plumjam/nixos - Change D34IHX4LZP3KRI7PNXYOMJS66EIESOXLUJNPALTBCMRMQA5EOVCAC

hosts: Add lime host and fixes for compatibility.

I'm going to clean this up soon as well as the conditionals etc.

Created by PlumJam on January 29, 2026

D34IHX4LZP3KRI7PNXYOMJS66EIESOXLUJNPALTBCMRMQA5EOVCAC

Dependencies

In channels

main

Change contents

File addition: lime (d--x------)
[3.6]
File addition: edee96e2db20d70b2bd0515b38f95353-s3SecretKey.age (----------)
[0.55]
File addition: c8347fa8f39622fa687c53f3d0a4c5ff-id.age (----------)
[0.55]
File addition: c0453ebccf21a04efed0f605b9e40282-context7Key.age (----------)
[0.55]
File addition: a39ae6a58fd0d99d0bbc2855cfa2067f-zaiKey.age (----------)
[0.55]
File addition: 9bd61b4e4f70af5f5dd8a148ef22faa8-s3AccessKey.age (----------)
[0.55]
File addition: lime-id.age (----------)
[4.2]
Replacement in modules/yubikey.nix at line 2 [5.1286]
B:BD[5.1289] → [6.100:131]
```
  flake.modules.hjem.yubikey =
```
[5.1289]
[7.69]
```
  flake.modules.nixos.yubikey =
    { pkgs, ... }:
```
Replacement in modules/yubikey.nix at line 5 [5.1286]
B:BD[7.75] → [7.75:132]
∅:D[7.132] → [5.1353:1361]
B:BD[5.1353] → [5.1353:1361]
B:BD[5.1361] → [7.133:167]
∅:D[7.167] → [5.1361:1380]
B:BD[5.1361] → [5.1361:1380]
```
      pkgs,
      lib,
      isDesktop,
      ...
    }:
    let
      inherit (lib.modules) mkIf;
      packages = [
```
[7.75]
[5.1380]
```
      environment.systemPackages = [
```
Insertion in modules/yubikey.nix at line 9 [5.1286]
[5.1479]
[5.1479]
Deletion in modules/yubikey.nix at line 11 [5.1286]
B:BD[5.1488] → [5.1488:1495]
B:BD[5.1495] → [7.168:189]
∅:D[7.189] → [5.1501:1532]
B:BD[5.1501] → [5.1501:1532]
```
    in
    mkIf isDesktop {
      inherit packages;
    };
```
Deletion in modules/yubikey.nix at line 12 [5.1286]
B:BD[5.1533] → [6.132:164]
∅:D[6.164] → [5.1579:1604]
∅:D[8.187] → [5.1579:1604]
B:BD[5.1579] → [5.1579:1604]
```
  flake.modules.nixos.yubikey =
    { pkgs, ... }:
    {
```

Insertion in modules/yubikey.nix at line 37 [5.1286]

[5.2165]

      environment.systemPackages = [
        pkgs.yubikey-personalization
        pkgs.age-plugin-yubikey
      ];

Insertion in modules/window-manager.nix at line 18 [5.63765]
[7.3213]
[9.222]
```
      isLinux,
```
Replacement in modules/window-manager.nix at line 27 [5.63765]
B:BD[5.63970] → [7.3249:3270]
```
    mkIf isDesktop {
```
[5.63970]
[9.240]
```
    mkIf (isDesktop && isLinux) {
```
Replacement in modules/unfree.nix at line 1 [5.13974]
B:BD[5.13974] → [10.4702:4723]
```
let
  commonModule =
```
[5.13974]
[5.14022]
```
{
  flake.modules.nixos.unfree =
```

Replacement in modules/unfree.nix at line 24 [5.13974]

B:BD[5.15002] → [10.4880:4885]

B:BD[10.4885] → [6.690:781]

in
{
  flake.modules.nixos.unfree = commonModule;
  flake.modules.darwin.unfree = commonModule;

[5.15002]

[5.15131]

  flake.modules.darwin.unfree = {
    config.nixpkgs.config.allowUnfree = true; # Only blanket allow is possible on nix-darwin.
  };

