try out whether new krops fixes the nixpkgs rebuilding issue

systems wanted to build glibc all the time when updated

.bin/bvg.sh

@@ -0,0 +1,46 @@
+#!/bin/sh
+interesting="U6 N6 140 M46 184 N84"
+
+curl -sSL 'https://www.bvg.de/disruption-reports/q' \
+  --data-raw '{"variables":{},"query":"{
+    allDisruptions {
+      disruptions {
+        meldungsId
+        linie
+        verkehrsmittel
+        __typename
+        ... on Traffic {
+          datum
+          gueltigVonDatum
+          gueltigVonZeit
+          gueltigBisDatum
+          gueltigBisZeit
+          richtungName
+          richtungHafasId
+          beginnAbschnittName
+          beginnAbschnittHafasId
+          endeAbschnittName
+          endeAbschnittHafasId
+          textIntUrsache
+          sev
+          textIntAuswirkung
+          umfahrung
+          textWAPSMSUrsache
+          textWAPSMSAuswirkung
+          prioritaet
+          __typename
+        }
+      }
+      __typename
+    }
+  }"}' \
+  | jq --arg interesting "$interesting" '
+    .data.allDisruptions.disruptions
+    | map(select(
+      (.linie as $linie
+      | $interesting
+      | split(" ")
+      | index($linie))
+      and (.["__typename"] == "Traffic")
+    ))
+  '

.bin/csv2json

@@ -0,0 +1,14 @@
+#!/usr/bin/env python3
+
+import csv
+import json
+import sys
+import argparse
+
+parser = argparse.ArgumentParser()
+parser.add_argument("--delimiter", "-d", default=",", help="CSV field separator")
+
+args = parser.parse_args()
+
+if __name__ == "__main__":
+    json.dump(list(csv.DictReader(sys.stdin, delimiter=args.delimiter)), sys.stdout)

.bin/elm-publish-private

@@ -0,0 +1,7 @@
+#! /usr/bin/env nix-shell
+#! nix-shell -p "(import <nixpkgs> { overlays = [ (import ~/work/fysiweb/engiadina-pwa/devops/pkgs) ]; }).elm-publish-private"
+#! nix-shell -i bash
+
+set -efux
+
+exec elm-publish-private "$@"

.bin/json2csv

@@ -0,0 +1,24 @@
+#!/usr/bin/env python3
+import csv
+import json
+import sys
+
+if __name__ == "__main__":
+    json_list = json.load(sys.stdin)
+    if not isinstance(json_list, list):
+        print("JSON object is not a list.", file=sys.stderr)
+        sys.exit(1)
+    if len(json_list) == 0:
+        print("JSON list is empty.", file=sys.stderr)
+        sys.exit(1)
+    keys = set()
+    for element in json_list:
+        if isinstance(element, dict):
+            keys |= element.keys()
+        else:
+            print("Non-dict element:", element, file=sys.stderr)
+            sys.exit(1)
+    writer = csv.DictWriter(sys.stdout, fieldnames=list(keys))
+    writer.writeheader()
+    for element in json_list:
+        writer.writerow(element)

.bin/libib.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+session_id=7b638c194d9bda74f80043045018cc9e
+
+declare -A libraries
+
+libraries["Literatur"]=344428
+libraries["Sprache"]=344160
+libraries["Miscellanea"]=344427
+libraries["Wissenschaft"]=344429
+libraries["Relicta"]=565920
+
+for library in ${!libraries[@]}
+do
+  curl -sSL 'https://www.libib.com/library/functions/csv-export.php' -H "Cookie: PHPSESSID=$session_id" -d export="${libraries[$library]}" > "$library.csv"
+done

.bin/lit.awk

@@ -0,0 +1,17 @@
+BEGIN {
+  if (!comment) comment = "--";
+  if (!begin) begin = "\\begin{code}";
+  if (!end) end = "\\end{code}";
+}
+{
+  if ($0 == begin) {
+    code = 1;
+    print comment, $0;
+  } else if ($0 == end) {
+    code = 0;
+    print comment, $0;
+  } else {
+    if (code) print $0;
+    else print comment, $0;
+  }
+}

.bin/mud.sh

@@ -0,0 +1 @@
+ssh mud@hotdog.r -t "MUD_NICKNAME=$LOGNAME mud"

.bin/proxies.sh

@@ -0,0 +1,17 @@
+#!/bin/sh
+curl -sSL https://www.netzwelt.de/proxy/index.html \
+  | pup ".tblc" \
+  | xml-to-json /dev/stdin \
+  | jq '
+    .div.table.tbody.tr
+    | map(
+      .td
+      | {
+        ip: .[0].a.value,
+        port: .[1],
+        country: .[2] | (if type == "string" then . else .a.value end),
+        security: .[3],
+        protocol: .[4]
+      }
+    )
+  '

.bin/sample-pdf.sh

@@ -0,0 +1,6 @@
+#!/bin/sh
+
+filepath="$(shuf --head-count=1)"
+pages="$(pdfinfo "$filepath" | awk '/^Pages:/{print $2}')"
+random_page="$(shuf --input-range="1-$pages" --head-count=1)"
+zathura --page="$random_page" "$filepath"

.bin/space.py

@@ -0,0 +1,49 @@
+import ephem
+from datetime import datetime, date, timedelta
+
+now = datetime.now()
+limit = now + timedelta(days=365)
+
+
+def events_until(limit):
+    initial_date = ephem.Date(datetime.now())
+    events = {}
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_full_moon(now)
+        events[now] = "🌕"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_new_moon(now)
+        events[now] = "🌑"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_vernal_equinox(now)
+        events[now] = "spring equinox"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_autumnal_equinox(now)
+        events[now] = "fall equinox"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_winter_solstice(now)
+        events[now] = "winter solstice"
+
+    now = initial_date
+    while ephem.localtime(now) <= limit:
+        now = ephem.next_summer_solstice(now)
+        events[now] = "summer solstice"
+    return events
+
+
+events = events_until(limit)
+
+
+for date, event in sorted(events.items(), key=lambda x: x[0]):
+    if ephem.localtime(date) < limit:
+        print(ephem.localtime(date), event)

.github/workflows/flake.yml

@@ -0,0 +1,19 @@
+name: Update flake.lock
+on:
+  workflow_dispatch: # allows manual triggering
+  schedule:
+    - cron: '0 0 * * 0' # runs weekly on Sunday at 00:00
+
+jobs:
+  lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+      - name: Install Nix
+        uses: cachix/install-nix-action@v16
+        with:
+          extra_nix_config: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@v3

.github/workflows/niveum.yml

@@ -0,0 +1,14 @@
+name: CI
+on:
+  push:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        system: [makanek,manakish,kabsa,zaatar]
+    steps:
+    - uses: actions/checkout@v2
+    - uses: cachix/install-nix-action@v16
+    - run: nix run .#build-${{matrix.system}}

.gitmodules

@@ -1,3 +0,0 @@
-[submodule "submodules/much"]
-	path = submodules/much
-	url = git@github.com:kmein/much

.versions/home-manager.json

@@ -1,10 +0,0 @@
-{
-  "url": "https://github.com/nix-community/home-manager.git",
-  "rev": "35a24648d155843a4d162de98c17b1afd5db51e4",
-  "date": "2021-06-21T00:35:57+02:00",
-  "path": "/nix/store/8n5b5wcdn1cqrbly2pqkin8ihl8b2vpv-home-manager",
-  "sha256": "06w327cvbqpi2fpl5rqk664vrl0ls0jqfkzx8vgvbcn1pmxsl0y3",
-  "fetchSubmodules": false,
-  "deepClone": false,
-  "leaveDotGit": false
-}

.versions/krops.json

@@ -1,10 +0,0 @@
-{
-  "url": "https://cgit.krebsco.de/krops",
-  "rev": "cccebf3ff7a53336b3f106cb96dddd5892d427ed",
-  "date": "2021-03-23T22:47:37+01:00",
-  "path": "/nix/store/mz13xxnil35lwsf90hwnrm2agir7hb51-krops",
-  "sha256": "07mg3iaqjf1w49vmwfchi7b1w55bh7rvsbgicp2m47gnj9alwdb6",
-  "fetchSubmodules": false,
-  "deepClone": false,
-  "leaveDotGit": false
-}

.versions/nixpkgs-mozilla.json

@@ -1,10 +0,0 @@
-{
-  "url": "https://github.com/mozilla/nixpkgs-mozilla",
-  "rev": "3f3fba4e2066f28a1ad7ac60e86a688a92eb5b5f",
-  "date": "2021-06-03T15:29:39+02:00",
-  "path": "/nix/store/aklhz1c8gppv2wrf64haa92qdl77f0jg-nixpkgs-mozilla",
-  "sha256": "1mrj89gzrzhci4lssvzmmk31l715cddp7l39favnfs1qaijly814",
-  "fetchSubmodules": false,
-  "deepClone": false,
-  "leaveDotGit": false
-}

.versions/nixpkgs-unstable.json

@@ -1,10 +0,0 @@
-{
-  "url": "https://github.com/NixOS/nixpkgs.git",
-  "rev": "243f958b402bdd9988bcddb9c47a87f7d3217747",
-  "date": "2021-06-22T10:32:18+02:00",
-  "path": "/nix/store/vc9pcmshay8w5s7ckz1ki39lqjnnh1af-nixpkgs",
-  "sha256": "0anjbab55a2vrvg9z1g1gbik0144061dnacdnpr14c24z9imph1a",
-  "fetchSubmodules": false,
-  "deepClone": false,
-  "leaveDotGit": false
-}

.versions/nixpkgs.json

@@ -1,10 +0,0 @@
-{
-  "url": "https://github.com/NixOS/nixpkgs.git",
-  "rev": "6613a30c5e3ee59753181512b4bedd4121569925",
-  "date": "2021-06-20T08:54:10+02:00",
-  "path": "/nix/store/42zxs37vyv499x4xvwypq06sap92v9qs-nixpkgs",
-  "sha256": "18v74cwjcl7qkdhgc8xic9fvp3330dsc82ah4xs3qzl5ks2h9d5h",
-  "fetchSubmodules": false,
-  "deepClone": false,
-  "leaveDotGit": false
-}

.versions/nur.json

@@ -1,10 +0,0 @@
-{
-  "url": "https://github.com/nix-community/NUR",
-  "rev": "72a8957b6e54de28a193c13b16e9798371734d8b",
-  "date": "2021-06-22T07:46:21+00:00",
-  "path": "/nix/store/qdzfhwvq6a2mg0imn1prkc8vf2jx8w96-NUR",
-  "sha256": "1mya0b25r8bi9jhaz9bhhkgg8y1qhmg7jlgglz7j2gryhp7qv439",
-  "fetchSubmodules": false,
-  "deepClone": false,
-  "leaveDotGit": false
-}

.versions/retiolum.json

@@ -1,10 +0,0 @@
-{
-  "url": "https://github.com/krebs/retiolum",
-  "rev": "6eca607e1bb3d4088a5536344eb67a66d912a3f2",
-  "date": "2021-06-16T14:32:18+02:00",
-  "path": "/nix/store/szi4p83xs5n5diqncmrrwsp7bk4h3llm-retiolum",
-  "sha256": "1kzxqpqgvvz4rva3mfq0l3ri7ggnx96pwzmsp2f016xpiz8brf0y",
-  "fetchSubmodules": false,
-  "deepClone": false,
-  "leaveDotGit": false
-}

.versions/stockholm.json

@@ -1,10 +0,0 @@
-{
-  "url": "https://cgit.krebsco.de/stockholm",
-  "rev": "6c1f1c26e7a5e2d11cc8a1d43d86568c760af526",
-  "date": "2021-06-18T20:59:04+02:00",
-  "path": "/nix/store/4g1qxaxjba1c6nk64z7j653w5wy4k2k1-stockholm",
-  "sha256": "16af154q7bf4i15ywc3zs3dhzc96lnd276wdl7h0a7c6wk59xa1w",
-  "fetchSubmodules": false,
-  "deepClone": false,
-  "leaveDotGit": false
-}

README.md

@@ -0,0 +1,10 @@
+# niveum
+
+> [nĭvĕus](https://logeion.uchicago.edu/niveus), a, um, adj. [nix], _of_ or _from snow, snowy, snow-_ (poet.)
+>
+> 1. Lit.: aggeribus niveis informis, Verg. G. 3, 354: aqua, _cooled with snow_, Mart. 12, 17, 6; cf. id. 14, 104 and 117: mons, _covered with snow_, Cat. 64, 240.—
+>
+> 2. Transf., _snow-white, snowy_ (mostly poet.): a similitudine sic: Corpore niveum candorem, aspectu igneum ardorem assequebatur, Auct. Her. 4, 33, 44: lacerti, Verg. A. 8, 387: lac, id. E. 2, 20: hanc si capite niveae agnae exorari judicas, Sen. Q. N. 2, 36: Briseis niveo colore, Hor. C. 2, 4, 3: vestis, Ov. M. 10, 432: candidior nivei folio, Galatea, ligustri, id. ib. 13, 789: dens, id. H. 18, 18: quā notam duxit niveus videri, Hor. C. 4, 2, 59: panis, Juv. 5, 70: flumen, _clear, pellucid_, Sen. Hippol. 504: undae, Mart. 7, 32, 11: tribuni, _clothed in white togas_, Calp. Ecl. 7, 29; so, Quirites, Juv. 10, 45.
+
+## Pressestimmen
+> das ist ja pure poesie —[xkey](https://github.com/riotbib)

ci.nix

@@ -0,0 +1,67 @@
+{ inputs, system, name }:
+let
+  inherit (inputs) nixpkgs;
+  pkgs = nixpkgs.legacyPackages.${system};
+  ensureFiles = paths: pkgs.runCommand "directory" {} ''
+    set -efu
+    mkdir $out
+    cd $out
+    ${nixpkgs.lib.concatMapStringsSep "\n" (path: ''
+      mkdir -p "$(dirname ${nixpkgs.lib.escapeShellArg path})"
+      echo foo > ${nixpkgs.lib.escapeShellArg path}
+    '') paths}
+  '';
+  nixPath = nixpkgs.lib.concatStringsSep ":" ([
+    "niveum=${toString ./.}"
+    "nixos-config=${toString ./.}/systems/${name}/configuration.nix"
+    "system-secrets=${systemSecrets}"
+    "secrets=${sharedSecrets}"
+  ] ++ nixpkgs.lib.mapAttrsToList (name: value: "${name}=${value}") inputs);
+  # cd ~/.password-store/shared && find * -type f | sed 's/.gpg$//'
+  sharedSecrets = ensureFiles [
+    "di.fm/key"
+    "eduroam/identity"
+    "eduroam/password"
+    "mail/cock"
+    "mail/fastmail"
+    "mail/gmail/amroplay"
+    "mail/gmail/kieran.meinhardt"
+    "mail/meinhaki"
+    "mail/posteo"
+    "nextcloud-fysi/password"
+    "nextcloud/password"
+    "openweathermap.key"
+    "restic/password"
+    "traadfri.key"
+    "wifi/Aether.psk"
+    "spotify/username"
+    "spotify/password"
+  ];
+  systemSecrets = let basic = [ "retiolum.ed25519" "retiolum.key" "syncthing/cert.pem" "syncthing/key.pem"]; in {
+    zaatar = ensureFiles ([ "moodle.token" "telegram/moodle-dl.token" "mpd-web.key" ] ++ basic);
+    kabsa = ensureFiles basic;
+    manakish = ensureFiles basic;
+    makanek = ensureFiles ([
+      "irc/retiolum"
+      "irc/hackint"
+      "irc/libera"
+      "irc/oftc"
+      "matrix/nibbana"
+      "maxmind/license.key"
+      "moodle-dl/faye.token"
+      "nextcloud/admin"
+      "nextcloud/database"
+      "telegram/nachtischsatan.token"
+      "telegram/reverse.token"
+      "telegram/odyssey.token"
+      "telegram/betacode.token"
+      "telegram/moodle-dl.token"
+      "telegram/proverb.token"
+      "telegram/menstruation.token"
+      "telegram/cool_village.token"
+      "telegram/kmein.token"
+      "telegram/prometheus.token"
+      "weechat/relay"
+    ] ++ basic);
+  }.${name};
+in toString (pkgs.writers.writeDash "build" "NIX_PATH=${nixPath} nix-build '<nixpkgs/nixos>' -A system --dry-run")

configs/backup.nix

@@ -0,0 +1,44 @@
+{ pkgs, config, ... }:
+let
+  inherit (import <niveum/lib>) restic;
+in
+{
+  services.restic.backups.niveum = {
+    initialize = true;
+    inherit (restic) repository;
+    timerConfig = { OnCalendar = "8:00"; RandomizedDelaySec = "1h"; };
+    passwordFile = toString <secrets/restic/password>;
+    extraBackupArgs = [
+      "--exclude=/home/kfm/projects/nixpkgs/.git"
+      "--exclude=node_modules"
+    ];
+    paths = [
+      "/home/kfm/work"
+      "/home/kfm/projects"
+      "/home/kfm/cloud"
+      "/home/kfm/.gnupg"
+      "/home/kfm/.ssh"
+    ];
+  };
+
+  systemd.services.restic-backups-niveum.serviceConfig = {
+    Restart = "on-failure";
+    RestartSec = "15s";
+    StartLimitIntervalSec = "1m"; # don't try more than 4 times
+    StartLimitBurst = 4;
+  };
+
+  environment.systemPackages = [
+    (pkgs.writers.writeDashBin "restic-niveum" ''
+      ${pkgs.restic}/bin/restic -r ${restic.repository} -p ${<secrets/restic/password>} "$@"
+    '')
+    (pkgs.writers.writeDashBin "restic-mount" ''
+      mountdir=$(mktemp -d)
+      trap clean EXIT
+      clean() {
+        rm -r "$mountdir"
+      }
+      ${pkgs.restic}/bin/restic -r ${restic.repository} -p ${<secrets/restic/password>} mount "$mountdir"
+    '')
+  ];
+}

configs/beets.nix

@@ -0,0 +1,11 @@
+{ lib, pkgs, ... }:
+{
+  environment.systemPackages = [ pkgs.beets ];
+  home-manager.users.me.xdg.configFile = {
+    "beets/config.yaml".source = (pkgs.formats.yaml {}).generate "config.yaml" {
+      directory = "~/cloud/syncthing/music";
+      library = "~/cloud/syncthing/common/music.db";
+      plugins = toString [ "fetchart" "lastgenre" ];
+    };
+  };
+}

configs/chromium.nix

@@ -10,7 +10,7 @@
     ];
   };
 
-  environment.systemPackages = [ pkgs.chromium pkgs.brave ];
+  environment.systemPackages = [ pkgs.brave ];
 
   environment.variables.BROWSER = "brave";
 }

configs/cloud.nix

@@ -4,7 +4,7 @@
   ];
 
   niveum = {
-    dropbox.enable = true;
+    dropbox.enable = false;
   };
 
   system.activationScripts.home-symlinks = ''
@@ -14,7 +14,31 @@
   '';
 
   home-manager.users.me = {
-    services.nextcloud-client.enable = true;
+    services.nextcloud-client = {
+      enable = true;
+      startInBackground = true;
+    };
+  };
+
+  environment.systemPackages = [
+    (pkgs.writers.writeDashBin "book" ''
+      set -efu
+      book="$({
+        ${pkgs.findutils}/bin/find ${config.users.users.me.home}/cloud/syncthing/library -type f
+        ${pkgs.findutils}/bin/find ${config.users.users.me.home}/cloud/Seafile/Books -type f
+      } | ${pkgs.fzf}/bin/fzf)"
+      ${pkgs.zathura}/bin/zathura "$book"
+    '')
+  ];
+
+  fileSystems."/media/moodle" = {
+    device = "zaatar.r:/moodle";
+    fsType = "nfs";
+    options = [
+      "x-systemd.idle-timeout=600"
+      "noauto"
+      "x-systemd.automount"
+    ];
   };
 
   services.syncthing = rec {
@@ -23,22 +47,19 @@
     openDefaultPorts = true;
     configDir = "/home/kfm/.config/syncthing";
     dataDir = "/home/kfm/.config/syncthing";
-    declarative = rec {
-      cert = toString <system-secrets/syncthing/cert.pem>;
-      key = toString <system-secrets/syncthing/key.pem>;
-      inherit ((import <niveum/lib>).syncthing) devices;
-      folders =
-        let cloud-dir = "${config.users.users.me.home}/cloud";
-        in {
-          "${cloud-dir}/syncthing/common".devices = [ "wilde" "manakish" ];
-          "${cloud-dir}/syncthing/library".devices = [ "wilde" "manakish" "heym" ];
-          "${cloud-dir}/syncthing/mundoiu".devices = [ "wilde" "manakish" "heym" ];
-          "${cloud-dir}/syncthing/music".devices = [ "wilde" "manakish" "heym" ];
-          "${cloud-dir}/moodle" = {
-            devices = [ "wilde" "toum" "manakish" ];
-            id = "moodle-dl";
-          };
+    cert = toString <system-secrets/syncthing/cert.pem>;
+    key = toString <system-secrets/syncthing/key.pem>;
+    inherit ((import <niveum/lib>).syncthing) devices;
+    folders =
+      let cloud-dir = "${config.users.users.me.home}/cloud";
+      in {
+        "${cloud-dir}/syncthing/common".devices = [ "kabsa" "manakish" ];
+        "${cloud-dir}/syncthing/library".devices = [ "kabsa" "manakish" "heym" ];
+        "${cloud-dir}/syncthing/mundoiu".devices = [ "kabsa" "manakish" "heym" ];
+        "${cloud-dir}/syncthing/music" = {
+          devices = [ "kabsa" "manakish" "heym" "zaatar" ];
+          id = "music";
         };
-    };
+      };
   };
 }

configs/copyq.nix

@@ -0,0 +1,37 @@
+{ config, pkgs, ... }:
+let
+  copyqConfig = pkgs.writers.writeDash "copyq-config" ''
+    ${pkgs.copyq}/bin/copyq config check_clipboard true
+    ${pkgs.copyq}/bin/copyq config check_selection false
+    ${pkgs.copyq}/bin/copyq config copy_clipboard true
+    ${pkgs.copyq}/bin/copyq config copy_selection false
+
+    ${pkgs.copyq}/bin/copyq config activate_closes true
+    ${pkgs.copyq}/bin/copyq config clipboard_notification_lines 0
+    ${pkgs.copyq}/bin/copyq config clipboard_tab \&clipboard
+    ${pkgs.copyq}/bin/copyq config disable_tray false
+    ${pkgs.copyq}/bin/copyq config hide_tabs false
+    ${pkgs.copyq}/bin/copyq config hide_toolbar false
+    ${pkgs.copyq}/bin/copyq config item_popup_interval true
+    ${pkgs.copyq}/bin/copyq config maxitems 1000
+    ${pkgs.copyq}/bin/copyq config move true
+    ${pkgs.copyq}/bin/copyq config text_wrap true
+  '';
+in {
+  environment.systemPackages = [ pkgs.copyq ];
+
+  systemd.user.services.copyq = {
+    wantedBy = [ "graphical-session.target" ];
+    environment = {
+      DISPLAY = ":${toString config.services.xserver.display}";
+    };
+    serviceConfig = {
+      SyslogIdentifier = "copyq";
+      ExecStart = "${pkgs.copyq}/bin/copyq";
+      ExecStartPost = copyqConfig;
+      Restart = "always";
+      RestartSec = "15s";
+      StartLimitBurst = 0;
+    };
+  };
+}

configs/default.nix

@@ -15,16 +15,14 @@ in {
         "nixpkgs-overlays=${toString ../overlays}"
       ];
     }
-    { services.dbus.packages = [ pkgs.gnome3.dconf ]; }
     {
       nixpkgs = {
         config = {
           allowUnfree = true;
           packageOverrides = pkgs: {
-            nur = import <nur> { inherit pkgs; };
-            writeDashBin = pkgs.writers.writeDashBin;
-            writeDash = pkgs.writers.writeDash;
+            dmenu = pkgs.writers.writeDashBin "dmenu" ''exec ${pkgs.rofi}/bin/rofi -dmenu "$@"'';
             gfs-fonts = pkgs.callPackage <niveum/packages/gfs-fonts.nix> {};
+            tocharian-font = pkgs.callPackage <niveum/packages/tocharian-font.nix> {};
             iolanguage = pkgs.callPackage <niveum/packages/iolanguage.nix> { };
             ix = pkgs.callPackage <niveum/packages/ix.nix> { };
           };
@@ -33,9 +31,6 @@ in {
           (self: super: {
             scripts = import <niveum/packages/scripts> { pkgs = super; lib = super.lib; };
           })
-          (import <stockholm/krebs/5pkgs/haskell>)
-          (import <stockholm/submodules/nix-writers/pkgs>)
-          (import <stockholm/krebs/5pkgs/override>)
         ];
       };
     }
@@ -69,6 +64,7 @@ in {
       };
 
       home-manager.users.me.xdg.enable = true;
+      home-manager.users.me.dconf.enable = false;
     }
     {
       sound.enable = true;
@@ -141,8 +137,7 @@ in {
           "${pkgs.youtube-dl}/bin/youtube-dl --add-metadata -xic"; # Download with audio
       };
     }
-    { i18n.defaultLocale = "en_GB.UTF-8"; }
-    { services.illum.enable = true; }
+    { i18n.defaultLocale = "en_DK.UTF-8"; }
     {
       services.xserver = {
         enable = true;
@@ -163,8 +158,16 @@ in {
     }
     {
       security.wrappers = {
-        pmount.source = "${pkgs.pmount}/bin/pmount";
-        pumount.source = "${pkgs.pmount}/bin/pumount";
+        pmount = {
+          owner = "root";
+          group = "users";
+          source = "${pkgs.pmount}/bin/pmount";
+        };
+        pumount = {
+          owner = "root";
+          group = "users";
+          source = "${pkgs.pmount}/bin/pumount";
+        };
       };
     }
     { programs.command-not-found.enable = true; }
@@ -192,14 +195,15 @@ in {
       }) localAddresses;
     }
     ./alacritty.nix
+    ./backup.nix
     ./bash.nix
+    ./beets.nix
     ./bluetooth.nix
     ./ccc.nix
-    ./kleiter.nix
     ./khal.nix
-    ./engiadina.nix
     ./chromium.nix
     ./cloud.nix
+    ./copyq.nix
     ./compton.nix
     ./direnv.nix
     ./distrobump.nix
@@ -208,23 +212,23 @@ in {
     ./flix.nix
     ./fonts.nix
     ./fzf.nix
-    ./gaslight.nix
     ./git.nix
     ./hledger.nix
     ./htop.nix
     ./hu-berlin.nix
     ./i3.nix
-    ./keybase.nix
     ./keyboard.nix
-    ./mail/client.nix
+    ./lb.nix
     ./mpv.nix
     ./mime.nix
-    ./nano.nix
     ./neovim.nix
+    ./neomutt.nix
     ./nix.nix
     ./newsboat.nix
     ./flameshot-once.nix
-    ./packages
+    ./packages.nix
+    ./stardict.nix
+    ./polkit.nix
     ./power-action.nix
     ./printing.nix
     ./openweathermap.nix
@@ -240,13 +244,10 @@ in {
     ./sxiv.nix
     ./theming.nix
     ./tmux.nix
-    ./tor.nix
     ./traadfri.nix
     ./unclutter.nix
-    ./version.nix
     ./vscode.nix
     ./watson.nix
-    ./wifi.nix
     ./zsh.nix
   ];
 }

configs/direnv.nix

@@ -11,8 +11,7 @@ let
       cat > shell.nix <<'EOF'
     { pkgs ? import <nixpkgs> {} }:
     pkgs.mkShell {
-      buildInputs = with pkgs; [];
-      shellHook = "export HISTFILE=''${toString ./.history}";
+      buildInputs = [];
     }
     EOF
       ''${EDITOR:-vim} shell.nix

configs/docker.nix

@@ -1,5 +1,12 @@
-{ pkgs, ... }: {
-  virtualisation.docker.enable = true;
+{ lib, pkgs, ... }: {
+  virtualisation.docker = {
+    enable = true;
+    # for ICE wifi, ref https://gist.github.com/sunsided/7840e89ff4e11b64a2d7503fafa0290c
+    extraOptions = lib.concatStringsSep " " [
+      "--bip=172.39.1.5/24"
+      "--fixed-cidr=172.39.1.0/25"
+    ];
+  };
   users.users.me.extraGroups = [ "docker" ];
   environment.systemPackages = [ pkgs.docker pkgs.docker_compose ];
 }

configs/engiadina.nix

@@ -1,30 +0,0 @@
-{ config, pkgs, ... }:
-let
-  inherit (import <niveum/lib>) tmpfilesConfig;
-  cdnRoot = "/var/lib/engiadina";
-in
-{
-  imports = [ <stockholm/krebs/3modules/permown.nix> ];
-
-  krebs.permown.${cdnRoot} = {
-    owner = config.users.users.me.name;
-    group = "users";
-    umask = "0002";
-  };
-
-  services.nginx = {
-    enable = true;
-    virtualHosts.default = {
-      root = cdnRoot;
-      listen = [{
-        addr = "0.0.0.0";
-        port = 3333;
-      }];
-    };
-  };
-
-  environment.shellAliases = {
-    engiadina-watch = "${pkgs.findutils}/bin/find extra-src src | ${pkgs.entr}/bin/entr -s 'build-component && ${pkgs.rsync}/bin/rsync -avu dist/*.js ${cdnRoot}/'";
-    engiadina-edit = "$EDITOR ${cdnRoot}/index.html";
-  };
-}

