util.prefs.userRoot=${configHome}/java";
    ANDROID_USER_HOME = "${dataHome}/android";
    AZURE_CONFIG_DIR = "${dataHome}/azure";
-    CARGO_HOME = "${dataHome}/cargo";
+    BZRPATH = "${configHome}/bazaar";
+    BZR_PLUGIN_PATH = "${dataHome}/bazaar";
+    BZR_HOME = "${cacheHome}/bazaar";
    CUDA_CACHE_PATH = "${cacheHome}/nv";
+    DISCORD_USER_DATA_DIR = "${dataHome}/discord";
    DOCKER_CONFIG = "${configHome}/docker";
    DOTNET_CLI_HOME = "${dataHome}/dotnet";
    DOT_SAGE = "${configHome}/sagemath";
    ELM_HOME = "${configHome}/";
+    FFMPEG_DATADIR = "${configHome}/ffmpeg";
+    GOCACHE = "${cacheHome}/go/build";
+    GOMODCACHE = "${cacheHome}/go/mod";
    GOPATH = "${dataHome}/go";
-    GRIPHOME = "${configHome}/grip";
    GRADLE_USER_HOME = "${dataHome}/gradle";
+    GRIPHOME = "${configHome}/grip";
    ICEAUTHORITY = "${cacheHome}/ICEauthority";
    NIMBLE_DIR = "${dataHome}/nimble";
    NLTK_DATA = "${dataHome}/nltk_data";
+    NODE_COMPILE_CACHE = "${cacheHome}/node-compile-cache";
+    NPM_CONFIG_CACHE = "${cacheHome}/npm";
+    NPM_CONFIG_INIT_MODULE = "${configHome}/npm/config/npm-init.js";
+    NPM_CONFIG_TMP = "${runtimeDir}/npm";
    NRFUTIL_HOME = "${dataHome}/nrfutil";
    NUGET_PACKAGES = "${cacheHome}/nuget-packages";
+    OPAMROOT = "${dataHome}/opam";
    PARALLEL_HOME = "${configHome}/parallel";
+    PGPASSFILE = "${configHome}/pg/pgpass";
+    PSQLRC = "${configHome}/pg/psqlrc";
    PYENV_ROOT = "${dataHome}/pyenv";
+    RUFF_CACHE_DIR = "${cacheHome}/ruff";
    RUSTUP_HOME = "${dataHome}/rustup";
    RYE_HOME = "${dataHome}/rye";
    STACK_ROOT = "${dataHome}/stack";
    W3M_DIR = "${dataHome}/w3m";
    WINEPREFIX = "${dataHome}/wine";

+    SBT_OPTS = lib.concatStringsSep " " [
+      "-Dsbt.ivy.home=${cacheHome}/ivy"
+      "-Dsbt.boot.directory=${cacheHome}/sbt/boot"
+      "-Dsbt.preloaded=${cacheHome}/sbt/preloaded"
+      "-Dsbt.global.base=${cacheHome}/sbt"
+      "-Dsbt.global.staging=${cacheHome}/sbt/staging"
+      "-Dsbt.global.zinc=${cacheHome}/sbt/zinc"
+      "-Dsbt.dependency.base=${cacheHome}/sbt/dependency"
+      "-Dsbt.repository.config=${configHome}/sbt/repositories"
+      "-Dsbt.global.settings=${configHome}/sbt/global"
+      "-Dsbt.global.plugins=${configHome}/sbt/plugins"
+      "-Dmaven.repo.local=${cacheHome}/maven/repository"
+      "-Divy.settings.dir=${configHome}/ivy2"
+      "-Divy.home=${cacheHome}/ivy2"
+      "-Divy.cache.dir=${cacheHome}/ivy2/cache"
+    ];
+
    # TODO: these needs to be set before the user session has fully initialized
    # XINITRC = "$XDG_CONFIG_HOME/x11/initrc";
    # XAUTHORITY
@@ -61,6 +61,26 @@ let
      woff2 = "font/woff2";
    };

+    archive = {
+      "7z" = "application/x-7z-compressed";
+      ar = "application/x-archive";
+      bz2 = "application/x-bzip2";
+      deb = "application/x-debian-package";
+      gzip = "application/gzip";
+      lz = "application/x-lzip";
+      lzma = "application/x-lzma";
+      lzo = "application/x-lzop";
+      rar = "application/vnd.rar";
+      rar-compressed = "application/x-rar-compressed";
+      tar = "application/x-tar";
+      tar-compressed = "application/x-gtar";
+      x-zip = "multipart/x-zip";
+      xz = "application/x-xz";
+      zip = "application/zip";
+      zip-compressed = "application/x-zip-compressed";
+      zst = "application/zstd";
+    };
+
    documents = {
      azv = "application/vnd.amazon.ebook";
      cbr = "application/vnd.comicbook+rar";
@@ -72,31 +92,98 @@ let
      pdf = "application/pdf";
    };

+    office = {
+      doc = "application/msword";
+      docm = "application/vnd.ms-word.document.macroEnabled.12";
+      docx = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
+      dot = "application/msword";
+      dotm = "application/vnd.ms-word.template.macroEnabled.12";
+      dotx = "application/vnd.openxmlformats-officedocument.wordprocessingml.template";
+      mdb = "application/vnd.ms-access";
+      pot = "application/vnd.ms-powerpoint";
+      potm = "application/vnd.ms-powerpoint.template.macroEnabled.12";
+      potx = "application/vnd.openxmlformats-officedocument.presentationml.template";
+      ppa = "application/vnd.ms-powerpoint";
+      ppam = "application/vnd.ms-powerpoint.addin.macroEnabled.12";
+      pps = "application/vnd.ms-powerpoint";
+      ppsm = "application/vnd.ms-powerpoint.slideshow.macroEnabled.12";
+      ppsx = "application/vnd.openxmlformats-officedocument.presentationml.slideshow";
+      ppt = "application/vnd.ms-powerpoint";
+      pptm = "application/vnd.ms-powerpoint.presentation.macroEnabled.12";
+      pptx = "application/vnd.openxmlformats-officedocument.presentationml.presentation";
+      xla = "application/vnd.ms-excel";
+      xlam = "application/vnd.ms-excel.addin.macroEnabled.12";
+      xls = "application/vnd.ms-excel";
+      xlsb = "application/vnd.ms-excel.sheet.binary.macroEnabled.12";
+      xlsm = "application/vnd.ms-excel.sheet.macroEnabled.12";
+      xlsx = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+      xlt = "application/vnd.ms-excel";
+      xltm = "application/vnd.ms-excel.template.macroEnabled.12";
+      xltx = "application/vnd.openxmlformats-officedocument.spreadsheetml.template";
+
+      odc = "application/vnd.oasis.opendocument.chart";
+      odf = "application/vnd.oasis.opendocument.formula";
+      odg = "application/vnd.oasis.opendocument.graphics";
+      odi = "application/vnd.oasis.opendocument.image";
+      odm = "application/vnd.oasis.opendocument.text-master";
+      odp = "application/vnd.oasis.opendocument.presentation";
+      odt = "application/vnd.oasis.opendocument.text";
+      otg = "application/vnd.oasis.opendocument.graphics-template";
+      oth = "application/vnd.oasis.opendocument.text-web";
+      otm = "application/vnd.oasis.opendocument.text-master-template";
+      otp = "application/vnd.oasis.opendocument.presentation-template";
+      ots = "application/vnd.oasis.opendocument.spreadsheet-template";
+      ott = "application/vnd.oasis.opendocument.text-template";
+    };
+
    code = {
      css = "text/css";
      csv = "text/csv";
      html = "text/html";
+      js = "application/x-javascript";
+      latex = "application/x-latex";
+      php = "application/x-httpd-php";
+      pl = "application/x-perl";
+      rtf = "application/rtf";
+      sh = "application/x-sh";
+      tex = "application/x-tex";
      txt = "text/plain";
      xhtml = "application/xhtml+xml";
      xml = "text/xml";
    };

-    misc = {
+    web = {
+      about = "x-scheme-handler/about";
+      chrome = "x-scheme-handler/chrome";
+      html = "text/html";
      http = "x-scheme-handler/http";
      https = "x-scheme-handler/https";
-      wine-ini = "application/x-wine-extension-ini";
+      mxwinurl = "application/x-mswinurl";
+      unknown = "x-scheme-handler/unknown";
+      x-htm = "application/x-extension-htm";
+      x-html = "application/x-extension-html";
+      x-shtml = "application/x-extension-shtml";
+      x-xht = "application/x-extension-xht";
+      x-xhtml = "application/x-extension-xhtml";
+      xhtml-xml = "application/xhtml+xml";
+    };
+
+    misc = {
      ics = "text/calendar";
-      url = "application/x-mswinurl";
+      wine-ini = "application/x-wine-extension-ini";
+      wine-osz = "application/x-wine-extension-osz";
    };
  };

  # Applications
+  ark = "org.kde.ark.desktop";
  firefox = "firefox.desktop";
-  vscode = "code.desktop";
+  zed = "dev.zed.Zed.desktop";
  mpv = "mpv.desktop";
  zathura = "org.pwmt.zathura.desktop";
-  sxiv = "sxiv.desktop";
+  nsxiv = "nsxiv.desktop";
  font-viewer = "org.gnome.font-viewer.desktop";
+  libreoffice = "startcenter.desktop";
 in {
  xdg.configFile."mimeapps.list".force = true;
  xdg.mimeApps = {
@@ -104,18 +191,18 @@ in {
    # associations.added = {};
    # associations.removed = {};
    defaultApplications =
-      (lib.mapAttrs' (_: v: lib.nameValuePair v sxiv) mime.image)
+      (lib.mapAttrs' (_: v: lib.nameValuePair v nsxiv) mime.image)
    // (lib.mapAttrs' (_: v: lib.nameValuePair v mpv) mime.audio)
    // (lib.mapAttrs' (_: v: lib.nameValuePair v mpv) mime.video)
    // (lib.mapAttrs' (_: v: lib.nameValuePair v font-viewer) mime.font)
+    // (lib.mapAttrs' (_: v: lib.nameValuePair v libreoffice) mime.office)
    // (lib.mapAttrs' (_: v: lib.nameValuePair v zathura) mime.documents)
-    // (lib.mapAttrs' (_: v: lib.nameValuePair v vscode) mime.code)
+    // (lib.mapAttrs' (_: v: lib.nameValuePair v zed) mime.code)
+    // (lib.mapAttrs' (_: v: lib.nameValuePair v ark) mime.archive)
+    // (lib.mapAttrs' (_: v: lib.nameValuePair v firefox) mime.web)
    // {
-      ${mime.misc.http} = firefox;
-      ${mime.misc.https} = firefox;
-      ${mime.misc.wine-ini} = vscode;
-      ${mime.misc.ics} = vscode;
-      ${mime.misc.url} = firefox;
+      ${mime.misc.wine-ini} = zed;
+      ${mime.misc.ics} = zed;
    };
  };
 }
@@ -0,0 +1,129 @@
+{ config, lib, pkgs, ... }:
+let
+  cfg = config.accounts.email;
+in
+{
+  sops.secrets = {
+    "email/naniwtf/password" = { };
+    "email/kyoto-u/password" = { };
+    "email/pvv/password" = { };
+  };
+
+  accounts.email = {
+    maildirBasePath = "mail";
+    accounts = {
+      "naniwtf" = let
+        userName = "h7x4";
+        domain = "nani.wtf";
+      in {
+        primary = true;
+
+        userName = "${userName}@${domain}";
+        realName = "h7x4";
+        address = "${userName}@${domain}";
+        passwordCommand = "${lib.getExe' pkgs.coreutils "cat"} ${config.sops.secrets."email/naniwtf/password".path}";
+
+        imap = {
+          host = "redbull.mxrouting.net";
+          port = 993;
+          authentication = "plain";
+          tls.enable = true;
+        };
+
+        smtp = {
+          host = "redbull.mxrouting.net";
+          port = 465;
+          authentication = "plain";
+          tls.enable = true;
+        };
+
+        gpg = {
+          key = "46B9228E814A2AAC";
+          signByDefault = true;
+        };
+
+        neomutt.enable = true;
+        thunderbird.enable = true;
+        meli.enable = true;
+      };
+
+      "pvv" = let
+        userName = "oysteikt";
+        domain = "pvv.ntnu.no";
+      in {
+        inherit userName;
+        realName = "Øystein K Tveit";
+        address = "${userName}@${domain}";
+        passwordCommand = "${lib.getExe' pkgs.coreutils "cat"} ${config.sops.secrets."email/pvv/password".path}";
+
+        imap = {
+          host = "imap.${domain}";
+          port = 993;
+          authentication = "plain";
+          tls.enable = true;
+        };
+
+        smtp = {
+          host = "redbull.mxrouting.net";
+          port = 587;
+          authentication = "plain";
+          tls = {
+            enable = true;
+            useStartTls = true;
+          };
+        };
+
+        gpg = {
+          key = "";
+          signByDefault = true;
+        };
+
+        neomutt.enable = true;
+        thunderbird.enable = true;
+        meli.enable = true;
+      };
+
+      "kyoto-u" = let
+        userName = "oysteikt";
+        domain = "fos.kuis.kyoto-u.ac.jp";
+      in {
+        inherit userName;
+        realName = "トバイト、オースティン";
+        address = "${userName}@${domain}";
+        passwordCommand = "${lib.getExe' pkgs.coreutils "cat"} ${config.sops.secrets."email/kyoto-u/password".path}";
+
+        imap = {
+          host = "io.kuis.kyoto-u.ac.jp";
+          port = 993;
+          authentication = "plain";
+          tls.enable = true;
+        };
+
+        smtp = {
+          host = "io.kuis.kyoto-u.ac.jp";
+          port = 587;
+          authentication = "plain";
+          tls = {
+            enable = true;
+            useStartTls = true;
+          };
+        };
+
+        # gpg = {
+
+        # };
+
+        neomutt.enable = true;
+        thunderbird.enable = true;
+        meli.enable = true;
+      };
+    };
+  };
+
+  systemd.user.tmpfiles.settings."10-maildir" = lib.mkIf (lib.any (acct: acct.enable) (lib.attrValues cfg.accounts)) {
+    "${config.home.homeDirectory}/${cfg.maildirBasePath}".d =  {
+      mode = "0700";
+      user = config.home.username;
+    };
+  };
+}
@@ -3,75 +3,19 @@
  graphics = !machineVars.headless;
 in {
  imports = [
-    ./shell.nix
+    ./breakerbox.nix
+    ./email.nix
    ./packages.nix
+    ./shell.nix

    ./config/xdg
-
-    ./programs/atuin.nix
-    ./programs/comma.nix
-    ./programs/direnv
-    ./programs/gdb.nix
-    ./programs/gh.nix
-    ./programs/git
-    ./programs/gpg
-    ./programs/less.nix
-    ./programs/neovim
-    ./programs/nix-index
-    ./programs/ssh
-    ./programs/tealdeer
-    ./programs/tmux.nix
-    ./programs/zsh
-
-    ./services/nix-channel-update.nix
-    ./services/pueue.nix
-
-    ./modules/colors.nix
-    ./modules/shellAliases.nix
-  ] ++ optionals graphics [
-    ./config/gtk.nix
-
-    ./programs/alacritty.nix
-    ./programs/emacs
-    ./programs/firefox.nix
-    ./programs/ncmpcpp.nix
-    ./programs/newsboat
-    ./programs/qutebrowser.nix
-    ./programs/rofi.nix
-    ./programs/taskwarrior.nix
-    ./programs/vscode
-    # ./programs/xmobar
-    ./programs/xmonad
-    ./programs/zathura.nix
-    ./programs/zed
-
-    ./services/copyq.nix
-    ./services/dunst.nix
-    ./services/fcitx5.nix
-    ./services/mpd.nix
-    ./services/picom.nix
-    ./services/polybar.nix
-    ./services/ra-multiplex.nix
-    ./services/screen-locker.nix
-    # ./services/stalonetray.nix
-    ./services/sxhkd.nix
-    ./services/tumblerd.nix
+    ./config/ensure-homedir-structure.nix
+    ./config/downloads-sorter.nix
  ];

  sops.defaultSopsFile = ../secrets/home.yaml;
  sops.age.sshKeyPaths = [ "${config.home.homeDirectory}/.ssh/id_ed25519_home_sops" ];

-  sops.secrets."nix/access-tokens" = {
-    sopsFile = ../secrets/common.yaml;
-  };
-
-  nix = {
-    settings.use-xdg-base-directories = true;
-    extraOptions = ''
-      !include ${config.sops.secrets."nix/access-tokens".path}
-    '';
-  };
-
  home = {
    username = "h7x4";
    homeDirectory = "/home/h7x4";
@@ -90,81 +34,34 @@ in {
      package = pkgs.capitaine-cursors;
      name = "capitaine-cursors";
      size = 16;
+      dotIcons.enable = false;
    };

    keyboard.options = [ "caps:escape" ];
+  };

-    sessionVariables = {
-      CARGO_NET_GIT_FETCH_WITH_CLI = "true";
-      PYTHONSTARTUP = "${config.xdg.configHome}/python/pyrc";
+  systemd.user.sessionVariables = {
+    DO_NOT_TRACK = "1";
+    _JAVA_AWT_WM_NONREPARENTING = "1";
+  };
+
+  dconf.settings = mkIf graphics {
+    "org/gnome/desktop/interface" = {
+      color-scheme = "prefer-dark";
    };
  };

-  xdg.configFile = {
-    "ghc/ghci.conf".text = ''
-      :set prompt "${extendedLib.termColors.front.magenta "[GHCi]λ"} "
-    '';
-
-    "python/pyrc".text = ''
-      #!/usr/bin/env python3
-      import sys
-
-      # You also need \x01 and \x02 to separate escape sequence, due to:
-      # https://stackoverflow.com/a/9468954/1147688
-      sys.ps1='\x01\x1b${extendedLib.termColors.front.blue "[Python]> "}\x02>>>\x01\x1b[0m\x02 '  # bright yellow
-      sys.ps2='\x01\x1b[1;49;31m\x02...\x01\x1b[0m\x02 '  # bright red
-    '';
+  xsession = {
+    enable = !machineVars.wayland;
+    # TODO: declare using xdg config home
+    scriptPath = "${config.xdg.configHome}/X11/xsession";
+    profilePath = "${config.xdg.configHome}/X11/xprofile";
  };

  news.display = "silent";

  fonts.fontconfig.enable = mkForce true;

-  programs = {
-    home-manager.enable = true;
-
-    bash = {
-      enable = true;
-      historyFile = "${config.xdg.dataHome}/bash_history";
-      historySize = 100000;
-      bashrcExtra = ''
-        source "${config.xdg.configHome}/mutable_env.sh"
-      '';
-    };
-
-    bat.enable = true;
-    bottom = {
-      enable = true;
-      settings.flags.enable_gpu = true;
-    };
-    eza.enable = true;
-    feh.enable = mkIf graphics true;
-    fzf = {
-      enable = true;
-      defaultCommand = "fd --type f";
-    };
-    man = {
-      enable = true;
-      generateCaches = true;
-    };
-    mpv.enable = mkIf graphics true;
-    obs-studio.enable = mkIf graphics true;
-    ssh = {
-      enable = true;
-      includes = [ "mutable_config" ];
-    };
-    texlive = {
-      enable = true;
-      # packageSet = pkgs.texlive.combined.scheme-medium;
-    };
-    zoxide.enable = true;
-  };
-
-  services = {
-    gnome-keyring.enable = mkIf graphics true;
-    network-manager-applet.enable = mkIf graphics true;
-  };
-
  manual = {
    html.enable = true;
    manpages.enable = true;
@@ -173,10 +70,7 @@ in {

  qt = mkIf graphics {
    enable = true;
-    platformTheme.name = "gtk";
-    style = {
-      name = "adwaita-dark";
-      package = pkgs.adwaita-qt;
-    };
+    platformTheme.name = "adwaita";
+    style.name = "adwaita-dark";
  };
 }
@@ -0,0 +1,52 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.programs.direnv;
+in
+{
+  options.programs.direnv.auto-prune-allowed-dirs = {
+    enable = lib.mkEnableOption "automatic pruning of direnv dirs";
+
+    onCalendar = lib.mkOption {
+      type = lib.types.str;
+      default = "daily";
+      example = "weekly";
+      # TODO: link to systemd manpage for format.
+      description = "How often to prune dirs.";
+    };
+  };
+
+  config = lib.mkIf cfg.auto-prune-allowed-dirs.enable {
+    systemd.user.services.direnv-auto-prune-allowed-dirs = {
+      Unit = {
+        Description = "Prune unused allowed directories for direnv";
+        Documentation = [ "man:direnv(1)" ];
+        ConditionPathExists = "${config.xdg.dataHome}/direnv/allow";
+      };
+
+      Service = {
+        Type = "oneshot";
+        Slice = "background.slice";
+        CPUSchedulingPolicy = "idle";
+        IOSchedulingClass = "idle";
+        ExecStart = "${lib.getExe cfg.package} prune";
+      };
+    };
+
+    systemd.user.timers.direnv-auto-prune-allowed-dirs = {
+      Unit = {
+        Description = "Prune unused allowed directories for direnv";
+        Documentation = [ "man:direnv(1)" ];
+      };
+
+      Timer = {
+        Unit = "direnv-auto-prune-allowed-dirs.service";
+        OnCalendar = cfg.auto-prune-allowed-dirs.onCalendar;
+        Persistent = true;
+      };
+
+      Install = {
+        WantedBy = [ "timers.target" ];
+      };
+    };
+  };
+}
@@ -32,6 +32,7 @@ in