Insertion in modules/theme.nix at line 241 [11.82]

[11.5730]

[6.800]

  flake.modules.darwin.theme =
    { pkgs, ... }:
    let
      theme = mkThemeConfig { inherit pkgs; };
    in
    {
      options.theme = mkOption {
        type = attrs;
        default = { };
        description = "Global theme configuration";
      };
      config = {
        theme = theme.designSystem // {
          inherit (theme)
            themes
            isDark
            colorScheme
            variant
            colors
            ;
          withHash = mapAttrs (_name: value: "#${value}") theme.colors;
          with0x = mapAttrs (_name: value: "0x${value}") theme.colors;
          withRgb = mapAttrs (_name: value: theme.hexToRgb value) theme.colors;
          icons = theme.getTheme "icons";
          alacritty = theme.getTheme "alacritty";
          ghostty = theme.getTheme "ghostty";
          rio = theme.getTheme "rio";
          zellij = theme.getTheme "zellij";
          starship = theme.getTheme "starship";
          vivid = theme.getTheme "vivid";
          nushell = theme.getTheme "nushell";
          helix = theme.getTheme "helix";
          gtk = theme.getTheme "gtk";
          qt = theme.getTheme "qt";
          font = {
            size.tiny = 10;
            size.small = 12;
            size.term = 12;
            size.normal = 16;
            size.big = 20;
            mono.name = "Maple Mono NF";
            mono.family = "Maple Mono";
            mono.package = pkgs.maple-mono.NF;
            sans.name = "Lexend";
            sans.family = "Lexend";
            sans.package = pkgs.lexend;
          };
        };
      };
    };

Replacement in modules/ssh.nix at line 50 [12.89]

B:BD[12.1666] → [6.1439:1474]

∅:D[6.1474] → [13.278:331]

B:BD[13.278] → [13.278:331]

  flake.modules.darwin.openssh = {
    config = {
      services.openssh.enable = true;

[12.1666]

[12.1759]

  flake.modules.darwin.openssh = { config, ... }: {
    services.openssh = {
      enable = true;
      extraConfig = # sshd_config
        ''
          HostKey ${config.age.secrets.id.path}
          PasswordAuthentication no
          KbdInteractiveAuthentication no
          AcceptEnv SHELLS COLORTERM
        '';

Replacement in modules/secret-manager.nix at line 21 [8.249]

B:BD[8.356] → [8.356:396]

    inherit (self) nixosConfigurations;

[8.356]

[8.396]

    nixosConfigurations = self.nixosConfigurations // self.darwinConfigurations;

Replacement in modules/secret-manager.nix at line 43 [8.249]

B:BD[8.787] → [6.1662:1704]

∅:D[6.1704] → [8.836:903]

B:BD[8.836] → [8.836:903]

  flake.modules.darwin.secret-manager = {
    imports = [
      inputs.age.darwinModules.default
    ];
  };

[8.787]

[8.903]

  flake.modules.darwin.secret-manager =
    { config, pkgs, ... }:
    let
      # Import the agenix-rekey module without the _class attribute.
      # We need to import it with a wrapper that makes it compatible with darwin.
      agenixRekeyModule = import (inputs.age-rekey + /modules/agenix-rekey.nix) pkgs;
    in
    {
      imports = [
        inputs.age.darwinModules.default
        agenixRekeyModule
      ];
      config.age = {
        identityPaths = [ "/Users/jam/.ssh/id" ];
        rekey = {
          storageMode = "local";
          masterIdentities = [ ../yubikey.pub ];
          localStorageDir = ../secrets/rekeyed/${config.networking.hostName};
        };
      };
    };

Insertion in modules/hosts.nix at line 388 [14.110]
[14.2335]
[14.2335]
```
      lib
```
Deletion in modules/hosts.nix at line 391 [14.110]
B:BD[14.2363] → [15.11593:11614]
```
      object-storage
```
Insertion in modules/hosts.nix at line 397 [14.110]
[14.2464]
[14.2464]
```
      theme
```