configs/flameshot-once.nix

@@ -1,26 +1,42 @@
-{ config, lib, pkgs, ... }:
-{
-  home-manager.users.me = {
-    services.flameshot.enable = true;
-
-    xdg.configFile."flameshot/flameshot.ini".source = (pkgs.formats.ini {}).generate "flameshot.ini" {
-      General = {
-        disabledTrayIcon = true;
-        checkForUpdates = false;
-        contrastOpacity = 188;
-        savePath = "/tmp";
-        savePathFixed = true;
-        drawThickness = 0;
-        showStartupLaunchMessage = false;
-        filenamePattern = "shot_%F_%T";
+{ lib, pkgs, ... }:
+let
+  inherit (import <niveum/lib>) defaultApplications;
+  flameshot-once =
+    pkgs.callPackage <stockholm/krebs/5pkgs/simple/flameshot-once> {};
+in {
+  environment.systemPackages = [
+    (flameshot-once.override {
+      config = {
+        imgur = {
+          enable = true;
+          createUrl = "http://p.r/image";
+          deleteUrl = "http://p.r/image/delete/%1";
+          xdg-open.browser = (defaultApplications pkgs).browser;
+        };
+        timeout = 1000;
+        drawColor = "#ff0000";
+        drawThickness = 2;
+        showDesktopNotification = true;
+        buttons = [
+          "ARROW"
+          "BLUR"
+          "CIRCLE"
+          "CIRCLECOUNT"
+          "COPY"
+          "DRAWER"
+          "EXIT"
+          "IMAGEUPLOADER"
+          "MARKER"
+          "MOVESELECTION"
+          "PENCIL"
+          "RECTANGLE"
+          "SAVE"
+          "SELECTION"
+          "SELECTIONINDICATOR"
+          "TEXT"
+          "UNDO"
+        ];
       };
-    };
-
-    systemd.user.services.flameshot.Unit.Requires = lib.mkForce [];
-    systemd.user.services.flameshot.Environment = {
-      # IMGUR_CREATE_URL = "https://p.krebsco.de/image";
-      # IMGUR_DELETE_URL = "https://p.krebsco.de/image/delete/%1";
-      PATH = "${config.home-manager.users.me.home.profileDirectory}/bin";
-    };
-  };
+    })
+  ];
 }

configs/flix.nix

@@ -18,7 +18,6 @@ in {
       "x-systemd.device-timeout=1"
       "x-systemd.idle-timeout=1min"
       "x-systemd.requires=tinc.retiolum.service"
-      "x-systemd.requires=wpa_supplicant.service"
       "user"
       "_netdev"
     ];
@@ -51,11 +50,11 @@ in {
     isSystemUser = true;
     createHome = true;
     home = cacheLocation;
-    extraGroups = [ flixGroup ];
+    group = flixGroup;
   };
 
   environment.systemPackages = [
-    (pkgs.writeDashBin "mpv-simpsons" ''
+    (pkgs.writers.writeDashBin "mpv-simpsons" ''
       set -efu
       cd "${flixLocation}/download"
       [ -f "${cacheLocation}/${indexFilename}" ] || exit 1
@@ -65,7 +64,7 @@ in {
         | shuf \
         | ${pkgs.findutils}/bin/xargs -d '\n' ${pkgs.mpv}/bin/mpv
     '')
-    (pkgs.writeDashBin "flixmenu" ''
+    (pkgs.writers.writeDashBin "flixmenu" ''
       set -efu
       cd "${flixLocation}/download"
 

configs/fonts.nix

@@ -5,6 +5,8 @@
     enableDefaultFonts = true;
     fontDir.enable = true;
     fonts = with pkgs; [
+      alegreya
+      alegreya-sans
       corefonts
       eb-garamond
       fira
@@ -28,9 +30,10 @@
       jetbrains-mono
       twemoji-color-font
       joypixels
+      tocharian-font
     ];
     fontconfig.defaultFonts = {
-      monospace = [ "JetBrains Mono" ];
+      monospace = [ "JetBrains Mono" "JoyPixels" ];
       serif = [ "Roboto Slab" ];
       sansSerif = [ "Roboto" "Noto Sans" ];
       emoji = [ "JoyPixels" ];

configs/git.nix

@@ -7,7 +7,6 @@ in
     pkgs.mr
     pkgs.git
     pkgs.gitAndTools.gitflow
-    pkgs.gitAndTools.hub
     pkgs.gitAndTools.gh
     pkgs.gitAndTools.git-extras
     pkgs.gitAndTools.git-trim
@@ -23,37 +22,6 @@ in
   };
 
   home-manager.users.me = {
-    home.file.".mrconfig".text = let
-      prependPath = prefix:
-        lib.attrsets.mapAttrs'
-        (path: lib.attrsets.nameValuePair "${prefix}/${path}");
-      git = url: { checkout = "git clone ${url}"; };
-      github = owner: repo: git "git@github.com:${owner}/${repo}";
-      keybase = owner: repo: git "keybase://private/${owner}/${repo}";
-    in lib.generators.toINI { } ({
-      DEFAULT = { git_gc = ''git gc "$@"''; };
-    } // prependPath "projects" {
-      "menstruation.rs" = github "kmein" "menstruation.rs";
-      brockman = github "kmein" "brockman";
-      challenges = github "kmein" "challenges";
-      conlangs = github "kmein" "conlangs";
-      ledger = keybase "kmein" "ledger";
-      mahlzeit = github "kmein" "mahlzeit";
-      menstruation-telegram = github "kmein" "menstruation-telegram";
-      meteora = github "kmein" "meteora";
-      modernizr = github "kmein" "modernizr";
-      niveum = github "kmein" "niveum";
-      nixpkgs = github "NixOS" "nixpkgs";
-      poetry = github "kmein" "poetry";
-      quotes = github "kmein" "quotes";
-      sphinx = github "kmein" "sphinx";
-      stockholm = git "https://cgit.krebsco.de/stockholm";
-      telebots = github "kmein" "telebots";
-      traadfri = github "kmein" "traadfri";
-      wissen = github "kmein" "wissen";
-      zen = github "kmein" "zen";
-    });
-
     programs.git = {
       enable = true;
       package = pkgs.gitAndTools.gitFull;
@@ -78,25 +46,13 @@ in
         pull.ff = "only";
         rebase.autoStash = true;
         merge.autoStash = true;
-        core.pager =
-          "${pkgs.gitAndTools.diff-so-fancy}/bin/diff-so-fancy | ${pkgs.less}/bin/less --tabs=4 -RFX";
-        color = {
-          ui = true;
-          diff = {
-            meta = "11";
-            frag = "magenta bold";
-            commit = "yellow bold";
-            old = "red bold";
-            new = "green bold";
-            whitespace = "red reverse";
-          };
-          diff-highlight = {
-            oldNormal = "red bold";
-            oldHighlight = "red bold 52";
-            newNormal = "green bold";
-            newHighlight = "green bold 22";
-          };
-        };
+
+        # ref https://github.com/dandavison/delta
+        core.pager = "${pkgs.delta}/bin/delta";
+        interactive.diffFilter = "${pkgs.delta}/bin/delta --color-only";
+        delta.navigate = true;
+        merge.conflictStyle = "diff3";
+        diff.colorMoved = "default";
       };
     };
   };

configs/hass/default.nix

@@ -1,61 +0,0 @@
-{ config, pkgs, lib, ... }:
-let
-  inherit (import ./lib.nix) triggers;
-  inherit (import <niveum/lib>) localAddresses;
-in
-{
-  imports = [
-    ./zigbee.nix
-    ./frontend.nix
-  ];
-
-  services.home-assistant = {
-    enable = true;
-    configWritable = true;
-    lovelaceConfigWritable = true;
-    openFirewall = true;
-    config = {
-      homeassistant = {
-        name = "Toum";
-        latitude = config.location.latitude;
-        longitude = config.location.longitude;
-        elevation = 90; # TODO find out how high I live
-        unit_system = "metric";
-        time_zone = config.time.timeZone;
-      };
-      config = {};
-      discovery = {};
-      system_health = {};
-      history = {};
-      # tradfri.host = localAddresses.tradfri; # dont use until python3Packages.pytradfri is packaged
-      sun = {};
-      mobile_app = {};
-      shopping_list = {};
-      sensor = [
-        {
-          platform = "dwd_weather_warnings";
-          region_name = "Berlin";
-        }
-      ];
-      mqtt = {
-        broker = "localhost";
-        port = 1883;
-        client_id = "home-assistant";
-        username = "albrecht";
-        password = lib.strings.fileContents <system-secrets/mosquitto>;
-        keepalive = 60;
-        protocol = "3.1";
-
-        discovery = true;
-        birth_message = {
-          topic = "/hass/status";
-          payload = "online";
-        };
-        will_message = {
-          topic = "/hass/status";
-          payload = "offline";
-        };
-      };
-    };
-  };
-}

configs/hass/frontend.nix

@@ -1,37 +0,0 @@
-let
-  inherit (import ./lib.nix) triggers;
-in
-{
-  services.home-assistant.config = {
-    frontend = {
-      themes = {
-        day_theme = import ./themes/clear.nix;
-        night_theme = import ./themes/clear-dark.nix;
-      };
-    };
-    automation = [
-      {
-        alias = "Night Theme";
-        hide_entity = true;
-        trigger = triggers.night;
-        action = [
-          {
-            service = "frontend.set_theme";
-            data.name = "night_theme";
-          }
-        ];
-      }
-      {
-        alias = "Day Theme";
-        hide_entity = true;
-        trigger = triggers.day;
-        action = [
-          {
-            service = "frontend.set_theme";
-            data.name = "day_theme";
-          }
-        ];
-      }
-    ];
-  };
-}

configs/hass/lib.nix

@@ -1,16 +0,0 @@
-{
-  triggers = {
-    night = {
-      platform = "numeric_state";
-      entity_id = "sun.sun";
-      value_template = "{{ state.attributes.elevation }}";
-      below = -4.0;
-    };
-    day = {
-      platform = "numeric_state";
-      entity_id = "sun.sun";
-      value_template = "{{ state.attributes.elevation }}";
-      above = 0;
-    };
-  };
-}

configs/hass/themes/clear-dark.nix

@@ -1,72 +0,0 @@
-rec {
-# Colors
- text-color = "#DADADB"; # Grey text
- text-medium-light-color = "#A0A2A8"; # Medium-light grey text
- text-medium-color = "#80828A"; # Medium grey text
- text-dark-color = "#6A6B74"; # Dark grey text
- accent-color = "#008bef"; # Blue
- accent-medium-color = "#2484C9"; # Decent blue
- background-color = "#3b4049"; # Dark grey background
- background-color-2 = "#484E59"; # Light grey background
- background-card-color = "#434952"; # Grey background
- border-color = "#383C46"; # Grey border
-
- # Header
- app-header-background-color = "#363941"; # Background color
-
- # Text
- primary-color = text-color;
- text-primary-color = text-color;
-
- # Left Menu
- paper-listbox-background-color = background-color; # Background
- sidebar-icon-color = text-medium-color; # icons
- sidebar-selected-icon-color = text-medium-light-color; # Selected row icon and background (15%)
- sidebar-selected-text-color = text-color; # Selected row label
-
- # UI
- paper-card-header-color = text-color; # Title in settings
- primary-background-color = background-color; # Background (also title background in left menu)
- mdc-theme-primary = accent-medium-color; # Action Buttons (save, restart etc.)
- card-background-color = background-card-color; # Entity Registry Background
-
- # Card
- paper-card-background-color = background-card-color; # Background
- dark-primary-color = text-color;
- primary-text-color = text-color;
- paper-listbox-color = text-color;
- light-primary-color = text-dark-color;
- secondary-text-color = text-medium-color;
- disabled-text-color = text-dark-color;
- paper-dialog-button-color = text-color;
- secondary-background-color = background-color-2; # Background more info title
-
- # Icons
- paper-item-icon-color = text-dark-color; # Off
- paper-item-icon-active-color = accent-color; # On
-
- # Switches
- switch-checked-button-color = text-medium-light-color; # Knob On
- switch-unchecked-button-color = text-medium-light-color; # Knob Off
- switch-checked-track-color = "#009FFF"; # Background On
- switch-unchecked-track-color = "#767682"; # Background Off
-
- # Slider
- paper-slider-active-color = accent-color; # Line On
- paper-slider-knob-color = text-medium-light-color; # Knob On
- paper-slider-container-color = text-dark-color; # Line Off
- paper-slider-knob-start-color = text-medium-light-color; # Knob Off
-
- # Badges
- label-badge-text-color = text-color;
- label-badge-background-color = "rgba(54, 57, 65, 0.6)";
-
- # Shadows
- ha-card-box-shadow = "inset 0px 0px 0px 1px var(--border-color)";
-
- # HACS
- hacs-badge-color = accent-color; # New Badge
- hacs-status-installed = text-color; # Installed Icon
- hacs-status-pending-restart = text-dark-color; # Restart Icon
- hacs-status-pending-update = accent-color;
-}

configs/hass/themes/clear.nix

@@ -1,52 +0,0 @@
-rec {
-  text-color = "#636B75"; # Grey text
-  text-medium-color = "#8c96a5"; # Medium grey text
-  text-light-color = "#BAC0C6"; # Light grey text
-  accent-color = "#00a1ff"; # Blue
-  background-color = "#F7F8F9"; # Light grey background
-  background-color-2 = "#F4F5F6"; # Light grey background
-  background-card-color = "rgba(255,255,255,1.0)"; # White background
-  border-color = "#E8E8E8"; # Light grey border
-
-  # Header
-  primary-color = text-color; # Background
-  text-primary-color = "#FFF"; # Text
-
-  # Left Menu
-  paper-listbox-background-color = background-color; # Background
-  # TODO = Text and Icons
-
-  # UI
-  paper-card-header-color = text-color; # Title in settings
-  primary-background-color = background-color; # Background color (also title background in left menu)
-
-  # Card
-  paper-card-background-color = background-card-color; # Background
-  dark-primary-color = text-color;
-  primary-text-color = text-color;
-  paper-listbox-color = text-color;
-  light-primary-color = text-light-color;
-  secondary-text-color = text-medium-color;
-  disabled-text-color = text-light-color;
-  paper-dialog-button-color = text-color;
-  secondary-background-color = background-color-2; # Background more info title
-
-  # Icons
-  paper-item-icon-color = text-light-color; # Off
-  paper-item-icon-active-color = accent-color; # On
-
-  # Switches
-  switch-checked-button-color = "#FFF"; # Knob On
-  switch-unchecked-button-color = "#FFF"; # Knob Off
-  switch-checked-track-color = "#0077FF"; # Background On
-  switch-unchecked-track-color = disabled-text-color; # Background Off
-
-  # Slider
-  paper-slider-active-color = accent-color; # Line On
-  paper-slider-container-color = "#e5e7ea"; # Line Off
-  paper-slider-knob-color = text-light-color; # Knob On
-  paper-slider-knob-start-color = text-light-color; # Knob Off
-
-  # Shadows
-  ha-card-box-shadow = "inset 0px 0px 0px 1px var(--border-color)";
-}

configs/hass/zigbee.nix

@@ -1,102 +0,0 @@
-{ config, pkgs, lib, ... }:
-let
-  inherit (import <niveum/lib>) localAddresses;
-in
-{
-  services.zigbee2mqtt = {
-    enable = true;
-    config = {
-      permit_join = false;
-      homeassistant = true;
-      serial = {
-        port = "/dev/ttyACM0";
-        disable_led = true;
-      };
-      mqtt = {
-        discovery = true;
-        base_topic = "zigbee";
-        server = "mqtt://${localAddresses.toum}";
-        user = "albrecht";
-        password = lib.strings.fileContents <system-secrets/mosquitto>;
-      };
-    };
-  };
-
-  services.mosquitto = {
-    enable = true;
-    host = "0.0.0.0";
-    allowAnonymous = false;
-    checkPasswords = true;
-    users."albrecht" = {
-      password = lib.strings.fileContents <system-secrets/mosquitto>;
-      acl = [ "topic readwrite #" ];
-    };
-  };
-
-  networking.firewall.allowedTCPPorts = [ 1883 ];
-
-  environment.systemPackages = [ pkgs.mosquitto ];
-
-  services.home-assistant = {
-    config = {
-      switch = [
-        {
-          platform = "mqtt";
-          name = "zigbee2mqtt_join";
-          state_topic = "/zigbee2mqtt/bridge/config/permit_join";
-          command_topic = "/zigbee2mqtt/bridge/config/permit_join";
-          payload_on = "true";
-          payload_off = "false";
-        }
-      ];
-      timer.zigbee_permit_join = {
-        name = "Zigbee Time remaining";
-        duration = 120;
-      };
-      automation = [
-        # Automation to start timer when enable join is turned on
-        {
-          id = "zigbee_join_enabled";
-          alias = "";
-          hide_entity = "true";
-          trigger = {
-            platform = "state";
-            entity_id = "switch.zigbee2mqtt_join";
-            to = "on";
-          };
-          action = {
-            service = "timer.start";
-            entity_id = "timer.zigbee_permit_join";
-          };
-        }
-        # Automation to stop timer when switch turned off and turn off switch when timer finished
-        {
-          id = "zigbee_join_disabled";
-          hide_entity = "true";
-          trigger = [
-            {
-              platform = "event";
-              event_type = "timer.finished";
-              event_data.entity_id = "timer.zigbee_permit_join";
-            }
-            {
-              platform = "state";
-              entity_id = "switch.zigbee2mqtt_join";
-              to = "off";
-            }
-          ];
-          action = [
-            {
-              service = "timer.cancel";
-              data.entity_id = "timer.zigbee_permit_join";
-            }
-            {
-              service = "switch.turn_off";
-              entity_id = "switch.zigbee2mqtt_join";
-            }
-          ];
-        }
-      ];
-    };
-  };
-}

configs/hu-berlin.nix

@@ -6,23 +6,6 @@ let
     identity = fileContents <secrets/eduroam/identity>;
     password = fileContents <secrets/eduroam/password>;
   };
-  eduroamAuth = ''
-    key_mgmt=WPA-EAP
-    eap=TTLS
-    proto=RSN
-    identity="${eduroam.identity}"
-    anonymous_identity="anonymous@wlan.hu-berlin.de"
-    altsubject_match="DNS:srv1-radius.cms.hu-berlin.de;DNS:srv2-radius.cms.hu-berlin.de"
-    password="${eduroam.password}"
-    ca_cert="${
-      pkgs.fetchurl {
-        url =
-          "https://www.cms.hu-berlin.de/de/dl/netze/wlan/config/eduroam/t-telesec_globalroot_class_2.pem";
-        sha256 = "0if8aqd06sid7a0vw009zpa087wxcgdd2x6z2zs4pis5kvyqj2dk";
-      }
-    }"
-    phase2="auth=PAP"
-  '';
   hu-berlin-cifs-options = [
     "uid=${toString config.users.users.me.uid}"
     "gid=${toString config.users.groups.users.gid}"
@@ -31,17 +14,12 @@ let
     "username=meinhaki"
     "password=${lib.strings.fileContents <secrets/mail/meinhaki>}"
     "noauto"
-    "x-systemd.requires=openvpn-hu-berlin.service"
+    "x-systemd.requires=hu-vpn.service"
     "x-systemd.automount"
     "x-systemd.device-timeout=1"
     "x-systemd.idle-timeout=1min"
   ];
 in {
-  networking.wireless.networks = {
-    eduroam_5GHz.auth = eduroamAuth;
-    eduroam.auth = eduroamAuth;
-  };
-
   fileSystems."/media/hu-berlin/germpro2" = {
     device = "//hugerm31c.user.hu-berlin.de/germpro2/ling";
     fsType = "cifs";
@@ -54,14 +32,34 @@ in {
     options = hu-berlin-cifs-options;
   };
 
+
+  home-manager.users.me.programs.ssh = {
+    matchBlocks = {
+      "alew.hu-berlin.de" = {
+        user = "centos";
+        hostname = "141.20.187.219";
+      };
+    };
+  };
+
   environment.systemPackages = [
     (pkgs.writers.writeDashBin "hu-ip" ''
       ${pkgs.w3m}/bin/w3m -dump meineip.hu-berlin.de | head --lines=-4 | tail --lines=+3
     '')
+    (pkgs.writers.writePython3Bin "hu-eduroam-install"
+      {
+        libraries = with pkgs.python3Packages; [ distro pyopenssl dbus-python ];
+        flakeIgnore = [ "E501" "E123" "W504" "E722" "F821" "E226" "E126" "E265" "W291" ];
+      }
+      (builtins.readFile (builtins.fetchurl {
+        url = "https://www.cms.hu-berlin.de/de/dl/netze/wlan/config/eduroam/linux-installer/eduroam-linux-hub.py";
+        sha256 = "19x2kvwxx13265b2hj5fjf53g0liw6dw7xf9j9cav67cswmz60kf";
+      }))
+    )
   ];
 
   systemd.services.hu-vpn = {
-    enable = false;
+    enable = true;
     wants = [ "network-online.target" ];
     conflicts = [ "openvpn-hu-berlin.service" ];
     script = ''
@@ -69,7 +67,7 @@ in {
         host = forti-ssl.vpn.hu-berlin.de
         port = 443
         trusted-cert = 42193a913d276d9eb86217612956e1e6464d6f07bed5393a4787c87adc4bd359
-        username = ${eduroam.identity}
+        username = ${eduroam.identity}@split_tunnel
         password = ${eduroam.password}
       ''}
     '';

configs/i3.nix

@@ -30,6 +30,12 @@ let
       "devanagari" = pkgs.writers.writeDash "devanagari" ''
         ${pkgs.scripts.devanagari}/bin/devanagari
       '';
+      "curl" = pkgs.writers.writeDash "curl" ''
+        ${pkgs.curl}/bin/curl -fSs "$(${pkgs.coreutils}/bin/cat)"
+      '';
+      ocr = pkgs.writers.writeDash "ocr" ''
+        ${pkgs.tesseract4}/bin/tesseract -l eng+deu - stdout
+      '';
     };
   };
 
@@ -179,13 +185,16 @@ in {
         "${modifier}+Shift+q" = "kill";
         "${modifier}+Shift+r" = "restart";
 
-        "${modifier}+Shift+s" = "sticky toggle";
+        "${modifier}+z" = "sticky toggle";
         "${modifier}+Shift+z" = "floating toggle";
+
+        "${modifier}+s" = "scratchpad show";
+        "${modifier}+Shift+s" = "move scratchpad";
+
         "${modifier}+c" = "split h";
         "${modifier}+e" = "layout toggle split";
         "${modifier}+f" = "fullscreen toggle";
         "${modifier}+r" = "mode resize";
-        "${modifier}+s" = "layout stacking";
         "${modifier}+v" = "split v";
         "${modifier}+w" = "layout tabbed";
 
@@ -196,18 +205,20 @@ in {
         "${modifier}+0" = "exec ${pkgs.scripts.menu-calc}/bin/=";
 
         "${modifier}+Shift+w" = "exec ${pkgs.scripts.k-lock}/bin/k-lock";
-        "${modifier}+a" =
-          "exec --no-startup-id ${pkgs.rofi}/bin/rofi -display-window — -show window";
-        "${modifier}+d" = "exec --no-startup-id ${pkgs.dmenu}/bin/dmenu_run";
+        "${modifier}+d" = "exec ${pkgs.writers.writeDash "run" ''exec ${pkgs.rofi}/bin/rofi -modi run,window,ssh,filebrowser -show run''}";
         "${modifier}+Shift+d" = "exec ${
             pkgs.writers.writeDash "notemenu" ''
               set -efu
               PATH=$PATH:${
-                lib.makeBinPath [ pkgs.dmenu pkgs.findutils pkgs.coreutils ]
+                lib.makeBinPath [ pkgs.rofi pkgs.findutils pkgs.coreutils ]
               }
 
               cd ~/notes
-              note_file=$(find . -type f -printf "%T@ %p\n" | sort --reverse --numeric-sort | cut --delimiter=" " --fields=2 | dmenu -i)
+              note_file=$({
+                echo diary/$(date -I).md
+                echo diary/$(date -I -d yesterday).md
+                find . -type f -printf "%T@ %p\n" | sort --reverse --numeric-sort | cut --delimiter=" " --fields=2
+              } | rofi -dmenu -i -p 'notes')
               if test "$note_file"
               then
                 i3-sensible-terminal -e "$EDITOR" "$note_file"
@@ -223,23 +234,16 @@ in {
         "${modifier}+F10" = "exec ${pkgs.redshift}/bin/redshift -x";
         "${modifier}+F11" = "exec ${pkgs.xcalib}/bin/xcalib -invert -alter";
         "${modifier}+F12" = "exec ${klem}/bin/klem";
-
-        "Print" = "exec flameshot gui -p /tmp";
-        "XF86AudioLowerVolume" =
-          "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -d 5";
+        "Print" = "exec flameshot-once";
+        "XF86AudioLowerVolume" = "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -d 5";
         "XF86AudioMute" = "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -t";
-        "XF86AudioRaiseVolume" =
-          "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -i 5";
-        "XF86Calculator" =
-          "exec ${pkgs.st}/bin/st -c floating -e ${pkgs.bc}/bin/bc";
-        "XF86AudioPause" =
-          "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl pause";
-        "XF86AudioPlay" =
-          "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl play-pause";
-        "XF86AudioNext" =
-          "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl next";
-        "XF86AudioPrev" =
-          "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl previous";
+        "XF86AudioRaiseVolume" = "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -i 5";
+        "XF86Calculator" = "exec ${pkgs.st}/bin/st -c floating -e ${pkgs.bc}/bin/bc";
+        "XF86AudioPause" = "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl pause";
+        "XF86AudioPlay" = "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl play-pause";
+        "XF86AudioNext" = "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl next";
+        "XF86AudioPrev" = "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl previous";
+        "XF86AudioStop" = "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl stop";
         "XF86ScreenSaver" = "exec ${pkgs.scripts.k-lock}/bin/k-lock";
 
         "XF86Display" = "exec ${pkgs.scripts.dmenurandr}/bin/dmenurandr";

configs/keybase.nix

@@ -1,8 +0,0 @@
-{ config, ... }: {
-  services.keybase.enable = true;
-
-  services.kbfs = {
-    enable = true;
-    mountPoint = "%h/cloud/keybase";
-  };
-}

configs/khal.nix

@@ -1,9 +1,16 @@
 { config, pkgs, lib, ... }:
 let
   davHome = "~/.local/share/dav";
-  davEndpoint = "https://cloud.xn--kiern-0qa.de/remote.php/dav";
-  username = "kieran";
-  password = lib.fileContents <secrets/nextcloud/password>;
+  kmeinCloud = {
+    davEndpoint = "https://cloud.xn--kiern-0qa.de/remote.php/dav";
+    username = "kieran";
+    password = lib.fileContents <secrets/nextcloud/password>;
+  };
+  fysiCloud = {
+    davEndpoint = "https://nextcloud.fysi.dev/remote.php/dav";
+    username = "kmein";
+    password = lib.fileContents <secrets/nextcloud-fysi/password>;
+  };
 in
 {
   environment.systemPackages = [ pkgs.khal pkgs.vdirsyncer pkgs.khard pkgs.todoman ];
@@ -17,6 +24,10 @@ in
       ${pkgs.vdirsyncer}/bin/vdirsyncer sync
       ${pkgs.khal}/bin/khal printcalendars # https://lostpackets.de/khal/configure.html#syncing
     '';
+    serviceConfig = {
+      Type = "oneshot";
+      Restart = "on-failure";
+    };
   };
 
   home-manager.users.me = {
@@ -48,26 +59,48 @@ in
         skip_unparsable = no
       '';
 
-      "todoman/todoman.conf".text = ''
-        [main]
-        path = ${davHome}/calendar/*
-        date_format = %Y-%m-%d
-        time_format = %H:%M
+      "todoman/config.py".text = ''
+        path = "${davHome}/calendar/*"
+        date_format = "%Y-%m-%d"
+        time_format = "%H:%M"
         default_due = 0
-        default_list = Personal
+        default_list = "Personal"
         startable = True
       '';
 
       "khal/config".text = ''
         [calendars]
 
-        [[kalender_local]]
-        path = ${davHome}/calendar/*
-        type = discover
+        [[alew]]
+        path = ${davHome}/calendar/alew
+        color = "light gray"
+
+        [[personal]]
+        path = ${davHome}/calendar/personal
+        color = "light cyan"
+
+        [[uni]]
+        path = ${davHome}/calendar/uni-1
+        color = "yellow"
+
+        [[fysi]]
+        path = ${davHome}/calendar/fysi-1
+        color = "light magenta"
+
+        [[fysi_team]]
+        path = ${davHome}/calendar/personal_shared_by_fdf
+        color = "light red"
+
+        [[birthdays]]
+        path = ${davHome}/contacts/contacts
+        type = birthdays
+        color = "light green"
 
         [default]
         highlight_event_days = True
         timedelta = 5d
+        print_new = path
+        default_calendar = personal
 
         [locale]
         timeformat = %H:%M
@@ -93,7 +126,13 @@ in
         [pair kalender]
         a = "kalender_local"
         b = "kalender_cloud"
-        collections = ["from a", "from b"]
+        collections = ["personal", "alew", "uni-1"]
+        conflict_resolution = "b wins"
+
+        [pair fysi]
+        a = "kalender_local"
+        b = "fysi_cloud"
+        collections = ["fysi-1", "personal_shared_by_fdf"]
         conflict_resolution = "b wins"
 
         [storage kontakte_local]
@@ -108,15 +147,21 @@ in
 
         [storage kontakte_cloud]
         type = "carddav"
-        url = "${davEndpoint}/addressbooks/users/${username}/"
-        username = "${username}"
-        password = "${password}"
+        url = "${kmeinCloud.davEndpoint}/addressbooks/users/${kmeinCloud.username}/"
+        username = "${kmeinCloud.username}"
+        password = "${kmeinCloud.password}"
 
