plumjam/nixos - Change E5WANV7PYNPZFSJE4AMZABQ76TUNKVZN3M6ZFD5V6CKAFKG444NAC

hosts: Add yuzu and date hosts with desktop configs.

Quite a large commit but I set everything up to have a decent start on both my laptop (date) and desktop (yuzu).

Also rekeyed age files after adding new public keys for the new hosts.

Created by PlumJam on September 20, 2025

E5WANV7PYNPZFSJE4AMZABQ76TUNKVZN3M6ZFD5V6CKAFKG444NAC

Dependencies

In channels

main

Change contents

Replacement in secrets.nix at line 2 [10.1]

B:BD[10.6] → [11.1:61]

	inherit (import ./keys.nix) jam plum pear kiwi all admins;

[10.6]

[10.121]

	inherit (import ./keys.nix) jam plum pear kiwi yuzu date all admins;

Replacement in secrets.nix at line 5 [10.1]

B:BD[10.126] → [12.1:220]

	"hosts/plum/id.age".publicKeys                    = [ plum ] ++ admins;
	"hosts/plum/password.age".publicKeys              = [ plum ] ++ admins;
	"hosts/plum/forgejo-password.age".publicKeys      = [ plum ] ++ admins;

[10.126]

[13.1]

	"hosts/plum/id.age".publicKeys               = [ plum ] ++ admins;
	"hosts/plum/password.age".publicKeys         = [ plum ] ++ admins;
	"hosts/plum/forgejo-password.age".publicKeys = [ plum ] ++ admins;

Replacement in secrets.nix at line 16 [10.1]

B:BD[14.206] → [14.206:274]

∅:D[14.274] → [15.70:139]

B:BD[15.70] → [15.70:139]

	"hosts/kiwi/id.age".publicKeys               = [ kiwi ] ++ admins;
  "hosts/kiwi/password.age".publicKeys         = [ kiwi ] ++ admins;

[14.206]

[14.275]

	"hosts/kiwi/id.age".publicKeys       = [ kiwi ] ++ admins;
  "hosts/kiwi/password.age".publicKeys = [ kiwi ] ++ admins;
  "hosts/pear/id.age".publicKeys       = [ pear ] ++ admins;
	"hosts/pear/password.age".publicKeys = [ pear ] ++ admins;

Replacement in secrets.nix at line 22 [10.1]

∅:D[14.276] → [15.208:277]

B:BD[15.208] → [15.208:277]

B:BD[15.277] → [6.1:69]

  "hosts/pear/id.age".publicKeys               = [ pear ] ++ admins;
	"hosts/pear/password.age".publicKeys         = [ pear ] ++ admins;

[14.276]

[14.277]

	"hosts/date/id.age".publicKeys       = [ date ] ++ admins;
	"hosts/date/password.age".publicKeys = [ date ] ++ admins;
	"hosts/yuzu/id.age".publicKeys       = [ yuzu ] ++ admins;
	"hosts/yuzu/password.age".publicKeys = [ yuzu ] ++ admins;

Insertion in modules/system.nix at line 16 [17.3]
[16.219]
[17.413]
```
    isGaming = mkValue false;
```

File addition: waybar.nix (----------)

[18.77]

{ config, lib, pkgs, ... }: let
  inherit (lib) mkIf enabled;
in mkIf config.isDesktopNotWsl {
  environment.systemPackages = [
    pkgs.waybar
  ];
  home-manager.sharedModules = [{
    programs.waybar = with config.theme.withHashtag; enabled {
      settings = {
        mainBar = {
          layer = "top";
          position = "top";
          height = 24;
          modules-left = [ "hyprland/workspaces" ];
          modules-center = [ "hyprland/window" ];
          modules-right = [ "tray" "pulseaudio" "cpu" "memory" "network" "battery" "clock" ];
          "hyprland/workspaces" = {
            format = "{icon}";
            format-icons = {
              default = "";
              active = "";
            };
            persistent-workspaces."*" = 8;
          };
          "hyprland/window" = {
            max-length = 50;
            separate-outputs = true;
            rewrite = {
              "(.*) — Zen" = "󰖟 $1";
              "(.*) - Discord" = "󰙯 $1";
              "(.*) — nu" = " $1";
            };
          };
          tray = {
            reverse-direction = true;
            spacing = 5;
          };
          pulseaudio = {
            format = "{format_source} {icon} {volume}%";
            format-muted = "{format_source} 󰸈";
            format-source = "󰍬";
            format-source-muted = "󰍭";
            format-icons = {
              default = [ "󰕿" "󰖀" "󰕾" ];
            };
          };
          cpu = {
            format = " {usage}%";
            tooltip = false;
          };
          memory = {
            format = "󰽘 {}%";
            tooltip = false;
          };
          network = {
            format-wifi = " {signalStrength}%";
            format-ethernet = "󰈀 {ipaddr}/{cidr}";
            format-disconnected = "󰤮 ";
            format-linked = " {ifname} (No IP)";
          };
          battery = {
            format = "{icon} {capacity}%";
            format-charging = "󰂄 {capacity}%";
            format-plugged = "󰂄 {capacity}%";
            format-icons = [ "󰁺" "󰁻" "󰁼" "󰁽" "󰁾" "󰁿" "󰂀" "󰂁" "󰂂" "󰁹" ];
            states = {
              warning = 30;
              critical = 15;
            };
          };
          clock = {
            interval = 60;
            format = "{:%H:%M}";
            tooltip-format = "<big>{:%Y %B}</big>\n<tt><small>{calendar}</small></tt>";
          };
        };
      };
      style = ''
        * {
          border: none;
          border-radius: 0;
          font-family: "${config.theme.font.mono.name}";
          font-size: 11px;
        }
        #waybar {
          background: ${base00};
          color: ${base07};
        }
        #window {
          color: ${base07};
        }
        #workspaces button:nth-child(1) { color: ${base08}; }
        #workspaces button:nth-child(2) { color: ${base09}; }
        #workspaces button:nth-child(3) { color: ${base0A}; }
        #workspaces button:nth-child(4) { color: ${base0B}; }
        #workspaces button:nth-child(5) { color: ${base0C}; }
        #workspaces button:nth-child(6) { color: ${base0D}; }
        #workspaces button:nth-child(7) { color: ${base0E}; }
        #workspaces button:nth-child(8) { color: ${base0F}; }
        #workspaces button.empty {
          color: ${base02};
        }
        #workspaces button.active {
          color: ${base07};
          background: ${base02};
        }
        #tray, #pulseaudio, #cpu, #memory, #network, #battery, #clock {
          margin-left: 10px;
          padding: 0 ${toString config.theme.padding}px;
          color: ${base07}; /* Use highest contrast text */
        }
        #battery.critical:not(.charging) {
          animation-name: blink;
          animation-duration: 0.5s;
          animation-timing-function: linear;
          animation-iteration-count: infinite;
          animation-direction: alternate;
          color: ${base08};
        }
        @keyframes blink {
          to {
            color: ${base05};
          }
        }
      '';
    };
  }];
}