      Service = {
        Type = "oneshot";
+        Slice = "background.slice";
        CPUSchedulingPolicy = "idle";
        IOSchedulingClass = "idle";
        ExecStart = "${lib.getExe cfg.package} --refresh-keys";
@@ -32,6 +32,7 @@ in

      Service = {
        Type = "oneshot";
+        Slice = "background.slice";
        CPUSchedulingPolicy = "idle";
        IOSchedulingClass = "idle";
        ExecStart = "${lib.getExe cfg.package} --update-trustdb";
@@ -0,0 +1,10 @@
+{ ... }:
+{
+  imports = [
+    ./auto-refresh-keys.nix
+    ./auto-update-trust-db.nix
+
+    # ./key-fetchers/declarative-github-key-fetcher.nix # WIP
+    ./key-fetchers/declarative-keyserver-key-fetcher.nix
+  ];
+}
@@ -0,0 +1,102 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.programs.gpg;
+in
+{
+  # TODO: Create proper descriptions
+  options = {
+    programs.gpg.key-fetchers.github = {
+      enable = lib.mkEnableOption "auto fetching of gpg keys by github username";
+
+      useGh = lib.mkEnableOption "" // {
+        description = "Whether to use the GitHub API through the gh tools to fetch GPG keys";
+        default = config.programs.gh.enable;
+        defaultText = lib.literalExpression "config.programs.gh.enable";
+      };
+
+      # TODO: default time interval
+
+      keys = lib.mkOption {
+        description = "";
+        default = { };
+        type = lib.types.attrsOf (lib.types.submodule ({ name, ... }: {
+          options = {
+            # id = lib.mkOption {
+            #   description = "";
+            #   default = name;
+            #   example = "";
+            #   type = lib.types.str;
+            # };
+
+            username = lib.mkOption {
+              description = "";
+              default = name;
+              type = lib.types.nonEmptyStr;
+            };
+
+            trust = lib.mkOption {
+              description = "If marked as null, it's mutable";
+              default = null;
+              example = 4;
+              type = with lib.types; nullOr (ints.between 1 5);
+            };
+
+            # TODO: time interval override
+          };
+        }));
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.key-fetchers.github.enable {
+    systemd.user.services."gpg-fetch-github-key@" = {
+      description = "Fetch GPG keys for GitHub user %i";
+      serviceConfig = {
+        Type = "oneshot";
+        CPUSchedulingPolicy = "idle";
+        IOSchedulingClass = "idle";
+
+        # TODO: warn if user or key does not exist
+        ExecStart = let
+          ghScript = pkgs.writeShellApplication {
+            name = "fetch-github-gpg-keys";
+            runtimeInputs = [
+              config.programs.gh.package
+              pkgs.jq
+              cfg.package
+            ];
+            text = ''
+              gh api users/''${1}/gpg_keys | jq -r '.[].raw_key' | gpg --import
+            '';
+          };
+
+          curlScript = pkgs.writeShellApplication {
+            name = "fetch-github-gpg-keys";
+            runtimeInputs = [
+              pkgs.curl
+              pkgs.jq
+              cfg.package
+            ];
+            text = ''
+              curl -s https://api.github.com/users/''${1}/gpg_keys | jq -r '.[].raw_key' | gpg --import
+            '';
+          };
+        in if cfg.key-fetchers.github.useGh then ghScript else curlScript;
+
+        Restart = "on-failure";
+        RestartSec = "10s";
+        Environment = [
+          "GNUPGHOME=${cfg.homedir}"
+        ];
+      };
+    };
+
+    systemd.user.timers."gpg-fetch-github-keys@" = {
+      description = "Fetch GPG keys for GitHub user %i";
+      wantedBy = [ "timers.target" ];
+      timerConfig = {
+
+      };
+    };
+  };
+}
@@ -3,10 +3,14 @@ let
  cfg = config.programs.gpg;
 in
 {
+  # TODO: per-key timers
  # TODO: Create proper descriptions
  options = {
-    programs.gpg.fetch-keys = {
+    programs.gpg.key-fetchers.keyserver = {
      enable = lib.mkEnableOption "auto fetching of gpg keys by fingerprint";
+
+      # TODO: default time interval
+
      keys = lib.mkOption {
        description = "";
        default = { };
@@ -23,8 +27,7 @@ in
              description = "If marked as null, use config";
              default = null;
              example = "hkps://keys.openpgp.org";
-              type = with lib.types; nullOr str;
-              apply = v: if v == null then "@NULL@" else v;
+              type = with lib.types; coercedTo (nullOr str) (v: if v == null then "@NULL@" else v) str;
            };

            trust = lib.mkOption {
@@ -33,6 +36,8 @@ in
              example = 4;
              type = with lib.types; nullOr (ints.between 1 5);
            };
+
+             # TODO: time interval override
          };
        }));
      };
@@ -43,7 +48,7 @@ in
    # TODO: Fix the module so that this unit runs whenever something changes
    systemd.user.services.gpg-fetch-keys = let
      fetchKeysApplication = let
-        recvKeysByKeyserver = lib.pipe cfg.fetch-keys.keys [
+        recvKeysByKeyserver = lib.pipe cfg.key-fetchers.keyserver.keys [
          lib.attrValues
          (lib.foldl (acc: key: acc // {
            ${key.keyserver} = (acc.${key.keyserver} or []) ++ [ key.id ];
@@ -69,7 +74,7 @@ in
          }
        '';

-        trustKeys = lib.pipe cfg.fetch-keys.keys [
+        trustKeys = lib.pipe cfg.key-fetchers.keyserver.keys [
          lib.attrValues
          (lib.filter (key: key.trust != null))
          (map ({ id, trust, ... }: "importTrust '${id}' '${toString trust}'"))
@@ -84,7 +89,7 @@ in
          trustKeys
        ];
      };
-    in lib.mkIf cfg.fetch-keys.enable {
+    in lib.mkIf cfg.key-fetchers.keyserver.enable {
      Unit = {
        Description = "Fetch declaratively listed gpg keys";
        Documentation = [ "man:gpg(1)" ];
@@ -1,9 +1,29 @@
 { config, pkgs, lib, ... }:
 let
  daysBeforeDeletion = 2;
+  cfg = config.programs.neovim.auto-clean-swapfiles;
 in
 {
-  config = {
+  options.programs.neovim.auto-clean-swapfiles = {
+    enable = lib.mkEnableOption "automatic cleanup of neovim swapfiles";
+
+    daysBeforeDeletion = lib.mkOption {
+      type = lib.types.ints.positive;
+      default = 2;
+      example = 7;
+      description = "How long many days old the swapfile should be before it gets cleaned up";
+    };
+
+    onCalendar = lib.mkOption {
+      type = lib.types.str;
+      default = "daily";
+      example = "weekly";
+      # TODO: link to systemd manpage for format.
+      description = "How often to run the cleanup.";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
    systemd.user.services.clean-neovim-swap-files = {
      Unit = {
        Description = "Clean old swap files for neovim";
@@ -11,6 +31,7 @@ in

      Service = {
        Type = "oneshot";
+        Slice = "background.slice";
        CPUSchedulingPolicy = "idle";
        IOSchedulingClass = "idle";
        ExecStart = lib.getExe (pkgs.writeShellApplication {
@@ -19,7 +40,7 @@ in
          text = ''
            echo "Cleaning old swap files for neovim"

-            OLD_SWAPFILES=$(find "${config.xdg.stateHome}/nvim/swap" -type f -name '*.swp' -mtime +${toString daysBeforeDeletion})
+            OLD_SWAPFILES=$(find "${config.xdg.stateHome}/nvim/swap" -type f -name '*.swp' -mtime +${toString cfg.daysBeforeDeletion})

            if [ -z "$OLD_SWAPFILES" ]; then
              echo "No old swap files found"
@@ -44,7 +65,7 @@ in

      Timer = {
        Unit = "clean-neovim-swap-files.service";
-        OnCalendar = "daily";
+        OnCalendar = cfg.onCalendar;
        Persistent = true;
      };

@@ -1,12 +1,25 @@
 { config, pkgs, lib, ... }:
 let
-  cfg = config.programs.nix-index;
+  cfg = config.programs.nix-index.autoUpdateDatabase;
 in
 {
-  options.programs.nix-index.enableDatabaseFetcher = lib.mkEnableOption "timed unit that fetches an updated database of nixpkgs outputs";
+  options.programs.nix-index.autoUpdateDatabase = {
+    enable = lib.mkEnableOption "timed unit that fetches an updated database of nixpkgs outputs";
+
+    # TODO: let users specify forks and other sources
+    # url = "";
+
+    onCalendar = lib.mkOption {
+      type = lib.types.str;
+      default = "weekly";
+      example = "montly";
+      # TODO: link to systemd manpage for format.
+      description = "How often to update the database.";
+    };
+  };

  config = {
-    systemd.user.timers.fetch-nix-index-database = lib.mkIf cfg.enableDatabaseFetcher {
+    systemd.user.timers.fetch-nix-index-database = lib.mkIf cfg.enable {
      Unit = {
        Description = "Fetch nix-index database";
        Documentation = [ "https://github.com/nix-community/nix-index-database" ];
@@ -14,7 +27,7 @@ in

      Timer = {
        Unit = "fetch-nix-index-database.service";
-        OnCalendar = "weekly";
+        OnCalendar = cfg.onCalendar;
        Persistent = true;
      };

@@ -23,7 +36,7 @@ in
      };
    };

-    systemd.user.services.fetch-nix-index-database = lib.mkIf cfg.enableDatabaseFetcher {
+    systemd.user.services.fetch-nix-index-database = lib.mkIf cfg.enable {
      Unit = {
        Description = "Fetch nix-index database";
        Documentation = [ "https://github.com/nix-community/nix-index-database" ];
@@ -31,6 +44,7 @@ in

      Service = {
        Type = "oneshot";
+        Slice = "background.slice";
        ExecStart = lib.getExe (pkgs.writeShellApplication {
          name = "fetch-nix-index-database";
          runtimeInputs = with pkgs; [
@@ -39,6 +53,8 @@ in
            wget
          ];

+          # TODO: allow fetching with gh + github token
+
          # Source: https://github.com/nix-community/nix-index-database?tab=readme-ov-file#ad-hoc-download
          # Slightly modified to satisfy shellcheck
          text = ''
@@ -0,0 +1,110 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.programs.prism-launcher;
+in
+{
+  imports = [
+    ../../systemd-tmpfiles.nix
+  ];
+
+  options.programs.prism-launcher = {
+    enable = lib.mkEnableOption "PrismLauncher, an open source minecraft launcher";
+
+    package = lib.mkPackageOption pkgs "prismlauncher" { };
+
+    stateDir = lib.mkOption {
+      description = "The directory where PrismLauncher stores it's state";
+      type = lib.types.path;
+      default = "${config.xdg.dataHome}/PrismLauncher";
+      defaultText = lib.literalExpression ''"''${config.xdg.dataHome}/PrismLauncher"'';
+    };
+
+    screenshotMover = {
+      enable = lib.mkEnableOption "a systemd unit that automatically moves screenshots from all minecraft instances into a common dir";
+
+      screenshotDir = lib.mkOption {
+        description = "Where to move the minecraft screenshots.";
+        type = lib.types.path;
+        default = if config.xdg.userDirs.pictures != null
+          then "${config.xdg.userDirs.pictures}/prismlauncher-screenshots"
+          else "${config.home.homeDirectory}/Pictures";
+        defaultText = lib.literalExpression ''
+          if config.xdg.userDirs.pictures != null
+            then "''${config.xdg.userDirs.pictures}/prismlauncher-screenshots"
+            else "''${config.home.homeDirectory}/Pictures"
+        '';
+        example = lib.literalExpression ''
+          "''${config.home.homeDirectory}/minecraft-screenshots"
+        '';
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    home.packages = [ cfg.package ];
+
+    systemd.user.paths.prismlauncher-move-minecraft-screenshots = lib.mkIf cfg.screenshotMover.enable {
+      Install.WantedBy = [ "paths.target" ];
+      Unit.Description = "Watchdog that moves screenshots from all prismlauncher minecraft instances into a common dir";
+      Path = {
+        PathExistsGlob = [
+          "${cfg.stateDir}/instances/*/.minecraft/screenshots/*.png"
+          "${cfg.stateDir}/instances/*/minecraft/screenshots/*.png"
+        ];
+        Unit = "prismlauncher-move-minecraft-screenshots.service";
+        TriggerLimitIntervalSec = "1s";
+        TriggerLimitBurst = "1";
+      };
+    };
+
+    systemd.user.services.prismlauncher-move-minecraft-screenshots = lib.mkIf cfg.screenshotMover.enable {
+      Unit.Description = "Watchdog that moves screenshots from all prismlauncher minecraft instances into a common dir";
+      Service = {
+        Type = "oneshot";
+        Slice = "background.slice";
+        ExecStart = lib.getExe (pkgs.writeShellApplication {
+          name = "prismlauncher-move-minecraft-screenshots.sh";
+          runtimeInputs = with pkgs; [ coreutils findutils ];
+          text = let
+            instancesDir = "${cfg.stateDir}/instances";
+          in ''
+            shopt -s nullglob
+
+            for idir in "${instancesDir}"/*/; do
+              INSTANCE_NAME="''${idir#${instancesDir}/}"
+              INSTANCE_NAME="''${INSTANCE_NAME%'/'}"
+              SCREENSHOT_TARGET_DIR="${cfg.screenshotMover.screenshotDir}/$INSTANCE_NAME"
+              mkdir -p "''${SCREENSHOT_TARGET_DIR}"
+              for variant in minecraft .minecraft; do
+                SCREENSHOT_SOURCE_DIR="${instancesDir}/$INSTANCE_NAME/$variant"/screenshots
+                if [ -d "$SCREENSHOT_SOURCE_DIR" ]; then
+                  echo "Scanning for screenshots in $SCREENSHOT_SOURCE_DIR"
+                  for screenshot in "$SCREENSHOT_SOURCE_DIR"/*.png; do
+                    echo "Moving '$screenshot' -> '$SCREENSHOT_TARGET_DIR'"
+                    cp --preserve=all "$screenshot" "$SCREENSHOT_TARGET_DIR"
+                    rm "$screenshot"
+                  done
+                fi
+              done
+            done
+          '';
+        });
+
+        PrivateUsers = true;
+        PrivateNetwork = true;
+        ProtectSystem = true;
+        NoNewPrivileges = true;
+        ProtectKernelTunables = true;
+        ProtectControlGroups = true;
+        RestrictAddressFamilies = [ ];
+        RestrictNamespaces = true;
+      };
+    };
+
+    systemd.user.tmpfiles.settings."10-prismlauncher" = lib.mkIf cfg.screenshotMover.enable {
+      ${cfg.screenshotMover.screenshotDir}.d = {
+        user = config.home.username;
+      };
+    };
+  };
+}
@@ -0,0 +1,9 @@
+{ ... }:
+{
+  # TODO: create thingamajig that watches ~/Downloads and pulls all new files to
+  #       directory specified by systemd %i
+
+  # systemd.services.
+
+  # systemd.paths
+}
@@ -0,0 +1,160 @@
+{ config, lib, pkgs, ... }:
+let
+  cfg = config.services.downloads-sorter;
+in
+{
+  imports = [
+    ../systemd-tmpfiles.nix
+  ];
+
+  options.services.downloads-sorter = {
+    enable = lib.mkEnableOption "downloads sorter units, path activated units to keep the download dir clean";
+
+    downloadsDirectory = lib.mkOption {
+      type = lib.types.path;
+      description = "Which directory to keep clean";
+      default = if config.xdg.userDirs.enable then config.xdg.userDirs.download else "${config.home.homeDirectory}/Downloads";
+      defaultText = ''
+        if config.xdg.userDirs.enable then config.xdg.userDirs.download else "''${config.home.homeDirectory}/Downloads"
+      '';
+      example = ''
+        "''${config.home.homeDirectory}/downloads"
+      '';
+    };
+
+    mappings = lib.mkOption {
+      type = let
+        mappingType = lib.types.submodule ({ name, ... }: {
+          options = {
+            unitName = lib.mkOption {
+              type = lib.types.str;
+              description = ''
+                The basename of the path/service unit responsible for this mapping
+              '';
+              default = "downloads-sorter@${name}";
+              example = "downloads-sorter@asdf";
+            };
+
+            dir = lib.mkOption {
+              type = lib.types.path;
+              description = ''
+                Absolute path to the directory where matching files should be moved.
+              '';
+              default = if builtins.substring 0 1 name == "/" then name else "${cfg.downloadsDirectory}/${name}";
+              defaultText = ''
+                if builtins.substring 0 1 name == "/" then name else "''${config.services.downloads-sorter.downloadsDirectory}/''${name}"
+              '';
+            };
+
+            globs = lib.mkOption {
+              type = with lib.types; listOf str;
+              description = ''
+                A list of globs that match the files that should be moved.
+              '';
+              example = [
+                "*.jpg"
+                "IMG_*_2020_*.png"
+              ];
+              apply = map (g: "${cfg.downloadsDirectory}/${g}");
+            };
+
+            createDirIfNotExists = lib.mkOption {
+              type = lib.types.bool;
+              description = ''
+                Whether to create the target directory if it does not exist yet.
+
+                Turn this off if you'd like the target directory to be a symlink or similar.
+              '';
+              default = true;
+              example = false;
+            };
+
+            # TODO: allow specifying a dynamic filter together with a system path trigger in an attrset.
+          };
+        });
+      in with lib.types; attrsOf (coercedTo (listOf str) (globs: { inherit globs; }) mappingType);
+      description = ''
+        A mapping from a file pattern to the location where it should be moved.
+
+        By default, the output mapping is relative to the download dir.
+        If an absolute path is given, the sorter will move the files out of the downloads dir.
+      '';
+      default = { };
+      example = {
+        "pictures" = [
+          "*.png"
+          "*.jpg"
+        ];
+        "documents" = {
+          createDirIfNotExists = false;
+          globs = [ "*.pdf" ];
+        };
+        "/home/<user>/archives" = [ "*.rar" ];
+      };
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    systemd.user.paths = lib.mapAttrs' (dir: mapping: {
+      name = mapping.unitName;
+      value = {
+        Install.WantedBy = [ "paths.target" ];
+        Path = {
+          PathExistsGlob = mapping.globs;
+          Unit = "${mapping.unitName}.service";
+          TriggerLimitIntervalSec = "1s";
+          TriggerLimitBurst = "1";
+        };
+      };
+    }) cfg.mappings;
+
+    # TODO: deduplicate
+    systemd.user.services = lib.mapAttrs' (dir: mapping: {
+      name = mapping.unitName;
+      value = {
+        Unit.Description = "Downloads directory watchdog, sorts the downloads directory";
+        Service = {
+          Type = "oneshot";
+          Slice = "background.slice";
+          SyslogIdentifier = mapping.unitName;
+          ExecStart = let
+            script = pkgs.writeShellApplication {
+              name = "downloads-sorter-${dir}.sh";
+              runtimeInputs = [ pkgs.coreutils ];
+              text = ''
+                shopt -s nullglob
+
+                FILES=(${builtins.concatStringsSep " " mapping.globs})
+
+                for file in "''${FILES[@]}"; do
+                  echo "$file -> ${mapping.dir}"
+                  mv "$file" '${mapping.dir}'
+                done
+              '';
+            };
+          in lib.getExe script;
+
+          PrivateUsers = true;
+          ProtectSystem = true;
+          NoNewPrivileges = true;
+          ProtectKernelTunables = true;
+          ProtectControlGroups = true;
+          PrivateNetwork = true;
+          RestrictNamespaces = true;
+        };
+      };
+    })  cfg.mappings;
+
+    systemd.user.tmpfiles.settings."10-downloads-sorter-service" = let
+      absolutePaths = lib.pipe cfg.mappings [
+        builtins.attrValues
+        (builtins.filter (m: m.createDirIfNotExists))
+        (map (m: m.dir))
+      ];
+    in lib.genAttrs absolutePaths (_: {
+      d = {
+        user = config.home.username;
+      };
+    });
+  };
+}
@@ -0,0 +1,55 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.services.mpd;
+in
+{
+  options.services.mpd.autoUpdateDatabase = lib.mkEnableOption "watchdog that updates the mpd database upon file changes";
+
+  config = lib.mkIf cfg.autoUpdateDatabase {
+    systemd.user.paths.mpd-update-database = {
+      Install.WantedBy = [ "paths.target" ];
+      Unit = {
+        Description = "Watchdog that updates the mpd database upon file changes";
+        Documentation = [
+          "man:mpd(1)"
+          "man:mpd.conf(5)"
+        ];
+      };
+      Path = {
+        PathChanged = [
+          cfg.musicDirectory
+          cfg.playlistDirectory
+        ];
+        Unit = "mpd-update-database.service";
+        TriggerLimitIntervalSec = "1s";
+        TriggerLimitBurst = "1";
+      };
+    };
+
+    systemd.user.services.mpd-update-database = {
+      Unit = {
+        Description = "Watchdog that updates the mpd library whenever the files are modified";
+        Documentation = [
+          "man:mpd(1)"
+          "man:mpd.conf(5)"
+        ];
+      };
+      Service = {
+        Type = "oneshot";
+        Slice = "background.slice";
+        ExecStart = "${lib.getExe pkgs.mpc} update --wait";
+
+        PrivateUsers = true;
+        ProtectSystem = true;
+        NoNewPrivileges = true;
+        ProtectKernelTunables = true;
+        ProtectControlGroups = true;
+        RestrictAddressFamilies = [
+          "AF_INET"
+          "AF_UNIX"
+        ];
+        RestrictNamespaces = true;
+      };
+    };
+  };
+}
@@ -1,50 +1,171 @@
-{ pkgs, lib, extendedLib, inputs, config, ... }: let
-  inherit (lib) types mkEnableOption mkOption mdDoc;
+{ config, pkgs, lib, extendedLib, ... }: let
  cfg = config.local.shell;