         [storage kalender_cloud]
         type = "caldav"
-        url = "${davEndpoint}/calendars/${username}/"
-        username = "${username}"
-        password = "${password}"
+        url = "${kmeinCloud.davEndpoint}/calendars/${kmeinCloud.username}/"
+        username = "${kmeinCloud.username}"
+        password = "${kmeinCloud.password}"
+
+        [storage fysi_cloud]
+        type = "caldav"
+        url = "${fysiCloud.davEndpoint}/calendars/${fysiCloud.username}/"
+        username = "${fysiCloud.username}"
+        password = "${fysiCloud.password}"
       '';
     };
   };

configs/kleiter.nix

@@ -1,13 +0,0 @@
-{ ... }:
-let ssid = "Kleiter Gast";
-in {
-  networking.wireless.networks.${ssid}.psk = "Kleiter-Gast";
-
-  # fix dns
-  systemd.network.networks.kleiter = {
-    dns = [ "8.8.8.8" "8.8.4.4" ];
-    networkConfig.DHCP = "yes";
-    matchConfig.Name = "wlp3s0";
-    matchConfig.SSID = ssid;
-  };
-}

configs/lb.nix

@@ -0,0 +1,24 @@
+{ lib, pkgs, ... }:
+{
+  systemd.services.lb-subscription = {
+    enable = true;
+    wants = [ "network-online.target" ];
+    startAt = "weekly";
+    serviceConfig = {
+      user = "kfm";
+      WorkingDirectory = "/home/kfm/cloud/Seafile/Books/Germanistik/LB";
+    };
+    script = ''
+      first_year=2019
+      for year in $(${pkgs.coreutils}/bin/seq "$first_year" "$(date +%Y)"); do
+        ${pkgs.curl}/bin/curl -sSL "https://www.literarische-blaetter.de/jahrgang-$year/" \
+          | ${pkgs.htmlq}/bin/htmlq --attribute href 'ul.slides a' \
+          | while read -r month; do
+            ${pkgs.curl}/bin/curl -sSL "$month" \
+              | ${pkgs.htmlq}/bin/htmlq --attribute src iframe \
+              | ${pkgs.gnused}/bin/sed 's/.*?pdf=//;s/?wp-hosted.*//'
+          done
+      done | ${pkgs.findutils}/bin/xargs ${pkgs.wget}/bin/wget --no-clobber
+    '';
+  };
+}

configs/mail/accounts.nix

@@ -1,145 +0,0 @@
-{ lib, ... }:
-let
-  inherit (import <niveum/lib>) kieran;
-
-  enableDefaults = lib.recursiveUpdate {
-    mbsync = {
-      enable = true;
-      create = "both";
-      expunge = "both";
-    };
-    msmtp.enable = true;
-    notmuch.enable = true;
-  };
-
-  settings = {
-    fastmail = {
-      smtp = {
-        host = "smtp.fastmail.com";
-        port = 465;
-        tls.enable = true;
-      };
-      imap = {
-        host = "imap.fastmail.com";
-        port = 993;
-        tls.enable = true;
-      };
-    };
-    cock = {
-      smtp = {
-        host = "mail.cock.li";
-        port = 587;
-        tls = {
-          enable = true;
-          useStartTls = true;
-        };
-      };
-      imap = {
-        host = "mail.cock.li";
-        port = 993;
-        tls.enable = true;
-      };
-    };
-    posteo = {
-      smtp = {
-        host = "posteo.de";
-        port = 587;
-        tls = {
-          enable = true;
-          useStartTls = true;
-        };
-      };
-      imap = {
-        host = "posteo.de";
-        port = 993;
-        tls.enable = true;
-      };
-    };
-    hu-berlin = {
-      smtp = {
-        host = "mailhost.cms.hu-berlin.de";
-        port = 25;
-        tls = {
-          enable = true;
-          useStartTls = true;
-        };
-      };
-      imap = {
-        host = "mailbox.cms.hu-berlin.de";
-        port = 993;
-        tls.enable = true;
-      };
-    };
-  };
-
-  # turns out we have to escape $ because, if the password contains a $, it will get interpolated as a variable by the msmtp `passwordeval` which does: `bash -c "COMMAND; echo"`
-  pass_ = file: "echo ${lib.escape ["$"] (lib.escapeShellArg (lib.strings.fileContents file))}";
-in
-{
-  fysi = enableDefaults {
-    primary = false;
-    userName = "kieran@fysi.tech";
-    address = "kieran@fysi.tech";
-    realName = kieran.name;
-    passwordCommand = pass_ <secrets/mail/fastmail>;
-    inherit (settings.fastmail) imap smtp;
-  };
-  cock = enableDefaults {
-    primary = false;
-    userName = "2210@cock.li";
-    address = "2210@cock.li";
-    realName = "2210";
-    passwordCommand = pass_ <secrets/mail/cock>;
-    inherit (settings.cock) imap smtp;
-  };
-  kieran-gmail = enableDefaults {
-    primary = false;
-    flavor = "gmail.com";
-    address = "kieran.meinhardt@gmail.com";
-    realName = kieran.name;
-    userName = "kieran.meinhardt";
-    passwordCommand = pass_ <secrets/mail/gmail/kieran.meinhardt>;
-    folders = {
-      drafts = "[Gmail]/Entw&APw-rfe";
-      sent = "[Gmail]/Gesendet";
-      trash = "[Gmail]/Papierkorb";
-    };
-  };
-  amroplay = enableDefaults {
-    primary = false;
-    flavor = "gmail.com";
-    address = "amroplay@gmail.com";
-    realName = kieran.name;
-    userName = "amroplay";
-    passwordCommand = pass_ <secrets/mail/gmail/amroplay>;
-    folders = {
-      drafts = "[Gmail]/Drafts";
-      sent = "[Gmail]/Sent Mail";
-      trash = "[Gmail]/Bin";
-    };
-  };
-  posteo = enableDefaults {
-    primary = true;
-    address = "kieran.meinhardt@posteo.net";
-    realName = kieran.name;
-    userName = "kieran.meinhardt@posteo.net";
-    passwordCommand = pass_ <secrets/mail/posteo>;
-    inherit (settings.posteo) imap smtp;
-  };
-  hu-berlin = enableDefaults {
-    primary = false;
-    address = "meinhark@hu-berlin.de";
-    realName = kieran.name;
-    userName = "meinhark";
-    passwordCommand = pass_ <secrets/eduroam/password>;
-    inherit (settings.hu-berlin) imap smtp;
-  };
-  hu-berlin-work = enableDefaults {
-    primary = false;
-    address = "meinhaki@hu-berlin.de";
-    realName = kieran.name;
-    userName = "meinhaki";
-    passwordCommand = pass_ <secrets/mail/meinhaki>;
-    inherit (settings.hu-berlin) imap smtp;
-  };
-}

configs/mail/client.nix

@@ -1,52 +0,0 @@
-{ config, pkgs, lib, ... }:
-let
-  inherit (import <niveum/lib>) email-sshKey;
-  much =
-    let
-      nixpkgs-much = import (pkgs.fetchFromGitHub {
-        owner = "NixOS";
-        repo = "nixpkgs";
-        rev = "7c2a362b58a1c2ba72d24aa3869da3b1a91d39e1";
-        sha256 = "0gl4xndyahasa9dv5mi3x9w8s457wl2xh9lcldizcn1irjvkrzs4";
-      }) {
-        overlays = [
-          (import <stockholm/krebs/5pkgs/haskell>)
-        ];
-      };
-      much-pkg = pkgs.haskellPackages.callCabal2nix "much" <niveum/submodules/much> {};
-    in nixpkgs-much.haskell.lib.dontHaddock much-pkg;
-in {
-  environment.variables.NOTMUCH_CONFIG = config.home-manager.users.me.home.sessionVariables.NOTMUCH_CONFIG;
-
-  users.users.me.openssh.authorizedKeys.keys = [ email-sshKey ];
-
-  environment.systemPackages = [
-    pkgs.notmuch-addrlookup
-
-    pkgs.muchsync
-
-    (pkgs.writers.writeDashBin "mua" ''
-      if [ $# -eq 0 ]; then
-        ${much}/bin/much-kmein
-      else
-        ${much}/bin/much-kmein -q "$*"
-      fi
-    '')
-
-    (pkgs.writers.writeDashBin "mail-clean" ''
-      ${pkgs.notmuch}/bin/notmuch search --output files --format=text0 tag:deleted | ${pkgs.findutils}/bin/xargs -r0 rm
-      ${pkgs.notmuch}/bin/notmuch new
-    '')
-  ];
-
-  home-manager.users.me = {
-    programs.notmuch = {
-      enable = true;
-      search.excludeTags = [ "deleted" "spam" ];
-    };
-
-    programs.msmtp.enable = true;
-
-    accounts.email.accounts = import ./accounts.nix { inherit lib; };
-  };
-}

configs/mail/fetcher.nix

@@ -1,80 +0,0 @@
-{ config, pkgs, lib, ... }:
-let
-  inherit (import <niveum/lib>) kieran sshPort;
-
-  tagRules = [
-    {
-      query = "to:miaengiadina-pwa@noreply.github.com AND subject:\"PR run failed\"";
-      tags = [ "-new" "+deleted" ];
-    }
-    {
-      query = lib.concatStringsSep " OR " [
-        "from:noreply-local-guides@google.com"
-        "from:google-maps-noreply@google.com"
-        "subject:fd-noti"
-        "from:nebenan.de"
-        "to:miaengiadina-pwa@noreply.github.com"
-      ];
-      tags = [ "-new" ];
-    }
-    {
-      query = "tag:new";
-      tags = [ "-new" "+inbox" ];
-    }
-  ];
-
-  generateTaggingScript = filters:
-    let
-      template = { tags, query, message ? "tagging ${query} -> ${lib.concatStringsSep " " tags}", ... }: ''
-        echo '${message}'
-        ${pkgs.notmuch}/bin/notmuch tag ${lib.concatStringsSep " " tags} -- "${query}"
-      '';
-    in lib.concatStringsSep "\n" (map template filters);
-in
-{
-  imports = [ <stockholm/krebs/3modules/secret.nix> ];
-
-  krebs.secret.files.email-ssh = {
-    path = "${config.users.users.email.home}/.ssh/id_ed25519";
-    owner.name = config.users.users.email.name;
-    source-path = toString <system-secrets> + "/email/ssh.key";
-  };
-
-  users.users.email = {
-    isNormalUser = true;
-    description = "fetching mails since 2021";
-  };
-
-  systemd.services.mail-sync =
-  let
-    hosts = [ "manakish.r" "wilde.r" ];
-  in {
-    enable = true;
-    wants = [ "network-online.target" config.krebs.secret.files.email-ssh.service ];
-    startAt = "*:0/3";
-    serviceConfig.User = config.users.users.email.name;
-    serviceConfig.Type = "oneshot";
-    environment.NOTMUCH_CONFIG = config.home-manager.users.email.home.sessionVariables.NOTMUCH_CONFIG;
-    path = [ pkgs.notmuch pkgs.openssh ];
-    script = ''
-      ${pkgs.isync}/bin/mbsync --all || true
-
-      ${lib.concatMapStringsSep "\n" (host: ''
-        echo === syncing ${host}
-        ${pkgs.muchsync}/bin/muchsync -s 'ssh -CTaxq -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o ConnectTimeout=4 -p ${toString sshPort}' kfm@${host} || :
-      '') hosts}
-    '';
-  };
-
-  home-manager.users.email = {
-    programs.mbsync.enable = true;
-
-    accounts.email.accounts = import ./accounts.nix { inherit lib; };
-
-    programs.notmuch = {
-      enable = true;
-      new.tags = [ "new" ];
-      hooks.postNew = generateTaggingScript tagRules;
-    };
-  };
-}

configs/monitoring.nix

@@ -0,0 +1,75 @@
+{ config, pkgs, ... }:
+{
+  services.nginx.virtualHosts.default = {
+    locations."= /stub_status".extraConfig = "stub_status;";
+  };
+
+  services.prometheus = {
+    enable = true;
+    port = 9001;
+    exporters = {
+      nginx.enable = false;
+      node = {
+        enable = true;
+        enabledCollectors = [
+          "conntrack"
+          "diskstats"
+          "entropy"
+          "filefd"
+          "filesystem"
+          "loadavg"
+          "mdadm"
+          "meminfo"
+          "netdev"
+          "netstat"
+          "stat"
+          "time"
+          "vmstat"
+          "systemd"
+          "logind"
+          "interrupts"
+          "ksmd"
+        ];
+        port = 9002;
+      };
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ config.services.prometheus.exporters.node.port ];
+
+  systemd.services.promtail = {
+    description = "Promtail service for Loki";
+    wantedBy = [ "multi-user.target" ];
+
+    serviceConfig = {
+      ExecStart = ''
+        ${pkgs.grafana-loki}/bin/promtail --config.file ${(pkgs.formats.yaml {}).generate "promtail.yaml" {
+          server = {
+            http_listen_port = 28183;
+            grpc_listen_port = 0;
+          };
+          positions.filename = "/tmp/positions.yaml";
+          clients = [
+            { url = "http://${if config.networking.hostName == "makanek" then "127.0.0.1" else "makanek.r"}:3100/loki/api/v1/push"; }
+          ];
+          scrape_configs = [
+            {
+              job_name = "journal";
+              journal = {
+                max_age = "12h";
+                labels.job = "systemd-journal";
+                labels.host = config.networking.hostName;
+              };
+              relabel_configs = [
+                {
+                  source_labels = [ "__journal__systemd_unit" ];
+                  target_label = "unit";
+                }
+              ];
+            }
+          ];
+        }}
+      '';
+    };
+  };
+}

configs/mpv.nix

@@ -1,4 +1,4 @@
-{ pkgs, ... }: let
+{ pkgs, lib, ... }: let
   swallow = command: "${pkgs.scripts.swallow}/bin/swallow ${command}";
 in {
   environment.shellAliases.smpv = swallow "mpv";
@@ -7,7 +7,8 @@ in {
     programs.mpv = {
       enable = true;
       config = {
-        ytdl-format = "bestvideo+bestaudio/best";
+        ytdl-raw-options = lib.concatStringsSep "," [ ''sub-lang="de,en"'' "write-sub=" "write-auto-sub=" ];
+        screenshot-template = "%F-%wH%wM%wS-%#04n";
       };
       bindings = {
         "Alt+RIGHT" = "add video-rotate 90";
@@ -19,6 +20,9 @@ in {
         "Alt+k" = "add video-pan-y 0.05";
         "Alt+j" = "add video-pan-y -0.05";
       };
+      scripts = [
+        pkgs.mpvScripts.youtube-quality
+      ];
     };
   };
 }

configs/nano.nix

@@ -1,10 +0,0 @@
-{
-  programs.nano.nanorc = ''
-    set autoindent
-    set boldtext
-    set morespace
-    set smarthome
-    set tabsize 4
-    set tabstospaces
-  '';
-}

configs/neomutt.nix

@@ -0,0 +1,248 @@
+{ pkgs, lib, ... }:
+let
+  mainMailbox = "posteo";
+
+  accounts.uni = {
+    user = "meinhark";
+    password = lib.strings.fileContents <secrets/eduroam/password>;
+    address = "kieran.felix.meinhardt@hu-berlin.de";
+    imap = "mailbox.cms.hu-berlin.de";
+    smtp = "mailhost.cms.hu-berlin.de";
+    smtpSettings = smtp: "smtp://${smtp}";
+    folders = {
+      drafts = "Drafts";
+      sent = "Sent";
+      trash = "Trash";
+    };
+  };
+
+  accounts.uni-old = {
+    user = "meinhark";
+    password = lib.strings.fileContents <secrets/eduroam/password>;
+    address = "meinhark@informatik.hu-berlin.de";
+    imap = "mailbox.informatik.hu-berlin.de";
+    smtp = "mailhost.informatik.hu-berlin.de";
+    smtpSettings = smtp: "smtp://${smtp}";
+    folders = {
+      drafts = "Drafts";
+      sent = "Sent";
+      trash = "Trash";
+    };
+  };
+
+  accounts.work-uni = {
+    user = "meinhaki";
+    password = lib.strings.fileContents <secrets/mail/meinhaki>;
+    address = "kieran.meinhardt@hu-berlin.de";
+    imap = "mailbox.cms.hu-berlin.de";
+    smtp = "mailhost.cms.hu-berlin.de";
+    smtpSettings = smtp: "smtp://${smtp}";
+    folders = {
+      drafts = "Drafts";
+      sent = "Sent";
+      trash = "Trash";
+    };
+  };
+
+  accounts.work-fysi = rec {
+    user = "kieran@fysi.tech";
+    address = user;
+    password = lib.strings.fileContents <secrets/mail/fastmail>;
+    imap = "imap.fastmail.com";
+    smtp = "smtp.fastmail.com";
+    smtpSettings = smtp: "smtps://${smtp}:465";
+    folders = {
+      drafts = "Drafts";
+      sent = "Sent";
+      trash = "Trash";
+    };
+  };
+
+  accounts.cock = rec {
+    user = "2210@cock.li";
+    address = user;
+    password = lib.strings.fileContents <secrets/mail/cock>;
+    imap = "mail.cock.li";
+    smtp = imap;
+    smtpSettings = smtp: "smtp://${smtp}:587";
+    folders = {
+      drafts = "Drafts";
+      sent = "Sent";
+      trash = "Trash";
+    };
+  };
+
+  accounts."${mainMailbox}" = rec {
+    user = "kieran.meinhardt@posteo.net";
+    address = user;
+    password = lib.strings.fileContents <secrets/mail/posteo>;
+    imap = "posteo.de";
+    smtp = imap;
+    smtpSettings = smtp: "smtp://${smtp}";
+    folders = {
+      drafts = "Drafts";
+      sent = "Sent";
+      trash = "Trash";
+    };
+  };
+
+  accounts.google-amro = rec {
+    user = "amroplay@gmail.com";
+    address = user;
+    password = lib.strings.fileContents <secrets/mail/gmail/amroplay>;
+    imap = "imap.gmail.com";
+    smtp = "smtp.gmail.com";
+    smtpSettings = smtp: "smtps://${smtp}:465";
+    folders = {
+      drafts = "[Gmail]/Drafts";
+      sent = "[Gmail]/Sent Mail";
+      trash = "[Gmail]/Bin";
+    };
+  };
+
+  accounts.google-kieran = rec {
+    user = "kieran.meinhardt@gmail.com";
+    address = user;
+    password = lib.strings.fileContents <secrets/mail/gmail/kieran.meinhardt>;
+    imap = "imap.gmail.com";
+    smtp = "smtp.gmail.com";
+    smtpSettings = smtp: "smtps://${smtp}:465";
+    folders = {
+      drafts = "[Gmail]/Entwürfe";
+      sent = "[Gmail]/Gesendet";
+      trash = "[Gmail]/Papierkorb";
+    };
+  };
+in
+{
+  environment.systemPackages = [ pkgs.neomutt ];
+  environment.shellAliases.mua = "${pkgs.neomutt}/bin/neomutt -f ${mainMailbox}←";
+
+  home-manager.users.me.xdg.configFile."neomutt/neomuttrc".text = ''
+    set mailcap_path = ${pkgs.writeText "mailcap" ''
+      text/plain; $EDITOR %s ;
+      text/html; ${pkgs.lynx}/bin/lynx -assume_charset=%{charset} -display_charset=utf-8 -dump %s; nametemplate=%s.html; copiousoutput;
+      image/*; ${pkgs.sxiv}/bin/sxiv %s ;
+      video/*; ${pkgs.utillinux}/bin/setsid ${pkgs.mpv}/bin/mpv --quiet %s &; copiousoutput
+      audio/*; ${pkgs.mpv}/bin/mpv %s ;
+      application/pdf; ${pkgs.zathura}/bin/zathura %s ;
+      application/pgp-encrypted; ${pkgs.gnupg}/bin/gpg -d '%s'; copiousoutput;
+      application/pgp-keys; ${pkgs.gnupg}/bin/gpg --import '%s'; copiousoutput;
+    ''}:$mailcap_path
+
+    set sidebar_visible
+    set sidebar_format = "%D%?F? [%F]?%* %?N?%N/?%S"
+    set sidebar_width = 25                  # Plenty of space
+    set sidebar_divider_char = '│'          # Pretty line-drawing character
+    set mail_check_stats
+
+    set index_format="%2C %Z %D %-15.15L %s"
+    set date_format="%F %R"
+
+    set sort = 'reverse-date'
+    set sleep_time = 0		# Pause 0 seconds for informational messages
+    set markers = no		# Disables the `+` displayed at line wraps
+    set mark_old = no		# Unread mail stay unread until read
+    set wait_key = no		# mutt won't ask "press key to continue"
+    set fast_reply			# skip to compose when replying
+    set forward_format = "Fwd: %s"	# format of subject when forwarding
+    set reverse_name		# reply as whomever it was to
+    set include=ask-no			# don't include message in replies
+    auto_view text/html		# automatically show html (mailcap uses lynx)
+    auto_view application/pgp-encrypted
+    alternative_order text/plain text/enriched text/html
+
+    set abort_noattach abort_noattach_regex="\<(attach|attached|attachments?|anbei|Anhang|angehängt)\>"
+    set attach_save_dir=/tmp
+    set fast_reply
+
+    set narrow_tree # narrow threads for more depth
+
+    bind index,pager B sidebar-toggle-visible   # Use 'B' to switch the Sidebar on and off
+    bind index,pager \Ck sidebar-prev
+    bind index,pager \Cj sidebar-next
+    bind index,pager \Co sidebar-open
+    bind index,pager \Cp sidebar-prev-new
+    bind index,pager \Cn sidebar-next-new
+
+    macro index * <limit>~F\r
+    macro index + <limit>all\r
+
+    set query_command = "khard email --parsable %s"
+    bind editor <Tab> complete-query
+    bind editor ^T    complete
+
+    set mail_check = 90
+    set timeout = 15
+    # set imap_check_subscribed
+    set use_from
+
+
+    set header_cache="~/.cache/mutt" message_cachedir="~/.cache/mutt"
+
+    source ${pkgs.writeText "accounts.neomuttrc" ''
+      set realname = "Kierán Meinhardt"
+      account-hook . 'unset imap_user imap_pass smtp_user smtp_pass'
+      # set accordingly: postponed trash record
+      ${lib.concatStringsSep "\n\n" (lib.mapAttrsToList (name: account: let imapRoot = "imaps://${account.user}@${account.imap}"; in ''
+        account-hook ${account.user}@${account.imap} 'set imap_user="${account.user}" imap_pass="${account.password}"'
+        account-hook ${account.user}@${account.smtp} 'set smtp_user="${account.user}" smtp_pass="${account.password}"'
+        folder-hook  ${account.user}@${account.imap} 'set smtp_url="${account.smtpSettings "${account.user}@${account.smtp}"}" from="${account.address}" record="${imapRoot}/${account.folders.sent}" postponed="${imapRoot}/${account.folders.drafts}" trash="${imapRoot}/${account.folders.trash}"'
+        named-mailboxes "${name}←" "${imapRoot}" "${name}→" "${imapRoot}/${account.folders.sent}"
+      '') accounts)}
+    ''}
+
+    set spoolfile="${mainMailbox}"
+
+    source ${pkgs.writeText "colors.neomuttrc" ''
+      # Default index colors:
+      color index_number blue default
+      color index red default '.*'
+      color index_flags lightcyan default '.*'
+      color index_author yellow default '.*'
+      color index_subject lightblack default '.*'
+
+      # New mail is boldened:
+      color index_author lightyellow black "~N"
+      color index_subject lightwhite black "~N"
+
+      # Flagged mail is highlighted:
+      color index_flags lightmagenta default '~F'
+
+      # Other colors and aesthetic settings:
+      mono bold bold
+      mono underline underline
+      mono error bold
+      mono indicator reverse
+      # color sidebar_flagged red black
+      mono sidebar_new bold
+      color error red default
+      color message cyan default
+      color search brightmagenta default
+      color hdrdefault lightblack default
+      color quoted green default
+      color quoted1 blue default
+      color quoted2 cyan default
+      color quoted3 yellow default
+      color quoted4 red default
+      color quoted5 brightred default
+      color signature lightblack default
+      color tree color235 default
+
+      # Regex highlighting:
+      color header red default "^(Date)"
+      color header yellow default "^(From)"
+      color header white default "^(B?CC)"
+      color header brightwhite default "^(Subject)"
+      color body cyan default "[\-\.+_a-zA-Z0-9]+@[\-\.a-zA-Z0-9]+" # Email addresses
+      color body brightblue default "(https?|ftp)://[\-\.,/%~_:?&=\#a-zA-Z0-9]+" # URL
+      color body yellow default "^(\t| )*(-|\\*) \.*" # List items as yellow
+      color body red default "(BAD signature)|^gpg: BAD signature from.*"
+      color body brightgreen default "(Good signature)|^gpg: Good signature .*"
+      color body brightyellow default "^gpg: "
+      mono body bold "^gpg: Good signature"
+      mono body bold "^gpg: BAD signature from.*"
+      color body red default "([a-z][a-z0-9+-]*://(((([a-z0-9_.!~*'();:&=+$,-]|%[0-9a-f][0-9a-f])*@)?((([a-z0-9]([a-z0-9-]*[a-z0-9])?)\\.)*([a-z]([a-z0-9-]*[a-z0-9])?)\\.?|[0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+)(:[0-9]+)?)|([a-z0-9_.!~*'()$,;:@&=+-]|%[0-9a-f][0-9a-f])+)(/([a-z0-9_.!~*'():@&=+$,-]|%[0-9a-f][0-9a-f])*(;([a-z0-9_.!~*'():@&=+$,-]|%[0-9a-f][0-9a-f])*)*(/([a-z0-9_.!~*'():@&=+$,-]|%[0-9a-f][0-9a-f])*(;([a-z0-9_.!~*'():@&=+$,-]|%[0-9a-f][0-9a-f])*)*)*)?(\\?([a-z0-9_.!~*'();/?:@&=+$,-]|%[0-9a-f][0-9a-f])*)?(#([a-z0-9_.!~*'();/?:@&=+$,-]|%[0-9a-f][0-9a-f])*)?|(www|ftp)\\.(([a-z0-9]([a-z0-9-]*[a-z0-9])?)\\.)*([a-z]([a-z0-9-]*[a-z0-9])?)\\.?(:[0-9]+)?(/([-a-z0-9_.!~*'():@&=+$,]|%[0-9a-f][0-9a-f])*(;([-a-z0-9_.!~*'():@&=+$,]|%[0-9a-f][0-9a-f])*)*(/([-a-z0-9_.!~*'():@&=+$,]|%[0-9a-f][0-9a-f])*(;([-a-z0-9_.!~*'():@&=+$,]|%[0-9a-f][0-9a-f])*)*)*)?(\\?([-a-z0-9_.!~*'();/?:@&=+$,]|%[0-9a-f][0-9a-f])*)?(#([-a-z0-9_.!~*'();/?:@&=+$,]|%[0-9a-f][0-9a-f])*)?)[^].,:;!)? \t\r\n<>\"]"
+    ''}
+  '';
+}

configs/neovim.nix

@@ -25,18 +25,13 @@
         customRC = builtins.readFile <niveum/lib/vim/init.vim>;
         packages.nvim = with pkgs.vimPlugins; {
           start = [
-            # cheat-sh-vim
-            # deoplete-nvim
-            # vim-abolish
             ale
             fzf-vim
             fzfWrapper
-            goyo
             supertab
             undotree
             tabular
-            vimwiki
-            vim-256noir
+            # vimwiki
             vim-colors-paramount
             vim-commentary
             vim-css-color
@@ -44,34 +39,26 @@
             vim-fetch
             vim-fugitive
             vim-gitgutter
-            vim-pandoc
-            vim-pandoc-syntax # vim-pandoc-after
             vim-repeat
             vim-sensible
-            # vim-startify
             vim-surround
-            vim-mail
           ];
           opt = [
             csv
-            dhall-vim
             elm-vim
             emmet-vim
             haskell-vim
             icalendar-vim
-            idris-vim
-            nim-vim
             jq-vim
-            purescript-vim
             rust-vim
             typescript-vim
-            vim-fsharp
             vim-javascript
             vim-ledger
             vim-nix
-            vim-reason-plus
-            vim-toml
             vimtex
+            vim-pandoc
+            vim-pandoc-syntax
+            vim-256noir
           ];
         };
       };

configs/networkmanager.nix

@@ -0,0 +1,86 @@
+{ lib, pkgs, ... }:
+let
+  profile = name: custom: lib.recursiveUpdate {
+    connection.id = name;
+    connection.type = "wifi";
+    connection.interface-name = "wlp3s0";
+    connection.permissions = "";
+    wifi.mac-address-blacklist = "";
+    wifi.ssid = name;
+    wifi.mode = "infrastructure";
+    ipv4.dns-search = "";
+    ipv4.method = "auto";
+    ipv6.addr-gen-mode = "stable-privacy";
+    ipv6.dns-search = "";
+    ipv6.method = "auto";
+    proxy = {};
+  } custom;
+  eduroamProfile = {
+    connection.uuid = "eae9fee6-a7d2-4120-a609-440b457d6fcf";
+    wifi-security = {
+      group = "ccmp;tkip;";
+      key-mgmt = "wpa-eap";
+      pairwise = "ccmp;";
+      proto = "rsn;";
+    };
+    "802-1x" = {
+      altsubject-matches = "DNS:srv1-radius.cms.hu-berlin.de;DNS:srv2-radius.cms.hu-berlin.de;";
+      anonymous-identity = "anonymous@wlan.hu-berlin.de";
+      ca-cert = pkgs.fetchurl {
+        url = "https://www.cms.hu-berlin.de/de/dl/netze/wlan/config/eduroam/t-telesec_globalroot_class_2.pem";
+        sha256 = "0if8aqd06sid7a0vw009zpa087wxcgdd2x6z2zs4pis5kvyqj2dk";
+      };
+      eap = "ttls;";
+      identity = lib.strings.fileContents <secrets/eduroam/identity>;
+      password = lib.strings.fileContents <secrets/eduroam/password>;
+      phase2-auth = "pap";
+    };
+  };
+in
+{
+  imports = [ <niveum/modules/networkmanager-declarative.nix> ];
+
+  networking.networkmanager = {
+    enable = true;
+    wifi.macAddress = "random";
+    ethernet.macAddress = "random";
+    unmanaged = [ "docker*" ];
+    profiles = lib.mapAttrs profile {
+      Aether = {
+        connection.uuid = "7138bb0f-1aeb-4905-890e-a6628427aa21";
+        ipv6.addr-gen-mode = "stable";
+        wifi.cloned-mac-address = "stable";
+        wifi-security = {
+          psk = lib.strings.fileContents <secrets/wifi/Aether.psk>;
+          auth-alg = "open";
+          key-mgmt = "wpa-psk";
+        };
+      };
+      FactoryCommunityGuest = {
+        connection.uuid = "fb1f2e52-651e-48b5-a72c-1accddf31afb";
+        connection.timestamp = "1631885129";
+        wifi.seen-bssids = "54:EC:2F:19:30:DC;54:EC:2F:19:5C:9C;54:EC:2F:58:E4:3C;";
+        wifi-security = {
+          psk = "Factory4ever";
+          auth-alg = "open";
+          key-mgmt = "wpa-psk";
+        };
+      };
+      o2-WLAN66 = {
+        connection.uuid = "c563aec3-f344-4ffb-8d1c-60a6cdac8fe0";
+        wifi-security = {
+          psk = "PK3468KV488T934U";
+          auth-alg = "open";
+          key-mgmt = "wpa-psk";
+        };
+      };
+      "WIFI@DB".connection.uuid = "4eff4e94-8850-4e9f-a338-1787d0d90479";
+      eduroam = eduroamProfile;
+      eduroam_5GHz = eduroamProfile;
+    };
+  };
+
+  users.users.me.extraGroups = [ "networkmanager" ];
+
+  environment.systemPackages = [ pkgs.speedtest-cli ];
+}

configs/newsboat.nix

@@ -2,8 +2,10 @@
 let
   ytdl-format = "'bestvideo[height<=?720][fps<=?30][vcodec!=?vp9]+bestaudio/best'";
 
