From 4e28ca9b48ebc656d59616c03f0bdcfab63b1150 Mon Sep 17 00:00:00 2001 From: KptltD00M Date: Tue, 23 Jun 2026 22:23:40 +0200 Subject: [PATCH] Remove unused configurations and packages from laptop setup - Removed USBGuard configuration and its associated comments from configuration.nix. - Cleaned up flake.nix by removing unnecessary overlays. - Updated home.nix to remove references to Helium and Proton, and added Steam. - Deleted secrets.default.nix and secrets.secrets.yaml files for security reasons. - Removed Omen laptop specific configuration from omen.nix. - Deleted vencord.nix as it is no longer needed. --- docs/GROUPS-REMOTE.md | 141 +++++++++++++++++++++++ docs/GROUPS.md | 14 ++- flake.nix | 13 +-- home/programs/group/basic-apps.nix | 47 +++++--- home/programs/group/dev-packages.nix | 12 +- home/programs/group/misc.nix | 3 - home/programs/librewolf/default.nix | 51 -------- home/programs/librewolf/system.nix | 75 ------------ home/system/hyprland/bindings.nix | 10 +- hosts/home-pc/configuration.nix | 20 +--- hosts/home-pc/hardware-configuration.nix | 2 +- hosts/home-pc/home.nix | 4 +- hosts/home-pc/secrets/default.nix | 58 ---------- hosts/home-pc/secrets/secrets.yaml | 19 --- hosts/laptop/configuration.nix | 18 +-- hosts/laptop/flake.nix | 3 +- hosts/laptop/home.nix | 7 +- hosts/laptop/secrets/default.nix | 61 ---------- hosts/laptop/secrets/secrets.yaml | 20 ---- nixos/omen.nix | 64 ---------- nixos/vencord.nix | 5 - 21 files changed, 209 insertions(+), 438 deletions(-) create mode 100644 docs/GROUPS-REMOTE.md delete mode 100644 home/programs/librewolf/default.nix delete mode 100644 home/programs/librewolf/system.nix delete mode 100644 hosts/home-pc/secrets/default.nix delete mode 100644 hosts/home-pc/secrets/secrets.yaml delete mode 100644 hosts/laptop/secrets/default.nix delete mode 100644 hosts/laptop/secrets/secrets.yaml delete mode 100644 nixos/omen.nix delete mode 100644 nixos/vencord.nix diff --git a/docs/GROUPS-REMOTE.md b/docs/GROUPS-REMOTE.md new file mode 100644 index 0000000..4a628d8 --- /dev/null +++ b/docs/GROUPS-REMOTE.md @@ -0,0 +1,141 @@ +# Using Groups with a Different Remote Origin URL + +When your repository URL differs from the default `github:anotherhadi/nixy`, you need to update the input URL in your consuming flake. Here's how to use the groups with any remote URL. + +## Update the Input in Your Flake + +### Example 1: GitHub URL +```nix +inputs.nixy.url = "github:yourusername/nixy"; +``` + +### Example 2: GitLab URL +```nix +inputs.nixy.url = "gitlab:yourusername/nixy"; +``` + +### Example 3: Gitea URL (like the current origin) +```nix +inputs.nixy.url = "gitea:yourusername/nixy.git"; +``` + +### Example 4: SSH URL +```nix +inputs.nixy.url = "git+ssh://git@github.com/yourusername/nixy.git"; +``` + +### Example 5: Local file path (for development/testing) +```nix +inputs.nixy.url = "path:/path/to/nixy"; +``` + +## Using Groups in Home Manager + +Once the input URL is configured, you can import any group module: + +```nix +{ inputs, ... }: { + imports = [ + inputs.nixy.homeManagerModules.cybersecurity + # inputs.nixy.homeManagerModules.dev + # inputs.nixy.homeManagerModules.basic-apps + # inputs.nixy.homeManagerModules.misc + ]; +} +``` + +This will: +- Install all packages from the cybersecurity group +- Set up `~/Cyber/wordlists/` directory with SecLists, fuzz4bounty, and hashcat rules +- Create `~/Cyber/tmp/` as a temporary workspace + +## Using Groups in nix shell + +For a quick shell with the group's packages without installing: + +```sh +nix shell yourusername/nixy#cybersecurity +nix shell yourusername/nixy#dev +``` + +Replace `yourusername/nixy` with the actual path to the flake. + +## Important Notes + +### 1. Group Output Names Must Match + +The group names available in your local flake (`flake.nix`) are defined in the `homeManagerModules` output. Currently these groups are defined: + +- `dev` - Go, Bun, Air, and other development tools +- `cybersecurity` - Security tools (nmap, john, dirb, ffuf, etc.) +- `basic-apps` - Basic applications +- `misc` - Miscellaneous packages + +### 2. Access to Groups vs Packages + +There are two ways to access groups: + +- **`inputs.nixy.homeManagerModules.