-# NOTE:
-#       This module is an over-engineered solution to a non-problem.
-#       It is a fun experiment in using the Nix language to create a
-#       shell alias system that organizes aliases into a tree structure,
-#       with categories and subcategories and subsubcategories and so on.
-#
-#       It also has a lazy join function that will join a list of commands
-#       with a separator, but render it in a prettier way in a documentation
-#       file that you can print out and read.
-
-  isAlias = v: builtins.isAttrs v && v ? "alias" && v ? "type";
-in {
-  options.local.shell = {
-    aliases = let
-
-      coerceStrToAlias = str: {
-        type = " ";
-        alias = [ str ];
-      };
-
-      aliasType = (types.coercedTo types.str coerceStrToAlias (types.submodule {
-        options = {
-          type = mkOption {
-            type = types.enum [ "|" "&&" ";" " " ];
-            default = ";";
-            description = ''
-              If the alias is a list of commands, this is the kind of separator that will be used.
-            '';
+  shellAliasesFormat = let
+    formatLib = {
+      functors = let
+        inherit (extendedLib.termColors.front) blue;
+      in
+        {
+          "|" = {
+            apply = f: lib.concatStringsSep " | " f.alias;
+            stringify = f: lib.concatStringsSep (blue "\n| ") f.alias;
          };
-          alias = mkOption {
-            type = types.listOf types.str;
+          "&&" = {
+            apply = f: lib.concatStringsSep " && " f.alias;
+            stringify = f: lib.concatStringsSep (blue "\n&& ") f.alias;
+          };
+          ";" = {
+            apply = f: lib.concatStringsSep "; " f.alias;
+            stringify = f: lib.concatStringsSep (blue ";\n  ") f.alias;
+          };
+          " " = {
+            apply = f: lib.concatStringsSep " " f.alias;
+            stringify = f: lib.concatStringsSep " \\\n   " f.alias;
          };
        };
-      })) // {
-        # NOTE: this check is necessary, because nix will recurse on types.either,
-        #       and report that the option does not exist.
-        #       See https://discourse.nixos.org/t/problems-with-types-oneof-and-submodules/15197
-        check = v: builtins.isString v || isAlias v;
+
+      isAlias = v: builtins.isAttrs v && v ? alias;
+    };
+  in {
+    lib = formatLib;
+
+    type = let
+      rawAliasType = lib.types.submodule {
+        options = {
+          type = lib.mkOption {
+            description = "If the alias is a list of commands, this is the kind of separator that will be used.";
+            type = lib.types.enum (lib.attrNames formatLib.functors);
+            default = ";";
+            example = "&&";
+          };
+          alias = lib.mkOption {
+            description = "List of commands that will be concatenated together.";
+            type = with lib.types; listOf str;
+            example = [
+              "ls"
+              "grep nix"
+            ];
+          };
+          shells = lib.mkOption {
+            description = "List of shells for which the alias is valid.";
+            type = with lib.types; listOf (enum [
+              "bash"
+              "zsh"
+              "fish"
+              "nushell"
+            ]);
+            default = [
+              "bash"
+              "zsh"
+              "fish"
+              "nushell"
+            ];
+            example = [
+              "bash"
+              "zsh"
+            ];
+          };
+          # TODO:
+          # subshell = lib.mkEnableOption "" // {
+          #   description = "Whether to run the aliased command in a subshell";
+          # };
+        };
      };

-      recursingAliasTreeType = types.attrsOf (types.either aliasType recursingAliasTreeType);
-    in mkOption {
-      type = recursingAliasTreeType;
+      coercedAliasType = with lib.types; let
+        coerce = str: {
+          type = " ";
+          alias = [ str ];
+        };
+      in addCheck (coercedTo str coerce rawAliasType) (v: builtins.isString v || formatLib.isAlias v);
+
+      aliasTreeType = with lib.types; attrsOf (either coercedAliasType aliasTreeType) // {
+        description = "Alias tree";
+      };
+    in aliasTreeType;
+
+    # Alias Tree -> String -> { :: Alias }
+    generateAttrs = shell: let
+      generateAttrs' = attrset: lib.pipe attrset [
+        (attrset: {
+          right = lib.filterAttrs (_: v: formatLib.isAlias v) attrset;
+          wrong = lib.filterAttrs (_: v: !(formatLib.isAlias v)) attrset;
+        })
+        ({ right, wrong }:
+          # Leaf nodes
+          (lib.pipe right [
+            (lib.filterAttrs (_: v: lib.elem shell v.shells))
+            (builtins.mapAttrs (_: v: formatLib.functors.${v.type}.apply v))
+          ])
+          //
+          # Subsets
+          (lib.pipe wrong [
+            builtins.attrValues
+            (map generateAttrs')
+            (lib.foldr (a: b: a // b) { })
+          ])
+        )
+      ];
+    in generateAttrs';
+
+    # Alias Tree -> String
+    generateText = aliases: let
+      inherit (extendedLib.termColors.front) red green blue;
+
+      # String -> Alias -> String
+      stringifyAlias = aliasName: alias: let
+        # String -> String
+        removeNixLinks = text: let
+          maybeMatches = lib.match "(|.*[^)])(/nix/store/.*/bin/).*" text;
+          matches = lib.mapNullable (lib.remove "") maybeMatches;
+        in
+          if (maybeMatches == null)
+          then text
+          else lib.replaceStrings matches (lib.replicate (lib.length matches) "") text;
+
+        # Alias -> String
+        applyFunctor = attrset: let
+          applied = formatLib.functors.${attrset.type}.stringify attrset;
+          indent' = lib.strings.replicate (lib.stringLength "${aliasName} -> ") " ";
+        in
+          lib.replaceStrings ["\n"] [("\n" + indent')] applied;
+      in "${red aliasName} -> ${blue "\""}${removeNixLinks (applyFunctor alias)}${blue "\""}";
+
+      # String -> String
+      indent = x: lib.pipe x [
+        (x: "\n" + x)
+        (lib.replaceStrings ["\n"] [("\n" + (lib.strings.replicate 2 " "))])
+        (lib.removePrefix "\n")
+      ];
+
+      # String -> { :: Alias | Category } -> String
+      stringifyCategory = categoryName: category: lib.pipe category [
+        (category: let
+          aliases = lib.filterAttrs (_: formatLib.isAlias) category;
+        in {
+          inherit aliases;
+          subcategories = lib.removeAttrs category (lib.attrNames aliases);
+        })
+        ({ aliases, subcategories }: {
+          aliases = lib.mapAttrsToList stringifyAlias aliases;
+          subcategories = lib.mapAttrsToList stringifyCategory subcategories;
+        })
+        ({ aliases, subcategories }:
+          lib.concatStringsSep "\n" (lib.filter (x: lib.trim x != "") [
+            "[${green categoryName}]"
+            (indent (lib.concatStringsSep "\n" aliases) + "\n")
+            (indent (lib.concatStringsSep "\n" subcategories) + "\n")
+          ])
+        )
+      ];
+    in (stringifyCategory "Aliases" aliases);
+  };
+in {
+  options.local.shell = {
+    aliases = lib.mkOption {
+      # TODO: freeformType
+      type = shellAliasesFormat.type;
      description = "A tree of aliases";
      default = { };
      example = {
@@ -71,8 +192,8 @@ in {
      };
    };

-    variables = mkOption {
-      type = types.attrsOf types.str;
+    variables = lib.mkOption {
+      type = with lib.types; attrsOf str;
      description = "Environment variables";
      default = { };
    };
@@ -82,129 +203,19 @@ in {

    # };

-    enablePackageManagerLecture = mkEnableOption "distro reminder messages, aliased to common package manager commands";
-    enableAliasOverview = mkEnableOption "`aliases` command that prints out a list of all aliases" // {
+    enablePackageManagerLecture = lib.mkEnableOption "distro reminder messages, aliased to common package manager commands";
+
+    enableAliasOverview = lib.mkEnableOption "`aliases` command that prints out a list of all aliases" // {
      default = true;
      example = false;
    };
  };

-  config = let
-    sedColor =
-      color:
-      inputPattern:
-      outputPattern:
-      "-e \"s|${inputPattern}|${outputPattern.before or ""}$(tput setaf ${toString color})${outputPattern.middle}$(tput op)${outputPattern.after or ""}|g\"";
-
-    colorRed = sedColor 1;
-
-    colorSlashes = colorRed "/" {middle = "/";};
-
-    # Alias type functors
-    # These will help pretty print the commands
-    functors = let
-      inherit (lib.strings) concatStringsSep;
-      inherit (extendedLib.termColors.front) blue;
-    in
-      {
-        "|" = {
-          apply = f: concatStringsSep " | " f.alias;
-          stringify = f: concatStringsSep (blue "\n| ") f.alias;
-        };
-        "&&" = {
-          apply = f: concatStringsSep " && " f.alias;
-          stringify = f: concatStringsSep (blue "\n&& ") f.alias;
-        };
-        ";" = {
-          apply = f: concatStringsSep "; " f.alias;
-          stringify = f: concatStringsSep (blue ";\n  ") f.alias;
-        };
-        " " = {
-          apply = f: concatStringsSep " " f.alias;
-          stringify = f: concatStringsSep " \\\n   " f.alias;
-        };
-      };
-
-    aliasTextOverview = let
-      inherit (lib) stringLength length concatStringsSep replaceStrings
-                    attrValues mapAttrs isAttrs remove replicate mapNullable;
-
-      inherit (extendedLib.termColors.front) red green blue;
-
-      # String -> String -> String
-      wrap' = wrapper: str: wrapper + str + wrapper;
-
-      # [String] -> String -> String -> String
-      replaceStrings' = from: to: replaceStrings from (replicate (length from) to);
-
-      # String -> Int -> String
-      repeatString = string: times: concatStringsSep "" (replicate times string);
-
-      # int -> String -> AttrSet -> String
-      stringifyCategory = level: name: category: let
-        title = "${repeatString "  " level}[${green name}]";
-
-        commands = attrValues ((lib.flip mapAttrs) category (n: v: let
-            # String
-            indent = repeatString "  " level;
-
-            # String -> String
-            removeNixLinks = text: let
-              maybeMatches = builtins.match "(|.*[^)])(/nix/store/.*/bin/).*" text;
-              matches = mapNullable (remove "") maybeMatches;
-            in
-              if (maybeMatches == null)
-              then text
-              else replaceStrings' matches "" text;
-
-            applyFunctor = attrset: let
-              applied = functors.${attrset.type}.stringify attrset;
-              indent' = indent + (repeatString " " ((stringLength " -> \"") + (stringLength n))) + " ";
-            in
-              replaceStrings' ["\n"] ("\n" + indent') applied;
-
-            recurse = stringifyCategory (level + 1) n v;
-          in if isAlias v
-            then "${indent}  ${red n} -> ${wrap' (blue "\"") (removeNixLinks (applyFunctor v))}"
-            else recurse
-        ));
-      in concatStringsSep "\n" ([title] ++ commands) + "\n";
-    in (stringifyCategory 0 "Aliases" cfg.aliases) + "\n";
-
-    flattenedAliases = let
-      inherit (lib) mapAttrs attrValues filterAttrs isAttrs
-                    isString concatStringsSep foldr;
-
-      applyFunctor = attrset: functors.${attrset.type}.apply attrset;
-
-      # TODO: better naming
-      allAttrValuesAreStrings = attrset: let
-
-        # [ {String} ]
-        filteredAliases = [(filterAttrs (n: v: isString v) attrset)];
-
-        # [ {String} ]
-        remainingFunctors = let
-          functorSet = filterAttrs (_: v: isAlias v) attrset;
-          appliedFunctorSet = mapAttrs (n: v: applyFunctor v) functorSet;
-        in [ appliedFunctorSet ];
-
-        # [ {AttrSet} ]
-        remainingAliasSets = attrValues (filterAttrs (_: v: isAttrs v && !isAlias v) attrset);
-
-        # [ {String} ]
-        recursedAliasSets = filteredAliases
-                          ++ (remainingFunctors)
-                          ++ (map allAttrValuesAreStrings remainingAliasSets);
-      in foldr (a: b: a // b) {} recursedAliasSets;
-
-    in
-      allAttrValuesAreStrings cfg.aliases;
-
-  in {
+  config = {
    xdg.dataFile = {
-      aliases.text = aliasTextOverview;
-      packageManagerLecture = lib.mkIf cfg.enablePackageManagerLecture {
+      "aliases".text = shellAliasesFormat.generateText cfg.aliases;
+
+      "packageManagerLecture" = lib.mkIf cfg.enablePackageManagerLecture {
        target = "package-manager.lecture";
        text = let
          inherit (extendedLib.termColors.front) red blue;
@@ -242,18 +253,22 @@ in {

    programs = {
      zsh = {
-        shellAliases = flattenedAliases;
+        shellAliases = shellAliasesFormat.generateAttrs "zsh" cfg.aliases;
        sessionVariables = cfg.variables;
      };
      bash = {
-        shellAliases = flattenedAliases;
+        shellAliases = shellAliasesFormat.generateAttrs "bash" cfg.aliases;
        sessionVariables = cfg.variables;
      };
      fish = {
-        shellAliases = flattenedAliases;
+        shellAliases = shellAliasesFormat.generateAttrs "fish" cfg.aliases;
        # TODO: fish does not support session variables?
        # localVariables = cfg.variables;
      };
+      nushell = {
+        shellAliases = shellAliasesFormat.generateAttrs "nushell" cfg.aliases;
+        environmentVariables = cfg.variables;
+      };
    };
  };
 }
@@ -0,0 +1,168 @@
+# Taken from nixpkgs: nixos/modules/system/boot/systemd/tmpfiles.nix
+{ config, pkgs, lib, unstable-pkgs, ... }:
+let
+  # TODO: 24.05, year of the types.attrsWith
+  inherit (unstable-pkgs.lib) types mkOption;
+
+  cfg = config.systemd.user.tmpfiles;
+
+  attrsWith' =
+    placeholder: elemType:
+    types.attrsWith {
+      inherit elemType;
+      inherit (lib) placeholder;
+    };
+
+  escapeArgument = lib.strings.escapeC [
+    "\t"
+    "\n"
+    "\r"
+    " "
+    "\\"
+  ];
+
+  settingsOption = {
+    description = ''
+      Declare systemd-tmpfiles rules to create, delete, and clean up volatile
+      and temporary files and directories.
+
+      Even though the service is called `*tmp*files` you can also create
+      persistent files.
+    '';
+    example = {
+      "10-mypackage" = {
+        "/var/lib/my-service/statefolder".d = {
+          mode = "0755";
+          user = "root";
+          group = "root";
+        };
+      };
+    };
+    default = { };
+    type = attrsWith' "config-name" (
+      attrsWith' "path" (
+        attrsWith' "tmpfiles-type" (
+          lib.types.submodule (
+            { name, config, ... }:
+            {
+              options.type = mkOption {
+                type = types.str;
+                default = name;
+                defaultText = "‹tmpfiles-type›";
+                example = "d";
+                description = ''
+                  The type of operation to perform on the file.
+
+                  The type consists of a single letter and optionally one or more
+                  modifier characters.
+
+                  Please see the upstream documentation for the available types and
+                  more details:
+                  {manpage}`tmpfiles.d(5)`
+                '';
+              };
+              options.mode = mkOption {
+                type = types.str;
+                default = "-";
+                example = "0755";
+                description = ''
+                  The file access mode to use when creating this file or directory.
+                '';
+              };
+              options.user = mkOption {
+                type = types.str;
+                default = "-";
+                example = "root";
+                description = ''
+                  The user of the file.
+
+                  This may either be a numeric ID or a user/group name.
+
+                  If omitted or when set to `"-"`, the user and group of the user who
+                  invokes systemd-tmpfiles is used.
+                '';
+              };
+              options.group = mkOption {
+                type = types.str;
+                default = "-";
+                example = "root";
+                description = ''
+                  The group of the file.
+
+                  This may either be a numeric ID or a user/group name.
+
+                  If omitted or when set to `"-"`, the user and group of the user who
+                  invokes systemd-tmpfiles is used.
+                '';
+              };
+              options.age = mkOption {
+                type = types.str;
+                default = "-";
+                example = "10d";
+                description = ''
+                  Delete a file when it reaches a certain age.
+
+                  If a file or directory is older than the current time minus the age
+                  field, it is deleted.
+
+                  If set to `"-"` no automatic clean-up is done.
+                '';
+              };
+              options.argument = mkOption {
+                type = types.str;
+                default = "";
+                example = "";
+                description = ''
+                  An argument whose meaning depends on the type of operation.
+
+                  Please see the upstream documentation for the meaning of this
+                  parameter in different situations:
+                  {manpage}`tmpfiles.d(5)`
+                '';
+              };
+            }
+          )
+        )
+      )
+    );
+  };
+
+  # generates a single entry for a tmpfiles.d rule
+  settingsEntryToRule = path: entry: ''
+    '${entry.type}' '${path}' '${entry.mode}' '${entry.user}' '${entry.group}' '${entry.age}' ${escapeArgument entry.argument}
+  '';
+
+  # generates a list of tmpfiles.d rules from the attrs (paths) under tmpfiles.settings.<name>
+  pathsToRules = lib.mapAttrsToList (
+    path: types: lib.concatStrings (lib.mapAttrsToList (_type: settingsEntryToRule path) types)
+  );
+
+  mkRuleFileContent = paths: lib.concatStrings (pathsToRules paths);
+in
+{
+  options.systemd.user.tmpfiles.settings = lib.mkOption settingsOption;
+
+  config = lib.mkIf (cfg.settings != { }) {
+    assertions = [
+      (lib.hm.assertions.assertPlatform "systemd.user.tmpfiles" pkgs
+        lib.platforms.linux)
+    ];
+
+    xdg.configFile = {
+      "systemd/user/basic.target.wants/systemd-tmpfiles-setup.service".source =
+        "${pkgs.systemd}/example/systemd/user/systemd-tmpfiles-setup.service";
+      "systemd/user/systemd-tmpfiles-setup.service".source =
+        "${pkgs.systemd}/example/systemd/user/systemd-tmpfiles-setup.service";
+      "systemd/user/timers.target.wants/systemd-tmpfiles-clean.timer".source =
+        "${pkgs.systemd}/example/systemd/user/systemd-tmpfiles-clean.timer";
+      "systemd/user/systemd-tmpfiles-clean.service".source =
+        "${pkgs.systemd}/example/systemd/user/systemd-tmpfiles-clean.service";
+    } // (lib.mapAttrs' (name: paths: {
+      name = "user-tmpfiles.d/${name}.conf";
+      value = {
+        text = mkRuleFileContent paths;
+        onChange = "${pkgs.systemd}/bin/systemd-tmpfiles --user --create";
+      };
+    }) cfg.settings);
+  };
+}
@@ -1,39 +1,44 @@
-{ pkgs, config, machineVars, ... }:
+{ pkgs, yet-unstabler-pkgs, config, machineVars, machineName, ... }:
 {
  home.packages = with pkgs; [
-    beets
+    bandwhich
    binutils
    cloc
    cyme
    czkawka
-    delta
-    diskonaut
+    difftastic
+    # diskonaut
    duf
    duff
+    fclones
    ffmpeg
    file
-    gh-dash
+    fselect
+    gitoxide
    glances
+    gpauth
+    gpclient
    gpg-tui
    gping
    graphviz
+    hexyl
+    htmlq
    httpie
+    huniq
+    hyperfine
    imagemagick
-    jq
    kepubify
-    # keybase
    keymapviz
    libwebp
+    lnav
    lolcat
+    lurk
    mdcat
    mediainfo
-    meli
    mkvtoolnix
    mmv
    mtr
-    neofetch
    nix-diff
-    nix-index
    nix-output-monitor
    nix-tree
    nix-update
@@ -41,29 +46,29 @@
    # nixops
    nmap
    ouch
-    pandoc
    parallel
+    pipr
    progress
-    python3
-    rclone
-    ripgrep
+    pwntools
+    rip2
+    rnr
    rsync
    # sc-im
-    slack-term
+    # slack-term
    tea
-    tealdeer
    terminal-parrot
    termtosvg
    toilet
    tokei
+    trippy
    unpaper
    unzip
    usbutils
-    uutils-coreutils
+    uutils-coreutils-noprefix
    waifu2x-converter-cpp
+    watchexec
    wavemon
    wiki-tui
-    yt-dlp
    yubico-pam
    yubikey-agent
    yubikey-manager
@@ -75,63 +80,63 @@
    zlib
    icu
    openssl
-    xorg.xprop
+    xprop
  ] ++ (
    lib.optionals (!machineVars.headless) [
-      ahoviewer
      alsa-utils
-      anki
-      ark
-      birdtray
+      kdePackages.ark
+      brightnessctl
      calibre
      cool-retro-term
      darktable
-      discord
-      element-desktop
+      yet-unstabler-pkgs.discord
+      foliate
      geogebra
-      gimp
-      gnome.gnome-font-viewer
-      gnome.seahorse
-      google-chrome
+      ghidra
+      gimp3-with-plugins
+      gnome-font-viewer
+      imhex
+      imv
      inkscape
      insomnia
      iwgtk
      kid3
      koreader
      krita
-      ktouch
+      # kdePackages.ktouch
      libnotify
      libreoffice
-      light
-      mopidy
-      mopidy-mpd
-      mopidy-soundcloud
-      mopidy-youtube
-      mpc_cli
+      mission-center
+      # mopidy
+      # mopidy-mpd
+      # mopidy-soundcloud
+      # mopidy-youtube
+      mpc
+      mumble
      naps2
-      nyxt
-      obsidian
-      # pcloud
+      nsxiv
+      pcloud
      pdfarranger
+      penpot-desktop
      pwvucontrol
      # scrcpy
+      seahorse
      shellcheck
-      slack
+      signal-desktop
+      # slack
      # sublime3
      # swiPrologWithGui
-      sxiv
      tagainijisho

