pi: update plugins

This reverts commit fb86f8c7f7.

.bin/256color

@@ -1,38 +0,0 @@
-#! /bin/sh
-set -euf
-
-pl() {
-  for i in $(seq $1 $(expr $2 - 1)); do
-    printf '\e[38;5;%sm%03i\e[m ' $i $i
-  done
-  printf '\e[38;5;%sm%03i\e[m\n' $2 $2
-}
-
-p() {
-  printf '\e[38;5;%sm%03i\e[m ' $1 $1
-}
-pn() {
-  printf '\e[38;5;%sm%03i\e[m\n' $1 $1
-}
-
-p6x6() {
-  for i in $(seq 0 5); do
-    for j in $(seq 0 5); do
-      p $(expr $1 + $i + $j \* 6)
-    done
-    echo
-  done
-}
-
-pl 0 7
-pl 8 15
-
-p6x6 16
-p6x6 52
-p6x6 88
-p6x6 124
-p6x6 160
-p6x6 196
-
-pl 232 243
-pl 244 255

.bin/anki-poem.sh

@@ -1,29 +0,0 @@
-#!/bin/sh
-file="${1?please supply a poetry file}"
-[ -f "$file" ] || {
-  echo "'$file' is no file"
-  exit 1
-}
-
-poem="$(mktemp)"
-clean () {
-  rm "$poem"
-}
-trap clean EXIT
-sed '/^$/d' "$file" > "$poem"
-
-htmlize() {
-  awk 'ORS="<br/>"' \
-    | head -c -5          # remove final <br/> characters
-}
-
-for line_number in $(seq 1 "$(wc -l "$poem" | cut -d' ' -f1)"); do
-  if [ "$line_number" -gt 3 ] && [ "$line_number" -gt 1 ]; then
-    sed -n "$((line_number - 3)),$((line_number - 1))p" "$poem"
-  else
-    sed -n "1,$((line_number - 1))p" "$poem"
-  fi | htmlize
-  printf '\t'
-  sed -n "${line_number},+1p" "$poem" | htmlize
-  printf '\n'
-done

.bin/avesta.sed

@@ -1,54 +0,0 @@
-#!/usr/bin/env -S sed -f
-s/ā̊/𐬃/g
-s/t̰/𐬝/g
-s/ṣ̌/𐬴/g
-s/š́/𐬳/g
-s/ą̄/𐬅/g
-s/ŋᵛ/𐬤/g
-s/ə̄/𐬇/g
-s/ŋ́/𐬣/g
-s/x́/𐬒/g
-s/xᵛ/𐬓/g
-s/a/𐬀/g
-s/ā/𐬁/g
-s/å/𐬂/g
-s/ą/𐬄/g
-s/ə/𐬆/g
-s/e/𐬈/g
-s/ē/𐬉/g
-s/o/𐬊/g
-s/ō/𐬋/g
-s/i/𐬌/g
-s/ī/𐬍/g
-s/u/𐬎/g
-s/ū/𐬏/g
-s/k/𐬐/g
-s/x/𐬑/g
-s/g/𐬔/g
-s/ġ/𐬕/g
-s/γ/𐬖/g
-s/c/𐬗/g
-s/j/𐬘/g
-s/t/𐬙/g
-s/θ/𐬚/g
-s/d/𐬛/g
-s/δ/𐬜/g
-s/p/𐬞/g
-s/f/𐬟/g
-s/b/𐬠/g
-s/β/𐬡/g
-s/ŋ/𐬢/g
-s/n/𐬥/g
-s/ń/𐬦/g
-s/ṇ/𐬧/g
-s/m/𐬨/g
-s/m̨/𐬩/g
-s/ẏ/𐬫/g
-s/y/𐬪/g
-s/v/𐬬/g
-s/r/𐬭/g
-s/s/𐬯/g
-s/z/𐬰/g
-s/š/𐬱/g
-s/ž/𐬲/g
-s/h/𐬵/g

.bin/browser

@@ -1,24 +0,0 @@
-#!/bin/sh -e
-#
-# Usage: browser
-#        pipe html to a browser
-# e.g.
-#  $ echo '<h1>hi mom!</h1>' | browser
-#  $ ron -5 man/rip.5.ron | browser   
-
-if [ -t 0 ]; then
-  if [ -n "$1" ]; then
-    open $1
-  else
-    cat <<usage
-Usage: browser
-       pipe html to a browser
-$ echo '<h1>hi mom!</h1>' | browser
-$ ron -5 man/rip.5.ron | browser
-usage
-fi
-else
-  f="/tmp/browser.$RANDOM.html"
-  cat /dev/stdin > $f
-  xdg-open $f
-fi

.bin/bvg.sh

@@ -1,46 +0,0 @@
-#!/bin/sh
-interesting="U6 N6 140 M46 184 N84"
-
-curl -sSL 'https://www.bvg.de/disruption-reports/q' \
-  --data-raw '{"variables":{},"query":"{
-    allDisruptions {
-      disruptions {
-        meldungsId
-        linie
-        verkehrsmittel
-        __typename
-        ... on Traffic {
-          datum
-          gueltigVonDatum
-          gueltigVonZeit
-          gueltigBisDatum
-          gueltigBisZeit
-          richtungName
-          richtungHafasId
-          beginnAbschnittName
-          beginnAbschnittHafasId
-          endeAbschnittName
-          endeAbschnittHafasId
-          textIntUrsache
-          sev
-          textIntAuswirkung
-          umfahrung
-          textWAPSMSUrsache
-          textWAPSMSAuswirkung
-          prioritaet
-          __typename
-        }
-      }
-      __typename
-    }
-  }"}' \
-  | jq --arg interesting "$interesting" '
-    .data.allDisruptions.disruptions
-    | map(select(
-      (.linie as $linie
-      | $interesting
-      | split(" ")
-      | index($linie))
-      and (.["__typename"] == "Traffic")
-    ))
-  '

.bin/calendars.sh

@@ -1,19 +0,0 @@
-#!/bin/sh
-
-directory="$(mktemp -d)"
-trap clean EXIT
-clean() {
-  rm -rf "$directory"
-}
-
-year=$(date +%Y)
-output=/tmp/$year.pdf
-
-for month in $(seq 1 12); do
-  printf "\r%d" "$month" 1>&2
-  astrolog -zN Berlin -qm "$month" "$year" -X -K -XA -Xr -Xm -Xb -Xo "$(printf "%s/%02d.bmp" "$directory" "$month")" -Xw 1080 720 2>/dev/null
-done
-printf "\r"
-
-convert "$directory/*.bmp" "$output"
-echo "$output"

.bin/candyman

@@ -1,25 +0,0 @@
-#!/bin/sh
-set -efu
-
-usage() {
-  echo >&2 "$0 add-{reddit,telegram,youtube,twitch,twitter} NAME"
-  exit 1
-}
-
-candyman() {
-  curl -fsSv http://news.r/api -H content-type:application/json -d "$(jq -n "
-    {
-      command: \"PRIVMSG\",
-      params: [\"#all\", \"candyman: $1 $2\"]
-    }
-  ")"
-}
-
-[ $# -ge 2 ] || usage
-
-case "$1" in
-  add-reddit|add-telegram|add-youtube|add-twitter|add-twitch)
-    candyman "$@"
-  ;;
-  *) usage;;
-esac

.bin/chunk-pdf

@@ -1,23 +0,0 @@
-#! /usr/bin/env nix-shell
-#! nix-shell -i bash -p pdftk gnugrep
-set -efu
-
-INPUT_FILE="${2:?Pass the PDF path as second argument.}"
-PAGES_PER_REPORT="${1:?Pass the chunk size as first argument.}"
-
-if [ ! -f "$INPUT_FILE" ]; then
-  echo >&2 "File $INPUT_FILE does not exist."
-  exit 1
-fi
-
-TOTAL_PAGES="$(pdftk "$INPUT_FILE" dump_data | grep NumberOfPages | cut -f2 -d' ')"
-
-RUNS=$((TOTAL_PAGES/PAGES_PER_REPORT))
-
-for run in $(seq 0 "$((RUNS-1))"); do
-  start_page=$((run*PAGES_PER_REPORT+1))
-  end_page=$(((run+1)*PAGES_PER_REPORT))
-  output_file="chunk_$((run+1)).pdf"
-  echo "splitting $INPUT_FILE from $start_page to $end_page into $output_file"
-  pdftk "$INPUT_FILE" cat "$start_page-$end_page" output "$output_file"
-done

.bin/countdown

@@ -1,13 +0,0 @@
-#!/usr/bin/env -S awk -f
-function z() {
-  getline < "/proc/uptime"
-  close("/proc/uptime")
-  return $0
-}
-BEGIN {
-  x = z()
-  while (1) {
-    y = z()
-    printf "%02d:%05.2f\r", (y - x) / 60, (y - x) % 60
-  }
-}

.bin/csv2json

@@ -1,14 +0,0 @@
-#!/usr/bin/env python3
-
-import csv
-import json
-import sys
-import argparse
-
-parser = argparse.ArgumentParser()
-parser.add_argument("--delimiter", "-d", default=",", help="CSV field separator")
-
-args = parser.parse_args()
-
-if __name__ == "__main__":
-    json.dump(list(csv.DictReader(sys.stdin, delimiter=args.delimiter)), sys.stdout)

.bin/dummy-alert

@@ -1,43 +0,0 @@
-#!/bin/bash
-
-name=$RANDOM
-url='http://localhost:9093/api/v1/alerts'
-
-echo "firing up alert $name"
-
-# change url o
-curl -XPOST $url -d "[{
-	\"status\": \"firing\",
-	\"labels\": {
-		\"alertname\": \"$name\",
-		\"service\": \"my-service\",
-		\"severity\":\"warning\",
-		\"instance\": \"$name.example.net\"
-	},
-	\"annotations\": {
-		\"summary\": \"High latency is high!\"
-	},
-	\"generatorURL\": \"http://prometheus.int.example.net/<generating_expression>\"
-}]"
-
-echo ""
-
-echo "press enter to resolve alert"
-read
-
-echo "sending resolve"
-curl -XPOST $url -d "[{
-	\"status\": \"resolved\",
-	\"labels\": {
-		\"alertname\": \"$name\",
-		\"service\": \"my-service\",
-		\"severity\":\"warning\",
-		\"instance\": \"$name.example.net\"
-	},
-	\"annotations\": {
-		\"summary\": \"High latency is high!\"
-	},
-	\"generatorURL\": \"http://prometheus.int.example.net/<generating_expression>\"
-}]"
-
-echo ""

.bin/elm-publish-private

@@ -1,7 +0,0 @@
-#! /usr/bin/env nix-shell
-#! nix-shell -p "(import <nixpkgs> { overlays = [ (import ~/work/fysiweb/engiadina-pwa/devops/pkgs) ]; }).elm-publish-private"
-#! nix-shell -i bash
-
-set -efux
-
-exec elm-publish-private "$@"

.bin/fix-sd.sh

@@ -1,21 +0,0 @@
-#!/bin/sh
-set -xfu
-
-drive="$1"
-mountpoint="/media/sd-card-$(date +%s)"
-backup_directory="$(pwd)"
-
-trap clean EXIT
-clean() {
-  umount "$mountpoint"
-  rmdir "$mountpoint"
-  fsck.exfat "$drive"
-}
-
-filenames="$(fsck.exfat "$drive" 2>&1 | sed -nE "s/.* file '(.*?)' is not allocated.*/\1/p")"
-mkdir "$mountpoint"
-mount "$drive" "$mountpoint"
-
-echo "$filenames" | while read -r filename; do
-  find "$mountpoint" -type f -name "$filename" -exec mv {} "$backup_directory" \;
-done

.bin/horoscope.sh

@@ -1,34 +0,0 @@
-#!/bin/sh
-set -efu
-
-# Berlin:  -d lodeg=13 -d lomin=22 -d losec=41 -d lodir=E -d ladeg=52 -d lamin=27 -d lasec=42 -d ladir=N -d usecoords=1 \
-# Kassel:  -d lodeg=9 -d lomin=32 -d losec=5 -d lodir=E -d ladeg=51 -d lamin=18 -d lasec=17 -d ladir=N -d usecoords=1 \
-
-
-[ $# -eq 1 ] || {
-  echo >&2 Usage: "$0" TIMESTAMP
-  exit 1
-}
-
-export TZ=UTC
-
-chart_path="$(mktemp /tmp/chart_XXX.pdf)"
-
-timestamp="$1"
-
-year="$(date -d "@$timestamp" +%Y)"
-month="$(date -d "@$timestamp" +%m)"
-day="$(date -d "@$timestamp" +%d)"
-hour="$(date -d "@$timestamp" +%H)"
-minute="$(date -d "@$timestamp" +%M)"
-
-curl -sSL 'https://edifyingfellowship.org/astro/' \
-  -d lodeg=9 -d lomin=32 -d losec=5 -d lodir=E -d ladeg=51 -d lamin=18 -d lasec=17 -d ladir=N -d usecoords=1 \
-  -d ybyr="$year" -d ybmo="$month" -d ybdy="$day" -d ybhr="$hour" -d ybmi="$minute" -d ybsc=0 -d ybtz="$TZ" \
-  -d currenttime=0 \
-  -d title="$timestamp" \
-  -d options[]=VancouverWheel -d options[]=Arrow -d options[]=XBold -d options[]=HouseLabels -d options[]=Placidus \
-  -d options[]=Sun -d options[]=Moon -d options[]=Mercury -d options[]=Venus -d options[]=Mars -d options[]=Jupiter -d options[]=Saturn -d options[]=Uranus -d options[]=Neptune -d options[]=Pluto -d options[]=Ascendant -d options[]=MC -d options[]=Lilith -d options[]=MeanNode -d options[]=TrueNode \
-  -d aspectpct=100 -d format=PDF -d Submit= -o "$chart_path"
-
-zathura "$chart_path"

.bin/json2csv

@@ -1,24 +0,0 @@
-#!/usr/bin/env python3
-import csv
-import json
-import sys
-
-if __name__ == "__main__":
-    json_list = json.load(sys.stdin)
-    if not isinstance(json_list, list):
-        print("JSON object is not a list.", file=sys.stderr)
-        sys.exit(1)
-    if len(json_list) == 0:
-        print("JSON list is empty.", file=sys.stderr)
-        sys.exit(1)
-    keys = set()
-    for element in json_list:
-        if isinstance(element, dict):
-            keys |= element.keys()
-        else:
-            print("Non-dict element:", element, file=sys.stderr)
-            sys.exit(1)
-    writer = csv.DictWriter(sys.stdout, fieldnames=list(keys))
-    writer.writeheader()
-    for element in json_list:
-        writer.writerow(element)

.bin/json2csv.jq

@@ -1,5 +0,0 @@
-#!/usr/bin/env -S jq -r -f
-(map(keys) | add | unique) as $cols
-| map(. as $row | $cols | map($row[.])) as $rows
-| $cols, $rows[]
-| @csv

.bin/libib.sh

@@ -1,15 +0,0 @@
-#!/usr/bin/env bash
-session_id=7b638c194d9bda74f80043045018cc9e
-
-declare -A libraries
-
-libraries["Literatur"]=344428
-libraries["Sprache"]=344160
-libraries["Miscellanea"]=344427
-libraries["Wissenschaft"]=344429
-libraries["Relicta"]=565920
-
-for library in ${!libraries[@]}
-do
-  curl -sSL 'https://www.libib.com/library/functions/csv-export.php' -H "Cookie: PHPSESSID=$session_id" -d export="${libraries[$library]}" > "$library.csv"
-done

.bin/lieferando.sh

@@ -1,81 +0,0 @@
-#!/bin/sh
-set -efu
-
-if echo "$1" | grep -Eq '[[:digit:]]{5}'; then
-  PLZ="$1"
-else
-  echo >&2 "Usage: $0 PLZ"
-  exit 1
-fi
-
-lieferando_dir=/tmp/lieferando
-mkdir -p "$lieferando_dir/$PLZ"
-
-fetch_restaurants() {
-  cache_path="$lieferando_dir/$PLZ.json"
-
-  if [ -r "$cache_path" ]; then
-    cat "$cache_path"
-  else
-    w3m -dump_source "http://www.lieferando.de/$PLZ" \
-      | gunzip \
-      | sed -n '/var restaurants/,/];$/p' \
-      | sed 's/var restaurants =//;$s/;$//' \
-      | prettier --parser=json \
-      | jq '
-        map({
-          name: .[30] | .name,
-          category: .[30] |.categories | split(", "),
-          url: "http://lieferando.de\(.[30] | .url)",
-          minutes: .[19],
-          minimum: .[10],
-          delivery: .[14]
-        })' \
-      | tee "$cache_path"
-  fi
-}
-
-fetch_menu() {
-  [ $# -eq 1 ] || exit 1
-
-  slug="$(echo "$1" | sed 's!.*/!!')"
-  cache_path="$lieferando_dir/$PLZ/$slug.json"
-
-  if [ -r "$cache_path" ]; then
-    cat "$cache_path"
-  else
-    w3m -dump_source "$1" \
-      | gunzip \
-      | sed -n '/var MenucardProducts/,/\];/p' \
-      | sed 's/var MenucardProducts =//;s/;$//' \
-      | jq -r '
-        unique_by(.productId)
-        | group_by(.categoryId)
-        | flatten
-      ' \
-      | tee "$cache_path"
-  fi
-}
-
-data="$(fetch_restaurants)"
-
-# echo "$data" | jq -c '.[]' | while read -r restaurant; do
-#   fetch_menu "$(echo "$restaurant" | jq -r .url)"
-# done
-
-selected_categories="$(echo "$data" | jq -r 'map(.category) | flatten | unique | .[]' | fzf -m)"
-
-selected_restaurant_url="$(echo "$selected_categories" | jq --argjson restaurants "$data" -sRr '
-  split("\n")[:-1] as $categories
-  | $restaurants[]
-  | select(.category - $categories != .category)
-  | "\(.name) [🚴\(.minutes)min 💰\(.minimum)€ + \(.delivery)€] (\(.url))"
-  ' \
-  | fzf \
-  | sed 's/.*(//;s/)$//'
-)"
-
-fetch_menu "$selected_restaurant_url" \
-  | jq -r '.[] | "\(.price)\t\(.name)"' \
-  | fzf -m \
-  | awk '{print $0; sum += $1} END {print "-----"; print sum}'

.bin/lit.awk

@@ -1,17 +0,0 @@
-BEGIN {
-  if (!comment) comment = "--";
-  if (!begin) begin = "\\begin{code}";
-  if (!end) end = "\\end{code}";
-}
-{
-  if ($0 == begin) {
-    code = 1;
-    print comment, $0;
-  } else if ($0 == end) {
-    code = 0;
-    print comment, $0;
-  } else {
-    if (code) print $0;
-    else print comment, $0;
-  }
-}

.bin/mail-current-part

@@ -1,3 +0,0 @@
-#! /bin/sh
-set -efu
-exec curl -fSs --unix-socket /tmp/much.api.sock http://localhost/current/part

.bin/mail-current-query-find-part-by-name

@@ -1,27 +0,0 @@
-#! /bin/sh
-# usage: mail-current-query-find-part-by-name NAME
-set -efu
-
-name=$1
-
-query=$(mail-current-query)
-result=$(notmuch show --entire-thread=false --format=json "$query")
-
-part_id=$(printf %s "$result" | jq --arg name "$name" '
-  [
-    recurse |
-    select(type == "object") |
-    { id, name: .filename } |
-    select(.id != null and .name != null)
-  ] |
-  map(select(.name == $name))[0].id
-')
-
-if test "$part_id" = null; then
-  printf 'error: could not find part with name %s\n' \
-    "$name" \
-    >&2
-  exit 1
-fi
-
-exec notmuch show --part="$part_id" "$query"

.bin/mail-current-query-find-part-by-type

@@ -1,39 +0,0 @@
-#! /bin/sh
-# usage: mail-current-query-find-part-by-type TYPE
-set -efu
-
-type=$1
-
-query=$(mail-current-query)
-result=$(notmuch show --entire-thread=false --format=json "$query")
-
-part_id=$(printf %s "$result" | jq --arg type "$type" '
-  #flatten|map(select(.!=null))[0].body[0] |
-  #
-  #if .["content-type"] == $type then
-  #  .id
-  #elif .["content-type"] | test("^multipart/") then
-  #  .content|map(select(.["content-type"]==$type))[0].id
-  #else
-  #  null
-  #end
-
-  [
-    recurse |
-    select(type == "object") |
-    { id, type: .["content-type"] } |
-    select(.id != null and .type != null)
-  ] |
-  map(select(.type == $type))[0].id
-')
-
-if test "$part_id" = null; then
-  printf 'error: could not find part with type %s\n' \
-    "$type" \
-    >&2
-  exit 1
-fi
-
-exec notmuch show --part="$part_id" "$query"
-
-

.bin/mud.sh

@@ -1 +0,0 @@
-ssh mud@hotdog.r -t "MUD_NICKNAME=$LOGNAME mud"

.bin/mushakkil.sh

@@ -1,6 +0,0 @@
-#!/bin/sh
-curl -sSL 'https://diac.alsharekh.org/Diac/DiacText' \
-  -H "Content-Type: application/json" \
-  --data-raw "$(jq --raw-input '{word: ., type: 1}')" \
-  --compressed \
-  | jq -r .diacWord

.bin/nix-haddock-index

@@ -1,93 +0,0 @@
-#! /usr/bin/env nix-shell
-#! nix-shell -i bash -p coreutils gnugrep gnused graphviz
-#
-# usage: nix-haddock-index
-#
-# Run this script in an environment where either NIX_GHC is set, or the ghc
-# executable exists, to generate an HTML index file pointing to all Haddock
-# files accessible to the respective ghc version.
-#
-# Additionally, an SVG dependency graph of all packages is linked at the
-# bottom of the index file.
-#
-# Note: all files will be generated in /tmp, and won't be deleted automatically
-#
-
-set -efux
-
-if test -z "${NIX_GHC-}"; then
-  NIX_GHC=$(readlink -f "$(type -P ghc)")
-fi
-
-if ! echo $NIX_GHC | grep -q '^/nix/store/'; then
-  printf '%s: error: unsupported GHC executable path (not in Nix store): %q\n' \
-      "$0" \
-      "$NIX_GHC" \
-    >&2
-  exit -1
-fi
-
-NIX_GHC_PREFIX=$(dirname "$(dirname "$NIX_GHC")")
-NIX_GHC_DOCDIR=$NIX_GHC_PREFIX/share/doc/ghc/html
-
-main() {
-
-  hash=$(echo $NIX_GHC_PREFIX | sed -n 's|^/nix/store/\([a-z0-9]\+\).*|\1|p')
-  title="Haddock index for $NIX_GHC_PREFIX"
-
-  header=$(
-    printf 'Haddock index for <a href="%s">%s</a>\n' \
-        $NIX_GHC_PREFIX \
-        $NIX_GHC_PREFIX \
-  )
-
-  suffix=${hash:+-$hash}
-  index_file=/tmp/haddock$suffix-index.html
-  svg_file=/tmp/haddock$suffix.svg
-
-  #if ! test -e $index_file; then
-    eval "$(
-      echo 'gen_index() {'
-      echo '  html_head'
-      "$NIX_GHC_PREFIX"/bin/ghc-pkg dump | sed -n '
-        s/^---$/  reset/p
-        s/^\(name\|version\):\s*\([-A-Za-z0-9_.]\+\)$/  \1=\2/p
-        s/^haddock-html:\s*\([-A-Za-z0-9_./]\+\)$/  haddock_html \1/p
-      '
-      echo '  html_foot'
-      echo '}'
-    )"
-
-    gen_index > $index_file
-  #fi
-
-  #if ! test -e $svg_file; then
-    "$NIX_GHC_PREFIX"/bin/ghc-pkg dot | tred | dot -Tsvg | sed '
-      s/<svg width="[0-9]\+pt" height="[0-9]\+pt"/<svg width="3600px" height="100%"/
-    ' > $svg_file
-  #fi
-
-  echo $index_file
-}
-reset() {
-  unset name version
-}
-haddock_html() {
-  printf '<li>'
-  printf '<a href="%s/index.html">%s</a>' "$1" "$name-$version"
-  printf '</li>\n'
-}
-html_head() {
-  printf '<!doctype html>\n'
-  printf '<title>%s</title>\n' "$title"
-  printf '<link href="%s" rel="stylesheet" type="text/css">\n' \
-      "$NIX_GHC_DOCDIR/libraries/ocean.css"
-  printf '<h1>%s</h1>\n' "$header"
-  printf '<ul>\n'
-}
-html_foot() {
-  printf '</ul>\n'
-  printf '<a href="%s">graph</a>\n' "$svg_file"
-}
-
-main "$@"