`** - For Home Manager integration (packages + files + systemd units) +- **`inputs.nixy.packages.`** - For standalone environments (packages only) + +Both require the same input URL configuration. + +### 3. Flake Lock Consistency + +After changing the input URL, run: + +```sh +nix flake lock --update-input nixy +``` + +or + +```sh +nix flake update +``` + +This ensures the `flake.lock` file references the correct commit. + +### 4. Using with Multiple Remote URLs + +If you need to reference the same flake from different remotes, you can specify multiple inputs: + +```nix +inputs = { + nixy-main.url = "github:anotherhadi/nixy"; + nixy-personal.url = "github:yourusername/nixy"; + + # Then reference them as inputs.nixy-main.homeManagerModules.cybersecurity + # or inputs.nixy-personal.packages.dev +}; +``` + +### 5. Checking Available Groups + +You can check which groups are available by inspecting the flake output: + +```sh +nix flake show yourusername/nixy#groups +``` + +This will display all available outputs including the `homeManagerModules` and `packages` groups. + +## Troubleshooting + +### Error: "Unknown flake output" + +**Cause:** The input URL points to a location that doesn't have the expected flake structure. + +**Solution:** Verify the repository has the expected flake.nix and the correct outputs are defined. + +### Error: "Not a flake" + +**Cause:** The input URL might be pointing to a non-git repository or a branch/tag that doesn't have a flake. + +**Solution:** Check the URL path and ensure it points to a valid git repository with a flake.nix file. + +### Error: "Permission denied" + +**Cause:** Using SSH URLs with read-only access or incorrect credentials. + +**Solution:** Use HTTPS URLs for read-only access, or configure SSH keys properly for SSH URLs. diff --git a/docs/GROUPS.md b/docs/GROUPS.md index a8b6ac4..a462c34 100644 --- a/docs/GROUPS.md +++ b/docs/GROUPS.md @@ -17,10 +17,10 @@ For the Cybersecurity group, the home-manager module also sets up: ## Use in another flake -Add this repo as an input: +Add this repo as an input (update the URL to match your repository): ```nix -inputs.nixy.url = "github:anotherhadi/nixy"; +inputs.nixy.url = "github:yourusername/nixy"; ``` Import the home-manager module in your home configuration: @@ -30,15 +30,21 @@ Import the home-manager module in your home configuration: imports = [ inputs.nixy.homeManagerModules.cybersecurity # inputs.nixy.homeManagerModules.dev + # inputs.nixy.homeManagerModules.basic-apps + # inputs.nixy.homeManagerModules.misc ]; } ``` +See [GROUPS-REMOTE.md](GROUPS-REMOTE.md) for complete documentation on using groups with different remote URLs and troubleshooting tips. + ## Quick shell without installing ```sh -nix shell github:anotherhadi/nixy#cybersecurity -nix shell github:anotherhadi/nixy#dev +nix shell yourusername/nixy#cybersecurity +nix shell yourusername/nixy#dev ``` This drops you into a shell with all tools in `PATH`. No home-manager required, no wordlists or systemd units. + +Replace `yourusername/nixy` with your actual repository path. diff --git a/flake.nix b/flake.nix index 3cd024e..03dec01 100644 --- a/flake.nix +++ b/flake.nix @@ -83,14 +83,13 @@ formatter.