+  youtube-download = "${pkgs.ts}/bin/ts ${pkgs.youtube-dl}/bin/youtube-dl -f ${ytdl-format} --add-metadata";
+
   newsboat-home =
-    "${config.users.users.me.home}/cloud/syncthing/common/newsboat";
+    "${config.users.users.me.home}/cloud/Seafile/Documents/newsboat";
   linkhandler-bin = "${pkgs.scripts.linkhandler}/bin/linkhandler";
 
   newsboat-config = pkgs.writeText "config" ''
@@ -22,7 +24,7 @@ let
     macro , open-in-browser
     macro c set browser "${pkgs.xsel}/bin/xsel -b <<<" ; open-in-browser ; set browser ${linkhandler-bin}
     macro v set browser "${pkgs.utillinux}/bin/setsid -f ${pkgs.mpv}/bin/mpv" ; open-in-browser ; set browser ${linkhandler-bin}
-    macro y set browser "${pkgs.ts}/bin/ts ${pkgs.youtube-dl}/bin/youtube-dl -f ${ytdl-format} --add-metadata" ; open-in-browser ; set browser ${linkhandler-bin}
+    macro y set browser "${youtube-download}" ; open-in-browser ; set browser ${linkhandler-bin}
 
     bind-key j down
     bind-key k up
@@ -69,5 +71,11 @@ in {
     '';
   };
 
-  environment.systemPackages = [ pkgs.newsboat ];
+  environment.systemPackages = [
+    pkgs.newsboat
+    (pkgs.writers.writeDashBin "mpv-watch-later" ''
+      ${pkgs.sqlite}/bin/sqlite3 ${newsboat-home}/cache.db "SELECT url FROM rss_item WHERE flags='e' AND deleted=0 ORDER BY pubDate DESC" \
+        | ${pkgs.findutils}/bin/xargs ${pkgs.mpv}/bin/mpv
+    '')
+  ];
 }

configs/nix.nix

@@ -1,10 +1,14 @@
 { pkgs, ... }:
 {
-  # enable `nix flake`
+  nixpkgs = {
+    config.allowUnfree = true;
+    overlays = [
+      (import <nix-writers/pkgs>)
+      (import <stockholm/krebs/5pkgs>)
+    ];
+  };
   nix = {
-    package = pkgs.nix;
-    # extraOptions = ''
-    #   experimental-features = nix-command
-    # '';
+    package = pkgs.nixUnstable;
+    extraOptions = "experimental-features = nix-command flakes";
   };
 }

configs/packages.nix

@@ -0,0 +1,264 @@
+{ pkgs, lib, ... }:
+let
+  hc = pkgs.callPackage <stockholm/tv/5pkgs/simple/hc.nix> {};
+  worldradio = pkgs.callPackage <niveum/packages/worldradio.nix> {};
+  menstruation = pkgs.callPackage <menstruation-backend> {};
+  pandoc-doc = pkgs.callPackage <niveum/packages/man/pandoc.nix> {};
+
+  nixpkgs-unstable = import <nixpkgs-unstable> { config.allowUnfree = true; };
+
+  zoteroStyle = { name, sha256 }: {
+    name = "${name}.csl";
+    path = pkgs.fetchurl {
+      url = "https://www.zotero.org/styles/${name}";
+      inherit sha256;
+    };
+  };
+  cslDirectory = pkgs.linkFarm "citation-styles" [
+    (zoteroStyle {
+      name = "chicago-author-date-de";
+      sha256 = "0fz0xn46rkciblr34a7x2v60j0lbq9l3fmzi43iphph27m0czn6s";
+    })
+    (zoteroStyle {
+      name = "din-1505-2";
+      sha256 = "1pvy1b7qm13mnph7z365rrz1j082bl2y8ih73rhzd0zd6dz1jyjq";
+    })
+    (zoteroStyle {
+      name = "apa";
+      sha256 = "1878vxp0y0h05yzaghnd51n981623mxskw3lsdyzmffqhihvv111";
+    })
+  ];
+
+
+  astrolog = nixpkgs-unstable.astrolog.overrideAttrs (old: old // {
+    installPhase = ''
+      ${old.installPhase}
+      # set sensible defaults
+      sed -i '
+        /^-z /s/8:00W/1:00E/ # timezone
+        /^-zl /s/122W19:59 47N36:35/13E22:42 52N27:42/ # default location
+        /^-zj /s/"Current moment now"/Now/ # default name
+        /^-zj /s/"Seattle, WA, USA"/Berlin/ # default location
+        /^_k/s/_k/=k/ # use color
+        /^_Yd/s/_Yd/=Yd/ # sensible date format
+        /^_Yt/s/_Yt/=Yt/ # sensible time format
+        /^_Yv/s/_Yv/=Yv/ # sensible length format
+        /^:Xbw/s/:Xbw/:Xbn/ # set X11 bitmap format
+        /^:I /s/80/120/ # wider text output
+      ' $out/astrolog/astrolog.as
+    '';
+  });
+
+  recht = pkgs.callPackage <recht> {};
+
+in {
+  home-manager.users.me.home.file = {
+    ".csl".source = cslDirectory;
+    ".local/share/pandoc/csl".source = cslDirectory; # as of pandoc 2.11, it includes citeproc
+  };
+
+  environment.systemPackages = with pkgs; [
+    # INTERNET
+    aria2
+    firefox
+    tdesktop
+    w3m
+    wget
+    whois
+    dnsutils
+    # FILE MANAGERS
+    ranger
+    pcmanfm
+    # MEDIA
+    ffmpeg
+    imagemagick
+    exiftool
+    # ARCHIVE TOOLS
+    unzip
+    unrar
+    p7zip
+    zip
+    # MONITORS
+    htop
+    iotop # I/O load monitor
+    iftop # interface bandwidth monitor
+    lsof # list open files
+    psmisc # for killall, pstree
+    # SHELL
+    bat # better cat
+    fd # better find
+    file # determine file type
+    dos2unix
+    ncdu # ncurses disk usage
+    python3Packages.jsonschema # json validation
+    jq # json toolkit
+    pup # html toolkit
+    htmlq
+    xsv # csv toolkit
+    xmlstarlet # xml toolkit
+    manpages
+    posix_man_pages
+    tree
+    fuse_exfat # to mount windows drives
+    parallel # for parallel, since moreutils shadows task spooler
+    ripgrep # better grep
+    rlwrap
+    progress # display progress bars for pipes
+    # HARDWARE TOOLS
+    usbutils # for lsusb
+    pciutils # for lspci
+    lshw # for lshw
+    arandr # xrandr for noobs
+    libnotify # for notify-send
+    xclip # clipboard CLI
+    dragon-drop # drag and drop
+    xorg.xkill # kill by clicking
+    audacity
+    calibre
+    inkscape
+    astrolog
+    anki # flashcards
+    jbofihe # lojbanic software
+    nixpkgs-unstable.zoom-us # video conferencing
+    pdfgrep # search in pdf
+    pdftk # pdf toolkit
+    mupdf
+    poppler_utils # pdf toolkit
+    foxitreader # for viewing pdf annotations
+    xournalpp # for annotating pdfs
+    pdfpc # presenter console for pdf slides
+    hc # print files as qr codes
+    youtubeDL
+    espeak
+    bc # calculator
+    pari # gp -- better calculator
+    scripts.auc
+    scripts.infschmv
+    scripts.qrpaste
+    scripts.ttspaste
+    scripts.new-mac # get a new mac address
+    scripts.scanned
+    scripts.default-gateway
+    scripts.showkeys-toggle
+    scripts.kirciuoklis
+    scripts.favicon
+    scripts.ipa # XSAMPA to IPA converter
+    scripts.playlist
+    scripts.mpv-tv
+    scripts.devanagari
+    scripts.betacode # ancient greek betacode to unicode converter
+    scripts.meteo
+    scripts.mahlzeit
+    recht
+    scripts.vimv
+    scripts.swallow # window swallowing
+    scripts.literature-quote
+    scripts.nav # json navigation
+    scripts.notetags
+    scripts.booksplit
+    scripts.dmenurandr
+    scripts.interdimensional-cable
+    scripts.dmenubluetooth
+    scripts.manual-sort
+    scripts.much-scripts
+    scripts.dns-sledgehammer
+    ts
+    scripts.vg
+    scripts.fkill
+    scripts.wttr
+    scripts.unicodmenu
+    scripts.horoscope
+    scripts.closest
+    scripts.trans
+    scripts.mpv-radio
+    # kmein.slide
+    scripts.tolino-screensaver
+    scripts.rfc
+    scripts.tag
+    scripts.timer
+    python3Packages.eyeD3
+    scripts.menu-calc
+    nix-prefetch-git
+    scripts.nix-git
+    nixfmt
+    par
+    qrencode
+
+    menstruation
+
+    (pkgs.writers.writeDashBin "worldradio" ''
+      shuf ${worldradio} | ${pkgs.findutils}/bin/xargs ${pkgs.mpv}/bin/mpv --no-video
+    '')
+
+    (pkgs.writers.writeDashBin "chats" ''
+      ${pkgs.openssh}/bin/ssh makanek "cd /var/lib/weechat/logs && grep --ignore-case --color=always --recursive $@" | ${pkgs.less}/bin/less --raw-control-chars
+    '')
+
+    (pkgs.writers.writeDashBin "ncmpcpp-zaatar" ''MPD_HOST=${(import <niveum/lib/local-network.nix>).zaatar} exec ${pkgs.ncmpcpp}/bin/ncmpcpp "$@"'')
+    (pkgs.writers.writeDashBin "mpc-zaatar" ''MPD_HOST=${(import <niveum/lib/local-network.nix>).zaatar} exec ${pkgs.mpc_cli}/bin/mpc "$@"'')
+
+    spotify
+    ncspot
+    playerctl
+
+    nix-index
+    scripts.nix-index-update
+
+    #krebs
+    dic
+    cyberlocker-tools
+    untilport
+    kpaste
+    irc-announce
+    git-preview
+    ircaids
+
+    (python3.withPackages (py: [
+      py.black
+      # py.python-language-server
+      # py.pyls-mypy
+      # py.pyls-black
+      # py.pyls-isort
+      py.flake8
+      py.pygments
+      py.schema
+    ]))
+    python3Packages.poetry
+
+    htmlTidy
+    nodePackages.csslint
+    nodePackages.jsonlint
+    nodePackages.prettier
+    nodePackages.typescript
+    nodePackages.yarn
+    nodejs
+    nodePackages.javascript-typescript-langserver
+    texlive.combined.scheme-full
+    latexrun
+    (aspellWithDicts (dict: [ dict.de dict.en dict.en-computers ]))
+    # haskellPackages.pandoc-citeproc
+    scripts.text2pdf
+    lowdown
+    glow # markdown to term
+    libreoffice
+    # gnumeric
+    dia
+    pandoc
+    pandoc-doc
+    # proselint
+    asciidoctor
+    wordnet
+    tokei # count lines of code
+    gnumake
+    binutils # for strip, ld, ...
+    # nightly.rust
+    shellcheck
+  ];
+
+
+  home-manager.users.me.xdg.configFile."pycodestyle".text = ''
+    [pycodestyle]
+    max-line-length = 110
+  '';
+
+}

configs/packages/default.nix

@@ -1,188 +0,0 @@
-{ pkgs, lib, ... }:
-let
-  hc = pkgs.callPackage <stockholm/tv/5pkgs/simple/hc.nix> {};
-  worldradio = pkgs.callPackage <niveum/packages/worldradio.nix> {};
-  nixpkgs-unstable = import <nixpkgs-unstable> { config.allowUnfree = true; };
-
-  recht = pkgs.callPackage (pkgs.fetchFromGitHub {
-    owner = "kmein";
-    repo = "recht";
-    rev = "0.6.2";
-    sha256 = "08gnrnz3lwh8h6fyga56yfy9qryzm89xbshm7wpxfyxf2pmp1qfx";
-  }) {};
-
-in {
-  imports = [
-    ./krebs.nix
-    ./writing.nix
-    ./python.nix
-    ./haskell
-    {
-      environment.systemPackages = let
-        # nightly = pkgs.rustChannelOf {
-        #   date = "2019-12-27";
-        #   channel = "nightly";
-        # };
-      in with pkgs; [
-        htmlTidy
-        nodePackages.csslint
-        nodePackages.jsonlint
-        nodePackages.prettier
-        nodePackages.typescript
-        nodePackages.yarn
-        nodejs
-        nodePackages.javascript-typescript-langserver
-
-        tokei # count lines of code
-        gnumake
-        binutils # for strip, ld, ...
-        # nightly.rust
-        shellcheck
-      ];
-    }
-  ];
-
-  environment.systemPackages = with pkgs; [
-    # INTERNET
-    aria2
-    # firefox
-    tdesktop
-    w3m
-    wget
-    httpie
-    whois
-    ddgr
-    ix
-    nur.repos.kmein.python3Packages.instaloader
-    dnsutils
-    # mtr # my traceroute
-    # FILE MANAGERS
-    ranger
-    pcmanfm
-    # MEDIA
-    ffmpeg
-    imagemagick
-    exiftool
-    scrot
-    # ARCHIVE TOOLS
-    unzip
-    unrar
-    p7zip
-    zip
-    # MONITORS
-    htop
-    iotop # I/O load monitor
-    iftop # interface bandwidth monitor
-    lsof # list open files
-    psmisc # for killall, pstree
-    # SHELL
-    bat # better cat
-    du-dust # better du
-    fd # better find
-    file # determine file type
-    dos2unix
-    trash-cli
-    ncdu # ncurses disk usage
-    python3Packages.jsonschema # json validation
-    jq # json toolkit
-    pup # html toolkit
-    jo # json creation
-    xsv # csv toolkit
-    xmlstarlet # xml toolkit
-    manpages
-    posix_man_pages
-    # moreutils # for parallel, sponge, combine
-    tree
-    fuse_exfat # to mount windows drives
-    parallel # for parallel, since moreutils shadows task spooler
-    ripgrep # better grep
-    rlwrap
-    progress # display progress bars for pipes
-    up # universal plumber (piping tool)
-    # HARDWARE TOOLS
-    usbutils # for lsusb
-    pciutils # for lspci
-    lshw # for lshw
-    arandr # xrandr for noobs
-    libnotify # for notify-send
-    xclip # clipboard CLI
-    dragon-drop # drag and drop
-    xorg.xkill # kill by clicking
-    audacity
-    calibre
-    inkscape
-    nixpkgs-unstable.zoom-us # video conferencing
-    pdfgrep # search in pdf
-    pdftk # pdf toolkit
-    poppler_utils # pdf toolkit
-    evince # for viewing pdf annotations
-    xournalpp # for annotating pdfs
-    pdfpc # presenter console for pdf slides
-    hc # print files as qr codes
-    youtubeDL
-    bc # calculator
-    pari # gp -- better calculator
-    scripts.infschmv
-    scripts.scanned
-    scripts.default-gateway
-    scripts.showkeys-toggle
-    scripts.favicon
-    scripts.ipa # XSAMPA to IPA converter
-    scripts.playlist
-    scripts.devanagari
-    scripts.betacode # ancient greek betacode to unicode converter
-    scripts.meteo
-    nur.repos.kmein.mahlzeit
-    recht
-    # nur.repos.kmein.slide
-    nur.repos.kmein.vimv
-    scripts.swallow # window swallowing
-    scripts.genius
-    scripts.instaget
-    scripts.literature-quote
-    scripts.nav # json navigation
-    scripts.n
-    scripts.notetags
-    scripts.booksplit
-    scripts.dmenurandr
-    scripts.interdimensional-cable
-    scripts.dmenubluetooth
-    scripts.manual-sort
-    scripts.much-scripts
-    scripts.dns-sledgehammer
-    ts
-    scripts.vg
-    scripts.fkill
-    scripts.wttr
-    scripts.boetlingk
-    scripts.unicodmenu
-    scripts.trans
-    scripts.liddel-scott-jones
-    scripts.mpv-radio
-    # kmein.slide
-    scripts.tolino-screensaver
-    scripts.rfc
-    scripts.tag
-    scripts.menu-calc
-    nix-prefetch-git
-    scripts.nix-git
-    nixfmt
-    par
-    qrencode
-    wtf
-
-    (pkgs.writers.writeDashBin "worldradio" ''
-      shuf ${worldradio} | ${pkgs.findutils}/bin/xargs ${pkgs.mpv}/bin/mpv --no-video
-    '')
-
-    (pkgs.writers.writeDashBin "ncmpcpp-zaatar" ''MPD_HOST=${(import <niveum/lib/local-network.nix>).zaatar} exec ${pkgs.ncmpcpp}/bin/ncmpcpp "$@"'')
-
-    spotify
-    spotify-tui
-    playerctl
-
-    nix-index
-    scripts.nix-index-update
-  ];
-
-}

configs/packages/haskell/default.nix

@@ -1,46 +0,0 @@
-{ config, pkgs, ... }: {
-  home-manager.users.me.home.file = {
-    ".ghc/ghci.conf".text = ''
-      :set editor vim
-      :def hoogle \s -> return $ ":!${pkgs.haskellPackages.hoogle}/bin/hoogle search --color -l --count=15 \"" ++ s ++ "\""
-      :def doc \s -> return $ ":!${pkgs.haskellPackages.hoogle}/bin/hoogle search --color -l --info \"" ++ s ++ "\""
-      :set prompt "\o033[1m%s\o033[1;34m λ\o033[0m "
-      :set -Wall
-      :set -XOverloadedStrings
-    '';
-    # :def unpl \x -> return $ ":!${pkgs.haskellPackages.pointful}/bin/pointful \"" ++ x ++ "\""
-      # :def pl \x -> return $ ":!${pkgs.haskellPackages.pointfree}/bin/pointfree -v \"" ++ x ++ "\""
-    ".stack/config.yaml".source =
-    let inherit (import <niveum/lib>) kieran;
-    in (pkgs.formats.yaml {}).generate "config.yaml" {
-      templates.params = {
-        author-name = kieran.name;
-        author-email = kieran.email;
-        copyright = "Copyright: (c) 2020 ${kieran.name}";
-        github-username = kieran.github;
-      };
-    };
-  };
-
-  services.hoogle = {
-    enable = false;
-    packages = import ./packages.nix;
-    port = 8091;
-  };
-
-  environment.systemPackages = with pkgs;
-    [
-      cabal2nix
-      cabal-install
-      hlint
-      haskellPackages.ormolu
-      (haskellPackages.ghcWithHoogle (import ./packages.nix))
-    ] ++ map haskell.lib.justStaticExecutables [
-      haskellPackages.ghcid
-      haskellPackages.hasktags
-      # haskellPackages.hindent
-      # haskellPackages.pointfree
-      # haskellPackages.pointful
-      haskellPackages.hpack
-    ];
-}

configs/packages/haskell/packages.nix

@@ -1,98 +0,0 @@
-haskellPackages:
-with haskellPackages; [
-  HTTP
-  HUnit
-  MissingH
-  QuickCheck
-  ad
-  adjunctions
-  aeson
-  # algebra
-  ansi-terminal
-  async
-  attoparsec
-  base-orphans
-  bifunctors
-  binary
-  blaze-html
-  blaze-markup
-  brick
-  bytes
-  bytestring
-  case-insensitive
-  cassava
-  cereal
-  clock
-  comonad
-  comonad-transformers
-  conduit
-  conduit-extra
-  constraints
-  containers
-  contravariant
-  criterion
-  data-default
-  diagrams
-  directory
-  dlist
-  either
-  exceptions
-  extra
-  filepath
-  foundation
-  free
-  haskeline
-  hedgehog
-  hourglass
-  hspec
-  http-client
-  http-conduit
-  kan-extensions
-  lens
-  linear
-  lucid
-  megaparsec
-  microlens
-  monad-logger
-  mono-traversable
-  mtl
-  network
-  parallel
-  parsec
-  persistent
-  pipes
-  pointed
-  pretty
-  pretty-show
-  prettyprinter
-  primitive
-  process
-  profunctors
-  regex-tdfa
-  safe
-  scalpel
-  semigroupoids
-  semigroups
-  servant
-  servant-blaze
-  servant-client
-  servant-docs
-  servant-server
-  servant-swagger
-  split
-  stm
-  tagsoup
-  tasty
-  text
-  time
-  transformers
-  turtle
-  unix-time
-  unordered-containers
-  vector
-  void
-  vty
-  warp
-  wreq
-  yaml
-]

configs/packages/krebs.nix

@@ -1,21 +0,0 @@
-{ lib, pkgs, ... }:
-let
-  krebs-packages = pkgs: {
-    dic = pkgs.callPackage <stockholm/krebs/5pkgs/simple/dic> { };
-    yt-next = pkgs.callPackage <stockholm/lass/5pkgs/yt-next> { };
-    acronym = pkgs.callPackage <stockholm/lass/5pkgs/acronym> { };
-    urban = pkgs.callPackage <stockholm/lass/5pkgs/urban> { };
-    mpv-poll = pkgs.callPackage <stockholm/lass/5pkgs/mpv-poll> { };
-    untilport = pkgs.callPackage <stockholm/krebs/5pkgs/simple/untilport> { };
-    kpaste = pkgs.callPackage <stockholm/krebs/5pkgs/simple/kpaste> { };
-    irc-announce =
-      pkgs.callPackage <stockholm/krebs/5pkgs/simple/irc-announce> { };
-    git-preview =
-      pkgs.callPackage <stockholm/krebs/5pkgs/simple/git-preview> { };
-  };
-in {
-  nixpkgs.config.packageOverrides = krebs-packages;
-
-  environment.systemPackages =
-    map (name: pkgs.${name}) (lib.attrNames (krebs-packages pkgs));
-}

configs/packages/python.nix

@@ -1,20 +0,0 @@
-{ pkgs, ... }: {
-  environment.systemPackages = [
-    (pkgs.python3.withPackages (py: [
-      py.black
-      py.python-language-server
-      py.pyls-mypy
-      py.pyls-black
-      py.pyls-isort
-      py.flake8
-      py.pygments
-      py.schema
-    ]))
-    pkgs.python3Packages.poetry
-  ];
-
-  home-manager.users.me.xdg.configFile."pycodestyle".text = ''
-    [pycodestyle]
-    max-line-length = 110
-  '';
-}

configs/packages/writing.nix

@@ -1,78 +0,0 @@
-{ pkgs, lib, config, ... }:
-let
-  zoteroStyle = { name, sha256 }: {
-    name = "${name}.csl";
-    path = pkgs.fetchurl {
-      url = "https://www.zotero.org/styles/${name}";
-      inherit sha256;
-    };
-  };
-
-  cslDirectory = pkgs.linkFarm "citation-styles" [
-    (zoteroStyle {
-      name = "chicago-author-date-de";
-      sha256 = "0fz0xn46rkciblr34a7x2v60j0lbq9l3fmzi43iphph27m0czn6s";
-    })
-    (zoteroStyle {
-      name = "din-1505-2";
-      sha256 = "1pvy1b7qm13mnph7z365rrz1j082bl2y8ih73rhzd0zd6dz1jyjq";
-    })
-    (zoteroStyle {
-      name = "apa";
-      sha256 = "1878vxp0y0h05yzaghnd51n981623mxskw3lsdyzmffqhihvv111";
-    })
-  ];
-
-  makeStardictDataDir = dicts:
-    pkgs.linkFarm "dictionaries" (map ({ name, path }: {
-      name = "dic/${name}";
-      inherit path;
-    }) dicts);
-in {
-  environment.variables.STARDICT_DATA_DIR = toString (makeStardictDataDir [
-    {
-      name = "gr-de";
-      path = pkgs.fetchurl {
-        url = "http://tovotu.de/data/stardict/pape_gr-de.zip";
-        sha256 = "1d705y47b40vp0mg79vbwasw4y0i8fmnlwvf4x4ri0dkfqng9sky";
-      };
-    }
-    {
-      name = "la-de";
-      path = pkgs.fetchurl {
-        url = "http://tovotu.de/data/stardict/georges_lat-de.zip";
-        sha256 = "12n26nzwg28wn4zwv45mv0wkgy1jh1d8p0k6haamz9601cqq7hkj";
-      };
-    }
-    {
-      name = "de-la";
-      path = pkgs.fetchurl {
-        url = "http://tovotu.de/data/stardict/georges_de-lat.zip";
-        sha256 = "0inm6xn1lcnb851cj329n0v2vbfc1z1bxwhgsd8fnm0zxy3f3ifq";
-      };
-    }
-  ]);
-
-  home-manager.users.me.home.file = {
-    ".csl".source = cslDirectory;
-    ".local/share/pandoc/csl".source = cslDirectory; # as of pandoc 2.11, it includes citeproc
-  };
-
-  environment.systemPackages = with pkgs; [
-    texlive.combined.scheme-full
-    latexrun
-    (aspellWithDicts (dict: [ dict.de dict.en dict.en-computers ]))
-    # haskellPackages.pandoc-citeproc
-    nur.repos.kmein.text2pdf
-    lowdown
-    glow # markdown to term
-    libreoffice
-    # gnumeric
-    dia
-    pandoc
-    # proselint
-    asciidoctor
-    wordnet
-    # sdcv # stardict cli
-  ];
-}

configs/polkit.nix

@@ -0,0 +1,13 @@
+{ config, ... }:
+let
+  user = config.users.users.me.name;
+in
+{
+  security.polkit.extraConfig = ''
+    polkit.addRule(function(action, subject) {
+      if (subject.user == "${user}" && action.id == "org.freedesktop.systemd1.manage-units") {
+        return polkit.Result.YES;
+      }
+    });
+  '';
+}

configs/printing.nix

@@ -13,8 +13,6 @@ in {
     extraBackends = [ hp-driver ];
   };
 