.bin/notetags.sh

@@ -1,15 +0,0 @@
-#!/bin/sh
-
-# inspired by https://github.com/connermcd/bin/blob/1d38cb98812906d8b95dc6e51e1149e29261617d/notetags
-
-cd "$HOME/notes/" || exit
-
-[ -f tags ] && rm tags
-grep -r 'tags:' ./* | while read -r line; do
-  file=$(echo "$line" | cut -d: -f1)
-  unparsed_tags=$(echo "$line" | cut -d: -f3) #
-  tags=$(echo "$unparsed_tags" | sed -e 's/tags: *//g' -e 's/[][,]//g')
-  for tag in $tags; do
-    echo "$tag	$file	/^$unparsed_tags$/;" >> tags
-  done
-done

.bin/pdf-ocr.sh

@@ -1,23 +0,0 @@
-#!/usr/bin/env nix-shell
-#! nix-shell -i bash -p poppler_utils tesseract4
-set -eu
-
-pdf_path="$(realpath "$1")"
-
-[ -f "$pdf_path" ] || {
-  echo "Usage: $0 FILE.pdf" >&2
-  exit 1
-}
-
-
-tmpdir="$(mktemp -d)"
-trap 'rm -rf $tmpdir' EXIT
-
-cd "$tmpdir"
-
-pdftoppm -png "$pdf_path" pdf-ocr
-for png in pdf-ocr*.png; do
-  tesseract "$png" "$png.txt" 2>/dev/null
-done
-
-cat pdf-ocr-*.txt

.bin/playlist_entries.sh

@@ -1,2 +0,0 @@
-#!/bin/sh
-youtube-dl -ij "$*" | jq -sr '.[] | .webpage_url'

.bin/prospekte.sh

@@ -1,65 +0,0 @@
-#!/bin/sh
-lidl() {
-  echo LIDL
-  curl -sSL 'https://endpoints.lidl-flyer.com/v3/region-overview/lidl/de-DE/0.json' \
-    | jq -r '
-      .categories
-      | map(select(.name == "Filial-Angebote") | .subcategories | map(.flyers))
-      | flatten
-      | flatten
-      | .[]
-      | .pdfUrl
-    '
-}
-
-aldi_nord() {
-  echo ALDI nord
-  echo 'https://magazine.aldi-nord.de/aldi-nord/aldi-aktuell/GetPDF.ashx'
-  echo 'https://magazine.aldi-nord.de/aldi-nord/aldi-vorschau/GetPDF.ashx'
-}
-
-rewe_berlin() {(
-  store_id=662366923
-  publisher_id=1062
-
-  echo REWE
-  curl -sSL 'https://www.bonialserviceswidget.de/de/stores/'$store_id'/brochures?storeId='$store_id'&publisherId='$publisher_id | while read -r brochure_id; do
-    curl -sSL 'https://www.bonialserviceswidget.de/de/v5/brochureDetails/'"$brochure_id"'?publisherId='$publisher_id  | jq -r .pdfUrl
-  done
-)}
-
-kaufland() {(
-  region_code=8920
-  echo KAUFLAND
-  curl -sSL https://filiale.kaufland.de/prospekte.html | htmlq --attribute href '.flyer a' | grep -Eo 'DE_de_KDZ[^/]*' | sed "s/_3000_/_${region_code}_/" | while read -r flyer_id; do
-    curl -sSL "https://endpoints.leaflets.kaufland.com/v3/$flyer_id/flyer.json?regionCode=$region_code" | jq -r .flyer.pdfUrl
-  done
-)}
-
-netto_schwarz() {
-  echo 'NETTO (schwarz)'
-  curl -sSL 'https://squid-api.tjek.com/v2/catalogs?dealer_ids=90f2VL&order_by=created' \
-    | jq -r '.[] | .id' \
-    | while read -r flyer_id; do
-      curl -sSL "https://squid-api.tjek.com/v2/catalogs/$flyer_id/download" \
-        | jq -r .pdf_url
-    done
-}
-
-dir="$(mktemp -d)"
-trap clean EXIT
-
-clean() {
-  rm -rf "$dir"
-}
-
-prospekt_url="$( (
-  lidl
-  aldi_nord
-  rewe_berlin
-  kaufland
-  netto_schwarz
-) | fzf)"
-
-curl -sSL "$prospekt_url" -o "$dir/prospekt.pdf"
-zathura "$dir/prospekt.pdf"

.bin/proxies.sh

@@ -1,17 +0,0 @@
-#!/bin/sh
-curl -sSL https://www.netzwelt.de/proxy/index.html \
-  | pup ".tblc" \
-  | xml-to-json /dev/stdin \
-  | jq '
-    .div.table.tbody.tr
-    | map(
-      .td
-      | {
-        ip: .[0].a.value,
-        port: .[1],
-        country: .[2] | (if type == "string" then . else .a.value end),
-        security: .[3],
-        protocol: .[4]
-      }
-    )
-  '

.bin/readme

@@ -1,4 +0,0 @@
-#!/bin/sh
-curl -sSL "https://raw.githubusercontent.com/$*/master/README.md" \
-  | pandoc -f gfm -t man -s \
-  | man -l -

.bin/sample-pdf.sh

@@ -1,6 +0,0 @@
-#!/bin/sh
-
-filepath="$(shuf --head-count=1)"
-pages="$(pdfinfo "$filepath" | awk '/^Pages:/{print $2}')"
-random_page="$(shuf --input-range="1-$pages" --head-count=1)"
-zathura --page="$random_page" "$filepath"

.bin/screencap.sh

@@ -1,16 +0,0 @@
-#! /usr/bin/env nix-shell
-#! nix-shell -i sh -p coreutils byzanz xorg.xwininfo gnused
-
-# shellcheck shell=sh
-# ref https://gist.github.com/aforemny/0994cb7f06ea30d56c8b9681ff5d2054
-
-set -eux
-
-eval "$(xwininfo | \
-  sed -n -e 's/^ \+Absolute upper-left X: \+\([0-9]\+\).*/x=\1/p' \
-         -e 's/^ \+Absolute upper-left Y: \+\([0-9]\+\).*/y=\1/p' \
-         -e 's/^ \+Width: \+\([0-9]\+\).*/w=\1/p' \
-         -e 's/^ \+Height: \+\([0-9]\+\).*/h=\1/p')"
-
-trap "pkill -f 'sleep 360d'" INT
-byzanz-record -e "sleep 360d" -c -x $x -y $y -w $w -h $h "$@"

.bin/space.py

@@ -1,49 +0,0 @@
-import ephem
-from datetime import datetime, date, timedelta
-
-now = datetime.now()
-limit = now + timedelta(days=365)
-
-
-def events_until(limit):
-    initial_date = ephem.Date(datetime.now())
-    events = {}
-
-    now = initial_date
-    while ephem.localtime(now) <= limit:
-        now = ephem.next_full_moon(now)
-        events[now] = "🌕"
-
-    now = initial_date
-    while ephem.localtime(now) <= limit:
-        now = ephem.next_new_moon(now)
-        events[now] = "🌑"
-
-    now = initial_date
-    while ephem.localtime(now) <= limit:
-        now = ephem.next_vernal_equinox(now)
-        events[now] = "spring equinox"
-
-    now = initial_date
-    while ephem.localtime(now) <= limit:
-        now = ephem.next_autumnal_equinox(now)
-        events[now] = "fall equinox"
-
-    now = initial_date
-    while ephem.localtime(now) <= limit:
-        now = ephem.next_winter_solstice(now)
-        events[now] = "winter solstice"
-
-    now = initial_date
-    while ephem.localtime(now) <= limit:
-        now = ephem.next_summer_solstice(now)
-        events[now] = "summer solstice"
-    return events
-
-
-events = events_until(limit)
-
-
-for date, event in sorted(events.items(), key=lambda x: x[0]):
-    if ephem.localtime(date) < limit:
-        print(ephem.localtime(date), event)

.bin/toposort.nix

@@ -1,50 +0,0 @@
-let
-  lib = import <nixpkgs/lib>;
-in rec {
-  inherit lib;
-
-  input = [
-    {
-      x = ["pool" "zfs"];
-      y = ["mdadm" "raid1"];
-    }
-    {
-      x = ["pool" "zfs"];
-      y = ["disk" "sda"];
-    }
-    {
-      x = ["mdadm" "raid1"];
-      y = ["disk" "sdb"];
-    }
-    {
-      x = ["mdadm" "raid1"];
-      y = ["disk" "sdc"];
-    }
-  ];
-
-  outNodes = node: graph:
-    lib.unique
-    (builtins.map (e: e.y)
-      (builtins.filter (v: v.x == node) graph));
-
-  vertices = graph:
-    lib.unique
-    (builtins.map (x: x.y) graph ++ builtins.map (x: x.x) graph);
-
-  deleteVertex = node: graph: (builtins.filter (v: v.x != node && v.y != node) graph);
-
-  findSink = graph:
-    lib.findFirst
-    (v: outNodes v graph == [])
-    (lib.trace graph (builtins.abort "No sink found"))
-    (vertices graph);
-
-  topSort = graph:
-    if graph == []
-    then []
-    else if builtins.length graph == 1
-    then let only = builtins.head graph; in [only.y only.x]
-    else let sink = findSink graph; in [sink] ++ topSort (deleteVertex sink graph);
-
-  output = topSort input;
-}

.bin/ttrss-unread

@@ -1,18 +0,0 @@
-#/usr/bin/env -S deno run -A:q
-set -x
-session_cache="$HOME/.cache/tt-rss.session"
-ttrss_endpoint=https://feed.kmein.de/api/
-ttrss_user=k
-ttrss_password=$(pass shared/tt-rss/password)
-
-login() {
-  if [ -f "$session_cache" ]; then
-    session_id="$(cat "$session_cache")"
-  else
-    session_id="$(curl -d '{"op":"login","user":"'"$ttrss_user"'","password":"'"$ttrss_password"'"}' "$ttrss_endpoint" | jq -r .content.session_id)"
-    echo "$session_id" > "$session_cache"
-  fi
-}
-
-login
-curl -d '{"sid":"'"$session_id"'","op":"getUnread"}' "$ttrss_endpoint" | jq .content

.bin/tuesday-1800

@@ -1,16 +0,0 @@
-#!/bin/sh
-set -efux
-expected_max_results=1024 # the upper bound on the number of restaurants
-radius=250
-
-echo '[out:json];node(id:260050809)->.cbase;
-(
-  node(around.cbase:'$radius')[amenity=fast_food];
-  node(around.cbase:'$radius')[amenity=restaurant];
-);out;' \
-  | curl -sSL -d @- -X POST http://overpass-api.de/api/interpreter \
-  | jq --argjson random "$(shuf -i 0-$expected_max_results -n 1)" '
-    .elements
-    | length as $length
-    | .[$random % $length]
-  '

.bin/unicode

@@ -1,8 +0,0 @@
-import sys
-import unicodedata
-
-for index, character in enumerate(sys.stdin.read().strip()):
-  try:
-    print(index, character, hex(ord(character)), unicodedata.category(character), unicodedata.name(character))
-  except:
-    print(index, character, hex(ord(character)))

.bin/watson2fdf.sh

@@ -1,26 +0,0 @@
-project=Filli
-year=2022
-
-for month in Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec; do
-  from="$(date +%F -d "$month 1, $year")"
-  to="$(date +%F -d "$month 1, $year + 1 month")"
-  watson report --json --from "$from" --to "$to" --project "$project"
-done | jq --slurp '
-  def in_array($arr):
-      . as $value | any($arr[]; . == $value);
-
-  map(
-    ["engadin-app","fysiweb","val-muestair","mia-engiadina","ol"] as $official_projects
-    | (.timespan.from | .[0:7]) as $timespan
-    | .projects | .[0]
-    | .time as $total_time
-    | .tags
-    | select(. != null)
-    | map(select(.name | in_array($official_projects)))
-    | (map(.time)|add) as $official_time
-    | map({key:.name, value:.time}) | from_entries
-    | .other |= ($total_time - $official_time)
-    | map_values(. / (60*60) | ceil)
-    | .month |= $timespan
-  )
-'

.github/workflows/flake.yml

@@ -2,7 +2,7 @@ name: Update flake.lock
 on:
   workflow_dispatch: # allows manual triggering
   schedule:
-    - cron: '0 0 * * 0' # runs weekly on Sunday at 00:00
+    - cron: "0 0 * * 0" # runs weekly on Sunday at 00:00
 
 jobs:
   lockfile:

.github/workflows/niveum.yml

@@ -7,33 +7,33 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        system: [makanek,manakish,kabsa,zaatar,ful,fatteh]
+        system: [makanek, manakish, kabsa, zaatar, ful, fatteh]
     steps:
-    - uses: actions/checkout@v3
-    - name: Install QEMU (ARM)
-      run: |
-        sudo apt-get update
-        sudo apt-get install -y qemu-user-static
-      if: ${{ matrix.system == 'ful' }}
-    - name: Install Nix (ARM)
-      uses: cachix/install-nix-action@v16
-      if: ${{ matrix.system == 'ful' }}
-      with:
-        extra_nix_config: |
-          system = aarch64-linux
-    - name: Install Nix (x86_64)
-      uses: cachix/install-nix-action@v16
-      if: ${{ matrix.system != 'ful' }}
-    - name: nixos-rebuild dry-build
-      run: |
-        # remove secrets: ref https://stackoverflow.com/questions/1260748/how-do-i-remove-a-submodule/36593218
-        git submodule deinit -f secrets
-        rm -rf .git/modules/secrets
-        git rm -f secrets
+      - uses: actions/checkout@v3
+      - name: Install QEMU (ARM)
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y qemu-user-static
+        if: ${{ matrix.system == 'ful' }}
+      - name: Install Nix (ARM)
+        uses: cachix/install-nix-action@v16
+        if: ${{ matrix.system == 'ful' }}
+        with:
+          extra_nix_config: |
+            system = aarch64-linux
+      - name: Install Nix (x86_64)
+        uses: cachix/install-nix-action@v16
+        if: ${{ matrix.system != 'ful' }}
+      - name: nixos-rebuild dry-build
+        run: |
+          # remove secrets: ref https://stackoverflow.com/questions/1260748/how-do-i-remove-a-submodule/36593218
+          git submodule deinit -f secrets
+          rm -rf .git/modules/secrets
+          git rm -f secrets
 
-        # recreate secrets
-        mkdir secrets
-        cat secrets.txt | while read -r path; do touch $path; done
-        git add secrets
+          # recreate secrets
+          mkdir secrets
+          cat secrets.txt | while read -r path; do touch $path; done
+          git add secrets
 
-        nix run nixpkgs#nixos-rebuild -- dry-build  --flake $GITHUB_WORKSPACE#${{matrix.system}}
+          nix run nixpkgs#nixos-rebuild -- dry-build  --flake $GITHUB_WORKSPACE#${{matrix.system}}

AGENTS.md

@@ -0,0 +1,96 @@
+# niveum — Agent Notes
+
+## What This Is
+
+A NixOS flake managing ~9 machines (desktops, servers, family laptops) for one user (kmein/kfm).
+Levantine food-themed hostnames: fatteh, kabsa, kibbeh, makanek, manakish, tabula, tahina, zaatar, ful.
+
+## Repository Structure
+
+```
+flake.nix          # ~670 lines — inputs, overlay, nixosConfigurations, apps, packages output
+configs/           # ~50 NixOS config fragments imported by systems
+  default.nix      # 200+ line mega-module for desktop machines (user, shell, gnupg, i18n, etc.)
+  graphical/       # Hyprland + home-manager config (415 lines in home-manager.nix)
+  packages.nix     # ~250 lines of environment.systemPackages
+  bots/            # Telegram/Mastodon/Matrix bot configs
+  keyboard/        # XKB layouts (Coptic, Avestan, Gothic, etc.)
+configs/*.nix      # Individual concerns: bluetooth, sound, printing, ssh, fonts, etc.
+modules/           # Proper NixOS modules with options (retiolum, telegram-bot, passport, power-action, etc.)
+packages/          # ~107 package files (scripts, wrappers, small tools)
+systems/<name>/    # Per-machine: configuration.nix + hardware-configuration.nix + extras
+lib/               # default.nix (niveum helpers), machines.nix (IP/key inventory), panoptikon.nix
+secrets/           # agenix-encrypted .age files (empty dir in checkout, tracked via secrets.txt)
+```
+
+## Key Relationships
+
+- **niphas** (input): Provides shared "how I like things" config — nixosModules (shell, editor, git, desktop, nix, udiskie) and overlay (niphas-* packages). Used in `profiles.default` and `profiles.desktop`.
+- **configs/default.nix**: The "big desktop profile" — imported by fatteh, kabsa, manakish (the main desktop machines). NOT imported by servers or family laptops.
+- **profiles** (in flake.nix): `profiles.default`, `profiles.desktop`, `profiles.server` — lists of modules composed per machine.
+- **lib.niveum**: Custom lib injected via overlay (`pkgs.lib.niveum`) — used everywhere for machine addresses, SSH port, helper functions.
+
+## Coding Conventions
+
+- Packages use `writers.writeDashBin`, `writers.writeBashBin`, or `writers.writePython3Bin`
+- Dependencies are referenced via `lib.getExe pkg` (main executable) or `lib.getExe' pkg "name"` (specific binary)
+- For packages needing many commands via PATH, use `lib.makeBinPath` instead (see `packages/prospekte.nix`)
+- Overlay entries use `prev.callPackage packages/foo.nix { }` pattern
+- Packages are exported via `inherit (pkgs) ...` in the `packages` output
+
+## Known Bugs / Broken References
+
+All previously broken references have been fixed (see commits `36132b04`, `e67d6d7d`).
+
+Remaining issues:
+- `modules/retiolum.nix` uses `<retiolum/hosts>` and `<system-secrets/...>` NIX_PATH lookups — breaks flake purity but works with current `NIX_PATH` setup
+
+## Architectural Issues
+
+### 1. configs/default.nix is a grab-bag (200+ lines, ~15 inline anonymous modules)
+It's a list of `imports` mixing inline `{ ... }` blocks with file imports. Hard to find what's defined where.
+
+### 2. Retiolum secret boilerplate repeated 9 times
+Every system has a near-identical block:
+```nix
+age.secrets.retiolum-rsa = { file = ../../secrets/${hostname}-retiolum-privateKey-rsa.age; mode = "400"; owner = "tinc-retiolum"; ... };
+age.secrets.retiolum-ed25519 = { ... same ... };
+```
+Could be a function or module parameterized by hostname.
+
+### 3. Nginx + ACME boilerplate duplicated
+ful and makanek have identical nginx recommended settings + ACME config.
+
+### 4. niveum-* overlay aliases
+`niveum-terminal`, `niveum-browser`, `niveum-filemanager` are aliases to niphas equivalents. Could be removed by updating ~6 references in configs/ to use niphas-* names directly.
+
+### 5. The `pkgs.lib.niveum` pattern
+Custom lib injected via overlay into `pkgs.lib`. Unconventional — only available where overlay is applied. A `specialArgs` approach or standalone lib would be cleaner.
+
+### 6. Restic backup config scattered
+`services.restic.backups.niveum` is configured in configs/backup.nix, configs/applicative.nix, and extended in 5+ system files. Hard to see what a given machine backs up.
+
+### 7. configs/ vs modules/ distinction blurry
+`configs/` has both stateless config fragments (spacetime.nix = timezone) and stateful ones (backup.nix, cloud.nix). `modules/` has proper option-declaring modules. Some configs/ files import from modules/.
+
+## Machines Overview
+
+| Machine   | Role         | Profile          | Arch    | Notes                               |
+|-----------|--------------|------------------|---------|---------------------------------------|
+| fatteh    | Desktop      | default+desktop  | x86_64  | ThinkPad T480, CUDA, main daily       |
+| kabsa     | Desktop      | default+desktop  | x86_64  | ThinkPad X220, constrained (2 jobs)   |
+| manakish  | Desktop      | default+desktop  | x86_64  | ThinkPad X230                         |
+| kibbeh    | Desktop      | default+desktop  | x86_64  | Pantheon DE, travel laptop            |
+| ful       | Server       | default+server   | aarch64 | Oracle/Hetzner, nginx, web services   |
+| makanek   | Server       | default+server   | x86_64  | Hetzner, gitea, nextcloud, weechat    |
+| zaatar    | Server/Home  | default+server   | x86_64  | Home assistant, backup server         |
+| tabula    | Family laptop| default           | x86_64  | LXQt, user "xenos"                   |
+| tahina    | Family laptop| default           | x86_64  | Pantheon, user "xenos", German        |
+
+## Remaining Improvement Ideas
+
+1. **Extract retiolum secret boilerplate** into a function/module
+2. **Break up configs/default.nix** into proper named files
+3. **Extract nginx+ACME server profile**
+4. **Replace niveum-* aliases** with direct niphas-* references
+5. **Fix modules/retiolum.nix** NIX_PATH usage for flake purity

README.md

@@ -5,10 +5,14 @@
 > [nĭvĕus](https://logeion.uchicago.edu/niveus), a, um, adj. [nix], _of_ or _from snow, snowy, snow-_ (poet.)
 >
 > 1. Lit.: aggeribus niveis informis, Verg. G. 3, 354: aqua, _cooled with snow_, Mart. 12, 17, 6; cf. id. 14, 104 and 117: mons, _covered with snow_, Cat. 64, 240.—
->
 > 2. Transf., _snow-white, snowy_ (mostly poet.): a similitudine sic: Corpore niveum candorem, aspectu igneum ardorem assequebatur, Auct. Her. 4, 33, 44: lacerti, Verg. A. 8, 387: lac, id. E. 2, 20: hanc si capite niveae agnae exorari judicas, Sen. Q. N. 2, 36: Briseis niveo colore, Hor. C. 2, 4, 3: vestis, Ov. M. 10, 432: candidior nivei folio, Galatea, ligustri, id. ib. 13, 789: dens, id. H. 18, 18: quā notam duxit niveus videri, Hor. C. 4, 2, 59: panis, Juv. 5, 70: flumen, _clear, pellucid_, Sen. Hippol. 504: undae, Mart. 7, 32, 11: tribuni, _clothed in white togas_, Calp. Ecl. 7, 29; so, Quirites, Juv. 10, 45.
 