      tenacity
-      thunderbird
      # transcribe
-      wireshark
+      webcamoid
      xcalib
      xclip
      xdotool
-      xorg.xmodmap
-      (xfce.thunar.override {
-        thunarPlugins = with xfce; [
+      xmodmap
+      (thunar.override {
+        thunarPlugins = [
          thunar-volman
          # thunar-dropbox-plugin
          thunar-archive-plugin
@@ -147,16 +152,12 @@
      touchegg
    ] ++ lib.optionals (machineVars.gaming) [
      desmume
-      osu-lazer
-      (prismlauncher.override {
-        jdk17 = jdk21;
-      })
-      retroarchFull
-      steam
-      steam-tui
+      # osu-lazer
+      # retroarchFull
+      # steam
+      # steam-tui
      stepmania
-      taisei
+      # taisei
    ]
  );
 }
-
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.ahoviewer = { };
+}
@@ -1,7 +1,6 @@
 { pkgs, lib, config, ... }:
 {
  programs.alacritty = {
-    enable = true;
    settings = {
      window = {
        padding = { x = 15; y = 15; };
@@ -18,6 +17,16 @@
        size = 12.0;
      };

+      keyboard.bindings = [
+        # NOTE: Allows for  Ctrl+A Super+Z to work as Ctrl+A Alt+Z in tmux,
+        #       very nice for a keyboard with Alt and Super switched.
+        {
+          key = "z";
+          mods = "Super";
+          chars = "\\u001bz";
+        }
+      ];
+
      colors =
        let
          inherit (lib.attrsets) getAttrs filterAttrs;
@@ -43,9 +52,9 @@
        duration = 20;
      };

-      live_config_reload = true;
+      general.live_config_reload = true;

-      shell = {
+      terminal.shell = {
        program = "${pkgs.zsh}/bin/zsh";
        args = [ "--login" ];
      };
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.anki = { };
+}
@@ -0,0 +1,38 @@
+{ pkgs, lib, ... }:
+{
+  programs.anyrun = {
+    config = {
+      y.fraction = 0.3;
+      width.fraction = 0.25;
+      plugins = [
+        "${pkgs.anyrun}/lib/libapplications.so"
+      ];
+      hidePluginInfo = true;
+      closeOnClick = true;
+      showResultsImmediately = true;
+    };
+
+    extraCss = builtins.readFile ./style.css;
+
+    extraConfigFiles."applications.ron".text = let
+      preprocess_script = pkgs.writeShellApplication {
+        name = "anyrun-preprocess-application-exec";
+        runtimeInputs = [ ];
+        text = ''
+          shift # Remove term|no-term
+          echo "uwsm app -- $*"
+        '';
+      };
+    in ''
+      Config(
+        desktop_actions: false,
+        max_entries: 10,
+        preprocess_exec_script: Some("${lib.getExe preprocess_script}"),
+        terminal: Some(Terminal(
+          command: "${lib.getExe pkgs.alacritty}",
+          args: "-e {}",
+        )),
+      )
+    '';
+  };
+}
@@ -0,0 +1,76 @@
+@define-color accent #5599d2;
+@define-color bg-color #161616;
+@define-color fg-color #eeeeee;
+@define-color desc-color #cccccc;
+
+window {
+  background: transparent;
+}
+
+box.main {
+  padding: 5px;
+  margin: 10px;
+  border-radius: 10px;
+  border: 2px solid @accent;
+  background-color: @bg-color;
+  box-shadow: 0 0 5px black;
+}
+
+
+text {
+  min-height: 30px;
+  padding: 5px;
+  border-radius: 5px;
+  color: @fg-color;
+}
+
+.matches {
+  background-color: rgba(0, 0, 0, 0);
+  border-radius: 10px;
+}
+
+box.plugin:first-child {
+  margin-top: 5px;
+}
+
+box.plugin.info {
+  min-width: 200px;
+}
+
+list.plugin {
+  background-color: rgba(0, 0, 0, 0);
+}
+
+label.match {
+  color: @fg-color;
+}
+
+label.match.description {
+  font-size: 10px;
+  color: @desc-color;
+}
+
+label.plugin.info {
+  font-size: 14px;
+  color: @fg-color;
+}
+
+.match {
+  background: transparent;
+}
+
+.match:selected {
+  border-left: 4px solid @accent;
+  background: transparent;
+  animation: fade 0.1s linear;
+}
+
+@keyframes fade {
+  0% {
+    opacity: 0;
+  }
+
+  100% {
+    opacity: 1;
+  }
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.aria2 = { };
+}
@@ -1,15 +1,13 @@
-{ config, ... }:
+{ config, lib, ... }:
 let
  cfg = config.programs.atuin;
-
-  # TODO: retrieve this in a more dynamic and correct manner
-  xdg_runtime_dir = "/run/user/1000";
+  xdg_runtime_dir = "/run/user/${toString config.home.uid}";
 in
-{
+lib.mkIf cfg.enable {
  programs.atuin = {
-    enable = true;
    enableBashIntegration = true;
    enableZshIntegration = true;
+    enableNushellIntegration = config.programs.nushell.enable;

    settings = {
      db_path = "${config.xdg.dataHome}/atuin/history.db";
@@ -0,0 +1,18 @@
+{ config, lib, ... }:
+let
+  cfg = config.programs.bash;
+in
+{
+  programs.bash = {
+    historyFile = "${config.xdg.dataHome}/bash_history";
+    historySize = 100000;
+    bashrcExtra = ''
+      source "${config.xdg.configHome}/mutable_env.sh"
+    '';
+    shellOptions = [
+      "histappend"
+      "checkwinsize"
+      "checkjobs"
+    ];
+  };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.bat = { };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.beets = { };
+}
@@ -0,0 +1,43 @@
+{ config, lib, ... }:
+let
+  cfg = config.programs.bottom;
+in
+{
+  programs.bottom = {
+    settings = {
+      flags.enable_gpu = true;
+
+      row = [
+        {
+          ratio = 30;
+          child = [{ type = "cpu"; }];
+        }
+        {
+          ratio = 40;
+          child = [
+            {
+              ratio = 4;
+              type = "mem";
+            }
+            {
+              ratio = 3;
+              type = "disk";
+            }
+          ];
+        }
+        {
+          ratio = 30;
+          child = [
+            {
+              type = "net";
+            }
+            {
+              default = true;
+              type = "proc";
+            }
+          ];
+        }
+      ];
+    };
+  };
+}
@@ -9,7 +9,7 @@ in [
  (link "GitHub" "http://github.com")
  (short "/u/" "danger/u/" "https://dangeru.us/")
  (link "PVV" "https://www.pvv.ntnu.no/")
-  (short "PVVM" "PVV Mail" "https://webmail2.pvv.ntnu.no/roundcube/")
+  (short "PVVM" "PVV Mail" "https://webmail.pvv.ntnu.no/roundcube/")
  (short "ΩV" "Omega Verksted" "https://omegav.no/")

  (dir "Nix" [
@@ -31,21 +31,34 @@ in [
  ])

  (dir "CTF" [
-    (link "HackTheBox" "https://www.hackthebox.eu/")
-    (link "TryHackMe" "https://tryhackme.com/dashboard")
-    (link "OverTheWire" "https://overthewire.org/wargames/")
-    (link "NetGarage" "https://io.netgarage.org/")
+    (link "Revshells" "https://revshells.com/")
    (link "Exploit Education" "http://exploit.education/")
+    (link "Webhook" "https://webhook.site")
+    (link "CyberChef" "https://gchq.github.io/CyberChef/")
+    (link "Aperisolve" "https://www.aperisolve.com/")
+    (link "how2heap" "https://github.com/shellphish/how2heap")
+    (link "Heap Search" "https://kissprogramming.com/heap/heap-search")
+    (link "CrackStation" "https://crackstation.net/")
+    (link "FactorDB" "http://factordb.com/")
+    (link "Syscalls" "https://syscalls.w3challs.com/")
+    (link "DogBolt" "https://dogbolt.org/")
+    (link "HackTricks" "https://book.hacktricks.xyz/")
+    (dir "Practise" [
+      (link "S2G" "https://s2gctf.ncr.ntnu.no")
+      (link "Pico CTF" "https://play.picoctf.org/practice")
+      (link "Pwn college" "https://pwn.college/")
+      (link "HackTheBox" "https://www.hackthebox.eu")
+      (link "Crackmes" "https://crackmes.one")
+      (link "Nightmare" "https://guyinatuxedo.github.io/")
+    ])
  ])

  (dir "Misc & Tools" [
    (link "ASCIIFlow" "https://asciiflow.com/#/")
    (link "CopyChar" "https://copychar.cc/")
-    (link "CyberChef" "https://gchq.github.io/CyberChef/")
    (link "Device Info" "https://www.deviceinfo.me/")
    (link "Diagrams" "https://app.diagrams.net/")
    (link "FakeMail" "http://www.fakemailgenerator.com/")
-    (link "FilePizza" "https://file.pizza/")
    (link "IPLeak" "https://ipleak.net/")
    (link "LaTeX" "https://www.codecogs.com/latex/eqneditor.php")
    (link "ManualsLib" "https://www.manualslib.com/")
@@ -1,10 +1,10 @@
-{ pkgs, ... }:
+{ pkgs, lib, ... }:
 {
-  "Amazon.com".metaData.hidden = true;
-  "Bing".metaData.hidden = true;
-  "Wikipedia (en)".metaData.hidden = true;
-  "Google".metaData.alias = "gg";
-  "DuckDuckGo".metaData.alias = "dd";
+  "amazondotcom-us".metaData.hidden = true;
+  "bing".metaData.hidden = true;
+  "wikipedia".metaData.hidden = true;
+  "google".metaData.alias = "gg";
+  "ddg".metaData.alias = "dd";

  "Arch Package Repository" = {
    urls = [{
@@ -57,9 +57,29 @@
    definedAliases = [ "gh" ];
  };

+  "GitHub Nix Configs" = {
+    urls = [{
+      template = "https://github.com/search";
+      params = [
+        { name = "type"; value = "code"; }
+        {
+          name = "q";
+          value = lib.concatStringsSep " " [
+            "lang:nix"
+            "-is:fork"
+            "-repo:nixos/nixpkgs"
+            "{searchTerms}"
+          ];
+        }
+      ];
+    }];
+    icon = "${pkgs.super-tiny-icons}/share/icons/SuperTinyIcons/svg/github.svg";
+    definedAliases = [ "ghn" ];
+  };
+
  "HomeManager Options" = {
    urls = [{
-      template = "https://mipmip.github.io/home-manager-option-search/?{searchTerms}";
+      template = "https://mipmip.github.io/home-manager-option-search/?query={searchTerms}";
    }];
    icon = "${pkgs.super-tiny-icons}/share/icons/SuperTinyIcons/svg/nixos.svg";
    definedAliases = [ "hms" ];
@@ -75,6 +95,14 @@
    definedAliases = [ "hg" ];
  };

+  "Kagi" = {
+    urls = [{
+      template = "https://kagi.com/search";
+      params = [{ name = "q"; value = "{searchTerms}"; }];
+    }];
+    definedAliases = "k";
+  };
+
  "Melpa" = {
    urls = [{
      template = "https://melpa.org/";
@@ -146,7 +174,7 @@
    definedAliases = [ "ut" ];
  };

-  "YouTube" = {
+  "youtube" = {
    urls = [{
      template = "https://www.youtube.com/results";
      params = [{ name = "search_query"; value = "{searchTerms}"; }];
@@ -0,0 +1,13 @@
+{ config, lib, ... }:
+let
+  cfg = config.programs.cargo;
+in
+lib.mkIf cfg.enable {
+  programs.cargo = {
+    settings = {
+      cargo-new.vcs = "git";
+    };
+  };
+
+  systemd.user.sessionVariables.CARGO_NET_GIT_FETCH_WITH_CLI = "true";
+}
@@ -0,0 +1,11 @@
+{ ... }:
+{
+  programs.delta = {
+    enableGitIntegration = true;
+    options = {
+      line-numbers = true;
+      side-by-side = true;
+      theme = "Monokai Extended Origin";
+    };
+  };
+}
@@ -1,38 +0,0 @@
-{ config, pkgs, lib, ... }:
-let
-  cfg = config.programs.direnv;
-in
-{
-  config = {
-    systemd.user.services.prune-allowed-direnv-dirs = {
-      Unit = {
-        Description = "Prune unused allowed directories for direnv";
-        Documentation = [ "man:direnv(1)" ];
-      };
-
-      Service = {
-        Type = "oneshot";
-        CPUSchedulingPolicy = "idle";
-        IOSchedulingClass = "idle";
-        ExecStart = "${lib.getExe cfg.package} prune";
-      };
-    };
-
-    systemd.user.timers.prune-allowed-direnv-dirs = {
-      Unit = {
-        Description = "Prune unused allowed directories for direnv";
-        Documentation = [ "man:direnv(1)" ];
-      };
-
-      Timer = {
-        Unit = "prune-allowed-direnv-dirs.service";
-        OnCalendar = "daily";
-        Persistent = true;
-      };
-
-      Install = {
-        WantedBy = [ "timers.target" ];
-      };
-    };
-  };
-}
@@ -1,12 +1,16 @@
-{ ... }:
+{ config, lib, ... }:
+let
+  cfg = config.programs.direnv;
+in
 {
-  imports = [
-    ./auto-prune.nix
-  ];
-
  programs.direnv = {
-    enable = true;
-    enableZshIntegration = true;
+    silent = true;
+
    nix-direnv.enable = true;
+
+    enableZshIntegration = true;
+    enableNushellIntegration = config.programs.nushell.enable;
+
+    auto-prune-allowed-dirs.enable = true;
  };
 }
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.element-desktop = { };
+}
@@ -1,4 +1,6 @@
-{ pkgs, ... }: let
+{ config, lib, pkgs, ... }:
+let
+  cfg = config.programs.emacs;

  configEl = pkgs.stdenv.mkDerivation {
    name = "config.el";
@@ -14,28 +16,63 @@
    '';
  };

-in {
+in
+lib.mkIf cfg.enable {
  xdg.configFile."emacs/init.el".source = configEl.outPath;

  programs.emacs = {
-    enable = true;
    extraPackages = epkgs: with epkgs; [
-    #   # package
+      # gruber-darker-theme
+      # recentf
+      centaur-tabs
+      company
+      company-box
+      company-coq
+      counsel
+      dashboard
+      doom-modeline
+      drag-stuff
+      emojify
+      envrc
+      evil
+      evil-collection
+      evil-escape
+      evil-nerd-commenter
+      evil-org
+      fira-code-mode
+      flycheck
+      general
+      git-gutter
+      helpful
+      highlight-defined
+      hl-todo
+      ivy
+      ivy-rich
+      ivy-yasnippet
+      lorem-ipsum
+      lsp-ivy
+      lsp-mode
+      lsp-treemacs
+      lsp-ui
+      magit
+      monokai-theme
+      nix-mode
+      org
+      org-superstar
+      projectile
+      proof-general
+      rainbow-delimiters
+      ripgrep
+      swiper
+      treemacs
+      treemacs-evil
+      treemacs-icons-dired
+      treemacs-magit
+      treemacs-projectile
      use-package
-    #   evil
-    #   evil-collection
-    #   evil-nerd-commenter
-    #   # org
-    #   evil-org
-    #   monokai-theme
-    #   gruber-darker-theme
-    #   company
-    #   flycheck
-    #   projectile
-    #   yasnippet
-    #   magit
-    #   # recentf
-    #   which-key
+      which-key
+      writeroom-mode
+      yasnippet
    ];
  };
 }
@@ -0,0 +1,10 @@
+{ config, lib, ... }:
+let
+  cfg = config.programs.eza;
+in
+{
+  programs.eza = {
+    icons = "auto";
+    enableNushellIntegration = config.programs.nushell.enable;
+  };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.fastfetch = { };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.feh = { };
+}
@@ -1,18 +1,77 @@
-{ pkgs, ... }:
+{ config, lib, pkgs, ... }:
 {
  programs.firefox = {
-    enable = true;
+    configPath = "${config.xdg.configHome}/mozilla/firefox";
    profiles.h7x4 = {
-      bookmarks = [{
-        toolbar = true;
-        bookmarks = import ./browser/bookmarks.nix;
-      }];
+      bookmarks = {
+        force = true;
+        settings = [{
+          toolbar = true;
+          bookmarks = import ./browser/bookmarks.nix;
+        }];
+      };
+
      search = {
-        default = "Google";
-        engines = import ./browser/engines.nix { inherit pkgs; };
+        default = "Kagi";
+        engines = import ./browser/engines.nix { inherit pkgs lib; };
        force = true;
      };
-      settings = {};
+
+      # TODO: make into structured attrs
+      settings = {
+        # TODO: collect more stuff from here
+        # https://github.com/arkenfox/user.js
+        "browser.aboutConfig.showWarning" = false;
+        "browser.newtabpage.activity-stream.showSponsored" = false;
+        "browser.newtabpage.activity-stream.showSponsoredTopSites" = false;
+        "browser.newtabpage.activity-stream.feeds.telemetry" = false;
+        "browser.newtabpage.activity-stream.telemetry" = false;
+
+        "datareporting.policy.dataSubmissionEnabled" = false;
+        "datareporting.healthreport.uploadEnabled" = false;
+
+        "toolkit.telemetry.archive.enabled" = false;
+        "toolkit.telemetry.bhrPing.enabled" = false;
+        "toolkit.telemetry.coverage.opt-out" = true;
+        "toolkit.telemetry.enabled" = false;
+        "toolkit.telemetry.firstShutdownPing.enabled" = false;
+        "toolkit.telemetry.hybridContent.enabled" = false;
+        "toolkit.telemetry.newProfilePing.enabled" = false;
+        "toolkit.telemetry.prompted" = 2;
+        "toolkit.telemetry.rejected" = true;
+        "toolkit.telemetry.reportingpolicy.firstRun" = false;
+        "toolkit.telemetry.server" = "data:,";
+        "toolkit.telemetry.shutdownPingSender.enabled" = false;
+        "toolkit.telemetry.unified" = false;
+        "toolkit.telemetry.unifiedIsOptIn" = false;
+        "toolkit.telemetry.updatePing.enabled" = false;
+        "toolkit.coverage.opt-out" = true;
+        "toolkit.coverage.endpoint.base" = "";
+
+        "layout.css.prefers-color-scheme.content-override" = "dark";
+
+        "font.cjk_pref_fallback_order" = lib.concatStringsSep "," [
+          "ja"
+          "zh-cn"
+          "zh-hk"
+          "zh-tw"
+          "ko"
+        ];
+      } // (lib.pipe null [
+        (_: {
+          "ja" = "JP";
+          "ko" = "KR";
+          "zh-CN" = "SC";
+          "zh-HK" = "HK";
+          "zh-TW" = "TC";
+        })
+        (lib.mapAttrsToList (lang: notoSuffix: {
+          "font.name.monospace.${lang}" = "Noto Sans Mono CJK ${notoSuffix}";
+          "font.name.sans-serif.${lang}" = "Noto Sans CJK ${notoSuffix}";
+          "font.name.serif.${lang}" = "Noto Serif CJK ${notoSuffix}";
+        }))
+        (lib.foldl lib.mergeAttrs { })
+      ]);
    };
  };
 }
@@ -0,0 +1,9 @@
+{ config, lib, ... }:
+let
+  cfg = config.programs.fzf;
+in
+{
+  programs.fzf = {
+    defaultCommand = "fd --type f";
+  };
+}
@@ -1,25 +1,32 @@
-{ pkgs, ... }:
+{ config, lib, pkgs, ... }:
+let
+  cfg = config.programs.gdb;
+in
 {
-  xdg.configFile."gdb/gdbinit".text = ''
-    # C++ related beautifiers
-    set print pretty on
-    set print object on
-    set print static-members on
-    set print vtbl on
-    set print demangle on
-    set print sevenbit-strings off
-    set print asm-demangle on
-    set print elements 0 
+  options.programs.gdb.enable = lib.mkEnableOption "gdb";