File addition: thunar.nix (----------)

[18.77]

{ config, lib, pkgs, ... }: let
  inherit (lib) enabled mkIf;
in mkIf config.isDesktop {
  programs.thunar = enabled;
  environment.systemPackages = [
    pkgs.xfce.tumbler
  ];
}

File addition: settings.nix (----------)

[18.77]

{ config, lib, pkgs, ... }: let
  inherit (lib) enabled mkIf;
in mkIf config.isDesktopNotWsl {
  # NetworkManager for network configuration.
  networking.networkmanager = enabled {
    wifi.powersave = false;
  };
  # Add user to networkmanager group.
  users.users.jam.extraGroups = [ "networkmanager" ];
  # Bluetooth support.
  hardware.bluetooth = enabled {
    powerOnBoot = true;
  };
  services.blueman = enabled;
  # System configuration GUI tools.
  environment.systemPackages = with pkgs; [
    # Audio.
    pavucontrol          # Audio mixer GUI.
    # Network.
    networkmanagerapplet # Network manager system tray.
    # Bluetooth.
    blueman              # Bluetooth manager.
    # System utilities.
    lshw                 # Hardware info.
    usbutils             # USB device info.
    pciutils             # PCI device info.
  ];
  # Enable system tray for network/bluetooth applets.
  programs.nm-applet = enabled;
}

File addition: pipewire.nix (----------)

[18.77]

{ config, lib, ... }: let
  inherit (lib) enabled mkIf;
in mkIf config.isDesktop {
  services.pipewire = enabled {
    audio.enable = true;
    pulse.enable = true;
    jack.enable = true;
    alsa = enabled {
      support32Bit = true;
    };
  };
  security.rtkit.enable = true;
}

File addition: hyprland.nix (----------)

[18.77]