Replacement in modules/hosts.nix at line 407 [14.110]

B:BD[14.2623] → [2.7395:7490]

          unfree.allowedNames = [
            "claude-code"
            "raycast"
          ];

[14.2623]

[14.2693]

          age.rekey.hostPubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPeG5tRLj+z0LlAhH60rQuvRarHWuYE+fYMEgPvGbMrW jam@lime";
          age.secrets = {
            id.rekeyFile = ../secrets/lime-id.age;
            s3AccessKey.rekeyFile = ../secrets/s3-access-key.age;
            s3SecretKey.rekeyFile = ../secrets/s3-secret-key.age;
            context7Key = {
              rekeyFile = ../secrets/context7-key.age;
              owner = "jam";
              mode = "400";
            };
            zaiKey = {
              rekeyFile = ../secrets/z-ai-key.age;
              owner = "jam";
              mode = "400";
            };
          };

Replacement in modules/home.nix at line 73 [17.111]
∅:D[16.9693] → [17.1365:1425]
B:BD[17.1365] → [17.1365:1425]
```
      hjemModule = inputs.hjem-modules.hjemModules.default;
```
[16.9693]
[16.9694]
```
      hjemModule = inputs.hjem-rum.hjemModules.default;
```

Replacement in modules/home.nix at line 84 [17.111]

B:BD[17.1763] → [7.4734:4796]

          hjem.specialArgs = commonSpecialArgs config inputs;

[17.1763]

[17.1872]

          hjem.specialArgs = commonSpecialArgs config inputs // {
            inherit (config) theme;
          };

Insertion in modules/desktop-gui.nix at line 28 [5.99309]
[7.5214]
[7.5214]
```
      isLinux,
```
Replacement in modules/desktop-gui.nix at line 35 [5.99309]
B:BD[5.99436] → [7.5267:5288]
```
    mkIf isDesktop {
```
[5.99436]
[5.99442]
```
    mkIf (isDesktop && isLinux) {
```

hosts: Add lime host and fixes for compatibility.

Dependencies

In channels

Change contents

File addition: lime (d--x------)

File addition: edee96e2db20d70b2bd0515b38f95353-s3SecretKey.age (----------)

File addition: c8347fa8f39622fa687c53f3d0a4c5ff-id.age (----------)

File addition: c0453ebccf21a04efed0f605b9e40282-context7Key.age (----------)

File addition: a39ae6a58fd0d99d0bbc2855cfa2067f-zaiKey.age (----------)

File addition: 9bd61b4e4f70af5f5dd8a148ef22faa8-s3AccessKey.age (----------)

File addition: lime-id.age (----------)

Replacement in modules/yubikey.nix at line 2 [5.1286]

Replacement in modules/yubikey.nix at line 5 [5.1286]

Insertion in modules/yubikey.nix at line 9 [5.1286]

Deletion in modules/yubikey.nix at line 11 [5.1286]

Deletion in modules/yubikey.nix at line 12 [5.1286]

Insertion in modules/yubikey.nix at line 37 [5.1286]

Insertion in modules/window-manager.nix at line 18 [5.63765]

Replacement in modules/window-manager.nix at line 27 [5.63765]

Replacement in modules/unfree.nix at line 1 [5.13974]

Replacement in modules/unfree.nix at line 24 [5.13974]

Insertion in modules/theme.nix at line 241 [11.82]

Replacement in modules/ssh.nix at line 50 [12.89]

Replacement in modules/secret-manager.nix at line 21 [8.249]

Replacement in modules/secret-manager.nix at line 43 [8.249]

Insertion in modules/hosts.nix at line 388 [14.110]

Deletion in modules/hosts.nix at line 391 [14.110]

Insertion in modules/hosts.nix at line 397 [14.110]

Replacement in modules/hosts.nix at line 407 [14.110]

Replacement in modules/home.nix at line 73 [17.111]

Replacement in modules/home.nix at line 84 [17.111]

Insertion in modules/desktop-gui.nix at line 28 [5.99309]

Replacement in modules/desktop-gui.nix at line 35 [5.99309]