-  users.users.me.extraGroups = [ "scanner" ];
-
   hardware.printers.ensurePrinters = [{
     name = "OfficeJet";
     location = "Zimmer";

configs/radio/default.nix

@@ -1,281 +0,0 @@
-{ lib, pkgs, config, ... }:
-let
-  inherit (import <niveum/lib>) tmpfilesConfig;
-
-  radioStore = "/var/lib/radio";
-  htgenPort = 8080;
-  stations = {
-    meddl = {
-      streamPort = 8000;
-      mpdPort = 6600;
-      description = ''
-        Drachenlord-Radio. Kopie von <a href="https://antenne-asb.ga/">Hit Radio Antenne ASB</a>, dem Anti-Mobbing-Sender.
-        <em>Hier wird nicht nur, aber auch Meddl gespielt.
-        Für dich On Air einer unserer Top Moderatoren Rainer Winkler. Als einer der größten Meddler aller Zeiten, hat er sich schon in seiner Kinheit einen Namen gemacht. Auch wenn er dem Meddl zugeneigt ist und HipHop-Kaschber eigentlich hasst, spielt er mittlerweile gelegentlich auch Techno oder HipHop.</em>
-      '';
-    };
-    lyrikline = {
-      streamPort = 8001;
-      mpdPort = 6601;
-      description = ''
-        Weltklang. Welt als ewiges Gedicht, das seine Schallspuren durch Raum und Zeit jagt. Endlose Zufallswiedergabe von <a href="//lyrikline.org">lyrikline</a>. — Listen to the sound of voices and poems permeating linguistic and geographic barriers, 24 hours per day.
-      '';
-    };
-    lyrik = {
-      streamPort = 8002;
-      mpdPort = 6602;
-      description = ''
-        Deutsche Lyrik, die du noch nicht gut genug kennst. Tritt in einen Fluss aus Reim und Maß; keine zwei Mal ist er derselbe.
-      '';
-    };
-  };
-  mpd-add-with-tags = pkgs.writers.writeHaskell "mpd-add-with-tags" {
-    libraries = with pkgs.haskellPackages; [ optparse-generic libmpd ];
-  } ''
-    {-# LANGUAGE DeriveGeneric, OverloadedStrings #-}
-    import Control.Monad (void)
-    import Data.String
-    import Network.MPD
-    import Options.Generic
-
-    data Options = Options { url :: String, artist :: Maybe String, title :: Maybe String }
-      deriving (Generic)
-
-    instance ParseRecord Options
-
-    main :: IO ()
-    main = do
-      options <- getRecord "Add to MPD with tags"
-      void $ withMPD $ do
-        songId <- addId (fromString $ url options) Nothing
-        maybe (pure ()) (addTagId songId Artist . fromString) $ artist options
-        maybe (pure ()) (addTagId songId Title . fromString) $ title options
-  '';
-
-  mpcs = lib.mapAttrs (name: station: pkgs.writers.writeDashBin "mpc-${name}" ''
-    MPD_PORT=${toString station.mpdPort} ${pkgs.mpc_cli}/bin/mpc "$@"
-  '') stations;
-in
-{
-  imports = [ <stockholm/krebs/3modules/htgen.nix> ];
-  nixpkgs.overlays = [
-    (self: super: { htgen = super.callPackage <stockholm/krebs/5pkgs/simple/htgen> {}; })
-  ];
-
-  systemd.tmpfiles.rules = [
-    (tmpfilesConfig {
-      type = "d";
-      path = radioStore;
-      mode = "0755";
-      user = config.users.extraUsers.radio.name;
-      age = "1d";
-    })
-  ];
-
-  users.extraUsers.radio.isSystemUser = true;
-
-  krebs.htgen.radio = {
-    port = htgenPort;
-    user.name = "radio";
-    script = ''. ${pkgs.writers.writeDash "meinskript" ''
-      send200() {
-        printf 'HTTP/1.1 200 OK\r\n'
-        printf 'Content-Type: text/html; charset=UTF-8\r\n'
-        printf 'Connection: close\r\n'
-        printf '\r\n'
-      }
-
-      case "$Method $Request_URI" in
-        "GET /lyrik/status")
-          send200
-          video_id="$(
-            ${mpcs.lyrik}/bin/mpc-lyrik status -f %file% \
-              | head -n1 \
-              | grep -o 'id=[^&]*' \
-              | sed 's/^id=//g'
-          )"
-
-          ${pkgs.youtube-dl}/bin/youtube-dl -j "https://www.youtube.com/watch?v=$video_id" \
-            | ${pkgs.jq}/bin/jq -r '"% [\(.title)](\(.webpage_url))\n\n\(.description)"' \
-            | sed 's/$/  /g' \
-            | ${pkgs.pandoc}/bin/pandoc -s
-
-          exit
-        ;;
-        "GET /lyrikline/status")
-          send200
-
-          hash="$(
-            ${mpcs.lyrikline}/bin/mpc-lyrikline status -f '%file%' \
-              | head -n 1 \
-              | md5sum \
-              | cut -d' ' -f 1
-          )"
-          url="$(cat ${radioStore}/$hash)"
-
-          echo "<html><body style='margin:0'><iframe style='width:100%;height:100%;border:0' src="$url"></iframe></body></html>"
-          exit
-        ;;
-        "POST /meddl/skip")
-          send200
-          ${mpcs.meddl}/bin/mpc-meddl next
-          exit
-        ;;
-        "GET /meddl/status")
-          send200
-
-          hash="$(
-            ${mpcs.meddl}/bin/mpc-meddl status -f '%file%' \
-              | head -n 1 \
-              | md5sum \
-              | cut -d' ' -f 1
-          )"
-          url="$(cat ${radioStore}/$hash)"
-
-          echo "<html><body style='margin:0'><iframe style='width:100%;height:100%;border:0' src="$url"></iframe></body></html>"
-          exit
-        ;;
-      esac
-    ''}'';
-  };
-
-  containers = lib.mapAttrs (name: station: {
-    autoStart = true;
-    config = {config, pkgs, ...}: {
-      services.mpd = {
-        enable = true;
-        network.port = station.mpdPort;
-        extraConfig = ''
-          log_level "default"
-
-          audio_output {
-            name "${name}"
-            type "httpd"
-            encoder "vorbis"
-            port "${toString station.streamPort}"
-            bitrate "128"
-            format "44100:16:2"
-            always_on "yes"
-            tags "yes"
-          }
-        '';
-      };
-    };
-  }) stations;
-
-  environment.systemPackages = lib.attrValues mpcs;
-
-  systemd.services.lyrikline = {
-    after = [ "container@lyrikline.service" ];
-    wantedBy = [ "container@lyrikline.service" ];
-    startAt = "*:00/5";
-    serviceConfig.User = config.users.extraUsers.radio.name;
-    preStart = "${mpcs.lyrikline}/bin/mpc-lyrikline crop || :";
-    script = ''
-      set -efu
-
-      lyrikline=https://www.lyrikline.org
-      for _ in $(seq 1 10); do
-        random_route="$(${pkgs.curl}/bin/curl -sSL "$lyrikline/index.php/tools/getrandompoem" --data-raw 'lang=de' --compressed | ${pkgs.jq}/bin/jq -r .link)"
-        poem_url="$lyrikline$random_route"
-
-        poem_file="$(
-          ${pkgs.curl}/bin/curl -sSL "$poem_url" \
-            | grep -o 'https://.*\.mp3' \
-            | head -n1
-        )"
-
-        hash="$(echo "$poem_file" | md5sum | cut -d' ' -f 1)"
-        echo "$poem_file ($hash) -> $poem_url"
-        echo "$poem_url" > "${radioStore}/$hash"
-
-        ${mpcs.lyrikline}/bin/mpc-lyrikline add "$poem_file"
-      done
-
-      ${mpcs.lyrikline}/bin/mpc-lyrikline play
-    '';
-  };
-
-  systemd.services.lyrik = {
-    after = [ "container@lyrik.service" ];
-    wantedBy = [ "container@lyrik.service" ];
-    preStart = "${mpcs.lyrik}/bin/mpc-lyrik crop || :";
-    restartIfChanged = true;
-    serviceConfig.User = config.users.extraUsers.radio.name;
-    script =
-      let
-        invidious = "https://invidious.silkky.cloud";
-        videoIds = import <niveum/lib/hot-rotation/lyrik.nix>;
-        streams = lib.concatMapStringsSep "\n" (id: "${invidious}/latest_version?id=${id}&itag=251") videoIds;
-        streamsFile = pkgs.writeText "hotrot" streams;
-      in ''
-        set -efu
-        ${mpcs.lyrik}/bin/mpc-lyrik add < ${toString streamsFile}
-
-        ${mpcs.lyrik}/bin/mpc-lyrik crossfade 5
-        ${mpcs.lyrik}/bin/mpc-lyrik random on
-        ${mpcs.lyrik}/bin/mpc-lyrik repeat on
-        ${mpcs.lyrik}/bin/mpc-lyrik play
-      '';
-  };
-
-
-  systemd.services.meddl = {
-    after = [ "container@meddl.service" ];
-    wantedBy = [ "container@meddl.service" ];
-    startAt = "*:00/10";
-    serviceConfig.User = config.users.extraUsers.radio.name;
-    preStart = "${mpcs.meddl}/bin/mpc-meddl crop || :";
-    script = ''
-      set -efu
-      host=http://antenne-asb.ga
-
-      prepend_host() {
-        sed "s#^#$host/#"
-      }
-
-      ${pkgs.curl}/bin/curl -sSL "$host" \
-        | ${pkgs.pup}/bin/pup 'li a attr{href}' \
-        | prepend_host \
-        | while read -r song; do
-          song_url="$(${pkgs.curl}/bin/curl -sSL "$song" \
-            | ${pkgs.pup}/bin/pup 'audio source attr{src}' \
-            | prepend_host
-          )"
-
-          hash="$(echo "$song_url" | md5sum | cut -d' ' -f 1)"
-          echo "$song_url ($hash) -> $song"
-          echo "$song" > "${radioStore}/$hash"
-
-          ${mpcs.meddl}/bin/mpc-meddl add "$song_url"
-        done
-
-      ${mpcs.meddl}/bin/mpc-meddl play
-    '';
-  };
-
-  services.nginx.virtualHosts."radio.xn--kiern-0qa.de" = {
-    enableACME = true;
-    forceSSL = true;
-    locations = lib.mkMerge (
-      [
-        {
-          "/".extraConfig = ''
-            default_type "text/html";
-            root ${pkgs.linkFarm "station-list" [{
-              name = "index.html";
-              path = import ./station-list.nix { inherit pkgs lib stations; };
-            }]};
-            index index.html;
-          '';
-          # skip
-          "= /meddl/skip".proxyPass = "http://127.0.0.1:${toString htgenPort}";
-        }
-      ] ++ (lib.mapAttrsToList (name: station: {
-        "= /${name}/status".proxyPass = "http://127.0.0.1:${toString htgenPort}";
-        "= /${name}/listen.ogg".proxyPass = "http://127.0.0.1:${toString station.streamPort}";
-        "= /${name}.ogg".return = "301 http://radio.xn--kiern-0qa.de/${name}/listen.ogg"; # legacy
-      }) stations)
-    );
-  };
-}

configs/radio/station-list.nix

@@ -1,43 +0,0 @@
-{ pkgs, lib, stations }:
-let
-  theStations = lib.mapAttrsToList (name: value: value // {name = name;}) stations;
-in
-pkgs.writeText "index.html" ''
-  <!doctype html>
-  <html>
-    <head>
-      <title>radio.kierán</title>
-      <link
-        rel="stylesheet"
-        href="//cdn.rawgit.com/necolas/normalize.css/master/normalize.css"
-      />
-      <link
-        rel="stylesheet"
-        href="https://cdnjs.cloudflare.com/ajax/libs/bulma/0.9.2/css/bulma.min.css"
-      />
-      <meta name="viewport" content="width=device-width, initial-scale=1" />
-      <meta charset="utf-8" />
-    </head>
-    <body>
-      <main class="section">
-        <div class="subtitle is-3">Welcome to</div>
-        <h1 class="title is-1">radio.kierán</h1>
-
-        <div class="columns is-multiline">
-          ${lib.concatMapStringsSep "\n" (station: ''
-            <div class="column">
-              <div class="box">
-                <strong class="is-uppercase">${station.name}</strong>
-                (<a href="/${station.name}/status">status</a>, <a href="/${station.name}/listen.ogg">link</a>)
-
-                <p class="has-text-grey">${station.description}</p>
-                <hr/>
-                <audio style="width:100%" controls src="/${station.name}/listen.ogg"/>
-              </div>
-            </div>'') theStations
-          }
-        </div>
-      </main>
-    </body>
-  </html>
-''

configs/rofi.nix

@@ -1,49 +1,10 @@
-{ config, ... }:
+{ config, pkgs, ... }:
 let
   inherit (import <niveum/lib>) colours;
 in{
   home-manager.users.me.programs.rofi = {
     enable = true;
-    separator = "solid";
-    scrollbar = false;
-    borderWidth = 0;
-    lines = 5;
     font = "Monospace 10";
-    colors = rec {
-      window = rec {
-        background = colours.foreground;
-        border = background;
-        separator = colours.black.bright;
-      };
-      rows = {
-        normal = {
-          background = window.background;
-          backgroundAlt = window.background;
-          foreground = colours.background;
-          highlight = {
-            foreground = colours.cyan.dark;
-            inherit (window) background;
-          };
-        };
-        active = {
-          background = window.background;
-          backgroundAlt = window.background;
-          foreground = colours.yellow.dark;
-          highlight = {
-            foreground = colours.green.dark;
-            inherit (window) background;
-          };
-        };
-        urgent = {
-          background = window.background;
-          backgroundAlt = window.background;
-          foreground = colours.red.dark;
-          highlight = {
-            foreground = colours.magenta.dark;
-            inherit (window) background;
-          };
-        };
-      };
-    };
+    theme = "${pkgs.rofi}/share/rofi/themes/Arc-Dark.rasi";
   };
 }

configs/ssh.nix

@@ -35,8 +35,8 @@ in {
         user = "root";
         port = sshPort;
       };
-      wilde = {
-        hostname = "wilde.r";
+      kabsa = {
+        hostname = "kabsa.r";
         user = "kfm";
         port = sshPort;
       };

configs/stardict.nix

@@ -0,0 +1,357 @@
+{ config, pkgs, lib, ... }:
+let
+  dictionaries = {
+    lojban = {
+      jbo-deu = pkgs.fetchzip {
+        url = "https://guskant.github.io/lojbo/stardict/jbo-deu-20160110.tar.gz";
+        sha256 = "18ia15wyvd8ksi7yxn939qmvpdlrip8mvfywafv7vjj685rdhk80";
+      };
+      rafsi-jbo = pkgs.fetchzip {
+        url = "https://guskant.github.io/lojbo/stardict/rafsi-jbo-20160110.tar.gz";
+        sha256 = "00fkw964b48liz1jayfjb5jnpwihghkq4i28y8i11yqb56w6bn3c";
+      };
+      jbo-eng = pkgs.fetchzip {
+        url = "https://guskant.github.io/lojbo/stardict/jbo-eng-20160110.tar.gz";
+        sha256 = "15l65yshqdp0a7fr4a7ffwx3m2v6ymchxgra9zmk5bsgcxsb4r8m";
+      };
+      jbo-jbo = pkgs.fetchzip {
+        url = "https://guskant.github.io/lojbo/stardict/jbo-jbo-20160110.tar.gz";
+        sha256 = "1psfyrjrq84prr2s4jcm31ijykm7clyqygmbacr09n570xfwqcfw";
+      };
+    };
+    classics = {
+      Pape = pkgs.fetchzip {
+        url = "http://tovotu.de/data/stardict/pape_gr-de.zip";
+        sha256 = "1kmbdjqinrcxkc6jdyyrq5rl2wzhnrychyynnh91yhrjwjxlh44k";
+      };
+      Woodhouse = pkgs.fetchzip {
+        url = "https://c.krebsco.de/Woodhouse.zip";
+        sha256 = "1dvnc2679yb048q2f3hr2h34acvhan0n3iir6h9ajlrdzz48mlkq";
+        stripRoot = false;
+      };
+      LSJ = pkgs.fetchzip {
+        url = "https://github.com/nikita-moor/latin-dictionary/releases/download/2020-02-14/LiddellScott1940-stardict.zip";
+        sha256 = "13rprgd9jvnhxk9735c91xr6ywr0j5jiwkjnpm3qpvy93isyjbys";
+      };
+      GreekMorphology = pkgs.fetchzip {
+        url = "https://github.com/latin-dict/Morphologia-Graeca/releases/download/v0.5/morphology-mobile-goldendict.oxia.zip";
+        sha256 = "0m75cppjjjmvv18cs7yh9f4p7ckqzxfznnndgkiw3yrfd50k8p96";
+      };
+      Frisk = pkgs.fetchzip {
+        url = "https://github.com/latin-dict/Frisk1960/releases/download/v1.1/Frisk1960-stardict.zip";
+        sha256 = "1rk5a3n3fpfdcmg4bc5945m88s6ldxql8cjn4jqs33rgklh7n046";
+      };
+      Georges-De-Lat = pkgs.fetchzip {
+        url = "http://tovotu.de/data/stardict/georges_de-lat.zip";
+        sha256 = "1gx4vv64bi9lxw2zgd861j469jvw4f2hhfwy1gglb12id8r7rdrl";
+      };
+      Georges-Lat-De = pkgs.fetchzip {
+        url = "http://tovotu.de/data/stardict/georges_lat-de.zip";
+        sha256 = "0cc5xipn60anxvq8z2mw53d4gi1k92wbrj9m4ws3g9rh87fmkvgz";
+      };
+      LewisShort = pkgs.fetchzip {
+        url = "https://github.com/latin-dict/LewisShort1879/releases/download/v1.3/LewisShort1879-stardict.zip";
+        sha256 = "1y3ans47iv8bzzb1paimdqvcid8ms04ikjbqy3iw077i2js3qbjk";
+      };
+      DoederleinSynonymes = pkgs.fetchzip {
+        url = "https://github.com/latin-dict/Doederlein1874/releases/download/v1.1/Doederlein1875-stardict.zip";
+        sha256 = "0mhik7gjxl8ncr9g5z2l4pfk60k1c5n0gc1w0cnp2x1v6lqvb57h";
+      };
+    };
+    englishGerman = {
+      Etymonline = pkgs.fetchzip {
+        url = "http://tovotu.de/data/stardict/etymonline.zip";
+        sha256 = "1bjja3n3layfd08xa1r0a6375dxh5zi6hlv7chkhgnx800cx7hxn";
+      };
+      Roget = pkgs.fetchzip {
+        url = "http://download.huzheng.org/bigdict/stardict-Roget_s_II_The_New_Thesaurus_3th_Ed-2.4.2.tar.bz2";
+        sha256 = "1szyny9497bpyyccf9l5kr3bnw0wvl4cnsd0n1zscxpyzlsrqqbz";
+      };
+      JargonFile = pkgs.fetchzip {
+        url = "http://download.huzheng.org/dict.org/stardict-dictd-jargon-2.4.2.tar.bz2";
+        sha256 = "096phar9qpmm0fnaqv5nz8x9lpxwnfj78g4vjfcfyd7kqp7iqla4";
+      };
+      Oxford-Collocations = pkgs.fetchzip {
+        url = "http://download.huzheng.org/bigdict/stardict-Oxford_Collocations_Dictionary_2nd_Ed-2.4.2.tar.bz2";
+        sha256 = "1zkfs0zxkcn21z2lhcabrs77v4ma9hpv7qm119hpyi1d8ajcw07q";
+      };
+      Langenscheidt-Deu-En = pkgs.fetchzip {
+        url = "http://download.huzheng.org/babylon/german/stardict-Handw_rterbuch_Deutsch_Englisc-2.4.2.tar.bz2";
+        sha256 = "12q9i5azq7ylyrpb6jqbaf1rxalc3kzcwjvbinvb0yabdxb80y30";
+      };
+      Langenscheidt-En-Deu = pkgs.fetchzip {
+        url = "http://download.huzheng.org/babylon/german/stardict-Handw_rterbuch_Englisch_Deutsc-2.4.2.tar.bz2";
+        sha256 = "087b05h155j5ldshfgx91pz81h6ijq2zaqjirg7ma8ig3l96zb59";
+      };
+      Duden_Das_Fremdworterbuch = pkgs.fetchzip {
+        url = "http://download.huzheng.org/babylon/german/stardict-Duden_Das_Fremdworterbuch-2.4.2.tar.bz2";
+        sha256 = "1zrcay54ccl031s6dvjwsah5slhanmjab87d81rxlcy8fx0xd8wq";
+      };
+      Duden_De_De = pkgs.fetchzip {
+        url = "http://download.huzheng.org/babylon/german/stardict-Duden_De_De-2.4.2.tar.bz2";
+        sha256 = "1fhay04w5aaj83axfmla2ql34nb60gb05dgv0k94ig7p8x4yxxlf";
+      };
+      ConciseOED = pkgs.fetchzip {
+        url = "http://download.huzheng.org/bigdict/stardict-Concise_Oxford_English_Dictionary-2.4.2.tar.bz2";
+        sha256 = "19kpcxbhqzpmhi94mp48nalgmsh6s7rsx1gb4kwkhirp2pbjcyl7";
+      };
+      Duden_Synonym = pkgs.fetchzip {
+        url = "http://download.huzheng.org/babylon/german/stardict-Duden_Synonym-2.4.2.tar.bz2";
+        sha256 = "0cx086zvb86bmz7i8vnsch4cj4fb0cp165g4hig4982zakj6f2jd";
+      };
+    };
+    sanskrit = let repo = "https://github.com/indic-dict/stardict-sanskrit/raw/4ebd2d3db5820f7cbe3a649c3d5aa8f83d19b29f"; in {
+      BoehtlingkRoth = pkgs.fetchzip {
+        url = "${repo}/sa-head/german-entries/tars/Bohtlingk-and-Roth-Grosses-Petersburger-Worterbuch__2021-10-05_14-23-18Z__19MB.tar.gz";
+        sha256 = "13414a8rgd7hd5ffar6nl68nk3ys60wjkgb7m11hp0ahaasmf6ly";
+        stripRoot = false;
+      };
+      BoehtlingkRothKurz = pkgs.fetchzip {
+        url = "${repo}/sa-head/german-entries/tars/Bohtlingk-Sanskrit-Worterbuch-in-kurzerer-Fassung__2021-10-05_14-23-18Z__10MB.tar.gz";
+        sha256 = "15yx31yrk40k9nn6kaysp4pprzj8dpd13dj3wafklc3izm8lr2wq";
+        stripRoot = false;
+      };
+      MonierWilliams = pkgs.fetchzip {
+        url = "https://github.com/indic-dict/stardict-sanskrit/raw/4ebd2d3db5820f7cbe3a649c3d5aa8f83d19b29f/sa-head/en-entries/tars/mw-cologne__2021-10-06_00-16-23Z__16MB.tar.gz";
+        sha256 = "0p99ybxwxmmd94hf035hvm2hhnfy84av7qq79xf28bh2rbx6s9ng";
+        stripRoot = false;
+      };
+      MonierWilliamsEnglish = pkgs.fetchzip {
+        url = "${repo}/en-head/tars/mw-english-sanskrit__2021-10-05_14-23-18Z__3MB.tar.gz";
+        sha256 = "09a61hhii4b1m2fkrlh4rm2xnlgwrllh84iypbc6wyj00w9jkl3x";
+        stripRoot = false;
+      };
+      Borooah = pkgs.fetchzip {
+        url = "${repo}/en-head/tars/borooah__2021-10-05_14-23-18Z__2MB.tar.gz";
+        sha256 = "0qmmfbynqgv125v48383i51ky9yi69zibhh7vwk95gyar2yrprn2";
+        stripRoot = false;
+      };
+      ApteEnglish = pkgs.fetchzip {
+        url = "${repo}/en-head/tars/apte-english-sanskrit-cologne__2021-10-06_00-12-51Z__1MB.tar.gz";
+        sha256 = "064ysm24ydc534ca689y5i2flnra8jkmh8zn0gsb6n8hdsb0d1lq";
+        stripRoot = false;
+      };
+    };
+    oed = {
+      OED1 = pkgs.fetchzip {
+        url = "http://download.huzheng.org/bigdict/stardict-Oxford_English_Dictionary_2nd_Ed._P1-2.4.2.tar.bz2";
+        sha256 = "0i5vv1rv44yfwyf9bfbdrb9brzhhpvz2jnh39fv8hh107nkv2vcf";
+      };
+      OED2 = pkgs.fetchzip {
+        url = "http://download.huzheng.org/bigdict/stardict-Oxford_English_Dictionary_2nd_Ed._P2-2.4.2.tar.bz2";
+        sha256 = "1pk234pbq4pk55d8sjk0pp9j5sajm82f8804kf2xm2x5p387q1rg";
+      };
+    };
+    russian = {
+      LingvoGermanRussian = pkgs.fetchzip {
+        url = "http://download.huzheng.org/lingvo/stardict-GR-LingvoUniversal-2.4.2.tar.bz2";
+        sha256 = "0p353gs2z4vj70hqsdhffjaaw3a4zlmcs46flipmf35lm5wmaj0g";
+      };
+      LingvoRussianGerman = pkgs.fetchzip {
+        url = "http://download.huzheng.org/lingvo/stardict-RG-LingvoUniversal-2.4.2.tar.bz2";
+        sha256 = "03f9wdmkgpjifpms7dyh10ma29wf3ka1j3zlp1av0cybhdldk2a8";
+      };
+    };
+  };
+
+  makeStardictDataDir = dicts: pkgs.linkFarm "dictionaries" (lib.mapAttrsToList (name: path: { inherit name path; }) dicts);
+
+  makeStardict = name: dicts: pkgs.writers.writeDashBin name ''
+    set -efu
+    export SDCV_PAGER=${toString sdcvPager}
+    exec ${pkgs.sdcv}/bin/sdcv --color --only-data-dir --data-dir ${makeStardictDataDir dicts} "$@"
+  '';
+
+  sdcvPager = pkgs.writeDash "sdcvPager" ''
+    export PATH=${lib.makeBinPath [pkgs.gnused pkgs.ncurses pkgs.less]}
+    sed "
+      s!<sup>1</sup>!¹!gI
+      s!<sup>2</sup>!²!gI
+      s!<sup>3</sup>!³!gI
+      s!<sup>4</sup>!⁴!gI
+      s! style=\"color: #...\"!!g;
+      s!<span class=\"zenoTXSpaced\">\([^<>]*\)</span>!\1!g;
+      s!</\?dictionary[^>]*>!!g;
+      s!<style.*</style>!!g;
+      s!<author>\([^<>]*\)</author>!\1 !g;
+      s!<quote lang=\"\(greek\|la\)\">\([^<>]*\)</quote>!$(tput sitm)\2$(tput sgr0)!g;
+      s!<biblScope>\([^<>]*\)</biblScope>!\1!g;
+      s!<mood>\([^<>]*\)</mood>!$(tput sitm)\1$(tput sgr0)!g;
+      s!<adv>\([^<>]*\)</adv>!$(tput sitm)\1$(tput sgr0)!g;
+      s!<gram[^>]*>\([^<>]*\)</gram>!$(tput sitm)\1$(tput sgr0)!g;
+      s!<bibl_title>\([^<>]*\)</bibl_title>!$(tput sitm)\1$(tput sgr0) !g;
+      s!<hi rend=\"ital\">\([^<>]*\)</hi>!$(tput sitm)\1$(tput sgr0) !g;
+      s!<dict_tr>\([^<>]*\)</dict_tr>!$(tput setaf 3)\1$(tput sgr0)!g;
+      s!<headword>\([^<>]*\)</headword>!$(tput bold)\1$(tput sgr0)\t!g;
+      s!</\?a[^>]*>!!g
+      s!</\?[cp]b[^>]*>!!g
+      s!</\?gramGrp[^>]*>!!g
+      s!</\?lbl[^>]*>!!g
+      s!</\?xr[^>]*>!!g
+      s!</\?pron[^>]*>!!g
+      s!</\?gen[^>]*>!!g
+      s!</\?tns[^>]*>!!g
+      s!</\?per[^>]*>!!g
+      s!</\?blockquote[^>]*>!!g
+      s!</\?etym[^>]*>!!g
+      s!<foreign[^>]*>!$(tput sitm)!g
+      s!</foreign[^>]*>!$(tput sgr0)!g
+      s!</\?date[^>]*>!!g
+      s!</\?placeName[^>]*>!!g
+      s!</\?itype[^>]*>!!g
+      s!</\?p>!!g
+      s!<input[^>]*>!!g
+      s!</\?orth[^>]*>!!g
+      s!</\?number[^>]*>!!g
+      s!</\?forename[^>]*>!!g
+      s!</\?persName[^>]*>!!g
+      s!</\?surname[^>]*>!!g
+      s!</\?entryFree[^>]*>!!g
+      s!</\?def[^>]*>!!g
+      s!</\?cit[^>]*>!!g
+      s!</\?pos[^>]*>!!g
+      s!</\?usg[^>]*>!!g
+      s!</\?ul>!!g
+      s!<li>!\n!g
+      s!</li>!!g
+      s!<bibl[^>]*>!$(tput setaf 245)!g
+      s!</bibl[^>]*>!$(tput sgr0)!g
+      s/<dt>/$(tput bold)/g;
+      s:</dt>:$(tput sgr0):g;
+      s/<dd>/\n/g;
+      s:</dd>::g;
+      s:<script>.*</script>::g;
+      s/<b>/$(tput bold)/gI;
+      s:</b>:$(tput sgr0):gI;
+      s:<br\s*/\?>:\n:gI;
+      s:<i>:$(tput sitm):gI;
+      s:</i>:$(tput sgr0):gI;
+      s:<u>:$(tput smul):gI;
+      s:</u>:$(tput sgr0):gI;
+      s:<FONT face=[^>]*>::g;
+      s:</FONT>::g;
+      s!<head>\([^<>]*\)</head>!$(tput bold)\1$(tput sgr0)!g;
+      s!<span lang=\"\(gr\|la\)\">\([^<>]*\)</span>!\2!g
+      s#<div style=\"margin-left:1em\">\(.*\)</div>#\\1#g;
+      s:<font color=\"brown\">\([^<>]*\)</font>:$(tput setaf 3)\\1$(tput sgr0):g;
+      s:<font color=\"blue\">\([^<>]*\)</font>:$(tput setaf 4)\\1$(tput sgr0):g;
+      s:<font color=\"red\">\([^<>]*\)</font>:$(tput setaf 1)\\1$(tput sgr0):g;
+      s:<font color=\"darkviolet\">\([^<>]*\)</font>:$(tput setaf 5)\\1$(tput sgr0):g;
+      s:<font color=\"#a0a\">\([^<>]*\)</font>:$(tput bold)\1$(tput sgr0):g
+      s:<font color=\"#838\">\([^<>]*\)</font>:$(tput setaf 3)\1$(tput sgr0):g
+      s:&#x27;:':g
+      s:&lt;:<:g
+      s:&gt;:>:g
+      s:<font color=\"#007000\">\([^<>]*\)</font>:$(tput setaf 2)\\1$(tput sgr0):g;
+      s:<font color=\"#007000\">\([^<>]*\)</font>:$(tput setaf 2)\\1$(tput sgr0):g;
+      s:<font color=#000099>\([^<>]*\)</font>:$(tput setaf 4)\\1$(tput sgr0):g;
+      s:<font color=0000FF>\([^<>]*\)</font>:$(tput bold)\\1$(tput sgr0):g;
+      s:<IMG src=\"223E9A06.bmp\"[^>]*>:ː:g;
+      s:<IMG src=\"502F5DDA.bmp\"[^>]*>::g;
+      s:<IMG src=\"8DAD7054.bmp\"[^>]*>:n̩:g
+      s!</\?TABLE>!!gI
+      s!</\?TR[^>]*>!!gI
+      s!</\?TD>!!gI
+      s!</\?FONT[^>]*>!!gI
+      s!</\?A[^>]*>!!gI
+      s!<SPAN class=\"bsptext\">\([^<>]*\)</SPAN>!$(tput setaf 245)\1$(tput sgr0)!g
+      s! +! !g;
+      s!<div part=\"[^\"]*\">!\n\n&!g
+      s!<sense n=\"\([^\"]*\)\"!\n$(tput setaf 5)\1.$(tput sgr0) &!g;
+      s!</\?sense[^>]*>!!g
+      s!</\?div[^>]*>!!g
+      s!<span lang=\"gr\">!!g # unbalanced in Frisk
+      s!^\s*[0-9])!$(tput setaf 5)&$(tput sgr0)!g
+      s!</\?span[^>]*>!!gI
+      s!</\?p[^>]*>!!gI
+    " | less -FR
+  '';
+in
+{
+  environment.etc.stardict.source = toString (makeStardictDataDir ({
+    Crum = pkgs.fetchzip {
+      url = "http://download.huzheng.org/misc/stardict-Coptic-English_all_dialects-2.4.2.tar.bz2";
+      sha256 = "1fi281mb9yzv40wjsdapi8fzpa7x2yscz582lv2qnss9g8zzzzr9";
+    };
+    SmithBiographyMythology = pkgs.fetchzip {
+      url = "https://github.com/latin-dict/Smith1873/releases/download/v1.0/Smith1873-stardict.zip";
+      sha256 = "01h5fxacp2m60xir8kzslkfy772vs3vmz07zhdwfhcwdaxif2af2";
+    };
+    SmithAntiquities = pkgs.fetchzip {
+      url = "https://github.com/latin-dict/Smith1890/releases/download/v1.0/Smith1890-stardict.zip";
+      sha256 = "0vpsv62p2lrzmgys4d1swpnc6lqhdi7rxwkj2ngy3lz5dk3fysyb";
+    };
+  } // dictionaries.classics // dictionaries.sanskrit // dictionaries.oed // dictionaries.russian // dictionaries.englishGerman));
+
+  environment.systemPackages = [
+    pkgs.goldendict
+    (makeStardict "lsj" dictionaries.classics)
+    (makeStardict "sa" dictionaries.sanskrit)
+    (makeStardict "oed" dictionaries.oed)
+    (makeStardict "sd-russian" dictionaries.russian)
+    (makeStardict "sd" dictionaries.englishGerman)
+    (makeStardict "jbo" dictionaries.lojban)
+  ];
+}
+
+/*
+https://github.com/latin-dict/Georges1910/releases/download/v1.0/Georges1910-stardict.zip
+https://github.com/nikita-moor/latin-dictionary/releases/download/2020-02-14/LiddellScott1940-stardict.zip
+http://download.huzheng.org/bigdict/stardict-Cambridge_Dictionary_of_American_Idioms-2.4.2.tar.bz2
+http://download.huzheng.org/bigdict/stardict-Concise_Oxford_Thesaurus_2nd_Ed-2.4.2.tar.bz2
+http://download.huzheng.org/bigdict/stardict-Urban_Dictionary_P1-2.4.2.tar.bz2
+http://download.huzheng.org/bigdict/stardict-Urban_Dictionary_P2-2.4.2.tar.bz2
+
+Duden_Rechtschreibung = pkgs.fetchzip {
+  url = "http://download.huzheng.org/babylon/german/stardict-Duden_Rechtschreibung-2.4.2.tar.bz2";
+  sha256 = "0xiprb45s88w62rn8rlbjrsagbiliay9hszsiy20glwabf6zsfji";
+};
+Duden = pkgs.fetchzip {
+  url = "http://download.huzheng.org/de/stardict-duden-2.4.2.tar.bz2";
+  sha256 = "049i4ynfqqxykv1nlkyks94mvn14s22qdax5gg7hx1ks5y4xw64j";
+};
+FreeOnlineDictionaryOfComputing = pkgs.fetchzip {
+  url = "http://download.huzheng.org/dict.org/stardict-dictd_www.dict.org_foldoc-2.4.2.tar.bz2";
+  sha256 = "1lw2i8dzxpx929cpgvv0x366dnh4drr10wzqmrhcd0kvwglqawgm";
+};
+Cappeller = pkgs.fetchzip {
+  url = "${repo}/sa-head/german-entries/tars/capeller-sanskrit-german__2021-10-05_14-23-18Z__1MB.tar.gz";
+  sha256 = "0jwrj2aih2lrcjg0lqm8jrvq9vsas9s8j4c9ggbg2n0jyz03kci3";
+  stripRoot = false;
+};
+Yates = pkgs.fetchzip {
+  url = "https://github.com/indic-dict/stardict-sanskrit/raw/4ebd2d3db5820f7cbe3a649c3d5aa8f83d19b29f/sa-head/en-entries/tars/yates__2021-10-05_14-23-18Z__2MB.tar.gz";
+  sha256 = "1k7gbalysf48pwa06zfykrqhdk466g35xy64b30k4z8bybgdn8z2";
+  stripRoot = false;
+};
+Wilson = pkgs.fetchzip {
+  url = "https://github.com/indic-dict/stardict-sanskrit/raw/4ebd2d3db5820f7cbe3a649c3d5aa8f83d19b29f/sa-head/en-entries/tars/wilson__2021-10-05_14-23-18Z__3MB.tar.gz";
+  sha256 = "0r5z1xif56zlw9r2jp3fvwmcjv4f2fhd9r17j30nah9awx2m1isg";
+  stripRoot = false;
+};
+SpokenSanskrit = pkgs.fetchzip {
+  url = "https://github.com/indic-dict/stardict-sanskrit/raw/4ebd2d3db5820f7cbe3a649c3d5aa8f83d19b29f/sa-head/en-entries/tars/spokensanskrit__2019-01-12_05-13-52Z__12MB.tar.gz";
+  sha256 = "0x8j657mawvdcyd1knzvf33yp15z77d661n3h6g9hcj7wn9s5xyk";
+  stripRoot = false;
+};
+Grassmann = pkgs.fetchzip {
+  url = "${repo}/sa-head/german-entries/tars/grassman-sanskrit-german__2021-10-05_14-23-18Z__2MB.tar.gz";
+  sha256 = "0jalsykaxkl6wzrky72lz8g3jdz26lmjpyibbfaf7a5vvnr55k02";
+  stripRoot = false;
+};
+Benfey = pkgs.fetchzip {
+  url = "https://github.com/indic-dict/stardict-sanskrit/raw/4ebd2d3db5820f7cbe3a649c3d5aa8f83d19b29f/sa-head/en-entries/tars/benfey__2021-10-05_14-23-18Z__2MB.tar.gz";
+  sha256 = "0lj3hgphqgnihn482g9kgjwbvdrcd38vc29v1fi36srn08qdhvcb";
+  stripRoot = false;
+};
+ApteSa = pkgs.fetchzip {
+  url = "${repo}/sa-head/en-entries/tars/apte-sa__2021-12-18_13-20-56Z__6MB.tar.gz";
+  sha256 = "0cq1dd02d1pvmjnibbs2cscifjnk2z0nqccf5yzzilxkzsrarh32";
+  stripRoot = false;
+};
+MacDonell = pkgs.fetchzip {
+  url = "https://github.com/indic-dict/stardict-sanskrit/raw/4ebd2d3db5820f7cbe3a649c3d5aa8f83d19b29f/sa-head/en-entries/tars/macdonell__2021-10-05_14-23-18Z__2MB.tar.gz";
+  sha256 = "1yzmj0393mxvjv4n2lnvd2c722v2bmxxiyq7pscdwni3bxip3h8s";
+  stripRoot = false;
+};
+*/