{ config, lib, pkgs, ... }: let
  inherit (lib) enabled mkIf;
in mkIf config.isDesktopNotWsl {
  hardware.graphics = enabled;
  xdg.portal = enabled {
    config.common.default = "*";
    extraPortals = [ pkgs.xdg-desktop-portal-hyprland ];
    configPackages = [ pkgs.hyprland ];
  };
  programs.xwayland = enabled;
  environment.systemPackages = [
    pkgs.hyprland
  ];
  home-manager.sharedModules = [{
    wayland.windowManager.hyprland = enabled {
      settings = {
        # Monitor configuration - auto-detect setup
        monitor = [
          # Primary monitor configs for different setups
          "DP-1,3840x1440@80,0x0,1"        # 4K main if available
          "DP-2,1920x1080@280,3840x0,1"    # 1080p secondary if available
          ",1920x1080@144,auto,1"          # Fallback for single monitor
        ];
        bind = [
          # Config and window controls
          "SUPER, O, exec, hyprctl reload"
          "SUPER, Q, killactive"
          "SUPER, M, exec, hyprctl dispatch movetoworkspace special"
          # Focus windows
          "SUPER, H, movefocus, l"
          "SUPER, J, movefocus, d"
          "SUPER, K, movefocus, u"
          "SUPER, L, movefocus, r"
          # Move windows
          "SUPER SHIFT, H, movewindow, l"
          "SUPER SHIFT, J, movewindow, d"
          "SUPER SHIFT, K, movewindow, u"
          "SUPER SHIFT, L, movewindow, r"
          "SUPER SHIFT, Return, layoutmsg, swapwithmaster"
          # Window toggles
          "SUPER, T, togglefloating"
          "SUPER SHIFT, F, fullscreen, 1"
          # Workspaces
          "SUPER, 1, workspace, 1"
          "SUPER, 2, workspace, 2"
          "SUPER, 3, workspace, 3"
          "SUPER, 4, workspace, 4"
          "SUPER, 5, workspace, 5"
          "SUPER, 6, workspace, 6"
          "SUPER, 7, workspace, 7"
          "SUPER, 8, workspace, 8"
          # Move windows to workspaces
          "SUPER SHIFT, 1, movetoworkspace, 1"
          "SUPER SHIFT, 2, movetoworkspace, 2"
          "SUPER SHIFT, 3, movetoworkspace, 3"
          "SUPER SHIFT, 4, movetoworkspace, 4"
          "SUPER SHIFT, 5, movetoworkspace, 5"
          "SUPER SHIFT, 6, movetoworkspace, 6"
          "SUPER SHIFT, 7, movetoworkspace, 7"
          "SUPER SHIFT, 8, movetoworkspace, 8"
          # Launcher
          "CTRL, BackSpace, exec, fuzzel"
        ];
        # Resize controls
        binde = [
          "SUPER, equal, resizeactive, 50 0"
          "SUPER, minus, resizeactive, -50 0"
          "SUPER SHIFT, equal, resizeactive, 0 50"
          "SUPER SHIFT, minus, resizeactive, 0 -50"
        ];
        # Auto-start waybar
        exec-once = [
          "waybar"
        ];
        # Basic appearance
        general = with config.theme.with0x; {
          gaps_in = 0;
          gaps_out = 0;
          border_size = config.theme.borderWidth;
          "col.active_border" = "0xFF${config.theme.colors.base0D}";
          "col.inactive_border" = "0xFF${config.theme.colors.base02}";
        };
        decoration = {
          rounding = config.theme.cornerRadius;
        };
        input = {
          kb_layout = "us";
          follow_mouse = 1;
          touchpad = {
            natural_scroll = false;
          };
        };
      };
    };
  }];
}

File addition: graphics.nix (----------)

[18.77]

{ config, lib, ... }: let
  inherit (lib) mkIf enabled;
in mkIf config.isDesktopNotWsl {
  # Enable OpenGL and hardware acceleration.
  hardware.graphics = enabled {
    enable32Bit = true; # Required for Steam and 32-bit applications.
  };
  # For Wayland.
  services.xserver.videoDrivers = [ "nvidia" ];
  hardware.nvidia = {
    # Enable modesetting (required for Wayland).
    modesetting.enable = true;
    powerManagement.enable      = false;
    powerManagement.finegrained = false;
    # Use open source kernel modules (recommended for RTX/GTX 16xx+).
    open = true;
    # Enable nvidia-settings menu.
    nvidiaSettings = true;
    package = config.boot.kernelPackages.nvidiaPackages.stable;
  };
  # Environment variables for NVIDIA on Wayland.
  environment.sessionVariables = {
    GBM_BACKEND = "nvidia-drm";
    __GLX_VENDOR_LIBRARY_NAME = "nvidia";
    WLR_NO_HARDWARE_CURSORS = "1"; # Cursor fix.
  };
  boot.kernelModules = [ "nvidia" "nvidia_modeset" "nvidia_uvm" "nvidia_drm" ];
}

File addition: gammastep.nix (----------)

[18.77]

{ config, lib, pkgs, ... }: let
  inherit (lib) mkIf enabled;
in mkIf config.isDesktop {
  environment.systemPackages = [
    pkgs.gammastep
  ];
  home-manager.sharedModules = [{
    services.gammastep = enabled {
      provider = "geoclue2";
    };
  }];
}

File addition: games.nix (----------)

[18.77]

{ config, lib, pkgs, ... }: let
  inherit (lib) mkIf enabled;
in mkIf (config.isDesktopNotWsl && config.isGaming) {
  programs.steam = enabled {
    remotePlay.openFirewall                = true;
    dedicatedServer.openFirewall           = true;
    localNetworkGameTransfers.openFirewall = true;
    gamescopeSession.enable                = true;
  };
  # Performance.
  programs.gamemode.enable = true;
  environment.systemPackages = with pkgs; [
    protontricks
    winetricks
  ];
  # Hardware acceleration and 32-bit graphics support.
  hardware.graphics = {
    enable = true;
    enable32Bit = true; # Required for Steam and 32-bit games
  };
  # Audio settings for gaming
  security.rtkit.enable = true; # For low-latency audio
}

File addition: fuzzel.nix (----------)

[18.77]

{ config, lib, pkgs, ... }: let
  inherit (lib) mkIf;
in mkIf config.isDesktop {
  environment.systemPackages = [
    pkgs.fuzzel
  ];
  home-manager.sharedModules = [{
    programs.fuzzel.enable = true;
  }];
}

File addition: dunst.nix (----------)

[18.77]

{ config, lib, pkgs, ... }: let
  inherit (lib) mkIf;
in mkIf config.isDesktop {
  environment.systemPackages = [
    pkgs.dunst
  ];
  home-manager.sharedModules = [{
    services.dunst.enable = true;
  }];
}

Replacement in modules/linux/boot.nix at line 4 [4.421]
B:BD[4.475] → [4.475:519]
```
  boot.loader.grub = mkIf config.isServer {
```
[4.475]
[4.519]
```
  boot.loader.grub = {
```