 ## Pressestimmen
+
 > das ist ja pure poesie —[riotbib](https://github.com/riotbib/)
 
 > Deine Configs sind wunderschön <3 —[flxai](https://github.com/flxai/)
+
+## To do
+
+🦗

configs/0ad.nix

@@ -1,8 +0,0 @@
-{ pkgs, ... }:
-{
-  environment.systemPackages = [ pkgs.zeroad ];
-  networking.firewall = {
-    allowedTCPPorts = [ 20595 ];
-    allowedUDPPorts = [ 20595 ];
-  };
-}

configs/admin-essentials.nix

@@ -1,119 +0,0 @@
-{
-  pkgs,
-  niveumPackages,
-  lib,
-  ...
-}: let
-  darwin = lib.strings.hasSuffix "-darwin" pkgs.system;
-in {
-  environment.systemPackages =
-    [
-      pkgs.htop
-      pkgs.w3m
-      pkgs.wget
-      # ARCHIVE TOOLS
-      pkgs.unzip
-      pkgs.unrar
-      pkgs.p7zip
-      pkgs.sshuttle
-      pkgs.zip
-      # MONITORS
-      pkgs.iftop # interface bandwidth monitor
-      pkgs.lsof # list open files
-      # SHELL
-      pkgs.sqlite
-      pkgs.fd # better find
-      pkgs.tree
-      pkgs.parallel # for parallel, since moreutils shadows task spooler
-      pkgs.ripgrep # better grep
-      pkgs.rlwrap
-      pkgs.progress # display progress bars for pipes
-      pkgs.file # determine file type
-      pkgs.gdu # ncurses disk usage (ncdu is broken)
-      pkgs.rmlint # remove duplicate files
-      pkgs.jq # json toolkit
-      pkgs.jless # less(1) for json
-      pkgs.fq # toolkit for yaml, xml and binaries
-      pkgs.bc # calculator
-      pkgs.pari # gp -- better calculator
-      pkgs.ts
-      niveumPackages.vimv
-      niveumPackages.vg
-      niveumPackages.fkill
-      niveumPackages.cyberlocker-tools
-      niveumPackages.untilport
-      niveumPackages.kpaste
-      # HARDWARE
-      pkgs.pciutils # for lspci
-    ]
-    ++ lib.optionals (!darwin) [
-      pkgs.usbutils # for lsusb
-      pkgs.lshw # for lshw
-      pkgs.iotop # I/O load monitor
-      pkgs.psmisc # for killall, pstree
-    ];
-
-
-    security.wrappers = {
-      pmount = {
-        setuid = true;
-        owner = "root";
-        group = "root";
-        source = "${pkgs.pmount}/bin/pmount";
-      };
-      pumount = {
-        setuid = true;
-        owner = "root";
-        group = "root";
-        source = "${pkgs.pmount}/bin/pumount";
-      };
-    };
-
-  environment.shellAliases = let
-    take = pkgs.writers.writeDash "take" ''
-      mkdir "$1" && cd "$1"
-    '';
-    cdt = pkgs.writers.writeDash "cdt" ''
-      cd "$(mktemp -d)"
-      pwd
-    '';
-    wcd = pkgs.writers.writeDash "wcd" ''
-      cd "$(readlink "$(${pkgs.which}/bin/which --skip-alias "$1")" | xargs dirname)/.."
-    '';
-    where = pkgs.writers.writeDash "where" ''
-      readlink "$(${pkgs.which}/bin/which --skip-alias "$1")" | xargs dirname
-    '';
-  in
-    {
-      nixi = "nix repl '<nixpkgs>'";
-      take = "source ${take}";
-      wcd = "source ${wcd}";
-      where = "source ${where}";
-      # temporary files and directories
-      cdt = "source ${cdt}";
-      vit = "$EDITOR $(mktemp)";
-      # file safety
-      mv = "${pkgs.coreutils}/bin/mv --interactive";
-      rm = "${pkgs.coreutils}/bin/rm --interactive";
-      cp = "${pkgs.coreutils}/bin/cp --interactive";
-      # colours
-      cat = "${pkgs.bat}/bin/bat --theme=ansi --style=plain";
-      l = "${pkgs.coreutils}/bin/ls --color=auto --time-style=long-iso --almost-all";
-      ls = "${pkgs.coreutils}/bin/ls --color=auto --time-style=long-iso";
-      ll = "${pkgs.coreutils}/bin/ls --color=auto --time-style=long-iso -l";
-      la = "${pkgs.coreutils}/bin/ls --color=auto --time-style=long-iso --almost-all -l";
-    }
-    // (
-      if darwin
-      then {}
-      else {
-        "ß" = "${pkgs.util-linux}/bin/setsid";
-        ip = "${pkgs.iproute2}/bin/ip -c";
-        # systemd
-        s = "${pkgs.systemd}/bin/systemctl";
-        us = "${pkgs.systemd}/bin/systemctl --user";
-        j = "${pkgs.systemd}/bin/journalctl";
-        uj = "${pkgs.systemd}/bin/journalctl --user";
-      }
-    );
-}

configs/aerc.nix

@@ -2,11 +2,9 @@
   pkgs,
   config,
   lib,
-  niveumPackages,
   ...
-}: let
-  inherit (import ../lib/email.nix) defaults thunderbirdProfile;
-in {
+}:
+{
   age.secrets = {
     email-password-ical-ephemeris = {
       file = ../secrets/email-password-ical-ephemeris.age;
@@ -43,14 +41,15 @@ in {
       extraConfig = {
         database.path = config.home-manager.users.me.accounts.email.maildirBasePath;
         new.tags = "";
-        user.name = defaults.realName;
+        user.name = pkgs.lib.niveum.email.defaults.realName;
         user.primary_email = config.home-manager.users.me.accounts.email.accounts.posteo.address;
       };
     };
 
     programs.mbsync = {
       enable = true;
-      extraConfig = lib.concatStringsSep "\n\n" (lib.mapAttrsToList (name: account: ''
+      extraConfig = lib.concatStringsSep "\n\n" (
+        lib.mapAttrsToList (name: account: ''
           IMAPAccount ${name}
           CertificateFile /etc/ssl/certs/ca-certificates.crt
           Host ${account.imap.host}
@@ -74,30 +73,35 @@ in {
           Patterns *
           Remove None
           SyncState *
-        '')
-        config.home-manager.users.me.accounts.email.accounts);
+        '') config.home-manager.users.me.accounts.email.accounts
+      );
     };
 
     accounts.email.accounts = {
       cock =
-        lib.recursiveUpdate defaults
-        rec {
+        let
+          mailhost = "mail.cock.li";
           address = "2210@cock.li";
+        in
+        lib.recursiveUpdate pkgs.lib.niveum.email.defaults {
+          address = address;
           userName = address;
           passwordCommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.email-password-cock.path}";
           realName = "2210";
-          imap.host = "mail.cock.li";
+          imap.host = mailhost;
           imap.port = 993;
-          smtp.host = imap.host;
-          smtp.port = 25;
+          smtp.host = mailhost;
+          smtp.port = 587;
           smtp.tls.useStartTls = true;
         };
       ical-ephemeris =
-        lib.recursiveUpdate defaults
-        rec {
-          userName = "ical.ephemeris@web.de";
+        let
+          address = "ical.ephemeris@web.de";
+        in
+        lib.recursiveUpdate pkgs.lib.niveum.email.defaults {
+          userName = address;
           realName = "Kieran from iCal Ephemeris";
-          address = userName;
+          address = address;
           passwordCommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.email-password-ical-ephemeris.path}";
           imap.host = "imap.web.de";
           imap.port = 993;
@@ -106,22 +110,24 @@ in {
           smtp.tls.useStartTls = true;
         };
       posteo =
-        lib.recursiveUpdate defaults
-        rec {
+        let
+          mailhost = "posteo.de";
           address = "kieran.meinhardt@posteo.net";
-          aliases = ["kmein@posteo.de"];
+        in
+        lib.recursiveUpdate pkgs.lib.niveum.email.defaults {
+          address = address;
+          aliases = [ "kmein@posteo.de" ];
           userName = address;
-          imap.host = "posteo.de";
+          imap.host = mailhost;
           imap.port = 993;
           imap.tls.enable = true;
-          smtp.host = imap.host;
+          smtp.host = mailhost;
           smtp.port = 465;
           smtp.tls.enable = true;
           primary = true;
           passwordCommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.email-password-posteo.path}";
           himalaya = {
             enable = true;
-            settings.backend = "imap";
           };
           aerc.extraAccounts.pgp-key-id = "9EDE82CC72A343A95266D0F444857074A3ACC8B7";
         };
@@ -133,7 +139,7 @@ in {
       enable = true;
       settings = {
       };
-      profiles.${thunderbirdProfile} = {
+      profiles.${pkgs.lib.niveum.email.thunderbirdProfile} = {
         isDefault = true;
         settings = {
           "mail.default_send_format" = 1;
@@ -141,10 +147,8 @@ in {
           "msgcompose.text_color" = config.lib.stylix.colors.withHashtag.base00;
           "msgcompose.background_color" = config.lib.stylix.colors.withHashtag.base05;
         };
-        userChrome = ''
-        '';
-        userContent = ''
-        '';
+        userChrome = '''';
+        userContent = '''';
         withExternalGnupg = false;
       };
     };
@@ -206,7 +210,7 @@ in {
           "*" = ":filter -x Flagged<Enter>";
         };
         view = {
-          tr = ":pipe ${niveumPackages.trans}/bin/trans -show-original n -b -no-autocorrect<Enter>"; # https://man.sr.ht/~rjarry/aerc/integrations/translator.md
+          tr = ":pipe ${pkgs.trans}/bin/trans -show-original n -b -no-autocorrect<Enter>"; # https://man.sr.ht/~rjarry/aerc/integrations/translator.md
           "/" = ":toggle-key-passthrough <Enter> /";
           q = ":close<Enter>";
           O = ":open<Enter>";
@@ -279,7 +283,9 @@ in {
         ui.spinner = ". , .";
         general.unsafe-accounts-conf = true;
         general.pgp-provider = "gpg";
-        viewer = {pager = "${pkgs.less}/bin/less -R";};
+        viewer = {
+          pager = "${pkgs.less}/bin/less -R";
+        };
         compose = {
           # address-book-cmd = "khard email --remove-first-line --parsable '%s'";
           no-attachment-warning = "(attach|attached|attachments?|anbei|Anhang|angehängt|beigefügt)";
@@ -296,24 +302,26 @@ in {
           "message/rfc822" = "${pkgs.aerc}/libexec/aerc/filters/colorize";
           "application/x-sh" = "${pkgs.bat}/bin/bat -fP -l sh";
         };
-        openers = let
-          as-pdf = pkgs.writers.writeDash "as-pdf" ''
-            d=$(mktemp -d)
-            trap clean EXIT
-            clean() {
-              rm -rf "$d"
-            }
-            ${pkgs.libreoffice}/bin/libreoffice --headless --convert-to pdf "$1" --outdir "$d"
-            ${pkgs.zathura}/bin/zathura "$d"/*.pdf
-          '';
-        in {
-          "image/*" = "${pkgs.nsxiv}/bin/nsxiv";
-          "application/pdf" = "${pkgs.zathura}/bin/zathura";
-          "application/vnd.openxmlformats-officedocument.wordprocessingml.document" = toString as-pdf;
-          "application/vnd.oasis.opendocument.text" = toString as-pdf;
-          "video/*" = "${pkgs.mpv}/bin/mpv";
-          "audio/*" = "${pkgs.mpv}/bin/mpv";
-        };
+        openers =
+          let
+            as-pdf = pkgs.writers.writeDash "as-pdf" ''
+              d=$(mktemp -p "$XDG_RUNTIME_DIR" -d)
+              trap clean EXIT
+              clean() {
+                rm -rf "$d"
+              }
+              ${pkgs.libreoffice}/bin/libreoffice --headless --convert-to pdf "$1" --outdir "$d"
+              ${pkgs.zathura}/bin/zathura "$d"/*.pdf
+            '';
+          in
+          {
+            "image/*" = "${pkgs.nsxiv}/bin/nsxiv";
+            "application/pdf" = "${pkgs.zathura}/bin/zathura";
+            "application/vnd.openxmlformats-officedocument.wordprocessingml.document" = toString as-pdf;
+            "application/vnd.oasis.opendocument.text" = toString as-pdf;
+            "video/*" = "${pkgs.mpv}/bin/mpv";
+            "audio/*" = "${pkgs.mpv}/bin/mpv";
+          };
       };
 
       templates = {

configs/alacritty.nix

@@ -1,33 +1,7 @@
 {
-  pkgs,
-  lib,
-  ...
-}: let
-in {
-  environment.variables.TERMINAL = "alacritty";
-
   home-manager.users.me = {
     programs.alacritty = {
       enable = true;
-      settings = {
-        keyboard.bindings = [
-          {
-            key = "Plus";
-            mods = "Control";
-            action = "IncreaseFontSize";
-          }
-          {
-            key = "Minus";
-            mods = "Control";
-            action = "DecreaseFontSize";
-          }
-          {
-            key = "Key0";
-            mods = "Control";
-            action = "ResetFontSize";
-          }
-        ];
-      };
     };
   };
 }

configs/android.nix

@@ -1,5 +1,5 @@
 {
   programs.adb.enable = true;
 
-  users.users.me.extraGroups = ["adbusers"];
+  users.users.me.extraGroups = [ "adbusers" ];
 }

configs/applicative.nix

@@ -0,0 +1,56 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+{
+  users.users.applicative = {
+    name = "asg";
+    description = "Applicative Systems";
+    hashedPasswordFile = config.age.secrets.kfm-password.path;
+    home = "/home/applicative";
+    uid = 1001;
+    isNormalUser = true;
+    extraGroups = [
+      "pipewire"
+      "audio"
+    ];
+  };
+
+  nixpkgs.overlays = [
+    (final: prev: {
+      niphas-wallpaper = prev.callPackage ../packages/applicative-wallpaper.nix {
+        inherit (config.lib.stylix) colors;
+      };
+    })
+  ];
+
+  # to run nspawn in nix sandbox
+  nix.settings = {
+    auto-allocate-uids = true;
+    system-features = [ "uid-range" ];
+    experimental-features = [
+      "auto-allocate-uids"
+      "cgroups"
+    ];
+    trusted-users = [ config.users.users.applicative.name ];
+  };
+
+  services.restic.backups.niveum = {
+    extraBackupArgs = [
+      "--exclude=${config.users.users.applicative.home}/src/nixpkgs/.git"
+    ];
+    paths = [
+      config.users.users.applicative.home
+    ];
+  };
+
+  security.sudo.extraRules = [
+    {
+      # still required for systemd-nspawn
+      users = [ config.users.users.applicative.name ];
+      commands = [ "ALL" ];
+    }
+  ];
+}

configs/backup.nix

@@ -1,13 +1,13 @@
 {
   pkgs,
   config,
+  lib,
   ...
-}: let
-  inherit (import ../lib) restic;
-in {
+}:
+{
   services.restic.backups.niveum = {
     initialize = true;
-    inherit (restic) repository;
+    repository = pkgs.lib.niveum.restic.repository;
     timerConfig = {
       OnCalendar = "8:00";
       RandomizedDelaySec = "1h";
@@ -38,15 +38,15 @@ in {
 
   environment.systemPackages = [
     (pkgs.writers.writeDashBin "restic-niveum" ''
-      ${pkgs.restic}/bin/restic -r ${restic.repository} -p ${config.age.secrets.restic.path} "$@"
+      ${pkgs.restic}/bin/restic -r ${pkgs.lib.niveum.restic.repository} -p ${config.age.secrets.restic.path} "$@"
     '')
     (pkgs.writers.writeDashBin "restic-mount" ''
-      mountdir=$(mktemp -d)
+      mountdir=$(mktemp -p "$XDG_RUNTIME_DIR" -d "restic-mount-XXXXXXX")
       trap clean EXIT
       clean() {
         rm -r "$mountdir"
       }
-      ${pkgs.restic}/bin/restic -r ${restic.repository} -p ${config.age.secrets.restic.path} mount "$mountdir"
+      ${pkgs.restic}/bin/restic -r ${pkgs.lib.niveum.restic.repository} -p ${config.age.secrets.restic.path} mount "$mountdir"
     '')
   ];
 }

configs/bash.nix

@@ -1,10 +0,0 @@
-{pkgs, ...}: {
-  programs.bash = {
-    promptInit = ''
-      PS1="$(${pkgs.ncurses}/bin/tput bold)\w \$([[ \$? == 0 ]] && echo \"\[\033[1;32m\]\" || echo \"\[\033[1;31m\]\")\$$(${pkgs.ncurses}/bin/tput sgr0) "'';
-    interactiveShellInit = ''
-      set -o vi
-    '';
-    completion.enable = true;
-  };
-}

configs/bluetooth.nix

@@ -1,4 +1,5 @@
-{pkgs, ...}: {
+{ pkgs, ... }:
+{
   hardware.bluetooth = {
     enable = true;
     settings.general = {

configs/bots/autorenkalender.nix

@@ -1,20 +1,19 @@
 {
   config,
-  inputs,
+  pkgs,
   ...
-}: let
-  autorenkalender = inputs.autorenkalender.packages.x86_64-linux.default;
-in {
+}:
+{
   niveum.bots.autorenkalender = {
     enable = true;
     time = "07:00";
     telegram = {
       enable = true;
       tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = ["@autorenkalender"];
+      chatIds = [ "@autorenkalender" ];
       parseMode = "Markdown";
     };
-    command = "${autorenkalender}/bin/autorenkalender";
+    command = "${pkgs.autorenkalender}/bin/autorenkalender";
   };
 
   niveum.passport.services = [

configs/bots/celan.nix

@@ -3,64 +3,69 @@
   lib,
   config,
   ...
-}: {
+}:
+{
   niveum.bots.celan = {
     enable = true;
     time = "08:00";
     telegram = {
       enable = true;
       tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = ["@PaulCelan"];
+      chatIds = [ "@PaulCelan" ];
     };
     mastodon = {
       enable = true;
       tokenFile = config.age.secrets.mastodon-token-celan.path;
       language = "de";
     };
-    command = toString (pkgs.writers.writePython3 "random-celan.py" { libraries = [pkgs.python3Packages.lxml]; } ''
-      from lxml import etree
-      import random
+    command = toString (
+      pkgs.writers.writePython3 "random-celan.py" { libraries = [ pkgs.python3Packages.lxml ]; } ''
+        from lxml import etree
+        import random
 
 
-      def xml_text(elements):
-          return "".join("".join(t.itertext()) for t in elements).strip()
+        def xml_text(elements):
+            return "".join("".join(t.itertext()) for t in elements).strip()
 
 
-      tree = etree.parse('${pkgs.fetchurl {
-        url = "http://c.krebsco.de/celan.tei.xml";
-        hash = "sha256-HgNmJYfhuwyfm+FcNtnnYWpJpIIU1ElHLeLiIFjF9mE=";
-      }}')
-      root = tree.getroot()
+        tree = etree.parse('${
+          pkgs.fetchurl {
+            url = "http://c.krebsco.de/celan.tei.xml";
+            hash = "sha256-HgNmJYfhuwyfm+FcNtnnYWpJpIIU1ElHLeLiIFjF9mE=";
+          }
+        }')
+        root = tree.getroot()
 
-      tei = {"tei": "http://www.tei-c.org/ns/1.0"}
+        tei = {"tei": "http://www.tei-c.org/ns/1.0"}
 
-      poems = root.xpath(".//tei:lg[@type='poem']", namespaces=tei)
+        poems = root.xpath(".//tei:lg[@type='poem']", namespaces=tei)
 
-      poem = random.choice(poems)
+        poem = random.choice(poems)
 
-      for stanza in poem.xpath("./tei:lg[@type='stanza']", namespaces=tei):
-          for line in stanza.xpath('./tei:l', namespaces=tei):
-              if line.text:
-                  print(line.text.strip())
-          print()
+        for stanza in poem.xpath("./tei:lg[@type='stanza']", namespaces=tei):
+            for line in stanza.xpath('./tei:l', namespaces=tei):
+                if line.text:
+                    print(line.text.strip())
+            print()
 
-      current_element = poem
-      while current_element is not None:
-          if current_element.tag == "{http://www.tei-c.org/ns/1.0}text":
-              text_element = current_element
+        current_element = poem
+        while current_element is not None:
+            if current_element.tag == "{http://www.tei-c.org/ns/1.0}text":
+                text_element = current_element
 
-              title = xml_text(text_element.xpath("./tei:front/tei:docTitle",
-                               namespaces=tei))
-              print(f"Aus: #{title.replace(" ", "_")}", end=" ")
+                title = xml_text(text_element.xpath("./tei:front/tei:docTitle",
+                                 namespaces=tei))
+                print(f"Aus: #{title.replace(" ", "_")}", end=" ")
 
-              if date := xml_text(text_element.xpath("./tei:front/tei:docDate",
-                                  namespaces=tei)):
-                  print(f"({date})")
-              break
-          current_element = current_element.getparent()
+                if date := xml_text(text_element.xpath("./tei:front/tei:docDate",
+                                    namespaces=tei)):
+                    print(f"({date})")
+                break
+            current_element = current_element.getparent()
 
-      print("\n\n#PaulCelan #Celan #Lyrik #poetry")
-    '');
+        print("\n\n#PaulCelan #Celan #Lyrik #poetry")
+      ''
+    );
   };
 
   age.secrets = {

configs/bots/default.nix

@@ -1,15 +1,13 @@
 {
   config,
   pkgs,
-  lib,
-  inputs,
   ...
-}: let
-  telebots = inputs.telebots.defaultPackage.x86_64-linux;
+}:
+let
   reverseDirectory = "/run/telegram-reverse";
   proverbDirectory = "/run/telegram-proverb";
-  inherit (import ../../lib) tmpfilesConfig;
-in {
+in
+{
   imports = [
     ./logotheca.nix
     ./transits.nix
@@ -17,18 +15,30 @@ in {
     ./hesychius.nix
     ./smyth.nix
     ./nachtischsatan.nix
-    ./tlg-wotd.nix
+    # ./tlg-wotd.nix TODO reenable
     ./celan.nix
     ./nietzsche.nix
   ];
 
