feat(weechat): oper on news.r, filter experts more expertly

this prevents mumble from interpreting the nick as an html tag

.gitignore

@@ -1,2 +1,5 @@
-secrets.nix
 result
+.direnv
+.envrc
+.history
+.todo

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "submodules/much"]
+	path = submodules/much
+	url = git@github.com:kmein/much

.versions/home-manager.json

@@ -0,0 +1,10 @@
+{
+  "url": "https://github.com/nix-community/home-manager.git",
+  "rev": "209566c752c4428c7692c134731971193f06b37c",
+  "date": "2021-02-09T15:29:47-05:00",
+  "path": "/nix/store/fslcg7lcxr87ca3ccqd1jcahjlq3ak44-home-manager",
+  "sha256": "1canlfkm09ssbgm3hq0kb9d86bdh84jhidxv75g98zq5wgadk7jm",
+  "fetchSubmodules": false,
+  "deepClone": false,
+  "leaveDotGit": false
+}

.versions/krops.json

@@ -0,0 +1,10 @@
+{
+  "url": "https://cgit.krebsco.de/krops",
+  "rev": "55aa2c77ce8183f3d2b24f54efa33ab6a42e1e02",
+  "date": "2020-04-19T01:06:20+02:00",
+  "path": "/nix/store/08wg2yrcgkr6iwipjd6g0fbwb7gacqax-krops",
+  "sha256": "00rvx9h596ync8wgic6xc9srzajzm28wlp9q7mv4z0jsb27l5bj8",
+  "fetchSubmodules": false,
+  "deepClone": false,
+  "leaveDotGit": false
+}

.versions/nixpkgs-unstable.json

@@ -0,0 +1,7 @@
+{
+  "url": "https://github.com/NixOS/nixpkgs.git",
+  "rev": "0ead6f8cfd461c3a366c8bc9893037afd89f798d",
+  "date": "2020-10-27T18:30:26+01:00",
+  "sha256": "170kziw7bxfm4mwi8q5c2vdpayml0mini4zyxagbvbivivdj5hla",
+  "fetchSubmodules": false
+}

.versions/nixpkgs.json

@@ -0,0 +1,10 @@
+{
+  "url": "https://github.com/NixOS/nixpkgs.git",
+  "rev": "2118cf551b9944cfdb929b8ea03556f097dd0381",
+  "date": "2021-02-13T10:35:51+01:00",
+  "path": "/nix/store/mk9v88y4dn54i22h5n6g7kmqyc998rf9-nixpkgs",
+  "sha256": "0ajsxh1clbf3q643gi8v6b0i0nn358hak0f265j7c1lrsbxyw457",
+  "fetchSubmodules": false,
+  "deepClone": false,
+  "leaveDotGit": false
+}

.versions/retiolum.json

@@ -0,0 +1,10 @@
+{
+  "url": "https://github.com/krebs/retiolum",
+  "rev": "0afb48d07db8840076a96e62fff954d068c0e3b6",
+  "date": "2021-02-13T20:32:12+01:00",
+  "path": "/nix/store/0gif6j27nxdjyhgd0pqq31a3ni3pmixp-retiolum",
+  "sha256": "1s68jk6wi4l6sqv0p83w2gg6p9z8v9i02kmnyjbj3gzhmf0c06na",
+  "fetchSubmodules": false,
+  "deepClone": false,
+  "leaveDotGit": false
+}

.versions/stockholm.json

@@ -0,0 +1,10 @@
+{
+  "url": "https://github.com/kmein/stockholm",
+  "rev": "f0325bef7954cb946674050847c6d52112cb658f",
+  "date": "2020-11-11T07:45:58+01:00",
+  "path": "/nix/store/lka6fhjfbwdx9bc7lk1bz4gizdv7nrbm-stockholm",
+  "sha256": "0gbw6n5yq36ysc30afa5d2dbsl2d46f73ms6f0rprdbr4nhdw8l2",
+  "fetchSubmodules": false,
+  "deepClone": false,
+  "leaveDotGit": false
+}

configs/alacritty.nix

@@ -0,0 +1,46 @@
+{ pkgs, lib, config, ... }:
+let
+  inherit (import <niveum/lib>) colours;
+  colourNames =
+    [ "black" "red" "green" "yellow" "blue" "magenta" "cyan" "white" ];
+  colourPairs = lib.getAttrs colourNames colours;
+  alacrittyConfig = {
+    background_opacity = 0.9;
+    colors = {
+      primary = { inherit (colours) background foreground; };
+      normal = lib.mapAttrs (_: colour: colour.dark) colourPairs;
+      bright = lib.mapAttrs (_: colour: colour.bright) colourPairs;
+    };
+    font = {
+      normal.family = "Monospace";
+      size = 6;
+    };
+    key_bindings = [
+      {
+        key = "Add";
+        mods = "Control";
+        action = "IncreaseFontSize";
+      }
+      {
+        key = "Minus";
+        mods = "Control";
+        action = "DecreaseFontSize";
+      }
+      {
+        key = "Key0";
+        mods = "Control";
+        action = "ResetFontSize";
+      }
+    ];
+  };
+in {
+  environment.variables.TERMINAL = "alacritty";
+
+  environment.systemPackages = [
+    pkgs.alacritty
+  ];
+
+  home-manager.users.me.xdg.configFile = {
+    "alacritty/alacritty.yml".text = builtins.toJSON alacrittyConfig;
+  };
+}