${system} = pkgs.alejandra; # Update to modern syntax (no defaultApp) - # Add homeManagerModules output for proper Home Manager integration - homeManagerModules = { - dev = import ./home/programs/group/dev.nix { inherit inputs nixpkgs system; }; - cybersecurity = import ./home/programs/group/cybersecurity.nix { inherit inputs nixpkgs system; }; - basic-apps = import ./home/programs/group/basic-apps.nix { inherit inputs nixpkgs system; }; - misc = import ./home/programs/group/misc.nix { inherit inputs nixpkgs system; }; - }; + #homeManagerModules = { + # dev = import ./home/programs/group/dev.nix { inherit inputs nixpkgs system; }; + # cybersecurity = import ./home/programs/group/cybersecurity.nix { inherit inputs nixpkgs system; }; + # basic-apps = import ./home/programs/group/basic-apps.nix { inherit inputs nixpkgs system; }; + # misc = import ./home/programs/group/misc.nix { inherit inputs nixpkgs system; }; + #}; nixosConfigurations = { thinkpad = import ./hosts/laptop/flake.nix args; diff --git a/home/programs/group/basic-apps.nix b/home/programs/group/basic-apps.nix index e9394fd..1c5a5b2 100644 --- a/home/programs/group/basic-apps.nix +++ b/home/programs/group/basic-apps.nix @@ -4,19 +4,13 @@ pkgs-nur-hadi, ... }: { - home.packages = with pkgs-stable; [ - vlc # Video player + home.packages = (with pkgs-stable; [ + + vlc # Video player obsidian # Note taking app - textpieces # Manipulate texts - resources # Ressource monitor - gnome-clocks # Clocks app - gnome-text-editor # Basic graphic text editor + ticktick # Todo app - pinta # Image editor - switcheroo # Convert images between different formats onlyoffice-desktopeditors # Office suite - blanket # Listen to different sounds - signal-desktop # Messaging app librewolf # Backup browser # I love TUIs @@ -27,19 +21,40 @@ tealdeer # Fast tldr client sttr # Minimalist "cyberchef" like. Cross-platform, cli app to perform various operations on string wiremix # Simple TUI mixer for PipeWire - slides # A terminal-based presentation tool that allows you to create and deliver presentations directly from the command line + pom # Pomodoro timer in your terminal pkgs.wifitui # TUI for managing wifi pkgs-nur-hadi.usbguard-tui # TUI for managing USBGuard rules - pkgs-nur-hadi.sheets # Terminal based spreadsheet tool + # I love CLIs httpie # Command-line HTTP client, a user-friendly cURL replacement - gh # GitHub - gh-dash # A terminal dashboard for GitHub - figlet # Transform text into ASCII art pastel # Command-line tool to generate, analyze, convert and manipulate colors imagemagick # Image manipulation tool chafa # Image to ANSI/Unicode converter and more. - ]; + + /* + Disabled + resources # Ressource monitor + + textpieces # Manipulate texts + gnome-clocks # Clocks app + gnome-text-editor # Basic graphic text editor + pinta # Image editor + switcheroo # Convert images between different formats + signal-desktop # Messaging app + + blanket # Listen to different sounds + gh # GitHub + gh-dash # A terminal dashboard for GitHub + figlet # Transform text into ASCII art + pkgs-nur-hadi.sheets # Terminal based spreadsheet tool + slides # A terminal-based presentation tool that allows you to create and deliver presentations directly from the command line + */ + + ]) + + ++ (with pkgs; [ + vencord # Vencord Discord Mod + ]); } diff --git a/home/programs/group/dev-packages.nix b/home/programs/group/dev-packages.nix index 5e3d182..9100daa 100644 --- a/home/programs/group/dev-packages.nix +++ b/home/programs/group/dev-packages.nix @@ -4,14 +4,16 @@ }: (with pkgs; [ go - #claude-code + zig + + zed-editor #Zed + vscodium # VS Code ]) ++ (with pkgs-stable; [ - nodejs - air - duckdb + bun python3 jq - nix-prefetch-github rsync + rustc + cargo ]) diff --git a/home/programs/group/misc.nix b/home/programs/group/misc.nix index 436a462..9e57061 100644 --- a/home/programs/group/misc.nix +++ b/home/programs/group/misc.nix @@ -5,12 +5,9 @@ ... }: { home.packages = with pkgs-stable; [ - tty-solitaire - bastet peaclock cbonsai pipes - cmatrix fastfetch ]; } diff --git a/home/programs/librewolf/default.nix b/home/programs/librewolf/default.nix deleted file mode 100644 index 48b5c5f..0000000 --- a/home/programs/librewolf/default.nix +++ /dev/null @@ -1,51 +0,0 @@ -{ config, pkgs, lib, ... }: - -let - librewolfPkg = pkgs.librewolf; - -in { - programs.librewolf = { - enable = true; - package = librewolfPkg; - - profiles.default = { - isDefault = true; - - settings = { - # UI / behavior - "browser.startup.homepage" = "https://duckduckgo.com"; - "browser.newtabpage.enabled" = false; - - # Privacy baseline (LibreWolf already hardens most of this) - "privacy.resistFingerprinting" = true; - "privacy.trackingprotection.enabled" = true; - - # Disable telemetry completely - "toolkit.telemetry.enabled" = false; - "toolkit.telemetry.unified" = false; - - # Network / DNS (optional redundancy with policies) - "network.trr.mode" = 3; - "network.trr.uri" = "https://dns.quad9.net/dns-query"; - - # UI behavior - "browser.tabs.warnOnClose" = false; - "browser.quitShortcut.disabled" = true; - - # Security tightening - "dom.event.clipboardevents.enabled" = false; - "geo.enabled" = false; - "media.autoplay.default" = 5; - }; - - extensions.packages = with pkgs.nur.repos.rycee.firefox-addons; [ - ublock-origin - firefox-multi-account-containers - noscript - ]; - }; - }; - - # Make LibreWolf default browser - home.sessionVariables.BROWSER = "${librewolfPkg}/bin/librewolf"; -} diff --git a/home/programs/librewolf/system.nix b/home/programs/librewolf/system.nix deleted file mode 100644 index f558ba6..0000000 --- a/home/programs/librewolf/system.nix +++ /dev/null @@ -1,75 +0,0 @@ -{ ... }: { - - programs.librewolf = { - enable = true; - - policies = { - # ----------------------- - # Privacy / telemetry - # ----------------------- - DisableTelemetry = true; - DisableFirefoxStudies = true; - DisablePocket = true; - - # ----------------------- - # Accounts / sync - # ----------------------- - OfferToSaveLogins = false; - PasswordManagerEnabled = false; - SyncDisabled = true; - - # ----------------------- - # Security baseline - # ----------------------- - DefaultCookiesSetting = 1; - DefaultGeolocationSetting = 2; - DefaultNotificationsSetting = 2; - DefaultPopupsSetting = 2; - - # ----------------------- - # DNS over HTTPS - # ----------------------- - DNSOverHTTPS = { - Enabled = true; - ProviderURL = "https://dns.quad9.net/dns-query"; - Locked = true; - }; - - # ----------------------- - # Search engine - # ----------------------- - SearchEngines = { - Default = "Startpage"; - PreventInstalls = true; - }; - - # ----------------------- - # UI restrictions - # ----------------------- - Homepage = { - URL = "https://duckduckgo.com"; - StartPage = "homepage"; - }; - - ShowHomeButton = false; - BookmarkBar = false; - - # ----------------------- - # Extensions (optional enforcement) - # ----------------------- - ExtensionSettings = { - "uBlock0@raymondhill.net" = { - installation_mode = "force_installed"; - }; - - "multi-account-containers@mozilla.org" = { - installation_mode = "force_installed"; - }; - - "{73a6fe31-595d-460b-a920-fcc0f8843232}" = { - installation_mode = "force_installed"; # NoScript - }; - }; - }; - }; -} diff --git a/home/system/hyprland/bindings.nix b/home/system/hyprland/bindings.nix index 2da3577..526c782 100644 --- a/home/system/hyprland/bindings.nix +++ b/home/system/hyprland/bindings.nix @@ -53,12 +53,12 @@ in { { key = "c"; desc = "Proton Calendar"; - cmd = "${config.programs.helium.package}/bin/helium 'https://calendar.proton.me/'"; + cmd = "${config.programs.librewolf.package}/bin/helium 'https://calendar.proton.me/'"; } { key = "m"; desc = "Proton Mail"; - cmd = "${config.programs.helium.package}/bin/helium 'https://mail.proton.me/'"; + cmd = "${config.programs.librewolf.package}/bin/helium 'https://mail.proton.me/'"; } { key = "o"; @@ -78,17 +78,17 @@ in { { key = "b"; desc = "Helium"; - cmd = "${config.programs.helium.package}/bin/helium"; + cmd = "${config.programs.librewolf.package}/bin/helium"; } { key = "i"; desc = "Helium (Incognito)"; - cmd = "${config.programs.helium.package}/bin/helium --incognito"; + cmd = "${config.programs.librewolf.package}/bin/helium --incognito"; } ]) ) - "$mod,B, exec, uwsm