Replacement in modules/common/unfree.nix at line 6 [3.23]

B:BD[3.125] → [3.125:232]

  config.nixpkgs.config.allowUnfreePredicate = package: lib.elem package.pname config.unfree.allowedNames;

[3.125]

[3.232]

  config.nixpkgs.config.allowUnfreePredicate = package: lib.elem (lib.getName package) config.unfree.allowedNames;

Replacement in modules/common/theme.nix at line 5 [20.13]

∅:D[19.31] → [20.67:138]

B:BD[20.67] → [20.67:138]

  # global theme configuration - use `tt dark` or `tt light` to switch

[19.31]

[16.1234]

  # Global theme configuration - use `tt dark` or `tt light` to switch.

Insertion in modules/common/theme.nix at line 8 [20.13]

[19.52]

[20.160]

  # Gruvbox hard Base16 color definitions.
  gruvbox_colors = {
    dark = {
      base00 = "1d2021"; # Background.
      base01 = "3c3836"; # Background 1.
      base02 = "504945"; # Background 2.
      base03 = "665c54"; # Background 3.
      base04 = "bdae93"; # Foreground 2.
      base05 = "d5c4a1"; # Foreground 1.
      base06 = "ebdbb2"; # Foreground 0.
      base07 = "fbf1c7"; # Foreground.
      base08 = "fb4934"; # Red.
      base09 = "fe8019"; # Orange.
      base0A = "fabd2f"; # Yellow.
      base0B = "b8bb26"; # Green.
      base0C = "8ec07c"; # Aqua.
      base0D = "83a598"; # Blue.
      base0E = "d3869b"; # Purple.
      base0F = "d65d0e"; # Brown.
    };
    light = {
      base00 = "f9f5d7"; # Background.
      base01 = "ebdbb2"; # Background 1.
      base02 = "d5c4a1"; # Background 2.
      base03 = "bdae93"; # Background 3.
      base04 = "665c54"; # Foreground 2.
      base05 = "504945"; # Foreground 1.
      base06 = "3c3836"; # Foreground 0.
      base07 = "282828"; # Foreground.
      base08 = "9d0006"; # Red.
      base09 = "af3a03"; # Orange.
      base0A = "b57614"; # Yellow.
      base0B = "79740e"; # Green.
      base0C = "427b58"; # Aqua.
      base0D = "076678"; # Blue.
      base0E = "8f3f71"; # Purple.
      base0F = "d65d0e"; # Brown.
    };
  };
  # Current color scheme.
  colors = if is_dark then gruvbox_colors.dark else gruvbox_colors.light;

Replacement in modules/common/theme.nix at line 86 [20.13]
∅:D[19.170] → [20.1035:1060]
B:BD[20.1035] → [20.1035:1060]
```
  # set the theme values
```
[19.170]
[20.1060]
```
  # Set the theme values.
```
Replacement in modules/common/theme.nix at line 88 [20.13]
B:BD[20.1079] → [20.1079:1102]
```
    # core theme state
```
[20.1079]
[20.1102]
```
    # Core theme state.
```

Replacement in modules/common/theme.nix at line 92 [20.13]

∅:D[19.172] → [20.1153:1188]

B:BD[20.1153] → [20.1153:1188]

    # program-specific theme names

[19.172]

[20.1188]

    # Base16 color scheme.
    inherit colors;
    # Color helpers with prefixes.
    withHashtag = lib.mapAttrs (name: value: "#${value}") colors;
    with0x = lib.mapAttrs (name: value: "0x${value}") colors;
    # Design tokens.
    cornerRadius = 4;
    borderWidth = 2;
    margin = 8;
    padding = 8;
    # Font configuration.
    font = {
      size = {
        normal = 16;
        big = 20;
        small = 12;
      };
      mono = {
        name = "JetBrainsMono Nerd Font";
        family = "JetBrainsMono Nerd Font Mono";
      };
    };
    # Program-specific theme names.

Replacement in modules/common/theme.nix at line 127 [20.13]
∅:D[19.174] → [20.1410:1461]
B:BD[20.1410] → [20.1410:1461]
```
    # expose raw theme definitions for flexibility
```
[19.174]
[20.1461]
```
    # Expose raw theme definitions for flexibility.
```
Replacement in modules/common/theme.nix at line 131 [20.13]
∅:D[19.176] → [20.1490:1523]
B:BD[20.1490] → [20.1490:1523]
```
  # export theme info as env var
```
[19.176]
[21.33]
```
  # Export theme info as env var.
```

Replacement in modules/common/fonts.nix at line 5 [22.36]

B:BD[22.65] → [16.2917:2992]

  fonts.packages = mkIf config.isDesktop [ pkgs.nerd-fonts.iosevka-term ];

[22.65]

[22.190]

  fonts.packages = mkIf config.isDesktop [
    pkgs.nerd-fonts.iosevka-term
    pkgs.nerd-fonts.jetbrains-mono
  ];

Replacement in modules/common/editor/helix.nix at line 8 [23.72]

B:BD[9.192] → [9.192:235]

      settings.theme = config.theme.helix;

[9.192]

[9.235]

      settings.theme.fallback = config.theme.helix;
      settings.theme.dark     = config.theme.themes.helix.dark;
      settings.theme.light    = config.theme.themes.helix.light;