-    # Assembly
-    set disassembly-flavor intel
+  config = lib.mkIf cfg.enable {
+    xdg.configFile."gdb/gdbinit".text = ''
+      # C++ related beautifiers
+      set print pretty on
+      set print object on
+      set print static-members on
+      set print vtbl on
+      set print demangle on
+      set print sevenbit-strings off
+      set print asm-demangle on
+      set print elements 0

-    # Save command history between sessions:
-    set history save
+      # Assembly
+      set disassembly-flavor intel

-    # Print a beautifully colored prompt:
-    set prompt \001\033[1;36m\002(gdb) \001\033[0m\002
-  '';
+      # Save command history between sessions:
+      set history save

-  local.shell.aliases."System Tool Replacements".gdb = "${pkgs.pwndbg}/bin/pwndbg";
+      # Print a beautifully colored prompt:
+      set prompt \001\033[1;36m\002(gdb) \001\033[0m\002
+    '';
+
+    # local.shell.aliases."System Tool Replacements".gdb = "${pkgs.pwndbg}/bin/pwndbg";
+  };
 }
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.gh-dash = { };
+}
@@ -1,10 +1,9 @@
 { pkgs, ... }:
 {
  programs.gh = {
-    enable = true;
    settings = {
      gitProtocol = "ssh";
-      pager = "${pkgs.bat}/git/bat";
+      pager = "${pkgs.bat}/bin/bat";
      aliases = {
        co = "pr checkout";
        pv = "pr view";
@@ -0,0 +1,22 @@
+{ config, lib, pkgs, extendedLib, ... }:
+let
+  cfg = config.programs.ghci;
+in
+{
+  options.programs.ghci = {
+    enable = lib.mkEnableOption "ghci, interactive haskell shell";
+
+    package = lib.mkPackageOption pkgs "ghc" { };
+  };
+
+  config = lib.mkIf cfg.enable {
+    home.packages = [ cfg.package ];
+
+    # Personal config
+    xdg.configFile = {
+      "ghc/ghci.conf".text = ''
+        :set prompt "${extendedLib.termColors.front.magenta "[GHCi]λ"} "
+      '';
+    };
+  };
+}
@@ -13,53 +13,104 @@ let
    "github.com:"
  ];
 in
-{
-  imports = [
-    ./maintenance-timers.nix
-  ];
-
-  # TODO: convert to template once nix-sops supports it in hm module
-  sops.secrets."git/nordicsemi-config" = { };
-
+lib.mkIf cfg.enable {
  programs.git = lib.mkMerge [
    {
-      enable = true;
      package = pkgs.gitFull;

-      userName = "h7x4";
-      userEmail = "h7x4@nani.wtf";
-
      signing = {
        key = "46B9228E814A2AAC";
+        # format = "openpgp";
        signByDefault = true;
      };

+      maintenance.enable = true;
+
      lfs.enable = true;

-      delta = {
-        enable = true;
-        options = {
-          line-numbers = true;
-          side-by-side = true;
-          theme = "Monokai Extended Origin";
+      settings = {
+        user = {
+          name = "h7x4";
+          email = "h7x4@nani.wtf";
        };
-      };

-      aliases = {
-        aliases = "!git config --get-regexp alias | sed -re 's/alias\\.(\\S*)\\s(.*)$/\\1 = \\2/g'";
-        delete-merged = "!git branch --merged | grep -v '\\*' | xargs -n 1 git branch -d";
-        graph = "log --graph --abbrev-commit --decorate --format=format:'%C(bold blue)%h%C(reset) - %C(bold green)(%ar)%C(reset) %C(white)%s%C(reset) %C(dim white)- %an%C(reset)%C(bold yellow)%d%C(reset)' --all";
-        graphv = "log --graph --abbrev-commit --decorate --format=format:'%C(bold blue)%h%C(reset) - %C(bold cyan)%aD%C(reset) %C(bold green)(%ar)%C(reset)%C(bold yellow)%d%C(reset)%n''          %C(white)%s%C(reset) %C(dim white)- %an%C(reset)' --all";
-        forcepush = "push --force-with-lease --force-if-includes";
-        authors = "shortlog --summary --numbered --email";
-        si = "switch-interactive";
-        rebase-author = "rebase -i -x \"git commit --amend --reset-author -CHEAD\"";
-        git = "!git";
-      };
+        alias = {
+          aliases = "!git config --get-regexp alias | sed -re 's/alias\\.(\\S*)\\s(.*)$/\\1 = \\2/g'";
+          authors = "shortlog --summary --numbered --email";
+          delete-merged = "!git branch --merged | grep -v -e '\\*' -e 'master' -e 'main' | xargs -n 1 git branch -d";
+          ff = "fixup-fixup";
+          fi = "fixup-interactive";
+          forcepush = "push --force-with-lease --force-if-includes";
+          git = "!git";
+          pp = "post-pr";
+          rebase-author = "rebase -i -x \"git commit --amend --reset-author -CHEAD\"";
+          reset-to-upstream = "!git reset --hard \"origin/$(git rev-parse --abbrev-ref HEAD)\"";
+          rf = "rebase-fixups";
+          si = "switch-interactive";
+          subs = "submodule update --init --recursive";
+        } // (let
+          c = c: s: "%C(${c})${s}%C(reset)";
+        in {
+          graph = let
+            fmt = lib.concatStringsSep "" [
+              " - "
+              (c "bold blue" "%h")
+              " - "
+              (c "bold green" "(%ar)")
+              " "
+              (c "white" "> %s")
+              " "
+              (c "dim white" "- %an")
+              (c "bold yellow" "%d")
+            ];
+          in "log --graph --abbrev-commit --decorate --format=format:'${fmt}' --all";
+
+          graphv = let
+            fmt = lib.concatStringsSep "" [
+              (c "bold blue" "%h")
+              " - "
+              (c "bold cyan" "%aD")
+              " "
+              (c "bold green" "(%ar)")
+              (c "bold yellow" "%d")
+              "%n"
+              "          "
+              (c "white" "%s")
+              " "
+              (c "dim white" "- %an")
+            ];
+          in "log --graph --abbrev-commit --decorate --format=format:'${fmt}' --all";
+
+          l = let
+            fmt = lib.concatStringsSep "%n" (map (x: if builtins.isList x then lib.concatStringsSep " " x else x) [
+              [ (c "bold yellow" "%H") (c "auto" "%d") ]
+              [ (c "bold white" "Author:") (c "bold cyan" "%aN <%aE>") (c "bold green" "(%ah)") ]
+              [ (c "bold white" "Committer:") (c "bold cyan" "%cN <%cE>") (c "bold green" "(%ah)") ]
+              [ (c "bold white" "GPG: (%G?)") (c "bold magenta" "%GF") "-" (c "bold cyan" "%GS") (c "bold blue" "(%GT) ") ]
+              ""
+              (c "bold white" "# %s")
+              "%+b"
+              (c "dim yellow" "%+N")
+            ]);
+            # sedExpressions = let
+            #   colorExpr = "\\x1B\\[([0-9]{1,3}(;[0-9]{1,2};?)?)?[mGK]";
+            #   colorEndExpr = "\\x1B\\[m";
+            #   colored = x: "${colorExpr}${x}${colorEndExpr}";
+            # in lib.concatMapStringsSep " " (x: "-e '${x}'") [
+            #   "s|${colored "GPG: \\(N\\)"} ${colored "F3CDA86CC55A9F10D7A069819F2F7D8250F35146"} - ${colored "h7x4 <h7x4@nani.wtf>"} ${colored "\\(ultimate\\)"}|GPG: h7x4|"
+            #   "s|${colored "GPG: \\(N\\)"} ${colored ""} - ${colored ""} ${colored "\\(undefined\\)"}||"
+            # ];
+          in "log --decorate --format=tformat:'${fmt}'";
+          # in "!git log --color=always --format=format:'${fmt}' | sed -E ${sedExpressions} | $PAGER";
+        });

-      extraConfig = {
        core = {
-          whitespace = "space-before-tab,-indent-with-non-tab,trailing-space";
+          whitespace = lib.concatStringsSep "," [
+            "space-before-tab"
+            "-indent-with-non-tab"
+            "trailing-space"
+            "blank-at-eof"
+          ];
          untrackedCache = true;
          editor = "nvim";
        };
@@ -124,10 +175,13 @@ in
        diff = {
          mnemonicPrefix = true;
          renames = true;
+          compactionHeuristic = true;
          tool = "nvimdiff";
          submodule = "log";
        };

+        pager.show = lib.getExe pkgs.bat;
+
        status = {
          showUntrackedFiles = "all";
          relativePaths = true;
@@ -164,7 +218,22 @@ in

        "url \"${lib.head github-uri-prefixes}\"".insteadOf = lib.tail github-uri-prefixes;

-        web.browser = "google-chrome-stable";
+        "url \"git@gist.github.com:\"".insteadOf = [
+          "git://gist.github.com/"
+          "https://gist.github.com/"
+        ];
+
+        "url \"aur@aur.archlinux.org:\"".insteadOf = [
+          "aur:"
+          "https://aur.archlinux.org/"
+        ];
+
+        gc = {
+          reflogExpire = "90 days";
+          reflogExpireUnreachable = "90 days";
+        };
+
+        web.browser = "firefox";

        "filter \"lfs\"" = {
          required = true;
@@ -202,7 +271,7 @@ in
        ];
      in lib.genAttrs organizations (org: map (uri-prefix: "${uri-prefix}${org}") uri-prefixes);
    in {
-      extraConfig."url \"${lib.head uri-prefixes}\"".insteadOf = lib.tail uri-prefixes;
+      settings."url \"${lib.head uri-prefixes}\"".insteadOf = lib.tail uri-prefixes;

      includes = map (x: {
        contentSuffix = "pvv.gitconfig";
@@ -215,43 +284,36 @@ in
        };
      }) (lib.flatten (lib.attrValues prefixes-per-org));
    })
+  ];

-    (let
-      bitbucket-uri-prefixes = [
-        # Preferred
-        "bitbucket-nordicsemi:"
-
-        # Alternative
-        "ssh://git@bitbucket.nordicsemi.no:7999"
-        "https://projecttools.nordicsemi.no/bitbucket/scm"
+  systemd.user.services."git-maintenance@".Service = lib.mkIf cfg.maintenance.enable {
+    ExecStartPre = let
+      repoDirs = lib.escapeShellArgs [
+        "${config.home.homeDirectory}/git"
+        "${config.home.homeDirectory}/work"
+        "${config.home.homeDirectory}/pvv"
      ];

-      prefixes-per-org = let
-        organizations = [
-          "NordicSemiconductor"
-          "NordicPlayground"
-          "nrfconnect"
-          "oysteintveit-nordicsemi"
-        ];
-      in lib.genAttrs organizations (org: map (uri-prefix: "${uri-prefix}${org}") github-uri-prefixes);
-    in {
-      extraConfig = lib.mergeAttrs
-        {
-          "url \"${lib.head bitbucket-uri-prefixes}\"".insteadOf = lib.tail bitbucket-uri-prefixes;
-        }
-        (lib.mapAttrs' (org: uri-prefixes: {
-          name = "url \"github-nordicsemi:${org}\"";
-          value.insteadOf = uri-prefixes;
-        }) prefixes-per-org)
-        ;
+      script = pkgs.writeShellApplication {
+        name = "discover-git-maintenance-repos";
+        text = ''
+          {
+            echo "[maintenance]"
+            for repoLocation in ${repoDirs}; do
+              for repo in "$repoLocation"/*/.git; do
+                echo "repo = $('${pkgs.coreutils}/bin/realpath' "''${repo%"/.git"}")"
+              done
+            done
+          } > "$1"
+        '';
+      };
+    in "${lib.getExe script} %t/maintenance-repos";
+
+    ExecStart = lib.mkForce ''
+      "${lib.getExe cfg.package}" -c include.path="%t/maintenance-repos" for-each-repo --keep-going --config=maintenance.repo maintenance run --schedule=%i
+    '';
+  };

-      includes = map (x: {
-        contentSuffix = "nordicsemi.gitconfig";
-        condition = "hasconfig:remote.*.url:${x}/**";
-        path = config.sops.secrets."git/nordicsemi-config".path;
-      }) (bitbucket-uri-prefixes ++ (lib.flatten (lib.attrValues prefixes-per-org)));
-    })
-  ];

  home.packages = [
    (pkgs.writeShellApplication {
@@ -259,14 +321,76 @@ in
      runtimeInputs = with pkgs; [ cfg.package coreutils ];
      text = lib.fileContents ./scripts/git-tcommit.sh;
    })
+    (pkgs.writeShellApplication {
+      name = "git-tmcommit";
+      runtimeInputs = with pkgs; [ cfg.package coreutils ];
+      text = lib.pipe ./scripts/git-tcommit.sh [
+        lib.fileContents
+        (builtins.replaceStrings ["hours" "tcommit"] ["minutes" "tmcommit"])
+      ];
+    })
+    (pkgs.writeShellApplication {
+      name = "git-fixup-fixup";
+      runtimeInputs = with pkgs; [ cfg.package ];
+      text = lib.fileContents ./scripts/git-fixup-fixup.sh;
+    })
+    (pkgs.writeShellApplication {
+      name = "git-rebase-fixups";
+      runtimeInputs = with pkgs; [ cfg.package gnused ];
+      text = lib.fileContents ./scripts/git-rebase-fixups.sh;
+    })
+    (pkgs.writeShellApplication {
+      name = "git-fixup-interactive";
+      runtimeInputs = with pkgs; [ cfg.package gnused gnugrep skim ];
+      text = lib.fileContents ./scripts/git-fixup-interactive.sh;
+    })
    (pkgs.writeShellApplication {
      name = "git-switch-interactive";
-      runtimeInputs = with pkgs; [ cfg.package fzf gnused coreutils ];
+      runtimeInputs = with pkgs; [ cfg.package skim gnused gnugrep uutils-coreutils-noprefix ];
      text = lib.fileContents ./scripts/git-switch-interactive.sh;
      excludeShellChecks = [
        "SC2001" # (style): See if you can use ${variable//search/replace} instead. (sed invocation)
+        "SC2155"
      ];
    })
+    (pkgs.writeShellApplication {
+      name = "git-author-lines";
+      runtimeInputs = with pkgs; [ cfg.package gnused gnugrep gawk uutils-coreutils-noprefix ];
+      text = lib.fileContents ./scripts/git-author-lines.sh;
+    })
+    (pkgs.writeShellApplication {
+      name = "git-all-commits";
+      runtimeInputs = with pkgs; [ cfg.package gnugrep gawk findutils uutils-coreutils-noprefix ];
+      text = lib.fileContents ./scripts/git-all-commits.sh;
+    })
+    (pkgs.writeShellApplication {
+      name = "git-diffc";
+      runtimeInputs = with pkgs; [ cfg.package gawk ];
+      text = let
+        printfLiteral = lib.concatStrings [
+          "\\033[36m%s\\033[0m\\n"
+          "\\033[32m%s\\033[0m\\n"
+          "\\033[31m%s\\033[0m\\n"
+        ];
+      in ''
+        git --no-pager diff --shortstat "$@" | awk -F',' '{ printf "${printfLiteral}", $1, $2 ? $2 : "", $3 ? $3 : ""; }'
+      '';
+    })
+    ((pkgs.writers.writePython3Bin "git-post-pr" {
+      libraries = with pkgs.python3Packages; [
+        tkinter
+      ];
+      flakeIgnore = [
+        "E501" # I like long lines grr
+      ];
+    } (lib.fileContents ./scripts/git-post-pr.py)).overrideAttrs (_: {
+      postFixup = ''
+        wrapProgram $out/bin/git-post-pr \
+          --prefix PATH : ${lib.makeBinPath [
+            pkgs.github-cli
+          ]}
+      '';
+    }))