-  systemd.tmpfiles.rules = map (path:
-    tmpfilesConfig {
-      type = "d";
-      mode = "0750";
-      age = "1h";
-      inherit path;
-    }) [reverseDirectory proverbDirectory];
+  age.secrets = {
+    telegram-token-kmein.file = ../../secrets/telegram-token-kmein.age;
+  };
+
+  systemd.tmpfiles.rules =
+    map
+      (
+        path:
+        pkgs.lib.niveum.tmpfilesConfig {
+          type = "d";
+          mode = "0750";
+          age = "1h";
+          inherit path;
+        }
+      )
+      [
+        reverseDirectory
+        proverbDirectory
+      ];
 
   niveum.passport.services = [
     {
@@ -56,12 +66,12 @@ in {
   };
 
   systemd.services.telegram-reverse = {
-    wantedBy = ["multi-user.target"];
+    wantedBy = [ "multi-user.target" ];
     description = "Telegram reverse bot";
-    path = [pkgs.ffmpeg];
-    enable = true;
+    path = [ pkgs.ffmpeg ];
+    enable = false;
     script = ''
-      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${telebots}/bin/telegram-reverse
+      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-reverse
     '';
     serviceConfig.Restart = "always";
     serviceConfig.WorkingDirectory = reverseDirectory;
@@ -69,33 +79,33 @@ in {
   };
 
   systemd.services.telegram-streaming-link = {
-    wantedBy = ["multi-user.target"];
+    wantedBy = [ "multi-user.target" ];
     description = "Telegram bot converting YouTube Music <-> Spotify";
-    enable = true;
+    enable = false;
     script = ''
-      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${telebots}/bin/telegram-streaming-link
+      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-streaming-link
     '';
     serviceConfig.Restart = "always";
     serviceConfig.LoadCredential = "token:${config.age.secrets.telegram-token-streaming-link.path}";
   };
 
   systemd.services.telegram-betacode = {
-    wantedBy = ["multi-user.target"];
+    wantedBy = [ "multi-user.target" ];
     description = "Telegram beta code bot";
-    enable = true;
+    enable = false;
     script = ''
-      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${telebots}/bin/telegram-betacode
+      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-betacode
     '';
     serviceConfig.Restart = "always";
     serviceConfig.LoadCredential = "token:${config.age.secrets.telegram-token-betacode.path}";
   };
 
   systemd.services.telegram-proverb = {
-    wantedBy = ["multi-user.target"];
+    wantedBy = [ "multi-user.target" ];
     description = "Telegram proverb bot";
-    enable = true;
+    enable = false;
     script = ''
-      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${telebots}/bin/telegram-proverb
+      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-proverb
     '';
     serviceConfig.Restart = "always";
     serviceConfig.WorkingDirectory = proverbDirectory;

configs/bots/hesychius.nix

@@ -1,12 +1,9 @@
 {
   pkgs,
   config,
-  inputs,
-  lib,
   ...
-}: let
-  hesychius = inputs.scripts.outPath + "/hesychius/hesychius.txt";
-in {
+}:
+{
   niveum.bots.hesychius = {
     enable = true;
     time = "08:00";
@@ -18,9 +15,9 @@ in {
     telegram = {
       enable = true;
       tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = ["@HesychiosAlexandreus"];
+      chatIds = [ "@HesychiosAlexandreus" ];
     };
-    command = "${pkgs.coreutils}/bin/shuf -n1 ${hesychius}";
+    command = "${pkgs.coreutils}/bin/shuf -n1 ${pkgs.hesychius}";
   };
 
   systemd.timers.bot-hesychius.timerConfig.RandomizedDelaySec = "10h";

configs/bots/logotheca.nix

@@ -1,17 +1,16 @@
 {
   pkgs,
   config,
-  lib,
-  niveumPackages,
   ...
-}: {
+}:
+{
   niveum.bots.logotheca = {
     enable = true;
     time = "08/6:00";
     telegram = {
       enable = true;
       tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = ["-1001760262519"];
+      chatIds = [ "-1001760262519" ];
       parseMode = "Markdown";
     };
     matrix = {
@@ -22,7 +21,7 @@
         "!zlwCuPiCNMSxDviFzA:4d2.org"
       ];
     };
-    command = "${niveumPackages.literature-quote}/bin/literature-quote";
+    command = "${pkgs.literature-quote}/bin/literature-quote";
   };
 
   age.secrets = {

configs/bots/nachtischsatan.nix

@@ -3,31 +3,36 @@
   config,
   lib,
   ...
-}: let
-  nachtischsatan-bot = {tokenFile}:
-    pkgs.writers.writePython3 "nachtischsatan-bot" {
-      libraries = [pkgs.python3Packages.python-telegram-bot];
-    } ''
-      from telegram.ext import Application, ContextTypes, MessageHandler, filters
-      from telegram import Update
-      import random
-      import time
+}:
+let
+  nachtischsatan-bot =
+    { tokenFile }:
+    pkgs.writers.writePython3 "nachtischsatan-bot"
+      {
+        libraries = [ pkgs.python3Packages.python-telegram-bot ];
+      }
+      ''
+        from telegram.ext import Application, ContextTypes, MessageHandler, filters
+        from telegram import Update
+        import random
+        import time
 
 
-      async def flubber(update: Update, context: ContextTypes.DEFAULT_TYPE):
-          time.sleep(random.randrange(4000) / 1000)
-          await update.message.reply_text("*flubberflubber*")
+        async def flubber(update: Update, context: ContextTypes.DEFAULT_TYPE):
+            time.sleep(random.randrange(4000) / 1000)
+            await update.message.reply_text("*flubberflubber*")
 
 
-      with open('${tokenFile}', 'r') as tokenFile:
-          token = tokenFile.read().strip()
-          application = Application.builder().token(token).build()
-          application.add_handler(MessageHandler(filters.ALL, flubber))
-          application.run_polling()
-    '';
-in {
+        with open('${tokenFile}', 'r') as tokenFile:
+            token = tokenFile.read().strip()
+            application = Application.builder().token(token).build()
+            application.add_handler(MessageHandler(filters.ALL, flubber))
+            application.run_polling()
+      '';
+in
+{
   systemd.services.telegram-nachtischsatan = {
-    wantedBy = ["multi-user.target"];
+    wantedBy = [ "multi-user.target" ];
     description = "*flubberflubber*";
     enable = true;
     script = toString (nachtischsatan-bot {

configs/bots/nietzsche.nix

@@ -1,9 +1,9 @@
 {
   config,
   pkgs,
-  niveumPackages,
   ...
-}: {
+}:
+{
   niveum.bots.nietzsche = {
     enable = true;
     time = "08:00";
@@ -12,15 +12,17 @@
       tokenFile = config.age.secrets.mastodon-token-nietzsche.path;
       language = "de";
     };
-    command = toString (pkgs.writers.writeBash "random-nietzsche" ''
-      set -efu
-      random_number=$(( ($RANDOM % 10) + 1 ))
-      if [ "$random_number" -eq 1 ]; then
-        ${niveumPackages.random-zeno}/bin/random-zeno "/Literatur/M/Nietzsche,+Friedrich"
-      else
-        ${niveumPackages.random-zeno}/bin/random-zeno "/Philosophie/M/Nietzsche,+Friedrich"
-      fi
-    '');
+    command = toString (
+      pkgs.writers.writeBash "random-nietzsche" ''
+        set -efu
+        random_number=$(( ($RANDOM % 10) + 1 ))
+        if [ "$random_number" -eq 1 ]; then
+          ${pkgs.random-zeno}/bin/random-zeno "/Literatur/M/Nietzsche,+Friedrich"
+        else
+          ${pkgs.random-zeno}/bin/random-zeno "/Philosophie/M/Nietzsche,+Friedrich"
+        fi
+      ''
+    );
   };
 
   systemd.timers.bot-nietzsche.timerConfig.RandomizedDelaySec = "10h";

configs/bots/smyth.nix

@@ -3,7 +3,8 @@
   pkgs,
   lib,
   ...
-}: {
+}:
+{
   niveum.bots.smyth = {
     enable = true;
     time = "08:00";
@@ -15,42 +16,44 @@
     telegram = {
       enable = true;
       tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = ["@HerbertWeirSmyth"];
+      chatIds = [ "@HerbertWeirSmyth" ];
     };
-    command = toString (pkgs.writers.writeDash "random-smyth" ''
-      set -efu
+    command = toString (
+      pkgs.writers.writeDash "random-smyth" ''
+        set -efu
 
-      good_curl() {
-        ${pkgs.curl}/bin/curl "$@" \
-          --compressed \
-          -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
-          -H 'Accept-Language: en-US,en;q=0.5' \
-          -H 'DNT: 1' \
-          -H 'Connection: keep-alive' \
-          -H 'Upgrade-Insecure-Requests: 1' \
-          -H 'Sec-Fetch-Dest: document' \
-          -H 'Sec-Fetch-Mode: navigate' \
-          -H 'Sec-Fetch-Site: cross-site' \
-          -H 'Priority: u=0, i' \
-          -H 'Pragma: no-cache' \
-          -H 'Cache-Control: no-cache'
-      }
+        good_curl() {
+          ${pkgs.curl}/bin/curl "$@" \
+            --compressed \
+            -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
+            -H 'Accept-Language: en-US,en;q=0.5' \
+            -H 'DNT: 1' \
+            -H 'Connection: keep-alive' \
+            -H 'Upgrade-Insecure-Requests: 1' \
+            -H 'Sec-Fetch-Dest: document' \
+            -H 'Sec-Fetch-Mode: navigate' \
+            -H 'Sec-Fetch-Site: cross-site' \
+            -H 'Priority: u=0, i' \
+            -H 'Pragma: no-cache' \
+            -H 'Cache-Control: no-cache'
+        }
 
-      RANDOM_SECTION=$(
-        good_curl -sSL http://www.perseus.tufts.edu/hopper/xmltoc?doc=Perseus%3Atext%3A1999.04.0007%3Asmythp%3D1 \
-          | ${pkgs.gnugrep}/bin/grep -o 'ref="[^"]*"' \
-          | ${pkgs.coreutils}/bin/shuf -n1 \
-          | ${pkgs.gnused}/bin/sed 's/^ref="//;s/"$//'
-      )
+        RANDOM_SECTION=$(
+          good_curl -sSL http://www.perseus.tufts.edu/hopper/xmltoc?doc=Perseus%3Atext%3A1999.04.0007%3Asmythp%3D1 \
+            | ${pkgs.gnugrep}/bin/grep -o 'ref="[^"]*"' \
+            | ${pkgs.coreutils}/bin/shuf -n1 \
+            | ${pkgs.gnused}/bin/sed 's/^ref="//;s/"$//'
+        )
 
-      url="http://www.perseus.tufts.edu/hopper/text?doc=$RANDOM_SECTION"
-      good_curl -sSL "$url"\
-        | ${pkgs.htmlq}/bin/htmlq '#text_main' \
-        | ${pkgs.gnused}/bin/sed 's/<\/\?hr>//g' \
-        | ${pkgs.pandoc}/bin/pandoc -f html -t plain --wrap=none
+        url="http://www.perseus.tufts.edu/hopper/text?doc=$RANDOM_SECTION"
+        good_curl -sSL "$url"\
+          | ${pkgs.htmlq}/bin/htmlq '#text_main' \
+          | ${pkgs.gnused}/bin/sed 's/<\/\?hr>//g' \
+          | ${pkgs.pandoc}/bin/pandoc -f html -t plain --wrap=none
 
-      printf '\n%s\n\n#AncientGreek' "$url"
-    '');
+        printf '\n%s\n\n#AncientGreek' "$url"
+      ''
+    );
   };
 
   systemd.timers.bot-smyth.timerConfig.RandomizedDelaySec = "10h";

configs/bots/tlg-wotd.nix

@@ -1,140 +1,154 @@
 {
   pkgs,
-  lib,
   config,
-  niveumPackages,
   ...
-}: let
+}:
+let
   mastodonEndpoint = "https://social.krebsco.de";
-in {
+in
+{
   systemd.services.bot-tlg-wotd = {
+    # TODO reenable
+    # once https://github.com/NixOS/nixpkgs/pull/462893 is in stable NixOS
     enable = true;
-    wants = ["network-online.target"];
+    wants = [ "network-online.target" ];
     startAt = "9:30";
-    path = [ pkgs.jq pkgs.curl pkgs.recode pkgs.deno pkgs.imagemagick pkgs.gawk pkgs.gnugrep pkgs.coreutils ];
+    path = [
+      pkgs.jq
+      pkgs.curl
+      pkgs.recode
+      pkgs.deno
+      pkgs.imagemagick
+      pkgs.gawk
+      pkgs.gnugrep
+      pkgs.coreutils
+    ];
     environment = {
       NPM_CONFIG_CACHE = "/tmp";
       CLTK_DATA = "/tmp";
     };
     script = ''
-      set -efux
+        set -efux
 
-      chat_id=@tlgwotd
+        chat_id=@tlgwotd
 
-      export TELEGRAM_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/telegram-token")"
-      export MASTODON_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/mastodon-token")"
+        export TELEGRAM_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/telegram-token")"
+        export MASTODON_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/mastodon-token")"
 
-      json_data=$(curl -sSL http://stephanus.tlg.uci.edu/Iris/Wotd | recode html..utf8)
+        json_data=$(curl -sSL http://stephanus.tlg.uci.edu/Iris/Wotd | recode html..utf8)
 
-      word=$(echo "$json_data" | jq -r '.word')
-      compact_word=$(echo "$word" | sed 's/,.*$//')
-      definition=$(echo "$json_data" | jq -r '.definition | sub("<.*>"; "") | rtrimstr(" ")')
-      first_occurrence=$(echo "$json_data" | jq -r '.firstOccurrence')
-      total_occurrences=$(echo "$json_data" | jq -r '.totalOccurrences')
-      telegram_caption="*$word* ‘$definition’
+        word=$(echo "$json_data" | jq -r '.word')
+        compact_word=$(echo "$word" | sed 's/,.*$//')
+        definition=$(echo "$json_data" | jq -r '.definition | sub("<.*>"; "") | rtrimstr(" ")')
+        first_occurrence=$(echo "$json_data" | jq -r '.firstOccurrence')
+        total_occurrences=$(echo "$json_data" | jq -r '.totalOccurrences')
+        telegram_caption="*$word* ‘$definition’
 
-    First occurrence (century): $first_occurrence
-    Number of occurrences (in all Ancient Greek texts): $total_occurrences"
-      mastodon_caption="$word ‘$definition’
+      First occurrence (century): $first_occurrence
+      Number of occurrences (in all Ancient Greek texts): $total_occurrences"
+        mastodon_caption="$word ‘$definition’
 
-    First occurrence (century): $first_occurrence
-    Number of occurrences (in all Ancient Greek texts): $total_occurrences"
+      First occurrence (century): $first_occurrence
+      Number of occurrences (in all Ancient Greek texts): $total_occurrences"
 
-      #ancientgreek #classics #wotd #wordoftheday
+        #ancientgreek #classics #wotd #wordoftheday
 
-      transliteration=$(${pkgs.writers.makePythonWriter pkgs.python311 pkgs.python311Packages pkgs.python3Packages "translit.py" {
-        # revert to pkgs.writers.writePython3 once https://github.com/NixOS/nixpkgs/pull/353367 is merged
-        libraries = [ pkgs.python3Packages.cltk ];
-      } ''
-        import sys
-        from cltk.phonology.grc.transcription import Transcriber
+        transliteration=$(${
+          pkgs.writers.writePython3 "translit.py"
+            {
+              libraries = py: [ py.cltk ];
+            }
+            ''
+              import sys
+              from cltk.phonology.grc.transcription import Transcriber
 
-        probert = Transcriber("Attic", "Probert")
-        text = " ".join(sys.argv[1:])
-        ipa = probert.transcribe(text)
+              probert = Transcriber("Attic", "Probert")
+              text = " ".join(sys.argv[1:])
+              ipa = probert.transcribe(text)
 
-        print(ipa)
-      ''} "$compact_word")
+              print(ipa)
+            ''
+        } "$compact_word")
 
 
-      photo_path=/tmp/output.png
+        photo_path=/tmp/output.png
 
-      hex_to_rgb() {
-          hex="$1"
-          r=$(printf "%d" "0x$(echo "$hex" | cut -c2-3)")
-          g=$(printf "%d" "0x$(echo "$hex" | cut -c4-5)")
-          b=$(printf "%d" "0x$(echo "$hex" | cut -c6-7)")
-          echo "$r $g $b"
-      }
+        hex_to_rgb() {
+            hex="$1"
+            r=$(printf "%d" "0x$(echo "$hex" | cut -c2-3)")
+            g=$(printf "%d" "0x$(echo "$hex" | cut -c4-5)")
+            b=$(printf "%d" "0x$(echo "$hex" | cut -c6-7)")
+            echo "$r $g $b"
+        }
 
-      calculate_luminance() {
-          r="$1"
-          g="$2"
-          b="$3"
+        calculate_luminance() {
+            r="$1"
+            g="$2"
+            b="$3"
 
-          r_l=$(echo "$r" | awk '{print ($1 / 255 <= 0.03928) ? $1 / 255 / 12.92 : (($1 / 255 + 0.055) / 1.055)^2.4}')
-          g_l=$(echo "$g" | awk '{print ($1 / 255 <= 0.03928) ? $1 / 255 / 12.92 : (($1 / 255 + 0.055) / 1.055)^2.4}')
-          b_l=$(echo "$b" | awk '{print ($1 / 255 <= 0.03928) ? $1 / 255 / 12.92 : (($1 / 255 + 0.055) / 1.055)^2.4}')
+            r_l=$(echo "$r" | awk '{print ($1 / 255 <= 0.03928) ? $1 / 255 / 12.92 : (($1 / 255 + 0.055) / 1.055)^2.4}')
+            g_l=$(echo "$g" | awk '{print ($1 / 255 <= 0.03928) ? $1 / 255 / 12.92 : (($1 / 255 + 0.055) / 1.055)^2.4}')
+            b_l=$(echo "$b" | awk '{print ($1 / 255 <= 0.03928) ? $1 / 255 / 12.92 : (($1 / 255 + 0.055) / 1.055)^2.4}')
 
-          echo "$r_l $g_l $b_l" | awk '{print 0.2126*$1 + 0.7152*$2 + 0.0722*$3}'
-      }
+            echo "$r_l $g_l $b_l" | awk '{print 0.2126*$1 + 0.7152*$2 + 0.0722*$3}'
+        }
 
 
-      hex_color="#$(echo "$compact_word" | md5sum | cut -c 1-6)"
-      if echo "$hex_color" | grep -qE '^#[0-9A-Fa-f]{6}$'; then
-          set -- $(hex_to_rgb "$hex_color")
-          r="$1"
-          g="$2"
-          b="$3"
-      fi
+        hex_color="#$(echo "$compact_word" | md5sum | cut -c 1-6)"
+        if echo "$hex_color" | grep -qE '^#[0-9A-Fa-f]{6}$'; then
+            set -- $(hex_to_rgb "$hex_color")
+            r="$1"
+            g="$2"
+            b="$3"
+        fi
 
-      luminance=$(calculate_luminance "$r" "$g" "$b")
+        luminance=$(calculate_luminance "$r" "$g" "$b")
 
-      threshold="0.1"
-      echo "$r $g $b"
-      if [ "$(echo "$luminance" | awk -v threshold="$threshold" '{print ($1 > threshold)}')" -eq 1 ]; then
-          color1="black"
-          color2="#333"
-      else
-          color1="white"
-          color2=lightgrey
-      fi
+        threshold="0.1"
+        echo "$r $g $b"
+        if [ "$(echo "$luminance" | awk -v threshold="$threshold" '{print ($1 > threshold)}')" -eq 1 ]; then
+            color1="black"
+            color2="#333"
+        else
+            color1="white"
+            color2=lightgrey
+        fi
 
-      magick -size 1400x846 \
-          xc:"$hex_color" \
-          -font "${pkgs.gentium}/share/fonts/truetype/GentiumBookPlus-Bold.ttf" \
-          -fill "$color1" \
-          -pointsize 150 -gravity west \
-          -annotate +100-160 "$compact_word" \
-          -font "${pkgs.gentium}/share/fonts/truetype/GentiumBookPlus-Regular.ttf" \
-          -fill "$color2" \
-          -pointsize 60 -gravity west \
-          -annotate +100+00 "$transliteration" \
-          -fill "$color1" \
-          -annotate +100+120 "‘$definition’" \
-          -fill "$color2" \
-          -pointsize 40 -gravity southwest \
-          -annotate +100+60 "attested $total_occurrences times" \
-          -pointsize 40 -gravity southeast \
-          -annotate +100+60 "$(date -I)" \
-          "$photo_path"
+        magick -size 1400x846 \
+            xc:"$hex_color" \
+            -font "${pkgs.gentium}/share/fonts/truetype/GentiumBookPlus-Bold.ttf" \
+            -fill "$color1" \
+            -pointsize 150 -gravity west \
+            -annotate +100-160 "$compact_word" \
+            -font "${pkgs.gentium}/share/fonts/truetype/GentiumBookPlus-Regular.ttf" \
+            -fill "$color2" \
+            -pointsize 60 -gravity west \
+            -annotate +100+00 "$transliteration" \
+            -fill "$color1" \
+            -annotate +100+120 "‘$definition’" \
+            -fill "$color2" \
+            -pointsize 40 -gravity southwest \
+            -annotate +100+60 "attested $total_occurrences times" \
+            -pointsize 40 -gravity southeast \
+            -annotate +100+60 "$(date -I)" \
+            "$photo_path"
 
-      curl -X POST "https://api.telegram.org/bot$TELEGRAM_TOKEN/sendPhoto" \
-           -F "chat_id=\"$chat_id\"" \
-           -F "photo=@$photo_path" \
-           -F parse_mode=Markdown \
-           -F caption="$telegram_caption"
+        curl -X POST "https://api.telegram.org/bot$TELEGRAM_TOKEN/sendPhoto" \
+             -F "chat_id=\"$chat_id\"" \
+             -F "photo=@$photo_path" \
+             -F parse_mode=Markdown \
+             -F caption="$telegram_caption"
 
-      mastodon_upload_response=$(curl -X POST "${mastodonEndpoint}/api/v2/media" \
-          -H "Authorization: Bearer $MASTODON_TOKEN" \
-          -F "file=@$photo_path" \
-          -F "description=$word ‘$definition’")
-      mastodon_image_id=$(echo $mastodon_upload_response | jq -r .id)
-      curl -X POST "${mastodonEndpoint}/api/v1/statuses" \
-          -H "Authorization: Bearer $MASTODON_TOKEN" \
-          -d "status=$mastodon_caption" \
-          -d "visibility=public" \
-          -d "media_ids[]=$mastodon_image_id"
+        mastodon_upload_response=$(curl -X POST "${mastodonEndpoint}/api/v2/media" \
+            -H "Authorization: Bearer $MASTODON_TOKEN" \
+            -F "file=@$photo_path" \
+            -F "description=$word ‘$definition’")
+        mastodon_image_id=$(echo $mastodon_upload_response | jq -r .id)
+        curl -X POST "${mastodonEndpoint}/api/v1/statuses" \
+            -H "Authorization: Bearer $MASTODON_TOKEN" \
+            -d "status=$mastodon_caption" \
+            -d "visibility=public" \
+            -d "media_ids[]=$mastodon_image_id"
     '';
     serviceConfig = {
       Type = "oneshot";
@@ -149,7 +163,6 @@ in {
   };
 
   age.secrets = {
-    telegram-token-kmein.file = ../../secrets/telegram-token-kmein.age;
     mastodon-token-tlgwotd.file = ../../secrets/mastodon-token-tlgwotd.age;
   };
 

configs/bots/transits.nix

@@ -3,7 +3,8 @@
   pkgs,
   lib,
   ...
-}: let
+}:
+let
   toSymbols = pkgs.writers.writeDash "to-symbols" ''
     ${pkgs.gnused}/bin/sed '
       s/\bTri\b/△/;
@@ -40,7 +41,8 @@
       s/^\s*//
     '
   '';
-in {
+in
+{
   niveum.bots.transits = {
     enable = true;
     time = "*:0/1";
@@ -51,19 +53,21 @@ in {
     telegram = {
       enable = true;
       tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = ["-1001796440545"];
+      chatIds = [ "-1001796440545" ];
     };
-    command = toString (pkgs.writers.writeDash "common-transits" ''
-      set -efu
+    command = toString (
+      pkgs.writers.writeDash "common-transits" ''
+        set -efu
 