Replacement in modules/common/alacritty.nix at line 11 [24.3297]

B:BD[24.3628] → [16.4127:4166]

∅:D[16.4166] → [21.5303:5365]

B:BD[21.5303] → [21.5303:5365]

        font.size                = 18;
  			font.normal.family       = "IosevkaTerm Nerd Font Mono";

[24.3628]

[24.3876]

        font.size                = config.theme.font.size.normal;
  			font.normal.family       = config.theme.font.mono.family;

Replacement in modules/acme/environment.age at line 2 [25.2885]
B:BD[25.2908] → [26.52:626]
[25.2908]

Insertion in keys.nix at line 7 [27.375]

[27.797]

		date  = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEzfoVKZDyiyyMiX1JRFaaTELspG25MlLNq0kI2AANTa root@date";
		yuzu = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFDLlddona4PlORWd+QpR/7F5H46/Dic9vV23/YSrZl0 root@yuzu";

Replacement in keys.nix at line 11 [27.375]
B:BD[27.814] → [11.600:625]
```
		admins = [ keys.jam ];
```
[27.814]
[27.841]
```
		admins = [ keys.jam keys.pear keys.yuzu keys.date ];
```
File addition: yuzu (d--x------)
[24.794]
File addition: password.age (----------)
[0.16324]
File addition: id.age (----------)
[0.16324]

File addition: hardware.nix (----------)

[0.16324]

{ modulesPath, ... }: {
  imports = [(modulesPath + "/installer/scan/not-detected.nix")];
  boot.loader = {
    systemd-boot.enable      = true;
    efi.canTouchEfiVariables = true;
    grub.device              = "nodev";
  };
  # Hardware-specific kernel modules
  boot.initrd.availableKernelModules = [
    "ahci"
    "nvme"
    "xhci_pci"
    "usb_storage"
    "sd_mod"
  ];
  # Filesystem configuration with your actual labels
  fileSystems."/" = {
    device = "/dev/disk/by-label/nixos";
    fsType = "ext4";
  };
  fileSystems."/boot" = {
    device = "/dev/disk/by-label/BOOT";
    fsType = "vfat";
  };
}

File addition: default.nix (----------)

[0.16324]

lib: let
  inherit (lib) inputs enabled;
  interface = "ts0";
in {
  class  = "nixos";
  config = lib.nixosSystem' {
    system  = "x86_64-linux";
    modules = [
      ({ pkgs, lib, config, keys, self, ... }: {
        imports = [
          (self + /modules/system.nix)
          (self + /modules/nix.nix)
          ./hardware.nix
        ];
        type                        = "desktop";
        isGaming                    = true;
        nixpkgs.hostPlatform.system = "x86_64-linux";
        # Allow unfree packages for gaming and graphics
        unfree.allowedNames = [
          "nvidia-x11"
          "nvidia-settings"
          "nvidia-persistenced"
          "steam"
          "steam-original"
          "steam-unwrapped"
          "steamPackages.steam"
        ];
        age.secrets.id.file = ./id.age;
        services.openssh    = enabled {
          hostKeys = [{
            type = "ed25519";
            path = config.age.secrets.id.path;
          }];
          settings = {
            PasswordAuthentication       = false;
            KbdInteractiveAuthentication = false;
            AcceptEnv                    = "SHELLS COLORTERM";
          };
        };
        age.secrets.password.file = ./password.age;
        users.users               = {
          root = {
            shell                       = pkgs.nushell;
            hashedPasswordFile          = config.age.secrets.password.path;
            openssh.authorizedKeys.keys = keys.admins;
          };
          jam = {
            description                 = "Jam";
            isNormalUser                = true;
            shell                       = pkgs.nushell;
            hashedPasswordFile          = config.age.secrets.password.path;
            openssh.authorizedKeys.keys = keys.admins;
            extraGroups                 = [ "wheel" "networkmanager" ];
          };
          build = {
            description                 = "Build";
            isNormalUser                = true;
            createHome                  = false;
            openssh.authorizedKeys.keys = keys.all;
            extraGroups                 = [ "build" ];
          };
        };
        home-manager.users = {
          root = {};
          jam  = {};
        };
        networking = {
          hostName   = "yuzu";
          firewall   = enabled {
            trustedInterfaces = [ interface ];
            allowedTCPPorts   = [ 22 ];
          };
          useDHCP    = lib.mkDefault true;
          interfaces = {};
        };
        home-manager.sharedModules = [{
          home.stateVersion = "24.11";
        }];
        system.stateVersion = "24.11";
      })
    ];
  };
}