app -- ${config.programs.helium.package}/bin/helium" # Browser + "$mod,B, exec, uwsm app -- ${config.programs.librewolf.package}/bin/helium" # Browser # Power "$mod, X, global, caelestia:session" # Powermenu diff --git a/hosts/home-pc/configuration.nix b/hosts/home-pc/configuration.nix index 2b50535..937eaef 100644 --- a/hosts/home-pc/configuration.nix +++ b/hosts/home-pc/configuration.nix @@ -13,10 +13,9 @@ ../../nixos/utils.nix ../../nixos/hyprland.nix - ../../nixos/vencord.nix - ../../nixos/steam.nix + ../../nixos/amd-graphics.nix - ../../home/programs/helium/system.nix # I hate browser's configuration.. + ../../nixos/steam.nix # You should let those lines as is ./hardware-configuration.nix @@ -25,21 +24,6 @@ home-manager.users."${config.var.username}" = import ./home.nix; - # USBGuard: - # Allow all USB devices until a proper policy is configured. - # Run `sudo usbguard generate-policy` with your devices plugged in, - # then set rules = "" and switch implicitPolicyTarget to "block". - # services.usbguard.implicitPolicyTarget = lib.mkForce "allow"; - services.usbguard.rules = '' - allow id 1d6b:0002 serial "0000:00:14.0" name "xHCI Host Controller" hash "jEP/6WzviqdJ5VSeTUY8PatCNBKeaREvo2OqdplND/o=" parent-hash "rV9bfLq7c2eA4tYjVjwO4bxhm+y6GgZpl9J60L0fBkY=" with-interface 09:00:00 with-connect-type "" - allow id 1d6b:0003 serial "0000:00:14.0" name "xHCI Host Controller" hash "prM+Jby/bFHCn2lNjQdAMbgc6tse3xVx+hZwjOPHSdQ=" parent-hash "rV9bfLq7c2eA4tYjVjwO4bxhm+y6GgZpl9J60L0fBkY=" with-interface 09:00:00 with-connect-type "" - allow id 17ef:608d serial "" name "Lenovo USB Optical Mouse" hash "klpDZuv1jhWGNqZLOl+KXF+75Ir3PfBm6D6ncjoLRBU=" parent-hash "jEP/6WzviqdJ5VSeTUY8PatCNBKeaREvo2OqdplND/o=" via-port "1-7" with-interface 03:01:02 with-connect-type "hotplug" - allow id 17ef:6190 serial "" name "Lenovo Calliope USB Keyboard G2" hash "CfZ9R/aoXGm7BN/ojVEzKQwVoxCUtRWMuACrE7BL/5Y=" parent-hash "jEP/6WzviqdJ5VSeTUY8PatCNBKeaREvo2OqdplND/o=" via-port "1-10" with-interface { 03:01:01 03:00:00 } with-connect-type "hotplug" - allow id 0781:5581 name " SanDisk 3.2Gen1" - ''; - - networking.firewall.allowedTCPPorts = [9001]; - # Don't touch this system.stateVersion = "24.05"; } diff --git a/hosts/home-pc/hardware-configuration.nix b/hosts/home-pc/hardware-configuration.nix index 5357795..dfcd5db 100644 --- a/hosts/home-pc/hardware-configuration.nix +++ b/hosts/home-pc/hardware-configuration.nix @@ -21,7 +21,7 @@ "sd_mod" ]; boot.initrd.kernelModules = []; - boot.kernelModules = ["kvm-intel"]; + boot.kernelModules = ["kvm-amd"]; boot.extraModulePackages = []; fileSystems."/" = { diff --git a/hosts/home-pc/home.nix b/hosts/home-pc/home.nix index 0c863b8..c7a9f45 100644 --- a/hosts/home-pc/home.nix +++ b/hosts/home-pc/home.nix @@ -1,8 +1,6 @@ {config, ...}: { imports = [ # Programs - #../../home/programs/proton - ../../home/programs/helium ../../home/programs/ghostty ../../home/programs/nvf ../../home/programs/shell @@ -15,9 +13,9 @@ ../../home/programs/spotatui ../../home/programs/yazi ../../home/programs/steam + #../../home/programs/zen ../../home/programs/group/basic-apps.nix - ../../home/programs/group/cybersecurity.nix ../../home/programs/group/dev.nix ../../home/programs/group/misc.nix diff --git a/hosts/home-pc/secrets/default.nix b/hosts/home-pc/secrets/default.nix deleted file mode 100644 index 093d5f0..0000000 --- a/hosts/home-pc/secrets/default.nix +++ /dev/null @@ -1,58 +0,0 @@ -# Those are my secrets, encrypted with sops -# You shouldn't import this file, unless you edit it -{ - inputs, - pkgs, - config, - ... -}: let - home = config.home.homeDirectory; -in { - imports = [inputs.sops-nix.homeManagerModules.sops]; - - sops = { - age.keyFile = "${home}/.config/sops/age/keys.txt"; - defaultSopsFile = ./secrets.yaml; - secrets = { - ssh-config = { - path = "${home}/.ssh/config"; - }; - netrc = { - path = "${home}/.netrc"; - }; - github-key = { - path = "${home}/.ssh/github"; - }; - gitlab-key = { - path = "${home}/.ssh/gitlab"; - }; - }; - }; - - home.file.".config/nixos/.sops.yaml".text = '' - keys: - - &primary age12yvtj49pfh3fqzqflscm0ek4yzrjhr6cqhn7x89gdxnlykq0xudq5c7334 - - &work age1c8pawdsxptfslgrz2c56s39mrtnjzc5mm3hfzgr2wdwu2v6vfsdsupjsq6 - creation_rules: - - path_regex: hosts/laptop/secrets/secrets.yaml$ - key_groups: - - age: - - *primary - - path_regex: hosts/server/secrets/secrets.yaml$ - key_groups: - - age: - - *primary - - path_regex: hosts/work/secrets/secrets.yaml$ - key_groups: - - age: - - *work - ''; - - systemd.user.services.mbsync.Unit.After = ["sops-nix.service"]; - home.packages = with pkgs; [ - sops - age - ]; - - wayland.windowManager.hyprland.settings.exec-once = ["systemctl --user start sops-nix"]; -} diff --git a/hosts/home-pc/secrets/secrets.yaml b/hosts/home-pc/secrets/secrets.yaml deleted file mode 100644 index ae328cb..0000000 --- a/hosts/home-pc/secrets/secrets.yaml +++ /dev/null @@ -1,19 +0,0 @@ -ssh-config: ENC[AES256_GCM,data:npBcAOSwHpApUASlZmRo4stwMrOjdrdmhfYwumjbTpcq8aQ2ybV8le7cjNdVqIyxgwxUFV4/tGfmsq4nlrWIO/85spwfC5DyPGaZ848NI3UZJj8k2GKuw5qk/xGsTveNhq+vNZQcHeL4aeXF2TRmFLDHYGTku9anFL7FWkQ75MmGW78XfPUEyZJ52ylXq3gkYeVSrl6cXuwJw/QBlu+XTgFk4MM+E5BTXBFFNJOYkIt4GwWX7wdI+QqPEof8J0ENYdxUAMKMueL4pLNclWP0fu7QC7gwwRJWjauCNElJiDhpVFa6WukJV/Ut+I30FH9cJtj0rSodeu0hq2fWaiQ0wVbQudxi0JcnxJQs+B9nb6kpF+TN0MiD,iv:c7DMZSmlgMMnNlR0/kNRKPYjCzvNQJ46mZzojHppSg8=,tag:ausjsFk0H9nOiiMebHXSUg==,type:str] -netrc: ENC[AES256_GCM,data:EOpuZhDVXe7Q4P/98C3gtEvkdawI26d4oX/wRNytyp/mAdkHytXiLpFdsuO/3DADOG8h1CCo1UTs9ex+bqoD/LdChdp7INfNDSQ+aDxTiG0rLBgjvy8TIj8=,iv:tc/RbN1Upbjv+3rU5zUR3P//a1Hj1xODInLMShg4i1Y=,tag:7E9G2g4g+eMeJrwI20R/1g==,type:str] -github-key: ENC[AES256_GCM,data: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,iv:2Mvmz1CFO1112RxjIl6sxyNIDqa/cg00um6RcQaHNY8=,tag:+zygdwQdCBeBXVLvAj/jJQ==,type:str] -gitlab-key: ENC[AES256_GCM,data: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,iv:aG4nqGJ/TRiAtiWoPwqej6We+IWEWFibCqL7bGwXbkA=,tag:c5ckW2o4+2rm/5mrGF1tzg==,type:str] -sops: - age: - - recipient: age1c8pawdsxptfslgrz2c56s39mrtnjzc5mm3hfzgr2wdwu2v6vfsdsupjsq6 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVby9Wa1NUUkpyeDMwU3dM - R0EyeFVtT0tJU0pKaWtXQzRkTDBPY3JjcTFrClNIQnl2WVorS0FZZjhicTQ5V2kx - MUZTZWZtaUk2a1ZhUTBCUnhkWHFIMFUKLS0tIElLcjJLZWNLOUJYN0NNVGFNUEFN - RkMrdTYwNkY1Tlc3M3dxTFdkRXJJZUEKUlYU45jXpS9hJO9Z/uAQ6XMj9QWgMMRI - LbJxvt48+yC+Y0XKOtDE0lHAuGNzUG8R/7FB1tTD8NCamBe46KGCIg== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-04-23T07:50:07Z" - mac: ENC[AES256_GCM,data:V3us1oxkQxIg5hn8TMiSHWa0RhNbio2mP8j59lSCKDLjnpTUHUAUZZOan+fkBwPxxtIdZFVZQl/kZuEHcnNwXk8J0DLeT8jrs8pvlDCHMAc+C9uzThNjQ9CrZ2C/dNtoI6uop3a6qo8UMhKhvAus08yR8rLsY7Gqt/In28HKqxU=,iv:g8wmq1thPfkSSfG+mtJS0431wbon/uylDTfH0P31dlw=,tag:5Z6CJMWeGN6frTLJQMxGGw==,type:str] - unencrypted_suffix: _unencrypted - version: 3.12.2 diff --git a/hosts/laptop/configuration.nix b/hosts/laptop/configuration.nix index c81f585..25d7d6a 100644 --- a/hosts/laptop/configuration.nix +++ b/hosts/laptop/configuration.nix @@ -13,8 +13,8 @@ imports = [ ../../nixos/users.nix ../../nixos/utils.nix ../../nixos/hyprland.nix -../../nixos/usbguard.nix -../../home/programs/helium/system.nix + +../../nixos/steam.nix # Machine-specific files ./hardware-configuration.nix @@ -22,20 +22,6 @@ imports = [ ]; -# Disable the author's USBGuard policy. - -# Generate your own after installation: - -# - -# sudo usbguard generate-policy - -# - -# Then add the generated rules and switch to a stricter policy. - -services.usbguard.enable = false; - home-manager.users."