WIP: develop mail config

.github/workflows/flake.yml

@@ -1,19 +0,0 @@
-name: Update flake.lock
-on:
-  workflow_dispatch: # allows manual triggering
-  schedule:
-    - cron: "0 0 * * 0" # runs weekly on Sunday at 00:00
-
-jobs:
-  lockfile:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v2
-      - name: Install Nix
-        uses: cachix/install-nix-action@v16
-        with:
-          extra_nix_config: |
-            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
-      - name: Update flake.lock
-        uses: DeterminateSystems/update-flake-lock@v3

.github/workflows/niveum.yml

@@ -1,39 +0,0 @@
-name: CI
-on:
-  push:
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        system: [makanek, manakish, kabsa, zaatar, ful, fatteh]
-    steps:
-      - uses: actions/checkout@v3
-      - name: Install QEMU (ARM)
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y qemu-user-static
-        if: ${{ matrix.system == 'ful' }}
-      - name: Install Nix (ARM)
-        uses: cachix/install-nix-action@v16
-        if: ${{ matrix.system == 'ful' }}
-        with:
-          extra_nix_config: |
-            system = aarch64-linux
-      - name: Install Nix (x86_64)
-        uses: cachix/install-nix-action@v16
-        if: ${{ matrix.system != 'ful' }}
-      - name: nixos-rebuild dry-build
-        run: |
-          # remove secrets: ref https://stackoverflow.com/questions/1260748/how-do-i-remove-a-submodule/36593218
-          git submodule deinit -f secrets
-          rm -rf .git/modules/secrets
-          git rm -f secrets
-
-          # recreate secrets
-          mkdir secrets
-          cat secrets.txt | while read -r path; do touch $path; done
-          git add secrets
-
-          nix run nixpkgs#nixos-rebuild -- dry-build  --flake $GITHUB_WORKSPACE#${{matrix.system}}

.gitignore

@@ -1,6 +1,2 @@
+secrets.nix
 result
-.direnv
-.envrc
-.history
-.todo
-node_modules

.gitmodules

@@ -1,3 +0,0 @@
-[submodule "secrets"]
-	path = secrets
-	url = ssh://gitea@code.kmein.de:22022/kfm/niveum-secrets.git

AGENTS.md

@@ -1,96 +0,0 @@
-# niveum — Agent Notes
-
-## What This Is
-
-A NixOS flake managing ~9 machines (desktops, servers, family laptops) for one user (kmein/kfm).
-Levantine food-themed hostnames: fatteh, kabsa, kibbeh, makanek, manakish, tabula, tahina, zaatar, ful.
-
-## Repository Structure
-
-```
-flake.nix          # ~670 lines — inputs, overlay, nixosConfigurations, apps, packages output
-configs/           # ~50 NixOS config fragments imported by systems
-  default.nix      # 200+ line mega-module for desktop machines (user, shell, gnupg, i18n, etc.)
-  graphical/       # Hyprland + home-manager config (415 lines in home-manager.nix)
-  packages.nix     # ~250 lines of environment.systemPackages
-  bots/            # Telegram/Mastodon/Matrix bot configs
-  keyboard/        # XKB layouts (Coptic, Avestan, Gothic, etc.)
-configs/*.nix      # Individual concerns: bluetooth, sound, printing, ssh, fonts, etc.
-modules/           # Proper NixOS modules with options (retiolum, telegram-bot, passport, power-action, etc.)
-packages/          # ~107 package files (scripts, wrappers, small tools)
-systems/<name>/    # Per-machine: configuration.nix + hardware-configuration.nix + extras
-lib/               # default.nix (niveum helpers), machines.nix (IP/key inventory), panoptikon.nix
-secrets/           # agenix-encrypted .age files (empty dir in checkout, tracked via secrets.txt)
-```
-
-## Key Relationships
-
-- **niphas** (input): Provides shared "how I like things" config — nixosModules (shell, editor, git, desktop, nix, udiskie) and overlay (niphas-* packages). Used in `profiles.default` and `profiles.desktop`.
-- **configs/default.nix**: The "big desktop profile" — imported by fatteh, kabsa, manakish (the main desktop machines). NOT imported by servers or family laptops.
-- **profiles** (in flake.nix): `profiles.default`, `profiles.desktop`, `profiles.server` — lists of modules composed per machine.
-- **lib.niveum**: Custom lib injected via overlay (`pkgs.lib.niveum`) — used everywhere for machine addresses, SSH port, helper functions.
-
-## Coding Conventions
-
-- Packages use `writers.writeDashBin`, `writers.writeBashBin`, or `writers.writePython3Bin`
-- Dependencies are referenced via `lib.getExe pkg` (main executable) or `lib.getExe' pkg "name"` (specific binary)
-- For packages needing many commands via PATH, use `lib.makeBinPath` instead (see `packages/prospekte.nix`)
-- Overlay entries use `prev.callPackage packages/foo.nix { }` pattern
-- Packages are exported via `inherit (pkgs) ...` in the `packages` output
-
-## Known Bugs / Broken References
-
-All previously broken references have been fixed (see commits `36132b04`, `e67d6d7d`).
-
-Remaining issues:
-- `modules/retiolum.nix` uses `<retiolum/hosts>` and `<system-secrets/...>` NIX_PATH lookups — breaks flake purity but works with current `NIX_PATH` setup
-
-## Architectural Issues
-
-### 1. configs/default.nix is a grab-bag (200+ lines, ~15 inline anonymous modules)
-It's a list of `imports` mixing inline `{ ... }` blocks with file imports. Hard to find what's defined where.
-
-### 2. Retiolum secret boilerplate repeated 9 times
-Every system has a near-identical block:
-```nix
-age.secrets.retiolum-rsa = { file = ../../secrets/${hostname}-retiolum-privateKey-rsa.age; mode = "400"; owner = "tinc-retiolum"; ... };
-age.secrets.retiolum-ed25519 = { ... same ... };
-```
-Could be a function or module parameterized by hostname.
-
-### 3. Nginx + ACME boilerplate duplicated
-ful and makanek have identical nginx recommended settings + ACME config.
-
-### 4. niveum-* overlay aliases
-`niveum-terminal`, `niveum-browser`, `niveum-filemanager` are aliases to niphas equivalents. Could be removed by updating ~6 references in configs/ to use niphas-* names directly.
-
-### 5. The `pkgs.lib.niveum` pattern
-Custom lib injected via overlay into `pkgs.lib`. Unconventional — only available where overlay is applied. A `specialArgs` approach or standalone lib would be cleaner.
-
-### 6. Restic backup config scattered
-`services.restic.backups.niveum` is configured in configs/backup.nix, configs/applicative.nix, and extended in 5+ system files. Hard to see what a given machine backs up.
-
-### 7. configs/ vs modules/ distinction blurry
-`configs/` has both stateless config fragments (spacetime.nix = timezone) and stateful ones (backup.nix, cloud.nix). `modules/` has proper option-declaring modules. Some configs/ files import from modules/.
-
-## Machines Overview
-
-| Machine   | Role         | Profile          | Arch    | Notes                               |
-|-----------|--------------|------------------|---------|---------------------------------------|
-| fatteh    | Desktop      | default+desktop  | x86_64  | ThinkPad T480, CUDA, main daily       |
-| kabsa     | Desktop      | default+desktop  | x86_64  | ThinkPad X220, constrained (2 jobs)   |
-| manakish  | Desktop      | default+desktop  | x86_64  | ThinkPad X230                         |
-| kibbeh    | Desktop      | default+desktop  | x86_64  | Pantheon DE, travel laptop            |
-| ful       | Server       | default+server   | aarch64 | Oracle/Hetzner, nginx, web services   |
-| makanek   | Server       | default+server   | x86_64  | Hetzner, gitea, nextcloud, weechat    |
-| zaatar    | Server/Home  | default+server   | x86_64  | Home assistant, backup server         |
-| tabula    | Family laptop| default           | x86_64  | LXQt, user "xenos"                   |
-| tahina    | Family laptop| default           | x86_64  | Pantheon, user "xenos", German        |
-
-## Remaining Improvement Ideas
-
-1. **Extract retiolum secret boilerplate** into a function/module
-2. **Break up configs/default.nix** into proper named files
-3. **Extract nginx+ACME server profile**
-4. **Replace niveum-* aliases** with direct niphas-* references
-5. **Fix modules/retiolum.nix** NIX_PATH usage for flake purity

README.md

@@ -1,18 +0,0 @@
-# niveum
-
-> I must Create a System, or be enslav'd by another Man's. —William Blake
-
-> [nĭvĕus](https://logeion.uchicago.edu/niveus), a, um, adj. [nix], _of_ or _from snow, snowy, snow-_ (poet.)
->
-> 1. Lit.: aggeribus niveis informis, Verg. G. 3, 354: aqua, _cooled with snow_, Mart. 12, 17, 6; cf. id. 14, 104 and 117: mons, _covered with snow_, Cat. 64, 240.—
-> 2. Transf., _snow-white, snowy_ (mostly poet.): a similitudine sic: Corpore niveum candorem, aspectu igneum ardorem assequebatur, Auct. Her. 4, 33, 44: lacerti, Verg. A. 8, 387: lac, id. E. 2, 20: hanc si capite niveae agnae exorari judicas, Sen. Q. N. 2, 36: Briseis niveo colore, Hor. C. 2, 4, 3: vestis, Ov. M. 10, 432: candidior nivei folio, Galatea, ligustri, id. ib. 13, 789: dens, id. H. 18, 18: quā notam duxit niveus videri, Hor. C. 4, 2, 59: panis, Juv. 5, 70: flumen, _clear, pellucid_, Sen. Hippol. 504: undae, Mart. 7, 32, 11: tribuni, _clothed in white togas_, Calp. Ecl. 7, 29; so, Quirites, Juv. 10, 45.
-
-## Pressestimmen
-
-> das ist ja pure poesie —[riotbib](https://github.com/riotbib/)
-
-> Deine Configs sind wunderschön <3 —[flxai](https://github.com/flxai/)
-
-## To do
-
-🦗

configs/aerc.nix

@@ -1,332 +0,0 @@
-{
-  pkgs,
-  config,
-  lib,
-  ...
-}:
-{
-  age.secrets = {
-    email-password-ical-ephemeris = {
-      file = ../secrets/email-password-ical-ephemeris.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
-    email-password-cock = {
-      file = ../secrets/email-password-cock.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
-    email-password-posteo = {
-      file = ../secrets/email-password-posteo.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
-  };
-
-  home-manager.users.me = {
-    accounts.email.maildirBasePath = "${config.users.users.me.home}/state/Maildir";
-
-    services.mbsync = {
-      enable = true;
-      frequency = "daily";
-      preExec = "${pkgs.coreutils}/bin/mkdir -p ${config.home-manager.users.me.accounts.email.maildirBasePath}";
-      postExec = "${pkgs.notmuch}/bin/notmuch new";
-    };
-
-    programs.notmuch = {
-      enable = true;
-      extraConfig = {
-        database.path = config.home-manager.users.me.accounts.email.maildirBasePath;
-        new.tags = "";
-        user.name = pkgs.lib.niveum.email.defaults.realName;
-        user.primary_email = config.home-manager.users.me.accounts.email.accounts.posteo.address;
-      };
-    };
-
-    programs.mbsync = {
-      enable = true;
-      extraConfig = lib.concatStringsSep "\n\n" (
-        lib.mapAttrsToList (name: account: ''
-          IMAPAccount ${name}
-          CertificateFile /etc/ssl/certs/ca-certificates.crt
-          Host ${account.imap.host}
-          PassCmd "${toString account.passwordCommand}"
-          User ${account.userName}
-          SSLType IMAPS
-          ${lib.optionalString (lib.isInt account.imap.port) "Port ${toString account.imap.port}"}
-
-          IMAPStore ${name}-remote
-          Account ${name}
-
-          MaildirStore ${name}-local
-          Path ${config.home-manager.users.me.accounts.email.maildirBasePath}/${name}/
-          SubFolders Verbatim
-
-          Channel ${name}
-          Create Near
-          Expunge None
-          Far :${name}-remote:
-          Near :${name}-local:
-          Patterns *
-          Remove None
-          SyncState *
-        '') config.home-manager.users.me.accounts.email.accounts
-      );
-    };
-
-    accounts.email.accounts = {
-      cock =
-        let
-          mailhost = "mail.cock.li";
-          address = "2210@cock.li";
-        in
-        lib.recursiveUpdate pkgs.lib.niveum.email.defaults {
-          address = address;
-          userName = address;
-          passwordCommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.email-password-cock.path}";
-          realName = "2210";
-          imap.host = mailhost;
-          imap.port = 993;
-          smtp.host = mailhost;
-          smtp.port = 25;
-          smtp.tls.useStartTls = true;
-        };
-      ical-ephemeris =
-        let
-          address = "ical.ephemeris@web.de";
-        in
-        lib.recursiveUpdate pkgs.lib.niveum.email.defaults {
-          userName = address;
-          realName = "Kieran from iCal Ephemeris";
-          address = address;
-          passwordCommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.email-password-ical-ephemeris.path}";
-          imap.host = "imap.web.de";
-          imap.port = 993;
-          smtp.host = "smtp.web.de";
-          smtp.port = 587;
-          smtp.tls.useStartTls = true;
-        };
-      posteo =
-        let
-          mailhost = "posteo.de";
-          address = "kieran.meinhardt@posteo.net";
-        in
-        lib.recursiveUpdate pkgs.lib.niveum.email.defaults {
-          address = address;
-          aliases = [ "kmein@posteo.de" ];
-          userName = address;
-          imap.host = mailhost;
-          imap.port = 993;
-          imap.tls.enable = true;
-          smtp.host = mailhost;
-          smtp.port = 465;
-          smtp.tls.enable = true;
-          primary = true;
-          passwordCommand = "${pkgs.coreutils}/bin/cat ${config.age.secrets.email-password-posteo.path}";
-          himalaya = {
-            enable = true;
-          };
-          aerc.extraAccounts.pgp-key-id = "9EDE82CC72A343A95266D0F444857074A3ACC8B7";
-        };
-    };
-
-    programs.himalaya.enable = true;
-
-    programs.thunderbird = {
-      enable = true;
-      settings = {
-      };
-      profiles.${pkgs.lib.niveum.email.thunderbirdProfile} = {
-        isDefault = true;
-        settings = {
-          "mail.default_send_format" = 1;
-          "msgcompose.default_colors" = false;
-          "msgcompose.text_color" = config.lib.stylix.colors.withHashtag.base00;
-          "msgcompose.background_color" = config.lib.stylix.colors.withHashtag.base05;
-        };
-        userChrome = '''';
-        userContent = '''';
-        withExternalGnupg = false;
-      };
-    };
-
-    programs.aerc = {
-      enable = true;
-
-      extraBinds = {
-        # Binds are of the form <key sequence> = <command to run>
-        # To use '=' in a key sequence, substitute it with "Eq": "<Ctrl+Eq>"
-        # If you wish to bind #, you can wrap the key sequence in quotes: "#" = quit
-        global = {
-          "<C-p>" = ":prev-tab<Enter>";
-          "<C-n>" = ":next-tab <Enter>";
-          "<C-t>" = ":term<Enter>";
-          "?" = ":help keys<Enter>";
-        };
-        messages = {
-          q = ":quit<Enter>";
-          j = ":next <Enter>";
-          "<Down>" = ":next<Enter>";
-          "<C-d>" = ":next 50%<Enter>";
-          "<C-f>" = ":next 100%<Enter>";
-          "<PgDn>" = ":next 100%<Enter>";
-          k = ":prev <Enter>";
-          "<Up>" = ":prev<Enter>";
-          "<C-u>" = ":prev 50%<Enter>";
-          "<C-b>" = ":prev 100%<Enter>";
-          "<PgUp>" = ":prev 100%<Enter>";
-          g = ":select 0 <Enter>";
-          G = ":select -1<Enter>";
-          J = ":next-folder <Enter>";
-          K = ":prev-folder<Enter>";
-          H = ":collapse-folder<Enter>";
-          L = ":expand-folder<Enter>";
-          "<space>" = ":read -t<Enter>:next<Enter>";
-          v = ":mark -t<Enter>";
-          V = ":mark -v<Enter>";
-          F = ":flag -t<Enter>";
-          T = ":toggle-threads<Enter>";
-          "<Enter>" = ":view<Enter>";
-          d = ":prompt 'Delete? ' 'delete-message'<Enter>";
-          D = ":move Trash<Enter>";
-          A = ":archive flat<Enter>";
-          C = ":compose<Enter>";
-          rr = ":reply -a<Enter>";
-          rq = ":reply -aq<Enter>";
-          Rr = ":reply<Enter>";
-          Rq = ":reply -q<Enter>";
-          c = ":cf<space>";
-          "$" = ":term<space>";
-          "!" = ":term<space>";
-          "|" = ":pipe<space>";
-          "/" = ":search<space>";
-          "\\" = ":filter <space>";
-          n = ":next-result<Enter>";
-          N = ":prev-result<Enter>";
-          "<Esc>" = ":clear<Enter>";
-          "*" = ":filter -x Flagged<Enter>";
-        };
-        view = {
-          tr = ":pipe ${pkgs.trans}/bin/trans -show-original n -b -no-autocorrect<Enter>"; # https://man.sr.ht/~rjarry/aerc/integrations/translator.md
-          "/" = ":toggle-key-passthrough <Enter> /";
-          q = ":close<Enter>";
-          O = ":open<Enter>";
-          S = ":save<space>";
-          "|" = ":pipe<space>";
-          D = ":move Trash<Enter>";
-          A = ":archive flat<Enter>";
-          "<C-l>" = ":open-link <space>";
-          f = ":forward <Enter>";
-          rr = ":reply -a<Enter>";
-          rq = ":reply -aq<Enter>";
-          Rr = ":reply<Enter>";
-          Rq = ":reply -q<Enter>";
-          H = ":toggle-headers<Enter>";
-          "<C-k>" = ":prev-part<Enter>";
-          "<C-j>" = ":next-part<Enter>";
-          J = ":next <Enter>";
-          K = ":prev<Enter>";
-        };
-        "view::passthrough" = {
-          "$noinherit" = "true";
-          "$ex" = "<C-x>";
-          "<Esc>" = ":toggle-key-passthrough<Enter>";
-        };
-        compose = {
-          # Keybindings used when the embedded terminal is not selected in the compose
-          # view
-          "$noinherit" = "true";
-          "$ex" = "<C-x>";
-          "<C-k>" = ":prev-field<Enter>";
-          "<C-j>" = ":next-field<Enter>";
-          "<tab>" = ":next-field<Enter>";
-          "<C-p>" = ":prev-tab<Enter>";
-          "<C-n>" = ":next-tab<Enter>";
-        };
-
-        "compose::editor" = {
-          # Keybindings used when the embedded terminal is selected in the compose view
-          "$noinherit" = "true";
-          "$ex" = "<C-x>";
-          "<C-k>" = ":prev-field<Enter>";
-          "<C-j>" = ":next-field<Enter>";
-          "<C-p>" = ":prev-tab<Enter>";
-          "<C-n>" = ":next-tab<Enter>";
-        };
-
-        "compose::review" = {
-          # Keybindings used when reviewing a message to be sent
-          y = ":send <Enter>";
-          n = ":abort<Enter>";
-          p = ":postpone<Enter>";
-          q = ":choose -o d discard abort -o p postpone postpone<Enter>";
-          e = ":edit<Enter>";
-          a = ":attach<space>";
-          d = ":detach<space>";
-        };
-
-        terminal = {
-          "$noinherit" = "true";
-          "$ex" = "<C-x>";
-          "<C-p>" = ":prev-tab<Enter>";
-          "<C-n>" = ":next-tab<Enter>";
-        };
-      };
-
-      extraConfig = {
-        ui.sort = "-r date";
-        ui.timestamp-format = "2006-01-02 15:04";
-        ui.mouse-enabled = true;
-        ui.spinner = ". , .";
-        general.unsafe-accounts-conf = true;
-        general.pgp-provider = "gpg";
-        viewer = {
-          pager = "${pkgs.less}/bin/less -R";
-        };
-        compose = {
-          # address-book-cmd = "khard email --remove-first-line --parsable '%s'";
-          no-attachment-warning = "(attach|attached|attachments?|anbei|Anhang|angehängt|beigefügt)";
-        };
-        filters = {
-          "text/plain" = "${pkgs.aerc}/libexec/aerc/filters/colorize";
-          "text/calendar" = "${pkgs.aerc}/libexec/aerc/filters/calendar";
-          "text/html" = "${pkgs.aerc}/libexec/aerc/filters/html"; # Requires w3m, dante
-          # "text/html" =
-          #   "${pkgs.aerc}/share/aerc/filters/html | ${pkgs.aerc}/share/aerc/filters/colorize";
-          # "text/*" =
-          #   ''${pkgs.bat}/bin/bat -fP --theme=ansi --file-name="$AERC_FILENAME "'';
-          "message/delivery-status" = "${pkgs.aerc}/libexec/aerc/filters/colorize";
-          "message/rfc822" = "${pkgs.aerc}/libexec/aerc/filters/colorize";
-          "application/x-sh" = "${pkgs.bat}/bin/bat -fP -l sh";
-        };
-        openers =
-          let
-            as-pdf = pkgs.writers.writeDash "as-pdf" ''
-              d=$(mktemp -p "$XDG_RUNTIME_DIR" -d)
-              trap clean EXIT
-              clean() {
-                rm -rf "$d"
-              }
-              ${pkgs.libreoffice}/bin/libreoffice --headless --convert-to pdf "$1" --outdir "$d"
-              ${pkgs.zathura}/bin/zathura "$d"/*.pdf
-            '';
-          in
-          {
-            "image/*" = "${pkgs.nsxiv}/bin/nsxiv";
-            "application/pdf" = "${pkgs.zathura}/bin/zathura";
-            "application/vnd.openxmlformats-officedocument.wordprocessingml.document" = toString as-pdf;
-            "application/vnd.oasis.opendocument.text" = toString as-pdf;
-            "video/*" = "${pkgs.mpv}/bin/mpv";
-            "audio/*" = "${pkgs.mpv}/bin/mpv";
-          };
-      };
-
-      templates = {
-        # new_message = "hello!";
-      };
-    };
-  };
-}

configs/alacritty.nix

@@ -1,7 +0,0 @@
-{
-  home-manager.users.me = {
-    programs.alacritty = {
-      enable = true;
-    };
-  };
-}

configs/android.nix

@@ -1,5 +0,0 @@
-{
-  programs.adb.enable = true;
-
-  users.users.me.extraGroups = [ "adbusers" ];
-}

configs/applicative.nix

@@ -1,58 +0,0 @@
-{
-  config,
-  pkgs,
-  lib,
-  ...
-}:
-{
-  users.users.applicative = {
-    name = "asg";
-    description = "Applicative Systems";
-    hashedPasswordFile = config.age.secrets.kfm-password.path;
-    home = "/home/applicative";
-    uid = 1001;
-    isNormalUser = true;
-    extraGroups = [
-      "pipewire"
-      "audio"
-    ];
-  };
-
-  nixpkgs.overlays = [
-    (final: prev: {
-      niphas-wallpaper = prev.callPackage ../packages/applicative-wallpaper.nix {
-        inherit (config.lib.stylix) colors;
-      };
-    })
-  ];
-
-  services.getty.autologinOnce = lib.mkForce false;
-
-  # to run nspawn in nix sandbox
-  nix.settings = {
-    auto-allocate-uids = true;
-    system-features = [ "uid-range" ];
-    experimental-features = [
-      "auto-allocate-uids"
-      "cgroups"
-    ];
-    trusted-users = [ config.users.users.applicative.name ];
-  };
-
-  services.restic.backups.niveum = {
-    extraBackupArgs = [
-      "--exclude=${config.users.users.applicative.home}/src/nixpkgs/.git"
-    ];
-    paths = [
-      config.users.users.applicative.home
-    ];
-  };
-
-  security.sudo.extraRules = [
-    {
-      # still required for systemd-nspawn
-      users = [ config.users.users.applicative.name ];
-      commands = [ "ALL" ];
-    }
-  ];
-}

configs/backup.nix

@@ -1,52 +0,0 @@
-{
-  pkgs,
-  config,
-  lib,
-  ...
-}:
-{
-  services.restic.backups.niveum = {
-    initialize = true;
-    repository = pkgs.lib.niveum.restic.repository;
-    timerConfig = {
-      OnCalendar = "8:00";
-      RandomizedDelaySec = "1h";
-    };
-    passwordFile = config.age.secrets.restic.path;
-    extraBackupArgs = [
-      "--exclude=/home/kfm/sync/src/nixpkgs/.git"
-      "--exclude=node_modules"
-      "--exclude=.parcel-cache"
-    ];
-    paths = [
-      "/home/kfm/sync"
-      "/home/kfm/state"
-      "/home/kfm/cloud"
-      "/home/kfm/mobile"
-      "/home/kfm/.gnupg"
-      "/home/kfm/.electrum"
-      "/home/kfm/.ssh"
-    ];
-  };
-
-  systemd.services.restic-backups-niveum.serviceConfig = {
-    Restart = "on-failure";
-    RestartSec = "15s";
-    StartLimitIntervalSec = "1m"; # don't try more than 4 times
-    StartLimitBurst = 4;
-  };
-
-  environment.systemPackages = [
-    (pkgs.writers.writeDashBin "restic-niveum" ''
-      ${pkgs.restic}/bin/restic -r ${pkgs.lib.niveum.restic.repository} -p ${config.age.secrets.restic.path} "$@"
-    '')
-    (pkgs.writers.writeDashBin "restic-mount" ''
-      mountdir=$(mktemp -p "$XDG_RUNTIME_DIR" -d "restic-mount-XXXXXXX")
-      trap clean EXIT
-      clean() {
-        rm -r "$mountdir"
-      }
-      ${pkgs.restic}/bin/restic -r ${pkgs.lib.niveum.restic.repository} -p ${config.age.secrets.restic.path} mount "$mountdir"
-    '')
-  ];
-}

configs/bash.nix

@@ -0,0 +1,9 @@
+{
+  programs.bash = {
+    promptInit = ''PS1="$(tput bold)\w \$([[ \$? == 0 ]] && echo \"\[\033[1;32m\]\" || echo \"\[\033[1;31m\]\")\$$(tput sgr0) "'';
+    interactiveShellInit = ''
+      set -o vi
+    '';
+    enableCompletion = true;
+  };
+}

configs/bluetooth.nix

@@ -2,10 +2,15 @@
 {
   hardware.bluetooth = {
     enable = true;
-    settings.general = {
-      enable = "Source,Sink,Media,Socket";
-    };
+    extraConfig = ''
+      [General]
+      Enable=Source,Sink,Media,Socket
+    '';
   };
 