Replacement in hosts/plum/password.age at line 2 [10.225]
B:BD[10.248] → [26.1021:1394]
[10.248]
Replacement in hosts/plum/matrix-signing-key.age at line 2 [12.5240]
B:BD[12.5263] → [26.1396:1764]
[12.5263]
Replacement in hosts/plum/matrix-registration-secret.age at line 2 [12.5687]
B:BD[12.5710] → [26.1766:2111]
[12.5710]
Replacement in hosts/plum/id.age at line 2 [28.596]
B:BD[28.619] → [26.2113:2812]
[28.619]
Replacement in hosts/plum/grafana/password.age at line 2 [18.1727]
B:BD[18.1750] → [26.2816:3130]
[18.1750]
Replacement in hosts/plum/forgejo-password.age at line 2 [15.1344]
B:BD[15.1367] → [26.3133:3507]
[15.1367]
Replacement in hosts/plum/cache/key.age at line 2 [13.323]
B:BD[13.346] → [26.3512:3916]
[13.346]
Replacement in hosts/pear/password.age at line 2 [5.100]
B:BD[5.123] → [5.123:497]
[5.123]
Replacement in hosts/pear/id.age at line 2 [29.187]
B:BD[29.210] → [26.3920:4619]
[29.210]
Replacement in hosts/kiwi/password.age at line 2 [30.2141]
B:BD[30.2164] → [26.4625:4998]
[30.2164]
Replacement in hosts/kiwi/id.age at line 2 [30.2583]
B:BD[30.2606] → [26.5000:5698]
[30.2606]
Replacement in hosts/kiwi/github2forgejo/environment.age at line 2 [14.801]
B:BD[14.824] → [8.112:756]
[14.824]
Replacement in hosts/kiwi/dr-radka-environment.age at line 2 [31.3333]
B:BD[31.3356] → [26.6240:7165]
[31.3356]
File addition: date (d--x------)
[24.794]
File addition: password.age (----------)
[0.30764]
File addition: id.age (----------)
[0.30764]

File addition: hardware.nix (----------)

[0.30764]

{ modulesPath, ... }: {
  imports = [(modulesPath + "/installer/scan/not-detected.nix")];
  boot.loader = {
    systemd-boot.enable      = true;
    efi.canTouchEfiVariables = true;
    grub.device              = "nodev";
  };
  # Hardware-specific kernel modules
  boot.initrd.availableKernelModules = [
    "ahci"
    "nvme"
    "xhci_pci"
    "usb_storage"
    "sd_mod"
  ];
  # Filesystem configuration with your actual labels
  fileSystems."/" = {
    device = "/dev/disk/by-label/nixos";
    fsType = "ext4";
  };
  fileSystems."/boot" = {
    device = "/dev/disk/by-label/BOOT";
    fsType = "vfat";
  };
}

File addition: default.nix (----------)

[0.30764]

lib: let
  inherit (lib) inputs enabled;
  interface = "ts0";
in {
  class  = "nixos";
  config = lib.nixosSystem' {
    system  = "x86_64-linux";
    modules = [
      ({ pkgs, lib, config, keys, self, ... }: {
        imports = [
          (self + /modules/system.nix)
          (self + /modules/nix.nix)
          ./hardware.nix
        ];
        type                        = "desktop";
        nixpkgs.hostPlatform.system = "x86_64-linux";
        # Allow unfree packages for graphics
        unfree.allowedNames = [
          "nvidia-x11"
          "nvidia-settings"
          "nvidia-persistenced"
        ];
        age.secrets.id.file = ./id.age;
        services.openssh    = enabled {
          hostKeys = [{
            type = "ed25519";
            path = config.age.secrets.id.path;
          }];
          settings = {
            PasswordAuthentication       = false;
            KbdInteractiveAuthentication = false;
            AcceptEnv                    = "SHELLS COLORTERM";
          };
        };
        age.secrets.password.file = ./password.age;
        users.users               = {
          root = {
            shell                       = pkgs.nushell;
            hashedPasswordFile          = config.age.secrets.password.path;
            openssh.authorizedKeys.keys = keys.admins;
          };
          jam = {
            description                 = "Jam";
            isNormalUser                = true;
            shell                       = pkgs.nushell;
            hashedPasswordFile          = config.age.secrets.password.path;
            openssh.authorizedKeys.keys = keys.admins;
            extraGroups                 = [ "wheel" "networkmanager" ];
          };
          build = {
            description                 = "Build";
            isNormalUser                = true;
            createHome                  = false;
            openssh.authorizedKeys.keys = keys.all;
            extraGroups                 = [ "build" ];
          };
        };
        home-manager.users = {
          root = {};
          jam  = {};
        };
        networking = {
          hostName   = "date";
          firewall   = enabled {
            trustedInterfaces = [ interface ];
            allowedTCPPorts   = [ 22 ];
          };
          useDHCP    = lib.mkDefault true;
          interfaces = {};
        };
        home-manager.sharedModules = [{
          home.stateVersion = "24.11";
        }];
        system.stateVersion = "24.11";
      })
    ];
  };
}

Replacement in flake.nix at line 32 [33.24075]

B:BD[32.249] → [2.105:166]

    trusted-users            = [ "root" "@wheel" "@build" ];

[32.249]

[32.338]

    trusted-users            = [ "root" "@wheel" "build" ];

Replacement in flake.lock at line 35 [33.25342]

B:BD[34.28830] → [35.96:206]

        "lastModified": 1756735828,
        "narHash": "sha256-Tv6QrwQIAf1oktiWTlcY/8aSrVvl8YriX5wh88M9H1M=",

[34.28830]

[34.28940]

        "lastModified": 1758294518,
        "narHash": "sha256-I2G2XUN2RHN8XPUhFZx8obwj/ZCbwr8lY1hu06Kt7+g=",

Replacement in flake.lock at line 39 [33.25342]

B:BD[34.28997] → [35.207:266]

        "rev": "1dbdc0c4898a93270951f1c8cc8c4d827e49f47d",

[34.28997]