    pkgs.git-absorb
  ];
@@ -1,56 +0,0 @@
-{ config, pkgs, lib, ... }:
-let
-  cfg = config.programs.git;
-in
-{
-  systemd.user.services."git-maintenance@" = {
-    Unit = {
-      Description = "Optimize Git repositories data";
-      Documentation = [ "man:git-maintenance(1)" ];
-    };
-
-    Service = {
-      Type = "oneshot";
-      ExecStart = "${lib.getExe pkgs.git} for-each-repo --config=maintenance.repo maintenance run --no-quiet --schedule=%i";
-
-      Environment = [
-        "PATH=${lib.makeBinPath (with pkgs; [ cfg.package openssh ])}"
-      ];
-
-      LockPersonality = "yes";
-      MemoryDenyWriteExecute = "yes";
-      NoNewPrivileges = "yes";
-      RestrictAddressFamilies = [
-        "AF_UNIX"
-        "AF_INET"
-        "AF_INET6"
-        "AF_VSOCK"
-      ];
-      RestrictNamespaces = "yes";
-      RestrictRealtime = "yes";
-      RestrictSUIDSGID = "yes";
-      SystemCallArchitectures = "native";
-      SystemCallFilter = "@system-service";
-    };
-  };
-
-  systemd.user.timers."git-maintenance@" = {
-    Unit = {
-      Description = "Optimize Git repositories data";
-      Documentation = [ "man:git-maintenance(1)" ];
-    };
-
-    Timer = {
-      Persistent = true;
-      OnCalendar = "%i";
-    };
-
-    Install = {
-      WantedBy = [ "timers.target" ];
-    };
-  };
-
-  systemd.user.timers."git-maintenance@hourly".Timer.OnCalendar = "*-*-* 1..23:05:00";
-  systemd.user.timers."git-maintenance@daily".Timer.OnCalendar = "Tue..Sun *-*-* 0:05:00";
-  systemd.user.timers."git-maintenance@weekly".Timer.OnCalendar = "Mon 0:05:00";
-}
@@ -0,0 +1,15 @@
+GIT_ROOT="$(git rev-parse --show-toplevel)"
+
+find "$GIT_ROOT/.git/objects" -type f | \
+while read -r file; do
+    if echo "$file" | grep -Eq '\.idx$'; then
+        git show-index < "$file" | awk '{print $2}'
+    elif echo "$file" | grep -Eq '[0-9a-f]{38}$'; then
+        echo "$(basename "$(dirname "$file")")$(basename "$file")"
+    fi
+done | \
+while read -r hash; do
+    if [ "$(git cat-file -t "$hash")" = commit ]; then
+        echo "$hash"
+    fi
+done
@@ -0,0 +1,21 @@
+set -euo pipefail
+
+if [ -n "${1:-}" ]; then
+  REF="${1}"
+else
+  REF="HEAD"
+fi
+
+# TODO: optionally keep track of which files the authors were present in,
+#       and print a list of up to N files where the authors contributed the most.
+
+git ls-tree -r "${REF}" \
+| while read -r _filemode _objtype _githash filepath; do
+    if git grep -Il . -- "$filepath" >/dev/null; then
+      git --no-pager blame --line-porcelain "${filepath}"
+    fi
+  done \
+| grep --binary-files=without-match '^author ' \
+| sed -e 's/author //' \
+| awk '{ a[$0]+=1 } END{ for (i in a) { print a[i],i } }' \
+| sort --numeric-sort --key 1 --reverse
@@ -0,0 +1,14 @@
+if [ -n "${1:-}" ]; then
+  TARGET_COMMIT="$1"
+  shift
+else
+  TARGET_COMMIT="HEAD"
+fi
+
+COMMIT_MESSAGE=$(git log -1 --pretty=format:'%s' "$TARGET_COMMIT")
+
+if [[ $COMMIT_MESSAGE =~ ^fixup!* ]]; then
+  git commit -m "$COMMIT_MESSAGE" "$@"
+else
+  git commit --fixup "$TARGET_COMMIT" "$@"
+fi
@@ -0,0 +1,18 @@
+if [ -n "${1:-}" ]; then
+  TARGET_BRANCH="$1"
+  shift
+else
+  TARGET_BRANCH=$(git remote show origin | sed -n '/HEAD branch/s/.*: //p')
+fi
+
+FORK_POINT=$(git merge-base --fork-point "$TARGET_BRANCH")
+
+COMMITS_SINCE_FORK_POINT=$(git log --format=format:'%s' "$FORK_POINT"..HEAD | grep -v -E '^fixup!')
+
+RESULT=$(sk <<<"$COMMITS_SINCE_FORK_POINT")
+
+if [ "$RESULT" == "" ]; then
+  echo "Doing nothing..."
+else
+  git commit -m "fixup! $RESULT" "$@"
+fi
@@ -0,0 +1,130 @@
+import argparse
+import json
+import subprocess
+import tkinter
+
+# TODO: add support for gitea, and maybe other git hosting options.
+
+
+def parse_args() -> argparse.Namespace:
+    parser = argparse.ArgumentParser(
+        prog="post-pr",
+        description="Post links to PRs",
+    )
+
+    parser.add_argument("-n", "--no-clipboard", action="store_true", help="do not copy the message to the clipboard")
+
+    pr_id = parser.add_mutually_exclusive_group()
+    pr_id.add_argument("-c", "--current-branch", action="store_true", help="generate post for the PR for the current branch")
+    pr_id.add_argument("-l", "--latest", action="store_true", help="generate post for the latest PR for the current user")
+    pr_id.add_argument("pr_id", nargs="?", default=None, help="generate post for the PR with the given ID")
+    args = parser.parse_args()
+
+    if not any([args.current_branch, args.latest, args.pr_id,]):
+        args.current_branch = True
+
+    return args
+
+
+def _gh(args: list[str]) -> str:
+    try:
+        return subprocess.check_output(["gh"] + args).decode("utf8")
+    except subprocess.CalledProcessError as e:
+        raise RuntimeError(f"GitHub CLI command failed: 'gh {' '.join(args)}'") from e
+
+
+def _gh_retcode(args: list[str]) -> int:
+    return subprocess.run(["gh"] + args, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL).returncode
+
+
+def ensure_gh_installed():
+    try:
+        if _gh_retcode(["--version"]) != 0:
+            raise RuntimeError("GitHub CLI (gh) is not installed, please install it")
+    except FileNotFoundError:
+        raise RuntimeError("GitHub CLI (gh) is not installed, please install it")
+
+
+def ensure_gh_authenticated():
+    if _gh_retcode(["auth", "status"]) != 0:
+        raise RuntimeError("Failed to authenticate with GitHub, please run 'gh auth login'")
+
+
+GH_PR_JSON_FIELDS = ",".join([
+    "additions",
+    "deletions",
+    "state",
+    "title",
+    "url",
+])
+
+
+def fetch_pr_data(current_branch: bool, latest: bool, pr_id: str | None) -> dict[str, any]:
+    if pr_id:
+        pr_data = _gh(["pr", "view", pr_id, "--json", GH_PR_JSON_FIELDS])
+        pr_data = json.loads(pr_data)
+
+    elif latest:
+        pr_list = _gh(["pr", "list", "--author", "@me", "--limit", "1", "--json", GH_PR_JSON_FIELDS])
+        pr_list = json.loads(pr_list)
+
+        if len(pr_list) == 0:
+            raise RuntimeError("Failed to find PR, are you sure you have any open PRs?")
+
+        pr_data = pr_list[0]
+
+    elif current_branch:
+        pr_data = _gh(["pr", "view", "--json", GH_PR_JSON_FIELDS])
+        pr_data = json.loads(pr_data)
+
+    return pr_data
+
+
+def format_message(pr_data: dict[str, any]) -> str:
+    additions = pr_data["additions"]
+    deletions = pr_data["deletions"]
+
+    title = pr_data["title"]
+    pr_url = pr_data["url"]
+    pr_state = pr_data["state"]
+
+    state_html = f"({pr_state.lower()}) " if pr_state != "OPEN" else ""
+    additions_html = f"+{additions}" if additions > 0 else str(additions)
+    deletions_html = f"-{deletions}" if deletions > 0 else str(deletions)
+
+    return f"""{state_html}{pr_url} {title} [diff: {additions_html}/{deletions_html}]"""
+
+
+def copy_to_clipboard(message: str):
+    r = tkinter.Tk()
+    r.withdraw()
+    r.clipboard_clear()
+    r.clipboard_append(message)
+    r.update()
+    r.destroy()
+
+
+def main():
+    args = parse_args()
+
+    ensure_gh_installed()
+    ensure_gh_authenticated()
+
+    pr_data = fetch_pr_data(args.current_branch, args.latest, args.pr_id)
+    message = format_message(pr_data)
+
+    print("Message:\n")
+    print(f"    {message}\n")
+
+    if not args.no_clipboard:
+        copy_to_clipboard(message)
+        print("Copied to clipboard")
+
+
+if __name__ == "__main__":
+    try:
+        main()
+    except Exception as e:
+        print(f"Error: {e}")
+        exit(1)
+
@@ -0,0 +1,10 @@
+if [ -n "${1:-}" ]; then
+  TARGET_BRANCH="$1"
+  shift
+else
+  TARGET_BRANCH=$(git remote show origin | sed -n '/HEAD branch/s/.*: //p')
+fi
+
+FORK_POINT=$(git merge-base --fork-point "$TARGET_BRANCH")
+
+git rebase "$FORK_POINT" --autosquash "$@"
@@ -1,16 +1,136 @@
 set -euo pipefail

-if [ -n "${1:-}" ]; then
+if [ "${1:-}" = "-h" ] || [ "${1:-}" = "--help" ] || [ $# -ge 2 ]; then
+  declare -r ARGV0=$(basename "${0:-git-switch-interactive.sh}")
+  printf 'Usage: %s [BRANCH]\n' "$ARGV0" >&2
+  cat <<'EOF' >&2
+Interactively choose a local branch, remote branch, or tag to switch to.
+
+Options:
+  -h, --help        Show this help and exit
+  BRANCH            If a single branch/tag/ref is provided, the script will
+                    run git switch BRANCH and exit.
+EOF
+  exit 0
+fi
+
+if [ $# -eq 1 ]; then
  git switch "$1"
  exit 0
 fi

-BRANCHES=$(cat <(git branch) <(git branch --remotes) | grep --invert-match '^\*\|HEAD ->' | sed 's|^\s*||')
-CHOSEN_BRANCH=$(fzf --reverse --info=inline --preview 'git show --color {}' <<<"$BRANCHES")
+declare -r BRANCH_COLOR=$'\033[32m'
+declare -r REMOTE_COLOR=$'\033[33m'
+declare -r ORIGIN_COLOR=$'\033[31m'
+declare -r TAG_COLOR=$'\033[35m'
+declare -r RESET_COLOR=$'\033[0m'

-CLEAN_BRANCH_NAME=$(sed 's|^\s*||' <<<"$CHOSEN_BRANCH")
-for REMOTE in $(git remote); do
-  CLEAN_BRANCH_NAME=$(sed "s|^${REMOTE}/||" <<<"$CLEAN_BRANCH_NAME")
-done
+if [ -n "${NO_COLOR:-}" ]; then
+  declare -r BRANCH_COLOR=''
+  declare -r REMOTE_COLOR=''
+  declare -r ORIGIN_COLOR=''
+  declare -r TAG_COLOR=''
+  declare -r RESET_COLOR=''
+fi

-git switch "${CLEAN_BRANCH_NAME}"
+declare -r STRIP_ANSI_SED='s/\x1B\[[0-9;]*[a-zA-Z]//g'
+declare -r TRIM_SPACE_SED='s/^[[:space:]]+//; s/[[:space:]]+$//'
+declare -r STRIP_SURROUNDING_QUOTES_SED="s/^[[:space:]\"'[]+//; s/[[:space:]\"'\\]]+\$//; s/^\"\\[+//; s/^\\[+//; s/\\]+$//"
+
+sanitize_ref_from_git() {
+  sed -E \
+    -e "$STRIP_ANSI_SED" \
+    -e "$TRIM_SPACE_SED" \
+    -e "$STRIP_SURROUNDING_QUOTES_SED" <<<"$1"
+}
+
+declare -a VISIBLE_ITEMS=()
+
+while IFS= read -r ref; do
+  [ -z "$ref" ] && continue
+  VISIBLE_ITEMS+=("${BRANCH_COLOR}(branch)${RESET_COLOR} $(sanitize_ref_from_git "$ref")")
+done < <(git for-each-ref --sort=-committerdate --format='%(refname:short)' refs/heads 2>/dev/null)
+
+while IFS= read -r ref; do
+  [ -z "$ref" ] && continue
+  case "$ref" in
+    */*)
+      remote_part="$(sanitize_ref_from_git "${ref%%/*}")"
+      branch_part="$(sanitize_ref_from_git "${ref#*/}")"
+      if [ -z "$branch_part" ] || [ "$branch_part" = "HEAD" ]; then
+        continue
+      fi
+      VISIBLE_ITEMS+=("${REMOTE_COLOR}(remote)${RESET_COLOR} ${ORIGIN_COLOR}${remote_part}${RESET_COLOR}/${branch_part}")
+      ;;
+    *)
+      continue
+      ;;
+  esac
+done < <(git for-each-ref --format='%(refname:short)' refs/remotes 2>/dev/null)
+
+while IFS= read -r ref; do
+  [ -z "$ref" ] && continue
+  VISIBLE_ITEMS+=("${TAG_COLOR}(tag)${RESET_COLOR} $(sanitize_ref_from_git "$ref")")
+done < <(git for-each-ref --format='%(refname:short)' refs/tags 2>/dev/null)
+
+if [ ${#VISIBLE_ITEMS[@]} -eq 0 ]; then
+  echo "No branches or tags found." >&2
+  exit 1
+fi
+
+declare -r SKIM_PREVIEW_COMMAND_RAW=$(cat <<'EOF'
+raw=$(printf "%s" {} | sed -r 's/\x1B\[[0-9;]*[A-Za-z]//g')
+ref=$(printf "%s" "$raw" | sed -n -E 's/^[[:space:]]*\([^)]*\)[[:space:]]*(.*)$/\1/p')
+git show --color "$ref" 2>/dev/null || git log -n 50 --color "$ref"
+EOF
+)
+
+declare -r SKIM_PREVIEW_COMMAND_=${SKIM_PREVIEW_COMMAND_RAW//$'\n'/'; '}
+declare -r SKIM_PREVIEW_COMMAND=${SKIM_PREVIEW_COMMAND_%'; '}
+
+CHOSEN=$(printf '%s\n' "${VISIBLE_ITEMS[@]}" | sk --ansi --reverse --info=inline --preview "$SKIM_PREVIEW_COMMAND")
+
+[ -z "${CHOSEN:-}" ] && exit 0
+
+declare -r CLEAN=$(sed -E \
+  -e "$STRIP_ANSI_SED" \
+  -e "$TRIM_SPACE_SED" \
+  <<<"$CHOSEN"
+)
+
+declare -r PARSED=$(sed -n -E "s/^[[:space:]]*\(([^)]*)\)[[:space:]]*(.*)$/\1|\2/p" <<<"$CLEAN") || true
+if [ -z "$PARSED" ]; then
+  echo "Failed to parse selection: $CLEAN" >&2
+  exit 2
+fi
+
+declare -r TYPE=${PARSED%%|*}
+declare -r RAW_REF=${PARSED#*|}
+declare -r REF=$(sanitize_ref_from_git "$RAW_REF")
+
+case "$TYPE" in
+  tag)
+    git switch --detach "$REF"
+    ;;
+  remote)
+    SWITCH_NAME="$REF"
+    for R in $(git remote 2>/dev/null); do
+      if [ "${REF#"${R}"/}" != "$REF" ]; then
+        CAND=${REF#"${R}"/}
+        if git show-ref --verify --quiet "refs/heads/$CAND"; then
+          SWITCH_NAME="$CAND"
+          break
+        fi
+      fi
+    done
+    git switch "$SWITCH_NAME"
+    ;;
+  branch)
+    git switch "$REF"
+    ;;
+  *)
+    git switch "$REF"
+    ;;
+esac
+
+exit 0
@@ -1,5 +1,10 @@
 set -euo pipefail

+if [[ $# -lt 1 ]]; then
+  echo "Usage: git tcommit [-]<hours>"
+  exit 1
+fi
+
 HOUR_SHIFT="$1"
 shift

@@ -1,13 +1,9 @@
-{ pkgs, config, ... }:
-{
-  imports = [
-    ./auto-refresh-keys.nix
-    ./auto-update-trust-db.nix
-    ./declarative-key-fetcher.nix
-  ];
-
+{ config, lib, pkgs, ... }:
+let
+  cfg = config.programs.gpg;
+in
+lib.mkIf cfg.enable {
  programs.gpg = {
-    enable = true;
    homedir = "${config.xdg.configHome}/gnupg";

    auto-refresh-keys.enable = true;
@@ -20,7 +16,7 @@
      ];
    };

-    fetch-keys = {
+    key-fetchers.keyserver = {
      enable = true;
      keys = {
        "495A898FC1A0276F51EA3155355E5D82B18F4E71" = { trust = 4; };
@@ -32,10 +28,11 @@