-  environment.systemPackages = [ pkgs.bluetuith ];
+  environment.systemPackages = [ pkgs.blueman ];
+
+  home-manager.users.me = {
+    services.blueman-applet.enable = true;
+  };
 }

configs/bots/autorenkalender.nix

@@ -1,26 +0,0 @@
-{
-  config,
-  pkgs,
-  ...
-}:
-{
-  niveum.bots.autorenkalender = {
-    enable = true;
-    time = "07:00";
-    telegram = {
-      enable = true;
-      tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = [ "@autorenkalender" ];
-      parseMode = "Markdown";
-    };
-    command = "${pkgs.autorenkalender}/bin/autorenkalender";
-  };
-
-  niveum.passport.services = [
-    {
-      title = "Autorenkalender";
-      description = "sends <a href=\"https://www.projekt-gutenberg.org/\">Projekt Gutenberg</a>'s anniversary information to Telegram.";
-      link = "https://t.me/Autorenkalender";
-    }
-  ];
-}

configs/bots/celan.nix

@@ -1,84 +0,0 @@
-{
-  pkgs,
-  lib,
-  config,
-  ...
-}:
-{
-  niveum.bots.celan = {
-    enable = true;
-    time = "08:00";
-    telegram = {
-      enable = true;
-      tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = [ "@PaulCelan" ];
-    };
-    mastodon = {
-      enable = true;
-      tokenFile = config.age.secrets.mastodon-token-celan.path;
-      language = "de";
-    };
-    command = toString (
-      pkgs.writers.writePython3 "random-celan.py" { libraries = [ pkgs.python3Packages.lxml ]; } ''
-        from lxml import etree
-        import random
-
-
-        def xml_text(elements):
-            return "".join("".join(t.itertext()) for t in elements).strip()
-
-
-        tree = etree.parse('${
-          pkgs.fetchurl {
-            url = "http://c.krebsco.de/celan.tei.xml";
-            hash = "sha256-HgNmJYfhuwyfm+FcNtnnYWpJpIIU1ElHLeLiIFjF9mE=";
-          }
-        }')
-        root = tree.getroot()
-
-        tei = {"tei": "http://www.tei-c.org/ns/1.0"}
-
-        poems = root.xpath(".//tei:lg[@type='poem']", namespaces=tei)
-
-        poem = random.choice(poems)
-
-        for stanza in poem.xpath("./tei:lg[@type='stanza']", namespaces=tei):
-            for line in stanza.xpath('./tei:l', namespaces=tei):
-                if line.text:
-                    print(line.text.strip())
-            print()
-
-        current_element = poem
-        while current_element is not None:
-            if current_element.tag == "{http://www.tei-c.org/ns/1.0}text":
-                text_element = current_element
-
-                title = xml_text(text_element.xpath("./tei:front/tei:docTitle",
-                                 namespaces=tei))
-                print(f"Aus: #{title.replace(" ", "_")}", end=" ")
-
-                if date := xml_text(text_element.xpath("./tei:front/tei:docDate",
-                                    namespaces=tei)):
-                    print(f"({date})")
-                break
-            current_element = current_element.getparent()
-
-        print("\n\n#PaulCelan #Celan #Lyrik #poetry")
-      ''
-    );
-  };
-
-  age.secrets = {
-    mastodon-token-celan.file = ../../secrets/mastodon-token-celan.age;
-  };
-
-  systemd.timers.bot-celan.timerConfig.RandomizedDelaySec = "10h";
-
-  niveum.passport.services = [
-    {
-      title = "Paul Celan Bot";
-      description = "sends a random poem by Paul Celan to Telegram.";
-      link = "https://t.me/PaulCelan";
-    }
-  ];
-}

configs/bots/default.nix

@@ -1,114 +0,0 @@
-{
-  config,
-  pkgs,
-  ...
-}:
-let
-  reverseDirectory = "/run/telegram-reverse";
-  proverbDirectory = "/run/telegram-proverb";
-in
-{
-  imports = [
-    ./logotheca.nix
-    ./transits.nix
-    ./autorenkalender.nix
-    ./hesychius.nix
-    ./smyth.nix
-    ./nachtischsatan.nix
-    # ./tlg-wotd.nix TODO reenable
-    ./celan.nix
-    ./nietzsche.nix
-  ];
-
-  age.secrets = {
-    telegram-token-kmein.file = ../../secrets/telegram-token-kmein.age;
-  };
-
-  systemd.tmpfiles.rules =
-    map
-      (
-        path:
-        pkgs.lib.niveum.tmpfilesConfig {
-          type = "d";
-          mode = "0750";
-          age = "1h";
-          inherit path;
-        }
-      )
-      [
-        reverseDirectory
-        proverbDirectory
-      ];
-
-  niveum.passport.services = [
-    {
-      title = "Rückwarts-Bot";
-      link = "https://t.me/RueckwaertsBot";
-      description = "reverses things on Telegram.";
-    }
-    {
-      title = "BetaCode-Bot";
-      link = "https://t.me/BetaCodeBot";
-      description = "converts <a href=\"https://en.wikipedia.org/wiki/Beta_Code\">beta code</a> to polytonic Greek on Telegram.";
-    }
-    {
-      title = "Sprichwortgenerator-Bot";
-      link = "https://t.me/SprichwortGeneratorBot";
-      description = "generates useless German proverbs with optional stock photo background on Telegram.";
-    }
-  ];
-
-  age.secrets = {
-    telegram-token-reverse.file = ../../secrets/telegram-token-reverse.age;
-    telegram-token-betacode.file = ../../secrets/telegram-token-betacode.age;
-    telegram-token-proverb.file = ../../secrets/telegram-token-proverb.age;
-    telegram-token-streaming-link.file = ../../secrets/telegram-token-streaming-link.age;
-  };
-
-  systemd.services.telegram-reverse = {
-    wantedBy = [ "multi-user.target" ];
-    description = "Telegram reverse bot";
-    path = [ pkgs.ffmpeg ];
-    enable = true;
-    script = ''
-      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-reverse
-    '';
-    serviceConfig.Restart = "always";
-    serviceConfig.WorkingDirectory = reverseDirectory;
-    serviceConfig.LoadCredential = "token:${config.age.secrets.telegram-token-reverse.path}";
-  };
-
-  systemd.services.telegram-streaming-link = {
-    wantedBy = [ "multi-user.target" ];
-    description = "Telegram bot converting YouTube Music <-> Spotify";
-    enable = true;
-    script = ''
-      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-streaming-link
-    '';
-    serviceConfig.Restart = "always";
-    serviceConfig.LoadCredential = "token:${config.age.secrets.telegram-token-streaming-link.path}";
-  };
-
-  systemd.services.telegram-betacode = {
-    wantedBy = [ "multi-user.target" ];
-    description = "Telegram beta code bot";
-    enable = true;
-    script = ''
-      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-betacode
-    '';
-    serviceConfig.Restart = "always";
-    serviceConfig.LoadCredential = "token:${config.age.secrets.telegram-token-betacode.path}";
-  };
-
-  systemd.services.telegram-proverb = {
-    wantedBy = [ "multi-user.target" ];
-    description = "Telegram proverb bot";
-    enable = true;
-    script = ''
-      TELEGRAM_BOT_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/token")" ${pkgs.telebots}/bin/telegram-proverb
-    '';
-    serviceConfig.Restart = "always";
-    serviceConfig.WorkingDirectory = proverbDirectory;
-    serviceConfig.LoadCredential = "token:${config.age.secrets.telegram-token-proverb.path}";
-  };
-}

configs/bots/hesychius.nix

@@ -1,36 +0,0 @@
-{
-  pkgs,
-  config,
-  ...
-}:
-{
-  niveum.bots.hesychius = {
-    enable = true;
-    time = "08:00";
-    mastodon = {
-      enable = true;
-      language = "el";
-      tokenFile = config.age.secrets.mastodon-token-hesychius.path;
-    };
-    telegram = {
-      enable = true;
-      tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = [ "@HesychiosAlexandreus" ];
-    };
-    command = "${pkgs.coreutils}/bin/shuf -n1 ${pkgs.hesychius}";
-  };
-
-  systemd.timers.bot-hesychius.timerConfig.RandomizedDelaySec = "10h";
-
-  age.secrets = {
-    mastodon-token-hesychius.file = ../../secrets/mastodon-token-hesychius.age;
-  };
-
-  niveum.passport.services = [
-    {
-      title = "Hesychius of Alexandria Bot";
-      description = "sends a random word from Hesychius of Alexandria's lexicon to Telegram.";
-      link = "https://t.me/HesychiosAlexandreus";
-    }
-  ];
-}

configs/bots/logotheca.nix

@@ -1,37 +0,0 @@
-{
-  pkgs,
-  config,
-  ...
-}:
-{
-  niveum.bots.logotheca = {
-    enable = true;
-    time = "08/6:00";
-    telegram = {
-      enable = true;
-      tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = [ "-1001760262519" ];
-      parseMode = "Markdown";
-    };
-    matrix = {
-      enable = true;
-      homeserver = "matrix.4d2.org";
-      tokenFile = config.age.secrets.matrix-token-lakai.path;
-      chatIds = [
-        "!zlwCuPiCNMSxDviFzA:4d2.org"
-      ];
-    };
-    command = "${pkgs.literature-quote}/bin/literature-quote";
-  };
-
-  age.secrets = {
-    matrix-token-lakai.file = ../../secrets/matrix-token-lakai.age;
-  };
-
-  niveum.passport.services = [
-    {
-      title = "Literature quote bot";
-      description = "sends me and my friends three <a href=\"https://logotheca.xn--kiern-0qa.de/\">logotheca</a> quotes a day.";
-    }
-  ];
-}

configs/bots/nachtischsatan.nix

@@ -1,53 +0,0 @@
-{
-  pkgs,
-  config,
-  lib,
-  ...
-}:
-let
-  nachtischsatan-bot =
-    { tokenFile }:
-    pkgs.writers.writePython3 "nachtischsatan-bot"
-      {
-        libraries = [ pkgs.python3Packages.python-telegram-bot ];
-      }
-      ''
-        from telegram.ext import Application, ContextTypes, MessageHandler, filters
-        from telegram import Update
-        import random
-        import time
-
-
-        async def flubber(update: Update, context: ContextTypes.DEFAULT_TYPE):
-            time.sleep(random.randrange(4000) / 1000)
-            await update.message.reply_text("*flubberflubber*")
-
-
-        with open('${tokenFile}', 'r') as tokenFile:
-            token = tokenFile.read().strip()
-            application = Application.builder().token(token).build()
-            application.add_handler(MessageHandler(filters.ALL, flubber))
-            application.run_polling()
-      '';
-in
-{
-  systemd.services.telegram-nachtischsatan = {
-    wantedBy = [ "multi-user.target" ];
-    description = "*flubberflubber*";
-    enable = true;
-    script = toString (nachtischsatan-bot {
-      tokenFile = config.age.secrets.telegram-token-nachtischsatan.path;
-    });
-    serviceConfig.Restart = "always";
-  };
-
-  age.secrets.telegram-token-nachtischsatan.file = ../../secrets/telegram-token-nachtischsatan.age;
-
-  niveum.passport.services = [
-    {
-      title = "Nachtischsatan-Bot";
-      link = "https://t.me/NachtischsatanBot";
-      description = "*flubberflubber*";
-    }
-  ];
-}

configs/bots/nietzsche.nix

@@ -1,33 +0,0 @@
-{
-  config,
-  pkgs,
-  ...
-}:
-{
-  niveum.bots.nietzsche = {
-    enable = true;
-    time = "08:00";
-    mastodon = {
-      enable = true;
-      tokenFile = config.age.secrets.mastodon-token-nietzsche.path;
-      language = "de";
-    };
-    command = toString (
-      pkgs.writers.writeBash "random-nietzsche" ''
-        set -efu
-        random_number=$(( ($RANDOM % 10) + 1 ))
-        if [ "$random_number" -eq 1 ]; then
-          ${pkgs.random-zeno}/bin/random-zeno "/Literatur/M/Nietzsche,+Friedrich"
-        else
-          ${pkgs.random-zeno}/bin/random-zeno "/Philosophie/M/Nietzsche,+Friedrich"
-        fi
-      ''
-    );
-  };
-
-  systemd.timers.bot-nietzsche.timerConfig.RandomizedDelaySec = "10h";
-
-  age.secrets = {
-    mastodon-token-nietzsche.file = ../../secrets/mastodon-token-nietzsche.age;
-  };
-}

configs/bots/smyth.nix

@@ -1,72 +0,0 @@
-{
-  config,
-  pkgs,
-  lib,
-  ...
-}:
-{
-  niveum.bots.smyth = {
-    enable = true;
-    time = "08:00";
-    mastodon = {
-      enable = true;
-      tokenFile = config.age.secrets.mastodon-token-smyth.path;
-      language = "en";
-    };
-    telegram = {
-      enable = true;
-      tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = [ "@HerbertWeirSmyth" ];
-    };
-    command = toString (
-      pkgs.writers.writeDash "random-smyth" ''
-        set -efu
-
-        good_curl() {
-          ${pkgs.curl}/bin/curl "$@" \
-            --compressed \
-            -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
-            -H 'Accept-Language: en-US,en;q=0.5' \
-            -H 'DNT: 1' \
-            -H 'Connection: keep-alive' \
-            -H 'Upgrade-Insecure-Requests: 1' \
-            -H 'Sec-Fetch-Dest: document' \
-            -H 'Sec-Fetch-Mode: navigate' \
-            -H 'Sec-Fetch-Site: cross-site' \
-            -H 'Priority: u=0, i' \
-            -H 'Pragma: no-cache' \
-            -H 'Cache-Control: no-cache'
-        }
-
-        RANDOM_SECTION=$(
-          good_curl -sSL http://www.perseus.tufts.edu/hopper/xmltoc?doc=Perseus%3Atext%3A1999.04.0007%3Asmythp%3D1 \
-            | ${pkgs.gnugrep}/bin/grep -o 'ref="[^"]*"' \
-            | ${pkgs.coreutils}/bin/shuf -n1 \
-            | ${pkgs.gnused}/bin/sed 's/^ref="//;s/"$//'
-        )
-
-        url="http://www.perseus.tufts.edu/hopper/text?doc=$RANDOM_SECTION"
-        good_curl -sSL "$url"\
-          | ${pkgs.htmlq}/bin/htmlq '#text_main' \
-          | ${pkgs.gnused}/bin/sed 's/<\/\?hr>//g' \
-          | ${pkgs.pandoc}/bin/pandoc -f html -t plain --wrap=none
-
-        printf '\n%s\n\n#AncientGreek' "$url"
-      ''
-    );
-  };
-
-  systemd.timers.bot-smyth.timerConfig.RandomizedDelaySec = "10h";
-
-  age.secrets = {
-    mastodon-token-smyth.file = ../../secrets/mastodon-token-smyth.age;
-  };
-
-  niveum.passport.services = [
-    {
-      title = "Herbert Weir Smyth Bot";
-      description = "sends a random section from Smyth's Ancient Greek grammar to Telegram.";
-      link = "https://t.me/HerbertWeirSmyth";
-    }
-  ];
-}

configs/bots/tlg-wotd.nix

@@ -1,176 +0,0 @@
-{
-  pkgs,
-  config,
-  ...
-}:
-let
-  mastodonEndpoint = "https://social.krebsco.de";
-in
-{
-  systemd.services.bot-tlg-wotd = {
-    # TODO reenable
-    # once https://github.com/NixOS/nixpkgs/pull/462893 is in stable NixOS
-    enable = true;
-    wants = [ "network-online.target" ];
-    startAt = "9:30";
-    path = [
-      pkgs.jq
-      pkgs.curl
-      pkgs.recode
-      pkgs.deno
-      pkgs.imagemagick
-      pkgs.gawk
-      pkgs.gnugrep
-      pkgs.coreutils
-    ];
-    environment = {
-      NPM_CONFIG_CACHE = "/tmp";
-      CLTK_DATA = "/tmp";
-    };
-    script = ''
-        set -efux
-
-        chat_id=@tlgwotd
-
-        export TELEGRAM_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/telegram-token")"
-        export MASTODON_TOKEN="$(cat "$CREDENTIALS_DIRECTORY/mastodon-token")"
-
-        json_data=$(curl -sSL http://stephanus.tlg.uci.edu/Iris/Wotd | recode html..utf8)
-
-        word=$(echo "$json_data" | jq -r '.word')
-        compact_word=$(echo "$word" | sed 's/,.*$//')
-        definition=$(echo "$json_data" | jq -r '.definition | sub("<.*>"; "") | rtrimstr(" ")')
-        first_occurrence=$(echo "$json_data" | jq -r '.firstOccurrence')
-        total_occurrences=$(echo "$json_data" | jq -r '.totalOccurrences')
-        telegram_caption="*$word* ‘$definition’
-
-      First occurrence (century): $first_occurrence
-      Number of occurrences (in all Ancient Greek texts): $total_occurrences"
-        mastodon_caption="$word ‘$definition’
-
-      First occurrence (century): $first_occurrence
-      Number of occurrences (in all Ancient Greek texts): $total_occurrences"
-
-        #ancientgreek #classics #wotd #wordoftheday
-
-        transliteration=$(${
-          pkgs.writers.writePython3 "translit.py"
-            {
-              libraries = py: [ py.cltk ];
-            }
-            ''
-              import sys
-              from cltk.phonology.grc.transcription import Transcriber
-
-              probert = Transcriber("Attic", "Probert")
-              text = " ".join(sys.argv[1:])
-              ipa = probert.transcribe(text)
-
-              print(ipa)
-            ''
-        } "$compact_word")
-
-
-        photo_path=/tmp/output.png
-
-        hex_to_rgb() {
-            hex="$1"
-            r=$(printf "%d" "0x$(echo "$hex" | cut -c2-3)")
-            g=$(printf "%d" "0x$(echo "$hex" | cut -c4-5)")
-            b=$(printf "%d" "0x$(echo "$hex" | cut -c6-7)")
-            echo "$r $g $b"
-        }
-
-        calculate_luminance() {
-            r="$1"
-            g="$2"
-            b="$3"
-
-            r_l=$(echo "$r" | awk '{print ($1 / 255 <= 0.03928) ? $1 / 255 / 12.92 : (($1 / 255 + 0.055) / 1.055)^2.4}')
-            g_l=$(echo "$g" | awk '{print ($1 / 255 <= 0.03928) ? $1 / 255 / 12.92 : (($1 / 255 + 0.055) / 1.055)^2.4}')
-            b_l=$(echo "$b" | awk '{print ($1 / 255 <= 0.03928) ? $1 / 255 / 12.92 : (($1 / 255 + 0.055) / 1.055)^2.4}')
-
-            echo "$r_l $g_l $b_l" | awk '{print 0.2126*$1 + 0.7152*$2 + 0.0722*$3}'
-        }
-
-
-        hex_color="#$(echo "$compact_word" | md5sum | cut -c 1-6)"
-        if echo "$hex_color" | grep -qE '^#[0-9A-Fa-f]{6}$'; then
-            set -- $(hex_to_rgb "$hex_color")
-            r="$1"
-            g="$2"
-            b="$3"
-        fi
-
-        luminance=$(calculate_luminance "$r" "$g" "$b")
-
-        threshold="0.1"
-        echo "$r $g $b"
-        if [ "$(echo "$luminance" | awk -v threshold="$threshold" '{print ($1 > threshold)}')" -eq 1 ]; then
-            color1="black"
-            color2="#333"
-        else
-            color1="white"
-            color2=lightgrey
-        fi
-
-        magick -size 1400x846 \
-            xc:"$hex_color" \
-            -font "${pkgs.gentium}/share/fonts/truetype/GentiumBookPlus-Bold.ttf" \
-            -fill "$color1" \
-            -pointsize 150 -gravity west \
-            -annotate +100-160 "$compact_word" \
-            -font "${pkgs.gentium}/share/fonts/truetype/GentiumBookPlus-Regular.ttf" \
-            -fill "$color2" \
-            -pointsize 60 -gravity west \
-            -annotate +100+00 "$transliteration" \
-            -fill "$color1" \
-            -annotate +100+120 "‘$definition’" \
-            -fill "$color2" \
-            -pointsize 40 -gravity southwest \
-            -annotate +100+60 "attested $total_occurrences times" \
-            -pointsize 40 -gravity southeast \
-            -annotate +100+60 "$(date -I)" \
-            "$photo_path"
-
-        curl -X POST "https://api.telegram.org/bot$TELEGRAM_TOKEN/sendPhoto" \
-             -F "chat_id=\"$chat_id\"" \
-             -F "photo=@$photo_path" \
-             -F parse_mode=Markdown \
-             -F caption="$telegram_caption"
-
-        mastodon_upload_response=$(curl -X POST "${mastodonEndpoint}/api/v2/media" \
-            -H "Authorization: Bearer $MASTODON_TOKEN" \
-            -F "file=@$photo_path" \
-            -F "description=$word ‘$definition’")
-        mastodon_image_id=$(echo $mastodon_upload_response | jq -r .id)
-        curl -X POST "${mastodonEndpoint}/api/v1/statuses" \
-            -H "Authorization: Bearer $MASTODON_TOKEN" \
-            -d "status=$mastodon_caption" \
-            -d "visibility=public" \
-            -d "media_ids[]=$mastodon_image_id"
-    '';
-    serviceConfig = {
-      Type = "oneshot";
-      DynamicUser = true;
-      StateDirectory = "tlgwotd";
-      PrivateTmp = true;
-      LoadCredential = [
-        "telegram-token:${config.age.secrets.telegram-token-kmein.path}"
-        "mastodon-token:${config.age.secrets.mastodon-token-tlgwotd.path}"
-      ];
-    };
-  };
-
-  age.secrets = {
-    mastodon-token-tlgwotd.file = ../../secrets/mastodon-token-tlgwotd.age;
-  };
-
-  niveum.passport.services = [
-    {
-      title = "Thesaurus Linguae Graecae Word of the Day";
-      description = "sends <a href=\"https://stephanus.tlg.uci.edu/\">TLG</a>'s word of the day to Telegram.";
-      link = "https://t.me/tlgwotd";
-    }
-  ];
-}

configs/bots/transits.nix

@@ -1,76 +0,0 @@
-{
-  config,
-  pkgs,
-  lib,
-  ...
-}:
-let
-  toSymbols = pkgs.writers.writeDash "to-symbols" ''
-    ${pkgs.gnused}/bin/sed '
-      s/\bTri\b/△/;
-      s/\bOpp\b/☍/;
-      s/\bSqu\b/□/;
-      s/\bSex\b/⚹/;
-      s/\bCon\b/☌/;
-      s/Sun/☉/g;
-      s/Moon/☽/g;
-      s/Mercury/☿/g;
-      s/Venus/♀/g;
-      s/Mars/♂/g;
-      s/Jupiter/♃/g;
-      s/Saturn/♄/g;
-      s/Uranus/♅/g;
-      s/Neptune/♆/g;
-      s/Pluto/♇/g;
-      s/North Node/☊/g;
-      s/\bLeo\b/♌/g;
-      s/\bCan\(cer\)\?\b/♋/g;
-      s/\bGem\(ini\)\?\b/♊/g;
-      s/\bVir\(go\)\?\b/♍/g;
-      s/\bLib\(ra\)\?\b/♎/g;
-      s/\bTau\(rus\)\?\b/♉/g;
-      s/\bAri\(es\)\?\b/♈/g;
-      s/\bSco\(rpio\)\?\b/♏/g;
-      s/\bPis\(ces\)\?\b/♓/g;
-      s/\bSag\(ittarius\)\?\b/♐/g;
-      s/\bAqu\(arius\)\?\b/♒/g;
-      s/\bCap\(ricorn\)\?\b/♑/g;
-      s/-->/⟶/g;
-      s/\s\+/ /g; # replace multiple spaces by one
-      s/^.*\([ 0-9]\{2\}:[0-9]\{2\}\) /\1 /; # remove date at beginning of line (but not everything up to v/c X:XX)
-      s/^\s*//
-    '
-  '';
-in
-{
-  niveum.bots.transits = {
-    enable = true;
-    time = "*:0/1";
-    mastodon = {
-      enable = true;
-      tokenFile = config.age.secrets.mastodon-token-transits.path;
-    };
-    telegram = {
-      enable = true;
-      tokenFile = config.age.secrets.telegram-token-kmein.path;
-      chatIds = [ "-1001796440545" ];
-    };
-    command = toString (
-      pkgs.writers.writeDash "common-transits" ''
-        set -efu
-
-        now=$(${pkgs.coreutils}/bin/date +%_H:%M | ${pkgs.gnused}/bin/sed 's/^\s*//')
-        date=$(${pkgs.coreutils}/bin/date +'%m %d %Y')
-        (
-          cd ${pkgs.astrolog}/bin
-          # ./astrolog -Yt -Yd -q 10 22 1999 6:32 -zN Kassel -td $date -R Uranus Neptune Pluto "North Node"
-          ./astrolog -qd $date -zN Berlin -Yt -Yd -d -R Uranus Neptune Pluto "North Node" -A 2
-        ) | ${toSymbols} | ${pkgs.coreutils}/bin/sort -n | ${pkgs.gnugrep}/bin/grep "^$now" || :
-      ''
-    );
-  };
-
-  age.secrets = {
-    mastodon-token-transits.file = ../../secrets/mastodon-token-transits.age;
-  };
-}