[34.29056]

        "rev": "c325d054b70ab3bf0bdee26778c462f3c85c760a",

Replacement in flake.lock at line 77 [33.25342]

B:BD[36.3688] → [7.116:226]

        "lastModified": 1758160037,
        "narHash": "sha256-fXelTdjdILspZ1IUU9aICB1+PXwSFiF8j+7ujwo1VpQ=",

[36.3688]

[36.3798]

        "lastModified": 1758287904,
        "narHash": "sha256-IGmaEf3Do8o5Cwp1kXBN1wQmZwQN3NLfq5t4nHtVtcU=",

Replacement in flake.lock at line 81 [33.25342]

B:BD[36.3857] → [7.227:286]

        "rev": "4f554162fff88e77655073d352eec0cea71103a2",

[36.3857]

[36.3916]

        "rev": "67ff9807dd148e704baadbd4fd783b54282ca627",

Replacement in flake.lock at line 98 [33.25342]

B:BD[33.25519] → [7.287:397]

        "lastModified": 1758177713,
        "narHash": "sha256-4Mesi0sOxCzrwnFHeAhL/vv1K1Wcwsl4D9duQ7ndYS8=",

[33.25519]

[33.25629]

        "lastModified": 1758523473,
        "narHash": "sha256-8zsEI6eLilOSNQ9Mp6NL1XG7J7TQSqWB9Rsux0TCfqk=",

Replacement in flake.lock at line 102 [33.25342]

B:BD[33.25688] → [7.398:457]

        "rev": "60316bdc00603b483992560baa14841e42e58a7b",

[33.25688]

[33.25747]

        "rev": "2176d4c89be105a792122b66afc412dcce275b0d",

Replacement in flake.lock at line 174 [33.25342]

B:BD[9.5366] → [9.5366:5476]

        "lastModified": 1758204752,
        "narHash": "sha256-tgblfdzdM3XAzYHHvA9GX9SR2P8NG2IzewmfnRmTUxg=",

[9.5366]

[9.5476]

        "lastModified": 1758481004,
        "narHash": "sha256-LWV6WTU+l3qTjzvh3y+FsnFMOlhI3CtJHIO/Yxu0beo=",

Replacement in flake.lock at line 178 [33.25342]

B:BD[9.5534] → [9.5534:5593]

        "rev": "0ae37dc52ba715100893c327414bcb1a1924a4c3",

[9.5534]

[14.2328]

        "rev": "8acfc55280460402e106204dd9d2d0afd2c85e93",

Replacement in flake.lock at line 215 [33.25342]

B:BD[10.3069] → [7.458:568]

        "lastModified": 1758184248,
        "narHash": "sha256-TOazVsj8D1LTGQ6q8xdtfoPs9Z+PiqUS952WvZPssR0=",

[10.3069]

[33.26575]

        "lastModified": 1758464306,
        "narHash": "sha256-i56XRXqjwJRdVYmpzVUQ0ktqBBHqNzQHQMQvFRF/acQ=",

Replacement in flake.lock at line 219 [33.25342]

B:BD[33.26641] → [7.569:628]

        "rev": "bf7056c6a2d893d80db18d06d7e730d6515aaae8",

[33.26641]

[33.26700]

        "rev": "939e91e1cff1f99736c5b02529658218ed819a2a",

Replacement in flake.lock at line 254 [33.25342]

B:BD[24.5736] → [7.629:739]

        "lastModified": 1758102940,
        "narHash": "sha256-wwqf3+A8EiqwWpcAaPN20QXJLlpGPpwtLTrzgnngI2o=",

[24.5736]

[24.5846]

        "lastModified": 1758447883,
        "narHash": "sha256-yGA6MV0E4JSEXqLTb4ZZkmdJZcoQ8HUzihRRX12Bvpg=",

Replacement in flake.lock at line 258 [33.25342]

B:BD[24.5907] → [7.740:799]

        "rev": "ebd0bfc11fc2b5cff37401e9b3703881ad5fabbd",

[24.5907]

[34.30134]

        "rev": "25381509d5c91bbf3c30e23abc6d8476d2143cd1",

Replacement in flake.lock at line 308 [33.25342]

B:BD[34.30601] → [7.971:1081]

        "lastModified": 1758035966,
        "narHash": "sha256-qqIJ3yxPiB0ZQTT9//nFGQYn8X/PBoJbofA7hRKZnmE=",

[34.30601]

[33.27597]

        "lastModified": 1758277210,
        "narHash": "sha256-iCGWf/LTy+aY0zFu8q12lK8KuZp7yvdhStehhyX1v8w=",

Replacement in flake.lock at line 312 [33.25342]

B:BD[33.27650] → [7.1082:1141]

        "rev": "8d4ddb19d03c65a36ad8d189d001dc32ffb0306b",

[33.27650]

[33.27709]

        "rev": "8eaee110344796db060382e15d3af0a9fc396e0e",

Replacement in flake.lock at line 340 [33.25342]

B:BD[33.28132] → [37.1123:1233]

        "lastModified": 1757362324,
        "narHash": "sha256-/PAhxheUq4WBrW5i/JHzcCqK5fGWwLKdH6/Lu1tyS18=",

[33.28132]

[33.28242]