  services.gpg-agent = {
    enable = true;
-    pinentryPackage = pkgs.pinentry-curses;
+    pinentry.package = pkgs.pinentry-curses;
    enableExtraSocket = true;
    enableSshSupport = true;
    enableScDaemon = true;
+    enableNushellIntegration = config.programs.nushell.enable;
    grabKeyboardAndMouse = false;
  };
 }
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.helix = { };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.home-manager = { };
+}
@@ -0,0 +1,56 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.wayland.windowManager.hyprland;
+in
+{
+  imports = [
+    ./hypridle.nix
+    ./hyprland.nix
+    ./hyprlock.nix
+    ./hyprpaper.nix
+    ./hyprpolkitagent.nix
+    ./keybinds.nix
+    ./scratchpads.nix
+    ./windowrules.nix
+    ./xdg-portals.nix
+  ];
+
+  config = lib.mkIf cfg.enable {
+    systemd.user.sessionVariables = {
+      WLR_NO_HARDWARE_CURSORS = "1";
+      WLR_RENDERER_ALLOW_SOFTWARE = "1";
+      XDG_CURRENT_DESKTOP = "Hyprland";
+      XDG_SESSION_DESKTOP = "Hyprland";
+      XDG_SESSION_TYPE = "wayland";
+      GDK_BACKEND = "wayland,x11,*";
+      QT_QPA_PLATFORM = "wayland;xcb";
+      NIXOS_OZONE_WL = "1";
+      MOZ_ENABLE_WAYLAND = "1";
+      SDL_VIDEODRIVER = "wayland";
+      OZONE_PLATFORM = "wayland";
+      CLUTTER_BACKEND = "wayland";
+      QT_WAYLAND_DISABLE_WINDOWDECORATION = "1";
+      # QT_QPA_PLATFORMTHEME = "qt6ct";
+      QT_AUTO_SCREEN_SCALE_FACTOR = "1";
+
+      # LIBVA_DRIVER_NAME = "nvidia";
+      # GBM_BACKEND = "nvidia-drm";
+      # __GLX_VENDOR_LIBRARY_NAME = "nvidia";
+    };
+
+    home.packages = with pkgs; [
+      wl-clipboard-rs
+    ];
+
+    systemd.user.services = {
+      waybar.Unit.After = lib.mkForce "graphical-session.target";
+
+      network-manager-applet.Unit.After = lib.mkForce "graphical-session.target";
+
+      fcitx5-daemon = {
+        Unit.After = lib.mkForce "graphical-session.target";
+        Service.Slice = "session.slice";
+      };
+    };
+  };
+}
@@ -0,0 +1,36 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.wayland.windowManager.hyprland;
+in
+{
+  config = lib.mkIf cfg.enable {
+    services.hypridle = {
+      enable = true;
+      settings = {
+        general = {
+          ignore_dbus_inhibit = false;
+          lock_cmd = "pidof hyprlock || ${config.programs.hyprlock.package}/bin/hyprlock";
+          before_sleep_cmd = "${pkgs.systemd}/bin/loginctl lock-session";
+          after_sleep_cmd = "${cfg.finalPackage}/bin/hyprctl dispatch dpms on";
+        };
+
+        listener = [
+          {
+            timeout = 900;
+            on-timeout = "${config.programs.hyprlock.package}/bin/hyprlock";
+          }
+          {
+            timeout = 1200;
+            on-timeout = "${cfg.finalPackage}/bin/hyprctl dispatch dpms off";
+            on-resume = "${cfg.finalPackage}/bin/hyprctl dispatch dpms on";
+          }
+        ];
+      };
+    };
+
+    systemd.user.services.hypridle = {
+      Unit.After = lib.mkForce "graphical-session.target";
+      Service.Slice = "session.slice";
+    };
+  };
+}
@@ -0,0 +1,135 @@
+{ lib, ... }:
+{
+  wayland.windowManager.hyprland = {
+    systemd.enable = false;
+    systemd.enableXdgAutostart = false;
+    configType = "lua";
+
+    settings = {
+      on._args = [
+        "hyprland.start"
+        (lib.generators.mkLuaInline ''
+          function()
+            hl.exec_cmd("uwsm finalize")
+          end
+        '')
+      ];
+
+      monitor = [
+        # TODO: host specific
+        {
+          output = "eDP-1";
+          mode = "3840x2400@90.00Hz";
+          position = "0x0";
+          scale = "2";
+        }
+
+        # PVV Demiurgen
+        {
+          output = "desc:Hewlett Packard HP ZR24w CNT01711G6";
+          mode = "1920x1200";
+          position = "1920x-1200";
+          scale = "1";
+        }
+        {
+          output = "desc:Hewlett Packard HP ZR24w CNT018103H";
+          mode = "1920x1200";
+          position = "0x-1200";
+          scale = "1";
+        }
+
+        # PVV Eirin
+        {
+          output = "desc:Hewlett Packard HP ZR24w CNT01710L4";
+          mode = "1920x1200";
+          position = "1920x-1200";
+          scale = "1";
+        }
+        {
+          output = "desc:Hewlett Packard HP ZR24w CNT0181039";
+          mode = "1920x1200";
+          position = "0x-1200";
+          scale = "1";
+        }
+
+        {
+          output = "";
+          mode = "preferred";
+          position = "auto";
+          scale = "auto";
+        }
+      ];
+
+      config = {
+        general = {
+          gaps_in = 5;
+          gaps_out = 15;
+
+          border_size = 2;
+
+          "col.active_border" = {
+            colors = [
+              "rgba(33ccffee)"
+              "rgba(00ff99ee)"
+            ];
+            angle = 45;
+          };
+          "col.inactive_border" = "rgba(595959aa)";
+
+          resize_on_border = false;
+          allow_tearing = false;
+          layout = "master";
+        };
+
+        decoration = {
+          rounding = 10;
+
+          # Change transparency of focused and unfocused windows
+          active_opacity = 1.0;
+          inactive_opacity = 1.0;
+
+          # drop_shadow = true;
+          # shadow_range = 4;
+          # shadow_render_power = 3;
+          # "col.shadow" = "rgba(1a1a1aee)";
+
+          # https://wiki.hyprland.org/Configuring/Variables/#blur
+          blur = {
+            enabled = true;
+            size = 3;
+            passes = 1;
+
+            vibrancy = 0.1696;
+          };
+        };
+
+        animations.enabled = false;
+
+        master = {
+            new_status = "slave";
+        };
+
+        misc = {
+          force_default_wallpaper = 0; # Set to 0 or 1 to disable the anime mascot wallpapers
+          disable_hyprland_logo = false; # If true disables the random hyprland logo / anime girl background. :(
+        };
+
+        input ={
+          kb_layout = "us";
+          kb_variant = "";
+          kb_model = "";
+          kb_options = "caps:escape";
+          kb_rules = "";
+
+          follow_mouse = 1;
+
+          sensitivity = 0; # -1.0 - 1.0, 0 means no modification.
+
+          touchpad = {
+            natural_scroll = false;
+          };
+        };
+      };
+    };
+  };
+}
@@ -0,0 +1,48 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.wayland.windowManager.hyprland;
+in
+{
+  config = lib.mkIf cfg.enable {
+    programs.hyprlock = {
+      enable = true;
+      settings = {
+        general = {
+          disable_loading_bar = true;
+          grace = 0;
+          hide_cursor = true;
+          no_fade_in = false;
+        };
+
+        background = [
+          {
+            path = "screenshot";
+            blur_passes = 3;
+            blur_size = 8;
+          }
+        ];
+
+        input-field = [
+          {
+            size = "200, 50";
+            position = "0, -80";
+            monitor = "";
+            dots_center = true;
+            fade_on_empty = false;
+            font_color = "rgb(202, 211, 245)";
+            inner_color = "rgb(91, 96, 120)";
+            outer_color = "rgb(24, 25, 38)";
+            outline_thickness = 5;
+            placeholder_text = ''Password...'';
+            shadow_passes = 2;
+          }
+        ];
+
+        auth = {
+          "pam:enabled" = true;
+          "pam:module" = "hyprlock";
+        };
+      };
+    };
+  };
+}
@@ -0,0 +1,17 @@
+{ config, lib, ... }:
+let
+  cfg = config.wayland.windowManager.hyprland;
+in
+{
+  config = lib.mkIf cfg.enable {
+    services.hyprpaper = {
+      enable = true;
+      settings.ipc = true;
+    };
+
+    systemd.user.services.hyprpaper = {
+      Unit.After = lib.mkForce "graphical-session.target";
+      Service.Slice = "session.slice";
+    };
+  };
+}
@@ -0,0 +1,14 @@
+{ config, lib, ... }:
+let
+  cfg = config.wayland.windowManager.hyprland;
+in
+{
+  config = lib.mkIf cfg.enable {
+    services.hyprpolkitagent.enable = true;
+
+    systemd.user.services.hyprpolkitagent = {
+      Unit.After = lib.mkForce "graphical-session.target";
+      Service.Slice = "session.slice";
+    };
+  };
+}
@@ -0,0 +1,196 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.wayland.windowManager.hyprland;
+in
+{
+  config = lib.mkIf cfg.enable {
+    wayland.windowManager.hyprland.settings = let
+      exe = lib.getExe;
+    in {
+      mod._var = "SUPER";
+
+      # https://github.com/xkbcommon/libxkbcommon/blob/master/include/xkbcommon/xkbcommon-keysyms.h
+      bind = let
+        lua = lib.generators.mkLuaInline;
+        mod = key: args: {
+          _args = [
+            (lua "mod .. \" + ${key}\"")
+          ] ++ args;
+        };
+      in [
+        (mod "SHIFT + Q" [
+          (lua "hl.dsp.exec_cmd(\"uwsm stop\")")
+        ])
+        (mod "ALT + SHIFT + Q" [
+          (lua "hl.dsp.exec_cmd(\"${pkgs.systemd}/bin/loginctl terminate-user '${config.home.username}'\")")
+        ])
+        (mod "R" [
+          (lua "hl.dsp.exec_cmd(\"uwsm app -- ${exe config.programs.anyrun.package}\")")
+        ])
+        (mod "T" [
+          (lua "hl.dsp.window.float({ action = \"toggle\" })")
+        ])
+
+        (mod "F" [
+          (lua "hl.dsp.window.fullscreen({ action = \"toggle\", mode = \"maximized\" })")
+        ])
+        (mod "SHIFT + F" [
+          (lua "hl.dsp.window.fullscreen({ action = \"toggle\", mode = \"fullscreen\" })")
+        ])
+
+        (mod "C" [
+          (lua "hl.dsp.exec_cmd(\"${cfg.finalPackage}/bin/hyprctl reload\")")
+        ])
+
+        (mod "BACKSPACE" [
+          (lua "hl.dsp.window.close()")
+        ])
+
+        (mod "SHIFT + BACKSPACE" [
+          (lua "hl.dsp.window.kill()")
+        ])
+
+        (mod "SHIFT + RETURN" [
+          (lua "hl.dsp.exec_cmd(\"${exe pkgs.app2unit} -t service -C -s app-graphical.slice -- ${exe pkgs.alacritty} --class termTerminal -e ${exe pkgs.tmux} new-session -A -s term\")")
+        ])
+        (mod "SHIFT + SPACE" [
+          (lua "hl.dsp.exec_cmd(\"${exe pkgs.app2unit} -t service -C -s app-graphical.slice -- ${exe pkgs.alacritty} --class termTerminal -e ${exe pkgs.tmux} new-session -A -s term\")")
+        ])
+
+        (mod "j" [(lua "hl.dsp.layout(\"cyclenext\")")])
+        (mod "k" [(lua "hl.dsp.layout(\"cycleprev\")")])
+        (mod "SHIFT + j" [(lua "hl.dsp.layout(\"swapnext\")")])
+        (mod "SHIFT + k" [(lua "hl.dsp.layout(\"swapprev\")")])
+
+        (mod "1" [(lua "hl.dsp.focus({ workspace = 1, on_current_monitor = true })")])
+        (mod "2" [(lua "hl.dsp.focus({ workspace = 2, on_current_monitor = true })")])
+        (mod "3" [(lua "hl.dsp.focus({ workspace = 3, on_current_monitor = true })")])
+        (mod "4" [(lua "hl.dsp.focus({ workspace = 4, on_current_monitor = true })")])
+        (mod "5" [(lua "hl.dsp.focus({ workspace = 5, on_current_monitor = true })")])
+        (mod "6" [(lua "hl.dsp.focus({ workspace = 6, on_current_monitor = true })")])
+        (mod "7" [(lua "hl.dsp.focus({ workspace = 7, on_current_monitor = true })")])
+        (mod "8" [(lua "hl.dsp.focus({ workspace = 8, on_current_monitor = true })")])
+        (mod "9" [(lua "hl.dsp.focus({ workspace = 9, on_current_monitor = true })")])
+
+        (mod "SHIFT + 1" [(lua "hl.dsp.window.move({ workspace = 1 })")])
+        (mod "SHIFT + 2" [(lua "hl.dsp.window.move({ workspace = 2 })")])
+        (mod "SHIFT + 3" [(lua "hl.dsp.window.move({ workspace = 3 })")])
+        (mod "SHIFT + 4" [(lua "hl.dsp.window.move({ workspace = 4 })")])
+        (mod "SHIFT + 5" [(lua "hl.dsp.window.move({ workspace = 5 })")])
+        (mod "SHIFT + 6" [(lua "hl.dsp.window.move({ workspace = 6 })")])
+        (mod "SHIFT + 7" [(lua "hl.dsp.window.move({ workspace = 7 })")])
+        (mod "SHIFT + 8" [(lua "hl.dsp.window.move({ workspace = 8 })")])
+        (mod "SHIFT + 9" [(lua "hl.dsp.window.move({ workspace = 9 })")])
+
+        (mod "b" [(lua "hl.dsp.exec_cmd(\"${pkgs.fcitx5}/bin/fcitx5-remote -s mozc\")")])
+        (mod "n" [(lua "hl.dsp.exec_cmd(\"${pkgs.fcitx5}/bin/fcitx5-remote -s keyboard-no\")")])
+        (mod "m" [(lua "hl.dsp.exec_cmd(\"${pkgs.fcitx5}/bin/fcitx5-remote -s keyboard-us\")")])
+
+        (mod "l" [(lua "hl.dsp.exec_cmd(\"${pkgs.systemd}/bin/loginctl lock-session\")")])
+
+        # TODO: fix
+        # "super + minus" = "${pkgs.xcalib}/bin/xcalib -invert -alter"
+
+        {
+          _args = [
+            (lua "\"PRINT\"")
+            (lua "hl.dsp.exec_cmd(\"${exe pkgs.grimblast} copy area\")")
+          ];
+        }
+        {
+          _args = [
+            (lua "\"SHIFT + PRINT\"")
+            (lua "hl.dsp.exec_cmd(\"${lib.getExe pkgs.grimblast} save\")")
+          ];
+        }
+
+        # "SHIFT, Print, exec, ${lib.getExe pkgs.grimblast} save"
+        # "shift + @Print" = "${pkgs.maim}/bin/maim --hidecursor --nokeyboard $SCREENSHOT_DIR/$(date +%s).png"
+
+        # "$mod, Print, exec, ${exe pkgs.woomer}"
+
+        (mod "mouse:272" [
+          (lua "hl.dsp.window.drag()")
+          (lua "{ mouse = true }")
+        ])
+
+        (mod "Control_L" [
+          (lua "hl.dsp.window.drag()")
+          (lua "{ mouse = true }")
+        ])
+
+        (mod "mouse:273" [
+          (lua "hl.dsp.window.resize()")
+          (lua "{ mouse = true }")
+        ])
+
+        (mod "ALT_L" [
+          (lua "hl.dsp.window.resize()")
+          (lua "{ mouse = true }")
+        ])
+
+        (mod "p" [
+          (lua "hl.dsp.exec_cmd(\"${exe pkgs.mpc} toggle\")")
+          (lua "{ locked = true }")
+        ])
+        {
+          _args = [
+            (lua "\"XF86AudioPlay\"")
+            (lua "hl.dsp.exec_cmd(\"${exe pkgs.mpc} toggle\")")
+            (lua "{ locked = true }")
+          ];
+        }
+        {
+          _args = [
+            (lua "\"XF86AudioPrev\"")
+            (lua "hl.dsp.exec_cmd(\"${exe pkgs.mpc} prev\")")
+            (lua "{ locked = true }")
+          ];
+        }
+        {
+          _args = [
+            (lua "\"XF86AudioNext\"")
+            (lua "hl.dsp.exec_cmd(\"${exe pkgs.mpc} next\")")
+            (lua "{ locked = true }")
+          ];
+        }
+        {
+          _args = [
+            (lua "\"XF86MonBrightnessUp\"")
+            (lua "hl.dsp.exec_cmd(\"${exe pkgs.brightnessctl} s +5%\")")
+            (lua "{ locked = true, repeating = true }")
+          ];
+        }
+        {
+          _args = [
+            (lua "\"XF86MonBrightnessDown\"")
+            (lua "hl.dsp.exec_cmd(\"${exe pkgs.brightnessctl} s 5%-\")")
+            (lua "{ locked = true, repeating = true }")
+          ];
+        }
+        {
+          _args = [
+            (lua "\"XF86AudioLowerVolume\"")
+            (lua "hl.dsp.exec_cmd(\"${pkgs.wireplumber}/bin/wpctl set-volume @DEFAULT_AUDIO_SINK@ 2%-\")")
+            (lua "{ locked = true, repeating = true }")
+          ];
+        }
+        {
+          _args = [
+            (lua "\"XF86AudioRaiseVolume\"")
+            (lua "hl.dsp.exec_cmd(\"${pkgs.wireplumber}/bin/wpctl set-volume @DEFAULT_AUDIO_SINK@ 2%+\")")
+            (lua "{ locked = true, repeating = true }")
+          ];
+        }
+        (mod "F7" [
+          (lua "hl.dsp.exec_cmd(\"${pkgs.wireplumber}/bin/wpctl set-volume @DEFAULT_AUDIO_SINK@ 2%-\")")
+          (lua "{ locked = true, repeating = true }")
+        ])
+        (mod "F8" [
+          (lua "hl.dsp.exec_cmd(\"${pkgs.wireplumber}/bin/wpctl set-volume @DEFAULT_AUDIO_SINK@ 2%+\")")
+          (lua "{ locked = true, repeating = true }")
+        ])
+      ];
+    };
+  };
+}
@@ -0,0 +1,140 @@
+{ config, pkgs, lib, ... }: let
+  cfg = config.wayland.windowManager.hyprland;
+in
+{
+  config = lib.mkIf cfg.enable {
+    wayland.windowManager.hyprland.settings = let
+      exe = lib.getExe;
+      scratchpads = [
+        (rec {
+          title = "Floating terminal";
+          class = "floatingTerminal";
+          command = "uwsm app -- ${exe pkgs.alacritty} --class ${class} -e ${exe pkgs.tmux} new-session -A -s f";
+          size = { h = 90; w = 95; };
+          keys = [
+            (lib.generators.mkLuaInline "mod .. \" + RETURN\"")
+            (lib.generators.mkLuaInline "mod .. \" + SPACE\"")
+          ];
+        })
+        (rec {
+          title = "Ncmpcpp";
+          class = "floatingNcmpcpp";
+          command = "uwsm app -- ${exe pkgs.alacritty} --class ${class} -e ${exe pkgs.ncmpcpp}";
+          size = { h = 90; w = 95; };
+          keys = [
+            (lib.generators.mkLuaInline "mod .. \" + Q\"")
+          ];
+        })
+        # "$mod, W, emacs"
+        # "$mod, E, filebrowser"
+        # "$mod, X, taskwarriortui"
+      ];
+    in {
+      scratchpads._var = scratchpads;
+
+      fixScratchpad._var = lib.generators.mkLuaInline ''
+        function(scratchpad, window, monitor_)
+          local monitor = monitor_
+          if monitor == nil then
+            monitor = window.monitor
+          end
+
+          local scaled_w = monitor.width * (1/monitor.scale)
+          local scaled_h = monitor.height * (1/monitor.scale)
+
+          -- I have no idea why these need to be run twice, but despite the values being the same,
+          -- it somehow always misplaces the window the first time around...
+          hl.dispatch(hl.dsp.window.move({
+            x = monitor.x + (scaled_w * (((100 -scratchpad.size.w) / 2) / 100)),
+            y = monitor.y + (scaled_h * (((100 -scratchpad.size.h) / 2) / 100)),
+            relative = false
+          }))
+          hl.dispatch(hl.dsp.window.resize({
+            x = scaled_w * scratchpad.size.w / 100,
+            y = scaled_h * scratchpad.size.h / 100,
+            relative = false
+          }))
+          hl.dispatch(hl.dsp.window.move({
+            x = monitor.x + (scaled_w * (((100 -scratchpad.size.w) / 2) / 100)),
+            y = monitor.y + (scaled_h * (((100 -scratchpad.size.h) / 2) / 100)),
+            relative = false
+          }))
+          hl.dispatch(hl.dsp.window.resize({
+            x = scaled_w * scratchpad.size.w / 100,
+            y = scaled_h * scratchpad.size.h / 100,
+            relative = false
+          }))
+        end
+      '';
+
+      invokeScratchpad._var = lib.generators.mkLuaInline ''
+        function(scratchpad)
+          local scratchpad_window = hl.get_window("class:^(" .. scratchpad.class .. ")$")
+          local current_workspace = hl.get_active_workspace()
+
+          if scratchpad_window == nil then
+            hl.dispatch(hl.dsp.exec_cmd(scratchpad.command, {
+              workspace = current_workspace.id
+            }))
+          else
+            hl.dispatch(hl.dsp.focus({ window = scratchpad_window }))
+
+            if scratchpad_window.workspace.id ~= current_workspace.id then
+              hl.dispatch(hl.dsp.window.move({ workspace = current_workspace.id }))
+              fixScratchpad(scratchpad, scratchpad_window, current_workspace.monitor)
+            else
+              hl.dispatch(hl.dsp.window.move({ workspace = "special:" .. scratchpad.class .. "Ws", follow = false }))
+            end
+          end
+        end
+      '';
+
+      bind = lib.concatLists (lib.imap1 (i: { keys, command, class, size, ... }: map (key: {
+        _args = [
+          key
+          (lib.generators.mkLuaInline "function() invokeScratchpad(scratchpads[${toString i}]) end")
+        ];
+      }) keys) scratchpads);
+
+      window_rule = map ({ class, size, ... }: {
+        name = "scratchpad_${class}";
+        match.class = "^(${class})$";
+
+        float = true;
+        size = [
+          "(monitor_w*${toString (size.w / 100.0)})"
+          "(monitor_h*${toString (size.h / 100.0)})"
+        ];
+        move = [
+          "(monitor_w*${toString (((100 - size.w) / 2) / 100.0)})"
+          "(monitor_h*${toString (((100 - size.h) / 2) / 100.0)})"
+        ];
+      }) scratchpads;
+
+      # TODO: fix me
+      on._args = [
+        "workspace.move_to_monitor"
+        (lib.mkLuaInline ''
+          function(workspace, monitor)
+            for _, scratchpad in pairs(scratchpads) do
+              local scratchpad_window = hl.get_window("class:^(" .. scratchpad.class .. ")$")
+              if scratchpad_window == nil or scratchpad_window.workspace.id ~= workspace.id then
+                -- NOTE: crazy that there's no continue in lua...
+                goto continue
+              end
+
+              -- hl.notification.create({
+              --   time = 3000,
+              --   text = "Fixing scratchpad " .. scratchpad.class .. " to monitor " .. monitor.name
+              -- })
+
+              fixScratchpad(scratchpad, scratchpad_window, monitor)
+
+              ::continue::
+            end
+          end
+        '')
+      ];
+    };
+  };
+}
@@ -0,0 +1,114 @@
+{ config, lib, ... }:
+let
+  cfg = config.wayland.windowManager.hyprland;
+in
+{
+  config = lib.mkIf cfg.enable {
+    wayland.windowManager.hyprland.settings.window_rule = [
+      {
+        match.class = "^(Rofi)$";
+        float = true;
+      }
+      {
+        match.class = "^(xdg-desktop-portal-gtk)$";
+        float = true;
+      }
+      {
+        match.title = "^(.*Bitwarden Password Manager.*)$";
+        float = true;
+      }
+      {
+        match.title = "^(Picture-in-Picture)$";
+        float = true;
+      }
+      {
+        match.class = "^(Nsxiv)$";
+        tile = true;
+      }
+
+      {
+        match.class = "^(Gimp-2.*)$";
+        match.title = "^(Open Image)$";
+
+        float = true;
+        size = [
+          "70%"
+          "70%"
+        ];
+        center = true;
+      }
+      # {
+      #   match.class = "^(xdg-desktop-portal-gtk)$";
+      #   dimaround = true;
+      # }
+
+      {
+        match.title = "^(Firefox — Sharing Indicator)$";
+        workspace = "special:silent";
+      }
+      {
+        match.title = "^(Zen — Sharing Indicator)$";
+        workspace = "special:silent";
+      }
+      {
+        match.title = "^(.*is sharing (your screen|a window)\\.)$";
+        workspace = "special:silent";
+      }
+
+      {
+      }
+
+      {
+        match.class = "^(firefox)$";
+        workspace = 2;
+      }
+      {
+        match.class = "^(chromium)$";
+        workspace = 2;
+      }
+
+      {
+        match.class = "^(Emacs)$";
+        workspace = 3;
+      }
+      {
+        match.class = "^(code)$";
+        workspace = 3;
+      }
+      {
+        match.class = "^(code-url-handler)$";
+        workspace = 3;
+      }
+      {
+        match.class = "^(dev.zed.Zed)$";
+        workspace = 3;
+      }
+
+      {
+        match.class = "^(discord)$";
+        workspace = 5;
+      }
+      {
+        match.class = "^(Element)$";
+        workspace = 5;
+      }
+
+      {
+        match.class = "^(anyrun)$";
+        float = true;
+      }
+      {
+        match.class = "^(xdg-desktop-portal-termfilechooser)$";
+        float = true;
+        size = [
+          "70%"
+          "80%"
+        ];
+        move = [
+          "15%"
+          "10%"
+        ];
+      }
+    ];
+  };
+}
@@ -0,0 +1,34 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.wayland.windowManager.hyprland;
+in {
+  config = lib.mkIf cfg.enable {
+    xdg.portal = {
+      xdgOpenUsePortal = true;
+      configPackages = with pkgs; [ gnome-session ];
+      extraPortals = with pkgs; [
+        gnome-keyring
+        xdg-desktop-portal-gtk
+        xdg-desktop-portal-termfilechooser
+      ];
+      config.hyprland = {
+        default = "hyprland;gtk;";
+        "org.freedesktop.impl.portal.FileChooser" = [ "termfilechooser" ];
+        "org.freedesktop.impl.portal.OpenURI" = [ "gtk" ];
+        "org.freedesktop.impl.portal.Notification" = [ "gtk" ];
+        "org.freedesktop.impl.portal.Secret" = [ "gnome-keyring" ];
+      };
+    };
+
+    xdg.configFile."xdg-desktop-portal-termfilechooser/config".source =
+      (pkgs.formats.ini { listsAsDuplicateKeys = true; }).generate "xdg-desktop-portal-termfilechooser.ini" {
+        filechooser = {
+          cmd = "${pkgs.xdg-desktop-portal-termfilechooser}/share/xdg-desktop-portal-termfilechooser/yazi-wrapper.sh";
+          default_dir = "$HOME";
+          env = [
+            "TERMCMD=alacritty -T \"Filechooser\" --class \"xdg-desktop-portal-termfilechooser\" --command"
+          ];
+        };
+      };
+  };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.jq = { };
+}
@@ -1,8 +1,7 @@
 { config, ... }:
 {
  programs.less = {
-    enable = true;
-    keys = ''
+    config = ''
      #env
      LESS = -i -R
      LESSHISTSIZE=20000
@@ -0,0 +1,6 @@
+{ ... }:
+{
+  programs.man = {
+    generateCaches = true;
+  };
+}
@@ -0,0 +1,8 @@
+{ pkgs, ... }:
+{
+  programs.meli = {
+    package = pkgs.meli.overrideAttrs {
+      doCheck = false;
+    };
+  };
+}
@@ -0,0 +1,14 @@
+{ config, lib, machineVars, ... }:
+{
+  programs.mpv = {
+    config = {
+      screenshot-directory = "${config.xdg.userDirs.pictures}/mpv-screenshots";
+
+      #https://wiki.nixos.org/wiki/Accelerated_Video_Playback
+      hwdec       = "auto-safe";
+      vo          = "gpu";
+      profile     = "gpu-hq";
+      gpu-context = lib.mkIf machineVars.wayland "wayland";
+    };
+  };
+}
@@ -1,7 +1,6 @@
-{pkgs, ...}:
+{ config, pkgs, ... }:
 {
  programs.ncmpcpp = {
-    enable = true;
    package = pkgs.ncmpcpp.override { visualizerSupport = true; };

    bindings = [
@@ -332,11 +331,11 @@
      window_border_color = "green";
      active_window_border = "red";