configs/browser.nix

@@ -1,92 +0,0 @@
-{
-  config,
-  pkgs,
-  ...
-}:
-{
-  environment.systemPackages = [
-    pkgs.cro
-    pkgs.tor-browser
-    pkgs.firefox
-    pkgs.brave
-  ];
-
-  home-manager.users.me = {
-    programs.firefox = {
-      enable = true;
-      profiles =
-        let
-          defaultSettings = {
-            "beacon.enabled" = false;
-            "browser.bookmarks.showMobileBookmarks" = true;
-            "browser.newtab.preload" = false;
-            "browser.search.isUS" = false;
-            "browser.search.region" = "DE";
-            "browser.send_pings" = false;
-            "browser.shell.checkDefaultBrowser" = false;
-            "browser.startup.homepage" = "chrome://browser/content/blanktab.html";
-            "browser.uidensity" = 1;
-            "browser.urlbar.placeholderName" = "Search";
-            "datareporting.healthreport.service.enabled" = false;
-            "datareporting.healthreport.uploadEnabled" = false;
-            "datareporting.policy.dataSubmissionEnabled" = false;
-            "datareporting.sessions.current.clean" = true;
-            "distribution.searchplugins.defaultLocale" = "de-DE";
-            "general.smoothScroll" = true;
-            "identity.fxaccounts.account.device.name" = config.networking.hostName;
-            "network.cookie.cookieBehavior" = 1;
-            "privacy.donottrackheader.enabled" = true;
-            "privacy.trackingprotection.enabled" = true;
-            "privacy.trackingprotection.pbmode.enabled" = true;
-            "privacy.trackingprotection.socialtracking.enabled" = true;
-            "services.sync.declinedEngines" = "passwords";
-            "services.sync.engine.passwords" = false;
-            "signon.autofillForms" = false;
-            "signon.rememberSignons" = false;
-            "toolkit.legacyUserProfileCustomizations.stylesheets" = true;
-            "toolkit.telemetry.archive.enabled" = false;
-            "toolkit.telemetry.bhrPing.enabled" = false;
-            "toolkit.telemetry.cachedClientID" = "";
-            "toolkit.telemetry.enabled" = false;
-            "toolkit.telemetry.firstShutdownPing.enabled" = false;
-            "toolkit.telemetry.hybridContent.enabled" = false;
-            "toolkit.telemetry.newProfilePing.enabled" = false;
-            "toolkit.telemetry.prompted" = 2;
-            "toolkit.telemetry.rejected" = true;
-            "toolkit.telemetry.server" = "";
-            "toolkit.telemetry.shutdownPingSender.enabled" = false;
-            "toolkit.telemetry.unified" = false;
-            "toolkit.telemetry.unifiedIsOptIn" = false;
-            "toolkit.telemetry.updatePing.enabled" = false;
-            "ui.prefersReducedMotion" = 1;
-          };
-        in
-        {
-          default = {
-            id = 0;
-            isDefault = true;
-            settings = defaultSettings;
-            # extensions = with pkgs.nur.repos.rycee.firefox-addons; [
-            #   ublock-origin
-            #   darkreader
-            #   sponsorblock
-            #   consent-o-matic
-            #   i-dont-care-about-cookies
-            #   # auto-tab-discard TODO what is this
-            # ];
-            userChrome = ''
-              #TabsToolbar {
-                visibility: collapse !important;
-              }
-            '';
-          };
-        };
-    };
-  };
-
-  home-manager.users.me = {
-    stylix.targets.firefox.profileNames = [ "default" ];
-  };
-
-  environment.variables.BROWSER = "firefox";
-}

configs/ccc.nix

@@ -1,38 +0,0 @@
-{ pkgs, ... }:
-{
-  networking.networkmanager.ensureProfiles.profiles = {
-    "39C3" = {
-      connection = {
-        id = "39C3";
-        type = "wifi";
-      };
-      wifi = {
-        mode = "infrastructure";
-        ssid = "39C3";
-      };
-      wifi-security = {
-        auth-alg = "open";
-        key-mgmt = "wpa-eap";
-      };
-      "802-1x" = {
-        anonymous-identity = "39C3";
-        eap = "ttls;";
-        identity = "39C3";
-        password = "39C3";
-        phase2-auth = "pap";
-        altsubject-matches = "DNS:radius.c3noc.net";
-        ca-cert = "${builtins.fetchurl {
-          url = "https://letsencrypt.org/certs/isrgrootx1.pem";
-          sha256 = "sha256:1la36n2f31j9s03v847ig6ny9lr875q3g7smnq33dcsmf2i5gd92";
-        }}";
-      };
-      ipv4 = {
-        method = "auto";
-      };
-      ipv6 = {
-        addr-gen-mode = "default";
-        method = "auto";
-      };
-    };
-  };
-}

configs/chromium.nix

@@ -0,0 +1,17 @@
+{ pkgs, ... }:
+{
+  programs.chromium = {
+    enable = true;
+    extensions = [
+      "hdokiejnpimakedhajhdlcegeplioahd" # LastPass
+      "ihlenndgcmojhcghmfjfneahoeklbjjh" # cVim
+      "fpnmgdkabkmnadcjpehmlllkndpkmiak" # Wayback Machine
+      "cjpalhdlnbpafiamejdnhcphjbkeiagm" # uBlock Origin
+      "iaalpfgpbocpdfblpnhhgllgbdbchmia" # asciidoctor
+    ];
+  };
+
+  environment.systemPackages = [ pkgs.chromium ];
+
+  niveum.applications.browser = "chromium";
+}

configs/clipboard.nix

@@ -1,8 +0,0 @@
-{
-  config,
-  pkgs,
-  ...
-}:
-{
-  services.clipmenu.enable = true;
-}

configs/cloud.nix

@@ -1,169 +1,48 @@
+{ config, lib, pkgs, ... }:
 {
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-{
-  systemd.user.services.systemd-tmpfiles-clean = {
-    enable = true;
-    wantedBy = [ "default.target" ];
-    startAt = "daily";
-    script = "systemd-tmpfiles --user --clean";
-    serviceConfig = {
-      Type = "oneshot";
-    };
-  };
-
-  systemd.user.tmpfiles.users.me.rules =
-    map pkgs.lib.niveum.tmpfilesConfig [
-      {
-        type = "d";
-        mode = "0755";
-        age = "7d";
-        path = "${config.users.users.me.home}/sync/Downloads";
-      }
-      {
-        type = "d";
-        mode = "0755";
-        age = "7d";
-        path = "${config.users.users.me.home}/cloud/nextcloud/tmp";
-      }
-    ]
-    ++
-      map
-        (
-          path:
-          pkgs.lib.niveum.tmpfilesConfig {
-            type = "L+";
-            user = config.users.users.me.name;
-            group = config.users.users.me.group;
-            mode = "0755";
-            argument = "${config.users.users.me.home}/sync/${path}";
-            path = "${config.users.users.me.home}/${path}";
-          }
-        )
-        [
-          ".ssh"
-          ".gnupg"
-          ".pki"
-          ".local/share/aerc"
-        ];
-
-  services.gnome.gnome-keyring.enable = true;
-  security.pam.services.lightdm.enableGnomeKeyring = true;
-
-  home-manager.users.me = {
-    services.nextcloud-client = {
-      enable = true;
-      startInBackground = true;
-    };
-  };
-
-  systemd.user.services.nextcloud-syncer = {
-    enable = false;
-    wants = [ "network-online.target" ];
-    wantedBy = [ "default.target" ];
-    startAt = "*:00/10";
-    script =
-      let
-        kieran = {
-          user = "kieran";
-          passwordFile = config.age.secrets.nextcloud-password-kieran.path;
-          endpoint = "https://cloud.kmein.de";
-          target = "${config.users.users.me.home}/notes";
-        };
-      in
-      ''
-        mkdir -p ${lib.escapeShellArg kieran.target}
-        ${pkgs.nextcloud-client}/bin/nextcloudcmd --non-interactive --user ${kieran.user} --password "$(cat ${kieran.passwordFile})" --path /Notes ${lib.escapeShellArg kieran.target} ${kieran.endpoint}
-      '';
-    serviceConfig = {
-      Type = "oneshot";
-      Restart = "on-failure";
-    };
-  };
-
-  environment.systemPackages = [
-    (pkgs.writers.writeDashBin "book" ''
-      set -efu
-      book="$({
-        ${pkgs.findutils}/bin/find ${config.users.users.me.home}/cloud/syncthing/library -type f
-        ${pkgs.findutils}/bin/find ${config.users.users.me.home}/cloud/nextcloud/Books -type f
-      } | ${pkgs.fzf}/bin/fzf)"
-      exec ${pkgs.zathura}/bin/zathura "$book"
-    '')
-    (
-      let
-        kieran = {
-          user = "kieran.meinhardt@gmail.com";
-          passwordFile = config.age.secrets.mega-password.path;
-        };
-        megatools =
-          command:
-          ''${pkgs.megatools}/bin/megatools ${command} --username ${lib.escapeShellArg kieran.user} --password "$(cat ${kieran.passwordFile})"'';
-      in
-      pkgs.writers.writeDashBin "book-mega" ''
-        set -efu
-        selection="$(${megatools "ls"} | ${pkgs.fzf}/bin/fzf)"
-        test -n "$selection" || exit 1
-
-        tmpdir="$(mktemp -p "$XDG_RUNTIME_DIR" -d)"
-        trap clean EXIT
-        clean() {
-          rm -rf "$tmpdir"
-        }
-
-        (
-          cd "$tmpdir"
-          ${megatools "get"} "$selection"
-          exec ${pkgs.zathura}/bin/zathura "$(basename "$selection")"
-        )
-      ''
-    )
+  imports = [
+    <modules/seafile.nix>
+    <modules/google-drive.nix>
+    <modules/dropbox.nix>
+    <stockholm/krebs/3modules/syncthing.nix>
   ];
 
-  age.secrets.mega-password = {
-    file = ../secrets/mega-password.age;
-    owner = config.users.users.me.name;
-    group = config.users.users.me.group;
-    mode = "400";
+  niveum.dropbox = {
+    enable = true;
+    user = config.users.users.me;
   };
 
-  services.syncthing = {
+  niveum.seafile = {
+    enable = true;
+    user = config.users.users.me;
+  };
+
+  niveum.google-drive = rec {
+    enable = true;
+    directory = "${user.home}/cloud/gdrive";
+    user = config.users.users.me;
+  };
+
+  services.syncthing = rec {
     enable = true;
     user = "kfm";
     openDefaultPorts = true;
     configDir = "/home/kfm/.config/syncthing";
     dataDir = "/home/kfm/.config/syncthing";
-    cert = config.age.secrets.syncthing-cert.path;
-    key = config.age.secrets.syncthing-key.path;
-    settings = {
-      devices = pkgs.lib.niveum.syncthingIds;
-      folders = {
-        "${config.users.users.me.home}/sync" = {
-          devices = [
-            "kabsa"
-            "manakish"
-            "fatteh"
-          ];
-          label = "sync";
-          versioning.type = "trashcan";
-          versioning.params.cleanoutDays = 100;
-        };
-        "${config.users.users.me.home}/mobile" = {
-          devices = [
-            "kabsa"
-            "manakish"
-            "fatteh"
-            "kibbeh"
-          ];
-          id = "mobile";
-          label = "mobile";
-          versioning.type = "trashcan";
-          versioning.params.cleanoutDays = 100;
-        };
-      };
+  };
+
+  krebs.syncthing = rec {
+    enable = true;
+    key = toString <secrets/syncthing/key.pem>;
+    cert = toString <secrets/syncthing/cert.pem>;
+    peers = {
+      homeros.id = "HSOL72W-MMN346W-C3WCWCH-OTRKJYG-MY2WWV6-P7JUHN7-5WYYYRV-ZMH4KAA";
+      scardanelli.id = "7CZYHEX-3CSFDQU-PEEMYHG-6XGQ2ZD-KGVUWH5-GFRB2XK-FP57ERX-7APZUQU";
+      rilke.id = "NYNNHXP-7JMSTXG-SVNOPWD-RWXCCCL-CBOVBEI-X4QPLF4-NJA5G2P-RSGYRQQ";
+      wilde.id = "R6DEBD7-G5RYDKN-VFA3HPO-WX4DNVI-373F7OQ-AW5MZTT-3L4BDVW-Y6ROEAF";
     };
+    folders."${config.users.users.me.home}/cloud/syncthing/common".peers = [ "homeros" "scardanelli" "wilde" ];
+    folders."${config.users.users.me.home}/cloud/syncthing/library".peers = lib.attrNames peers;
+    folders."${config.users.users.me.home}/cloud/syncthing/mundoiu".peers = lib.attrNames peers;
   };
 }

configs/compton.nix

@@ -0,0 +1,8 @@
+{
+  services.compton = {
+    enable = true;
+    shadow = true;
+    menuOpacity = "0.9";
+    shadowOpacity = "0.3";
+  };
+}

configs/default.nix

@@ -1,224 +1,273 @@
-{
-  pkgs,
-  lib,
-  config,
-  ...
-}:
-let
-  inherit (lib.strings) makeBinPath;
-in
+{ pkgs, lib, config, ... }:
 {
   imports = [
+    <modules/constants.nix>
     {
-      boot.supportedFilesystems = [ "ntfs" ];
+      services.dbus.packages = [ pkgs.gnome3.dconf ];
+    }
+    <home-manager/nixos>
+    # <configs/mopidy.nix>
+    <configs/bash.nix>
+    <configs/bluetooth.nix>
+    <configs/chromium.nix>
+    <configs/cloud.nix>
+    <configs/compton.nix>
+    <configs/default.nix>
+    # <configs/home-assistant.nix>
+    <configs/distrobump.nix>
+    <configs/docker.nix>
+    <configs/dunst.nix>
+    <configs/fonts.nix>
+    <configs/git.nix>
+    <configs/haskell>
+    <configs/hledger.nix>
+    <configs/htop.nix>
+    <configs/hu-berlin.nix>
+    <configs/i3.nix>
+    <configs/kdeconnect.nix>
+    <configs/keybase.nix>
+    <configs/keyboard.nix>
+    <configs/mail.nix>
+    <configs/mpv.nix>
+    <configs/nano.nix>
+    <configs/neovim.nix>
+    <configs/nixpkgs-unstable.nix>
+    <configs/packages>
+    <configs/printing.nix>
+    <configs/python.nix>
+    <configs/random-background.nix>
+    <configs/redshift.nix>
+    <configs/retiolum.nix>
+    <configs/rofi.nix>
+    <configs/sncli.nix>
+    <configs/ssh.nix>
+    <configs/sudo.nix>
+    <configs/themes/owickstrom-dark.nix>
+    <configs/theming.nix>
+    <configs/tmux.nix>
+    <configs/todo-txt.nix>
+    <configs/traadfri.nix>
+    <configs/unclutter.nix>
+    <configs/urxvt.nix>
+    <configs/vscode.nix>
+    <configs/xautolock.nix>
+    <configs/xresources.nix>
+    <configs/zsh.nix>
+    {
+      niveum.user = {
+        github = "kmein";
+        email = "kieran.meinhardt@gmail.com";
+        name = "Kierán Meinhardt";
+      };
+
+      niveum.applications = rec {
+        fileManager = "${config.niveum.applications.terminal} -e ${pkgs.ranger}/bin/ranger";
+      };
+
+      niveum.theme = {
+        gtk = { name = "Arc"; package = pkgs.arc-theme; };
+        icon = { name = "Arc"; package = pkgs.arc-icon-theme; };
+        cursor = { name = "capitaine-cursors"; package = pkgs.capitaine-cursors; };
+      };
     }
     {
-      nixpkgs = {
-        config = {
-          allowUnfree = true;
-          permittedInsecurePackages = [
-          ];
+      nixpkgs.config = {
+        allowUnfree = true;
+        packageOverrides = pkgs: {
+          python3Packages = pkgs.python3Packages.override {
+            overrides = new: old: {
+              spotify-cli-linux = new.callPackage <packages/spotify-cli-linux.nix> {};
+              instaloader = new.callPackage <packages/instaloader.nix> {};
+              sncli = new.callPackage <packages/sncli.nix> {};
+            };
+          };
+          haskellPackages = pkgs.haskellPackages.override {
+            overrides = new: old: {
+              blessings = new.callPackage <packages/blessings.nix> {};
+              scanner = new.callPackage <stockholm/krebs/5pkgs/haskell/scanner.nix> {};
+            };
+          };
+          git-quick-stats = pkgs.callPackage <packages/git-quick-stats.nix> {};
+          writeDash = pkgs.writers.writeDash;
+          writeDashBin = pkgs.writers.writeDashBin;
+          iolanguage = pkgs.callPackage <packages/iolanguage.nix> {};
+          nix-git = pkgs.callPackage <packages/nix-git.nix> {};
+
+          kmein = {
+            autorenkalender = pkgs.callPackage <packages/autorenkalender.nix> {};
+            bvg = pkgs.callPackage <packages/bvg.nix> {};
+            daybook = pkgs.callPackage <packages/daybook.nix> {};
+            font-size = pkgs.callPackage <packages/font-size.nix> { font = config.niveum.fonts.terminal; };
+            genius = pkgs.callPackage <packages/genius.nix> {};
+            instaget = pkgs.callPackage <packages/instaget.nix> {};
+            literature-quote = pkgs.callPackage <packages/literature-quote.nix> {};
+            n = pkgs.callPackage <packages/n.nix> {};
+            depp = pkgs.callPackage <packages/depp.nix> {};
+            odyssey = pkgs.callPackage <packages/odyssey.nix> {};
+            wttr = pkgs.callPackage <packages/wttr.nix> {};
+            nav = pkgs.callPackage <packages/nav.nix> {};
+            slide =
+              let slide-package = pkgs.fetchFromGitHub {
+                owner = "kmein";
+                repo = "slide";
+                rev = "0470583d22212745eab4f46076267addf4d2346c";
+                sha256 = "0skcp3va9v4hmxy5ramghpz53gnyxv10wsacgmc2jr0v1wrqlzbh";
+              };
+              in pkgs.callPackage slide-package {};
+            haskellPackages.mnemosyne =
+              let mnemosyne-package = pkgs.fetchFromGitHub {
+                repo = "mnemosyne";
+                owner = "kmein";
+                rev = "6bfa13c88db176af80be90840ff03573d67d679f";
+                sha256 = "1rimv5c5q9602y501hbkgkfbimqnmdkcr5hp1434q06gcazhjhca";
+              };
+              in pkgs.haskellPackages.callPackage mnemosyne-package {};
+          };
         };
       };
     }
     {
-      boot.tmp.cleanOnBoot = true;
+      boot.cleanTmpDir = true;
       boot.loader.timeout = 1;
+      boot.extraModulePackages = [ config.boot.kernelPackages.exfat-nofuse ];
     }
     {
-      age.secrets = {
-        di-fm-key = {
-          file = ../secrets/di-fm-key.age;
-          owner = config.users.users.me.name;
-          group = config.users.users.me.group;
-          mode = "440";
-        };
-        restic = {
-          file = ../secrets/restic.age;
-          owner = config.users.users.me.name;
-          group = config.users.users.me.group;
-          mode = "400";
-        };
-      };
+      time.timeZone = "Europe/Berlin";
     }
     {
       home-manager.users.me = {
         programs.zathura = {
           enable = true;
-          options = {
-            selection-clipboard = "clipboard";
-            # first-page-column = "1:1"; # makes side-by-side mode start on the left side
-          };
+          options.selection-clipboard = "clipboard";
         };
       };
     }
     {
       users.mutableUsers = false;
 
-      users.defaultUserShell = pkgs.zsh;
-
       users.users.me = {
         name = "kfm";
-        description = pkgs.lib.niveum.kieran.name;
-        hashedPasswordFile = config.age.secrets.kfm-password.path;
-        isNormalUser = true;
-        uid = 1000;
-        extraGroups = [
-          "pipewire"
-          "audio"
-          "lp"
-          "scanner"
-        ];
-      };
-
-      nix.settings.trusted-users = [ config.users.users.me.name ];
-
-      age.secrets = {
-        kfm-password.file = ../secrets/kfm-password.age;
-      };
-
-      home-manager.users.me.xdg.enable = true;
-    }
-    {
-      environment.interactiveShellInit = "export PATH=$PATH";
-      environment.shellAliases =
-        let
-          swallow = command: "${pkgs.swallow}/bin/swallow ${command}";
-        in
-        {
-          sxiv = swallow "${pkgs.nsxiv}/bin/nsxiv";
-          zathura = swallow "${pkgs.zathura}/bin/zathura";
-          im = "${pkgs.openssh}/bin/ssh weechat@makanek -t tmux attach-session -t IM";
-          yt = "${pkgs.yt-dlp}/bin/yt-dlp --add-metadata -ic"; # Download video link
-          yta = "${pkgs.yt-dlp}/bin/yt-dlp --add-metadata --audio-format mp3 --audio-quality 0 -xic"; # Download with audio
-        };
-    }
-    {
-      i18n = {
-        defaultLocale = "en_DK.UTF-8";
-        supportedLocales = [ "all" ];
+        description = config.niveum.user.name;
+        home = "/home/kfm";
+        createHome = true;
+        group = "users";
+        hashedPassword = "$6$w9hXyGFl/.IZBXk$5OiWzS1G.5hImhh1YQmZiCXYNAJhi3X6Y3uSLupJNYYXPLMsQpx2fwF4Xr2uYzGMV8Foqh8TgUavx1APD9rcb/";
+        shell = pkgs.zsh;
       };
     }
     {
-      services.power-profiles-daemon.enable = true;
-    }
-    {
-      programs.gnupg = {
-        agent = {
-          enable = true;
-          pinentryPackage = pkgs.pinentry-qt;
-          settings =
-            let
-              defaultCacheTtl = 2 * 60 * 60;
-            in
-            {
-              default-cache-ttl = defaultCacheTtl;
-              max-cache-ttl = 4 * defaultCacheTtl;
-            };
-        };
+      sound.enable = true;
+
+      hardware.pulseaudio = {
+        enable = true;
+        package = pkgs.pulseaudioFull; # for bluetooth sound output
       };
 
+      users.users.me.extraGroups = [ "audio" ];
+
+      environment.systemPackages = [ pkgs.pavucontrol pkgs.pamixer ];
+    }
+    {
       environment.systemPackages = [
-        pkgs.gnupg
-        (pkgs.pass.withExtensions (e: [
-          e.pass-otp
-          e.pass-import
-          e.pass-genphrase
-        ]))
+        (pkgs.writers.writeDashBin "niveum-deploy" ''
+          NIVEUM_DIR=/home/kfm/prog/git/niveum
+
+          [ $# -eq 1 ] || echo >&2 "Usage: niveum-deploy SYSTEM"
+
+          eval $(nix-build --no-out-link "$NIVEUM_DIR/deploy.nix" -A "$1")
+        '')
+        (pkgs.writers.writeDashBin "niveum-update" ''
+          NIVEUM_DIR=/home/kfm/prog/git/niveum
+
+          nix-prefetch-git --url https://github.com/NixOS/nixpkgs-channels --rev refs/heads/nixos-${config.system.stateVersion} > "$NIVEUM_DIR/nixpkgs.json"
+        '')
       ];
     }
     {
-      services.atd.enable = true;
-    }
-    {
-      services.getty = {
-        greetingLine = lib.mkForce "As-salamu alaykum wa rahmatullahi wa barakatuh!";
-        helpLine = lib.mkForce "";
+      environment.interactiveShellInit = "export PATH=$PATH:$HOME/.cargo/bin";
+      environment.shellAliases = {
+        clipboard = "${pkgs.xclip}/bin/xclip -se c";
+        o = "${pkgs.xdg_utils}/bin/xdg-open";
+        tmux = "${pkgs.tmux}/bin/tmux -2";
+        ip = "${pkgs.iproute}/bin/ip -c";
+        ns = "nix-shell --run zsh";
+        nixi = ''nix repl "<nixpkgs>"'';
+        rm = "rm -i";
+        cp = "cp -i";
+        mv = "mv -i";
+        l = "${pkgs.exa}/bin/exa -a";
+        ls = "${pkgs.exa}/bin/exa";
+        ll = "${pkgs.exa}/bin/exa -l";
+        la = "${pkgs.exa}/bin/exa -la";
+        dig = "dig +short";
       };
     }
     {
-      networking.hosts = lib.mapAttrs' (name: address: {
-        name = address;
-        value = [ "${name}.local" ];
-      }) pkgs.lib.niveum.localAddresses;
-    }
-    {
-      home-manager.users.me.home.stateVersion = "22.05";
-      home-manager.backupFileExtension = "bak";
-    }
-    {
-      programs.dconf.enable = true;
-      home-manager.users.me = {
-        dconf.enable = true;
-        dconf.settings = {
-          # Change the default terminal for Nemo
-          "org/cinnamon/desktop/applications/terminal".exec = lib.getExe pkgs.niphas-terminal;
+      networking.wireless = {
+        enable = true;
+        userControlled.enable = true;
+        networks = {
+          "Aether".pskRaw = "e1b18af54036c5c9a747fe681c6a694636d60a5f8450f7dec0d76bc93e2ec85a";
+          "Asoziales Netzwerk".pskRaw = "8e234041ec5f0cd1b6a14e9adeee9840ed51b2f18856a52137485523e46b0cb6";
+          "EasyBox-927376".pskRaw = "dbd490ab69b39bd67cfa06daf70fc3ef3ee90f482972a668ed758f90f5577c22";
+          "FlixBus Wi-Fi" = {};
+          "FlixBus" = {};
+          "FlixTrain" = {};
+          "Libertarian WiFi".pskRaw = "e9beaae6ffa55d10e80b8a2e7d997411d676a3cc6f1f29d0b080391f04555050";
+          "Ni/Schukajlow".pskRaw = "ffc47f6829da59c48aea878a32252223303f5c47a3859edc90971ffc63346781";
+          "WIFIonICE" = {};
+          "WLAN-914742".psk = "67647139648174545446";
+          "WLAN-XVMU6T".pskRaw = "46ea807283255a3d7029233bd79c18837df582666c007c86a8d591f65fae17cc";
+          "c-base-public" = {};
+          "discord".psk = "baraustrinken";
+          "security-by-obscurity".psk = "44629828256481964386";
         };
       };
-    }
-    ./android.nix
-    ./stylix.nix
-    ./alacritty.nix
-    ./backup.nix
-    ./bluetooth.nix
-    ./aerc.nix
-    ./khal.nix
-    ./browser.nix
-    ./clipboard.nix
-    ./cloud.nix
-    ./fonts.nix
-    ./hledger.nix
-    ./htop.nix
-    ./lix.nix
-    ./uni.nix
-    # ./i3.nix
-    ./graphical
-    ./keyboard
-    ./kdeconnect.nix
-    { services.upower.enable = true; }
-    ./lb.nix
-    ./mpv.nix
-    ./mime.nix
-    ./editor.nix
-    ./flameshot.nix
-    ./packages.nix
-    ./virtualization.nix
-    ./stardict.nix
-    ./polkit.nix
-    ./printing.nix
-    ./redshift.nix
-    ./rofi.nix
-    ./ssh.nix
-    ./sound.nix
-    ./sudo.nix
-    ./unclutter.nix
-    ./vscode.nix
-    ./wallpaper.nix
-    {
-      home-manager.users.me.home.file.".zshrc".text = ''
-        # nothing to see here
-      '';
-    }
-    {
-      programs.zsh.interactiveShellInit = ''
-        hash -d nixos=/etc/nixos niveum=${config.users.users.me.home}/sync/src/niveum
-      '';
 