configs/telegram-bots/astrology.nix

@@ -0,0 +1,55 @@
+{ pkgs, lib, ... }:
+let
+  nixpkgs-unstable = import <nixpkgs-unstable> {};
+  toSymbols = pkgs.writers.writeDash "to-symbols" ''
+    ${pkgs.gnused}/bin/sed '
+      s/\bTri\b/△/;
+      s/\bOpp\b/☍/;
+      s/\bSqu\b/□/;
+      s/\bSex\b/⚹/;
+      s/\bCon\b/☌/;
+      s/Sun/☉/g;
+      s/Moon/☽/g;
+      s/Mercury/☿/g;
+      s/Venus/♀/g;
+      s/Mars/♂/g;
+      s/Jupiter/♃/g;
+      s/Saturn/♄/g;
+      s/Uranus/♅/g;
+      s/Neptune/♆/g;
+      s/Pluto/♇/g;
+      s/North Node/☊/g;
+      s/\bLeo\b/♌/g;
+      s/\bCan\(cer\)\?\b/♋/g;
+      s/\bGem\(ini\)\?\b/♊/g;
+      s/\bVir\(go\)\?\b/♍/g;
+      s/\bLib\(ra\)\?\b/♎/g;
+      s/\bTau\(rus\)\?\b/♉/g;
+      s/\bAri\(es\)\?\b/♈/g;
+      s/\bSco\(rpio\)\?\b/♏/g;
+      s/\bPis\(ces\)\?\b/♓/g;
+      s/\bSag\(ittarius\)\?\b/♐/g;
+      s/\bAqu\(arius\)\?\b/♒/g;
+      s/\bCap\(ricorn\)\?\b/♑/g;
+      s/-->/⟶/g;
+      s/\s\+/ /g; # replace multiple spaces by one
+      s/^.*\([ 0-9]\{2\}:[0-9]\{2\}\) /\1 /; # remove date at beginning of line (but not everything up to v/c X:XX)
+      s/^\s*//
+    '
+  '';
+in {
+  niveum.telegramBots.transits = {
+    enable = true;
+    time = "*:0/1";
+    token = lib.strings.fileContents <system-secrets/telegram/kmein.token>;
+    chatIds = [ "-1001796440545" ];
+    command = toString (pkgs.writers.writeDash "common-transits" ''
+      now=$(${pkgs.coreutils}/bin/date +%_H:%M | ${pkgs.gnused}/bin/sed 's/^\s*//')
+      date=$(${pkgs.coreutils}/bin/date +'%m %d %Y')
+      {
+        ${nixpkgs-unstable.astrolog}/bin/astrolog -qd $date -zN Berlin -Yt -Yd -d -R Uranus Neptune Pluto "North Node"
+        ${nixpkgs-unstable.astrolog}/bin/astrolog -Yt -Yd -q 10 22 1999 6:32 -zN Kassel -td $date -R Uranus Neptune Pluto "North Node"
+      } | ${toSymbols} | ${pkgs.coreutils}/bin/sort -n | ${pkgs.gnugrep}/bin/grep "^$now" || :
+    '');
+  };
+}

configs/telegram-bots/default.nix

@@ -1,19 +1,13 @@
 { config, pkgs, lib, ... }:
 let
-  telebots = let
-    telebots-package = pkgs.fetchFromGitHub {
-      owner = "kmein";
-      repo = "telebots";
-      rev = "22931c9457e092c4e413555dbe61819d77844246";
-      sha256 = "0byp3w6li3fin7ry0ki4rmgkaajdil424y5pc1j7ci9mpws0s5ik";
-    };
-  in pkgs.callPackage telebots-package {};
+  telebots = pkgs.callPackage <telebots> {};
   reverseDirectory = "/run/telegram-reverse";
   proverbDirectory = "/run/telegram-proverb";
   inherit (import <niveum/lib>) tmpfilesConfig;
 in {
   imports = [
     ./literature-quote.nix
+    ./astrology.nix
     ./autorenkalender.nix
     ./nachtischsatan.nix
     ./tlg-wotd.nix

configs/traadfri.nix

@@ -29,7 +29,7 @@ in
       bedroom = 131082;
       living-room = living-room-id;
       bedside = 131087;
-      desk = 131089;
+      chain = 131089;
     };
   };
 }

configs/version.nix

@@ -1,4 +0,0 @@
-{ lib, config, ... }:
-{
-  environment.etc."niveum/version".text = lib.sources.commitIdFromGitRepo <niveum/.git>;
-}

configs/watson.nix

@@ -1,4 +1,6 @@
 { config, pkgs, ... }:
 {
   environment.systemPackages = [ pkgs.watson ];
+
+  environment.variables.WATSON_DIR = "${config.users.users.me.home}/cloud/Seafile/Documents/watson";
 }

configs/weechat.nix

@@ -1,108 +0,0 @@
-{ lib, pkgs, ... }:
-let
-  inherit (import <niveum/lib>) kieran;
-  relayPassword = lib.fileContents <system-secrets/weechat/relay>;
-in {
-  systemd.services.weechat =
-  let
-    tmux = pkgs.writers.writeDash "tmux" ''
-      exec ${pkgs.tmux}/bin/tmux -f ${pkgs.writeText "tmux.conf" ''
-        set-option -g prefix `
-        unbind-key C-b
-        bind ` send-prefix
-
-        set-option -g status off
-        set-option -g default-terminal screen-256color
-
-        #use session instead of windows
-        bind-key c new-session
-        bind-key p switch-client -p
-        bind-key n switch-client -n
-        bind-key C-s switch-client -l
-      ''} "$@"
-    '';
-    weechat = pkgs.weechat.override {
-      configure = { ... }: {
-        scripts = [ pkgs.weechatScripts.weechat-autosort pkgs.weechatScripts.colorize_nicks ];
-        init = let
-          coolColors = lib.lists.subtractLists (lib.range 52 69 ++ lib.range 231 248) (lib.range 31 254);
-          nick = "kmein";
-        in ''
-          /mouse enable
-          /set irc.server_default.nicks "${nick}"
-          /set irc.server_default.msg_part "tschö mit ö"
-          /set irc.server_default.msg_quit "ciao kakao"
-          /set irc.server_default.msg_kick "warum machst du diese?"
-          /set irc.server_default.realname "${kieran.name}"
-
-          /set irc.look.color_nicks_in_nicklist "on"
-          /set weechat.color.chat_nick_colors "${lib.concatMapStringsSep "," toString coolColors}"
-
-          /server add hackint irc.hackint.org/6697 -ipv6 -ssl
-          /server add libera irc.libera.chat/6697 -ssl
-          /server add retiolum irc.r
-          /server add news news.r
-
-          /alias add mod /quote omode $channel +o $nick
-
-          /relay add weechat 9000
-          /set relay.network.password ${relayPassword}
-
-          /set irc.server.hackint.autojoin "#hsmr,#krebs,#nixos,#the_playlist"
-          /set irc.server.hackint.sasl_mechanism plain
-          /set irc.server.hackint.sasl_username ${nick}
-          /set irc.server.hackint.sasl_password ${lib.strings.fileContents <system-secrets/irc/hackint>}
-
-          /set irc.server.libera.autojoin "#flipdot,#haskell,#nixos,#fysi"
-          /set irc.server.libera.sasl_mechanism plain
-          /set irc.server.libera.sasl_username ${nick}
-          /set irc.server.libera.sasl_password ${lib.strings.fileContents <system-secrets/irc/libera>}
-
-          /set irc.server.retiolum.autojoin "#xxx,#brockman,#flix"
-          /set irc.server.retiolum.command "/oper aids balls"
-          /set irc.server.news.autojoin "#cook,#drachengame,#oepnv,#kmeinung,#memes"
-          /set irc.server.news.command "/oper aids balls"
-          /set logger.level.irc.news.#all 0
-
-          /filter addreplace corona irc.news.* * [kc]orona|[kc]ovid|virus|lockdown|va[kc][sc]in|mutante|mutation|impf|pandemi|κορ[ωο]ν[αο]ϊό|корона|expert|infe[ck]tion|in[cz]iden[cz]|sars-cov
-          /filter addreplace joinquit * irc_join,irc_part,irc_quit,irc_nick *
-          /filter addreplace playlist_topic irc.*.#the_playlist irc_topic *
-
-          /set irc.look.server_buffer independent
-
-          /connect libera
-          /connect hackint
-          /connect retiolum
-          /connect news
-        '';
-      };
-    };
-  in {
-    description = "Weechat bouncer";
-    after = [ "network.target" ];
-    wantedBy = [ "multi-user.target" ];
-    restartIfChanged = true;
-    path = [ pkgs.alacritty.terminfo ];
-    environment.WEECHAT_HOME = "/var/lib/weechat";
-    script = "${tmux} -2 new-session -d -s IM ${weechat}/bin/weechat";
-    preStop = "${tmux} kill-session -t IM";
-    serviceConfig = {
-      User = "weechat";
-      RemainAfterExit = true;
-      Type = "oneshot";
-    };
-  };
-
-  users.groups.weechat = {};
-  users.extraUsers.weechat = {
-    useDefaultShell = true;
-    openssh.authorizedKeys.keys = kieran.sshKeys pkgs ++ [
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC+KVDmYYH7mA8v81e9O3swXm3ZVYY9t4HP65ud61uXy weechat_android@heym"
-    ];
-    createHome = true;
-    group = "weechat";
-    home = "/var/lib/weechat";
-    isSystemUser = true;
-    packages = [ pkgs.tmux ];
-  };
-}

configs/wifi.nix

@@ -1,53 +0,0 @@
-{ pkgs, ... }:
-{
-  networking.wireless = {
-    enable = true;
-    userControlled.enable = true;
-    networks = {
-      "Aether" = {
-        pskRaw = "e1b18af54036c5c9a747fe681c6a694636d60a5f8450f7dec0d76bc93e2ec85a";
-        priority = 10;
-      };
-      "Asoziales Netzwerk" = {
-        pskRaw = "8e234041ec5f0cd1b6a14e9adeee9840ed51b2f18856a52137485523e46b0cb6";
-        priority = 10;
-      };
-      "Libertarian WiFi" = {
-        pskRaw = "e9beaae6ffa55d10e80b8a2e7d997411d676a3cc6f1f29d0b080391f04555050";
-        priority = 9;
-      };
-      "EasyBox-927376".pskRaw = "dbd490ab69b39bd67cfa06daf70fc3ef3ee90f482972a668ed758f90f5577c22";
-      "FlixBus Wi-Fi" = { };
-      "FlixBus" = { };
-      "FlixTrain" = { };
-      "BVG Wi-Fi" = { };
-      "wannseeforum" = { }; # login via curl -XPOST http://WannseeLancom.intern.:80/authen/login/ -d userid=$USER_ID -d password=$PASSWORD
-      "Hotel_Krone" = { }; # login: http://192.168.10.1/
-      "Ni/Schukajlow".pskRaw = "ffc47f6829da59c48aea878a32252223303f5c47a3859edc90971ffc63346781";
-      "WIFIonICE" = { }; # login: http://10.101.64.10/
-      "WLAN-914742".psk = "67647139648174545446";
-      "KDG-CEAA4".psk = "PBkBSmejcvM4";
-      "KDG-4ECF7".psk = "Gdbwh7afw2Bx";
-      "WLAN-XVMU6T".pskRaw = "46ea807283255a3d7029233bd79c18837df582666c007c86a8d591f65fae17cc";
-      "c-base-public" = { };
-      "discord".psk = "baraustrinken";
-      "GoOnline".psk = "airbnbguest";
-      "security-by-obscurity".psk = "44629828256481964386";
-      "Mayflower".psk = "Fr31EsLan";
-      "Born11".psk = "56LMVLbw840EGNWk0RYRqvgicx3FSO";
-      "FactoryCommunityGuest".psk = "Factory4ever";
-      "krebs".psk = "aidsballs";
-      "b-base".pskRaw = "44040369a63d5bce4576637e8d34aeb3ed3d178011386decb99da473418e9861";
-      "c-base".pskRaw = "1355ccb287407bcd0caa4a7a399367c28b1e11bf5da34dd100d4b86ac4cafe46";
-      "o2-WLAN66".pskRaw = "9fc24da5ee0c7cf73321f5efa805370c246c4121413ea4f2373c0b7e41ec65e4";
-      "Vodafone-8012".pskRaw = "45a998e3e07f83ae0b4f573535fb3ccfd808b364a22f349878ced889a6fffe2c";
-      "yinyin".pskRaw = "ee85005d339df61e1e1a8484b96318513e15c46f222c3c06e8959fbc256569e7";
-      "Light Hope".psk = "FriendsofMara63069!";
-      "WG-Jung".psk = "BerlinMadridParisTokyo";
-      "FRITZ!Box 7590 NT".psk = "90699935547611192380";
-      "AA".psk = "Hallo1234";
-    };
-  };
-
-  environment.systemPackages = [ pkgs.wpa_supplicant_gui ];
-}

configs/wpa_supplicant.nix

@@ -0,0 +1,6 @@
+{
+  networking.wireless = {
+    enable = true;
+    networks.Aether.pskRaw = "e1b18af54036c5c9a747fe681c6a694636d60a5f8450f7dec0d76bc93e2ec85a";
+  };
+}

deploy.nix

@@ -1,68 +0,0 @@
-let
-  inherit (import ./lib/default.nix) sshPort;
-
-  gitFromJson = path:
-    let object = importJson path;
-    in {
-      inherit (object) url;
-      ref = object.rev;
-    };
-  krops = builtins.fetchGit (gitFromJson .versions/krops.json);
-  lib = import "${krops}/lib";
-  pkgs = import "${krops}/pkgs" { };
-  importJson = (import <nixpkgs> { }).lib.importJSON;
-
-  regularSystem = { path, name, address }: {
-    source = lib.evalSource [{
-      niveum.file = toString ./.;
-      system.file = toString path;
-      nixos-config.symlink = "system/configuration.nix";
-
-      nixpkgs.git = gitFromJson .versions/nixpkgs.json // { shallow = true; };
-      nixpkgs-unstable.git = gitFromJson .versions/nixpkgs-unstable.json // { shallow = true; };
-      home-manager.git = gitFromJson .versions/home-manager.json;
-      stockholm.git = gitFromJson .versions/stockholm.json;
-      retiolum.git = gitFromJson .versions/retiolum.json;
-      nur.git = gitFromJson .versions/nur.json;
-      nixpkgs-mozilla.git = gitFromJson .versions/nixpkgs-mozilla.json;
-      system-secrets.pass = {
-        dir = toString ~/.password-store;
-        name = "systems/${name}";
-      };
-      secrets.pass = {
-        dir = toString ~/.password-store;
-        name = "shared";
-      };
-    }];
-    target = "root@${address}:${toString sshPort}";
-  };
-  inherit (pkgs.krops) writeDeploy;
-in {
-  zaatar = writeDeploy "deploy-zaatar" (regularSystem {
-    path = systems/zaatar;
-    name = "zaatar";
-    address = "zaatar.r";
-  });
-  wilde = writeDeploy "deploy-wilde" (regularSystem {
-    path = systems/wilde;
-    name = "wilde";
-    address = "wilde.r";
-  });
-  toum = writeDeploy "deploy-toum" (regularSystem {
-    path = systems/toum;
-    name = "toum";
-    address = "toum.r";
-  }) // {
-    buildTarget = "${builtins.getEnv "USER"}@localhost/${builtins.getEnv "HOME"}/.cache/krops";
-  };
-  makanek = writeDeploy "deploy-makanek" (regularSystem {
-    path = systems/makanek;
-    name = "makanek";
-    address = "makanek.r";
-  });
-  manakish = writeDeploy "deploy-manakish" (regularSystem {
-    path = systems/manakish;
-    name = "manakish";
-    address = "manakish.r";
-  });
-}

flake.lock

@@ -0,0 +1,293 @@
+{
+  "nodes": {
+    "flake-utils": {
+      "locked": {
+        "lastModified": 1644229661,
+        "narHash": "sha256-1YdnJAsNy69bpcjuoKdOYQX0YxZBiCYZo4Twxerqv7k=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "3cecb5b042f7f209c56ffd8371b2711a290ec797",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "home-manager": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1643933536,
+        "narHash": "sha256-yRmsWAG4DnLxLIUtlaZsl0kH7rN5xSoyNRlf0YZrcH4=",
+        "owner": "nix-community",
+        "repo": "home-manager",
+        "rev": "2860d7e3bb350f18f7477858f3513f9798896831",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "release-21.11",
+        "repo": "home-manager",
+        "type": "github"
+      }
+    },
+    "krops": {
+      "inputs": {
+        "flake-utils": [
+          "flake-utils"
+        ],
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1644957911,
+        "narHash": "sha256-ggie/j7pdBqzDs4W7OiPmhqH9IGbXAbJxGqBdVxA8jA=",
+        "owner": "Mic92",
+        "repo": "krops",
+        "rev": "86fb3d2ee94fd8306231853b323ed8804edf26ec",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Mic92",
+        "repo": "krops",
+        "type": "github"
+      }
+    },
+    "menstruation-backend": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1634573652,
+        "narHash": "sha256-FIj8oCOJO+Wqxr2o5MMqIShvzMJud4iUq3o8y4NIRvw=",
+        "owner": "kmein",
+        "repo": "menstruation.rs",
+        "rev": "dd405fe2acf32441e8ac56e488e689bb1c4bea82",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kmein",
+        "repo": "menstruation.rs",
+        "type": "github"
+      }
+    },
+    "menstruation-telegram": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1634815642,
+        "narHash": "sha256-q1OTMx5ayNu9ppHJBDUie/ow+BcA5DXnHEm11EY+C4E=",
+        "owner": "kmein",
+        "repo": "menstruation-telegram",
+        "rev": "a34555cf46f02157718b0565b5456348fff54181",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kmein",
+        "repo": "menstruation-telegram",
+        "type": "github"
+      }
+    },
+    "nix-writers": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1554228333,
+        "narHash": "sha256-hG/PlcCvCQhNcU55NpHfATkyH9k6cZmO7uvBoJjasXU=",
+        "ref": "master",
+        "rev": "c528cf970e292790b414b4c1c8c8e9d7e73b2a71",
+        "revCount": 32,
+        "type": "git",
+        "url": "https://cgit.krebsco.de/nix-writers"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://cgit.krebsco.de/nix-writers"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1644837400,
+        "narHash": "sha256-treFS89w/xKzeTjJSJdYp/Ceddv6oqq7bL9mZMQDPi0=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "a03ae0e6d078cfdbb8404c3bff3622bd4e2f1c57",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-21.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs-unstable": {
+      "locked": {
+        "lastModified": 1644951967,
+        "narHash": "sha256-j+l8bt++dsYTJSGABuqeBEom5aNpD4n0BsOTdewFYuU=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "05e1f8a2c7797b0d9f9e07ab2aaeccecdcf9b7da",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "master",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "recht": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1619583518,
+        "narHash": "sha256-3eFw6xWue9cvPxXq1ROq32ecvPOmqOedgQhyOr7N9iE=",
+        "owner": "kmein",
+        "repo": "recht",
+        "rev": "d551afed23122bb3106e59eb2274394ec5555048",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kmein",
+        "repo": "recht",
+        "type": "github"
+      }
+    },
+    "retiolum": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1644849126,
+        "narHash": "sha256-iaRNvfQrUD+ZownDWWNdDwhVPgSsU5ojvVdswVq1IpY=",
+        "owner": "krebs",
+        "repo": "retiolum",
+        "rev": "6de359ef848dc1f38fb76731c35e712ee885fd88",
+        "type": "github"
+      },
+      "original": {
+        "owner": "krebs",
+        "repo": "retiolum",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "home-manager": "home-manager",
+        "krops": "krops",
+        "menstruation-backend": "menstruation-backend",
+        "menstruation-telegram": "menstruation-telegram",
+        "nix-writers": "nix-writers",
+        "nixpkgs": "nixpkgs",
+        "nixpkgs-unstable": "nixpkgs-unstable",
+        "recht": "recht",
+        "retiolum": "retiolum",
+        "scripts": "scripts",
+        "stockholm": "stockholm",
+        "telebots": "telebots",
+        "tinc-graph": "tinc-graph",
+        "traadfri": "traadfri",
+        "tuna": "tuna"
+      }
+    },
+    "scripts": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1639436812,
+        "narHash": "sha256-6CajvfDo7t4ANgjc7DxqH7lI3WRE4MK8q3mBKAjk80k=",
+        "owner": "kmein",
+        "repo": "scripts",
+        "rev": "d34a8161ba11135a45d3141dc9af482db945d63c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kmein",
+        "repo": "scripts",
+        "type": "github"
+      }
+    },
+    "stockholm": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1644865613,
+        "narHash": "sha256-z7hPtMYxoQuWyLujUs5vbdZOGbjFosh+/IX3GpCDlkc=",
+        "ref": "master",
+        "rev": "e3785b22b2c6cb173a58fd066c4eda80a67fb872",
+        "revCount": 10404,
+        "type": "git",
+        "url": "https://cgit.lassul.us/stockholm"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://cgit.lassul.us/stockholm"
+      }
+    },
+    "telebots": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1623510321,
+        "narHash": "sha256-MxYNNL81RXZkYLd4IgiNTSo1X80kTuDzsdGNSA0f1y8=",
+        "owner": "kmein",
+        "repo": "telebots",
+        "rev": "22931c9457e092c4e413555dbe61819d77844246",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kmein",
+        "repo": "telebots",
+        "type": "github"
+      }
+    },
+    "tinc-graph": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1639820904,
+        "narHash": "sha256-d4s2PulBGIIQXtX7blZz+Wnmij5dK/IrBcilNGjqZC4=",
+        "owner": "kmein",
+        "repo": "tinc-graph",
+        "rev": "1b9c69ffdbdab82d30a23e44f739feea63d94163",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kmein",
+        "repo": "tinc-graph",
+        "type": "github"
+      }
+    },
+    "traadfri": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1640451803,
+        "narHash": "sha256-zS/b93uFpPM9basNP7ngmm+YjYV0IUQAmNghetHA6Ss=",
+        "owner": "kmein",
+        "repo": "traadfri",
+        "rev": "cf46bd09cd3263b90a09b0ca979aa705a4c3671c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kmein",
+        "repo": "traadfri",
+        "type": "github"
+      }
+    },
+    "tuna": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1627117248,
+        "narHash": "sha256-OfqbWLblJY4BJlrCpn8EkHoP3baNJSDTbw45SPaX+0Q=",
+        "owner": "kmein",
+        "repo": "tuna",
+        "rev": "1cbed44069a3009738afdafecefe0a05316039a6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "kmein",
+        "repo": "tuna",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

flake.nix

@@ -0,0 +1,92 @@
+{
+  description = "niveum: packages, modules, systems";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-21.11";
+    nixpkgs-unstable.url = "github:NixOS/nixpkgs/master";
+    flake-utils.url = "github:numtide/flake-utils";
+    home-manager = {
+      url = "github:nix-community/home-manager/release-21.11";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    krops = {
+      url = "github:Mic92/krops";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-utils.follows = "flake-utils";
+    };
+
+    # legacy
+    menstruation-backend = { url = "github:kmein/menstruation.rs"; flake = false; };
+    menstruation-telegram = { url = "github:kmein/menstruation-telegram"; flake = false; };
+    nix-writers = { url = "git+https://cgit.krebsco.de/nix-writers"; flake = false; };
+    recht = { url = "github:kmein/recht"; flake = false; };
+    retiolum = { url = "github:krebs/retiolum"; flake = false; };
+    scripts = { url = "github:kmein/scripts"; flake = false; };
+    stockholm = { url = "git+https://cgit.lassul.us/stockholm"; flake = false; };
+    telebots = { url = "github:kmein/telebots"; flake = false; };
+    tinc-graph = { url = "github:kmein/tinc-graph"; flake = false; };
+    traadfri = { url = "github:kmein/traadfri"; flake = false; };
+    tuna = { url = "github:kmein/tuna"; flake = false; };
+  };
+
+  outputs =
+  { self
+  , flake-utils
+  , home-manager
+  , krops
+  , menstruation-backend
+  , menstruation-telegram
+  , nix-writers
+  , nixpkgs
+  , nixpkgs-unstable
+  , recht
+  , retiolum
+  , scripts
+  , stockholm
+  , telebots
+  , tinc-graph
+  , traadfri
+  , tuna
+  }@inputs:
+  let
+    system = "x86_64-linux";
+    pkgs = nixpkgs.legacyPackages.${system};
+    source = name: {
+      niveum.file = toString ./.;
+      nixos-config.symlink = "niveum/systems/${name}/configuration.nix";
+      system-secrets.pass = {
+        dir = toString ~/.password-store;
+        name = "systems/${name}";
+      };
+      secrets.pass = {
+        dir = toString ~/.password-store;
+        name = "shared";
+      };
+    } // nixpkgs.lib.mapAttrs' (name: value: {
+      inherit name;
+      value.file = toString value;
+    }) (nixpkgs.lib.filterAttrs (name: _: !builtins.elem name [ "flake-utils" "krops" "self" ]) inputs);
+    deployScriptFor = {name, host}: let inherit (import ./lib/default.nix) sshPort; in toString (krops.packages.${system}.writeDeploy "deploy-${name}" {
+      source = krops.lib.evalSource [ (source name) ];
+      target = "root@${host}:${toString sshPort}";
+    });
+  in {
+    apps.${system} = let
+      forSystems = f: builtins.listToAttrs (map f (builtins.attrNames (builtins.readDir ./systems)));
+      deployScripts = forSystems (name: {
+        name = "deploy-${name}";
+        value = {
+          type = "app";
+          program = deployScriptFor { inherit name; host = "${name}.r"; };
+        };
+      });
+      ciScripts = forSystems (name: {
+        name = "build-${name}";
+        value = {
+          type = "app";
+          program = import ./ci.nix { inherit name system inputs; };
+        };
+      });
+    in deployScripts // ciScripts;
+  };
+}

lib/colours/ibm-3270.nix

@@ -0,0 +1,37 @@
+rec {
+  black = {
+    bright = "#888888";
+    dark = "#222222";
+  };
+  red = {
+    bright = "#ef8383";
+    dark = "#f01818";
+  };
+  yellow = {
+    bright = "#efe28b";
+    dark = "#f8d824";
+  };
+  green = {
+    bright = "#23d830";
+    dark = "#7ed684";
+  };
+  blue = {
+    bright = "#b3bfef";
+    dark = "#7890f0";
+  };
+  magenta = {
+    bright = "#efb3e3";
+    dark = "#f078d8";
+  };
+  cyan = {
+    bright = "#9ce2e2";
+    dark = "#54e4e4";
+  };
+  white = {
+    bright = "#ffffff";
+    dark = "#a5a5a5";
+  };
+  background = "#000000";
+  foreground = "#bbbbbb";
+  cursor = green.bright;
+}

lib/default.nix

@@ -1,15 +1,27 @@
 rec {
   tmpfilesConfig = {type, path, mode ? "-", user ? "-", group ? "-", age ? "-", argument ? "-"}: "${type} '${path}' ${mode} ${user} ${group} ${age} ${argument}";
 