-      visualizer_data_source = "/tmp/mpd.fifo";
+      visualizer_data_source = "/run/user/${toString config.home.uid}/mpd/visualizer.fifo";
      visualizer_output_name = "Visualizer feed";
      visualizer_in_stereo = "no";
-      visualizer_type = "spectrum"; # spectrum, ellipse, wave_filled, wave
-      visualizer_look = "+█"; # wave | spectrum, ellipse, wave_filled
+      # visualizer_type = "spectrum"; # spectrum, ellipse, wave_filled, wave
+      # visualizer_look = "+█"; # wave | spectrum, ellipse, wave_filled
    };
  };
 }
@@ -0,0 +1,39 @@
+{ config, lib, ... }:
+let
+  cfg = config.programs.neomutt;
+in lib.mkIf cfg.enable {
+  programs.neomutt = {
+    vimKeys = true;
+    sidebar.enable = true;
+
+    settings = {
+      debug_file = "${config.xdg.dataHome}/neomutt/debug0";
+      history_file = "${config.xdg.dataHome}/neomutt/history";
+      mailcap_path = "${config.xdg.configHome}/neomutt/mailcap";
+      # header_cache = "${config.xdg.cacheHome}/neomutt/headers";
+      # message_cache_dir = "${config.xdg.cacheHome}/neomutt/messages";
+      news_cache_dir = "${config.xdg.cacheHome}/neomutt/news";
+      tmp_dir = "/run/user/${toString config.home.uid}/neomutt";
+      alias_file = "${config.xdg.dataHome}/neomutt/aliases";
+    };
+
+    extraConfig = ''
+      source "${config.xdg.dataHome}/neomutt/aliases"
+
+      # vim: filetype=neomuttrc
+    '';
+  };
+
+  xdg.configFile."neomutt/mailcap".text = ''
+    # vim: filetype=muttrc
+
+    text/plain; nvim %s
+
+    #PDFs
+    application/pdf; zathura %s pdf
+
+    #Images
+    image/png; feh %s
+    image/jpeg; feh %s
+  '';
+}
@@ -1,29 +1,36 @@
-{ pkgs, home, ... }:
-{
-  imports = [
-    ./auto-clean-swapfiles.nix
-  ];
-
+{ config, pkgs, lib, machineVars, ... }:
+let
+  cfg = config.programs.neovim;
+in
+lib.mkIf cfg.enable {
  programs.neovim = {
-    enable = true;
+    auto-clean-swapfiles.enable = true;

    viAlias = true;
    vimAlias = true;
    vimdiffAlias = true;

+    withPython3 = true;
+    withRuby = false;
+
    plugins = with pkgs.vimPlugins; [
      direnv-vim
-      vim-commentary
-      vim-gitgutter
      fzf-vim
-      vim-which-key
+      vim-commentary
+      vim-css-color
+      vim-fugitive
+      vim-gitgutter
      vim-nix
      vim-surround
-      vim-fugitive
-      vim-css-color
+      vim-trailing-whitespace
+      vim-which-key
+    ] ++ (lib.optionals machineVars.wayland [
+      vim-wayland-clipboard
+    ]) ++ [
      semshi
      {
        plugin = goyo-vim;
+        type = "viml";

        # TODO: The mapleader definition should be in extraConfig, but setting
        #       the mapleader before defining keymaps messes things up.
@@ -66,25 +73,56 @@
      }
      limelight-vim
      vim-tmux-navigator
-      vim-polyglot
      lightline-vim
+      vim-better-whitespace
      {
-        plugin = rainbow;
+        plugin = nvim-treesitter.withAllGrammars;
+        type = "lua";
        config = ''
-          let g:rainbow_active = 1
+          require('nvim-treesitter').setup {
+            highlight = {
+              enable = true,
+            },
+          }
+        '';
+      }
+      {
+        plugin = rainbow-delimiters-nvim;
+        type = "lua";
+        config = ''
+          local rainbow_delimiters = require 'rainbow-delimiters'
+          vim.g.rainbow_delimiters = {
+            ["highlight"] = {
+              'RainbowDelimiterRed',
+              'RainbowDelimiterYellow',
+              'RainbowDelimiterBlue',
+              'RainbowDelimiterGreen',
+              'RainbowDelimiterViolet',
+              'RainbowDelimiterCyan',
+            },
+          }
        '';
      }
      {
        plugin = vim-monokai;
+        type = "viml";
        config = ''
          colorscheme monokai
-          autocmd ColorScheme * highlight Normal ctermbg=0
-          autocmd ColorScheme * highlight LineNr ctermbg=0
-          autocmd ColorScheme * highlight CursorLineNR ctermbg=0 ctermfg=208
-          autocmd ColorScheme * highlight SignColumn ctermbg=0
-          autocmd ColorScheme * highlight GitGutterAdd ctermbg=0
-          autocmd ColorScheme * highlight GitGutterChange ctermbg=0
-          autocmd ColorScheme * highlight GitGutterDelete ctermbg=0
+
+          autocmd ColorScheme monokai highlight Normal ctermbg=0
+          autocmd ColorScheme monokai highlight LineNr ctermbg=0
+          autocmd ColorScheme monokai highlight CursorLineNR ctermbg=0 ctermfg=208
+          autocmd ColorScheme monokai highlight SignColumn ctermbg=0
+          autocmd ColorScheme monokai highlight GitGutterAdd ctermbg=0
+          autocmd ColorScheme monokai highlight GitGutterChange ctermbg=0
+          autocmd ColorScheme monokai highlight GitGutterDelete ctermbg=0
+
+          autocmd ColorScheme monokai highlight RainbowDelimiterRed    { fg = g:terminal_color_9 }
+          autocmd ColorScheme monokai highlight RainbowDelimiterYellow { fg = g:terminal_color_11 }
+          autocmd ColorScheme monokai highlight RainbowDelimiterBlue   { fg = g:terminal_color_12 }
+          autocmd ColorScheme monokai highlight RainbowDelimiterGreen  { fg = g:terminal_color_10 }
+          autocmd ColorScheme monokai highlight RainbowDelimiterViolet { fg = g:terminal_color_13 }
+          autocmd ColorScheme monokai highlight RainbowDelimiterCyan   { fg = g:terminal_color_14 }
        '';
      }
    ];
@@ -104,7 +142,7 @@
      vnoremap <A-k> :m '<-2<CR>gv=gv
    '';

-    extraLuaConfig = ''
+    initLua = ''
      local function paste_buf()
        local content = os.getenv("NVIM_CLIPBOARD")

@@ -118,6 +156,4 @@
      vim.keymap.set('n', ';', paste_buf)
    '';
  };
-
-  home.sessionVariables = { EDITOR = "nvim"; };
 }
@@ -2,16 +2,15 @@
 let
  cfg = config.programs.newsboat;

-  # package = cfg.package;
-  package = pkgs.newsboat;
-
-  defaultBrowser = "google-chrome-stable %u";
+  defaultBrowser = "firefox %u";
  videoViewer = "mpv %u";
 in {
  imports = [ ./sources.nix ];

  programs.newsboat = {
-    enable = true;
+    autoFetchArticles.enable = true;
+    autoVacuum.enable = true;
+
    autoReload = true;
    maxItems = 50;
    browser = ''"${defaultBrowser}"'';
@@ -70,77 +69,4 @@ in {
      ''
    ];
  };
-
-  systemd.user.slices.app-newsboat = {
-    Unit = {
-      Description = "Newsboat automation";
-      Documentation = [ "man:newsboat(1)" ];
-    };
-  };
-
-  # TODO: wait for internet
-  systemd.user.services.newsboat-fetch-articles = {
-    Unit = {
-      Description = "Automatically fetch new articles for newsboat";
-      Documentation = [ "man:newsboat(1)" ];
-    };
-
-    Service = {
-      Type = "oneshot";
-      Slice = "app-newsboat.slice";
-      CPUSchedulingPolicy = "idle";
-      IOSchedulingClass = "idle";
-      ExecStart = "${lib.getExe pkgs.flock} %t/newsboat.lock ${lib.getExe package} --execute=reload";
-    };
-  };
-
-  systemd.user.timers.newsboat-fetch-articles = {
-    Unit = {
-      Description = "Automatically fetch new articles for newsboat";
-      Documentation = [ "man:newsboat(1)" ];
-      After = [ "network.target" ];
-    };
-
-    Timer = {
-      Unit = "newsboat-fetch-articles.service";
-      OnCalendar = lib.mkDefault "daily";
-      Persistent = true;
-    };
-
-    Install = {
-      WantedBy = [ "timers.target" ];
-    };
-  };
-
-  systemd.user.services.newsboat-vacuum = {
-    Unit = {
-      Description = "Automatically clean newsboat cache";
-      Documentation = [ "man:newsboat(1)" ];
-    };
-
-    Service = {
-      Type = "oneshot";
-      Slice = "app-newsboat.slice";
-      CPUSchedulingPolicy = "idle";
-      IOSchedulingClass = "idle";
-      ExecStart = "${lib.getExe pkgs.flock} %t/newsboat.lock ${lib.getExe package} --vacuum";
-    };
-  };
-
-  systemd.user.timers.newsboat-vacuum = {
-    Unit = {
-      Description = "Automatically clean newsboat cache";
-      Documentation = [ "man:newsboat(1)" ];
-    };
-
-    Timer = {
-      Unit = "newsboat-vacuum.service";
-      OnCalendar = lib.mkDefault "weekly";
-      Persistent = true;
-    };
-
-    Install = {
-      WantedBy = [ "timers.target" ];
-    };
-  };
 }
@@ -3,40 +3,46 @@ let
  mkSource = tags: url: { inherit tags url; };
 in {
  programs.newsboat.urls = [
-    (mkSource [ "tech" "linux" ] "https://lukesmith.xyz/rss.xml")
-    (mkSource [ "tech" "vim" "old" ] "https://castel.dev/rss.xml")
-    (mkSource [ "tech" "linux" "nixos" ] "https://christine.website/blog.rss")
-    (mkSource [ "japanese" "language" "old" ] "http://feeds.feedburner.com/LocalizingJapan")
-    (mkSource [ "tech" "linux" ] "http://xahlee.info/comp/blog.xml")
-    (mkSource [ "japanese" "language" ] "https://www.outlier-linguistics.com/blogs/japanese.atom")
    (mkSource [ "tech" "linux" ] "https://archlinux.org/feeds/news/")
-    (mkSource [ "tech" "linux" ] "https://bartoszmilewski.com/feed/")
-    (mkSource [ "tech" "linux" "nixos" ] "https://nixos.org//blog/announcements-rss.xml")
-    (mkSource [ "tech" "linux" ] "https://www.digitalneanderthal.com/index.xml")
+    (mkSource [ "tech" "linux" "nixos" ] "https://nixos.org/blog/announcements-rss.xml")
    (mkSource [ "tech" "ntnu" ] "https://omegav.no/newsrss")
-    (mkSource [ "tech" ] "https://code.visualstudio.com/feed.xml")
+    (mkSource [ "ntnu" ] "https://varsel.it.ntnu.no/subscribe/rss/")
+    (mkSource [ "tech" ] "https://blog.hackeriet.no/feed.xml")
+    (mkSource [ "tech" ] "https://fribyte.no/rss.xml")
+    (mkSource [ "tech" ] "https://existentialtype.wordpress.com/feed/")
+    (mkSource [ "tech" "linux" "ntnu" ] "https://wiki.pvv.ntnu.no/w/api.php?hidebots=1&urlversion=1&days=90&limit=50&action=feedrecentchanges&format=xml")
+    (mkSource [ "tech" "linux" "nixos" ] "https://dandellion.xyz/atom.xml")
+    (mkSource [ "tech" "linux" ] "http://xahlee.info/comp/blog.xml")
+    (mkSource [ "tech" ] "https://branchfree.org/feed/")
+    (mkSource [ "tech" ] "https://search.marginalia.nu/news.xml")
+    (mkSource [ "tech" "linux" ] "https://bartoszmilewski.com/feed/")
+    (mkSource [ "tech" "linux" "nixos" ] "https://myme.no/atom-feed.xml")
    (mkSource [ "tech" "linux" "nixos" ] "https://blog.ysndr.de/atom.xml")
    (mkSource [ "tech" "linux" "nixos" ] "https://kaushikc.org/atom.xml")
    (mkSource [ "tech" "linux" "nixos" ] "https://ianthehenry.com/feed.xml")
-    (mkSource [ "tech" "linux" "ntnu" ] "https://www.pvv.ntnu.no/w/api.php?hidebots=1&urlversion=1&days=7&limit=50&action=feedrecentchanges&feedformat=atom")
-    (mkSource [ "ntnu" ] "https://varsel.it.ntnu.no/subscribe/rss/")
    (mkSource [ "tech" "linux" "japanese" ] "https://www.ncaq.net/feed.atom")
-    (mkSource [ "tech" "linux" "haskell" "nixos" "functional-programming" ] "https://www.haskellforall.com/feeds/posts/default")
-    (mkSource [ "tech" "haskell" "functional-programming" ] "https://williamyaoh.com/feed.atom")
-    (mkSource [ "tech" "haskell" "functional-programming" ] "https://www.parsonsmatt.org/feed.xml")
-    (mkSource [ "tech" "haskell" "functional-programming" "python" ] "http://blog.ezyang.com/feed/")
-    (mkSource [ "tech" "haskell" "functional-programming" ] "https://lexi-lambda.github.io/feeds/all.rss.xml")
-    (mkSource [ "tech" "haskell" "functional-programming" ] "https://www.stephendiehl.com/feed.rss")
-    (mkSource [ "tech" "haskell" "functional-programming" "emacs" ] "https://chrisdone.com/rss.xml")
-    (mkSource [ "tech" "haskell" "functional-programming" "nixos" ] "https://markkarpov.com/feed.atom")
-    (mkSource [ "tech" "flutter" ] "https://resocoder.com/feed/")
-    (mkSource [ "tech" "compilers" ] "https://existentialtype.wordpress.com/feed/")
-    (mkSource [ "tech" "compilers" "haskell" "functional-programming" "old" ] "https://skilpat.tumblr.com/rss")
+    (mkSource [ "tech" "linux" "nixos" "emacs" "japanese" ] "https://apribase.net/program/feed")
+    (mkSource [ "tech" "linux" "nixos" "functional-programming" ] "https://www.haskellforall.com/feeds/posts/default")
+    (mkSource [ "tech" "linux" "nixos" ] "https://christine.website/blog.rss")
+    (mkSource [ "tech" "functional-programming" "nixos" ] "https://markkarpov.com/feed.atom")
+    (mkSource [ "tech" "functional-programming" ] "https://williamyaoh.com/feed.atom")
+    (mkSource [ "tech" "functional-programming" ] "https://www.parsonsmatt.org/feed.xml")
+    (mkSource [ "tech" "functional-programming" "python" ] "http://blog.ezyang.com/feed/")
+    (mkSource [ "tech" "functional-programming" ] "https://lexi-lambda.github.io/feeds/all.rss.xml")
+    (mkSource [ "tech" "functional-programming" ] "https://www.stephendiehl.com/feed.rss")
+    (mkSource [ "tech" "functional-programming" "emacs" ] "https://chrisdone.com/rss.xml")
+    (mkSource [ "tech" ] "https://go.dev/blog/feed.atom")
+    (mkSource [ "tech" "linux" ] "https://jfx.ac/blog/index.xml")
+    (mkSource [ "tech" "linux" ] "https://lukesmith.xyz/rss.xml")
+    (mkSource [ "japanese" "language" ] "https://www.outlier-linguistics.com/blogs/japanese.atom")
    (mkSource [ "language" ] "https://feeds.feedburner.com/blogspot/Ckyi")
-    (mkSource [ "tech" "compilers" ] "https://go.dev/blog/feed.atom")
-    (mkSource [ "tech" "linux" "nixos" ] "https://myme.no/feed.xml")
-    (mkSource [ "tech" "linux" "nixos" "compilers" ] "https://flyx.org/feed.xml")
-    (mkSource [ "tech" "linux" ] "https://blog.jfx.ac/feed.xml")
-    (mkSource [ "tech" "linux" "nixos" ] "https://dandellion.xyz/atom.xml")
+    (mkSource [ "japanese" "language" "old" ] "http://feeds.feedburner.com/LocalizingJapan")
+    (mkSource [ "japanese" "language" ] "https://wesleycrobertson.wordpress.com/feed/")
+    (mkSource [ "tech" "vim" "old" ] "https://castel.dev/rss.xml")
+    (mkSource [ "tech" "functional-programming" "old" ] "https://skilpat.tumblr.com/rss")
+    (mkSource [ "tech" ] "https://resocoder.com/feed/")
+
+    # Broken?
+    (mkSource [ "tech" "linux" "nixos" ] "https://flyx.org/feed.xml")
  ];
 }
@@ -1,9 +1,6 @@
 { ... }:
 {
-  imports = [ ./fetch-nix-index-database.nix ];
-
  programs.nix-index = {
-    enable = true;
-    enableDatabaseFetcher = true;
+    autoUpdateDatabase.enable = true;
  };
-}
+}
@@ -0,0 +1,30 @@
+{ config, lib, ... }:
+{
+  sops = {
+    secrets = {
+      "nix/access-tokens/github" = { sopsFile = ./../../secrets/common.yaml; };
+      "nix/access-tokens/pvv-git" = { sopsFile = ./../../secrets/common.yaml; };
+    };
+    templates."nix-access-tokens.conf".content = let
+      inherit (config.sops) placeholder;
+
+      tokens = {
+        "github.com" = placeholder."nix/access-tokens/github";
+        "git.pvv.ntnu.no" = placeholder."nix/access-tokens/pvv-git";
+      };
+    in "access-tokens = ${lib.pipe tokens [
+      lib.attrsToList
+      (builtins.sort (p: q: p.name > q.name))
+      (map ({ name, value }: "${name}=${value}"))
+      (builtins.concatStringsSep " ")
+    ]}";
+  };
+
+  nix = {
+    enable = true;
+    settings.use-xdg-base-directories = true;
+    extraOptions = ''
+      !include ${config.sops.templates."nix-access-tokens.conf".path}
+    '';
+  };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.nushell = { };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.nyxt = { };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.obs-studio = { };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.obsidian = { };
+}
@@ -0,0 +1,4 @@
+{ ... }:
+{
+  programs.pandoc = { };
+}
--- a/Show More
+++ b/Show More