-      home-manager.users.me = {
-        xdg.userDirs =
-          let
-            pictures = "${config.users.users.me.home}/cloud/nextcloud/Bilder";
-          in
-          {
+      environment.systemPackages = [ pkgs.wpa_supplicant_gui ];
+    }
+    {
+      networking.hosts = {
+        "192.168.178.1" = [ "fritz.box" ];
+        "192.168.178.21" = [ "scardanelli" ];
+        "192.168.178.22" = [ "homeros" ];
+        "192.168.178.24" = [ "catullus" ];
+      };
+    }
+    {
+      i18n.defaultLocale = "en_GB.UTF-8";
+    }
+    {
+      services.illum.enable = true;
+    }
+    {
+      services.xserver = {
+        enable = true;
+        displayManager.lightdm = {
+          enable = true;
+          autoLogin.enable = true;
+          autoLogin.user = config.users.users.me.name;
+          greeters.gtk = {
             enable = true;
-            documents = "${config.users.users.me.home}/cloud/nextcloud/Documents";
-            desktop = "/tmp";
-            download = "${config.users.users.me.home}/sync/Downloads";
-            music = "${config.users.users.me.home}/mobile/audio";
-            publicShare = "${config.users.users.me.home}/cloud/nextcloud/tmp";
-            videos = pictures;
-            pictures = pictures;
+            indicators = [ "~spacer" "~host" "~spacer" "~session" "~power" ];
           };
+        };
+        desktopManager.default = "none";
+      };
+    }
+    {
+      security.wrappers = {
+        pmount.source = "${pkgs.pmount}/bin/pmount";
+        pumount.source = "${pkgs.pmount}/bin/pumount";
+      };
+    }
+    {
+      programs.command-not-found.enable = true;
+    }
+    {
+      programs.java = {
+        enable = true;
+        package = pkgs.openjdk;
       };
     }
   ];

configs/distrobump.nix

@@ -0,0 +1,13 @@
+{ lib, config, pkgs, ... }:
+{
+  imports = [
+    (import <stockholm/makefu/3modules/bump-distrowatch.nix> {
+      inherit lib config;
+      pkgs = pkgs // {
+        writeDash = pkgs.writers.writeDash;
+      };
+    })
+  ];
+
+  makefu.distrobump.enable = true;
+}

configs/docker.nix

@@ -0,0 +1,6 @@
+{ pkgs, ... }:
+{
+  virtualisation.docker.enable = true;
+  users.users.me.extraGroups = [ "docker" ];
+  environment.systemPackages = [ pkgs.docker pkgs.docker_compose ];
+}

configs/dunst.nix

@@ -0,0 +1,61 @@
+{ config, pkgs, ... }:
+with config.niveum; {
+  home-manager.users.me.services.dunst = {
+    enable = true;
+    iconTheme = theme.icon;
+    settings = {
+      global = {
+        transparency = 10;
+        font = "${fonts.terminal.name} ${toString fonts.terminal.size}";
+        geometry = "200x5-30+20";
+        frame_color = colours.foreground;
+        follow = "mouse";
+        indicate_hidden = true;
+        notification_height = 0;
+        separator_height = 2;
+        padding = 8;
+        horizontal_padding = 8;
+        separator_color = "auto";
+        sort = true;
+        markup = "full";
+        format = ''%a\n<b>%s</b>\n%b'';
+        alignment = "left";
+        show_age_threshold = 60;
+        bounce_freq = 0;
+        word_wrap = true;
+        ellipsize = "middle";
+        ignore_newline = false;
+        stack_duplicates = true;
+        hide_duplicate_count = false;
+        max_icon_size = 32;
+        sticky_history = true;
+        history_length = 20;
+        dmenu = "${pkgs.rofi}/bin/rofi -display-run dunst -show run";
+        browser = applications.browser;
+        verbosity = "mesg";
+        corner_radius = 0;
+        mouse_left_click = "do_action";
+        mouse_right_click = "close_current";
+        mouse_middle_click = "close_all";
+      };
+      urgency_low = rec {
+        frame_color = background;
+        background = colours.foreground;
+        foreground = colours.background;
+        timeout = 5;
+      };
+      urgency_normal = rec {
+        frame_color = background;
+        background = colours.foreground;
+        foreground = colours.background;
+        timeout = 10;
+      };
+      urgency_critical = rec {
+        frame_color = background;
+        background = colours.red.dark;
+        foreground = colours.background;
+        timeout = 0;
+      };
+    };
+  };
+}

configs/editor.nix

@@ -1,51 +0,0 @@
-{
-  pkgs,
-  lib,
-  config,
-  ...
-}:
-{
-  home-manager.users.me = {
-    editorconfig = {
-      enable = true;
-      settings = {
-        "*" = {
-          charset = "utf-8";
-          end_of_line = "lf";
-          trim_trailing_whitespace = true;
-          insert_final_newline = true;
-          indent_style = "space";
-          indent_size = 2;
-        };
-        "*.py" = {
-          indent_size = 4;
-        };
-        Makefile = {
-          indent_style = "tab";
-        };
-        "*.md" = {
-          trim_trailing_whitespace = false;
-        };
-      };
-    };
-  };
-
-  environment.systemPackages = [
-    pkgs.vim-typewriter
-    pkgs.dawn-editor
-
-    # language servers
-    pkgs.pyright
-    pkgs.haskellPackages.haskell-language-server
-    pkgs.texlab
-    pkgs.gopls
-    pkgs.nixfmt-rfc-style
-    pkgs.rust-analyzer
-    pkgs.nodePackages.typescript-language-server
-    pkgs.lua-language-server
-    pkgs.nodePackages.vscode-langservers-extracted
-    pkgs.lemminx # XML LSP
-    pkgs.jq-lsp
-    pkgs.dhall-lsp-server
-  ];
-}

configs/flameshot.nix

@@ -1,23 +0,0 @@
-{
-  lib,
-  pkgs,
-  ...
-}:
-{
-  home-manager.users.me = {
-    services.flameshot = {
-      enable = true;
-      settings.General = {
-        autoCloseIdleDaemon = true;
-        drawColor = "#ff0000";
-        drawThickness = 2;
-        showDesktopNotification = true;
-        disabledTrayIcon = true;
-        showHelp = false;
-        squareMagnifier = true;
-        uploadWithoutConfirmation = true;
-        # buttons = ''@Variant(\0\0\0\x7f\0\0\0\vQList<int>\0\0\0\0\x10\0\0\0\x2\0\0\0\x5\0\0\0\x13\0\0\0\xa\0\0\0\x1\0\0\0\xc\0\0\0\xd\0\0\0\x6\0\0\0\x8\0\0\0\0\0\0\0\xf\0\0\0\x4\0\0\0\xb\0\0\0\x3\0\0\0\x12\0\0\0\x9)'';
-      };
-    };
-  };
-}

configs/fonts.nix

@@ -1,161 +1,19 @@
+{ pkgs, ... }:
 {
-  pkgs,
-  ...
-}:
-let
-  zip-font =
-    name: arguments:
-    let
-      directory = pkgs.fetchzip arguments;
-    in
-    pkgs.runCommand name { } ''
-      mkdir -p $out/share/fonts/{truetype,opentype,woff}
-      ${pkgs.findutils}/bin/find ${directory} -name '*.ttf' -exec install '{}' $out/share/fonts/truetype \;
-      ${pkgs.findutils}/bin/find ${directory} -name '*.otf' -exec install '{}' $out/share/fonts/opentype \;
-      ${pkgs.findutils}/bin/find ${directory} -name '*.woff' -exec install '{}' $out/share/fonts/woff \;
-    '';
-  simple-ttf =
-    name: arguments:
-    let
-      file = pkgs.fetchurl arguments;
-    in
-    pkgs.runCommand name { } ''
-      mkdir -p $out/share/fonts/truetype
-      install ${file} $out/share/fonts/truetype
-    '';
+  niveum.fonts = {
+    ui = {
+      name = "Sans";
+      size = 9;
+    };
+    terminal = {
+      name = "Monospace";
+      size = 9;
+    };
+  };
 
-  egyptianHiero = zip-font "EgyptianHiero" {
-    url = "https://github.com/MKilani/Djehuty/archive/master.zip";
-    sha256 = "sha256-S3vZxdeBj57KJsF+zaZw7sQw8T+z1aVC2CnpnZ0/x2c=";
-  };
-  antinoou = zip-font "Antinoou" {
-    url = "https://www.evertype.com/fonts/coptic/AntinoouFont.zip";
-    sha256 = "0jwihj08n4yrshcx07dnaml2x9yws6dgyjkvg19jqbz17drbp3sw";
-    stripRoot = false;
-  };
-  newGardiner = zip-font "NewGardiner" {
-    url = "https://mjn.host.cs.st-andrews.ac.uk/egyptian/fonts/NewGardiner.zip";
-    hash = "sha256-nP0y4ILt+0mlkDRdCNSeO2Gequ8wyix/qQdmujTNw3Y=";
-    stripRoot = false;
-  };
-  newAthenaUnicode = zip-font "NewAthenaUnicode" {
-    url = "https://classicalstudies.org/sites/default/files/userfiles/files/NAU5_005.zip";
-    sha256 = "1g7qk9gl4nq2dz41bvck1nzilhin44j8691cxax3dlp77bbn9bxr";
-  };
-  jsesh = simple-ttf "JSesh" {
-    url = "http://files.qenherkhopeshef.org/jsesh/JSeshFont.ttf";
-    sha256 = "1203jrk2xzvgckcc5hx88kja1i3h8gm1wiyla5j6gspc0hbv56ry";
-  };
-  egyptianTextBeta = simple-ttf "EgyptianText-1.0beta" {
-    url = "http://c.krebsco.de/EgyptianText-v1.0-beta.ttf";
-    sha256 = "0cfjbk7xxnxhlp6v922psm5j1xzrv6wfk226ji2wz2yfrnkbcbsv";
-  };
-  coranica = simple-ttf "Coranica" {
-    url = "https://corpuscoranicum.de/fonts/coranica_1164.ttf";
-    sha256 = "0igi8q8b2p38x9jq8c98afsl7bf8rj32zj2052yyjgj9r88y4yi5";
-  };
-  koineGreek = simple-ttf "KoineGreek.ttf" {
-    url = "https://github.com/Center-for-New-Testament-Restoration/font/raw/af83eed50105344edaa5e5eddaf87696e271468c/KoineGreek.ttf";
-    hash = "sha256-YtC+nj7+Jl8k00rqAAqySYc8iTAOL7PixXc+LfSmnS0=";
-  };
-  egyptianText = simple-ttf "EgyptianText" {
-    url = "https://github.com/microsoft/font-tools/raw/1092cb23520967830001a0807eb21d6a44dda522/EgyptianOpenType/font/eot.ttf";
-    sha256 = "1n294vhcx90270pnsw1dbk6izd61fjvbnjrh4hcf98ff3s540x0c";
-  };
-in
-{
   fonts = {
-    enableDefaultPackages = true;
-    fontDir.enable = true;
-    packages = with pkgs; [
-      alegreya
-      alegreya-sans
-      amiri
-      annapurna-sil
-      antinoou
-      cantarell-fonts
-      cardo
-      charis-sil
-      doulos-sil
-      newAthenaUnicode
-      coranica
-      corefonts
-      crimson
-      eb-garamond
-      ipaexfont
-      jsesh
-      egyptianHiero
-      egyptianText
-      egyptianTextBeta
-      font-awesome_6
-      etBook
-      newGardiner
-      junicode
-      koineGreek
-      # brill
-      ezra-sil
-      fira
-      font-awesome
-      galatia-sil
-      gentium
-      gyre-fonts
-      ibm-plex
-      jetbrains-mono
-      libertinus
-      libre-bodoni
-      lmodern
-      merriweather
-      ocr-a
-      montserrat
-      roboto
-      roboto-mono
-      noto-fonts
-      noto-fonts-cjk-sans
-      noto-fonts-color-emoji
-      roboto-slab
-      scheherazade-new
-      source-code-pro
-      source-sans-pro
-      source-serif-pro
-      theano
-      tocharian-font
-      vista-fonts
-      vollkorn
-      zilla-slab
-    ]; # google-fonts league-of-moveable-type
-    fontconfig.defaultFonts =
-      let
-        emoji = [ "Noto Color Emoji" ];
-      in
-      {
-        monospace = [ "Noto Sans Mono" ] ++ emoji;
-        serif = [
-          "Noto Serif"
-          "Noto Naskh Arabic"
-          "Noto Serif Devanagari"
-        ];
-        sansSerif = [
-          "Noto Sans Display"
-          "Noto Naskh Arabic"
-          "Noto Sans Hebrew"
-          "Noto Sans Devanagari"
-          "Noto Sans CJK JP"
-          "Noto Sans Coptic"
-          "Noto Sans Syriac Western"
-        ];
-        inherit emoji;
-      };
-    # xelatex fails with woff files
-    # ref https://tex.stackexchange.com/questions/392144/xelatex-and-fontspec-crash-trying-to-find-woff-file-for-some-fonts-but-not-other
-    fontconfig.localConf = ''
-      <fontconfig>
-      <!-- Reject WOFF fonts We don't register WOFF(2) fonts with fontconfig because of the W3C spec -->
-       <selectfont>
-        <rejectfont>
-         <glob>*.woff*</glob>
-        </rejectfont>
-       </selectfont>
-      </fontconfig>
-    '';
+    enableDefaultFonts = true;
+    enableFontDir = true;
+    fonts = with pkgs; [ corefonts eb-garamond fira libertine lmodern noto-fonts roboto ubuntu_font_family ];
   };
 }

configs/gaming.nix

@@ -1,23 +0,0 @@
-{ pkgs, ... }:
-{
-  environment.systemPackages = [
-    pkgs.zeroad
-    pkgs.mari0
-    pkgs.luanti # fka minetest
-    # pkgs.openarena
-    # pkgs.teeworlds
-    pkgs.nethack
-    # pkgs.freeciv
-    # pkgs.lincity-ng
-    # pkgs.superTuxKart
-
-    pkgs.morris
-    pkgs.gnome-chess
-    pkgs.gnuchess
-  ];
-  networking.firewall = {
-    # for 0ad multiplayer
-    allowedTCPPorts = [ 20595 ];
-    allowedUDPPorts = [ 20595 ];
-  };
-}

configs/git.nix

@@ -0,0 +1,39 @@
+{ pkgs, config, ... }:
+{
+  environment.systemPackages = [
+    pkgs.mr
+    pkgs.git
+    pkgs.gitAndTools.hub
+    pkgs.gitAndTools.git-extras
+    pkgs.gitstats
+    pkgs.patch
+    pkgs.patchutils
+    pkgs.git-quick-stats
+    pkgs.git-preview
+  ];
+
+  home-manager.users.me = {
+    home.file.".mrconfig".text = builtins.readFile <dot/mrconfig.ini>;
+
+    programs.git = {
+      enable = true;
+      package = pkgs.gitAndTools.gitFull;
+      userName = config.niveum.user.name;
+      userEmail = config.niveum.user.email;
+      aliases = {
+        br = "branch";
+        co = "checkout";
+        ci = "commit";
+        cm = "commit -m";
+        amend = "commit --amend";
+        st = "status -s";
+        unstage = "reset HEAD --";
+        diffs = "diff --staged";
+        last = "log -1 HEAD";
+        logs = "log --pretty=oneline";
+        graph = "log --graph --abbrev-commit --decorate --date=relative --format=format:'%C(bold blue)%h%C(reset) - %C(bold green)(%ar)%C(reset) %C(white)%s%C(reset) %C(dim white)- %an%C(reset)%C(bold yellow)%d%C(reset)' --all";
+      };
+      ignores = config.niveum.ignore;
+    };
+  };
+}

configs/gnome.nix

@@ -1,5 +0,0 @@
-{
-  services.xserver.enable = true;
-  services.xserver.displayManager.lightdm.enable = true;
-  services.xserver.desktopManager.gnome.enable = true;
-}

configs/gollum.nix

@@ -0,0 +1,5 @@
+{
+  services.gollum = {
+    enable = true;
+  };
+}

configs/graphical/default.nix

@@ -1,44 +0,0 @@
-{
-  pkgs,
-  lib,
-  config,
-  ...
-}:
-{
-  programs.hyprland = {
-    enable = true;
-    withUWSM = true;
-    xwayland.enable = true;
-    package = pkgs.hyprland;
-    portalPackage = pkgs.xdg-desktop-portal-hyprland;
-  };
-
-  programs.ydotool.enable = true;
-
-  xdg.portal = {
-    enable = true;
-    extraPortals = [
-      pkgs.xdg-desktop-portal-hyprland
-      pkgs.xdg-desktop-portal-gtk
-    ];
-    config.common.default = "*";
-  };
-
-  services.dbus = {
-    implementation = "broker";
-    # needed for GNOME services outside of GNOME (?)
-    packages = [ pkgs.gcr ];
-  };
-
-  environment.systemPackages = [
-    pkgs.xdg-desktop-portal
-    pkgs.xdg-desktop-portal-hyprland
-  ];
-
-  services.getty.autologinOnce = true;
-  services.getty.autologinUser = config.users.users.me.name;
-
-  home-manager.users.me = import ./home-manager.nix {
-    inherit lib pkgs config;
-  };
-}

configs/graphical/home-manager.nix

@@ -1,415 +0,0 @@
-{
-  lib,
-  pkgs,
-  config,
-  ...
-}:
-let
-  klem = pkgs.klem.override {
-    options.dmenu = "${pkgs.dmenu}/bin/dmenu -i -p klem";
-    options.scripts = {
-      "p.r paste" = pkgs.writers.writeDash "p.r" ''
-        ${pkgs.curl}/bin/curl -fSs http://p.r --data-binary @- \
-          | ${pkgs.coreutils}/bin/tail --lines=1 \
-          | ${pkgs.gnused}/bin/sed 's/\\<r\\>/krebsco.de/'
-      '';
-      "envs.sh paste" = pkgs.writers.writeDash "envs-host" ''
-        ${pkgs.curl}/bin/curl -F "file=@-" https://envs.sh
-      '';
-      # this segfaults
-      # "envs.sh mirror" = pkgs.writers.writeDash "envs-mirror" ''
-      #   ${pkgs.curl}/bin/curl -F "url=$(${pkgs.coreutils}/bin/cat)" https://envs.sh
-      # '';
-      "envs.sh shorten" = pkgs.writers.writeDash "envs-shorten" ''
-        ${pkgs.curl}/bin/curl -F "shorten=$(${pkgs.coreutils}/bin/cat)" https://envs.sh
-      '';
-      "go.r shorten" = pkgs.writers.writeDash "go.r" ''
-        ${pkgs.curl}/bin/curl -fSs http://go.r -F "uri=$(${pkgs.coreutils}/bin/cat)"
-      '';
-      "4d2.org paste" = pkgs.writers.writeDash "4d2-paste" ''
-        ${pkgs.curl}/bin/curl -F "file=@-" https://depot.4d2.org/
-      '';
-      "0x0.st shorten" = pkgs.writers.writeDash "0x0.st" ''
-        ${pkgs.curl}/bin/curl -fSs https://0x0.st -F "shorten=$(${pkgs.coreutils}/bin/cat)"
-      '';
-      "rot13" = pkgs.writers.writeDash "rot13" ''
-        ${pkgs.coreutils}/bin/tr '[A-Za-z]' '[N-ZA-Mn-za-m]'
-      '';
-      "ipa" = pkgs.writers.writeDash "ipa" ''
-        ${pkgs.ipa}/bin/ipa
-      '';
-      "betacode" = pkgs.writers.writeDash "betacode" ''
-        ${pkgs.betacode}/bin/betacode
-      '';
-      "curl" = pkgs.writers.writeDash "curl" ''
-        ${pkgs.curl}/bin/curl -fSs "$(${pkgs.coreutils}/bin/cat)"
-      '';
-      ocr = pkgs.writers.writeDash "ocr" ''
-        ${pkgs.tesseract4}/bin/tesseract -l eng+deu - stdout
-      '';
-      emojai = pkgs.writers.writeDash "emojai" ''
-        ${pkgs.curl}/bin/curl https://www.emojai.app/api/generate -X POST -H 'Content-Type: application/json' --data-raw "$(${pkgs.jq}/bin/jq -sR '{emoji:.}')" | ${pkgs.jq}/bin/jq -r .result
-      '';
-    };
-  };
-
-  arabic.workspaces = [
-    "١"
-    "٢"
-    "٣"
-    "٤"
-    "٥"
-    "٦"
-    "٧"
-    "٨"
-    "٩"
-    "١٠"
-  ];
-  arabic.music = "الموسيقى";
-  arabic.obsidian = "السبج";
-  hindi.workspaces = [
-    "१"
-    "२"
-    "३"
-    "४"
-    "५"
-    "६"
-    "७"
-    "८"
-    "९"
-    "१०"
-  ];
-  hindi.music = "संगीत";
-  hindi.obsidian = "उपलविशेषः";
-  hebrew.workspaces = [
-    "א"
-    "ב"
-    "ג"
-    "ד"
-    "ה"
-    "ו"
-    "ז"
-    "ח"
-    "ט"
-    "י"
-  ];
-  hebrew.music = "מוסיקה";
-  hebrew.obsidian = "אובסידיאן";
-
-  latin.workspaces = [
-    "Ⅰ"
-    "Ⅱ"
-    "Ⅲ"
-    "Ⅳ"
-    "Ⅴ"
-    "Ⅵ"
-    "Ⅶ"
-    "Ⅷ"
-    "Ⅸ"
-    "Ⅹ"
-  ];
-  latin.music = "MVSICA";
-  latin.obsidian = "NOSCENDA";
-
-  greek.workspaces = [
-    "Α"
-    "Β"
-    "Γ"
-    "Δ"
-    "Ε"
-    "Ϛ"
-    "Ζ"
-    "Η"
-    "Θ"
-    "Ι"
-  ];
-  greek.music = "ΜΟΥΣΙΚΗ";
-  greek.obsidian = "ΥΠΟΜΝΗΜΑΤΑ";
-
-  language = greek;
-in
-{
-  services.mako = {
-    enable = true;
-    settings.default-timeout = 10 * 1000;
-  };
-
-  programs.ashell = {
-    enable = true;
-    settings = {
-      # position = "bottom";
-      modules = {
-        left = [
-          "Workspaces"
-          [
-            "WindowTitle"
-          ]
-        ];
-        center = [ "Clock" ];
-        right = [
-          "KeyboardLayout"
-          [
-            "Tray"
-            "SystemInfo"
-            "Settings"
-          ]
-        ];
-      };
-      workspaces = {
-        enable_workspace_filling = false;
-        disable_special_workspaces = true;
-        visibility_mode = "MonitorSpecific";
-        workspace_names = language.workspaces;
-      };
-      keyboard_layout.labels = {
-        "de" = "🇩🇪";
-      };
-      window_title = {
-        mode = "Title";
-        truncate_title_after_length = 75;
-      };
-      media_player = {
-        max_title_length = 40;
-      };
-      system_info.indicators = [
-        "Cpu"
-        "Memory"
-        { Disk = "/"; }
-      ];
-      clock.format = "%Y-%m-%d (%j %a %W) %H:%M";
-      settings.indicators = [
-        "IdleInhibitor"
-        "PowerProfile"
-        "Audio"
-        "Bluetooth"
-        "Network"
-        "Vpn"
-        "Battery"
-      ];
-      appearance = {
-        font_name = config.stylix.fonts.sansSerif.name;
-        backdrop = 0.3;
-        scale_factor = 0.85;
-        # style = "Solid";
-      };
-    };
-  };
-
-  services.hypridle = {
-    enable = true;
-    settings = {
-      general = {
-        after_sleep_cmd = "hyprctl dispatch dpms on";
-        ignore_dbus_inhibit = false;
-        lock_cmd = "hyprlock";
-      };
-      listener = [
-        {
-          timeout = 900;
-          on-timeout = "hyprlock";
-        }
-        {
-          timeout = 1200;
-          on-timeout = "hyprctl dispatch dpms off";
-          on-resume = "hyprctl dispatch dpms on";
-        }
-      ];
-    };
-  };
-
-  programs.hyprlock = {
-    enable = true;
-    settings = {
-      animations.enabled = false;
-      general = {
-        hide_cursor = true;
-        ignore_empty_input = true;
-      };
-    };
-  };
-
-  gtk = {
-    enable = true;
-    iconTheme = {
-      name = "Adwaita";
-      package = pkgs.adwaita-icon-theme;
-    };
-  };
-
-  wayland.windowManager.hyprland =
-    let
-      mod = "SUPER";
-    in
-    {
-      enable = true;
-      systemd.enable = false;
-      systemd.variables = [ "--all" ];
-      settings = {
-        env = [
-          "XCURSOR_SIZE,${toString config.stylix.cursor.size}" # TODO
-          "HYPRCURSOR_SIZE,${toString config.stylix.cursor.size}" # TODO
-          "HYPRCURSOR_THEME,${config.stylix.cursor.name}"
-          "QT_QPA_PLATFORM=wayland"
-          "GDK_BACKEND=wayland"
-          "NIXOS_OZONE_WL=1"
-        ];
-        permission = [
-          "${pkgs.xdg-desktop-portal-hyprland}/libexec/.xdg-desktop-portal-hyprland-wrapped, screencopy, allow"
-        ];
-        monitor = [
-          "eDP-1, 1920x1080, 0x0, 1" # fatteh's display
-          "desc:Samsung Electric Company C27F390 HTQH602129, 1920x1080, 0x-1080, 1" # home
-          "desc:Dell Inc. DELL P2419HC 8L0FL03, 1920x1080, 0x-1080, 1" # amo
-          ", preferred, auto, 1"
-        ];
-        exec-once = [
-          (lib.getExe pkgs.ashell)
-          "hyprctl dispatch exec \"[workspace special:${language.obsidian} silent] obsidian\""
-          "${lib.getExe' pkgs.wl-clipboard "wl-paste"} -t text --watch ${lib.getExe pkgs.clipman} store"
-          (lib.getExe pkgs.hyprsunset)
-          (lib.getExe pkgs.hyprpaper)
-        ];
-
-        device = [
-          {
-            name = "elan-touchscreen";
-            enabled = false;
-          }
-        ];
-
-        general = {
-          gaps_in = 2;
-          gaps_out = 2;
-          border_size = 2;
-          resize_on_border = true;
-          allow_tearing = false;
-          layout = "dwindle";
-        };
-
-        decoration = {
-          rounding = 0;
-          rounding_power = 0;
-          active_opacity = 1.0;
-          inactive_opacity = 1.0;
-          shadow = {
-            enabled = false;
-            range = 4;
-            render_power = 3;
-          };
-          blur = {
-            enabled = false;
-            size = 3;
-            passes = 1;
-            vibrancy = 0.17;
-          };
-        };
-
-        animations = {
-          enabled = true;
-          animation = [
-            "global, 1, 2, default"
-          ];
-        };
-
-        dwindle = {
-          preserve_split = true;
-        };
-
-        master.new_status = "master";
-
-        gesture = [
-          "3, horizontal, workspace"
-        ];
-
-        input = {
-          kb_layout = "de";
-          kb_variant = "T3";
-          kb_options = "compose:caps,grp:ctrls_toggle";
-          follow_mouse = 1;
-          sensitivity = 0;
-          touchpad.natural_scroll = false;
-        };
-
-        bindm = [
-          "${mod}, mouse:272, movewindow"
-          "${mod}, mouse:273, resizewindow"
-        ];
-        bindel = [
-          ",XF86AudioRaiseVolume, exec, wpctl set-volume -l 1 @DEFAULT_AUDIO_SINK@ 5%+"
-          ",XF86AudioLowerVolume, exec, wpctl set-volume @DEFAULT_AUDIO_SINK@ 5%-"
-          ",XF86AudioMute, exec, wpctl set-mute @DEFAULT_AUDIO_SINK@ toggle"
-          ",XF86AudioMicMute, exec, wpctl set-mute @DEFAULT_AUDIO_SOURCE@ toggle"
-          ",XF86MonBrightnessUp, exec, brightnessctl -e4 -n2 set 5%+"
-          ",XF86MonBrightnessDown, exec, brightnessctl -e4 -n2 set 5%-"
-          ", Print, exec, ${lib.getExe pkgs.niphas-screenshot} -m region --clipboard-only"
-        ];
-        bindl = [
-          ", XF86AudioNext, exec, playerctl next"
-          ", XF86AudioPause, exec, playerctl play-pause"
-          ", XF86AudioPlay, exec, playerctl play-pause"
-          ", XF86AudioPrev, exec, playerctl previous"
-        ];
-        bind = [
-          "${mod}, Return, exec, ${lib.getExe pkgs.niphas-terminal}"
-          "${mod} SHIFT, Q, killactive,"
-          "${mod} SHIFT, R, exit,"
-          "${mod}, t, exec, ${lib.getExe pkgs.niphas-file-browser}"
-          "${mod}, Y, exec, ${lib.getExe pkgs.niphas-web-browser}"
-          "${mod}, Q, exec, ${lib.getExe pkgs.clipman} pick --tool=rofi"
-          "${mod}, u, exec, ${lib.getExe pkgs.unicodmenu}"
-          "${mod}, p, exec, ${lib.getExe pkgs.rofi-pass-wayland}"
-          "${mod} SHIFT, Z, togglefloating,"
-          "${mod}, D, exec, ${lib.getExe pkgs.rofi} -show run"
-          "${mod}, E, togglesplit," # dwindle
-          "${mod}, F, fullscreen"
-          "${mod}, G, moveoutofgroup"
-          "${mod} SHIFT, G, togglegroup"
-          "${mod}, h, movefocus, l"
-          "${mod}, l, movefocus, r"
-          "${mod}, k, movefocus, u"
-          "${mod}, j, movefocus, d"
-
-          "${mod}, F12, exec, ${klem}/bin/klem"
-          "${mod} SHIFT, W, exec, hyprlock"
-          "${mod} SHIFT, H, movewindow, l"
-          "${mod} SHIFT, L, movewindow, r"
-          "${mod} SHIFT, K, movewindow, u"
-          "${mod} SHIFT, J, movewindow, d"
-          "${mod}, S, togglespecialworkspace, ${language.music}"
-          "${mod} SHIFT, S, movetoworkspace, special:${language.music}"
-          "${mod}, O, togglespecialworkspace, ${language.obsidian}"
-          "${mod} SHIFT, O, movetoworkspace, special:${language.obsidian}"
-        ]
-        ++ lib.concatMap (
-          i:
-          let
-            key = lib.mod i 10;
-          in
-          [
-            "${mod}, ${toString key}, workspace, ${toString i}"
-            "${mod} SHIFT, ${toString key}, movetoworkspace, ${toString i}"
-          ]
-        ) (lib.range 1 10);
-
-        windowrule = [
-          "suppressevent maximize, class:.*" # ignore maximize requests from apps
-          "nofocus,class:^$,title:^$,xwayland:1,floating:1,fullscreen:0,pinned:0" # fix some dragging issues with wayyland
-
-          "float,title:^(Picture-in-Picture)$"
-          "pin,title:^(Picture-in-Picture)$"
-          "size 640 360,title:^(Picture-in-Picture)$"
-          "move 100%-640 100%-360,title:^(Picture-in-Picture)$"
-        ];
-      };
-      extraConfig = ''
-        bind = ${mod}, R, submap, resize
-        submap = resize
-        binde = , l, resizeactive, 50 0
-        binde = , h, resizeactive, -50 0
-        binde = , k, resizeactive, 0 -50
-        binde = , j, resizeactive, 0 50
-        bind = , escape, submap, reset
-        submap = reset
-      '';
-    };
-}