-      now=$(${pkgs.coreutils}/bin/date +%_H:%M | ${pkgs.gnused}/bin/sed 's/^\s*//')
-      date=$(${pkgs.coreutils}/bin/date +'%m %d %Y')
-      (
-        cd ${pkgs.astrolog}/bin
-        # ./astrolog -Yt -Yd -q 10 22 1999 6:32 -zN Kassel -td $date -R Uranus Neptune Pluto "North Node"
-        ./astrolog -qd $date -zN Berlin -Yt -Yd -d -R Uranus Neptune Pluto "North Node" -A 2
-      ) | ${toSymbols} | ${pkgs.coreutils}/bin/sort -n | ${pkgs.gnugrep}/bin/grep "^$now" || :
-    '');
+        now=$(${pkgs.coreutils}/bin/date +%_H:%M | ${pkgs.gnused}/bin/sed 's/^\s*//')
+        date=$(${pkgs.coreutils}/bin/date +'%m %d %Y')
+        (
+          cd ${pkgs.astrolog}/bin
+          # ./astrolog -Yt -Yd -q 10 22 1999 6:32 -zN Kassel -td $date -R Uranus Neptune Pluto "North Node"
+          ./astrolog -qd $date -zN Berlin -Yt -Yd -d -R Uranus Neptune Pluto "North Node" -A 2
+        ) | ${toSymbols} | ${pkgs.coreutils}/bin/sort -n | ${pkgs.gnugrep}/bin/grep "^$now" || :
+      ''
+    );
   };
 
   age.secrets = {

configs/browser.nix

@@ -1,11 +1,11 @@
 {
   config,
   pkgs,
-  niveumPackages,
   ...
-}: {
+}:
+{
   environment.systemPackages = [
-    niveumPackages.cro
+    pkgs.cro
     pkgs.tor-browser
     pkgs.firefox
     pkgs.brave
@@ -14,76 +14,78 @@
   home-manager.users.me = {
     programs.firefox = {
       enable = true;
-      profiles = let
-        defaultSettings = {
-          "beacon.enabled" = false;
-          "browser.bookmarks.showMobileBookmarks" = true;
-          "browser.newtab.preload" = false;
-          "browser.search.isUS" = false;
-          "browser.search.region" = "DE";
-          "browser.send_pings" = false;
-          "browser.shell.checkDefaultBrowser" = false;
-          "browser.startup.homepage" = "chrome://browser/content/blanktab.html";
-          "browser.uidensity" = 1;
-          "browser.urlbar.placeholderName" = "Search";
-          "datareporting.healthreport.service.enabled" = false;
-          "datareporting.healthreport.uploadEnabled" = false;
-          "datareporting.policy.dataSubmissionEnabled" = false;
-          "datareporting.sessions.current.clean" = true;
-          "distribution.searchplugins.defaultLocale" = "de-DE";
-          "general.smoothScroll" = true;
-          "identity.fxaccounts.account.device.name" = config.networking.hostName;
-          "network.cookie.cookieBehavior" = 1;
-          "privacy.donottrackheader.enabled" = true;
-          "privacy.trackingprotection.enabled" = true;
-          "privacy.trackingprotection.pbmode.enabled" = true;
-          "privacy.trackingprotection.socialtracking.enabled" = true;
-          "services.sync.declinedEngines" = "passwords";
-          "services.sync.engine.passwords" = false;
-          "signon.autofillForms" = false;
-          "signon.rememberSignons" = false;
-          "toolkit.legacyUserProfileCustomizations.stylesheets" = true;
-          "toolkit.telemetry.archive.enabled" = false;
-          "toolkit.telemetry.bhrPing.enabled" = false;
-          "toolkit.telemetry.cachedClientID" = "";
-          "toolkit.telemetry.enabled" = false;
-          "toolkit.telemetry.firstShutdownPing.enabled" = false;
-          "toolkit.telemetry.hybridContent.enabled" = false;
-          "toolkit.telemetry.newProfilePing.enabled" = false;
-          "toolkit.telemetry.prompted" = 2;
-          "toolkit.telemetry.rejected" = true;
-          "toolkit.telemetry.server" = "";
-          "toolkit.telemetry.shutdownPingSender.enabled" = false;
-          "toolkit.telemetry.unified" = false;
-          "toolkit.telemetry.unifiedIsOptIn" = false;
-          "toolkit.telemetry.updatePing.enabled" = false;
-          "ui.prefersReducedMotion" = 1;
+      profiles =
+        let
+          defaultSettings = {
+            "beacon.enabled" = false;
+            "browser.bookmarks.showMobileBookmarks" = true;
+            "browser.newtab.preload" = false;
+            "browser.search.isUS" = false;
+            "browser.search.region" = "DE";
+            "browser.send_pings" = false;
+            "browser.shell.checkDefaultBrowser" = false;
+            "browser.startup.homepage" = "chrome://browser/content/blanktab.html";
+            "browser.uidensity" = 1;
+            "browser.urlbar.placeholderName" = "Search";
+            "datareporting.healthreport.service.enabled" = false;
+            "datareporting.healthreport.uploadEnabled" = false;
+            "datareporting.policy.dataSubmissionEnabled" = false;
+            "datareporting.sessions.current.clean" = true;
+            "distribution.searchplugins.defaultLocale" = "de-DE";
+            "general.smoothScroll" = true;
+            "identity.fxaccounts.account.device.name" = config.networking.hostName;
+            "network.cookie.cookieBehavior" = 1;
+            "privacy.donottrackheader.enabled" = true;
+            "privacy.trackingprotection.enabled" = true;
+            "privacy.trackingprotection.pbmode.enabled" = true;
+            "privacy.trackingprotection.socialtracking.enabled" = true;
+            "services.sync.declinedEngines" = "passwords";
+            "services.sync.engine.passwords" = false;
+            "signon.autofillForms" = false;
+            "signon.rememberSignons" = false;
+            "toolkit.legacyUserProfileCustomizations.stylesheets" = true;
+            "toolkit.telemetry.archive.enabled" = false;
+            "toolkit.telemetry.bhrPing.enabled" = false;
+            "toolkit.telemetry.cachedClientID" = "";
+            "toolkit.telemetry.enabled" = false;
+            "toolkit.telemetry.firstShutdownPing.enabled" = false;
+            "toolkit.telemetry.hybridContent.enabled" = false;
+            "toolkit.telemetry.newProfilePing.enabled" = false;
+            "toolkit.telemetry.prompted" = 2;
+            "toolkit.telemetry.rejected" = true;
+            "toolkit.telemetry.server" = "";
+            "toolkit.telemetry.shutdownPingSender.enabled" = false;
+            "toolkit.telemetry.unified" = false;
+            "toolkit.telemetry.unifiedIsOptIn" = false;
+            "toolkit.telemetry.updatePing.enabled" = false;
+            "ui.prefersReducedMotion" = 1;
+          };
+        in
+        {
+          default = {
+            id = 0;
+            isDefault = true;
+            settings = defaultSettings;
+            # extensions = with pkgs.nur.repos.rycee.firefox-addons; [
+            #   ublock-origin
+            #   darkreader
+            #   sponsorblock
+            #   consent-o-matic
+            #   i-dont-care-about-cookies
+            #   # auto-tab-discard TODO what is this
+            # ];
+            userChrome = ''
+              #TabsToolbar {
+                visibility: collapse !important;
+              }
+            '';
+          };
         };
-      in {
-        default = {
-          id = 0;
-          isDefault = true;
-          settings = defaultSettings;
-          # extensions = with pkgs.nur.repos.rycee.firefox-addons; [
-          #   ublock-origin
-          #   darkreader
-          #   sponsorblock
-          #   consent-o-matic
-          #   i-dont-care-about-cookies
-          #   # auto-tab-discard TODO what is this
-          # ];
-          userChrome = ''
-            #TabsToolbar {
-              visibility: collapse !important;
-            }
-          '';
-        };
-      };
     };
   };
 
   home-manager.users.me = {
-    stylix.targets.firefox.profileNames = ["default"];
+    stylix.targets.firefox.profileNames = [ "default" ];
   };
 
   environment.variables.BROWSER = "firefox";

configs/ccc.nix

@@ -1,28 +1,38 @@
-{pkgs, ...}:
-# https://paste.sr.ht/~erictapen/11716989e489b600f237041b6d657fdf0ee17b34
-let
-  certificate = pkgs.stdenv.mkDerivation rec {
-    name = "dst-root-ca-x3.pem";
-    src = builtins.toFile "${name}.sed" ''
-      1,/DST Root CA X3/d
-      1,/-----END CERTIFICATE-----/p
-    '';
-    nativeBuildInputs = with pkgs; [cacert gnused];
-    phases = "installPhase";
-    installPhase = ''
-      ${pkgs.gnused}/bin/sed -n -f $src ${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt > $out
-    '';
-  };
-in {
-  networking.wireless.networks."36C3" = {
-    auth = ''
-      key_mgmt=WPA-EAP
-      eap=TTLS
-      identity="kmein"
-      password=" "
-      ca_cert="${certificate}"
-      altsubject_match="DNS:radius.c3noc.net"
-      phase2="auth=PAP"
-    '';
+{ pkgs, ... }:
+{
+  networking.networkmanager.ensureProfiles.profiles = {
+    "39C3" = {
+      connection = {
+        id = "39C3";
+        type = "wifi";
+      };
+      wifi = {
+        mode = "infrastructure";
+        ssid = "39C3";
+      };
+      wifi-security = {
+        auth-alg = "open";
+        key-mgmt = "wpa-eap";
+      };
+      "802-1x" = {
+        anonymous-identity = "39C3";
+        eap = "ttls;";
+        identity = "39C3";
+        password = "39C3";
+        phase2-auth = "pap";
+        altsubject-matches = "DNS:radius.c3noc.net";
+        ca-cert = "${builtins.fetchurl {
+          url = "https://letsencrypt.org/certs/isrgrootx1.pem";
+          sha256 = "sha256:1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92";
+        }}";
+      };
+      ipv4 = {
+        method = "auto";
+      };
+      ipv6 = {
+        addr-gen-mode = "default";
+        method = "auto";
+      };
+    };
   };
 }

configs/clipboard.nix

@@ -2,6 +2,7 @@
   config,
   pkgs,
   ...
-}: {
+}:
+{
   services.clipmenu.enable = true;
 }

configs/cloud.nix

@@ -3,9 +3,8 @@
   lib,
   pkgs,
   ...
-}: let
-  inherit (import ../lib) tmpfilesConfig;
-in {
+}:
+{
   systemd.user.services.systemd-tmpfiles-clean = {
     enable = true;
     wantedBy = [ "default.target" ];
@@ -16,27 +15,40 @@ in {
     };
   };
 
-  systemd.user.tmpfiles.users.me.rules = map tmpfilesConfig [
-    {
-      type = "d";
-      mode = "0755";
-      age = "7d";
-      path = "${config.users.users.me.home}/sync/Downloads";
-    }
-    {
-      type = "d";
-      mode = "0755";
-      age = "7d";
-      path = "${config.users.users.me.home}/cloud/nextcloud/tmp";
-    }
-  ] ++ map (path: tmpfilesConfig {
-      type = "L+";
-      user = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "0755";
-      argument = "${config.users.users.me.home}/sync/${path}";
-      path = "${config.users.users.me.home}/${path}";
-  }) [".ssh" ".gnupg" ".pki" ".local/share/aerc"];
+  systemd.user.tmpfiles.users.me.rules =
+    map pkgs.lib.niveum.tmpfilesConfig [
+      {
+        type = "d";
+        mode = "0755";
+        age = "7d";
+        path = "${config.users.users.me.home}/sync/Downloads";
+      }
+      {
+        type = "d";
+        mode = "0755";
+        age = "7d";
+        path = "${config.users.users.me.home}/cloud/nextcloud/tmp";
+      }
+    ]
+    ++
+      map
+        (
+          path:
+          pkgs.lib.niveum.tmpfilesConfig {
+            type = "L+";
+            user = config.users.users.me.name;
+            group = config.users.users.me.group;
+            mode = "0755";
+            argument = "${config.users.users.me.home}/sync/${path}";
+            path = "${config.users.users.me.home}/${path}";
+          }
+        )
+        [
+          ".ssh"
+          ".gnupg"
+          ".pki"
+          ".local/share/aerc"
+        ];
 
   services.gnome.gnome-keyring.enable = true;
   security.pam.services.lightdm.enableGnomeKeyring = true;
@@ -50,20 +62,22 @@ in {
 
   systemd.user.services.nextcloud-syncer = {
     enable = false;
-    wants = ["network-online.target"];
-    wantedBy = ["default.target"];
+    wants = [ "network-online.target" ];
+    wantedBy = [ "default.target" ];
     startAt = "*:00/10";
-    script = let
-      kieran = {
-        user = "kieran";
-        passwordFile = config.age.secrets.nextcloud-password-kieran.path;
-        endpoint = "https://cloud.kmein.de";
-        target = "${config.users.users.me.home}/notes";
-      };
-    in ''
-      mkdir -p ${lib.escapeShellArg kieran.target}
-      ${pkgs.nextcloud-client}/bin/nextcloudcmd --non-interactive --user ${kieran.user} --password "$(cat ${kieran.passwordFile})" --path /Notes ${lib.escapeShellArg kieran.target} ${kieran.endpoint}
-    '';
+    script =
+      let
+        kieran = {
+          user = "kieran";
+          passwordFile = config.age.secrets.nextcloud-password-kieran.path;
+          endpoint = "https://cloud.kmein.de";
+          target = "${config.users.users.me.home}/notes";
+        };
+      in
+      ''
+        mkdir -p ${lib.escapeShellArg kieran.target}
+        ${pkgs.nextcloud-client}/bin/nextcloudcmd --non-interactive --user ${kieran.user} --password "$(cat ${kieran.passwordFile})" --path /Notes ${lib.escapeShellArg kieran.target} ${kieran.endpoint}
+      '';
     serviceConfig = {
       Type = "oneshot";
       Restart = "on-failure";
@@ -79,19 +93,22 @@ in {
       } | ${pkgs.fzf}/bin/fzf)"
       exec ${pkgs.zathura}/bin/zathura "$book"
     '')
-    (let
-      kieran = {
-        user = "kieran.meinhardt@gmail.com";
-        passwordFile = config.age.secrets.mega-password.path;
-      };
-      megatools = command: ''${pkgs.megatools}/bin/megatools ${command} --username ${lib.escapeShellArg kieran.user} --password "$(cat ${kieran.passwordFile})"'';
-    in
+    (
+      let
+        kieran = {
+          user = "kieran.meinhardt@gmail.com";
+          passwordFile = config.age.secrets.mega-password.path;
+        };
+        megatools =
+          command:
+          ''${pkgs.megatools}/bin/megatools ${command} --username ${lib.escapeShellArg kieran.user} --password "$(cat ${kieran.passwordFile})"'';
+      in
       pkgs.writers.writeDashBin "book-mega" ''
         set -efu
         selection="$(${megatools "ls"} | ${pkgs.fzf}/bin/fzf)"
         test -n "$selection" || exit 1
 
-        tmpdir="$(mktemp -d)"
+        tmpdir="$(mktemp -p "$XDG_RUNTIME_DIR" -d)"
         trap clean EXIT
         clean() {
           rm -rf "$tmpdir"
@@ -102,7 +119,8 @@ in {
           ${megatools "get"} "$selection"
           exec ${pkgs.zathura}/bin/zathura "$(basename "$selection")"
         )
-      '')
+      ''
+    )
   ];
 
   age.secrets.mega-password = {
@@ -121,16 +139,25 @@ in {
     cert = config.age.secrets.syncthing-cert.path;
     key = config.age.secrets.syncthing-key.path;
     settings = {
-      inherit ((import ../lib).syncthing) devices;
+      devices = pkgs.lib.niveum.syncthingIds;
       folders = {
         "${config.users.users.me.home}/sync" = {
-          devices = ["kabsa" "manakish" "fatteh"];
+          devices = [
+            "kabsa"
+            "manakish"
+            "fatteh"
+          ];
           label = "sync";
           versioning.type = "trashcan";
           versioning.params.cleanoutDays = 100;
         };
         "${config.users.users.me.home}/mobile" = {
-          devices = ["kabsa" "manakish" "fatteh" "kibbeh"];
+          devices = [
+            "kabsa"
+            "manakish"
+            "fatteh"
+            "kibbeh"
+          ];
           id = "mobile";
           label = "mobile";
           versioning.type = "trashcan";

configs/default.nix

@@ -2,19 +2,13 @@
   pkgs,
   lib,
   config,
-  niveumPackages,
-  inputs,
   ...
 }:
 let
   inherit (lib.strings) makeBinPath;
-  inherit (import ../lib) localAddresses kieran remoteDir;
-  defaultApplications = (import ../lib).defaultApplications { inherit pkgs; };
 in
 {
   imports = [
-    inputs.self.nixosModules.system-dependent
-    inputs.self.nixosModules.power-action
     {
       boot.supportedFilesystems = [ "ntfs" ];
     }
@@ -22,9 +16,6 @@ in
       nixpkgs = {
         config = {
           allowUnfree = true;
-          packageOverrides = pkgs: {
-            dmenu = pkgs.writers.writeDashBin "dmenu" ''exec ${pkgs.rofi}/bin/rofi -dmenu "$@"'';
-          };
           permittedInsecurePackages = [
           ];
         };
@@ -40,7 +31,7 @@ in
           file = ../secrets/di-fm-key.age;
           owner = config.users.users.me.name;
           group = config.users.users.me.group;
-          mode = "400";
+          mode = "440";
         };
         restic = {
           file = ../secrets/restic.age;
@@ -68,13 +59,15 @@ in
 
       users.users.me = {
         name = "kfm";
-        description = kieran.name;
+        description = pkgs.lib.niveum.kieran.name;
         hashedPasswordFile = config.age.secrets.kfm-password.path;
         isNormalUser = true;
         uid = 1000;
         extraGroups = [
           "pipewire"
           "audio"
+          "lp"
+          "scanner"
         ];
       };
 
@@ -90,17 +83,12 @@ in
       environment.interactiveShellInit = "export PATH=$PATH";
       environment.shellAliases =
         let
-          swallow = command: "${niveumPackages.swallow}/bin/swallow ${command}";
+          swallow = command: "${pkgs.swallow}/bin/swallow ${command}";
         in
         {
-          o = "${pkgs.xdg-utils}/bin/xdg-open";
-          ns = "nix-shell --run zsh";
-          pbcopy = "${pkgs.xclip}/bin/xclip -selection clipboard -in";
-          pbpaste = "${pkgs.xclip}/bin/xclip -selection clipboard -out";
-          tmux = "${pkgs.tmux}/bin/tmux -2";
           sxiv = swallow "${pkgs.nsxiv}/bin/nsxiv";
           zathura = swallow "${pkgs.zathura}/bin/zathura";
-          im = "${pkgs.openssh}/bin/ssh weechat@makanek -t tmux attach-session -t IM";
+          im = "${pkgs.openssh}/bin/ssh weechat@makanek -t screen -x weechat";
           yt = "${pkgs.yt-dlp}/bin/yt-dlp --add-metadata -ic"; # Download video link
           yta = "${pkgs.yt-dlp}/bin/yt-dlp --add-metadata --audio-format mp3 --audio-quality 0 -xic"; # Download with audio
         };
@@ -112,38 +100,21 @@ in
       };
     }
     {
-      services.displayManager = {
-        autoLogin = {
-          enable = true;
-          user = config.users.users.me.name;
-        };
-      };
-      services.xserver = {
-        enable = true;
-        displayManager.lightdm = {
-          enable = true;
-          greeters.gtk = {
-            enable = true;
-            indicators = [
-              "~spacer"
-              "~host"
-              "~spacer"
-              "~session"
-              "~power"
-            ];
-          };
-        };
-      };
+      services.power-profiles-daemon.enable = true;
     }
     {
       programs.gnupg = {
         agent = {
           enable = true;
           pinentryPackage = pkgs.pinentry-qt;
-          settings = rec {
-            default-cache-ttl = 2 * 60 * 60;
-            max-cache-ttl = 4 * default-cache-ttl;
-          };
+          settings =
+            let
+              defaultCacheTtl = 2 * 60 * 60;
+            in
+            {
+              default-cache-ttl = defaultCacheTtl;
+              max-cache-ttl = 4 * defaultCacheTtl;
+            };
         };
       };
 
@@ -161,7 +132,7 @@ in
     }
     {
       services.getty = {
-        greetingLine = lib.mkForce "";
+        greetingLine = lib.mkForce "As-salamu alaykum wa rahmatullahi wa barakatuh!";
         helpLine = lib.mkForce "";
       };
     }
@@ -169,125 +140,85 @@ in
       networking.hosts = lib.mapAttrs' (name: address: {
         name = address;
         value = [ "${name}.local" ];
-      }) localAddresses;
+      }) pkgs.lib.niveum.localAddresses;
     }
     {
       home-manager.users.me.home.stateVersion = "22.05";
       home-manager.backupFileExtension = "bak";
     }
     {
-      systemd.user.services.udiskie = {
-        after = [ "udisks2.service" ];
-        wants = [ "udisks2.service" ];
-        wantedBy = [ "graphical-session.target" ];
-        serviceConfig = {
-          ExecStart = "${pkgs.udiskie}/bin/udiskie --verbose --no-config --notify";
-        };
-      };
-      services.udisks2.enable = true;
       programs.dconf.enable = true;
       home-manager.users.me = {
         dconf.enable = true;
         dconf.settings = {
           # Change the default terminal for Nemo
-          "org/cinnamon/desktop/applications/terminal".exec = defaultApplications.terminal;
+          "org/cinnamon/desktop/applications/terminal".exec = lib.getExe pkgs.niphas-terminal;
         };
       };
     }
     ./android.nix
-    ./admin-essentials.nix
     ./stylix.nix
     ./alacritty.nix
     ./backup.nix
-    ./bash.nix
     ./bluetooth.nix
     ./aerc.nix
-    ./ccc.nix
     ./khal.nix
     ./browser.nix
     ./clipboard.nix
     ./cloud.nix
-    ./direnv.nix
-    ./docker.nix
-    ./dunst.nix
     ./fonts.nix
-    ./fzf.nix
-    ./git.nix
     ./hledger.nix
     ./htop.nix
+    ./lix.nix
     ./uni.nix
-    ./i3.nix
-    ./i3status-rust.nix
-    ./keyboard.nix
-    ./mycelium.nix
+    # ./i3.nix
+    ./graphical
+    ./keyboard
     ./kdeconnect.nix
-    { home-manager.users.me.home.file.".XCompose".source = ../lib/keyboards/XCompose; }
     { services.upower.enable = true; }
     ./lb.nix
     ./mpv.nix
     ./mime.nix
-    ./neovim.nix
-    ./nix.nix
-    ./newsboat.nix
+    ./editor.nix
     ./flameshot.nix
     ./packages.nix
     ./virtualization.nix
-    ./picom.nix
     ./stardict.nix
     ./polkit.nix
     ./printing.nix
     ./redshift.nix
-    ./retiolum.nix
     ./rofi.nix
-    ./spacetime.nix
     ./ssh.nix
-    ./sshd.nix
     ./sound.nix
     ./sudo.nix
-    ./tmux.nix
     ./unclutter.nix
     ./vscode.nix
-    ./watson.nix
     ./wallpaper.nix
-    ./zsh.nix
     {
       home-manager.users.me.home.file.".zshrc".text = ''
         # nothing to see here
       '';
     }
-    ./tor.nix
-    ./mastodon-bot.nix
-    {
-      fileSystems."${remoteDir}/fritz" = {
-        device = "//192.168.178.1/FRITZ.NAS/Backup";
-        fsType = "cifs";
-        options = [
-          "username=ftpuser"
-          "password=ftppassword"
-          "noauto"
-          "nounix"
-          "rw"
-          # "noserverino" # ref https://askubuntu.com/a/1265165
-          "uid=${toString config.users.users.me.uid}"
-          "gid=${toString config.users.groups.users.gid}"
-          "x-systemd.automount"
-          "x-systemd.device-timeout=1"
-          "x-systemd.idle-timeout=1min"
-        ];
-      };
-    }
     {
+      programs.zsh.interactiveShellInit = ''
+        hash -d nixos=/etc/nixos niveum=${config.users.users.me.home}/sync/src/niveum
+      '';
+
       home-manager.users.me = {
-        xdg.userDirs = rec {
-          enable = true;
-          documents = "${config.users.users.me.home}/cloud/nextcloud/Documents";
-          desktop = "/tmp";
-          download = "${config.users.users.me.home}/sync/Downloads";
-          music = "${config.users.users.me.home}/mobile/audio";
-          pictures = "${config.users.users.me.home}/cloud/nextcloud/Bilder";
-          publicShare = "${config.users.users.me.home}/cloud/nextcloud/tmp";
-          videos = pictures;
-        };
+        xdg.userDirs =
+          let
+            pictures = "${config.users.users.me.home}/cloud/nextcloud/Bilder";
+          in
+          {
+            enable = true;
+            documents = "${config.users.users.me.home}/cloud/nextcloud/Documents";
+            desktop = "/tmp";
+            download = "${config.users.users.me.home}/sync/Downloads";
+            music = "${config.users.users.me.home}/mobile/audio";
+            publicShare = "${config.users.users.me.home}/cloud/nextcloud/tmp";
+            videos = pictures;
+            pictures = pictures;
+          };
       };
     }
   ];