+  restic = rec {
+    port = 3571;
+    host = "zaatar.r";
+    repository = "rest:http://${host}:${toString port}/";
+  };
+
   firewall = lib: {
     accept = { source, protocol, dport }: "nixos-fw -s ${lib.escapeShellArg source} -p ${lib.escapeShellArg protocol} --dport ${lib.escapeShellArg (toString dport)} -j nixos-fw-accept";
     addRules = lib.concatMapStringsSep "\n" (rule: "iptables -A ${rule}");
     removeRules = lib.concatMapStringsSep "\n" (rule: "iptables -D ${rule} || true");
   };
 
+  serveHtml = file: pkgs: ''
+    default_type "text/html";
+    root ${pkgs.linkFarm "fahrplan" [{ name = "index.html"; path = file; }]};
+    index index.html;
+  '';
+
   sshPort = 22022;
 
-  colours = import ./colours/mac-os.nix;
+  colours = import ./colours/ibm-3270.nix;
 
   theme = pkgs: {
     gtk = {
@@ -28,6 +40,8 @@ rec {
 
   defaultApplications = import ./default-applications.nix;
 
+  retiolumAddresses = import ./retiolum-network.nix;
+
   localAddresses = import ./local-network.nix;
 
   email-sshKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINKz33wHtPuIfgXEb0+hybxFGV9ZuPsDTLUZo/+hlcdA";
@@ -43,10 +57,11 @@ rec {
   };
 
   syncthing.devices = {
-    wilde.id = "R6DEBD7-G5RYDKN-VFA3HPO-WX4DNVI-373F7OQ-AW5MZTT-3L4BDVW-Y6ROEAF";
+    kabsa.id = "R6DEBD7-G5RYDKN-VFA3HPO-WX4DNVI-373F7OQ-AW5MZTT-3L4BDVW-Y6ROEAF";
     heym.id = "HLQSG3D-WSKLA6S-MEYQ3EU-GDBGABE-PY53RQ6-SWQAP2I-Z5MVBVX-MYPJXAM";
     manakish.id = "AJVBWR2-VFFAGZF-7ZF5JAX-T63GMOG-NZ446WK-MC5E6WK-6X6Q2HE-QQA2JQ3";
     toum.id = "CBJQXFF-FMFGWFU-2J6FMPR-SRDTSGX-7NHOYOH-CQCABKF-KQJMRJC-SDE24Q4";
+    zaatar.id = "CGHO6LK-ZJBAXBD-UWI7AH3-BXYARE6-EUIM7PE-O2FUCOM-VCCRNCM-IG34WQ7";
   };
 
   ignorePaths = [

lib/goldendict-config.nix

@@ -0,0 +1,179 @@
+{pkgs, path}: ''
+  <config>
+   <paths>
+    <path recursive="1">${path}</path>
+   </paths>
+   <sounddirs/>
+   <dictionaryOrder name="" id="0">
+    <mutedDictionaries/>
+   </dictionaryOrder>
+   <inactiveDictionaries name="" id="0">
+    <mutedDictionaries/>
+   </inactiveDictionaries>
+   <groups nextId="1"/>
+   <hunspell dictionariesPath=""/>
+   <transliteration>
+    <enableRussianTransliteration>0</enableRussianTransliteration>
+    <enableGermanTransliteration>0</enableGermanTransliteration>
+    <enableGreekTransliteration>0</enableGreekTransliteration>
+    <enableBelarusianTransliteration>0</enableBelarusianTransliteration>
+    <chinese>
+     <enable>0</enable>
+     <enableSCToTWConversion>1</enableSCToTWConversion>
+     <enableSCToHKConversion>1</enableSCToHKConversion>
+     <enableTCToSCConversion>1</enableTCToSCConversion>
+    </chinese>
+    <romaji>
+     <enable>0</enable>
+     <enableHepburn>1</enableHepburn>
+     <enableNihonShiki>0</enableNihonShiki>
+     <enableKunreiShiki>0</enableKunreiShiki>
+     <enableHiragana>1</enableHiragana>
+     <enableKatakana>1</enableKatakana>
+    </romaji>
+   </transliteration>
+   <forvo>
+    <enable>0</enable>
+    <apiKey></apiKey>
+    <languageCodes></languageCodes>
+   </forvo>
+   <mediawikis>
+    <mediawiki enabled="0" name="English Wikipedia" icon="" id="ae6f89aac7151829681b85f035d54e48" url="https://en.wikipedia.org/w"/>
+    <mediawiki enabled="0" name="English Wiktionary" icon="" id="affcf9678e7bfe701c9b071f97eccba3" url="https://en.wiktionary.org/w"/>
+    <mediawiki enabled="0" name="German Wikipedia" icon="" id="a8a66331a1242ca2aeb0b4aed361c41d" url="https://de.wikipedia.org/w"/>
+    <mediawiki enabled="0" name="German Wiktionary" icon="" id="21c64bca5ec10ba17ff19f3066bc962a" url="https://de.wiktionary.org/w"/>
+   </mediawikis>
+   <websites>
+    <website enabled="0" name="Google En-En (Oxford)" icon="" id="b88cb2898e634c6638df618528284c2d" url="https://www.google.com/search?q=define:%GDWORD%&amp;hl=en" inside_iframe="1"/>
+    <website enabled="0" name="Urban Dictionary" icon="" id="f376365a0de651fd7505e7e5e683aa45" url="https://www.urbandictionary.com/define.php?term=%GDWORD%" inside_iframe="1"/>
+    <website enabled="0" name="Multitran (En)" icon="" id="324ca0306187df7511b26d3847f4b07c" url="https://multitran.ru/c/m.exe?CL=1&amp;l1=1&amp;s=%GD1251%" inside_iframe="1"/>
+    <website enabled="0" name="Lingvo (En-Ru)" icon="" id="924db471b105299c82892067c0f10787" url="http://lingvopro.abbyyonline.com/en/Search/en-ru/%GDWORD%" inside_iframe="1"/>
+    <website enabled="0" name="Michaelis (Pt-En)" icon="" id="087a6d65615fb047f4c80eef0a9465db" url="http://michaelis.uol.com.br/moderno/ingles/index.php?lingua=portugues-ingles&amp;palavra=%GDISO1%" inside_iframe="1"/>
+   </websites>
+   <dictservers/>
+   <programs>
+    <program enabled="0" name="Espeak" icon="" id="2cf8b3a60f27e1ac812de0b57c148340" commandLine="${pkgs.espeak}/bin/espeak %GDWORD%" type="0"/>
+    <program enabled="0" name="Manpages" icon="" id="4f898f7582596cea518c6b0bfdceb8b3" commandLine="${pkgs.man_db}/bin/man -a --html=/bin/cat %GDWORD%" type="2"/>
+   </programs>
+   <voiceEngines/>
+   <mutedDictionaries/>
+   <popupMutedDictionaries>
+    <mutedDictionary>ae6f89aac7151829681b85f035d54e48</mutedDictionary>
+   </popupMutedDictionaries>
+   <preferences>
+    <interfaceLanguage></interfaceLanguage>
+    <helpLanguage></helpLanguage>
+    <displayStyle>modern</displayStyle>
+    <newTabsOpenAfterCurrentOne>0</newTabsOpenAfterCurrentOne>
+    <newTabsOpenInBackground>1</newTabsOpenInBackground>
+    <hideSingleTab>0</hideSingleTab>
+    <mruTabOrder>0</mruTabOrder>
+    <hideMenubar>0</hideMenubar>
+    <enableTrayIcon>1</enableTrayIcon>
+    <startToTray>1</startToTray>
+    <closeToTray>1</closeToTray>
+    <autoStart>0</autoStart>
+    <doubleClickTranslates>1</doubleClickTranslates>
+    <selectWordBySingleClick>0</selectWordBySingleClick>
+    <escKeyHidesMainWindow>0</escKeyHidesMainWindow>
+    <zoomFactor>1</zoomFactor>
+    <helpZoomFactor>1</helpZoomFactor>
+    <wordsZoomLevel>0</wordsZoomLevel>
+    <enableMainWindowHotkey>1</enableMainWindowHotkey>
+    <mainWindowHotkey>Ctrl+F11, Ctrl+F11</mainWindowHotkey>
+    <enableClipboardHotkey>1</enableClipboardHotkey>
+    <clipboardHotkey>Ctrl+C, Ctrl+C</clipboardHotkey>
+    <enableScanPopup>1</enableScanPopup>
+    <startWithScanPopupOn>0</startWithScanPopupOn>
+    <enableScanPopupModifiers>0</enableScanPopupModifiers>
+    <scanPopupModifiers>0</scanPopupModifiers>
+    <scanPopupAltMode>0</scanPopupAltMode>
+    <scanPopupAltModeSecs>3</scanPopupAltModeSecs>
+    <ignoreOwnClipboardChanges>0</ignoreOwnClipboardChanges>
+    <scanToMainWindow>0</scanToMainWindow>
+    <ignoreDiacritics>0</ignoreDiacritics>
+    <showScanFlag>0</showScanFlag>
+    <scanPopupUseUIAutomation>1</scanPopupUseUIAutomation>
+    <scanPopupUseIAccessibleEx>1</scanPopupUseIAccessibleEx>
+    <scanPopupUseGDMessage>1</scanPopupUseGDMessage>
+    <scanPopupUnpinnedWindowFlags>0</scanPopupUnpinnedWindowFlags>
+    <scanPopupUnpinnedBypassWMHint>0</scanPopupUnpinnedBypassWMHint>
+    <pronounceOnLoadMain>0</pronounceOnLoadMain>
+    <pronounceOnLoadPopup>0</pronounceOnLoadPopup>
+    <useInternalPlayer>1</useInternalPlayer>
+    <internalPlayerBackend>FFmpeg+libao</internalPlayerBackend>
+    <audioPlaybackProgram>mplayer</audioPlaybackProgram>
+    <alwaysOnTop>1</alwaysOnTop>
+    <searchInDock>1</searchInDock>
+    <historyStoreInterval>0</historyStoreInterval>
+    <favoritesStoreInterval>0</favoritesStoreInterval>
+    <confirmFavoritesDeletion>1</confirmFavoritesDeletion>
+    <proxyserver enabled="0" useSystemProxy="0">
+     <type>0</type>
+     <host></host>
+     <port>3128</port>
+     <user></user>
+     <password></password>
+     <systemProxyUser></systemProxyUser>
+     <systemProxyPassword></systemProxyPassword>
+    </proxyserver>
+    <disallowContentFromOtherSites>0</disallowContentFromOtherSites>
+    <enableWebPlugins>0</enableWebPlugins>
+    <hideGoldenDictHeader>0</hideGoldenDictHeader>
+    <maxNetworkCacheSize>50</maxNetworkCacheSize>
+    <clearNetworkCacheOnExit>1</clearNetworkCacheOnExit>
+    <maxStringsInHistory>500</maxStringsInHistory>
+    <storeHistory>1</storeHistory>
+    <alwaysExpandOptionalParts>0</alwaysExpandOptionalParts>
+    <addonStyle></addonStyle>
+    <collapseBigArticles>0</collapseBigArticles>
+    <articleSizeLimit>2000</articleSizeLimit>
+    <limitInputPhraseLength>0</limitInputPhraseLength>
+    <inputPhraseLengthLimit>1000</inputPhraseLengthLimit>
+    <maxDictionaryRefsInContextMenu>20</maxDictionaryRefsInContextMenu>
+    <trackClipboardChanges>0</trackClipboardChanges>
+    <synonymSearchEnabled>1</synonymSearchEnabled>
+    <fullTextSearch>
+     <searchMode>0</searchMode>
+     <matchCase>0</matchCase>
+     <maxArticlesPerDictionary>100</maxArticlesPerDictionary>
+     <maxDistanceBetweenWords>2</maxDistanceBetweenWords>
+     <useMaxArticlesPerDictionary>0</useMaxArticlesPerDictionary>
+     <useMaxDistanceBetweenWords>1</useMaxDistanceBetweenWords>
+     <dialogGeometry></dialogGeometry>
+     <disabledTypes></disabledTypes>
+     <enabled>1</enabled>
+     <ignoreWordsOrder>0</ignoreWordsOrder>
+     <ignoreDiacritics>0</ignoreDiacritics>
+     <maxDictionarySize>0</maxDictionarySize>
+    </fullTextSearch>
+   </preferences>
+   <lastMainGroupId>0</lastMainGroupId>
+   <lastPopupGroupId>0</lastPopupGroupId>
+   <popupWindowState>AAAA/wAAAAH9AAAAAAAAAg0AAAGTAAAABAAAAAQAAAAIAAAACPwAAAABAAAAAQAAAAEAAAAaAGQAaQBjAHQAaQBvAG4AYQByAHkAQgBhAHIDAAAAAP////8AAAAAAAAAAA==</popupWindowState>
+   <popupWindowGeometry>AdnQywADAAAAAAC6AAABEgAAAuYAAAKkAAAAugAAARIAAALmAAACpAAAAAAAAAAABVYAAAC6AAABEgAAAuYAAAKk</popupWindowGeometry>
+   <pinPopupWindow>0</pinPopupWindow>
+   <popupWindowAlwaysOnTop>0</popupWindowAlwaysOnTop>
+   <mainWindowState>AAAA/wAAAAH9AAAAAgAAAAAAAADMAAAC0PwCAAAAAfsAAAAUAHMAZQBhAHIAYwBoAFAAYQBuAGUBAAAAFAAAAtAAAAB9AP///wAAAAEAAADMAAAC0PwCAAAAA/sAAAASAGQAaQBjAHQAcwBQAGEAbgBlAQAAABQAAAFvAAAAYQD////7AAAAGgBmAGEAdgBvAHIAaQB0AGUAcwBQAGEAbgBlAAAAABQAAALQAAAAYQD////7AAAAFgBoAGkAcwB0AG8AcgB5AFAAYQBuAGUBAAABhAAAAWAAAABhAP///wAAA7QAAALQAAAABAAAAAQAAAAIAAAACPwAAAABAAAAAgAAAAIAAAAUAG4AYQB2AFQAbwBvAGwAYgBhAHIAAAAAAP////8AAAAAAAAAAAAAABoAZABpAGMAdABpAG8AbgBhAHIAeQBCAGEAcgAAAAAA/////wAAAAAAAAAA</mainWindowState>
+   <mainWindowGeometry>AdnQywADAAAAAAAEAAAAGAAABVEAAAL7AAAABAAAABgAAAVRAAAC+wAAAAAAAAAABVYAAAAEAAAAGAAABVEAAAL7</mainWindowGeometry>
+   <helpWindowGeometry>AdnQywADAAAAAAF3AAAAgwAAA9AAAAJGAAABeAAAAIQAAAPPAAACRQAAAAAAAAAABVYAAAF4AAAAhAAAA88AAAJF</helpWindowGeometry>
+   <helpSplitterState>AAAA/wAAAAEAAAACAAABBAAABAAB/////wEAAAABAA==</helpSplitterState>
+   <dictInfoGeometry>AdnQywADAAAAAAF1AAAAmgAAA84AAAIrAAABdgAAAJsAAAPNAAACKgAAAAAAAAAABVYAAAF2AAAAmwAAA80AAAIq</dictInfoGeometry>
+   <inspectorGeometry></inspectorGeometry>
+   <timeForNewReleaseCheck></timeForNewReleaseCheck>
+   <skippedRelease></skippedRelease>
+   <showingDictBarNames>1</showingDictBarNames>
+   <usingSmallIconsInToolbars>1</usingSmallIconsInToolbars>
+   <editDictionaryCommandLine></editDictionaryCommandLine>
+   <maxPictureWidth>0</maxPictureWidth>
+   <maxHeadwordSize>256</maxHeadwordSize>
+   <maxHeadwordsToExpand>0</maxHeadwordsToExpand>
+   <headwordsDialog>
+    <searchMode>0</searchMode>
+    <matchCase>0</matchCase>
+    <autoApply>0</autoApply>
+    <headwordsExportPath></headwordsExportPath>
+    <headwordsDialogGeometry></headwordsDialogGeometry>
+   </headwordsDialog>
+  </config>
+''

lib/i3status-rust.nix

@@ -94,39 +94,43 @@ in {
     }
     {
       block = "custom";
-      interval = 60 * 60;
-      command = pkgs.writers.writeDash "vax" ''
-        ${pkgs.curl}/bin/curl -sSL https://api.corona-zahlen.org/vaccinations \
-          | ${pkgs.jq}/bin/jq -r '"💉 Ⅰ \(.data.quote * 1000 | floor | . / 10)% Ⅱ \(.data.secondVaccination.quote * 1000 | floor | . / 10)%"'
+      interval = 60 * 5;
+      command = let spacetime = import <niveum/configs/spacetime.nix>; in pkgs.writers.writePython3 "sun.py" { libraries = [ pkgs.python3Packages.astral ]; flakeIgnore = [ "E121" "E501" ]; }
+      ''
+        import astral
+        import astral.moon
+        import astral.sun
+
+        moon_phases = {
+          0: "🌑",
+          3.5: "🌒",
+          7: "🌓",
+          10.5: "🌔",
+          14: "🌕",
+          17.5: "🌖",
+          21: "🌗",
+          24.5: "🌘",
+          28: "🌑",
+        }
+        current_phase = astral.moon.phase()
+        closest_phase = min(moon_phases.keys(), key=lambda x: abs(current_phase - x))
+
+        city = astral.LocationInfo("Berlin", "Germany", "${spacetime.time.timeZone}", ${toString spacetime.location.latitude}, ${toString spacetime.location.longitude})
+        sun = astral.sun.sun(city.observer, date=astral.today(), tzinfo=city.timezone)
+
+        print("🌅 {} 🌇 {} {} {}".format(sun["sunrise"].strftime("%R"), sun["sunset"].strftime("%R"), moon_phases[closest_phase], round(current_phase, 1)))
       '';
     }
     {
-      block = "custom";
-      interval = 30;
-      command =
-        let query = "tag:unread AND tag:inbox";
-        in pkgs.writers.writeDash "count-new-mail" ''
-          mail_count="$(${pkgs.notmuch}/bin/notmuch search ${lib.escapeShellArg query} | wc -l)"
-          [ "$mail_count" = 0 ] && printf "📭" || printf "📬"
-          echo "$mail_count"
-        '';
-    }
-    (let service = "openvpn-hu-berlin"; in {
       block = "custom";
       interval = 5;
-      command = pkgs.writers.writeDash "net-device" ''
+      command = pkgs.writers.writeDash "hu-berlin-vpn" ''
         PATH=${lib.makeBinPath [ pkgs.systemd ]}
-        systemctl is-active --quiet ${service}.service && echo "🎓👍" || echo "🎓👎"
+        (systemctl is-active --quiet openvpn-hu-berlin.service && echo "🎓👍 (OpenVPN)") \
+          || (systemctl is-active --quiet hu-vpn.service && echo "🎓👍 (PPP+SSL)") \
+          || echo "🎓👎"
       '';
-      on_click = pkgs.writers.writeDash "toggle" ''
-        PATH=${lib.makeBinPath [ pkgs.systemd pkgs.libnotify ]}
-        systemctl is-active --quiet ${service}.service && {
-          systemctl stop ${service}.service && notify-send -a "${service}" stopped
-        } || {
-          systemctl start ${service}.service && notify-send -a "${service}" started
-        }
-      '';
-    })
+    }
     {
       block = "net";
       device = wirelessInterface;

lib/local-network.nix

@@ -1,7 +1,7 @@
 {
   toum = "192.168.178.24";
   zaatar = "192.168.178.21";
-  wilde = "192.168.178.32";
+  kabsa = "192.168.178.32";
   android = "192.168.178.35";
   manakish = "192.168.178.29";
 