configs/haskell/default.nix

@@ -0,0 +1,46 @@
+{ config, pkgs, ... }:
+{
+  home-manager.users.me.home.file = {
+    ".ghc/ghci.conf".text = ''
+      :set editor vim
+      :def hoogle \s -> return $ ":!${pkgs.haskellPackages.hoogle}/bin/hoogle search --color -l --count=15 \"" ++ s ++ "\""
+      :def doc \s -> return $ ":!${pkgs.haskellPackages.hoogle}/bin/hoogle search --color -l --info \"" ++ s ++ "\""
+      :def pl \x -> return $ ":!${pkgs.haskellPackages.pointfree}/bin/pointfree -v \"" ++ x ++ "\""
+      :set prompt "\o033[1m%s\o033[1;34m λ\o033[0m "
+      :set -Wall
+    '';
+      # :def unpl \x -> return $ ":!${pkgs.haskellPackages.pointful}/bin/pointful \"" ++ x ++ "\""
+    ".stack/config.yaml".text = let user = config.niveum.user; in ''
+      templates:
+        params:
+          author-name: ${user.name}
+          author-email: ${user.email}
+          copyright: 'Copyright: (c) 2019 ${user.name}'
+          github-username: ${user.github}
+    '';
+  };
+
+  services.hoogle = {
+    enable = true;
+    packages = import ./packages.nix;
+    port = 8091;
+  };
+
+  environment.systemPackages = with pkgs; [
+    cabal2nix
+    stack2nix
+    cabal-install
+    hlint
+    # haskellPackages.brittany
+    (haskellPackages.ghcWithHoogle (import ./packages.nix))
+  ] ++ map haskell.lib.justStaticExecutables [
+    haskellPackages.ghcid
+    haskellPackages.hakyll
+    # haskellPackages.hfmt
+    haskellPackages.hasktags
+    haskellPackages.hindent
+    haskellPackages.pointfree
+    # haskellPackages.pointful
+    haskellPackages.hpack
+  ];
+}

configs/haskell/packages.nix

@@ -0,0 +1,101 @@
+haskellPackages:
+with haskellPackages; [
+  blessings
+  scanner
+  HTTP
+  HUnit
+  MissingH
+  QuickCheck
+  ad
+  adjunctions
+  aeson
+  # algebra
+  ansi-terminal
+  async
+  attoparsec
+  base-orphans
+  bifunctors
+  binary
+  blaze-html
+  blaze-markup
+  brick
+  bytes
+  bytestring
+  case-insensitive
+  cassava
+  cereal
+  clock
+  comonad
+  comonad-transformers
+  conduit
+  conduit-extra
+  constraints
+  containers
+  contravariant
+  criterion
+  data-default
+  diagrams
+  directory
+  dlist
+  either
+  exceptions
+  extra
+  filepath
+  foundation
+  free
+  haskeline
+  hedgehog
+  hourglass
+  hspec
+  http-client
+  http-conduit
+  kan-extensions
+  lens
+  linear
+  lucid
+  megaparsec
+  microlens
+  monad-logger
+  mono-traversable
+  mtl
+  network
+  pandoc
+  parallel
+  parsec
+  persistent
+  pipes
+  pointed
+  pretty-show
+  primitive
+  process
+  profunctors
+  regex-tdfa
+  safe
+  scalpel
+  semigroupoids
+  semigroups
+  servant
+  servant-blaze
+  servant-client
+  servant-docs
+  servant-server
+  servant-swagger
+  split
+  stm
+  tagsoup
+  tasty
+  text
+  time
+  transformers
+  turtle
+  type-unary
+  unix-time
+  unordered-containers
+  vector
+  vinyl
+  void
+  vty
+  warp
+  wreq
+  yaml
+]

configs/hledger.nix

@@ -1,28 +1,15 @@
+{ config, pkgs, ... }:
 {
-  pkgs,
-  ...
-}:
-let
-  ledgerDirectory = "/home/kfm/sync/src/ledger";
-in
-{
-  environment.systemPackages =
-    let
-      git = "${pkgs.git}/bin/git -C ${ledgerDirectory}";
-    in
-    [
-      pkgs.hledger
-      (pkgs.writers.writeDashBin "hledger-git" ''
-        if [ "$1" = entry ]; then
-          ${pkgs.hledger}/bin/hledger balance -V > "${ledgerDirectory}/balance.txt"
-          ${git} add balance.txt
-          ${git} commit --all --message="$(date -Im)"
-        else
-          ${git} $*
-        fi
-      '')
-      (pkgs.writers.writeDashBin "hledger-edit" ''
-        $EDITOR ${ledgerDirectory}/current.journal
-      '')
-    ];
+  imports = [ <modules/hledger.nix> ];
+
+  niveum.hledger = {
+    enable = true;
+    ledgerFile = "$HOME/prog/git/ledger/current.journal";
+    server = {
+      enable = false;
+      user = config.users.users.me;
+      package = pkgs.unstable.hledger-web;
+    };
+    package = pkgs.unstable.hledger;
+  };
 }

configs/home-assistant.nix

@@ -0,0 +1,7 @@
+{
+  services.home-assistant = {
+    enable = true;
+    configWritable = true;
+    lovelaceConfigWritable = true;
+  };
+}

configs/htop.nix

@@ -2,38 +2,33 @@
   home-manager.users.me = {
     programs.htop = {
       enable = true;
-      settings = {
-        color_scheme = 0;
-        account_guest_in_cpu_meter = true;
-        cpu_count_from_zero = false;
-        delay = 15;
-        detailed_cpu_time = false;
-        header_margin = true;
-        hide_kernel_threads = true;
-        hide_threads = true;
-        hide_userland_threads = true;
-        highlight_base_name = true;
-        highlight_megabytes = true;
-        highlight_threads = true;
-        shadow_other_users = true;
-        show_program_path = false;
-        show_thread_names = false;
-        sort_descending = true;
-        sort_key = "PERCENT_CPU";
-        tree_view = false;
-        update_process_names = false;
-        right_meters = [
-          "Uptime"
-          "Tasks"
-          "LoadAverage"
-          "Battery"
-        ];
-        left_meters = [
-          "LeftCPUs2"
-          "RightCPUs2"
-          "Memory"
-          "Swap"
+      colorScheme = 0;
+      accountGuestInCpuMeter = true;
+      cpuCountFromZero = false;
+      delay = 15;
+      detailedCpuTime = false;
+      headerMargin = true;
+      hideKernelThreads = true;
+      hideThreads = false;
+      hideUserlandThreads = false;
+      highlightBaseName = true;
+      highlightMegabytes = true;
+      highlightThreads = true;
+      shadowOtherUsers = true;
+      showProgramPath = false;
+      showThreadNames = true;
+      sortDescending = true;
+      sortKey = "PERCENT_CPU";
+      treeView = true;
+      updateProcessNames = false;
+      meters = {
+        left = [
+          { kind = "LeftCPUs2"; mode = 1; }
+          { kind = "RightCPUs2"; mode = 1; }
+          { kind = "Memory"; mode = 1; }
+          { kind = "Swap"; mode = 1; }
         ];
+        right = [ "Uptime" "Tasks" "LoadAverage" "Battery" ];
       };
     };
   };

configs/hu-berlin.nix

@@ -0,0 +1,43 @@
+{ pkgs, lib, ... }:
+let
+  eduroam = {
+    identity = lib.strings.removeSuffix "\n" (builtins.readFile <shared-secrets/eduroam/identity>);
+    password = lib.strings.removeSuffix "\n" (builtins.readFile <shared-secrets/eduroam/password>);
+  };
+  eduroamAuth = ''
+    key_mgmt=WPA-EAP
+    eap=TTLS
+    proto=RSN
+    identity="${eduroam.identity}"
+    anonymous_identity="anonymous@wlan.hu-berlin.de"
+    altsubject_match="DNS:srv1-radius.cms.hu-berlin.de;DNS:srv2-radius.cms.hu-berlin.de"
+    password="${eduroam.password}"
+    ca_cert="${pkgs.fetchurl {
+      url = https://www.cms.hu-berlin.de/de/dl/netze/wlan/config/eduroam/t-telesec_globalroot_class_2.pem;
+      sha256 = "0if8aqd06sid7a0vw009zpa087wxcgdd2x6z2zs4pis5kvyqj2dk";
+    }}"
+    phase2="auth=PAP"
+  '';
+in {
+  networking.wireless.networks = {
+    eduroam_5GHz.auth = eduroamAuth;
+    eduroam.auth = eduroamAuth;
+  };
+
+  services.openvpn.servers = {
+    hu-berlin = {
+      config = ''
+        config ${pkgs.fetchurl {
+          url = https://www.cms.hu-berlin.de/de/dl/netze/vpn/openvpn/hu-berlin.ovpn;
+          sha256 = "15b55aibik5460svjq2gwxrcyh6ay4k8savd6cd5lncgndmd8p8h";
+        }}
+        # route-nopull
+        # route 141.20.0.0 255.255.0.0
+      '';
+      authUserPass = {
+        username = eduroam.identity;
+        password = eduroam.password;
+      };
+    };
+  };
+}

configs/i3.nix

@@ -1,330 +1,169 @@
-{
-  config,
-  pkgs,
-  lib,
-  ...
-}:
+{ config, pkgs, lib, ... }:
 let
-  klem = pkgs.klem.override {
-    options.dmenu = "${pkgs.dmenu}/bin/dmenu -i -p klem";
-    options.scripts = {
-      "p.r paste" = pkgs.writers.writeDash "p.r" ''
-        ${pkgs.curl}/bin/curl -fSs http://p.r --data-binary @- \
-          | ${pkgs.coreutils}/bin/tail --lines=1 \
-          | ${pkgs.gnused}/bin/sed 's/\\<r\\>/krebsco.de/'
-      '';
-      "envs.sh paste" = pkgs.writers.writeDash "envs-host" ''
-        ${pkgs.curl}/bin/curl -F "file=@-" https://envs.sh
-      '';
-      # this segfaults
-      # "envs.sh mirror" = pkgs.writers.writeDash "envs-mirror" ''
-      #   ${pkgs.curl}/bin/curl -F "url=$(${pkgs.coreutils}/bin/cat)" https://envs.sh
-      # '';
-      "envs.sh shorten" = pkgs.writers.writeDash "envs-shorten" ''
-        ${pkgs.curl}/bin/curl -F "shorten=$(${pkgs.coreutils}/bin/cat)" https://envs.sh
-      '';
-      "go.r shorten" = pkgs.writers.writeDash "go.r" ''
-        ${pkgs.curl}/bin/curl -fSs http://go.r -F "uri=$(${pkgs.coreutils}/bin/cat)"
-      '';
-      "4d2.org paste" = pkgs.writers.writeDash "4d2-paste" ''
-        ${pkgs.curl}/bin/curl -F "file=@-" https://depot.4d2.org/
-      '';
-      "0x0.st shorten" = pkgs.writers.writeDash "0x0.st" ''
-        ${pkgs.curl}/bin/curl -fSs https://0x0.st -F "shorten=$(${pkgs.coreutils}/bin/cat)"
-      '';
-      "rot13" = pkgs.writers.writeDash "rot13" ''
-        ${pkgs.coreutils}/bin/tr '[A-Za-z]' '[N-ZA-Mn-za-m]'
-      '';
-      "ipa" = pkgs.writers.writeDash "ipa" ''
-        ${pkgs.ipa}/bin/ipa
-      '';
-      "betacode" = pkgs.writers.writeDash "betacode" ''
-        ${pkgs.betacode}/bin/betacode
-      '';
-      "curl" = pkgs.writers.writeDash "curl" ''
-        ${pkgs.curl}/bin/curl -fSs "$(${pkgs.coreutils}/bin/cat)"
-      '';
-      ocr = pkgs.writers.writeDash "ocr" ''
-        ${pkgs.tesseract4}/bin/tesseract -l eng+deu - stdout
-      '';
-      emojai = pkgs.writers.writeDash "emojai" ''
-        ${pkgs.curl}/bin/curl https://www.emojai.app/api/generate -X POST -H 'Content-Type: application/json' --data-raw "$(${pkgs.jq}/bin/jq -sR '{emoji:.}')" | ${pkgs.jq}/bin/jq -r .result
-      '';
-    };
-  };
-in
-{
-  age.secrets = {
-    github-token-i3status-rust = {
-      file = ../secrets/github-token-i3status-rust.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
-    openweathermap-api-key = {
-      file = ../secrets/openweathermap-api-key.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
-    miniflux-api-token = {
-      file = ../secrets/miniflux-api-token.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
-  };
-
-  environment.systemPackages = [
-    pkgs.xsecurelock
-  ];
-  environment.sessionVariables = {
-    XSECURELOCK_NO_COMPOSITE = "1";
-    XSECURELOCK_BACKGROUND_COLOR = "navy";
-    XSECURELOCK_PASSWORD_PROMPT = "time_hex";
-  };
-
-  services.displayManager.defaultSession = "none+i3";
+  new-workspace = pkgs.unstable.writers.writeDash "new-workspace" ''
+    i3-msg workspace $(($(i3-msg -t get_workspaces | tr , '\n' | grep '"num":' | cut -d : -f 2 | sort -rn | head -1) + 1))
+  '';
+  move-to-new-workspace = pkgs.unstable.writers.writeDash "new-workspace" ''
+    i3-msg move container to workspace $(($(i3-msg -t get_workspaces | tr , '\n' | grep '"num":' | cut -d : -f 2 | sort -rn | head -1) + 1))
+  '';
+in with config.niveum; {
   services.xserver = {
-    windowManager.i3 = {
-      enable = true;
-      package = pkgs.i3;
-    };
+    windowManager.default = "i3";
+    windowManager.i3.enable = true;
   };
 
-  services.xserver = {
-    monitorSection = ''Option "DPMS" "false"'';
-    serverFlagsSection = ''
-      Option "BlankTime" "0"
-      Option "StandbyTime" "0"
-      Option "SuspendTime" "0"
-      Option "OffTime" "0"
-    '';
-    extraConfig = ''
-      Section "Extensions"
-        Option "DPMS" "Disable"
-      EndSection
-    '';
-  };
-
-  home-manager.users.me =
-    let
+  home-manager.users.me.xsession.windowManager.i3 = {
+    enable = true;
+    config = rec {
+      fonts = [ "${config.niveum.fonts.ui.name} ${toString config.niveum.fonts.ui.size}" ];
       modifier = "Mod4";
-      infoWorkspace = "ℹ";
-      messageWorkspace = "✉";
-      modes.resize = {
-        "Escape" = ''mode "default"'';
-        "Return" = ''mode "default"'';
-        "h" = "resize shrink width 10 px or 5 ppt";
-        "j" = "resize grow height 10 px or 5 ppt";
-        "k" = "resize shrink height 10 px or 5 ppt";
-        "l" = "resize grow width 10 px or 5 ppt";
+      window = {
+        titlebar = false;
+        border = 1;
+        hideEdgeBorders = "smart";
       };
-      gaps.inner = 4;
       floating = {
         titlebar = false;
         border = 1;
       };
-      bars =
-        let
-          position = "bottom";
-        in
-        [
-          (lib.recursiveUpdate config.home-manager.users.me.stylix.targets.i3.exportedBarConfig {
-            workspaceButtons = true;
-            mode = "hide"; # "dock";
-            inherit position;
-            statusCommand = toString (
-              pkgs.writers.writeDash "i3status-rust" ''
-                export I3RS_GITHUB_TOKEN="$(cat ${config.age.secrets.github-token-i3status-rust.path})"
-                export OPENWEATHERMAP_API_KEY="$(cat ${config.age.secrets.openweathermap-api-key.path})"
-                exec ${config.home-manager.users.me.programs.i3status-rust.package}/bin/i3status-rs ${config.home-manager.users.me.home.homeDirectory}/.config/i3status-rust/config-${position}.toml
-              ''
-            );
-            fonts = {
-              names = [
-                "${config.stylix.fonts.sansSerif.name}"
-                "FontAwesome 6 Free"
-              ];
-              size = config.stylix.fonts.sizes.desktop * 0.8;
-            };
-          })
-        ];
-      window = {
-        titlebar = false;
-        border = 2;
-        hideEdgeBorders = "smart";
-        commands = [
-          {
-            criteria = {
-              class = "floating";
-            };
-            command = "floating enable";
-          }
-          {
-            criteria = {
-              class = "fzfmenu";
-            };
-            command = "floating enable";
-          }
-          {
-            criteria = {
-              class = ".*";
-            };
-            command = "border pixel 2";
-          }
-          {
-            criteria = {
-              class = "mpv";
-            };
-            command = lib.strings.concatStringsSep ", " [
-              "floating enable"
-              "sticky enable"
-              "fullscreen disable"
-              "resize set 640 480"
-              "move position mouse"
-            ];
-          }
-        ];
-      };
       colors =
-        let
-          background = config.lib.stylix.colors.withHashtag.base00;
-        in
-        {
-          unfocused = {
-            border = lib.mkForce background;
-            childBorder = lib.mkForce background;
+        let scheme = { background = colours.background; text = colours.foreground; };
+        in rec {
+          focused = scheme // {
+            border = colours.background;
+            indicator = colours.background;
+            childBorder = colours.background;
+          };
+          focusedInactive = focused;
+          unfocused = focused;
+          urgent = scheme // {
+            border = colours.red.bright;
+            indicator = colours.red.bright;
+            childBorder = colours.red.bright;
+          };
+          placeholder = scheme // {
+            border = colours.green.bright;
+            indicator = colours.green.bright;
+            childBorder = colours.green.bright;
           };
         };
-      keybindings =
-        lib.listToAttrs (
-          map (
-            x: lib.nameValuePair "${modifier}+Shift+${toString x}" "move container to workspace ${toString x}"
-          ) (lib.range 1 9)
-        )
-        // lib.listToAttrs (
-          map (x: lib.nameValuePair "${modifier}+${toString x}" "workspace ${toString x}") (lib.range 1 9)
-        )
-        // {
-          "${modifier}+i" = "workspace ${infoWorkspace}";
-          "${modifier}+m" = "workspace ${messageWorkspace}";
-
-          "${modifier}+Shift+h" = "move left 25 px";
-          "${modifier}+Shift+j" = "move down 25 px";
-          "${modifier}+Shift+k" = "move up 25 px";
-          "${modifier}+Shift+l" = "move right 25 px";
-          "${modifier}+h" = "focus left";
-          "${modifier}+j" = "focus down";
-          "${modifier}+k" = "focus up";
-          "${modifier}+l" = "focus right";
-
-          # "${modifier}+Shift+b" = "move container to workspace prev";
-          # "${modifier}+Shift+n" = "move container to workspace next";
-          # "${modifier}+b" = "workspace prev";
-          # "${modifier}+n" = "workspace next";
-
-          "${modifier}+Shift+c" = "reload";
-          "${modifier}+Shift+q" = "kill";
-          "${modifier}+Shift+r" = "restart";
-
-          "${modifier}+z" = "sticky toggle";
-          "${modifier}+Shift+z" = "floating toggle";
-
-          "${modifier}+Shift+s" = "move scratchpad";
-          "${modifier}+s" = ''[class="^(?i)(?!obsidian).*"] scratchpad show'';
-          "${modifier}+o" = ''[class="obsidian"] scratchpad show'';
-
-          "${modifier}+c" = "split h";
-          "${modifier}+e" = "layout toggle split";
-          "${modifier}+f" = "fullscreen toggle";
-          "${modifier}+r" = "mode resize";
-          "${modifier}+v" = "split v";
-          "${modifier}+w" = "layout tabbed";
-          "${modifier}+q" = "exec ${config.services.clipmenu.package}/bin/clipmenu";
-
-          "${modifier}+Return" = "exec ${lib.getExe pkgs.niphas-terminal}";
-          "${modifier}+t" = "exec ${lib.getExe pkgs.niphas-file-browser}";
-          "${modifier}+y" = "exec ${lib.getExe pkgs.niphas-web-browser}";
-
-          "${modifier}+d" =
-            "exec ${pkgs.writers.writeDash "run" ''exec rofi -modi run,ssh,window -show run''}";
-          "${modifier}+Shift+d" = "exec ${lib.getExe pkgs.notemenu}";
-          "${modifier}+p" = "exec rofi-pass";
-          "${modifier}+Shift+p" = "exec rofi-pass --insert";
-          "${modifier}+u" = "exec ${lib.getExe pkgs.unicodmenu}";
-          "${modifier}+Shift+u" =
-            "exec ${pkgs.writers.writeDash "last-unicode" ''${pkgs.xdotool}/bin/xdotool type --delay 1000 "$(${pkgs.gawk}/bin/awk 'END{print $1}' ~/.cache/unicodmenu)"''}";
-
-          "${modifier}+F7" = "exec ${pkgs.writers.writeDash "showkeys-toggle" ''
-            if ${pkgs.procps}/bin/pgrep screenkey; then
-              exec ${pkgs.procps}/bin/pkill screenkey
-            else
-              exec ${pkgs.screenkey}/bin/screenkey
-            fi
-          ''}";
-          "${modifier}+F12" = "exec ${klem}/bin/klem";
-          "XF86AudioLowerVolume" = "exec ${lib.getExe pkgs.pamixer} -d 5";
-          "XF86AudioMute" = "exec ${lib.getExe pkgs.pamixer} -t";
-          "XF86AudioRaiseVolume" = "exec ${pkgs.pamixer}/bin/pamixer -i 5";
-          "XF86Calculator" = "exec ${lib.getExe pkgs.st} -c floating -e ${pkgs.bc}/bin/bc";
-          "XF86AudioPause" = "exec ${lib.getExe pkgs.playerctl} play-pause";
-          "XF86AudioPlay" = "exec ${lib.getExe pkgs.playerctl} play-pause";
-          "XF86AudioNext" = "exec ${lib.getExe pkgs.playerctl} next";
-          "XF86AudioPrev" = "exec ${lib.getExe pkgs.playerctl} previous";
-          "XF86AudioStop" = "exec ${lib.getExe pkgs.playerctl} stop";
-
-          # key names detected with xorg.xev:
-          # XF86WakeUp (fn twice)
-          # XF86Battery (fn f3)
-          # XF86Sleep (fn f4) - actually suspends
-          # XF86WLAN
-          # XF86WebCam (fn f6)
-          # XF86TouchpadToggle (fn f8)
-          # XF86Suspend (fn f12) - actually suspends to disk
-          # Num_Lock (fn Roll) - numlocks
-          # XF86Audio{Prev,Next,Mute,Play,Stop}
-          # XF86Forward
-          # XF86Back
-          # XF86Launch1 (thinkvantage)
-        };
-    in
-    {
-      stylix.targets.i3.enable = true;
-
-      xsession.windowManager.i3 = {
-        enable = true;
-        extraConfig = ''
-          bindsym --release ${modifier}+Shift+w exec xsecurelock
-
-          exec "${lib.getExe pkgs.obsidian}"
-          for_window [class="obsidian"] , move scratchpad
-
-          assign [class="message"] ${messageWorkspace}
-          exec "${pkgs.writers.writeDash "irc" "exec ${lib.getExe pkgs.alacritty} --class message -e ssh weechat@makanek -t tmux attach-session -t IM"}"
-          exec "${pkgs.writers.writeDash "email" "exec ${lib.getExe pkgs.alacritty} --class message -e aerc"}"
-
-          exec --no-startup-id ${pkgs.xss-lock}/bin/xss-lock -- xsecurelock
-        '';
-        config = {
-          inherit
-            modifier
-            gaps
-            modes
-            bars
-            floating
-            window
-            colors
-            ;
-          keybindings = keybindings // {
-            "${modifier}+F9" = "exec ${pkgs.redshift}/bin/redshift -O 4000 -b 0.85";
-            "${modifier}+F10" = "exec ${pkgs.redshift}/bin/redshift -x";
-            "Print" = "exec flameshot gui";
-            # "${modifier}+Shift+x" = "exec ${move-to-new-workspace}";
-            # "${modifier}+x" = "exec ${new-workspace}";
-            "XF86Display" = "exec ${lib.getExe pkgs.dmenu-randr}";
+      bars = [{
+        workspaceButtons = false;
+        fonts = [ "${config.niveum.fonts.terminal.name} ${toString config.niveum.fonts.terminal.size}" ];
+        mode = "hide";
+        colors = rec {
+          background = colours.background;
+          separator = background;
+          statusline = colours.foreground;
+          bindingMode = {
+            background = colours.red.bright;
+            border = colours.background;
+            text = colours.foreground;
           };
         };
+        statusCommand = "${pkgs.i3status}/bin/i3status -c ${pkgs.writeText "i3status.conf" ''
+          general {
+            colors = true
+            color_good = "${colours.green.dark}"
+            color_bad = "${colours.red.dark}"
+            color_degraded = "${colours.white.dark}"
+            interval = 5
+            separator = " "
+          }
+
+          # order += "run_watch retiolum"
+          order += "path_exists openvpn"
+          order += "wireless ${networkInterfaces.wireless}"
+          order += "battery all"
+          order += "volume master"
+          order += "load"
+          order += "tztime local"
+
+          wireless ${networkInterfaces.wireless} {
+            format_up = "%essid"
+            format_down = "offline"
+          }
+
+          # run_watch retiolum {
+          #   pidfile = "/var/run/tinc.retiolum.pid"
+          #   format = "%title"
+          # }
+
+          path_exists openvpn {
+            path = "/proc/sys/net/ipv4/conf/tun0"
+            format = "%title"
+          }
+
+          battery all {
+            format = "%status%percentage"
+            format_down = "No battery"
+            status_chr = "↑"
+            status_bat = "↓"
+            status_unk = ""
+            status_full = "↯"
+            path = "/sys/class/power_supply/BAT%d/uevent"
+            low_threshold = 15
+            threshold_type = "percentage"
+            integer_battery_capacity = true
+          }
+
+          volume master {
+            format = "%volume"
+            format_muted = "%volume"
+            device = "default"
+            mixer = "Master"
+            mixer_idx = 0
+          }
+
+          tztime local {
+            format = "%Y-%m-%d %H:%M"
+          }
+
+          load {
+            format = "%1min"
+          }''}";
+      }];
+      keybindings = {
+        "${modifier}+Down" = "focus down";
+        "${modifier}+Left" = "focus left";
+        "${modifier}+Return" = "exec ${applications.terminal}";
+        "${modifier}+Right" = "focus right";
+        "${modifier}+Shift+Down" = "move down";
+        "${modifier}+Shift+Left" = "move left";
+        "${modifier}+Shift+Right" = "move right";
+        "${modifier}+Shift+Up" = "move up";
+        "${modifier}+Shift+b" = "move window to workspace prev";
+        "${modifier}+Shift+c" = "reload";
+        "${modifier}+Shift+n" = "move window to workspace next";
+        "${modifier}+Shift+q" = "kill";
+        "${modifier}+Shift+r" = "restart";
+        "${modifier}+Shift+w" = "exec ${pkgs.xautolock}/bin/xautolock -locknow";
+        "${modifier}+Shift+x" = "exec --no-startup-id ${move-to-new-workspace}";
+        "${modifier}+Shift+z" = "floating toggle";
+        "${modifier}+Up" = "focus up";
+        "${modifier}+a" = "exec ${pkgs.rofi}/bin/rofi -display-window — -show window";
+        "${modifier}+b" = "workspace prev";
+        "${modifier}+c" = "split h";
+        "${modifier}+d" = "exec ${pkgs.rofi}/bin/rofi -display-run — -show run";
+        "${modifier}+e" = "layout toggle split";
+        "${modifier}+f" = "fullscreen toggle";
+        "${modifier}+h" = "focus left";
+        "${modifier}+j" = "focus down";
+        "${modifier}+k" = "focus up";
+        "${modifier}+l" = "focus right";
+        "${modifier}+n" = "workspace next";
+        "${modifier}+p" = "exec ${pkgs.rofi-pass}/bin/rofi-pass";
+        "${modifier}+r" = "mode resize";
+        "${modifier}+s" = "layout stacking";
+        "${modifier}+t" = "exec ${applications.fileManager}";
+        "${modifier}+v" = "split v";
+        "${modifier}+w" = "layout tabbed";
+        "${modifier}+x" = "exec --no-startup-id ${new-workspace}";
+        "${modifier}+y" = "exec ${applications.browser}";
+        "XF86AudioLowerVolume" = "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -d 5";
+        "XF86AudioMute" = "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -t";
+        "XF86AudioRaiseVolume" = "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -i 5";
       };
     };
+  };
 }