configs/direnv.nix

@@ -1,37 +0,0 @@
-{pkgs, ...}: let
-  nixify = pkgs.writers.writeDashBin "nixify" ''
-    set -efuC
-
-    if [ ! -e ./.envrc ]; then
-      echo use_nix > .envrc
-      direnv allow
-    fi
-    if [ ! -e shell.nix ]; then
-      cat > shell.nix <<'EOF'
-    { pkgs ? import <nixpkgs> {} }:
-    pkgs.mkShell {
-      packages = [];
-    }
-    EOF
-      ''${EDITOR:-vim} shell.nix
-    fi
-  '';
-in {
-  environment.systemPackages = [pkgs.direnv nixify];
-
-  home-manager.users.me.programs.direnv = {
-    enable = true;
-    stdlib = builtins.readFile "${
-      pkgs.fetchFromGitHub {
-        owner = "Mic92";
-        repo = "dotfiles";
-        rev = "a0a9b7e358fa70a85cd468f8ca1fbb02ae0a91df";
-        sha256 = "1y9h5s1lf59sczsm0ksq2x1yhl98ba9lwk5yil3q53rg7n4574pg";
-      }
-    }/home/.direnvrc";
-  };
-
-  programs.zsh.interactiveShellInit = ''
-    eval "$(${pkgs.direnv}/bin/direnv hook zsh)"
-  '';
-}

configs/distrobump.nix

@@ -1,15 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}: {
-  imports = [
-    (import <stockholm/makefu/3modules/bump-distrowatch.nix> {
-      inherit lib config;
-      pkgs = pkgs // {writeDash = pkgs.writers.writeDash;};
-    })
-  ];
-
-  makefu.distrobump.enable = false;
-}

configs/docker.nix

@@ -1,16 +0,0 @@
-{
-  lib,
-  pkgs,
-  ...
-}: {
-  virtualisation.docker = {
-    enable = true;
-    # for ICE wifi, ref https://gist.github.com/sunsided/7840e89ff4e11b64a2d7503fafa0290c
-    extraOptions = lib.concatStringsSep " " [
-      "--bip=172.39.1.5/24"
-      "--fixed-cidr=172.39.1.0/25"
-    ];
-  };
-  users.users.me.extraGroups = ["docker"];
-  environment.systemPackages = [pkgs.docker pkgs.docker-compose];
-}

configs/dunst.nix

@@ -1,65 +0,0 @@
-{
-  config,
-  pkgs,
-  ...
-}: let
-  inherit (import ../lib) defaultApplications theme;
-  sgr = code: string: ''\u001b[${code}m${string}\u001b[0m'';
-in {
-  environment.systemPackages = [
-    (pkgs.writers.writeDashBin "notifications" ''
-      ${pkgs.dunst}/bin/dunstctl history \
-        | ${pkgs.jq}/bin/jq -r '
-          .data[]
-          | map("${sgr "90" ''\(.appname.data)''} ${sgr "1" ''\(.summary.data)''} ${sgr "31" ''\(.body.data | gsub("\n"; " | "))''}")
-          | join("\n")'
-    '')
-  ];
-
-  home-manager.users.me.services.dunst = {
-    enable = true;
-    iconTheme = (theme pkgs).icon;
-    settings = {
-      global = {
-        transparency = 10;
-        geometry = "200x5-30+20";
-        follow = "mouse";
-        indicate_hidden = true;
-        notification_height = 0;
-        separator_height = 2;
-        padding = 8;
-        horizontal_padding = 8;
-        sort = true;
-        markup = "full";
-        format = "%a\\n<b>%s</b>\\n%b";
-        alignment = "left";
-        show_age_threshold = 60;
-        bounce_freq = 0;
-        word_wrap = true;
-        ellipsize = "middle";
-        ignore_newline = false;
-        stack_duplicates = true;
-        hide_duplicate_count = false;
-        max_icon_size = 32;
-        sticky_history = true;
-        history_length = 20;
-        dmenu = "${pkgs.rofi}/bin/rofi -display-run dunst -show run";
-        browser = (defaultApplications pkgs).browser;
-        verbosity = "mesg";
-        corner_radius = 0;
-        mouse_left_click = "do_action";
-        mouse_right_click = "close_current";
-        mouse_middle_click = "close_all";
-      };
-      urgency_low = {
-        timeout = 5;
-      };
-      urgency_normal = {
-        timeout = 10;
-      };
-      urgency_critical = {
-        timeout = 0;
-      };
-    };
-  };
-}

configs/editor.nix

@@ -1,14 +1,10 @@
 {
   pkgs,
-  niveumPackages,
+  lib,
   config,
   ...
-}: {
-  environment.variables.EDITOR = pkgs.lib.mkForce "nvim";
-  environment.shellAliases.vi = "nvim";
-  environment.shellAliases.vim = "nvim";
-  environment.shellAliases.view = "nvim -R";
-
+}:
+{
   home-manager.users.me = {
     editorconfig = {
       enable = true;
@@ -35,17 +31,13 @@
   };
 
   environment.systemPackages = [
-    (pkgs.writers.writeDashBin "vim" ''neovim "$@"'')
-    (niveumPackages.vim.override {
-      # stylixColors = config.lib.stylix.colors;
-      colorscheme = "base16-gruvbox-dark-medium";
-    })
+    pkgs.vim-typewriter
+    pkgs.dawn-editor
 
     # language servers
     pkgs.pyright
     pkgs.haskellPackages.haskell-language-server
     pkgs.texlab
-    pkgs.nil
     pkgs.gopls
     pkgs.nixfmt-rfc-style
     pkgs.rust-analyzer

configs/flameshot.nix

@@ -2,7 +2,8 @@
   lib,
   pkgs,
   ...
-}: {
+}:
+{
   home-manager.users.me = {
     services.flameshot = {
       enable = true;

configs/fonts.nix

@@ -1,21 +1,25 @@
 {
   pkgs,
-  niveumPackages,
   ...
-}: let
-  zip-font = name: arguments: let
-    directory = pkgs.fetchzip arguments;
-  in
-    pkgs.runCommand name {} ''
+}:
+let
+  zip-font =
+    name: arguments:
+    let
+      directory = pkgs.fetchzip arguments;
+    in
+    pkgs.runCommand name { } ''
       mkdir -p $out/share/fonts/{truetype,opentype,woff}
       ${pkgs.findutils}/bin/find ${directory} -name '*.ttf' -exec install '{}' $out/share/fonts/truetype \;
       ${pkgs.findutils}/bin/find ${directory} -name '*.otf' -exec install '{}' $out/share/fonts/opentype \;
       ${pkgs.findutils}/bin/find ${directory} -name '*.woff' -exec install '{}' $out/share/fonts/woff \;
     '';
-  simple-ttf = name: arguments: let
-    file = pkgs.fetchurl arguments;
-  in
-    pkgs.runCommand name {} ''
+  simple-ttf =
+    name: arguments:
+    let
+      file = pkgs.fetchurl arguments;
+    in
+    pkgs.runCommand name { } ''
       mkdir -p $out/share/fonts/truetype
       install ${file} $out/share/fonts/truetype
     '';
@@ -58,7 +62,8 @@
     url = "https://github.com/microsoft/font-tools/raw/1092cb23520967830001a0807eb21d6a44dda522/EgyptianOpenType/font/eot.ttf";
     sha256 = "1n294vhcx90270pnsw1dbk6izd61fjvbnjrh4hcf98ff3s540x0c";
   };
-in {
+in
+{
   fonts = {
     enableDefaultPackages = true;
     fontDir.enable = true;
@@ -93,7 +98,6 @@ in {
       font-awesome
       galatia-sil
       gentium
-      # niveumPackages.gfs-fonts
       gyre-fonts
       ibm-plex
       jetbrains-mono
@@ -114,17 +118,33 @@ in {
       source-sans-pro
       source-serif-pro
       theano
-      niveumPackages.tocharian-font
+      tocharian-font
       vista-fonts
       vollkorn
       zilla-slab
     ]; # google-fonts league-of-moveable-type
-    fontconfig.defaultFonts = rec {
-      monospace = ["Noto Sans Mono"] ++ emoji;
-      serif = ["Noto Serif" "Noto Naskh Arabic" "Noto Serif Devanagari"];
-      sansSerif = ["Noto Sans Display" "Noto Naskh Arabic" "Noto Sans Hebrew" "Noto Sans Devanagari" "Noto Sans CJK JP" "Noto Sans Coptic" "Noto Sans Syriac Western"];
-      emoji = ["Noto Color Emoji"];
-    };
+    fontconfig.defaultFonts =
+      let
+        emoji = [ "Noto Color Emoji" ];
+      in
+      {
+        monospace = [ "Noto Sans Mono" ] ++ emoji;
+        serif = [
+          "Noto Serif"
+          "Noto Naskh Arabic"
+          "Noto Serif Devanagari"
+        ];
+        sansSerif = [
+          "Noto Sans Display"
+          "Noto Naskh Arabic"
+          "Noto Sans Hebrew"
+          "Noto Sans Devanagari"
+          "Noto Sans CJK JP"
+          "Noto Sans Coptic"
+          "Noto Sans Syriac Western"
+        ];
+        inherit emoji;
+      };
     # xelatex fails with woff files
     # ref https://tex.stackexchange.com/questions/392144/xelatex-and-fontspec-crash-trying-to-find-woff-file-for-some-fonts-but-not-other
     fontconfig.localConf = ''

configs/fysi.nix

@@ -1,55 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}: let
-  inherit (import ../lib/email.nix) defaults;
-  sshIdentity = name: "${config.users.users.me.home}/.ssh/${name}";
-in {
-  age.secrets = {
-    email-password-fysi = {
-      file = ../secrets/email-password-fysi.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
-  };
-
-  home-manager.users.me = {
-    accounts.email.accounts = {
-      fysi =
-        lib.recursiveUpdate defaults
-        rec {
-          address = "kieran@fysi.tech";
-          userName = address;
-          passwordCommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.email-password-fysi.path}";
-          flavor = "fastmail.com";
-        };
-    };
-
-    programs.ssh.matchBlocks = rec {
-      "nextcloud.fysi.dev" = {
-        hostname = "116.203.82.203";
-        user = "root";
-      };
-      "lingua.miaengiadina.ch" = {
-        hostname = "135.181.85.233";
-        user = "root";
-      };
-      "cms-dev.woc2023.app".identityFile = sshIdentity "fysiweb";
-      "cms-master.woc2023.app".identityFile = sshIdentity "fysiweb";
-      "fysi-dev1" = {
-        hostname = "94.130.229.139";
-        user = "root";
-        identityFile = sshIdentity "fysiweb";
-      };
-      ${fysi-dev1.hostname} = fysi-dev1;
-      "fysi-shared0" = {
-        hostname = "49.12.205.235";
-        user = "root";
-        identityFile = sshIdentity "fysiweb";
-      };
-    };
-  };
-}

configs/fzf.nix

@@ -1,22 +0,0 @@
-{pkgs, ...}: {
-  programs.fzf = {
-    fuzzyCompletion = true;
-    keybindings = true;
-  };
-
-  home-manager.users.me = {
-    programs.fzf = rec {
-      enable = true;
-      defaultCommand = "${pkgs.fd}/bin/fd --type f --strip-cwd-prefix --follow --no-ignore-vcs --exclude .git";
-      defaultOptions = ["--height=40%"];
-      changeDirWidgetCommand = "${pkgs.fd}/bin/fd --type d";
-      changeDirWidgetOptions = [
-        "--preview='${pkgs.tree}/bin/tree -L 1 {}'"
-        "--bind=space:toggle-preview"
-        "--preview-window=hidden"
-      ];
-      fileWidgetCommand = defaultCommand;
-      fileWidgetOptions = ["--preview='head -$LINES {}'"];
-    };
-  };
-}

configs/gaming.nix

@@ -0,0 +1,23 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = [
+    pkgs.zeroad
+    pkgs.mari0
+    pkgs.luanti # fka minetest
+    # pkgs.openarena
+    # pkgs.teeworlds
+    pkgs.nethack
+    # pkgs.freeciv
+    # pkgs.lincity-ng
+    # pkgs.superTuxKart
+
+    pkgs.morris
+    pkgs.gnome-chess
+    pkgs.gnuchess
+  ];
+  networking.firewall = {
+    # for 0ad multiplayer
+    allowedTCPPorts = [ 20595 ];
+    allowedUDPPorts = [ 20595 ];
+  };
+}

configs/git.nix

@@ -1,53 +0,0 @@
-{
-  pkgs,
-  inputs,
-  ...
-}: let
-  inherit (import ../lib) kieran ignorePaths;
-in {
-  environment.systemPackages = [
-    pkgs.mr
-    pkgs.gitFull
-    pkgs.git-crypt
-    pkgs.gitflow
-    pkgs.gh
-    pkgs.git-extras
-    # pkgs.git-trim
-    pkgs.git-absorb
-    pkgs.gitstats
-    pkgs.patch
-    pkgs.patchutils
-  ];
-
-  environment.shellAliases = {
-    gf = "git-flow";
-    g = "git";
-  };
-
-  home-manager.users.me = {
-    programs.git = {
-      enable = true;
-      package = pkgs.gitFull;
-      settings.alias = {
-        br = "branch";
-        co = "checkout";
-        ci = "commit";
-        cm = "commit -m";
-        amend = "commit --amend";
-        st = "status -s";
-        unstage = "reset HEAD --";
-        diffs = "diff --staged";
-        last = "log -1 HEAD";
-        logs = "log --pretty=oneline";
-        graph = "log --graph --abbrev-commit --decorate --date=relative --format=format:'%C(bold blue)%h%C(reset) - %C(bold green)(%ar)%C(reset) %C(white)%s%C(reset) %C(dim white)- %an%C(reset)%C(bold yellow)%d%C(reset)' --all";
-      };
-      ignores = ignorePaths;
-      settings.user.name = kieran.name;
-      settings.user.email = kieran.email;
-      settings.pull.ff = "only";
-      settings.rebase.autoStash = true;
-      settings.merge.autoStash = true;
-      settings.push.autoSetupRemove = true;
-    };
-  };
-}

configs/graphical/default.nix

@@ -0,0 +1,44 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+{
+  programs.hyprland = {
+    enable = true;
+    withUWSM = true;
+    xwayland.enable = true;
+    package = pkgs.hyprland;
+    portalPackage = pkgs.xdg-desktop-portal-hyprland;
+  };
+
+  programs.ydotool.enable = true;
+
+  xdg.portal = {
+    enable = true;
+    extraPortals = [
+      pkgs.xdg-desktop-portal-hyprland
+      pkgs.xdg-desktop-portal-gtk
+    ];
+    config.common.default = "*";
+  };
+
+  services.dbus = {
+    implementation = "broker";
+    # needed for GNOME services outside of GNOME (?)
+    packages = [ pkgs.gcr ];
+  };
+
+  environment.systemPackages = [
+    pkgs.xdg-desktop-portal
+    pkgs.xdg-desktop-portal-hyprland
+  ];
+
+  services.getty.autologinOnce = true;
+  services.getty.autologinUser = config.users.users.me.name;
+
+  home-manager.users.me = import ./home-manager.nix {
+    inherit lib pkgs config;
+  };
+}

configs/graphical/home-manager.nix

@@ -0,0 +1,415 @@
+{
+  lib,
+  pkgs,
+  config,
+  ...
+}:
+let
+  klem = pkgs.klem.override {
+    options.dmenu = "${pkgs.dmenu}/bin/dmenu -i -p klem";
+    options.scripts = {
+      "p.r paste" = pkgs.writers.writeDash "p.r" ''
+        ${pkgs.curl}/bin/curl -fSs http://p.r --data-binary @- \
+          | ${pkgs.coreutils}/bin/tail --lines=1 \
+          | ${pkgs.gnused}/bin/sed 's/\\<r\\>/krebsco.de/'
+      '';
+      "envs.sh paste" = pkgs.writers.writeDash "envs-host" ''
+        ${pkgs.curl}/bin/curl -F "file=@-" https://envs.sh
+      '';
+      # this segfaults
+      # "envs.sh mirror" = pkgs.writers.writeDash "envs-mirror" ''
+      #   ${pkgs.curl}/bin/curl -F "url=$(${pkgs.coreutils}/bin/cat)" https://envs.sh
+      # '';
+      "envs.sh shorten" = pkgs.writers.writeDash "envs-shorten" ''
+        ${pkgs.curl}/bin/curl -F "shorten=$(${pkgs.coreutils}/bin/cat)" https://envs.sh
+      '';
+      "go.r shorten" = pkgs.writers.writeDash "go.r" ''
+        ${pkgs.curl}/bin/curl -fSs http://go.r -F "uri=$(${pkgs.coreutils}/bin/cat)"
+      '';
+      "4d2.org paste" = pkgs.writers.writeDash "4d2-paste" ''
+        ${pkgs.curl}/bin/curl -F "file=@-" https://depot.4d2.org/
+      '';
+      "0x0.st shorten" = pkgs.writers.writeDash "0x0.st" ''
+        ${pkgs.curl}/bin/curl -fSs https://0x0.st -F "shorten=$(${pkgs.coreutils}/bin/cat)"
+      '';
+      "rot13" = pkgs.writers.writeDash "rot13" ''
+        ${pkgs.coreutils}/bin/tr '[A-Za-z]' '[N-ZA-Mn-za-m]'
+      '';
+      "ipa" = pkgs.writers.writeDash "ipa" ''
+        ${pkgs.ipa}/bin/ipa
+      '';
+      "betacode" = pkgs.writers.writeDash "betacode" ''
+        ${pkgs.betacode}/bin/betacode
+      '';
+      "curl" = pkgs.writers.writeDash "curl" ''
+        ${pkgs.curl}/bin/curl -fSs "$(${pkgs.coreutils}/bin/cat)"
+      '';
+      ocr = pkgs.writers.writeDash "ocr" ''
+        ${pkgs.tesseract4}/bin/tesseract -l eng+deu - stdout
+      '';
+      emojai = pkgs.writers.writeDash "emojai" ''
+        ${pkgs.curl}/bin/curl https://www.emojai.app/api/generate -X POST -H 'Content-Type: application/json' --data-raw "$(${pkgs.jq}/bin/jq -sR '{emoji:.}')" | ${pkgs.jq}/bin/jq -r .result
+      '';
+    };
+  };
+
+  arabic.workspaces = [
+    "١"
+    "٢"
+    "٣"
+    "٤"
+    "٥"
+    "٦"
+    "٧"
+    "٨"
+    "٩"
+    "١٠"
+  ];
+  arabic.music = "الموسيقى";
+  arabic.obsidian = "السبج";
+  hindi.workspaces = [
+    "१"
+    "२"
+    "३"
+    "४"
+    "५"
+    "६"
+    "७"
+    "८"
+    "९"
+    "१०"
+  ];
+  hindi.music = "संगीत";
+  hindi.obsidian = "उपलविशेषः";
+  hebrew.workspaces = [
+    "א"
+    "ב"
+    "ג"
+    "ד"
+    "ה"
+    "ו"
+    "ז"
+    "ח"
+    "ט"
+    "י"
+  ];
+  hebrew.music = "מוסיקה";
+  hebrew.obsidian = "אובסידיאן";
+
+  latin.workspaces = [
+    "Ⅰ"
+    "Ⅱ"
+    "Ⅲ"
+    "Ⅳ"
+    "Ⅴ"
+    "Ⅵ"
+    "Ⅶ"
+    "Ⅷ"
+    "Ⅸ"
+    "Ⅹ"
+  ];
+  latin.music = "MVSICA";
+  latin.obsidian = "NOSCENDA";
+
+  greek.workspaces = [
+    "Α"
+    "Β"
+    "Γ"
+    "Δ"
+    "Ε"
+    "Ϛ"
+    "Ζ"
+    "Η"
+    "Θ"
+    "Ι"
+  ];
+  greek.music = "ΜΟΥΣΙΚΗ";
+  greek.obsidian = "ΥΠΟΜΝΗΜΑΤΑ";
+
+  language = greek;
+in
+{
+  services.mako = {
+    enable = true;
+    settings.default-timeout = 10 * 1000;
+  };
+
+  programs.ashell = {
+    enable = true;
+    settings = {
+      # position = "bottom";
+      modules = {
+        left = [
+          "Workspaces"
+          [
+            "WindowTitle"
+          ]
+        ];
+        center = [ "Clock" ];
+        right = [
+          "KeyboardLayout"
+          [
+            "Tray"
+            "SystemInfo"
+            "Settings"
+          ]
+        ];
+      };
+      workspaces = {
+        enable_workspace_filling = false;
+        disable_special_workspaces = true;
+        visibility_mode = "MonitorSpecific";
+        workspace_names = language.workspaces;
+      };
+      keyboard_layout.labels = {
+        "de" = "🇩🇪";
+      };
+      window_title = {
+        mode = "Title";
+        truncate_title_after_length = 75;
+      };
+      media_player = {
+        max_title_length = 40;
+      };
+      system_info.indicators = [
+        "Cpu"
+        "Memory"
+        { Disk = "/"; }
+      ];
+      clock.format = "%Y-%m-%d (%j %a %W) %H:%M";
+      settings.indicators = [
+        "IdleInhibitor"
+        "PowerProfile"
+        "Audio"
+        "Bluetooth"
+        "Network"
+        "Vpn"
+        "Battery"
+      ];
+      appearance = {
+        font_name = config.stylix.fonts.sansSerif.name;
+        backdrop = 0.3;
+        scale_factor = 0.85;
+        # style = "Solid";
+      };
+    };
+  };
+
+  services.hypridle = {
+    enable = true;
+    settings = {
+      general = {
+        after_sleep_cmd = "hyprctl dispatch dpms on";
+        ignore_dbus_inhibit = false;
+        lock_cmd = "hyprlock";
+      };
+      listener = [
+        {
+          timeout = 900;
+          on-timeout = "hyprlock";
+        }
+        {
+          timeout = 1200;
+          on-timeout = "hyprctl dispatch dpms off";
+          on-resume = "hyprctl dispatch dpms on";
+        }
+      ];
+    };
+  };
+
+  programs.hyprlock = {
+    enable = true;
+    settings = {
+      animations.enabled = false;
+      general = {
+        hide_cursor = true;
+        ignore_empty_input = true;
+      };
+    };
+  };
+
+  gtk = {
+    enable = true;
+    iconTheme = {
+      name = "Adwaita";
+      package = pkgs.adwaita-icon-theme;
+    };
+  };
+
+  wayland.windowManager.hyprland =
+    let
+      mod = "SUPER";
+    in
+    {
+      enable = true;
+      systemd.enable = false;
+      systemd.variables = [ "--all" ];
+      settings = {
+        env = [
+          "XCURSOR_SIZE,${toString config.stylix.cursor.size}" # TODO
+          "HYPRCURSOR_SIZE,${toString config.stylix.cursor.size}" # TODO
+          "HYPRCURSOR_THEME,${config.stylix.cursor.name}"
+          "QT_QPA_PLATFORM=wayland"
+          "GDK_BACKEND=wayland"
+          "NIXOS_OZONE_WL=1"
+        ];
+        permission = [
+          "${pkgs.xdg-desktop-portal-hyprland}/libexec/.xdg-desktop-portal-hyprland-wrapped, screencopy, allow"
+        ];
+        monitor = [
+          "eDP-1, 1920x1080, 0x0, 1" # fatteh's display
+          "desc:Samsung Electric Company C27F390 HTQH602129, 1920x1080, 0x-1080, 1" # home
+          "desc:Dell Inc. DELL P2419HC 8L0FL03, 1920x1080, 0x-1080, 1" # amo
+          ", preferred, auto, 1"
+        ];
+        exec-once = [
+          (lib.getExe pkgs.ashell)
+          "hyprctl dispatch exec \"[workspace special:${language.obsidian} silent] obsidian\""
+          (lib.getExe pkgs.niphas-clipboard-watcher)
+          (lib.getExe pkgs.niphas-redshift)
+          (lib.getExe pkgs.niphas-set-wallpaper)
+        ];
+
+        device = [
+          {
+            name = "elan-touchscreen";
+            enabled = false;
+          }
+        ];
+
+        general = {
+          gaps_in = 2;
+          gaps_out = 2;
+          border_size = 2;
+          resize_on_border = true;
+          allow_tearing = false;
+          layout = "dwindle";
+        };
+
+        decoration = {
+          rounding = 0;
+          rounding_power = 0;
+          active_opacity = 1.0;
+          inactive_opacity = 1.0;
+          shadow = {
+            enabled = false;
+            range = 4;
+            render_power = 3;
+          };
+          blur = {
+            enabled = false;
+            size = 3;
+            passes = 1;
+            vibrancy = 0.17;
+          };
+        };
+
+        animations = {
+          enabled = true;
+          animation = [
+            "global, 1, 2, default"
+          ];
+        };
+
+        dwindle = {
+          preserve_split = true;
+        };
+
+        master.new_status = "master";
+
+        gesture = [
+          "3, horizontal, workspace"
+        ];
+
+        input = {
+          kb_layout = "de";
+          kb_variant = "T3";
+          kb_options = "compose:caps,grp:ctrls_toggle";
+          follow_mouse = 1;
+          sensitivity = 0;
+          touchpad.natural_scroll = false;
+        };
+
+        bindm = [
+          "${mod}, mouse:272, movewindow"
+          "${mod}, mouse:273, resizewindow"
+        ];
+        bindel = [
+          ",XF86AudioRaiseVolume, exec, wpctl set-volume -l 1 @DEFAULT_AUDIO_SINK@ 5%+"
+          ",XF86AudioLowerVolume, exec, wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%-"
+          ",XF86AudioMute, exec, wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle"
+          ",XF86AudioMicMute, exec, wpctl set-mute @DEFAULT_AUDIO_SOURCE@ toggle"
+          ",XF86MonBrightnessUp, exec, brightnessctl -e4 -n2 set 5%+"
+          ",XF86MonBrightnessDown, exec, brightnessctl -e4 -n2 set 5%-"
+          ", Print, exec, ${lib.getExe pkgs.niphas-screenshot}"
+        ];
+        bindl = [
+          ", XF86AudioNext, exec, playerctl next"
+          ", XF86AudioPause, exec, playerctl play-pause"
+          ", XF86AudioPlay, exec, playerctl play-pause"
+          ", XF86AudioPrev, exec, playerctl previous"
+        ];
+        bind = [
+          "${mod}, Return, exec, ${lib.getExe pkgs.niphas-terminal}"
+          "${mod} SHIFT, Q, killactive,"
+          "${mod} SHIFT, R, exit,"
+          "${mod}, t, exec, ${lib.getExe pkgs.niphas-file-browser}"
+          "${mod}, Y, exec, ${lib.getExe pkgs.niphas-web-browser}"
+          "${mod}, Q, exec, ${lib.getExe pkgs.niphas-clipman}"
+          "${mod}, u, exec, ${lib.getExe pkgs.unicodmenu}"
+          "${mod}, p, exec, ${lib.getExe pkgs.rofi-pass-wayland}"
+          "${mod} SHIFT, Z, togglefloating,"
+          "${mod}, D, exec, ${lib.getExe pkgs.rofi} -show run"
+          "${mod}, E, togglesplit," # dwindle
+          "${mod}, F, fullscreen"
+          "${mod}, G, moveoutofgroup"
+          "${mod} SHIFT, G, togglegroup"
+          "${mod}, h, movefocus, l"
+          "${mod}, l, movefocus, r"
+          "${mod}, k, movefocus, u"
+          "${mod}, j, movefocus, d"
+
+          "${mod}, F12, exec, ${klem}/bin/klem"
+          "${mod} SHIFT, W, exec, hyprlock"
+          "${mod} SHIFT, H, movewindow, l"
+          "${mod} SHIFT, L, movewindow, r"
+          "${mod} SHIFT, K, movewindow, u"
+          "${mod} SHIFT, J, movewindow, d"
+          "${mod}, S, togglespecialworkspace, ${language.music}"
+          "${mod} SHIFT, S, movetoworkspace, special:${language.music}"
+          "${mod}, O, togglespecialworkspace, ${language.obsidian}"
+          "${mod} SHIFT, O, movetoworkspace, special:${language.obsidian}"
+        ]
+        ++ lib.concatMap (
+          i:
+          let
+            key = lib.mod i 10;
+          in
+          [
+            "${mod}, ${toString key}, workspace, ${toString i}"
+            "${mod} SHIFT, ${toString key}, movetoworkspace, ${toString i}"
+          ]
+        ) (lib.range 1 10);
+
+        windowrule = [
+          "suppressevent maximize, class:.*" # ignore maximize requests from apps
+          "nofocus,class:^$,title:^$,xwayland:1,floating:1,fullscreen:0,pinned:0" # fix some dragging issues with wayyland
+
+          "float,title:^(Picture-in-Picture)$"
+          "pin,title:^(Picture-in-Picture)$"
+          "size 640 360,title:^(Picture-in-Picture)$"
+          "move 100%-640 100%-360,title:^(Picture-in-Picture)$"
+        ];
+      };
+      extraConfig = ''
+        bind = ${mod}, R, submap, resize
+        submap = resize
+        binde = , l, resizeactive, 50 0
+        binde = , h, resizeactive, -50 0
+        binde = , k, resizeactive, 0 -50
+        binde = , j, resizeactive, 0 50
+        bind = , escape, submap, reset
+        submap = reset
+      '';
+    };
+}