        "lastModified": 1758437297,
        "narHash": "sha256-bfB1uXmAc8ECK5fj8YIMNvzukNdDS30J1zCKSAavg1c=",

Replacement in flake.lock at line 344 [33.25342]

B:BD[33.28305] → [37.1234:1293]

        "rev": "9edc9cbe5d8e832b5864e09854fa94861697d2fd",

[33.28305]

[33.28364]

        "rev": "e7d7cb415a3cca2b09aae9c6bbe06d129a511cba",

Replacement in flake.lock at line 430 [33.25342]

B:BD[38.574] → [7.1142:1252]

        "lastModified": 1758169356,
        "narHash": "sha256-H/2LVdr5GLOD7k19DsHSzSXVPb5SaOPrjuPJx974ojU=",

[38.574]

[38.684]

        "lastModified": 1758514988,
        "narHash": "sha256-+IrsAEI5dFkRRbLH4nkUKYVzlXFlIbjRj+B0FaLZnFM=",

Replacement in flake.lock at line 434 [33.25342]

B:BD[38.754] → [7.1253:1312]

        "rev": "7f504a4b425a245e0b911442234448323bb48945",

[38.754]

[38.813]

        "rev": "d275fe1617f18550e6a474a1a6a65e41ab61e007",

hosts: Add yuzu and date hosts with desktop configs.

Dependencies

In channels

Change contents

Replacement in secrets.nix at line 2 [10.1]

Replacement in secrets.nix at line 5 [10.1]

Replacement in secrets.nix at line 16 [10.1]

Replacement in secrets.nix at line 22 [10.1]

Insertion in modules/system.nix at line 16 [17.3]

File addition: waybar.nix (----------)

File addition: thunar.nix (----------)

File addition: settings.nix (----------)

File addition: pipewire.nix (----------)

File addition: hyprland.nix (----------)

File addition: graphics.nix (----------)

File addition: gammastep.nix (----------)

File addition: games.nix (----------)

File addition: fuzzel.nix (----------)

File addition: dunst.nix (----------)

Replacement in modules/linux/boot.nix at line 4 [4.421]

Replacement in modules/common/unfree.nix at line 6 [3.23]

Replacement in modules/common/theme.nix at line 5 [20.13]

Insertion in modules/common/theme.nix at line 8 [20.13]

Replacement in modules/common/theme.nix at line 86 [20.13]

Replacement in modules/common/theme.nix at line 88 [20.13]

Replacement in modules/common/theme.nix at line 92 [20.13]

Replacement in modules/common/theme.nix at line 127 [20.13]

Replacement in modules/common/theme.nix at line 131 [20.13]

Replacement in modules/common/fonts.nix at line 5 [22.36]

Replacement in modules/common/editor/helix.nix at line 8 [23.72]

Replacement in modules/common/alacritty.nix at line 11 [24.3297]

Replacement in modules/acme/environment.age at line 2 [25.2885]

Insertion in keys.nix at line 7 [27.375]

Replacement in keys.nix at line 11 [27.375]

File addition: yuzu (d--x------)

File addition: password.age (----------)

File addition: id.age (----------)

File addition: hardware.nix (----------)

File addition: default.nix (----------)

Replacement in hosts/plum/password.age at line 2 [10.225]

Replacement in hosts/plum/matrix-signing-key.age at line 2 [12.5240]

Replacement in hosts/plum/matrix-registration-secret.age at line 2 [12.5687]

Replacement in hosts/plum/id.age at line 2 [28.596]

Replacement in hosts/plum/grafana/password.age at line 2 [18.1727]

Replacement in hosts/plum/forgejo-password.age at line 2 [15.1344]

Replacement in hosts/plum/cache/key.age at line 2 [13.323]

Replacement in hosts/pear/password.age at line 2 [5.100]

Replacement in hosts/pear/id.age at line 2 [29.187]

Replacement in hosts/kiwi/password.age at line 2 [30.2141]

Replacement in hosts/kiwi/id.age at line 2 [30.2583]

Replacement in hosts/kiwi/github2forgejo/environment.age at line 2 [14.801]

Replacement in hosts/kiwi/dr-radka-environment.age at line 2 [31.3333]

File addition: date (d--x------)

File addition: password.age (----------)

File addition: id.age (----------)

File addition: hardware.nix (----------)

File addition: default.nix (----------)

Replacement in flake.nix at line 32 [33.24075]

Replacement in flake.lock at line 35 [33.25342]

Replacement in flake.lock at line 39 [33.25342]

Replacement in flake.lock at line 77 [33.25342]

Replacement in flake.lock at line 81 [33.25342]

Replacement in flake.lock at line 98 [33.25342]

Replacement in flake.lock at line 102 [33.25342]

Replacement in flake.lock at line 174 [33.25342]

Replacement in flake.lock at line 178 [33.25342]

Replacement in flake.lock at line 215 [33.25342]

Replacement in flake.lock at line 219 [33.25342]

Replacement in flake.lock at line 254 [33.25342]

Replacement in flake.lock at line 258 [33.25342]

Replacement in flake.lock at line 308 [33.25342]

Replacement in flake.lock at line 312 [33.25342]

Replacement in flake.lock at line 340 [33.25342]

Replacement in flake.lock at line 344 [33.25342]

Replacement in flake.lock at line 430 [33.25342]

Replacement in flake.lock at line 434 [33.25342]