configs/kdeconnect.nix

@@ -1,17 +1,7 @@
 {
   networking.firewall = {
-    allowedTCPPortRanges = [
-      {
-        from = 1714;
-        to = 1764;
-      }
-    ];
-    allowedUDPPortRanges = [
-      {
-        from = 1714;
-        to = 1764;
-      }
-    ];
+    allowedTCPPortRanges = [ { from = 1714; to = 1764; } ];
+    allowedUDPPortRanges = [ { from = 1714; to = 1764; } ];
   };
 
   home-manager.users.me = {

configs/keybase.nix

@@ -0,0 +1,9 @@
+{ config, ... }:
+{
+  services.keybase.enable = true;
+
+  services.kbfs = {
+    enable = true;
+    mountPoint = "%h/cloud/keybase";
+  };
+}

configs/keyboard.nix

@@ -0,0 +1,11 @@
+with import <lib>;
+{
+  services.xserver = {
+    layout = commaSep [ "de" "gr" "ru" ];
+    xkbVariant = commaSep [ "T3" "polytonic" "phonetic_winkeys" ];
+    xkbOptions = commaSep [ "compose:caps" "terminate:ctrl_alt_bksp" "grp:ctrls_toggle" ];
+    libinput.enable = true;
+  };
+
+  i18n.consoleKeyMap = "de";
+}

configs/keyboard/XCompose

@@ -1,34 +0,0 @@
-# Import default rules from the system Compose file
-include "%L"
-
-# Custom definitions
-<Multi_key> <U0634> <U0634> : "ژ" U0698 # ز + ز = ژ
-<Multi_key> <U063A> <U063A> : "گ" U06AF # غ + غ = گ
-<Multi_key> <U0641> <U0641> : "ڤ" U06A4 # ف + ف = ڤ
-<Multi_key> <U062C> <U062C> : "چ" U0686 # ج + ج = چ
-<Multi_key> <U0628> <U0628> : "پ" U067E # ب + ب = پ
-<Multi_key> <U0643> <U0643> : "ک" U06A9 # ك + ك = ک
-<Multi_key> <U064A> <U064A> : "ی" U06CC # ي + ي = ی
-<Multi_key> <U0647> <U064A> : "ۀ" U06C0 # ه + ي = ۀ
-<Multi_key> <E> <E> : "ɛ" U025B
-<Multi_key> <O> <O> : "ɔ" U0254
-<Multi_key> <s> <h> : "ʃ" U0283
-<Multi_key> <g> <h> : "ɣ" U0283
-<Multi_key> <b> <h> : "β" U0283
-<Multi_key> <p> <h> : "ɸ" U0283
-<Multi_key> <z> <h> : "ʒ" U0292
-<Multi_key> <e> <i> : "ɪ" U026A
-<Multi_key> <e> <u> : "ʊ" U028A
-<Multi_key> <colon> <colon> : "ː" U02D0
-<Multi_key> <question> <period> : "ʔ" U0294
-<Multi_key> <period> <question> : "ʕ" U0295
-<Multi_key> <apostrophe> <period> : "ˈ" U02C8
-<Multi_key> <period> <apostrophe> : "ˌ" U02CC
-<dead_belowring> <nobreakspace> : "̥" U0325 # COMBINING RING BELOW
-<dead_belowbreve> <nobreakspace> : "̮" U032E # COMBINING BREVE BELOW
-<dead_invertedbreve> <nobreakspace> : "̑" U0311 # COMBINING INVERTED BREVE
-<dead_belowmacron> <nobreakspace> : "̱" U0331 # COMBINING MACRON BELOW
-<dead_belowcircumflex> <nobreakspace> : "̯" U032F # COMBINING INVERTED BREVE BELOW
-<dead_circumflex> <Multi_key> <underscore> <e> : "ᵊ" U1D4A
-
-# TODO zwnj

configs/keyboard/avestan

@@ -1,60 +0,0 @@
-/////////////////////////////////////////////////////////////////////////////////
-//
-// Generated keyboard layout file with the Keyboard Layout Editor.
-// For more about the software, see http://code.google.com/p/keyboardlayouteditor
-//
-// Version 0.2, changed AD09.
-
-partial default alphanumeric_keys
-xkb_symbols "avestan"
-{
-	name[Group1] = "Iran - Avestan";
-
-	key <AB01> { [ U10B30,         U10B32 ] }; // 𐬰 𐬲
-	key <AB02> { [ U10B11,         U10B12 ] }; // 𐬑 𐬒
-	key <AB03> { [ U10B17,          UE102 ] }; // 𐬗 
-	key <AB04> { [ U10B2C,         U10B13 ] }; // 𐬬 𐬓
-	key <AB05> { [ U10B20,         U10B21 ] }; // 𐬠 𐬡
-	key <AB06> { [ U10B25,         U10B27 ] }; // 𐬥 𐬧
-	key <AB07> { [ U10B28,         U10B29 ] }; // 𐬨 𐬩
-	key <AB08> { [ U10B3C,         U10B39 ] }; // 𐬼 𐬹
-	key <AB09> { [ U10B3E,         U10B3D ] }; // 𐬾 𐬽
-	key <AB10> { [ U10B3F, periodcentered ] }; // 𐬿 ·
-
-	key <AC01> { [ U10B00,         U10B01 ] }; // 𐬀 𐬁
-	key <AC02> { [ U10B2F,         U10B31 ] }; // 𐬯 𐬱
-	key <AC03> { [ U10B1B,         U10B1C ] }; // 𐬛 𐬜
-	key <AC04> { [ U10B1F,         U10B16 ] }; // 𐬟 𐬖
-	key <AC05> { [ U10B14,         U10B15 ] }; // 𐬔 𐬕
-	key <AC06> { [ U10B35,          UE100 ] }; // 𐬵 
-	key <AC07> { [ U10B18,         U10B24 ] }; // 𐬘 𐬤
-	key <AC08> { [ U10B10,          UE101 ] }; // 𐬐 
-	key <AC09> { [ U10B2E,          UE103 ] }; // 𐬮 
-	key <AC10> { [ U10B3B,         U10B3A ] }; // 𐬻 𐬺
-	key <AC11> { [ U10B1D                 ] }; // 𐬝
-
-	key <AD01> { [ U10B22,         U10B23 ] }; // 𐬢 𐬣
-	key <AD02> { [ U10B33,         U10B34 ] }; // 𐬳 𐬴
-	key <AD03> { [ U10B08,         U10B09 ] }; // 𐬈 𐬉
-	key <AD04> { [ U10B2D,         U10B26 ] }; // 𐬭 𐬦
-	key <AD05> { [ U10B19,         U10B1A ] }; // 𐬙 𐬚
-	key <AD06> { [ U10B2B,         U10B2A ] }; // 𐬫 𐬪
-	key <AD07> { [ U10B0E,         U10B0F ] }; // 𐬎 𐬏
-	key <AD08> { [ U10B0C,         U10B0D ] }; // 𐬌 𐬍
-	key <AD09> { [ U10B0A,         U10B0B ] }; // 𐬊 𐬋
-	key <AD10> { [ U10B1E                 ] }; // 𐬞
-	key <AD11> { [ U10B06,         U10B07 ] }; // 𐬆 𐬇
-	key <AD12> { [ U10B02,         U10B03 ] }; // 𐬂 𐬃
-
-	key <AE01> { [ U10B78                 ] }; // 𐭸
-	key <AE02> { [ U10B79                 ] }; // 𐭹
-	key <AE03> { [ U10B7A                 ] }; // 𐭺
-	key <AE04> { [ U10B7B                 ] }; // 𐭻
-	key <AE05> { [ U10B7C                 ] }; // 𐭼
-	key <AE06> { [ U10B7D                 ] }; // 𐭽
-	key <AE07> { [ U10B7E                 ] }; // 𐭾
-	key <AE08> { [ U10B7F                 ] }; // 𐭿
-
-	key <BKSL> { [ U10B04,         U10B05 ] }; // 𐬄 𐬅
-	key <LSGT> { [ U10B04,         U10B05 ] }; // 𐬄 𐬅
-};

configs/keyboard/coptic

@@ -1,79 +0,0 @@
-// Coptic keyboard symbols for XKB and PC keyboard
-// based on the mapping of logos
-// (C) 2006 Moheb Mekhaiel <mohebm@gmx.de>
-//
-// Permission is granted to anyone to use, distribute and modify
-// this file in any way, provided that the above copyright notice
-// is left intact and the author of the modification summarizes
-// the changes in this header.
-//
-// This file is distributed without any expressed or implied warranty.
-
-
-partial default alphanumeric_keys
-xkb_symbols "basic" {
-    name[Group1]= "Coptic";
-
-    key <TLDE>  { [ U0308,      U0311,      U0361,      U2CE5 ] };
-
-    key <AE01>  { type[Group1] = "FOUR_LEVEL",
-                  [ 1,          U0304,      VoidSymbol, U2CE6 ] };
-    key <AE02>  { [ 2,          U0306,      U2CFD,      U2CE7 ] };
-    key <AE03>  { [ 3,          U0374,      U2056,      U2CE8 ] };
-    key <AE04>  { [ 4,          U0375,      U2058,      U2CE9 ] };
-    key <AE05>  { [ 5,          U0307,      U2059,      U2CEA ] };
-    key <AE06>  { [ 6,          U0323,      U2C8B,      U2C8A ] };
-    key <AE07>  { [ 7,          U2CE4 ] };
-    key <AE08>  { [ 8,          U002A,      U2026 ] };
-    key <AE09>  { [ 9,          parenleft,  U201C,      plusminus ] };
-    key <AE10>  { [ 0,          parenright, U201D,      degree ] };
-    key <AE11>  { [ U00B7,      underscore, U2013,      U2014 ] };
-    key <AE12>  { [ U2E17,      U0305,      U033F ] };
-    key <BKSL>  { [ U0300,      U007C,      backslash,  U007C ] };
-
-    key <AD01>  { [ U2C91,      U2C90 ] };
-    key <AD02>  { [ U2CB1,      U2CB0 ] };
-    key <AD03>  { [ U2C89,      U2C88 ] };
-    key <AD04>  { [ U2CA3,      U2CA2 ] };
-    key <AD05>  { [ U2CA7,      U2CA6,      U03EF,      U03EE ] };
-    key <AD06>  { [ U2CAF,      U2CAE ] };
-    key <AD07>  { [ U2CA9,      U2CA8 ] };
-    key <AD08>  { [ U2C93,      U2C92 ] };
-    key <AD09>  { [ U2C9F,      U2C9E ] };
-    key <AD10>  { [ U2CA1,      U2CA0 ] };
-    key <AD11>  { [ bracketleft,braceleft,  U2018 ] };
-    key <AD12>  { [ bracketright,braceright,U2019 ] };
-
-    key <AC01>  { [ U2C81,      U2C80 ] };
-    key <AC02>  { [ U2CA5,      U2CA4,      U03E3,      U03E2 ] };
-    key <AC03>  { [ U2C87,      U2C86,      U03EF,      U03EE ] };
-    key <AC04>  { [ U2CAB,      U2CAA,      U03E5,      U03E4 ] };
-    key <AC05>  { [ U2C85,      U2C84,      U03EB,      U03EA ] };
-    key <AC06>  { [ U2C8F,      U2C8E,      U03E9,      U03E8 ] };
-    key <AC07>  { [ U03EB,      U03EA,      U03EB,      U03EA ] };
-    key <AC08>  { [ U2C95,      U2C94,      U03E7,      U03E6 ] };
-    key <AC09>  { [ U2C97,      U2C96 ] };
-    key <AC10>  { [ semicolon,  colon,      U2053,      dead_doubleacute ] };
-    key <AC11>  { [ apostrophe, U2CFF,      U0022 ] };
-
-    key <AB01>  { [ U2C8D,      U2C8C ] };
-    key <AB02>  { [ U2C9D,      U2C9C ] };
-    key <AB03>  { [ U2CAD,      U2CAC,       U03ED,      U03EC ] };
-    key <AB04>  { [ U03E3,      U03E2,       U03E3,      U03E2 ] };
-    key <AB05>  { [ U2C83,      U2C82 ] };
-    key <AB06>  { [ U2C9B,      U2C9A ] };
-    key <AB07>  { [ U2C99,      U2C98 ] };
-    key <AB08>  { [ comma,      less,        U00AB,      U2039 ] };
-    key <AB09>  { [ period,     greater,     U00BB,      U203A ] };
-    key <AB10>  { [ U0301,      U2CFE,       slash,      question ] };
-
-    key <RALT>  { type[Group1]="TWO_LEVEL",
-                  [ ISO_Level3_Shift, Multi_key ]   };
-
-    modifier_map Mod5   { <RALT> };
-
-    //include "level3(ralt_switch_multikey)"
-
-  // End alphanumeric section
-};
-

configs/keyboard/default.nix

@@ -1,143 +0,0 @@
-{
-  config,
-  pkgs,
-  lib,
-  ...
-}:
-let
-
-  commaSep = builtins.concatStringsSep ",";
-  xkbOptions = [
-    "compose:caps"
-    "terminate:ctrl_alt_bksp"
-    "grp:ctrls_toggle"
-  ];
-  languages = {
-    deutsch = {
-      code = "de";
-      variant = "T3";
-    };
-    greek = {
-      code = "gr";
-      variant = "polytonic";
-    };
-    russian = {
-      code = "ru";
-      variant = "phonetic";
-    };
-    arabic = {
-      code = "ara";
-      variant = "buckwalter";
-    };
-    coptic = ./coptic;
-    avestan = ./avestan;
-    gothic = ./gothic;
-    farsi = {
-      code = "ir";
-      variant = "qwerty";
-    };
-    syriac = {
-      code = "sy";
-      variant = "syc_phonetic";
-    };
-    sanskrit = {
-      code = "in";
-      variant = "san-kagapa";
-    };
-    gujarati = {
-      code = "in";
-      variant = "guj-kagapa";
-    };
-    urdu = {
-      code = "in";
-      variant = "urd-phonetic";
-    };
-    hebrew = {
-      code = "il";
-      variant = "phonetic";
-    };
-  };
-  defaultLanguage = languages.deutsch;
-in
-{
-  services.libinput.enable = true;
-
-  # man 7 xkeyboard-config
-  services.xserver = {
-    exportConfiguration = lib.mkForce true; # link /usr/share/X11 properly
-    xkb.layout = defaultLanguage.code;
-    # T3: https://upload.wikimedia.org/wikipedia/commons/a/a9/German-Keyboard-Layout-T3-Version1-large.png
-    # buckwalter: http://www.qamus.org/transliteration.htm
-    xkb.variant = defaultLanguage.variant;
-    xkb.options = commaSep xkbOptions;
-    xkb.extraLayouts = {
-      coptic = {
-        languages = [ "cop" ];
-        description = "Coptic is the latest stage of the Egyptian language and was used by Egyptian Christians. The Coptic script is based on the Greek alphabet with some letters borrowed from Demotic Egyptian.";
-        symbolsFile = ./coptic;
-      };
-      avestan = {
-        languages = [ "ave" ];
-        description = "Avestan is an ancient Iranian language known primarily from its use in the sacred texts of Zoroastrianism, the Avesta. It is an Indo-Iranian language that was spoken in ancient Persia.";
-        symbolsFile = ./avestan;
-      };
-      gothic = {
-        languages = [ "got" ];
-        description = "Gothic is an extinct East Germanic language that was spoken by the Goths. It is known primarily from the Codex Argenteus, a 6th-century manuscript containing a translation of the Bible into Gothic.";
-        symbolsFile = ./gothic;
-      };
-      farsi = {
-        languages = [ "fas" ];
-        description = "Farsi, also known as Persian, is an Indo-Iranian language spoken primarily in Iran, Afghanistan (where it is known as Dari), and Tajikistan (where it is called Tajik). It has a rich literary tradition and is written in a modified Arabic script.";
-        symbolsFile = ./farsi;
-      };
-    };
-  };
-
-  environment.etc."x11-locale".source = toString pkgs.xorg.libX11 + "share/X11/locale";
-
-  home-manager.users.me = {
-    home.file = {
-      ".XCompose".source = ./XCompose;
-    };
-  };
-
-  console.keyMap = "de";
-
-  environment.systemPackages = lib.mapAttrsToList (
-    language: settings:
-    let
-      code = if settings ? "code" then settings.code else language;
-      variant = if settings ? "variant" then settings.variant else "";
-    in
-    pkgs.writers.writeDashBin "kb-${language}" ''
-      if [ -n "$SWAYSOCK" ]; then
-        swaymsg -s $SWAYSOCK 'input * xkb_layout "${defaultLanguage.code},${code}"'
-        swaymsg -s $SWAYSOCK 'input * xkb_variant "${defaultLanguage.variant},${variant}"'
-        swaymsg -s $SWAYSOCK 'input * xkb_options "${lib.concatStringsSep "," xkbOptions}"'
-      elif [ -n "$HYPRLAND_INSTANCE_SIGNATURE" ]; then
-        hyprctl keyword input:kb_variant "" # otherwise we end up with an invalid combination for a short while
-        hyprctl keyword input:kb_layout "${defaultLanguage.code},${code}"
-        hyprctl keyword input:kb_variant "${defaultLanguage.variant},${variant}"
-      elif [ -n "$DISPLAY" ]; then
-        ${pkgs.xorg.setxkbmap}/bin/setxkbmap ${defaultLanguage.code},${code} ${defaultLanguage.variant},${variant} ${
-          toString (map (option: "-option ${option}") xkbOptions)
-        }
-      fi
-    ''
-  ) (languages // config.services.xserver.xkb.extraLayouts);
-
-  # improve held key rate
-  services.xserver.displayManager.sessionCommands = "${pkgs.xorg.xset}/bin/xset r rate 300 50";
-
-  systemd.user.services.gxkb = {
-    wantedBy = [ "graphical-session.target" ];
-    serviceConfig = {
-      SyslogIdentifier = "gxkb";
-      ExecStart = "${pkgs.gxkb}/bin/gxkb";
-      Restart = "always";
-      RestartSec = "15s";
-      StartLimitBurst = 0;
-    };
-  };
-}