configs/hledger.nix

@@ -1,26 +1,28 @@
 {
   pkgs,
   ...
-}: let
+}:
+let
   ledgerDirectory = "/home/kfm/sync/src/ledger";
-  hora = pkgs.callPackage ../packages/hora.nix { timeLedger = "${ledgerDirectory}/time.timeclock"; };
-in {
-  environment.systemPackages = let
-    git = "${pkgs.git}/bin/git -C ${ledgerDirectory}";
-  in [
-    hora
-    pkgs.hledger
-    (pkgs.writers.writeDashBin "hledger-git" ''
-      if [ "$1" = entry ]; then
-        ${pkgs.hledger}/bin/hledger balance -V > "${ledgerDirectory}/balance.txt"
-        ${git} add balance.txt
-        ${git} commit --all --message="$(date -Im)"
-      else
-        ${git} $*
-      fi
-    '')
-    (pkgs.writers.writeDashBin "hledger-edit" ''
-      $EDITOR ${ledgerDirectory}/current.journal
-    '')
-  ];
+in
+{
+  environment.systemPackages =
+    let
+      git = "${pkgs.git}/bin/git -C ${ledgerDirectory}";
+    in
+    [
+      pkgs.hledger
+      (pkgs.writers.writeDashBin "hledger-git" ''
+        if [ "$1" = entry ]; then
+          ${pkgs.hledger}/bin/hledger balance -V > "${ledgerDirectory}/balance.txt"
+          ${git} add balance.txt
+          ${git} commit --all --message="$(date -Im)"
+        else
+          ${git} $*
+        fi
+      '')
+      (pkgs.writers.writeDashBin "hledger-edit" ''
+        $EDITOR ${ledgerDirectory}/current.journal
+      '')
+    ];
 }

configs/htop.nix

@@ -22,8 +22,18 @@
         sort_key = "PERCENT_CPU";
         tree_view = false;
         update_process_names = false;
-        right_meters = ["Uptime" "Tasks" "LoadAverage" "Battery"];
-        left_meters = ["LeftCPUs2" "RightCPUs2" "Memory" "Swap"];
+        right_meters = [
+          "Uptime"
+          "Tasks"
+          "LoadAverage"
+          "Battery"
+        ];
+        left_meters = [
+          "LeftCPUs2"
+          "RightCPUs2"
+          "Memory"
+          "Swap"
+        ];
       };
     };
   };

configs/i3.nix

@@ -2,18 +2,12 @@
   config,
   pkgs,
   lib,
-  niveumPackages,
   ...
-}: let
-  dashboard = pkgs.writers.writeDashBin "dashboard" ''
-    ${pkgs.alacritty}/bin/alacritty --option font.size=4 --class dashboard --command ${pkgs.writers.writeDash "dashboard-inner" ''
-      exec ${pkgs.procps}/bin/watch -c -n 10 ${niveumPackages.q}/bin/q
-    ''}
-  '';
-  inherit (import ../lib) defaultApplications;
-  klem = niveumPackages.klem.override {
-    config.dmenu = "${pkgs.dmenu}/bin/dmenu -i -p klem";
-    config.scripts = {
+}:
+let
+  klem = pkgs.klem.override {
+    options.dmenu = "${pkgs.dmenu}/bin/dmenu -i -p klem";
+    options.scripts = {
       "p.r paste" = pkgs.writers.writeDash "p.r" ''
         ${pkgs.curl}/bin/curl -fSs http://p.r --data-binary @- \
           | ${pkgs.coreutils}/bin/tail --lines=1 \
@@ -42,10 +36,10 @@
         ${pkgs.coreutils}/bin/tr '[A-Za-z]' '[N-ZA-Mn-za-m]'
       '';
       "ipa" = pkgs.writers.writeDash "ipa" ''
-        ${niveumPackages.ipa}/bin/ipa
+        ${pkgs.ipa}/bin/ipa
       '';
       "betacode" = pkgs.writers.writeDash "betacode" ''
-        ${niveumPackages.betacode}/bin/betacode
+        ${pkgs.betacode}/bin/betacode
       '';
       "curl" = pkgs.writers.writeDash "curl" ''
         ${pkgs.curl}/bin/curl -fSs "$(${pkgs.coreutils}/bin/cat)"
@@ -56,15 +50,10 @@
       emojai = pkgs.writers.writeDash "emojai" ''
         ${pkgs.curl}/bin/curl https://www.emojai.app/api/generate -X POST -H 'Content-Type: application/json' --data-raw "$(${pkgs.jq}/bin/jq -sR '{emoji:.}')" | ${pkgs.jq}/bin/jq -r .result
       '';
-      "gpt-3.5" = pkgs.writers.writeDash "gpt" ''
-        ${niveumPackages.gpt35}/bin/gpt
-      '';
-      gpt-4 = pkgs.writers.writeDash "gpt" ''
-        ${niveumPackages.gpt4}/bin/gpt
-      '';
     };
   };
-in {
+in
+{
   age.secrets = {
     github-token-i3status-rust = {
       file = ../secrets/github-token-i3status-rust.age;
@@ -86,9 +75,14 @@ in {
     };
   };
 
-  programs.slock.enable = true;
-
-  environment.systemPackages = [dashboard];
+  environment.systemPackages = [
+    pkgs.xsecurelock
+  ];
+  environment.sessionVariables = {
+    XSECURELOCK_NO_COMPOSITE = "1";
+    XSECURELOCK_BACKGROUND_COLOR = "navy";
+    XSECURELOCK_PASSWORD_PROMPT = "time_hex";
+  };
 
   services.displayManager.defaultSession = "none+i3";
   services.xserver = {
@@ -113,194 +107,224 @@ in {
     '';
   };
 
-
-  home-manager.users.me = let
-    modifier = "Mod4";
-    infoWorkspace = "ℹ";
-    messageWorkspace = "✉";
-    modes.resize = {
-      "Escape" = ''mode "default"'';
-      "Return" = ''mode "default"'';
-      "h" = "resize shrink width 10 px or 5 ppt";
-      "j" = "resize grow height 10 px or 5 ppt";
-      "k" = "resize shrink height 10 px or 5 ppt";
-      "l" = "resize grow width 10 px or 5 ppt";
-    };
-    gaps.inner = 4;
-    floating = {
-      titlebar = false;
-      border = 1;
-    };
-    bars = [
-      (config.home-manager.users.me.stylix.targets.i3.exportedBarConfig
-        // rec {
-          workspaceButtons = true;
-          mode = "hide"; # "dock";
+  home-manager.users.me =
+    let
+      modifier = "Mod4";
+      infoWorkspace = "ℹ";
+      messageWorkspace = "✉";
+      modes.resize = {
+        "Escape" = ''mode "default"'';
+        "Return" = ''mode "default"'';
+        "h" = "resize shrink width 10 px or 5 ppt";
+        "j" = "resize grow height 10 px or 5 ppt";
+        "k" = "resize shrink height 10 px or 5 ppt";
+        "l" = "resize grow width 10 px or 5 ppt";
+      };
+      gaps.inner = 4;
+      floating = {
+        titlebar = false;
+        border = 1;
+      };
+      bars =
+        let
           position = "bottom";
-          statusCommand = toString (pkgs.writers.writeDash "i3status-rust" ''
-            export I3RS_GITHUB_TOKEN="$(cat ${config.age.secrets.github-token-i3status-rust.path})"
-            export OPENWEATHERMAP_API_KEY="$(cat ${config.age.secrets.openweathermap-api-key.path})"
-            exec ${config.home-manager.users.me.programs.i3status-rust.package}/bin/i3status-rs ${config.home-manager.users.me.home.homeDirectory}/.config/i3status-rust/config-${position}.toml
-          '');
-          fonts = {
-            names = ["${config.stylix.fonts.sansSerif.name}" "FontAwesome 6 Free"];
-            size = config.stylix.fonts.sizes.desktop * 0.8;
+        in
+        [
+          (lib.recursiveUpdate config.home-manager.users.me.stylix.targets.i3.exportedBarConfig {
+            workspaceButtons = true;
+            mode = "hide"; # "dock";
+            inherit position;
+            statusCommand = toString (
+              pkgs.writers.writeDash "i3status-rust" ''
+                export I3RS_GITHUB_TOKEN="$(cat ${config.age.secrets.github-token-i3status-rust.path})"
+                export OPENWEATHERMAP_API_KEY="$(cat ${config.age.secrets.openweathermap-api-key.path})"
+                exec ${config.home-manager.users.me.programs.i3status-rust.package}/bin/i3status-rs ${config.home-manager.users.me.home.homeDirectory}/.config/i3status-rust/config-${position}.toml
+              ''
+            );
+            fonts = {
+              names = [
+                "${config.stylix.fonts.sansSerif.name}"
+                "FontAwesome 6 Free"
+              ];
+              size = config.stylix.fonts.sizes.desktop * 0.8;
+            };
+          })
+        ];
+      window = {
+        titlebar = false;
+        border = 2;
+        hideEdgeBorders = "smart";
+        commands = [
+          {
+            criteria = {
+              class = "floating";
+            };
+            command = "floating enable";
+          }
+          {
+            criteria = {
+              class = "fzfmenu";
+            };
+            command = "floating enable";
+          }
+          {
+            criteria = {
+              class = ".*";
+            };
+            command = "border pixel 2";
+          }
+          {
+            criteria = {
+              class = "mpv";
+            };
+            command = lib.strings.concatStringsSep ", " [
+              "floating enable"
+              "sticky enable"
+              "fullscreen disable"
+              "resize set 640 480"
+              "move position mouse"
+            ];
+          }
+        ];
+      };
+      colors =
+        let
+          background = config.lib.stylix.colors.withHashtag.base00;
+        in
+        {
+          unfocused = {
+            border = lib.mkForce background;
+            childBorder = lib.mkForce background;
           };
-        })
-    ];
-    window = {
-      titlebar = false;
-      border = 2;
-      hideEdgeBorders = "smart";
-      commands = [
-        {
-          criteria = {class = "floating";};
-          command = "floating enable";
-        }
-        {
-          criteria = {class = "fzfmenu";};
-          command = "floating enable";
-        }
-        {
-          criteria = {class = ".*";};
-          command = "border pixel 2";
-        }
-        {
-          criteria = {class = "mpv";};
-          command = lib.strings.concatStringsSep ", " [
-            "floating enable"
-            "sticky enable"
-            "fullscreen disable"
-            "resize set 640 480"
-            "move position mouse"
-          ];
-        }
-      ];
-    };
-    colors = let
-      background = config.lib.stylix.colors.withHashtag.base00;
-    in {
-      unfocused = {
-        border = lib.mkForce background;
-        childBorder = lib.mkForce background;
-      };
-    };
-    keybindings =
-      lib.listToAttrs (map (x: lib.nameValuePair "${modifier}+Shift+${toString x}" "move container to workspace ${toString x}") (lib.range 1 9))
-      // lib.listToAttrs (map (x: lib.nameValuePair "${modifier}+${toString x}" "workspace ${toString x}") (lib.range 1 9))
-      // {
-        "${modifier}+i" = "workspace ${infoWorkspace}";
-        "${modifier}+m" = "workspace ${messageWorkspace}";
+        };
+      keybindings =
+        lib.listToAttrs (
+          map (
+            x: lib.nameValuePair "${modifier}+Shift+${toString x}" "move container to workspace ${toString x}"
+          ) (lib.range 1 9)
+        )
+        // lib.listToAttrs (
+          map (x: lib.nameValuePair "${modifier}+${toString x}" "workspace ${toString x}") (lib.range 1 9)
+        )
+        // {
+          "${modifier}+i" = "workspace ${infoWorkspace}";
+          "${modifier}+m" = "workspace ${messageWorkspace}";
 
-        "${modifier}+Shift+h" = "move left 25 px";
-        "${modifier}+Shift+j" = "move down 25 px";
-        "${modifier}+Shift+k" = "move up 25 px";
-        "${modifier}+Shift+l" = "move right 25 px";
-        "${modifier}+h" = "focus left";
-        "${modifier}+j" = "focus down";
-        "${modifier}+k" = "focus up";
-        "${modifier}+l" = "focus right";
+          "${modifier}+Shift+h" = "move left 25 px";
+          "${modifier}+Shift+j" = "move down 25 px";
+          "${modifier}+Shift+k" = "move up 25 px";
+          "${modifier}+Shift+l" = "move right 25 px";
+          "${modifier}+h" = "focus left";
+          "${modifier}+j" = "focus down";
+          "${modifier}+k" = "focus up";
+          "${modifier}+l" = "focus right";
 
-        # "${modifier}+Shift+b" = "move container to workspace prev";
-        # "${modifier}+Shift+n" = "move container to workspace next";
-        # "${modifier}+b" = "workspace prev";
-        # "${modifier}+n" = "workspace next";
+          # "${modifier}+Shift+b" = "move container to workspace prev";
+          # "${modifier}+Shift+n" = "move container to workspace next";
+          # "${modifier}+b" = "workspace prev";
+          # "${modifier}+n" = "workspace next";
 
-        "${modifier}+Shift+c" = "reload";
-        "${modifier}+Shift+q" = "kill";
-        "${modifier}+Shift+r" = "restart";
+          "${modifier}+Shift+c" = "reload";
+          "${modifier}+Shift+q" = "kill";
+          "${modifier}+Shift+r" = "restart";
 
-        "${modifier}+z" = "sticky toggle";
-        "${modifier}+Shift+z" = "floating toggle";
+          "${modifier}+z" = "sticky toggle";
+          "${modifier}+Shift+z" = "floating toggle";
 
-        "${modifier}+Shift+s" = "move scratchpad";
-        "${modifier}+s" = ''[class="^(?i)(?!obsidian).*"] scratchpad show'';
-        "${modifier}+o" = ''[class="obsidian"] scratchpad show'';
+          "${modifier}+Shift+s" = "move scratchpad";
+          "${modifier}+s" = ''[class="^(?i)(?!obsidian).*"] scratchpad show'';
+          "${modifier}+o" = ''[class="obsidian"] scratchpad show'';
 
-        "${modifier}+c" = "split h";
-        "${modifier}+e" = "layout toggle split";
-        "${modifier}+f" = "fullscreen toggle";
-        "${modifier}+r" = "mode resize";
-        "${modifier}+v" = "split v";
-        "${modifier}+w" = "layout tabbed";
-        "${modifier}+q" = "exec ${config.services.clipmenu.package}/bin/clipmenu";
+          "${modifier}+c" = "split h";
+          "${modifier}+e" = "layout toggle split";
+          "${modifier}+f" = "fullscreen toggle";
+          "${modifier}+r" = "mode resize";
+          "${modifier}+v" = "split v";
+          "${modifier}+w" = "layout tabbed";
+          "${modifier}+q" = "exec ${config.services.clipmenu.package}/bin/clipmenu";
 
-        "${modifier}+Return" = "exec ${(defaultApplications pkgs).terminal}";
-        "${modifier}+t" = "exec ${(defaultApplications pkgs).fileManager}";
-        "${modifier}+y" = "exec ${(defaultApplications pkgs).browser}";
+          "${modifier}+Return" = "exec ${lib.getExe pkgs.niphas-terminal}";
+          "${modifier}+t" = "exec ${lib.getExe pkgs.niphas-file-browser}";
+          "${modifier}+y" = "exec ${lib.getExe pkgs.niphas-web-browser}";
 
-        "${modifier}+d" = "exec ${pkgs.writers.writeDash "run" ''exec rofi -modi run,ssh,window -show run''}";
-        "${modifier}+Shift+d" = "exec ${niveumPackages.notemenu}/bin/notemenu";
-        "${modifier}+p" = "exec rofi-pass";
-        "${modifier}+Shift+p" = "exec rofi-pass --insert";
-        "${modifier}+u" = "exec ${niveumPackages.unicodmenu}/bin/unicodmenu";
-        "${modifier}+Shift+u" = "exec ${pkgs.writers.writeDash "last-unicode" ''${pkgs.xdotool}/bin/xdotool type --delay 1000 "$(${pkgs.gawk}/bin/awk 'END{print $1}' ~/.cache/unicodmenu)"''}";
+          "${modifier}+d" =
+            "exec ${pkgs.writers.writeDash "run" ''exec rofi -modi run,ssh,window -show run''}";
+          "${modifier}+Shift+d" = "exec ${lib.getExe pkgs.notemenu}";
+          "${modifier}+p" = "exec rofi-pass";
+          "${modifier}+Shift+p" = "exec rofi-pass --insert";
+          "${modifier}+u" = "exec ${lib.getExe pkgs.unicodmenu}";
+          "${modifier}+Shift+u" =
+            "exec ${pkgs.writers.writeDash "last-unicode" ''${pkgs.xdotool}/bin/xdotool type --delay 1000 "$(${pkgs.gawk}/bin/awk 'END{print $1}' ~/.cache/unicodmenu)"''}";
 