lib/radiorecord.json

@@ -0,0 +1,482 @@
+[
+  {
+    "station": "Record",
+    "desc": "Танцевальный мейнстрим",
+    "logo": "https://radiorecord.ru/upload/stations_images/record_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/rr_main96.aacp"
+  },
+  {
+    "station": "Party 24/7",
+    "desc": "Нон-стоп вечеринка с зарубежными танцевальными хитами",
+    "logo": "https://radiorecord.ru/upload/stations_images/party-24-7_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/party96.aacp"
+  },
+  {
+    "station": "Organic",
+    "desc": "Легкий грув. В стиле Tim Green и Sebastien Leger",
+    "logo": "https://radiorecord.ru/upload/stations_images/organic_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/organic96.aacp"
+  },
+  {
+    "station": "Chill House",
+    "desc": "Легкий, мелодичный вайб",
+    "logo": "https://radiorecord.ru/upload/stations_images/chillhouse_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/chillhouse96.aacp"
+  },
+  {
+    "station": "Lo-Fi",
+    "desc": "Ламповый бит и треск винила. В стиле Nujabes и J Dilla",
+    "logo": "https://radiorecord.ru/upload/stations_images/lofi_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/lofi96.aacp"
+  },
+  {
+    "station": "Dream Pop",
+    "desc": "Лёгкий вайб для отдыха и хорошего настроения",
+    "logo": "https://radiorecord.ru/upload/stations_images/dream-pop_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/dreampop96.aacp"
+  },
+  {
+    "station": "Ambient",
+    "desc": "Атмосферный саунд",
+    "logo": "https://radiorecord.ru/upload/stations_images/ambient_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/ambient96.aacp"
+  },
+  {
+    "station": "Innocence",
+    "desc": "Techno, Minimal, Deep. Саунд как у Solomun, Boris Brejcha и Nina Kravitz",
+    "logo": "https://radiorecord.ru/upload/stations_images/ibiza_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/ibiza96.aacp"
+  },
+  {
+    "station": "Deep",
+    "desc": "Глубокое house-звучание",
+    "logo": "https://radiorecord.ru/upload/stations_images/deep_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/deep96.aacp"
+  },
+  {
+    "station": "Tech House",
+    "desc": "На стыке хауса и техно. В стиле Fisher и Dont Blink",
+    "logo": "https://radiorecord.ru/upload/stations_images/techouse_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/techouse96.aacp"
+  },
+  {
+    "station": "Russian Mix",
+    "desc": "Русские хиты в танцевальной обработке: Zivert, Niletto, Rasa",
+    "logo": "https://radiorecord.ru/upload/stations_images/rus_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/rus96.aacp"
+  },
+  {
+    "station": "Chill-Out",
+    "desc": "Расслабляющий вайб",
+    "logo": "https://radiorecord.ru/upload/stations_images/chil_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/chil96.aacp"
+  },
+  {
+    "station": "Pirate Station",
+    "desc": "Лучшее из drum & bass: Pendulum, Chase & Status, Camo & Krooked",
+    "logo": "https://radiorecord.ru/upload/stations_images/ps_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/ps96.aacp"
+  },
+  {
+    "station": "Маятник Фуко",
+    "desc": "Новая школа русского рэпа без цензуры: Morgenshtern, Markul, Obladaet & co. [18+]",
+    "logo": "https://radiorecord.ru/upload/stations_images/mf_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/mf96.aacp"
+  },
+  {
+    "station": "Black Rap",
+    "desc": "Рэп на английском",
+    "logo": "https://radiorecord.ru/upload/stations_images/yo_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/yo96.aacp"
+  },
+  {
+    "station": "Trancemission",
+    "desc": "Лучшее из транс-музыки: Armin, Above & Beyond, Christina Novelli",
+    "logo": "https://radiorecord.ru/upload/stations_images/tm_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/tm96.aacp"
+  },
+  {
+    "station": "Megamix",
+    "desc": "Mash-up из главных хитов Рекорда со скоростью 5 треков в минуту! ",
+    "logo": "https://radiorecord.ru/upload/stations_images/mix_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/mix96.aacp"
+  },
+  {
+    "station": "Record Gold",
+    "desc": "Хиты Рекорда эпохи Avicii и Swedish House Mafia",
+    "logo": "https://radiorecord.ru/upload/stations_images/gold_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/gold96.aacp"
+  },
+  {
+    "station": "Big Hits",
+    "desc": "Зарубежные танцевальные хиты: Dua Lipa, Ave Max, Sia",
+    "logo": "https://radiorecord.ru/upload/stations_images/bighits_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/bighits96.aacp"
+  },
+  {
+    "station": "Remix",
+    "desc": "Иностранные хиты в танцевальной обработке: Black Eyed Peas, Ariana Grande, Ed Sheeran",
+    "logo": "https://radiorecord.ru/upload/stations_images/rmx_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/rmx96.aacp"
+  },
+  {
+    "station": "Russian Hits",
+    "desc": "Русский танцевальный поп: Клава Кока, Niletto, Тима Белорусских",
+    "logo": "https://radiorecord.ru/upload/stations_images/russianhits_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/russianhits96.aacp"
+  },
+  {
+    "station": "Summer Dance",
+    "desc": "Летние клубные хиты 24/7",
+    "logo": "https://radiorecord.ru/upload/stations_images/summer-dance_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/summerparty96.aacp"
+  },
+  {
+    "station": "Супердискотека 90-х",
+    "desc": "Танцевальные боевики нашей юности Руки Вверх, 2 Unlimited, Masterboy",
+    "logo": "https://radiorecord.ru/upload/stations_images/sd90_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/sd9096.aacp"
+  },
+  {
+    "station": "Russian Gold",
+    "desc": "Российские хиты в ремиксах",
+    "logo": "https://radiorecord.ru/upload/stations_images/russiangold_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/russiangold96.aacp"
+  },
+  {
+    "station": "Bass House",
+    "desc": "Современный house с характерным басом: Malaa, Volac, Valentino Khan",
+    "logo": "https://radiorecord.ru/upload/stations_images/jackin_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/jackin96.aacp"
+  },
+  {
+    "station": "VIP House",
+    "desc": "Изысканный саунд закрытых вечеринок",
+    "logo": "https://radiorecord.ru/upload/stations_images/vip_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/vip96.aacp"
+  },
+  {
+    "station": "Trance Classics",
+    "desc": "Главные хиты trance-музыки: Above&Beyond, Armin van Buuren, Ferry Corsten",
+    "logo": "https://radiorecord.ru/upload/stations_images/trancehits_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/trancehits96.aacp"
+  },
+  {
+    "station": "House Hits",
+    "desc": "Свежие house-новинки",
+    "logo": "https://radiorecord.ru/upload/stations_images/househits_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/househits96.aacp"
+  },
+  {
+    "station": "EDM",
+    "desc": "Музыка стадионов. ",
+    "logo": "https://radiorecord.ru/upload/stations_images/club_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/club96.aacp"
+  },
+  {
+    "station": "Minimal/Tech",
+    "desc": "Саунд изысканных и дорогих party",
+    "logo": "https://radiorecord.ru/upload/stations_images/mini_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/mini96.aacp"
+  },
+  {
+    "station": "Tropical",
+    "desc": "Жаркий и солнечный house",
+    "logo": "https://radiorecord.ru/upload/stations_images/trop_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/trop96.aacp"
+  },
+  {
+    "station": "House Classics",
+    "desc": "Золотой фонд мелодичных house-хитов",
+    "logo": "https://radiorecord.ru/upload/stations_images/houseclss_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/houseclss96.aacp"
+  },
+  {
+    "station": "D'n'B Classics",
+    "desc": "Золотые хиты drum'n'bass Aphrodite, Pendulum, Sub Focus",
+    "logo": "https://radiorecord.ru/upload/stations_images/drumhits_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/drumhits96.aacp"
+  },
+  {
+    "station": "EDM Classics",
+    "desc": "Фестивальные гимны",
+    "logo": "https://radiorecord.ru/upload/stations_images/edmhits_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/edmhits96.aacp"
+  },
+  {
+    "station": "Future House",
+    "desc": "Future и Jackin' house: Don Diablo, Tchami, Oliver Heldens",
+    "logo": "https://radiorecord.ru/upload/stations_images/fut_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/fut96.aacp"
+  },
+  {
+    "station": "Trap",
+    "desc": "Главные Trap-хиты: Yellow Claw, Apashe, DJ Snake",
+    "logo": "https://radiorecord.ru/upload/stations_images/trap_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/trap96.aacp"
+  },
+  {
+    "station": "Rap Classics",
+    "desc": "Хип-хоп золотого периода: 2Pac, Cypress Hill, Notorius BIG, ONYX",
+    "logo": "https://radiorecord.ru/upload/stations_images/rapclassics_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/rapclassics96.aacp"
+  },
+  {
+    "station": "Progressive",
+    "desc": "Лучшее из progressive trance & house",
+    "logo": "https://radiorecord.ru/upload/stations_images/progr_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/progr96.aacp"
+  },
+  {
+    "station": "Breaks",
+    "desc": "Лучшее из breakbit, nu breaks и jungle",
+    "logo": "https://radiorecord.ru/upload/stations_images/brks_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/brks96.aacp"
+  },
+  {
+    "station": "Trancehouse",
+    "desc": "Trancehouse - сочетание трансовой мелодики и хаусового бита.",
+    "logo": "https://radiorecord.ru/upload/stations_images/trancehouse_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/trancehouse96.aacp"
+  },
+  {
+    "station": "Rap Hits",
+    "desc": "Рэп новой волны из России и из-за рубежа",
+    "logo": "https://radiorecord.ru/upload/stations_images/rap_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/rap96.aacp"
+  },
+  {
+    "station": "GOA/PSY",
+    "desc": "Психоделический и Goa-trance",
+    "logo": "https://radiorecord.ru/upload/stations_images/goa_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/goa96.aacp"
+  },
+  {
+    "station": "Dream Dance",
+    "desc": "Мелодичный trance 90х-00х: Robert Miles, ATB, Blank&Jones",
+    "logo": "https://radiorecord.ru/upload/stations_images/dream_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/dream96.aacp"
+  },
+  {
+    "station": "Uplifting",
+    "desc": "Атмосферный и космический trance",
+    "logo": "https://radiorecord.ru/upload/stations_images/uplift_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/uplift96.aacp"
+  },
+  {
+    "station": "Electro",
+    "desc": "Лучшее в Electro-house: Wolfgang Gatner, Knife Party, Curbi",
+    "logo": "https://radiorecord.ru/upload/stations_images/elect_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/elect96.aacp"
+  },
+  {
+    "station": "Future Bass",
+    "desc": "Flume, Illenium, Marshmello",
+    "logo": "https://radiorecord.ru/upload/stations_images/fbass_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/fbass96.aacp"
+  },
+  {
+    "station": "Neurofunk",
+    "desc": "Технологичный и стремительный бит: Black Sun Empire, Dimension, Camo & Krooked",
+    "logo": "https://radiorecord.ru/upload/stations_images/neurofunk_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/neurofunk96.aacp"
+  },
+  {
+    "station": "Dancecore",
+    "desc": "Dance на скорости до 150bpm",
+    "logo": "https://radiorecord.ru/upload/stations_images/dc_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/dc96.aacp"
+  },
+  {
+    "station": "Liquid Funk",
+    "desc": "Атмосферный drum'b'bass",
+    "logo": "https://radiorecord.ru/upload/stations_images/liquidfunk_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/liquidfunk96.aacp"
+  },
+  {
+    "station": "Eurodance",
+    "desc": "Дискотечные бэнгеры 90-х: Culture Beat, Haddaway, La Bouche",
+    "logo": "https://radiorecord.ru/upload/stations_images/eurodance_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/eurodance96.aacp"
+  },
+  {
+    "station": "Dubstep",
+    "desc": "Басы на максимум!",
+    "logo": "https://radiorecord.ru/upload/stations_images/dub_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/dub96.aacp"
+  },
+  {
+    "station": "Technopop",
+    "desc": "Технопоп эпохи 90-х: E-Type, Masterboy, Culture Beat",
+    "logo": "https://radiorecord.ru/upload/stations_images/technopop_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/technopop96.aacp"
+  },
+  {
+    "station": "Techno",
+    "desc": "Техно для тех, кто любит пожёстче",
+    "logo": "https://radiorecord.ru/upload/stations_images/techno_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/techno96.aacp"
+  },
+  {
+    "station": "Disco/Funk",
+    "desc": "Disco-саунд нового тысячелетия",
+    "logo": "https://radiorecord.ru/upload/stations_images/discofunk_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/discofunk96.aacp"
+  },
+  {
+    "station": "Hardstyle",
+    "desc": "Маршевый бас и мелодичный лид: бескомпромиссная смесь",
+    "logo": "https://radiorecord.ru/upload/stations_images/teo_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/teo96.aacp"
+  },
+  {
+    "station": "Tecktonik",
+    "desc": "Стиль, породивший танцевальный бум 2000-х",
+    "logo": "https://radiorecord.ru/upload/stations_images/tecktonik_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/tecktonik96.aacp"
+  },
+  {
+    "station": "Midtempo",
+    "desc": "Dance на минималках",
+    "logo": "https://radiorecord.ru/upload/stations_images/mt_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/mt96.aacp"
+  },
+  {
+    "station": "Synthwave",
+    "desc": "Вайб в стиле электронной музыки 80-х",
+    "logo": "https://radiorecord.ru/upload/stations_images/synth_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/synth96.aacp"
+  },
+  {
+    "station": "Old School",
+    "desc": "Саунд рейвов начала 00-х: DJ Aligator, Klubbheads, Club Caviar",
+    "logo": "https://radiorecord.ru/upload/stations_images/pump_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/pump96.aacp"
+  },
+  {
+    "station": "Hard Bass",
+    "desc": "Расколбас родившийся в Петербурге.",
+    "logo": "https://radiorecord.ru/upload/stations_images/hbass_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/hbass96.aacp"
+  },
+  {
+    "station": "Darkside",
+    "desc": "Тёмная сторона drum'n'bass: Noisia, Panacea, Limewax",
+    "logo": "https://radiorecord.ru/upload/stations_images/darkside_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/darkside96.aacp"
+  },
+  {
+    "station": "Hypnotic",
+    "desc": "Идеальный бэкграунд для работы или поездки в авто",
+    "logo": "https://radiorecord.ru/upload/stations_images/hypno_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/hypno96.aacp"
+  },
+  {
+    "station": "Moombahton",
+    "desc": "Синтез house- и reggae-ритмов.",
+    "logo": "https://radiorecord.ru/upload/stations_images/mmbt_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/mmbt96.aacp"
+  },
+  {
+    "station": "2-step",
+    "desc": "Атмосферные синкопированные ритмы",
+    "logo": "https://radiorecord.ru/upload/stations_images/2step_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/2step96.aacp"
+  },
+  {
+    "station": "Groove/Tribal",
+    "desc": "Этнический бит",
+    "logo": "https://radiorecord.ru/upload/stations_images/groovetribal_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/groovetribal96.aacp"
+  },
+  {
+    "station": "Christmas",
+    "desc": "Музыка с запахом мандаринов и хвои. Новогоднее настроение 24/7",
+    "logo": "https://radiorecord.ru/upload/stations_images/christmas-radio_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/christmas96.aacp"
+  },
+  {
+    "station": "Rave FM",
+    "desc": "Первоапрельский спецпроект",
+    "logo": "https://radiorecord.ru/upload/stations_images/rave_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/rave96.aacp"
+  },
+  {
+    "station": "Jungle",
+    "desc": "История и современность jungle-музыки: DJ Hype, Shy FX, Ed Rush",
+    "logo": "https://radiorecord.ru/upload/stations_images/jungle_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/jungle96.aacp"
+  },
+  {
+    "station": "Complextro",
+    "desc": "Синтез house и dubstep",
+    "logo": "https://radiorecord.ru/upload/stations_images/complextro_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/complextro96.aacp"
+  },
+  {
+    "station": "Гоп FM",
+    "desc": "Первоапрельский спецпроект. Памп и лоходенс",
+    "logo": "https://radiorecord.ru/upload/stations_images/gop_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/gop96.aacp"
+  },
+  {
+    "station": "Rock",
+    "desc": "Первоапрельский спецпроект: от Цоя до Metallica",
+    "logo": "https://radiorecord.ru/upload/stations_images/rock_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/rock96.aacp"
+  },
+  {
+    "station": "60's Dance",
+    "desc": "Танцевальная музыка эпохи рок-н-ролла",
+    "logo": "https://radiorecord.ru/upload/stations_images/cadillac_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/cadillac96.aacp"
+  },
+  {
+    "station": "70's Dance",
+    "desc": "Легендарный грув. Abba, Boney M, Bee Gees",
+    "logo": "https://radiorecord.ru/upload/stations_images/1970_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/197096.aacp"
+  },
+  {
+    "station": "Record 80-х",
+    "desc": "Ритмы советской и зарубежной эстрады. C. C. Catch, Modern Talking, В. Леонтьев и Ласковый Май",
+    "logo": "https://radiorecord.ru/upload/stations_images/1980_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/198096.aacp"
+  },
+  {
+    "station": "Руки Вверх!",
+    "desc": "24 часа в сутки - только песни Руки Вверх!",
+    "logo": "https://radiorecord.ru/upload/stations_images/rv19_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/rv96.aacp"
+  },
+  {
+    "station": "Веснушка FM",
+    "desc": "Первоапрельский спецпроект: песни детства",
+    "logo": "https://radiorecord.ru/upload/stations_images/deti_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/deti96.aacp"
+  },
+  {
+    "station": "Медляк FM",
+    "desc": "Первоапрельский спецпроект",
+    "logo": "https://radiorecord.ru/upload/stations_images/mdl_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/mdl96.aacp"
+  },
+  {
+    "station": "Нафталин FM",
+    "desc": "Первоапрельский спецпроект",
+    "logo": "https://radiorecord.ru/upload/stations_images/naft_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/naft96.aacp"
+  },
+  {
+    "station": "Гастарбайтер FM",
+    "desc": "Первоапрельский спецпроект",
+    "logo": "https://radiorecord.ru/upload/stations_images/gast_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/gast96.aacp"
+  },
+  {
+    "station": "Симфония FM",
+    "desc": "Первоапрельский спецпроект: Моцарт, Бетховен, Чайковский & co.",
+    "logo": "https://radiorecord.ru/upload/stations_images/symph_image600_colored_fill.png",
+    "stream": "https://radiorecord.hostingradio.ru/symph96.aacp"
+  }
+]

lib/retiolum-network.nix

@@ -0,0 +1,21 @@
+{
+  kabsa = {
+    ipv4 = "10.243.2.4";
+    ipv6 = "42:0:3c46:861f:a118:8e9a:82c9:3d";
+  };
+
+  zaatar = {
+    ipv4 = "10.243.2.34";
+    ipv6 = "42:0:3c46:156e:10b6:3bd6:6e82:b2cd";
+  };
+
+  makanek = {
+    ipv4 = "10.243.2.84";
+    ipv6 = "42:0:3c46:f7a9:1f0a:1b2b:822a:6050";
+  };
+
+  manakish = {
+    ipv4 = "10.243.2.85";
+    ipv6 = "42:0:3c46:ac99:ae36:cb8:c551:ba27";
+  };
+}

lib/vim/init.vim

@@ -17,16 +17,14 @@ let maplocalleader="\\"
 
 " noremap <Leader>h :<C-u>split<CR>
 " noremap <Leader>v :<C-u>vsplit<CR>
-noremap <Leader>gs :Gstatus<CR>
-noremap <Leader>gc :Gcommit<CR>
+noremap <Leader>gs :Git<CR>
+noremap <Leader>gc :Git commit<CR>
 noremap <leader>n :bn<CR>
 noremap <leader>p :bp<CR>
 noremap <leader>c :bd<CR>
 noremap <leader>b :Buffers<CR>
 noremap <leader>t :Tags<CR>
 
-noremap <leader>f :Goyo<CR>
-
 " reindent whole file
 noremap <leader>i mzgg=G`z
 
@@ -58,22 +56,21 @@ set wrap
 set nohlsearch
 set clipboard=unnamedplus
 set nopaste
-set list listchars=tab:⇥\ ,extends:❯,precedes:❮,nbsp:␣,trail:· showbreak=↪
+set list listchars=tab:⇥\ ,extends:❯,precedes:❮,nbsp:␣,trail:· showbreak=¬
 set foldlevelstart=30
 
 iabbrev ddate <C-R>=strftime("%F")<CR>
+iabbrev dtime <C-R>=strftime("%F %T")<CR>
 
-" if exists("g:loaded_netrwPlugin")
 let g:netrw_banner=0
 let g:netrw_browse_split=4
 let g:netrw_altv=1 " open splits to the right
 let g:netrw_liststyle=3 " tree view
 let g:netrw_list_hide=netrw_gitignore#Hide()
 let g:netrw_list_hide.=',\(^\|\s\s\)\zs\.\S\+'
-" endif
 
-" call matchadd('colorcolumn', '\%101v', 100)
-" highlight colorcolumn ctermbg=red
+call matchadd('colorcolumn', '\%101v', 100)
+highlight colorcolumn ctermbg=red
 
 " undofile - This allows you to use undos after exiting and restarting
 " This, like swap and backups, uses .vim-undo first, then ~/.vim/undo
@@ -82,8 +79,7 @@ if exists("+undofile")
   if isdirectory($HOME . '/.vim/undo') == 0
     :silent !mkdir -p ~/.vim/undo > /dev/null 2>&1
   endif
-  set undodir=./.vim-undo//
-  set undodir+=~/.vim/undo//
+  set undodir=~/.vim/undo/
   set undofile
 endif
 
@@ -113,60 +109,37 @@ command! ToggleBackground call s:toggle_background()
 inoremap <F12> <C-O>:ToggleBackground<CR>
 nnoremap <F12> :ToggleBackground<CR>
 
-if has("autocmd")
-  autocmd bufnewfile,bufread *.4th set filetype=forth
-  autocmd bufnewfile,bufread *.asm set filetype=nasm
-  autocmd bufnewfile,bufread *.c set keywordprg=man\ 3
-  autocmd bufnewfile,bufread *.conf set filetype=conf
-  autocmd bufnewfile,bufread *.fs packadd vim-fsharp | set filetype=fsharp
-  autocmd bufnewfile,bufread *.h set keywordprg=man\ 3
-  autocmd bufnewfile,bufread *.nix packadd vim-nix | set filetype=nix | set path+=/var/src
-  autocmd bufnewfile,bufread *.rust packadd rust-vim " | packadd deoplete-rust
-  autocmd bufnewfile,bufread *.csv packadd csv-vim | set filetype=csv
-  autocmd bufnewfile,bufread *.toml packadd vim-toml | set filetype=toml
-  autocmd bufnewfile,bufread *.nim packadd nim-vim | set filetype=nim
-  autocmd bufnewfile,bufread *.tex packadd vimtex | set filetype=tex
-  autocmd bufnewfile,bufread *.ics packadd icalendar.vim | set filetype=icalendar
-  autocmd bufnewfile,bufread *.ts packadd typescript-vim | set filetype=typescript
-  autocmd bufnewfile,bufread *.purs packadd purescript-vim | set filetype=purescript
-  autocmd bufnewfile,bufread *.jq packadd jq.vim
-  autocmd bufnewfile,bufread *.re packadd vim-reason-plus | set filetype=reason
-  autocmd bufnewfile,bufread *.journal packadd vim-ledger | set filetype=ledger shiftwidth=4
-  autocmd bufnewfile,bufread urls,config set filetype=conf
-  autocmd bufnewfile,bufread *.elm packadd elm-vim | set filetype=elm shiftwidth=4
-  autocmd bufnewfile,bufread *.dhall packadd dhall-vim | set filetype=dhall
-  autocmd filetype haskell packadd haskell-vim | set keywordprg=hoogle\ -i
-  autocmd filetype javascript packadd vim-javascript
-  autocmd filetype make setlocal noexpandtab
-  autocmd filetype html packadd emmet-vim
-  autocmd filetype gitcommit setlocal spell spelllang=en
-  autocmd filetype mail setlocal spell spelllang=de textwidth=0 | command Send %! mail-send
-  autocmd bufreadpost *
-        \ if line("'\"") > 0 && line("'\"") <= line("$") |
-        \ exe "normal! g`\"" |
-        \ endif
-  autocmd bufreadpre * setlocal foldmethod=indent
-  " autocmd bufwritepre * :call <SID>StripTrailingWhitespaces()
-  " autocmd bufwinenter * if &fdm == 'indent' | setlocal foldmethod=manual | endif
+autocmd bufnewfile,bufread *.4th set filetype=forth
+autocmd bufnewfile,bufread *.asm set filetype=nasm
+autocmd bufnewfile,bufread *.c set keywordprg=man\ 3
+autocmd bufnewfile,bufread *.h set keywordprg=man\ 3
+autocmd bufnewfile,bufread *.conf set filetype=conf
+autocmd bufnewfile,bufread *.nix packadd vim-nix | set filetype=nix | set path+=/var/src
+autocmd bufnewfile,bufread *.rust packadd rust-vim
+autocmd bufnewfile,bufread *.csv packadd csv.vim | set filetype=csv
+autocmd bufnewfile,bufread *.tex packadd vimtex | set filetype=tex
+autocmd bufnewfile,bufread *.ics packadd icalendar.vim | set filetype=icalendar
+autocmd bufnewfile,bufread *.ts packadd typescript-vim | set filetype=typescript
+autocmd bufnewfile,bufread *.jq packadd jq.vim
+autocmd bufnewfile,bufread *.journal packadd vim-ledger | set filetype=ledger shiftwidth=4
+autocmd bufnewfile,bufread urls,config set filetype=conf
+autocmd bufnewfile,bufread *.elm packadd elm-vim | set filetype=elm shiftwidth=4
+autocmd bufnewfile,bufread *.md packadd vim-pandoc | packadd vim-pandoc-syntax | set filetype=pandoc
+autocmd filetype haskell packadd haskell-vim | set keywordprg=hoogle\ -i
+autocmd filetype javascript packadd vim-javascript
+autocmd filetype make setlocal noexpandtab
 
-  autocmd VimEnter * UpdateRemotePlugins
-endif
+autocmd filetype html packadd emmet-vim
+autocmd filetype gitcommit setlocal spell spelllang=en
+autocmd filetype mail setlocal spell spelllang=de textwidth=0
+autocmd bufreadpost *
+      \ if line("'\"") > 0 && line("'\"") <= line("$") |
+      \ exe "normal! g`\"" |
+      \ endif
+autocmd bufreadpre * setlocal foldmethod=indent
 
-let g:startify_custom_header = ''
-
-" let g:deoplete#enable_at_startup = 1
 set completeopt=noinsert,menuone,noselect
 set complete+=kspell
-" let g:deoplete#sources = {}
-" let g:deoplete#sources._ = ['ale', 'file', 'omni', 'buffer']
-"
-" let g:deoplete#sources#rust#racer_binary = $HOME . '/.cargo/bin/racer'
-" let g:deoplete#sources#rust#rust_source_path = substitute(system('rustc --print sysroot'), '\n$', '', '') . '/lib/rustlib/src/rust/src'
-
-inoremap ^] ^X^]
-inoremap ^F ^X^F
-inoremap ^D ^X^D
-inoremap ^L ^X^L
 
 let g:SuperTabDefaultCompletionType = 'context'
 
@@ -196,38 +169,16 @@ let g:ale_fixers = {
       \ 'typescript': ['prettier'],
       \ 'css': ['prettier'],
       \ 'html': ['prettier'],
-      \ 'markdown': ['prettier'],
       \ 'json': ['jq'],
       \ 'python': ['black'],
       \ 'rust': ['rustfmt']
       \}
 let g:ale_set_quickfix = 1
+
 let g:ale_fix_on_save = 1
+autocmd bufnewfile,bufread elm.json let g:ale_fix_on_save = 0
+
 let g:ale_completion_enabled = 1
 
-"if exists("g:loaded_airline")
-" set noshowmode laststatus=0 noruler
-let g:airline#extensions#tabline#close_symbol = 'X'
-let g:airline#extensions#tabline#enabled = 0
-"let g:airline#extensions#tabline#left_alt_sep = ''
-"let g:airline#extensions#tabline#left_sep = ''
-"let g:airline#extensions#tabline#right_alt_sep = ''
-"let g:airline#extensions#tabline#right_sep = ''
-let g:airline#extensions#tabline#show_close_button = 1
-let g:airline#extensions#tabline#show_tab_type = 0
-let g:airline#extensions#tabline#tab_min_count = 2
-let g:airline#extensions#tabline#tab_nr_type = 0
-let g:airline#extensions#tmuxline#enabled = 0
-"let g:airline#extensions#wordcount#enabled = 1
-"let g:airline_left_alt_sep = ''
-"let g:airline_left_sep = ''
-"let g:airline_right_alt_sep = ''
-"let g:airline_right_sep = ''
-let g:airline_section_z = '%{line(".")}/%{line("$")} %{col(".")}'
-"endif
-"if exists("g:loaded_airline_themes")
-let g:airline_theme='base16'
-"endif
-
 let g:vimwiki_list = [{'path': '~/notes/',
-                      \ 'syntax': 'markdown', 'ext': '.md'}]
+      \ 'syntax': 'markdown', 'ext': '.md'}]

modules/moodle-dl.nix

@@ -56,6 +56,7 @@ in {
     users.users.moodle-dl = {
       isSystemUser = true;
       home = cfg.directory;
+      group = "moodle-dl";
     };
 
     users.groups.moodle-dl = {};

modules/networkmanager-declarative.nix

@@ -0,0 +1,50 @@
+# https://github.com/jmackie/nixos-networkmanager-profiles/
+{ lib, config, ... }:
+with lib;
+let
+  nm = config.networking.networkmanager;
+
+  mkProfile = profileAttrs:
+    if !(isAttrs profileAttrs) then
+      throw "error 1"
+    else {
+      enable = true;
+      mode = "0400"; # readonly (user)
+      text = (foldlAttrs (accum:
+        { name, value }: ''
+          ${accum}
+
+          [${name}] ${mkProfileEntry value}'')
+        "# Generated by nixos-networkmanager-profiles" profileAttrs) + "\n";
+    };
+
+  mkProfileEntry = entryAttrs:
+    if !(isAttrs entryAttrs) then
+      throw "error 2"
+    else
+      foldlAttrs (accum:
+        { name, value }: ''
+          ${accum}
+          ${name}=${toString value}'') "" entryAttrs;
+
+  foldlAttrs = op: nul: attrs:
+    foldl (accum: { fst, snd }: op accum (nameValuePair fst snd)) nul
+    (lists.zipLists (attrNames attrs) (attrValues attrs));
+
+  attrLength = attrs: length (attrValues attrs);
+
+in {
+  options.networking.networkmanager.profiles = mkOption {
+    type = types.attrs;
+    default = { };
+  };
+
+  config = mkIf (attrLength nm.profiles > 0) {
+    environment.etc = (foldlAttrs (accum:
+      { name, value }:
+      accum // {
+        "NetworkManager/system-connections/${name}.nmconnection" =
+          mkProfile value;
+      }) { } nm.profiles);
+  };
+}

modules/retiolum.nix

@@ -34,6 +34,7 @@ in {
         (name: _: builtins.readFile "${<retiolum/hosts>}/${name}")
         (builtins.readDir <retiolum/hosts>);
       rsaPrivateKeyFile = toString <system-secrets/retiolum.key>;
+      ed25519PrivateKeyFile = toString <system-secrets/retiolum.ed25519>;
       extraConfig = ''
         LocalDiscovery = yes
         AutoConnect = yes

modules/telegram-bot.nix

@@ -9,7 +9,7 @@ let
       startAt = bot.time;
       serviceConfig.Type = "oneshot";
       wants = [ "network-online.target" ];
-      script = strings.concatStringsSep "\n" ([ "QUOTE=$(${bot.command})" ]
+      script = strings.concatStringsSep "\n" ([ "QUOTE=$(${bot.command})" "if [ -n \"$QUOTE\" ]; then" ]
         ++ map (chatId: ''
           ${pkgs.curl}/bin/curl -s -X POST "https://api.telegram.org/bot${bot.token}/sendMessage" \
             -d chat_id="${chatId}" \
@@ -17,7 +17,8 @@ let
               lib.strings.optionalString (bot.parseMode != null)
               "-d parse_mode=${bot.parseMode}"
             }
-        '') bot.chatIds);
+        '') bot.chatIds
+        ++ [ "fi" ]);
     };
 in {
   options.niveum.telegramBots = mkOption {
@@ -27,7 +28,7 @@ in {
         time = mkOption { type = types.str; };
         token = mkOption { type = types.strMatching "[0-9A-Za-z:-]+"; };
         chatIds = mkOption {
-          type = types.listOf (types.strMatching "[0-9]+|@[A-Za-z0-9]+");
+          type = types.listOf (types.strMatching "-?[0-9]+|@[A-Za-z0-9]+");
         };
         command = mkOption { type = types.str; };
         parseMode = mkOption {

modules/traadfri.nix

@@ -2,14 +2,7 @@
 with lib;
 let
   cfg = config.niveum.traadfri;
-  traadfri = let
-    traadfri-package = pkgs.fetchFromGitHub {
-      owner = "kmein";
-      repo = "traadfri";
-      rev = "a55b778cf4c7f124e75070b056c90f5a8043bc45";
-      sha256 = "10ggqksdbgmcwc2f3xs6abjf9zpvv554xfl3b3bblmfijgr6srv9";
-    };
-  in pkgs.callPackage traadfri-package {
+  traadfri = pkgs.callPackage <traadfri> {
     libcoap = pkgs.callPackage <niveum/packages/libcoap.nix> { tls = true; };
   };
 in {
@@ -29,12 +22,6 @@ in {
   };
 
   config = mkIf cfg.enable {
-    environment.shellAliases = lib.attrsets.mapAttrs' (name: value:
-      lib.nameValuePair "traadfri-${name}" "traadfri --target Bulb ${toString value}")
-      cfg.bulbs // lib.attrsets.mapAttrs' (name: value:
-        lib.nameValuePair "traadfri-${name}" "traadfri --target Room ${toString value}")
-      cfg.rooms;
-
     environment.systemPackages = [
       (pkgs.writers.writeDashBin "traadfri" ''
         TRAADFRI_USER="${cfg.user}" \
@@ -42,6 +29,11 @@ in {
         TRAADFRI_HUB="${cfg.host}" \
         ${traadfri}/bin/traadfri $@
       '')
-    ];
+    ] ++ lib.mapAttrsToList (name: value: pkgs.writers.writeDashBin "traadfri-${name}" ''
+      exec traadfri --target Room ${toString value} "$@"
+    '') cfg.rooms
+    ++ lib.mapAttrsToList (name: value: pkgs.writers.writeDashBin "traadfri-${name}" ''
+      exec traadfri --target Bulb ${toString value} "$@"
+    '') cfg.bulbs;
   };
 }

modules/tuna.nix

@@ -1,13 +1,13 @@
 { config, lib, pkgs, ... }:
 with lib;
 let
-  mpd-fm = pkgs.callPackage <niveum/packages/MPD.FM> {};
-  cfg = config.services.mpd-fm;
+  tuna = pkgs.callPackage <tuna> {};
+  cfg = config.services.tuna;
 in {
   imports = [];
 
-  options.services.mpd-fm = {
-    enable = mkEnableOption "MPD.FM, an MPD web UI for radio streams";
+  options.services.tuna = {
+    enable = mkEnableOption "Tuna, an MPD web UI for radio streams";
 
     webPort = mkOption {
       type = types.port;
@@ -49,7 +49,7 @@ in {
 
     package = mkOption {
       type = types.package;
-      default = mpd-fm;
+      default = tuna;
     };
 
     mpd = {
@@ -70,13 +70,16 @@ in {
   };
 
   config = mkIf cfg.enable {
-    users.extraUsers.mpd-fm.isSystemUser = true;
+    users.users.tuna = {
+      isSystemUser = true;
+      group = "tuna";
+    };
+    users.groups.tuna = {};
     # ref https://github.com/florianheinemann/MPD.FM/blob/9d037cf87597b26ae2f10ba9feea48946ad6cc68/service/MPD.FM.service
-    systemd.services.mpd-fm = {
+    systemd.services.tuna = {
       wantedBy = [ "multi-user.target" ];
       after = [ "mpd.service" ];
-      description = "MPD.FM – an MPD web radio player web GUI";
-      script = "${cfg.package}/libexec/mpd.fm/deps/mpd.fm/bin/www";
+      script = "${cfg.package}/bin/tuna";
       environment = {
         NODE_ENV = "production";
         MPD_HOST = cfg.mpd.host;
@@ -88,8 +91,8 @@ in {
         Restart = "always";
         StandardOutput = "syslog";
         StandardError = "syslog";
-        SyslogIdentifier = "mpd-fm";
-        User = "mpd-fm";
+        SyslogIdentifier = "tuna";
+        User = "tuna";
       };
     };
   };

overlays/rust.nix

@@ -1 +0,0 @@
-import <nixpkgs-mozilla>