configs/keyboard/farsi

@@ -1,114 +0,0 @@
-// https://github.com/gpuminingir/Farsi-Phonetic-Keyboard-Linux
-// by @gpuminingir
-
-partial alphanumeric_keys
-xkb_symbols "qwerty" {
-  // Classic Finnish keyboard layout without dead keys and {[]} on asdf + AltG
-  name[Group1]="Persian (QWERTY)";
-  include "ir(pesq_part_basic)"
-  include "ir(pesq_part_ext)"
-  include "ir(pesq_part_keypad)"
-  include "nbsp(zwnj2nb3nnb4)"
-  include "level3(ralt_switch)"  
-};
-
-hidden partial alphanumeric_keys
-xkb_symbols "pesq_part_basic" {
-  // Persian digits
-  key <AE01> { [ Arabic_1, exclam, exclam ] }; // ١ ! !
-  key <AE02> { [ Arabic_2, at, at ] }; // ٢ @ @
-  key <AE03> { [ Arabic_3, numbersign, numbersign ] }; // ٣ # #
-  key <AE04> { [ Farsi_4, dollar, dollar ] }; // ۴ $ $
-  key <AE05> { [ Farsi_5, percent, percent ] }; // ۵ % %
-  key <AE06> { [ Farsi_6, asciicircum, asciicircum ] }; // ۶ ^ ^
-  key <AE07> { [ Arabic_7, ampersand, ampersand ] }; // ٧ & &
-  key <AE08> { [ Arabic_8, KP_Multiply, KP_Multiply ] }; // ٨ * *
-  key <AE09> { [ Arabic_9, Armenian_parenright, Armenian_parenright, Armenian_parenleft ] }; // ٩ ) ) (
-  key <AE10> { [ Farsi_0, Armenian_parenleft, Armenian_parenleft ] }; // ۰ ( (
-  key <AE11> { [ underbar, KP_Subtract, KP_Subtract ] }; // _ – –
-  key <AE12> { [ KP_Equal, KP_Add, KP_Add ] }; // = + +
-
-  // Persian letters and symbols
-  key <AD01> { [ Arabic_qaf, Arabic_ghain ] }; // ق غ
-  key <AD02> { [ Arabic_sheen ] }; // ش
-  key <AD03> { [ Arabic_ain ] }; // ع
-  key <AD04> { [ Arabic_ra ] }; // ر
-  key <AD05> { [ Arabic_teh, Arabic_tah ] }; // ت ط
-  key <AD06> { [ Farsi_yeh ] }; // ى
-  key <AD07> { [ Arabic_waw ] }; // و
-  key <AD08> { [ Farsi_yeh ] }; // ى
-  key <AD09> { [ Arabic_waw ] }; // و
-  key <AD10> { [ Arabic_peh ] }; // پ
-  key <AD11> { [ bracketright, braceleft ] }; // ] } {
-  key <AD12> { [ bracketleft, braceright ] }; // [ { }
-
-  key <AC01> { [ Arabic_alef, Arabic_maddaonalef, Arabic_maddaonalef ] }; // ا آ آ
-  key <AC02> { [ Arabic_seen, Arabic_sad, Arabic_sheen, Arabic_sheen ] }; // س ص  ش 
-  key <AC03> { [ Arabic_dal, Arabic_thal ] }; // د ذ ذ
-  key <AC04> { [ Arabic_feh ] }; // ف
-  key <AC05> { [ Arabic_gaf, Arabic_ghain ] }; // گ
-  key <AC06> { [ Arabic_heh, Arabic_hah ] }; // ە ح ه
-  key <AC07> { [ Arabic_jeem, Arabic_jeh ] }; // ج ژ ژ
-  key <AC08> { [ Arabic_keheh ] }; // ک
-  key <AC09> { [ Arabic_lam ] }; // ل
-  key <AC10> { [ Arabic_semicolon, colon ] }; // ؛ : ։
-  key <AC11> { [ Arabic_comma, quotedbl, quotedbl ] }; // ، ” ”
-
-  key <AB01> { [ Arabic_zain, Arabic_dad, Arabic_zah, Arabic_zah ] }; //  ض ض ز خ
-  key <AB02> { [ Arabic_khah, Arabic_zah ] }; // ظ خ
-  key <AB03> { [ Arabic_theh, Arabic_tcheh ] }; // چ ث
-  key <AB04> { [ Arabic_hamza, Arabic_waw ] }; // و
-  key <AB05> { [ Arabic_beh ] }; // ب
-  key <AB06> { [ Arabic_noon ] }; // ن
-  key <AB07> { [ Arabic_meem ] }; // م
-  key <AB08> { [ Arabic_comma, rightcaret, leftcaret ] }; // , > <
-  key <AB09> { [ period, leftcaret, rightcaret ] }; // . < >
-  key <AB10> { [ slash,		Arabic_question_mark,	question ] }; // / ?
-
-  key <AE11> { [ minus, underscore ] };
-  key <AE12> { [ equal, plus, 0x1002212 ] };
-  key <BKSL> { [ backslash, bar, 0x1002010 ] };
-  key <TLDE> { [ U02DC, UFDFC, UFDF2 ] }; // ˜ ﷼ ﷲ
-};
-
-hidden partial alphanumeric_keys
-xkb_symbols "pesq_part_ext" {
-  // Persian and ASCII digits
-  key <AE01> { [ Farsi_1, exclam, grave, 1 ] };
-  key <AE02> { [ Farsi_2, 0x100066c, at, 2 ] };
-  key <AE03> { [ Farsi_3, 0x100066b, numbersign, 3 ] };
-  key <AE04> { [ Farsi_4, 0x100fdfc, dollar, 4 ] };
-  key <AE05> { [ Farsi_5, 0x100066a, percent, 5 ] };
-  key <AE06> { [ Farsi_6, multiply, asciicircum, 6 ] };
-  key <AE07> { [ Farsi_7, Arabic_comma, ampersand, 7 ] };
-  key <AE08> { [ Farsi_8, asterisk, enfilledcircbullet, 8 ] };
-  key <AE09> { [ Farsi_9, parenright, 0x100200e, 9 ] };
-  key <AE10> { [ Farsi_0, parenleft, 0x100200f, 0 ] };
-};
-
-hidden partial alphanumeric_keys
-xkb_symbols "pesq_part_keypad" {
-  // Persian digits and Mathematical operators
-  key <KPDV> { [ division, XF86_Ungrab ] };
-  key <KPMU> { [ multiply, XF86_ClearGrab ] };
-  key <KPSU> { [ 0x1002212, XF86_Prev_VMode ] };
-  key <KPAD> { [ plus, XF86_Next_VMode ] };
-
-  key <KPEN> { [ KP_Enter ] };
-  key <KPEQ> { [ equal ] };
-
-  key <KP7> { [ KP_Home, Farsi_7 ] };
-  key <KP8> { [ KP_Up, Farsi_8 ] };
-  key <KP9> { [ KP_Prior, Farsi_9 ] };
-
-  key <KP4> { [ KP_Left, Farsi_4 ] };
-  key <KP5> { [ KP_Begin, Farsi_5 ] };
-  key <KP6> { [ KP_Right, Farsi_6 ] };
-
-  key <KP1> { [ KP_End, Farsi_1 ] };
-  key <KP2> { [ KP_Down, Farsi_2 ] };
-  key <KP3> { [ KP_Next, Farsi_3 ] };
-
-  key <KP0> { [ KP_Insert, Farsi_0 ] };
-  key <KPDL> { [ KP_Delete, 0x100066b ] };
-};

configs/keyboard/gothic

@@ -1,69 +0,0 @@
-/////////////////////////////////////////////////////////////////////////////////
-//
-// Generated keyboard layout file with the Keyboard Layout Editor.
-// For more about the software, see http://code.google.com/p/keyboardlayouteditor
-//
-// Version 0.2, changed AD09.
-
-partial default alphanumeric_keys
-xkb_symbols "Gothic"
-{
-	name[Group1] = "Gothic";
-
-	key <AB01> { [ U10336,         U10336 ] }; // Z: 𐌶
-	key <AB02> { [ U10347,         U10347 ] }; // X: 𐍇
-	key <AB03> { [ U10343,         U10343 ] }; // C: 𐍃
-	key <AB04> { [ U10338,         U10338 ] }; // V: 𐌸
-	key <AB05> { [ U10331,         U10331 ] }; // B: 𐌱
-	key <AB06> { [ U1033D,         U10341 ] }; // n: 𐌽           N: 𐍁
-	key <AB07> { [ U1033C,         U1033C ] }; // M: 𐌼
-	key <AB08> { [ U10B3C,         U10B39 ] };
-	key <AB09> { [ U10349,         U10349 ] };
-	key <AB10> { [ U10B3F, periodcentered ] };
-
-	key <AC01> { [ U10330,         U10330 ] }; // A: 𐌰
-	key <AC02> { [ U10343,         U10343 ] }; // S: 𐍃
-	key <AC03> { [ U10333,         U10338 ] }; // d: 𐌳             D: 𐌸
-	key <AC04> { [ U10346,         U10346 ] }; // F: 𐍆
-	key <AC05> { [ U10332,         U10332 ] }; // G: 𐌲
-	key <AC06> { [ U10337,         U10337 ] }; // H: 𐌷
-	key <AC07> { [ U1033E,         U1033E ] }; // J: 𐌾
-	key <AC08> { [ U1033A,         U1033A ] }; // K: 𐌺
-	key <AC09> { [ U1033B,         U1033B ] }; // L: 𐌻
-        key <AC10> { [ semicolon,	colon ]	};
-        key <AC11> { [ apostrophe,	quotedbl ] };
-
-	key <AD01> { [ U10335,         U10335 ] }; // Q: 𐌵
-	key <AD02> { [ U10345,         U10345 ] }; // W: 𐍅
-	key <AD03> { [ U10334,         U10334 ] }; // E: 𐌴
-	key <AD04> { [ U10342,         U10342 ] }; // R: 𐍂
-	key <AD05> { [ U10344,         U10338 ] }; // t: 𐍄                T: 𐌸
-	key <AD06> { [ U10348,         U1034A ] }; // y: 𐍈                 Y: 𐍊
-	key <AD07> { [ U1033F,         U1033F ] }; // U: 𐌿
-	key <AD08> { [ U10339,         U10339 ] }; // I: 𐌹
-	key <AD09> { [ U10349,         U10349 ] }; // O: 𐍉
-	key <AD10> { [ U10340,	       U10340 ] }; // P: 𐍀
-	key <AD11> { [ bracketleft,         braceleft ] };
-	key <AD12> { [ bracketright,         braceright ] };
-
-    key <TLDE> {	[     grave,	asciitilde	]	};
-    key <AE01> {	[	  1,	exclam 		]	};
-    key <AE02> {	[	  2,	at		]	};
-    key <AE03> {	[	  3,	numbersign	]	};
-    key <AE04> {	[	  4,	dollar		]	};
-    key <AE05> {	[	  5,	percent		]	};
-    key <AE06> {	[	  6,	asciicircum	]	};
-    key <AE07> {	[	  7,	ampersand	]	};
-    key <AE08> {	[	  8,	asterisk	]	};
-    key <AE09> {	[	  9,	parenleft	]	};
-    key <AE10> {	[	  0,	parenright	]	};
-    key <AE11> {	[     minus,	underscore	]	};
-    key <AE12> {	[     equal,	plus		]	};
-
-    key <AB08> {	[     comma,	less		]	};
-    key <AB09> {	[    period,	greater		]	};
-    key <AB10> {	[     slash,	question	]	};
-
-	key <BKSL> { [ U10B04,         U10B05 ] };
-	key <LSGT> { [ U10B04,         U10B05 ] };
-};

configs/khal.nix

@@ -1,158 +0,0 @@
-{
-  config,
-  pkgs,
-  lib,
-  ...
-}:
-let
-  davHome = "~/.local/share/dav";
-  kmeinCloud = {
-    davEndpoint = "https://cloud.kmein.de/remote.php/dav";
-    username = "kieran";
-    passwordFile = config.age.secrets.nextcloud-password-kieran.path;
-  };
-in
-{
-  age.secrets = {
-    nextcloud-password-kieran = {
-      file = ../secrets/nextcloud-password-kieran.age;
-      owner = config.users.users.me.name;
-      group = config.users.users.me.group;
-      mode = "400";
-    };
-  };
-
-  environment.systemPackages = [
-    pkgs.khal
-    pkgs.vdirsyncer
-    pkgs.khard
-    pkgs.todoman
-    (pkgs.writers.writeDashBin "todo-procrastinate" ''
-      [ $# -eq 1 ] || {
-        echo "Usage: $0 TODO_ID" >&2
-        exit 1
-      }
-      todo_id=$1
-      new_timestamp=$(${pkgs.todoman}/bin/todo --porcelain show "$todo_id" | ${pkgs.jq}/bin/jq '.due + 24 * 60 * 60')
-      new_date=$(${pkgs.coreutils}/bin/date +"%Y-%m-%d %H:%M" -d "@$new_timestamp")
-      ${pkgs.todoman}/bin/todo edit "$todo_id" --due "$new_date"
-    '')
-  ];
-
-  systemd.user.services.vdirsyncer = {
-    enable = true;
-    wants = [ "network-online.target" ];
-    wantedBy = [ "default.target" ];
-    startAt = "*:00/10";
-    script = ''
-      ${pkgs.vdirsyncer}/bin/vdirsyncer sync && ${pkgs.khal}/bin/khal printcalendars # https://lostpackets.de/khal/configure.html#syncing
-    '';
-    serviceConfig = {
-      Type = "oneshot";
-      Restart = "on-failure";
-    };
-  };
-
-  home-manager.users.me = {
-    xdg.configFile = {
-      "khard/khard.conf".text = ''
-        [addressbooks]
-        [[contacts]]
-        path = ${davHome}/contacts/contacts/
-
-        [general]
-        debug = no
-        default_action = list
-        editor = ${config.environment.variables.EDITOR}
-        merge_editor = ${pkgs.vim}/bin/vimdiff
-
-        [contact table]
-        display = first_name
-        group_by_addressbook = no
-        reverse = no
-        show_nicknames = no
-        show_uids = no
-        sort = last_name
-        localize_dates = yes
-        preferred_phone_number_type = pref, cell, home
-        preferred_email_address_type = pref, work, home
-
-        [vcard]
-        search_in_source_files = no
-        skip_unparsable = no
-      '';
-
-      "todoman/config.py".text = ''
-        path = "${davHome}/calendar/*"
-        date_format = "%Y-%m-%d"
-        time_format = "%H:%M"
-        default_due = 0
-        default_list = "Personal"
-        startable = True
-      '';
-
-      "khal/config".text = ''
-        [calendars]
-
-        [[kalender_local]]
-        path = ${davHome}/calendar/*
-        type = discover
-
-        [default]
-        highlight_event_days = True
-        timedelta = 5d
-        print_new = path
-        default_calendar = personal
-
-        [locale]
-        timeformat = %H:%M
-        dateformat = %Y-%m-%d
-        longdateformat = %Y-%m-%d
-        datetimeformat = %Y-%m-%d %H:%M
-        longdatetimeformat = %Y-%m-%d %H:%M
-        local_timezone = ${config.time.timeZone}
-        default_timezone = ${config.time.timeZone}
-        weeknumbers = left
-      '';
-
-      "vdirsyncer/config".text = ''
-        [general]
-        status_path = "~/.local/share/vdirsyncer/status/"
-
-        [pair kontakte]
-        a = "kontakte_local"
-        b = "kontakte_cloud"
-        collections = ["contacts"]
-        conflict_resolution = "b wins"
-
-        [pair kalender]
-        a = "kalender_local"
-        b = "kalender_cloud"
-        collections = ["from b"]
-        conflict_resolution = "b wins"
-
-        [storage kontakte_local]
-        type = "filesystem"
-        path = "${davHome}/contacts/"
-        fileext = ".vcf"
-
-        [storage kalender_local]
-        type = "filesystem"
-        path = "${davHome}/calendar/"
-        fileext = ".ics"
-
-        [storage kontakte_cloud]
-        type = "carddav"
-        url = "${kmeinCloud.davEndpoint}/addressbooks/users/${kmeinCloud.username}/"
-        username = "${kmeinCloud.username}"
-        password.fetch = ["command", "cat", "${kmeinCloud.passwordFile}"]
-
-        [storage kalender_cloud]
-        type = "caldav"
-        url = "${kmeinCloud.davEndpoint}/calendars/${kmeinCloud.username}/"
-        username = "${kmeinCloud.username}"
-        password.fetch = ["command", "cat", "${kmeinCloud.passwordFile}"]
-      '';
-    };
-  };
-}

configs/lb.nix

@@ -1,28 +0,0 @@
-{
-  lib,
-  pkgs,
-  ...
-}:
-{
-  systemd.services.lb-subscription = {
-    enable = true;
-    wants = [ "network-online.target" ];
-    startAt = "weekly";
-    serviceConfig = {
-      user = "kfm";
-      WorkingDirectory = "/home/kfm/cloud/nextcloud/Books/Germanistik/LB";
-    };
-    script = ''
-      first_year=2019
-      for year in $(${pkgs.coreutils}/bin/seq "$first_year" "$(date +%Y)"); do
-        ${pkgs.curl}/bin/curl -sSL "https://www.literarische-blaetter.de/jahrgang-$year/" \
-          | ${pkgs.htmlq}/bin/htmlq --attribute href 'ul.slides a' \
-          | while read -r month; do
-            ${pkgs.curl}/bin/curl -sSL "$month" \
-              | ${pkgs.htmlq}/bin/htmlq --attribute src iframe \
-              | ${pkgs.gnused}/bin/sed 's/.*?pdf=//;s/?wp-hosted.*//'
-          done
-      done | ${pkgs.findutils}/bin/xargs ${pkgs.wget}/bin/wget --no-clobber
-    '';
-  };
-}

configs/lix.nix

@@ -1,11 +0,0 @@
-{
-  pkgs,
-  lib,
-  ...
-}:
-{
-  nix = {
-    package = lib.mkForce pkgs.lix;
-    settings.experimental-features = [ "nix-command" "flakes" ];
-  };
-}

configs/mail.nix

@@ -0,0 +1,58 @@
+{ config, pkgs, ... }:
+{
+  environment.systemPackages = [
+    pkgs.notmuch
+    pkgs.offlineimap
+    pkgs.msmtp
+    pkgs.neomutt
+  ];
+  home-manager.users.me = {
+    programs.astroid = {
+      enable = true;
+      externalEditor = "urxvt -embed %3 -e nvim %1";
+      pollScript = "offlineimap";
+    };
+
+    accounts.email.maildirBasePath = "${config.users.users.me.home}/mail";
+
+    accounts.email.accounts.amroplay = {
+      astroid.enable = true;
+      address = "amroplay@gmail.com";
+      userName = "amroplay";
+      flavor = "gmail.com";
+      realName = config.niveum.user.name;
+      msmtp.enable = true;
+      notmuch.enable = true;
+      offlineimap = {
+        enable = true;
+        postSyncHookCommand = "notmuch new";
+      };
+    };
+
+    accounts.email.accounts.hu-berlin = {
+      astroid.enable = true;
+      address = "meinhark@hu-berlin.de";
+      userName = "meinhark";
+      realName = config.niveum.user.name;
+      imap = {
+        host = "mailbox.cms.hu-berlin.de";
+        port = 993;
+        tls.enable = true;
+      };
+      smtp = {
+        host = "mailhost.cms.hu-berlin.de";
+        port = 25;
+        tls.enable = true;
+      };
+      msmtp.enable = true;
+      notmuch.enable = true;
+      offlineimap = {
+        enable = true;
+        postSyncHookCommand = "notmuch new";
+      };
+      primary = true;
+    };
+
+    programs.offlineimap.enable = true;
+  };
+}

configs/mime.nix

@@ -1,33 +0,0 @@
-{
-  home-manager.users.me = {
-    xdg.mimeApps = {
-      enable = true;
-      associations = {
-        added = {
-          "x-scheme-handler/tg" = "org.telegram.desktop.desktop";
-        };
-        removed = {
-        };
-      };
-      defaultApplications = {
-        "application/epub+zip" = "org.pwmt.zathura.desktop";
-        "application/pdf" = "org.pwmt.zathura.desktop";
-        "application/vnd.oasis.opendocument.text" = "writer.desktop";
-        "application/vnd.openxmlformats-officedocument.wordprocessingml.document" = "writer.desktop";
-        "image/jpeg" = "nsxiv.desktop";
-        "image/png" = "nsxiv.desktop";
-        "image/vnd.djvu+multipage" = "org.pwmt.zathura.desktop";
-        "text/html" = "firefox.desktop";
-        "text/markdown" = "nvim.desktop";
-        "text/plain" = "nvim.desktop";
-        "x-scheme-handler/about" = "firefox.desktop";
-        "x-scheme-handler/http" = "firefox.desktop";
-        "x-scheme-handler/https" = "firefox.desktop";
-        "x-scheme-handler/mailto" = "firefox.desktop";
-        "x-scheme-handler/unknown" = "firefox.desktop";
-        "x-scheme-handler/webcal" = "firefox.desktop";
-        "x-scheme-handler/tg" = "org.telegram.desktop.desktop";
-      };
-    };
-  };
-}

configs/monitoring.nix

@@ -1,84 +0,0 @@
-{
-  config,
-  pkgs,
-  ...
-}:
-{
-  services.nginx.virtualHosts.default = {
-    locations."= /stub_status".extraConfig = "stub_status;";
-  };
-
-  services.prometheus = {
-    enable = true;
-    port = 9001;
-    exporters = {
-      nginx.enable = false;
-      node = {
-        enable = true;
-        openFirewall = true;
-        enabledCollectors = [
-          "conntrack"
-          "diskstats"
-          "entropy"
-          "filefd"
-          "filesystem"
-          "loadavg"
-          "mdadm"
-          "meminfo"
-          "netdev"
-          "netstat"
-          "stat"
-          "time"
-          "vmstat"
-          "systemd"
-          "logind"
-          "interrupts"
-          "ksmd"
-        ];
-        port = 9002;
-      };
-    };
-  };
-
-  systemd.services.promtail = {
-    description = "Promtail service for Loki";
-    wantedBy = [ "multi-user.target" ];
-
-    serviceConfig = {
-      ExecStart = ''
-        ${pkgs.grafana-loki}/bin/promtail --config.file ${
-          (pkgs.formats.yaml { }).generate "promtail.yaml" {
-            server = {
-              http_listen_port = 28183;
-              grpc_listen_port = 0;
-            };
-            positions.filename = "/tmp/positions.yaml";
-            clients = [
-              {
-                url = "http://${
-                  if config.networking.hostName == "makanek" then "127.0.0.1" else "makanek.r"
-                }:3100/loki/api/v1/push";
-              }
-            ];
-            scrape_configs = [
-              {
-                job_name = "journal";
-                journal = {
-                  max_age = "12h";
-                  labels.job = "systemd-journal";
-                  labels.host = config.networking.hostName;
-                };
-                relabel_configs = [
-                  {
-                    source_labels = [ "__journal__systemd_unit" ];
-                    target_label = "unit";
-                  }
-                ];
-              }
-            ];
-          }
-        }
-      '';
-    };
-  };
-}

configs/mopidy.nix

@@ -0,0 +1,30 @@
+{ pkgs, ... }:
+let secrets = import <dot/secrets.nix>;
+in {
+  services.mopidy = {
+    enable = true;
+    extensionPackages = [
+      pkgs.mopidy-gmusic
+      pkgs.mopidy-iris
+      pkgs.mopidy-moped
+      pkgs.mopidy-mopify
+      pkgs.mopidy-soundcloud
+      pkgs.mopidy-spotify
+      pkgs.mopidy-spotify-tunigo
+      pkgs.mopidy-youtube
+    ];
+    configuration = ''
+      [mpd]
+      hostname = ::
+
+      [spotify]
+      username = ${secrets.spotify.username}
+      password = ${secrets.spotify.password}
+      client_id = ${secrets.spotify.clientId}
+      client_secret = ${secrets.spotify.clientSecret}
+
+      [soundcloud]
+      auth_token = ${secrets.soundcloud.authToken}
+    '';
+  };
+}

configs/mpv.nix

@@ -1,42 +1,17 @@
+{ pkgs, ... }:
 {
-  pkgs,
-  lib,
-  self,
-  config,
-  ...
-}:
-let
-  swallow = command: "${pkgs.swallow}/bin/swallow ${command}";
-  myMpv =
-    pkgs:
-    self.inputs.wrappers.wrapperModules.mpv.apply {
-      inherit pkgs;
-      scripts = [
-        pkgs.mpvScripts.visualizer
-      ];
-      "mpv.conf".content = "";
-      "mpv.input".content = ''
-        Alt+- add video-zoom -0.25
-        Alt+= add video-zoom 0.25
-        Alt+LEFT add video-rotate -90
-        Alt+RIGHT add video-rotate 90
-        Alt+h add video-pan-x 0.05
-        Alt+j add video-pan-y -0.05
-        Alt+k add video-pan-y 0.05
-        Alt+l add video-pan-x -0.05
-      '';
-    };
-in
-{
-  environment.shellAliases.smpv = swallow "mpv";
+  environment.systemPackages = [ pkgs.mpv pkgs.mpv-poll ];
 