${config.var.username}" = import ./home.nix; system.stateVersion = "24.05"; diff --git a/hosts/laptop/flake.nix b/hosts/laptop/flake.nix index 916c6e7..e1b0f6e 100644 --- a/hosts/laptop/flake.nix +++ b/hosts/laptop/flake.nix @@ -6,8 +6,7 @@ nixpkgs.lib.nixosSystem { modules = [ { - nixpkgs.overlays = [ - ]; + nixpkgs.overlays = []; _module.args = {inherit inputs;}; } inputs.nixos-hardware.nixosModules.omen-16-n0005ne diff --git a/hosts/laptop/home.nix b/hosts/laptop/home.nix index ad8fef1..09b9cfc 100644 --- a/hosts/laptop/home.nix +++ b/hosts/laptop/home.nix @@ -1,24 +1,21 @@ {config, ...}: { imports = [ # Programs - ../../home/programs/helium - ../../home/programs/proton - ../../home/programs/proton/auto-start-vpn.nix ../../home/programs/ghostty ../../home/programs/nvf ../../home/programs/shell ../../home/programs/git ../../home/programs/git/lazygit.nix - ../../home/programs/git/signing.nix # CHANGEME: Change the key or remove this file ../../home/programs/thunar ../../home/programs/nixy ../../home/programs/nightshift ../../home/programs/nix-utils ../../home/programs/spotatui ../../home/programs/yazi + ../../home/programs/steam + #../../home/programs/zen ../../home/programs/group/basic-apps.nix - ../../home/programs/group/cybersecurity.nix ../../home/programs/group/dev.nix ../../home/programs/group/misc.nix diff --git a/hosts/laptop/secrets/default.nix b/hosts/laptop/secrets/default.nix deleted file mode 100644 index eac568f..0000000 --- a/hosts/laptop/secrets/default.nix +++ /dev/null @@ -1,61 +0,0 @@ -# Those are my secrets, encrypted with sops -# You shouldn't import this file, unless you edit it -{ - inputs, - pkgs, - config, - ... -}: let - home = config.home.homeDirectory; -in { - imports = [inputs.sops-nix.homeManagerModules.sops]; - - sops = { - age.keyFile = "${home}/.config/sops/age/keys.txt"; - defaultSopsFile = ./secrets.yaml; - secrets = { - ssh-config = { - path = "${home}/.ssh/config"; - }; - github-key = { - path = "${home}/.ssh/github"; - }; - jack-key = { - path = "${home}/.ssh/jack"; - }; - signing-key = { - path = "${home}/.ssh/key"; - }; - signing-pub-key = { - path = "${home}/.ssh/key.pub"; - }; - }; - }; - - home.file.".config/nixos/.sops.yaml".text = '' - keys: - - &primary age12yvtj49pfh3fqzqflscm0ek4yzrjhr6cqhn7x89gdxnlykq0xudq5c7334 - - &work age1c8pawdsxptfslgrz2c56s39mrtnjzc5mm3hfzgr2wdwu2v6vfsdsupjsq6 - creation_rules: - - path_regex: hosts/laptop/secrets/secrets.yaml$ - key_groups: - - age: - - *primary - - path_regex: hosts/server/secrets/secrets.yaml$ - key_groups: - - age: - - *primary - - path_regex: hosts/work/secrets/secrets.yaml$ - key_groups: - - age: - - *work - ''; - - systemd.user.services.mbsync.Unit.After = ["sops-nix.service"]; - home.packages = with pkgs; [ - sops - age - ]; - - wayland.windowManager.hyprland.settings.exec-once = ["systemctl --user start sops-nix"]; -} diff --git a/hosts/laptop/secrets/secrets.yaml b/hosts/laptop/secrets/secrets.yaml deleted file mode 100644 index 49bcc0f..0000000 --- a/hosts/laptop/secrets/secrets.yaml +++ /dev/null @@ -1,20 +0,0 @@ -ssh-config: ENC[AES256_GCM,data:/TWslzoF2wtZ9T41H1y0wLNEx+Xzff8pQGr6AfEcACExRCv4rd5hD9pNAlmlcTtISJJBPEWY45WsLfSKuD4r3715IENM2biQUvlq47THfkGviQuQ6KAXiJxBQ/7qRNqGGt7WFRlWFRGYCiyjw9h4pOhovGgw8TU6tIgIsXjo0psclHoJoE4B3cSOby7DbN8jVI9NjpBGiQMXmUB3JVz7muC9F5EAs+XZUIl7TjQMxob3PiF5LqTJITODSxboAAk901rjS5gjQKpQKfj28TpUs5yCIo9RzSBO3z5orJy+ylupocRuqtC8ujAMqNb828G+0nRx18tpiGqXxRWUBZRNbM+vQHWzb5JWQpEBsu1twsOownVVrkyPkbLpYX4YSSnRdnL8VHmlZfLk1ZFURbsdDSRf57F+Bxo5Yn8XAkFaM5HYgUo4VBabGzVVAHOBWJWi3lRrlAqYdMBbSvDl1t6eQ0xp990RGh7wZvwnaTDqtkOJnLoAknTFi4yjMzSyk5UV,iv:1UJQU4eBZE1BMVnJY2CQTDH8jXSMlrv3gGU3cKTOvdU=,tag:OzLQRkTAKG2KQXv+Vh7Msw==,type:str] -github-key: ENC[AES256_GCM,data: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,iv:GEJsAs5NriwENYTV/VShgJF6iMmrtTwNiXOvfXyEP8E=,tag:nfZgsFqaet075GjQAoVZxQ==,type:str] -jack-key: ENC[AES256_GCM,data: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,iv:oC1xU5Tu3The105VYRmxIw4kEwDoqe8T/EH6mmqpqwQ=,tag:Pu8c536u6W7ALrqjRsvXDw==,type:str] -signing-key: ENC[AES256_GCM,data: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,iv:KNQUlMPaiR4x1Fw+HZe/EOmh/gfsrqlefpq23uflz/8=,tag:illu42HKunQXnijjsUIvnQ==,type:str] -signing-pub-key: ENC[AES256_GCM,data:XuokZmCsnaNQ0rvVa3k81T4vtxw//r63xp1yHDLaNAMwA2r2bh6addl9WoAmm76g1rweqZrAAIw1PXDb90ubPaBP1iEHSkGZpwUpy/tOTePRdHMW2WtVvidpHQ==,iv:auB/bA89cJK6DnQi1BK2uldXRPyJfo+r7nl5qOLefUk=,tag:/I3kB6El1yesBMGOjJ+oHA==,type:str] -sops: - age: - - recipient: age12yvtj49pfh3fqzqflscm0ek4yzrjhr6cqhn7x89gdxnlykq0xudq5c7334 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHVWN4YjZqczB3Q21WL1lz - ckROWkhRditHblVHVEpOS0E0aGVqdW14M0ZvCkNzRXlCOWFBWmQwTGpTYVdFRlpq - bFdOR2pSTEZpUVpvUHo2NklrQm5EU1kKLS0tIFZ5ZWhYcHg1Z0hTOTZIdHR1QUxv - cmVxVC8rVDlWMUdZaGw3bmdOaWZGS1EKYahBlc8XpB5UdKZQkvxbLcKQ/xkFJjWo - FSfQWnjhe/a7BJtJEcKZkjOQU0mYqlSu+uT2RA9diCQeRUJPRF+nAw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-04-25T11:23:30Z" - mac: ENC[AES256_GCM,data:ZnLSwtyhaiMIcXxzlwhtk0dWVnOkn0avfeRezPPNBUXd0oyJY+krBsLXJdSNPHV/X/L58476okYjUzfIQzEAkrL9Fb7v/Jt0aw4SDrxbF+qbcfdvsWPUjFDJIPovuf3ee3o7iXGU2ItGTaJa2eFACoyd37KVc7jZd6gvYYAyULA=,iv:7IKqe0c5CTgJrS7OgCQWhtxaCVKo+UWEibttFUVCWGM=,tag:OfCrKPzrPBZThCR1j7IB7A==,type:str] - unencrypted_suffix: _unencrypted - version: 3.12.2 diff --git a/nixos/omen.nix b/nixos/omen.nix deleted file mode 100644 index cc16439..0000000 --- a/nixos/omen.nix +++ /dev/null @@ -1,64 +0,0 @@ -# Omen laptop configuration for NixOS -# Import this only if you have an HP Omen laptop -{ - config, - pkgs, - ... -}: let - hp-omen-linux-module = pkgs.callPackage ( - { - kernel ? config.boot.kernelPackages.kernel, - stdenv, - fetchFromGitHub, - }: - stdenv.mkDerivation (finalAttrs: { - pname = "hp-omen-linux-module"; - version = "rebase-6.14"; - src = fetchFromGitHub { - owner = "ranisalt"; - repo = "hp-omen-linux-module"; - rev = finalAttrs.version; - sha256 = "sha256-2zCm29bdboSjRm/caMjBPGNc0tZXPUnIIYlHxxfhAok="; - }; - setSourceRoot = '' - export sourceRoot=$(pwd)/${finalAttrs.src.name}/src - ''; - nativeBuildInputs = kernel.moduleBuildDependencies; - makeFlags = [ - "KERNELDIR=${kernel.dev}/lib/modules/${kernel.modDirVersion}/build" - ]; - installPhase = '' - runHook preInstall - install hp-wmi.ko -Dm444 -t $out/lib/modules/${kernel.modDirVersion}/kernel/drivers/platform/x86/hp/ - runHook postInstall - ''; - }) - ) {kernel = config.boot.kernelPackages.kernel;}; -in { - boot.extraModulePackages = [hp-omen-linux-module]; - boot.kernelModules = ["hp-wmi"]; - boot.kernelParams = ["hp_wmi.force_slow_fan_control=1"]; - - users.groups.omen-rgb = {}; - users.users.${config.var.username}.extraGroups = ["omen-rgb"]; - - systemd.tmpfiles.rules = [ - "w /sys/devices/platform/hp-wmi/rgb_zones/zone00 0660 root omen-rgb -" - "w /sys/devices/platform/hp-wmi/rgb_zones/zone01 0660 root omen-rgb -" - "w /sys/devices/platform/hp-wmi/rgb_zones/zone02 0660 root omen-rgb -" - "w /sys/devices/platform/hp-wmi/rgb_zones/zone03 0660 root omen-rgb -" - ]; - - services.udev.extraRules = '' - SUBSYSTEM=="platform", KERNEL=="hp-wmi", ACTION=="add", \ - RUN+="${pkgs.coreutils-full}/bin/sleep 2", \ - RUN+="${pkgs.coreutils}/bin/chgrp omen-rgb /sys/devices/platform/hp-wmi/rgb_zones/zone00", \ - RUN+="${pkgs.coreutils}/bin/chmod 0660 /sys/devices/platform/hp-wmi/rgb_zones/zone00", \ - RUN+="${pkgs.coreutils}/bin/chgrp omen-rgb /sys/devices/platform/hp-wmi/rgb_zones/zone01", \ - RUN+="${pkgs.coreutils}/bin/chmod 0660 /sys/devices/platform/hp-wmi/rgb_zones/zone01", \ - RUN+="${pkgs.coreutils}/bin/chgrp omen-rgb /sys/devices/platform/hp-wmi/rgb_zones/zone02", \ - RUN+="${pkgs.coreutils}/bin/chmod 0660 /sys/devices/platform/hp-wmi/rgb_zones/zone02", \ - RUN+="${pkgs.coreutils}/bin/chgrp omen-rgb /sys/devices/platform/hp-wmi/rgb_zones/zone03", \ - RUN+="${pkgs.coreutils}/bin/chmod 0660 /sys/devices/platform/hp-wmi/rgb_zones/zone03" - ''; -} diff --git a/nixos/vencord.nix b/nixos/vencord.nix deleted file mode 100644 index 9d2b875..0000000 --- a/nixos/vencord.nix +++ /dev/null @@ -1,5 +0,0 @@ -{ pkgs, ... }: { - environment.systemPackages = with pkgs; [ - vencord - ]; -}