-        "${modifier}+F7" = "exec ${pkgs.writers.writeDash "showkeys-toggle" ''
-          if ${pkgs.procps}/bin/pgrep screenkey; then
-            exec ${pkgs.procps}/bin/pkill screenkey
-          else
-            exec ${pkgs.screenkey}/bin/screenkey
-          fi
-        ''}";
-        "${modifier}+F12" = "exec ${klem}/bin/klem";
-        "XF86AudioLowerVolume" = "exec ${pkgs.pamixer}/bin/pamixer -d 5";
-        "XF86AudioMute" = "exec ${pkgs.pamixer}/bin/pamixer -t";
-        "XF86AudioRaiseVolume" = "exec ${pkgs.pamixer}/bin/pamixer -i 5";
-        "XF86Calculator" = "exec ${pkgs.st}/bin/st -c floating -e ${pkgs.bc}/bin/bc";
-        "XF86AudioPause" = "exec ${pkgs.playerctl}/bin/playerctl play-pause";
-        "XF86AudioPlay" = "exec ${pkgs.playerctl}/bin/playerctl play-pause";
-        "XF86AudioNext" = "exec ${pkgs.playerctl}/bin/playerctl next";
-        "XF86AudioPrev" = "exec ${pkgs.playerctl}/bin/playerctl previous";
-        "XF86AudioStop" = "exec ${pkgs.playerctl}/bin/playerctl stop";
-        "XF86ScreenSaver" = "exec ${niveumPackages.k-lock}/bin/k-lock";
+          "${modifier}+F7" = "exec ${pkgs.writers.writeDash "showkeys-toggle" ''
+            if ${pkgs.procps}/bin/pgrep screenkey; then
+              exec ${pkgs.procps}/bin/pkill screenkey
+            else
+              exec ${pkgs.screenkey}/bin/screenkey
+            fi
+          ''}";
+          "${modifier}+F12" = "exec ${klem}/bin/klem";
+          "XF86AudioLowerVolume" = "exec ${lib.getExe pkgs.pamixer} -d 5";
+          "XF86AudioMute" = "exec ${lib.getExe pkgs.pamixer} -t";
+          "XF86AudioRaiseVolume" = "exec ${pkgs.pamixer}/bin/pamixer -i 5";
+          "XF86Calculator" = "exec ${lib.getExe pkgs.st} -c floating -e ${pkgs.bc}/bin/bc";
+          "XF86AudioPause" = "exec ${lib.getExe pkgs.playerctl} play-pause";
+          "XF86AudioPlay" = "exec ${lib.getExe pkgs.playerctl} play-pause";
+          "XF86AudioNext" = "exec ${lib.getExe pkgs.playerctl} next";
+          "XF86AudioPrev" = "exec ${lib.getExe pkgs.playerctl} previous";
+          "XF86AudioStop" = "exec ${lib.getExe pkgs.playerctl} stop";
 
-        # key names detected with xorg.xev:
-        # XF86WakeUp (fn twice)
-        # XF86Battery (fn f3)
-        # XF86Sleep (fn f4) - actually suspends
-        # XF86WLAN
-        # XF86WebCam (fn f6)
-        # XF86TouchpadToggle (fn f8)
-        # XF86Suspend (fn f12) - actually suspends to disk
-        # Num_Lock (fn Roll) - numlocks
-        # XF86Audio{Prev,Next,Mute,Play,Stop}
-        # XF86Forward
-        # XF86Back
-        # XF86Launch1 (thinkvantage)
-      };
-  in {
-    stylix.targets.i3.enable = true;
+          # key names detected with xorg.xev:
+          # XF86WakeUp (fn twice)
+          # XF86Battery (fn f3)
+          # XF86Sleep (fn f4) - actually suspends
+          # XF86WLAN
+          # XF86WebCam (fn f6)
+          # XF86TouchpadToggle (fn f8)
+          # XF86Suspend (fn f12) - actually suspends to disk
+          # Num_Lock (fn Roll) - numlocks
+          # XF86Audio{Prev,Next,Mute,Play,Stop}
+          # XF86Forward
+          # XF86Back
+          # XF86Launch1 (thinkvantage)
+        };
+    in
+    {
+      stylix.targets.i3.enable = true;
 
-    xsession.windowManager.i3 = {
-      enable = true;
-      extraConfig = ''
-        bindsym --release ${modifier}+Shift+w exec /run/wrappers/bin/slock
+      xsession.windowManager.i3 = {
+        enable = true;
+        extraConfig = ''
+          bindsym --release ${modifier}+Shift+w exec xsecurelock
 
-        exec "${pkgs.obsidian}/bin/obsidian"
-        for_window [class="obsidian"] , move scratchpad
+          exec "${lib.getExe pkgs.obsidian}"
+          for_window [class="obsidian"] , move scratchpad
 
-        assign [class="message"] ${messageWorkspace}
-        exec "${pkgs.writers.writeDash "irc" "exec ${pkgs.alacritty}/bin/alacritty --class message -e ssh weechat@makanek -t tmux attach-session -t IM"}"
-        exec "${pkgs.writers.writeDash "email" "exec ${pkgs.alacritty}/bin/alacritty --class message -e aerc"}"
+          assign [class="message"] ${messageWorkspace}
+          exec "${pkgs.writers.writeDash "irc" "exec ${lib.getExe pkgs.alacritty} --class message -e ssh weechat@makanek -t tmux attach-session -t IM"}"
+          exec "${pkgs.writers.writeDash "email" "exec ${lib.getExe pkgs.alacritty} --class message -e aerc"}"
 
-        assign [class="dashboard"] ${infoWorkspace}
-        exec ${dashboard}/bin/dashboard
-      '';
-      config = {
-          inherit modifier gaps modes bars floating window colors;
+          exec --no-startup-id ${pkgs.xss-lock}/bin/xss-lock -- xsecurelock
+        '';
+        config = {
+          inherit
+            modifier
+            gaps
+            modes
+            bars
+            floating
+            window
+            colors
+            ;
           keybindings = keybindings // {
-            "${modifier}+ß" = "exec ${niveumPackages.menu-calc}/bin/=";
-            "${modifier}+F6" = "exec ${pkgs.xorg.xkill}/bin/xkill";
             "${modifier}+F9" = "exec ${pkgs.redshift}/bin/redshift -O 4000 -b 0.85";
             "${modifier}+F10" = "exec ${pkgs.redshift}/bin/redshift -x";
-            "${modifier}+F11" = "exec ${pkgs.xcalib}/bin/xcalib -invert -alter";
             "Print" = "exec flameshot gui";
             # "${modifier}+Shift+x" = "exec ${move-to-new-workspace}";
             # "${modifier}+x" = "exec ${new-workspace}";
-            "XF86Display" = "exec ${niveumPackages.dmenu-randr}/bin/dmenu-randr";
+            "XF86Display" = "exec ${lib.getExe pkgs.dmenu-randr}";
           };
+        };
       };
     };
-  };
 }

configs/i3status-rust.nix

@@ -1,82 +0,0 @@
-{
-  pkgs,
-  config,
-  ...
-}: {
-  age.secrets = {
-    miniflux-api-token = {
-      file = ../secrets/miniflux-api-token.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
-  };
-
-  home-manager.users.me = {
-    programs.i3status-rust = {
-      enable = true;
-      bars.bottom = {
-        icons = "awesome6";
-        settings = {
-          theme.overrides = let
-            colours = config.lib.stylix.colors.withHashtag;
-          in {
-            idle_bg = colours.base00;
-            idle_fg = colours.base05;
-            good_bg = colours.base00;
-            good_fg = colours.base0B;
-            warning_bg = colours.base00;
-            warning_fg = colours.base0A;
-            critical_bg = colours.base00;
-            critical_fg = colours.base09;
-            info_bg = colours.base00;
-            info_fg = colours.base04;
-            separator_bg = colours.base00;
-            separator = " ";
-          };
-        };
-        blocks = [
-          {
-            block = "music";
-            format = "{$icon $combo $play |}";
-            separator = " – ";
-          }
-          {
-            block = "net";
-            format = " $icon HU";
-            missing_format = "";
-            device = "ppp0";
-          }
-          {
-            block = "net";
-            format = " $icon FU";
-            missing_format = "";
-            device = "tun0";
-          }
-          {
-            block = "battery";
-            format = "$icon $percentage $time";
-            device = "DisplayDevice";
-            driver = "upower";
-          }
-          {
-            block = "sound";
-          }
-          {
-            block = "disk_space";
-            format = "$icon $available";
-          }
-          {
-            block = "memory";
-            format = "$icon $mem_used.eng(prefix:G)";
-          }
-          {block = "load";}
-          {
-            block = "time";
-            format = "$icon $timestamp.datetime(f:'%Y-%m-%d (%W %a) %H:%M', l:de_DE)";
-          }
-        ];
-      };
-    };
-  };
-}

configs/keyboard/default.nix

@@ -1,4 +1,5 @@
 {
+  config,
   pkgs,
   lib,
   ...
@@ -27,10 +28,10 @@ let
     arabic = {
       code = "ara";
       variant = "buckwalter";
-    }; # ../lib/keyboards/arabic;
-    coptic = ../lib/keyboards/coptic;
-    avestan = ../lib/keyboards/avestan;
-    gothic = ../lib/keyboards/gothic;
+    };
+    coptic = ./coptic;
+    avestan = ./avestan;
+    gothic = ./gothic;
     farsi = {
       code = "ir";
       variant = "qwerty";
@@ -63,40 +64,42 @@ in
 
   # man 7 xkeyboard-config
   services.xserver = {
-    exportConfiguration = true; # link /usr/share/X11 properly
+    exportConfiguration = lib.mkForce true; # link /usr/share/X11 properly
     xkb.layout = defaultLanguage.code;
     # T3: https://upload.wikimedia.org/wikipedia/commons/a/a9/German-Keyboard-Layout-T3-Version1-large.png
     # buckwalter: http://www.qamus.org/transliteration.htm
     xkb.variant = defaultLanguage.variant;
     xkb.options = commaSep xkbOptions;
-    xkb.dir = pkgs.symlinkJoin {
-      name = "x-keyboard-directory";
-      paths = [
-        "${pkgs.xkeyboard_config}/etc/X11/xkb"
-        (pkgs.linkFarm "custom-x-keyboards" (
-          lib.mapAttrsToList (name: value: {
-            name = "symbols/${name}";
-            path = value;
-          }) (lib.filterAttrs (_: value: !(value ? "code")) languages)
-          ++ [
-            {
-              name = "symbols/ir";
-              path = ../lib/keyboards/farsi;
-            }
-          ]
-        ))
-      ];
+    xkb.extraLayouts = {
+      coptic = {
+        languages = [ "cop" ];
+        description = "Coptic is the latest stage of the Egyptian language and was used by Egyptian Christians. The Coptic script is based on the Greek alphabet with some letters borrowed from Demotic Egyptian.";
+        symbolsFile = ./coptic;
+      };
+      avestan = {
+        languages = [ "ave" ];
+        description = "Avestan is an ancient Iranian language known primarily from its use in the sacred texts of Zoroastrianism, the Avesta. It is an Indo-Iranian language that was spoken in ancient Persia.";
+        symbolsFile = ./avestan;
+      };
+      gothic = {
+        languages = [ "got" ];
+        description = "Gothic is an extinct East Germanic language that was spoken by the Goths. It is known primarily from the Codex Argenteus, a 6th-century manuscript containing a translation of the Bible into Gothic.";
+        symbolsFile = ./gothic;
+      };
+      farsi = {
+        languages = [ "fas" ];
+        description = "Farsi, also known as Persian, is an Indo-Iranian language spoken primarily in Iran, Afghanistan (where it is known as Dari), and Tajikistan (where it is called Tajik). It has a rich literary tradition and is written in a modified Arabic script.";
+        symbolsFile = ./farsi;
+      };
     };
   };
 
   environment.etc."x11-locale".source = toString pkgs.xorg.libX11 + "share/X11/locale";
 
   home-manager.users.me = {
-    home.file =
-      lib.mapAttrs' (name: path: lib.nameValuePair ".xkb/symbols/${name}" { source = path; })
-        (lib.filterAttrs (_: value: !(value ? "code")) languages) // {
-          ".xkb/symbols/ir".source = ../lib/keyboards/farsi;
-        };
+    home.file = {
+      ".XCompose".source = ./XCompose;
+    };
   };
 
   console.keyMap = "de";
@@ -108,17 +111,21 @@ in
       variant = if settings ? "variant" then settings.variant else "";
     in
     pkgs.writers.writeDashBin "kb-${language}" ''
-      if [ -z $SWAYSOCK ]; then
-        ${pkgs.xorg.setxkbmap}/bin/setxkbmap ${defaultLanguage.code},${code} ${defaultLanguage.variant},${variant} ${
-          toString (map (option: "-option ${option}") xkbOptions)
-        }
-      else
+      if [ -n "$SWAYSOCK" ]; then
         swaymsg -s $SWAYSOCK 'input * xkb_layout "${defaultLanguage.code},${code}"'
         swaymsg -s $SWAYSOCK 'input * xkb_variant "${defaultLanguage.variant},${variant}"'
         swaymsg -s $SWAYSOCK 'input * xkb_options "${lib.concatStringsSep "," xkbOptions}"'
+      elif [ -n "$HYPRLAND_INSTANCE_SIGNATURE" ]; then
+        hyprctl keyword input:kb_variant "" # otherwise we end up with an invalid combination for a short while
+        hyprctl keyword input:kb_layout "${defaultLanguage.code},${code}"
+        hyprctl keyword input:kb_variant "${defaultLanguage.variant},${variant}"
+      elif [ -n "$DISPLAY" ]; then
+        ${pkgs.xorg.setxkbmap}/bin/setxkbmap ${defaultLanguage.code},${code} ${defaultLanguage.variant},${variant} ${
+          toString (map (option: "-option ${option}") xkbOptions)
+        }
       fi
     ''
-  ) languages;
+  ) (languages // config.services.xserver.xkb.extraLayouts);
 
   # improve held key rate
   services.xserver.displayManager.sessionCommands = "${pkgs.xorg.xset}/bin/xset r rate 300 50";

configs/khal.nix

@@ -3,19 +3,16 @@
   pkgs,
   lib,
   ...
-}: let
+}:
+let
   davHome = "~/.local/share/dav";
   kmeinCloud = {
     davEndpoint = "https://cloud.kmein.de/remote.php/dav";
     username = "kieran";
     passwordFile = config.age.secrets.nextcloud-password-kieran.path;
   };
-  fysiCloud = {
-    davEndpoint = "https://nextcloud.fysi.dev/remote.php/dav";
-    username = "kmein";
-    passwordFile = config.age.secrets.nextcloud-password-fysi.path;
-  };
-in {
+in
+{
   age.secrets = {
     nextcloud-password-kieran = {
       file = ../secrets/nextcloud-password-kieran.age;
@@ -23,12 +20,6 @@ in {
       group = config.users.users.me.group;
       mode = "400";
     };
-    nextcloud-password-fysi = {
-      file = ../secrets/nextcloud-password-fysi.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
   };
 
   environment.systemPackages = [
@@ -50,8 +41,8 @@ in {
 
   systemd.user.services.vdirsyncer = {
     enable = true;
-    wants = ["network-online.target"];
-    wantedBy = ["default.target"];
+    wants = [ "network-online.target" ];
+    wantedBy = [ "default.target" ];
     startAt = "*:00/10";
     script = ''
       ${pkgs.vdirsyncer}/bin/vdirsyncer sync && ${pkgs.khal}/bin/khal printcalendars # https://lostpackets.de/khal/configure.html#syncing

configs/lb.nix

@@ -2,10 +2,11 @@
   lib,
   pkgs,
   ...
-}: {
+}:
+{
   systemd.services.lb-subscription = {
     enable = true;
-    wants = ["network-online.target"];
+    wants = [ "network-online.target" ];
     startAt = "weekly";
     serviceConfig = {
       user = "kfm";

configs/lix.nix

@@ -0,0 +1,11 @@
+{
+  pkgs,
+  lib,
+  ...
+}:
+{
+  nix = {
+    package = lib.mkForce pkgs.lix;
+    settings.experimental-features = [ "nix-command" "flakes" ];
+  };
+}

configs/mastodon-bot.nix

@@ -1,19 +0,0 @@
-{pkgs, ...}: {
-  systemd.services.imaginary-illuminations = {
-    enable = false;
-    wants = ["network-online.target"];
-    serviceConfig = {
-      User = "kfm";
-      Group = "users";
-      WorkingDirectory = "/home/kfm/cloud/Seafile/Documents/Media/imaginary-illuminations";
-      Restart = "on-failure";
-      RestartSec = "15s";
-    };
-    startAt = "7:00";
-    script = ''
-      ${pkgs.deno}/bin/deno run -A post.ts
-    '';
-  };
-
-  systemd.timers.imaginary-illuminations.timerConfig.RandomizedDelaySec = "14h";
-}

configs/monitoring.nix

@@ -2,7 +2,8 @@
   config,
   pkgs,
   ...
-}: {
+}:
+{
   services.nginx.virtualHosts.default = {
     locations."= /stub_status".extraConfig = "stub_status;";
   };
@@ -41,12 +42,12 @@
 
   systemd.services.promtail = {
     description = "Promtail service for Loki";
-    wantedBy = ["multi-user.target"];
+    wantedBy = [ "multi-user.target" ];
 
     serviceConfig = {
       ExecStart = ''
         ${pkgs.grafana-loki}/bin/promtail --config.file ${
-          (pkgs.formats.yaml {}).generate "promtail.yaml" {
+          (pkgs.formats.yaml { }).generate "promtail.yaml" {
             server = {
               http_listen_port = 28183;
               grpc_listen_port = 0;
@@ -55,9 +56,7 @@
             clients = [
               {
                 url = "http://${
-                  if config.networking.hostName == "makanek"
-                  then "127.0.0.1"
-                  else "makanek.r"
+                  if config.networking.hostName == "makanek" then "127.0.0.1" else "makanek.r"
                 }:3100/loki/api/v1/push";
               }
             ];
@@ -71,7 +70,7 @@
                 };
                 relabel_configs = [
                   {
-                    source_labels = ["__journal__systemd_unit"];
+                    source_labels = [ "__journal__systemd_unit" ];
                     target_label = "unit";
                   }
                 ];

configs/mpv.nix

@@ -1,44 +1,42 @@
 {
   pkgs,
   lib,
+  self,
   config,
-  niveumPackages,
   ...
-}: let
-  swallow = command: "${niveumPackages.swallow}/bin/swallow ${command}";
-in {
+}:
+let
+  swallow = command: "${pkgs.swallow}/bin/swallow ${command}";
+  myMpv =
+    pkgs:
+    self.inputs.wrappers.wrapperModules.mpv.apply {
+      inherit pkgs;
+      scripts = [
+        pkgs.mpvScripts.visualizer
+      ];
+      "mpv.conf".content = "";
+      "mpv.input".content = ''
+        Alt+- add video-zoom -0.25
+        Alt+= add video-zoom 0.25
+        Alt+LEFT add video-rotate -90
+        Alt+RIGHT add video-rotate 90
+        Alt+h add video-pan-x 0.05
+        Alt+j add video-pan-y -0.05
+        Alt+k add video-pan-y 0.05
+        Alt+l add video-pan-x -0.05
+      '';
+    };
+in
+{
   environment.shellAliases.smpv = swallow "mpv";
 
   nixpkgs.overlays = [
-    (self: super: {
-      mpv = config.home-manager.users.me.programs.mpv.finalPackage;
+    (final: prev: {
+      mpv = (myMpv prev).wrapper;
     })
   ];
 
-  home-manager.users.me = {
-    programs.mpv = {
-      enable = true;
-      config = {
-        ytdl-format = "bestvideo[height<=?720][fps<=?30][vcodec!=?vp9]+bestaudio/best";
-        ytdl-raw-options = lib.concatStringsSep "," [''sub-lang="de,en"'' "write-sub=" "write-auto-sub="];
-        screenshot-template = "%F-%wH%wM%wS-%#04n";
-        script-opts = "ytdl_hook-ytdl_path=${pkgs.yt-dlp}/bin/yt-dlp";
-        ao = "pulse"; # no pipewire for me :(
-      };
-      bindings = {
-        "Alt+RIGHT" = "add video-rotate 90";
-        "Alt+LEFT" = "add video-rotate -90";
-        "Alt+-" = "add video-zoom -0.25";
-        "Alt+=" = "add video-zoom 0.25";
-        "Alt+l" = "add video-pan-x -0.05";
-        "Alt+h" = "add video-pan-x 0.05";
-        "Alt+k" = "add video-pan-y 0.05";
-        "Alt+j" = "add video-pan-y -0.05";
-      };
-      scripts = [
-        pkgs.mpvScripts.quality-menu
-        pkgs.mpvScripts.visualizer
-      ];
-    };
-  };
+  environment.systemPackages = [
+    ((myMpv pkgs).wrapper)
+  ];
 }

configs/mycelium.nix

@@ -1,7 +1,4 @@
-{ lib, ... }:
-let
-  myceliumAddresses = import ../lib/mycelium-network.nix;
-in
+{ lib, pkgs, ... }:
 {
   services.mycelium = {
     enable = true;
@@ -11,5 +8,5 @@ in
   networking.hosts = lib.mapAttrs' (name: address: {
     name = address;
     value = [ "${name}.m" ];
-  }) myceliumAddresses;
+  }) pkgs.lib.niveum.myceliumAddresses;
 }

configs/networkmanager.nix

@@ -1,7 +1,8 @@
 {
   pkgs,
   ...
-}: {
+}:
+{
   programs.nm-applet.enable = true;
 
   networking.networkmanager = {
@@ -12,10 +13,10 @@
     ];
     wifi.macAddress = "random";
     ethernet.macAddress = "random";
-    unmanaged = ["docker*"];
+    unmanaged = [ "docker*" ];
   };
 
-  users.users.me.extraGroups = ["networkmanager"];
+  users.users.me.extraGroups = [ "networkmanager" ];
 
   environment.systemPackages = [
     pkgs.speedtest-cli

configs/newsboat.nix

@@ -1,17 +0,0 @@
-{
-  pkgs,
-  config,
-  ...
-}: {
-  environment.systemPackages = [
-    (pkgs.writers.writeDashBin "miniflux-watch-later" ''
-      miniflux_api_token=$(cat ${config.age.secrets.miniflux-api-token.path})
-      random_feed_item=$(
-        ${pkgs.curl}/bin/curl -u "$miniflux_api_token" --basic -s 'https://feed.kmein.de/v1/entries?starred=true&limit=0' \
-        | ${pkgs.jq}/bin/jq -r '.entries[].id' \
-        | ${pkgs.coreutils}/bin/shuf -n1
-      )
-      ${pkgs.xdg-utils}/bin/xdg-open "https://feed.kmein.de/starred/entry/$random_feed_item"
-    '')
-  ];
-}

configs/nix.nix

@@ -1,14 +0,0 @@
-{
-  pkgs,
-  inputs,
-  ...
-}: {
-  nixpkgs = {
-    config.allowUnfree = true;
-  };
-  nix = {
-    package = pkgs.nixVersions.stable;
-    extraOptions = "experimental-features = nix-command flakes";
-    nixPath = ["nixpkgs=${inputs.nixpkgs}"];
-  };
-}