-  nixpkgs.overlays = [
-    (final: prev: {
-      mpv = (myMpv prev).wrapper;
-    })
-  ];
-
-  environment.systemPackages = [
-    ((myMpv pkgs).wrapper)
-  ];
+  home-manager.users.me.xdg.configFile = {
+    "mpv/input.conf".text = ''
+      Alt+RIGHT add video-rotate 90
+      Alt+LEFT add video-rotate -90
+      Alt+- add video-zoom -0.25
+      Alt+= add video-zoom 0.25
+      Alt+l add video-pan-x -0.05
+      Alt+h add video-pan-x 0.05
+      Alt+k add video-pan-y 0.05
+      Alt+j add video-pan-y -0.05
+    '';
+  };
 }

configs/mycelium.nix

@@ -1,12 +0,0 @@
-{ lib, pkgs, ... }:
-{
-  services.mycelium = {
-    enable = true;
-    openFirewall = true;
-  };
-
-  networking.hosts = lib.mapAttrs' (name: address: {
-    name = address;
-    value = [ "${name}.m" ];
-  }) pkgs.lib.niveum.myceliumAddresses;
-}

configs/nano.nix

@@ -0,0 +1,10 @@
+{
+  programs.nano.nanorc = ''
+    set autoindent
+    set boldtext
+    set morespace
+    set smarthome
+    set tabsize 4
+    set tabstospaces
+  '';
+}

configs/neovim.nix

@@ -0,0 +1,112 @@
+{ pkgs, ... }:
+{
+  environment.variables.EDITOR = pkgs.lib.mkForce "nvim";
+  environment.shellAliases.vi = "nvim";
+  environment.shellAliases.vim = "nvim";
+  environment.shellAliases.view = "nvim -R";
+
+  environment.systemPackages = [
+    (pkgs.neovim.override {
+      configure = {
+        customRC = builtins.readFile <dot/vimrc>;
+        packages.nvim = with pkgs.vimPlugins; {
+          start = with pkgs.vimPlugins; [
+            ale
+            deoplete-nvim
+            fzf-vim
+            fzfWrapper
+            supertab
+            tabular
+            vim-abolish
+            vim-commentary
+            vim-eunuch
+            vim-fugitive
+            vim-gitgutter
+            vim-pandoc vim-pandoc-after vim-pandoc-syntax
+            vim-repeat
+            vim-sensible
+            vim-startify
+            vim-surround
+            (pkgs.vimUtils.buildVimPluginFrom2Nix rec {
+              name = "vim-fetch";
+              src = pkgs.fetchFromGitHub {
+                owner = "wsdjeg";
+                repo = "vim-fetch";
+                rev = "76c08586e15e42055c9c21321d9fca0677442ecc";
+                sha256 = "0avcqjcqvxgj00r477ps54rjrwvmk5ygqm3qrzghbj9m1gpyp2kz";
+              };
+            })
+            (pkgs.vimUtils.buildVimPluginFrom2Nix rec {
+              name = "vim-colors-paramount";
+              src = pkgs.fetchFromGitHub {
+                owner = "owickstrom";
+                repo = "vim-colors-paramount";
+                rev = "a5601d36fb6932e8d1a6f8b37b179a99b1456798";
+                sha256 = "0rjn9vjb0xrxbiqyfclda2ridcbl3nfn4svs32mvmv8als6crncg";
+              };
+            })
+            (pkgs.vimUtils.buildVimPluginFrom2Nix {
+              name = "vim-256noir";
+              src = pkgs.fetchFromGitHub {
+                owner = "andreasvc";
+                repo = "vim-256noir";
+                rev = "e8668a18a4a90272c1cae87e655f8bddc5ac3665";
+                sha256 = "1kpn379f5dgbsgb73g6d1nlmz9vz0j3ihi500mcdx4yg56fvkr0x";
+              };
+            })
+          ];
+          opt = [
+            csv
+            dhall-vim
+            elm-vim
+            haskell-vim
+            idris-vim
+            rust-vim
+            typescript-vim
+            vim-javascript
+            vim-nix
+            vim-toml
+            vimtex
+            vim-ledger
+            (pkgs.vimUtils.buildVimPluginFrom2Nix {
+              name = "todo.txt-vim";
+              src = pkgs.fetchFromGitHub {
+                owner = "freitass";
+                repo = "todo.txt-vim";
+                rev = "6845221d45bd62e604c2024bc511a56e79d1118b";
+                sha256 = "08m9q5f2pz6gjp0vkmm7glfsrbnldxi1j59dm5d7any6y96xxd6v";
+              };
+            })
+            (pkgs.vimUtils.buildVimPluginFrom2Nix {
+              name = "jq.vim";
+              src = pkgs.fetchFromGitHub {
+                owner = "vito-c";
+                repo = "jq.vim";
+                rev = "5baf8ed192cf267d30b84e3243d9aab3d4912e60";
+                sha256 = "1ykaxlli7b9wmhr8lpdalqxh7l4940jwhwm9pwlraga425h4r6z4";
+              };
+            })
+            (pkgs.vimUtils.buildVimPluginFrom2Nix {
+              name = "vim-fsharp";
+              src = pkgs.fetchFromGitHub {
+                owner = "fsharp";
+                repo = "vim-fsharp";
+                rev = "627db7d701747e8fd7924b6505c61e16a369fb72";
+                sha256 = "00hhgn2p54faysx1ddccyhl9jnvddgxsczhv0np3mgzza6ls4838";
+              };
+            })
+            (pkgs.vimUtils.buildVimPluginFrom2Nix {
+              name = "emmet-vim";
+              src = pkgs.fetchFromGitHub {
+                owner = "mattn";
+                repo = "emmet-vim";
+                rev = "d698f1658770ca5fa58c87e80421c8d65bbe9065";
+                sha256 = "0vl4267hh8g1vkvc3awlqyypgz4m1r43d47sldl80yamiafiviaj";
+              };
+            })
+          ];
+        };
+      };
+    })
+  ];
+}

configs/networkmanager.nix

@@ -1,27 +0,0 @@
-{
-  pkgs,
-  ...
-}:
-{
-  programs.nm-applet.enable = true;
-
-  networking.networkmanager = {
-    enable = true;
-    plugins = [
-      pkgs.networkmanager-openvpn
-      pkgs.networkmanager-fortisslvpn
-    ];
-    wifi.macAddress = "random";
-    ethernet.macAddress = "random";
-    unmanaged = [ "docker*" ];
-  };
-
-  users.users.me.extraGroups = [ "networkmanager" ];
-
-  environment.systemPackages = [
-    pkgs.speedtest-cli
-    pkgs.networkmanager-openvpn
-    pkgs.networkmanagerapplet
-    pkgs.networkmanager-fortisslvpn
-  ];
-}

configs/nixpkgs-unstable.nix

@@ -0,0 +1,8 @@
+{ config, ... }:
+{
+  nixpkgs.config.packageOverrides = pkgs: {
+    unstable = import <nixos-unstable> {
+      config = config.nixpkgs.config;
+    };
+  };
+}

configs/openweathermap.nix

@@ -1,24 +0,0 @@
-{
-  pkgs,
-  lib,
-  ...
-}:
-let
-  openweathermap-repo = pkgs.fetchFromGitHub {
-    owner = "ip1981";
-    repo = "openweathermap";
-    rev = "9cfef7b14ac5af7109449b54b1cb352b4c76167a";
-    sha256 = "0sm43wicvw2fy7nq65s8vch6jjb5bszqr4ilnhibayamj4jcpw53";
-  };
-  openweathermap = pkgs.haskellPackages.callCabal2nix "openweathermap" openweathermap-repo { };
-  openweathermap-key = lib.strings.fileContents <secrets/openweathermap.key>;
-in
-{
-  nixpkgs.config.packageOverrides = pkgs: {
-    weather = pkgs.writers.writeDashBin "weather" ''
-      ${openweathermap}/bin/openweathermap --api-key ${openweathermap-key} "$@"
-    '';
-  };
-
-  environment.systemPackages = [ pkgs.weather ];
-}

configs/packages.nix

@@ -1,271 +0,0 @@
-{
-  config,
-  pkgs,
-  ...
-}:
-let
-  worldradio = pkgs.callPackage ../packages/worldradio.nix { };
-
-  zoteroStyle =
-    {
-      name,
-      sha256,
-    }:
-    {
-      name = "${name}.csl";
-      path = pkgs.fetchurl {
-        url = "https://www.zotero.org/styles/${name}";
-        inherit sha256;
-      };
-    };
-  cslDirectory = pkgs.linkFarm "citation-styles" [
-    (zoteroStyle {
-      name = "chicago-author-date-de";
-      sha256 = "sha256-ddMYk4A9DJQhx9ldkmF7PhwKuc7wUSr26uHHGAze9Ps=";
-    })
-    (zoteroStyle {
-      name = "din-1505-2";
-      sha256 = "sha256-bXZbB850fek8J6wMVFL32ndI7F4wiKKr1qUC71ezreE=";
-    })
-    (zoteroStyle {
-      name = "apa";
-      sha256 = "sha256-sUf0Ov5c9aTUoLsYSRbQl3Qs9ELkb5/Tky35kH7pKuE=";
-    })
-  ];
-
-  astrolog = pkgs.astrolog.overrideAttrs (
-    old:
-    old
-    // {
-      installPhase = ''
-        ${old.installPhase}
-        # set sensible defaults
-        sed -i '
-          /^-z /s/8:00W/1:00E/ # timezone
-          /^-zl /s/122W19:59 47N36:35/13E22:42 52N27:42/ # default location
-          /^-zj /s/"Current moment now"/Now/ # default name
-          /^-zj /s/"Seattle, WA, USA"/Berlin/ # default location
-          /^_k/s/_k/=k/ # use color
-          /^_Yd/s/_Yd/=Yd/ # sensible date format
-          /^_Yt/s/_Yt/=Yt/ # sensible time format
-          /^_Yv/s/_Yv/=Yv/ # sensible length format
-          /^:Xbw/s/:Xbw/:Xbn/ # set X11 bitmap format
-          /^:I /s/80/120/ # wider text output
-        ' $out/astrolog/astrolog.as
-      '';
-    }
-  );
-in
-{
-  home-manager.users.me.home.file = {
-    ".csl".source = cslDirectory;
-    ".local/share/pandoc/csl".source = cslDirectory; # as of pandoc 2.11, it includes citeproc
-  };
-
-  environment.systemPackages = with pkgs; [
-    (pkgs.writers.writeDashBin "amfora" ''
-      ${pkgs.st}/bin/st -e ${pkgs.amfora}/bin/amfora
-    '')
-    (pkgs.writers.writeDashBin "gpodder" ''
-      GPODDER_DOWNLOAD_DIR=${config.users.users.me.home}/mobile/audio/Text/podcasts exec ${pkgs.gpodder}/bin/gpodder "$@"
-    '')
-    # INTERNET
-    telegram-desktop
-    # FILE MANAGERS
-    lf
-    # MEDIA
-    ffmpeg
-    simplescreenrecorder
-    imagemagick
-    exiftool
-    graphviz
-    # SHELL
-    genpass # generate passwords
-    (pkgs.writers.writeDashBin "genpassphrase" ''${pkgs.genpass}/bin/genpass "$@" --passphrase | ${pkgs.gnused}/bin/sed 's/ /-/g;s/\(^\|-\)\([a-z]\)/\1\U\2/g;s/$/-'$(${pkgs.coreutils}/bin/date +%Y)'/' '')
-    gcc
-    python3Packages.jsonschema # json validation
-    pup # html toolkit
-    xan # csv toolkit
-    magic-wormhole-rs # file transfer
-    exfat # to mount windows drives
-    # HARDWARE TOOLS
-    gnome-disk-utility
-    arandr # xrandr for noobs
-    portfolio # personal finance overview
-    audacity
-    calibre
-    electrum
-    inkscape
-    gimp
-    gthumb
-    astrolog
-    obsidian
-    lemmeknow # identify strings
-    aichat # chat with llms
-    anki-bin # flashcards
-    jbofihe # lojbanic software
-    zoom-us # video conferencing
-    (pkgs.writers.writeDashBin "im" ''
-      weechat_password=$(${pkgs.pass}/bin/pass weechat)
-      exec ${weechat}/bin/weechat -t -r '/mouse enable; /remote add makanek http://${pkgs.lib.niveum.machines.makanek.externalIp}:8002 -password='"$weechat_password"'; /remote connect makanek'
-    '')
-    alejandra # nix formatter
-    pdfgrep # search in pdf
-    pdftk # pdf toolkit
-    mupdf
-    poppler-utils # pdf toolkit
-    kdePackages.okular # the word is nucular
-    xournalpp # for annotating pdfs
-    pdfpc # presenter console for pdf slides
-    hc # print files as qr codes
-    yt-dlp
-    yt-dlp-master
-    espeak
-    rink # unit converter
-    auc
-    noise-waves
-    stag
-    cheat-sh
-    polyglot
-    qrpaste
-    ttspaste
-    new-mac # get a new mac address
-    scanned
-    default-gateway
-    kirciuoklis
-    image-convert-favicon
-    heuretes
-    ipa # XSAMPA to IPA converter
-    pls
-    mpv-tv
-    mpv-iptv
-    devanagari
-    betacode # ancient greek betacode to unicode converter
-    jq-lsp
-    swallow # window swallowing
-    literature-quote
-    booksplit
-    dmenu-randr
-    manual-sort
-    wttr
-    unicodmenu
-    emailmenu
-    closest
-    trans
-    (mpv-radio.override {
-      di-fm-key-file = config.age.secrets.di-fm-key.path;
-    })
-    (mpv-radio.override {
-      di-fm-key-file = config.age.secrets.di-fm-key.path;
-      executableName = "cro-radio";
-      mpvCommand = "${cro}/bin/cro";
-    })
-    (mpv-tuner.override {
-      di-fm-key-file = config.age.secrets.di-fm-key.path;
-    })
-    # kmein.slide
-    termdown # countdown timer in terminal
-    image-convert-tolino
-    rfc
-    tag
-    timer
-    comma
-    par
-    qrencode
-
-    pkgs.agenix
-    pkgs.wetter
-    pkgs.alarm
-
-    (pkgs.writers.writeDashBin "worldradio" ''
-      shuf ${worldradio} | ${pkgs.findutils}/bin/xargs ${pkgs.mpv}/bin/mpv --no-video
-    '')
-
-    (pkgs.writers.writeDashBin "chats" ''
-      ${pkgs.openssh}/bin/ssh -p ${toString pkgs.lib.niveum.machines.makanek.sshPort} ${pkgs.lib.niveum.machines.makanek.externalIp} "cd /var/lib/weechat/logs && grep --ignore-case --color=always --recursive $@" | ${pkgs.less}/bin/less --raw-control-chars
-    '')
-
-    niveum-ssh
-
-    spotify
-    playerctl
-
-    #krebs
-    pkgs.nur.repos.mic92.ircsink
-
-    (haskellPackages.ghcWithHoogle (hs: [
-      hs.text
-      hs.lens
-      hs.bytestring
-    ]))
-
-    (python3.withPackages (py: [
-      py.black
-      py.ruff
-      # py.python-language-server
-      # py.pyls-mypy
-      # py.pyls-black
-      # py.pyls-isort
-      py.flake8
-      py.pygments
-      py.schema
-    ]))
-    # python3Packages.poetry
-
-    dhall-nix
-    dhall-bash
-    dhall-json
-    dhall
-
-    html-tidy
-    deno # better node.js
-    go
-    texlive.combined.scheme-full
-    latexrun
-    (aspellWithDicts (dict: [
-      dict.de
-      dict.en
-      dict.en-computers
-    ]))
-    # haskellPackages.pandoc-citeproc
-    text2pdf
-    lowdown
-    glow # markdown to term
-    libreoffice-qt6-fresh
-    # gnumeric
-    dia
-    pandoc
-    librsvg # pandoc depends on this to include SVG in documents
-    # man-pandoc
-    typst
-    # proselint
-    asciidoctor
-    wordnet
-    shellcheck
-
-    # photography
-    gphoto2
-    darktable
-
-    (pkgs.writers.writeDashBin "hass-cli" ''
-      HASS_SERVER=http://zaatar.r:8123 HASS_TOKEN="$(cat ${config.age.secrets.home-assistant-token.path})"  exec ${pkgs.home-assistant-cli}/bin/hass-cli "$@"
-    '')
-
-    # xml
-    saxonb_9_1
-    libxml2
-    zotero
-  ];
-
-  age.secrets.home-assistant-token = {
-    file = ../secrets/home-assistant-token.age;
-    owner = config.users.users.me.name;
-    group = config.users.users.me.group;
-    mode = "400";
-  };
-
-  home-manager.users.me.xdg.configFile."pycodestyle".text = ''
-    [pycodestyle]
-    max-line-length = 110
-  '';
-}

configs/packages/default.nix

@@ -0,0 +1,107 @@
+{ pkgs, ... }:
+{
+  imports = [
+    ./krebs.nix
+    ./programming.nix
+    ./writing.nix
+    {
+      environment.systemPackages = with pkgs; [
+      ] ++ [ # internet
+        aria2
+        firefox
+        tor-browser-bundle-bin
+        thunderbird
+        tdesktop
+        w3m
+        wget
+        httpie
+        whois
+        ddgr
+        python3Packages.instaloader
+        mtr # my traceroute
+      ] ++ [ # media
+        ffmpeg
+        imagemagick
+        sxiv
+      ] ++ [ # archive
+        unzip
+        unrar
+        p7zip
+        zip
+      ] ++ [ # monitor
+        htop
+        iotop
+        iftop
+        lsof
+        psmisc
+      ] ++ [ # shell
+        bat
+        dos2unix
+        ncdu
+        du-dust
+        fd
+        file
+        jq # json manipulation
+        jo # json creation
+        kmein.nav # json navigation
+        xsv
+        xmlstarlet
+        manpages
+        posix_man_pages
+        moreutils
+        ranger
+        ripgrep
+        rlwrap
+        progress # display progress bars for pipes
+        up # universal plumber (piping tool)
+      ] ++ [ # hardware
+        usbutils
+        pciutils
+        lshw
+      ] ++ [ # graphical
+        arandr
+        libnotify
+        xclip
+        xorg.xkill
+      ] ++ [ # programming
+        nix-prefetch-git
+      ] ++ [ # media
+        audacity
+        calibre
+        inkscape
+        xpdf
+        pdfgrep
+        pdftk
+        spotify
+        python3Packages.spotify-cli-linux
+        youtubeDL
+      ] ++ [ # math
+        bc
+      ] ++ [ # shell
+        (pass.withExtensions (ext: [ext.pass-otp]))
+        fzf
+        gnupg
+        kmein.haskellPackages.mnemosyne
+        kmein.autorenkalender
+        kmein.bvg
+        kmein.daybook
+        kmein.depp
+        kmein.font-size
+        kmein.genius
+        kmein.instaget
+        kmein.literature-quote
+        kmein.n
+        kmein.odyssey
+        kmein.wttr
+        kmein.slide
+        memo
+        nix-git
+        par
+        qrencode
+        unstable.hugo
+        unstable.zola
+        wtf
+      ];
+    }
+  ];
+}

configs/packages/krebs.nix

@@ -0,0 +1,19 @@
+{ lib, pkgs, ... }:
+let krebs-packages = pkgs: {
+  dic = pkgs.callPackage <stockholm/krebs/5pkgs/simple/dic> {};
+  yt-next = pkgs.callPackage <stockholm/lass/5pkgs/yt-next> {};
+  acronym = pkgs.callPackage <stockholm/lass/5pkgs/acronym> {};
+  urban = pkgs.callPackage <stockholm/lass/5pkgs/urban> {};
+  mpv-poll = pkgs.callPackage <stockholm/lass/5pkgs/mpv-poll> {};
+  untilport = pkgs.callPackage <stockholm/krebs/5pkgs/simple/untilport> {};
+  kpaste = pkgs.callPackage <stockholm/krebs/5pkgs/simple/kpaste> {};
+  krebspaste = pkgs.callPackage <stockholm/krebs/5pkgs/simple/krebspaste> {};
+  bepasty-client-cli = pkgs.callPackage <stockholm/krebs/5pkgs/simple/bepasty-client-cli> {};
+  irc-announce = pkgs.callPackage <stockholm/krebs/5pkgs/simple/irc-announce> {};
+  git-preview = pkgs.callPackage <stockholm/krebs/5pkgs/simple/git-preview> {};
+};
+in {
+  nixpkgs.config.packageOverrides = krebs-packages;
+
+  environment.systemPackages = map (name: pkgs.${name}) (lib.attrNames (krebs-packages pkgs));
+}

configs/packages/programming.nix

@@ -0,0 +1,28 @@
+{ pkgs, ... }:
+{
+  imports = [
+    {
+      environment.systemPackages = with pkgs; [
+        htmlTidy
+        nodePackages_10_x.csslint
+        nodePackages_10_x.jsonlint
+        nodePackages_10_x.prettier
+        nodePackages_10_x.typescript
+        nodePackages_10_x.yarn
+        nodejs-10_x
+      ];
+    }
+  ];
+
+  environment.systemPackages = with pkgs; [
+    tokei # count lines of code
+    gnumake
+    gcc
+    binutils # strip, ld, ...
+    iolanguage
+    ruby
+    rubocop
+    rustup
+    shellcheck
+  ];
+}

configs/packages/writing.nix

@@ -0,0 +1,17 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = with pkgs; [
+    (texlive.combine {
+      inherit (pkgs.texlive) scheme-full texdoc latex2e-help-texinfo;
+      pkgFilter = pkg: pkg.tlType == "run" || pkg.tlType == "bin" || pkg.pname == "latex2e-help-texinfo";
+    })
+    # haskellPackages.patat
+    (aspellWithDicts (dict: [dict.de dict.en dict.la dict.en-computers dict.ru]))
+    haskellPackages.pandoc-citeproc
+    libreoffice
+    pandoc
+    proselint
+    unstable.asciidoctor
+    wordnet
+  ];
+}

configs/polkit.nix

@@ -1,13 +0,0 @@
-{ config, ... }:
-let
-  user = config.users.users.me.name;
-in
-{
-  security.polkit.extraConfig = ''
-    polkit.addRule(function(action, subject) {
-      if (subject.user == "${user}" && action.id == "org.freedesktop.systemd1.manage-units") {
-        return polkit.Result.YES;
-      }
-    });
-  '';
-}

configs/power-action.nix

@@ -1,26 +0,0 @@
-{
-  pkgs,
-  config,
-  ...
-}:
-let
-  suspend = pkgs.writers.writeDash "suspend" "${pkgs.systemd}/bin/systemctl suspend";
-in
-{
-  services.power-action = {
-    enable = true;
-    plans.suspend = {
-      upperLimit = 7;
-      lowerLimit = 0;
-      charging = false;
-      action = pkgs.writers.writeDash "suspend-wrapper" ''
-        /run/wrappers/bin/sudo ${suspend}
-      '';
-    };
-    user = config.users.users.me.name;
-  };
-
-  security.sudo.extraConfig = ''
-    ${config.services.power-action.user} ALL= (root) NOPASSWD: ${suspend}
-  '';
-}

configs/printing.nix

@@ -1,50 +1,9 @@
-{ pkgs, lib, ... }:
-let
-  hp-driver = pkgs.hplipWithPlugin;
-in
+{ pkgs, ... }:
 {
   services.printing = {
     enable = true;
-    drivers = [ hp-driver ];
+    drivers = [ pkgs.hplipWithPlugin ];
   };
 
-  hardware.sane = {
-    enable = true;
-    extraBackends = [ hp-driver ];
-  };
-
-  environment.systemPackages = [
-    pkgs.system-config-printer
-    pkgs.simple-scan
-    hp-driver
-  ];
-
-  # allow connecting to .local printers
-  services.avahi = {
-    nssmdns4 = true;
-    enable = true;
-    openFirewall = true;
-  };
-
-  # users.users.me.extraGroups is set in configs/default.nix which defines the "me" user
-
-  hardware.printers.ensurePrinters = [
-    {
-      name = "OfficeJet";
-      location = "Zimmer";
-      deviceUri = "https://${pkgs.lib.niveum.localAddresses.officejet}";
-      model = "drv:///hp/hpcups.drv/hp-officejet_4650_series.ppd";
-      ppdOptions = {
-        Duplex = "DuplexNoTumble"; # DuplexNoTumble DuplexTumble None
-        PageSize = "A4"; # A4 A4.FB A4.Duplex
-        MediaType = "Plain";
-        OutputMode = "Normal";
-        ColorModel = "KGray"; # RGB CMYGray KGray
-      };
-    }
-  ];
+  networking.hosts."192.168.178.27" = [ "officejet" ];
 }
-/*
-  HP/hp-officejet_4650_series.ppd.gz
-  drv:///hp/hpcups.drv/hp-officejet_4650_series.ppd
-*/

configs/python.nix

@@ -0,0 +1,28 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = [
+    (pkgs.python3.withPackages
+      (py: [
+        py.black
+        py.python-language-server
+        py.pyls-mypy
+        py.pyls-black
+        py.pyls-isort
+        py.flake8
+        py.flask
+        py.pygments
+        py.docopt
+        py.schema
+        py.ansicolors
+        py.virtualenv
+        py.spacy
+        py.spacy_models
+      ])
+    )
+  ];
+
+  home-manager.users.me.xdg.configFile."pycodestyle".text = ''
+    [pycodestyle]
+    max-line-length = 110
+  '';
+}

configs/random-background.nix

@@ -0,0 +1,9 @@
+{
+  home-manager.users.me = {
+    services.random-background = {
+      enable = true;
+      imageDirectory = toString <art>;
+      interval = "2h";
+    };
+  };
+}

configs/redshift.nix

@@ -1 +1,7 @@
-{ services.redshift.enable = true; }
+{
+  services.redshift = {
+    enable = true;
+    latitude = "52";
+    longitude = "13";
+  };
+}

configs/retiolum.nix

@@ -1,15 +1,37 @@
+{ config, pkgs, ... }:
 {
-  config,
-  pkgs,
-  ...
-}:
-{
+  imports = [ <modules/retiolum.nix> ];
+
+  fileSystems."/mnt/lassulusflix" = {
+    device = "prism.r:/export";
+    fsType = "nfs";
+  };
+
   networking.hosts = {
     "42:0:ca48:f98f:63d7:31ce:922b:245d" = [ "go" ];
   };
 
-  services.tinc.networks.retiolum = {
-    rsaPrivateKeyFile = config.age.secrets.retiolum-rsa.path;
-    ed25519PrivateKeyFile = config.age.secrets.retiolum-ed25519.path;
+  networking.retiolum = {
+    scardanelli = {
+      ipv4 = "10.243.2.2";
+      ipv6 = "42:0:3c46:4007:5bce:f1bc:606b:2b18";
+    };
+    homeros = {
+      ipv4 = "10.243.2.1";
+      ipv6 = "42:0:3c46:53e:e63d:e62a:56ea:c705";
+    };
+    catullus = {
+      ipv4 = "10.243.2.3";
+      ipv6 = "42:0:3c46:3ec0:7aad:d1d5:9842:da4c";
+    };
+    wilde = {
+      ipv4 = "10.243.2.4";
+      ipv6 = "42:0:3c46:907c:1fb8:b74f:c59b:1ee3";
+    };
+  }.${config.networking.hostName};
+
+  environment.etc."tinc/retiolum/rsa_key.priv" = {
+    text = builtins.readFile <secrets/retiolum.key>;
+    mode = "400";
   };
 }

configs/rofi.nix

@@ -1,19 +1,39 @@
-{ pkgs, ... }:
-{
+{ config, ... }:
+with config.niveum; {
   home-manager.users.me.programs.rofi = {
     enable = true;
-    pass = {
-      enable = true;
-      extraConfig = ''
-        _pwgen() {
-          ${pkgs.genpass}/bin/genpass "$@"
-        }
-
-        USERNAME_field='login'
-        default_user2=kmein
-        help_color="#FF0000"
-      ''; # help_color set by https://github.com/mrossinek/dotfiles/commit/13fc5f24caa78c8f20547bf473266879507f13bf
+    separator = "solid";
+    scrollbar = false;
+    terminal = applications.terminal;
+    borderWidth = 0;
+    lines = 5;
+    font = "${fonts.terminal.name} ${toString (fonts.terminal.size + 1)}";
+    colors = rec {
+      window = rec {
+        background = colours.foreground;
+        border = background;
+        separator = colours.black.bright;
+      };
+      rows = {
+        normal = {
+          background = window.background;
+          backgroundAlt = window.background;
+          foreground = colours.background;
+          highlight = { foreground = colours.cyan.dark; inherit (window) background; };
+        };
+        active = {
+          background = window.background;
+          backgroundAlt = window.background;
+          foreground = colours.yellow.dark;
+          highlight = { foreground = colours.green.dark; inherit (window) background; };
+        };
+        urgent = {
+          background = window.background;
+          backgroundAlt = window.background;
+          foreground = colours.red.dark;
+          highlight = { foreground = colours.magenta.dark; inherit (window) background; };
+        };
+      };
     };
-    plugins = [ pkgs.rofi-calc ];
   };
 }

configs/save-space.nix

@@ -3,14 +3,7 @@
   documentation.enable = false;
   documentation.info.enable = false;
   documentation.man.enable = false;
-  documentation.man.generateCaches = false;
   fonts.fontconfig.enable = false;
   nix.gc.automatic = true;
   nix.optimise.automatic = true;
-  services.journald.extraConfig = "SystemMaxUse=500M";
-  # https://webzine.snowflake.ovh/issue-001.html -- garbage collect when less then 1 GB is available, make 3 GB fee
-  nix.extraOptions = ''
-    min-free = 1073741824
-    max-free = 3221225472
-  '';
 }