configs/bash.nix

@@ -1,6 +1,7 @@
 {
   programs.bash = {
-    promptInit = ''PS1="$(tput bold)\w \$([[ \$? == 0 ]] && echo \"\[\033[1;32m\]\" || echo \"\[\033[1;31m\]\")\$$(tput sgr0) "'';
+    promptInit = ''
+      PS1="$(tput bold)\w \$([[ \$? == 0 ]] && echo \"\[\033[1;32m\]\" || echo \"\[\033[1;31m\]\")\$$(tput sgr0) "'';
     interactiveShellInit = ''
       set -o vi
     '';

configs/bluetooth.nix

@@ -1,16 +1,11 @@
-{ pkgs, ... }:
-{
+{ pkgs, lib, ... }: {
   hardware.bluetooth = {
     enable = true;
-    extraConfig = ''
-      [General]
-      Enable=Source,Sink,Media,Socket
-    '';
+    config.General.Enable =
+      lib.concatStringsSep "," [ "Source" "Sink" "Media" "Socket" ];
   };
 
   environment.systemPackages = [ pkgs.blueman ];
 
-  home-manager.users.me = {
-    services.blueman-applet.enable = true;
-  };
+  home-manager.users.me = { services.blueman-applet.enable = false; };
 }

configs/calcurse.nix

@@ -0,0 +1,44 @@
+{ pkgs, lib, ... }:
+{
+  environment.systemPackages = [ pkgs.calcurse ];
+
+  systemd.services.caldav-sync = {
+    enable = true;
+    wants = [ "network-online.target" ];
+    startAt = "*:0/15";
+    serviceConfig.User = "kfm";
+    script = "${pkgs.calcurse}/bin/calcurse-caldav";
+  };
+
+  home-manager.users.me = {
+    home.file = {
+      ".calcurse/conf".text = ''
+        appearance.calendarview=monthly
+        appearance.layout=1
+        daemon.enable=no
+        daemon.log=no
+        format.inputdate=4
+        format.outputdate=%F
+        general.confirmquit=no
+        general.confirmdelete=yes
+        general.firstdayofweek=monday
+        appearance.theme=default on default
+      '';
+      ".calcurse/caldav/config".text = lib.generators.toINI {} {
+        General = {
+          Binary = "${pkgs.calcurse}/bin/calcurse";
+          Hostname = "posteo.de:8443";
+          Path = "/calendars/kieran.meinhardt/default/";
+          InsecureSSL = "No";
+          DryRun = "No";
+          Verbose = "Yes";
+        };
+        Auth = {
+          Username = "kieran.meinhardt@posteo.net";
+          Password = lib.strings.fileContents <secrets/mail/posteo>;
+        };
+      };
+    };
+  };
+
+}

configs/ccc.nix

@@ -0,0 +1,28 @@
+{ pkgs, ... }:
+# https://paste.sr.ht/~erictapen/11716989e489b600f237041b6d657fdf0ee17b34
+let
+  certificate = pkgs.stdenv.mkDerivation rec {
+    name = "dst-root-ca-x3.pem";
+    src = builtins.toFile "${name}.sed" ''
+      1,/DST Root CA X3/d
+      1,/-----END CERTIFICATE-----/p
+    '';
+    nativeBuildInputs = with pkgs; [ cacert gnused ];
+    phases = "installPhase";
+    installPhase = ''
+      ${pkgs.gnused}/bin/sed -n -f $src ${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt > $out
+    '';
+  };
+in {
+  networking.wireless.networks."36C3" = {
+    auth = ''
+      key_mgmt=WPA-EAP
+      eap=TTLS
+      identity="kmein"
+      password=" "
+      ca_cert="${certificate}"
+      altsubject_match="DNS:radius.c3noc.net"
+      phase2="auth=PAP"
+    '';
+  };
+}

configs/chromium.nix

@@ -1,17 +1,16 @@
-{ pkgs, ... }:
-{
+{ pkgs, ... }: {
   programs.chromium = {
     enable = true;
     extensions = [
       "hdokiejnpimakedhajhdlcegeplioahd" # LastPass
-      "ihlenndgcmojhcghmfjfneahoeklbjjh" # cVim
-      "fpnmgdkabkmnadcjpehmlllkndpkmiak" # Wayback Machine
+      # "ihlenndgcmojhcghmfjfneahoeklbjjh" # cVim
+      # "fpnmgdkabkmnadcjpehmlllkndpkmiak" # Wayback Machine
       "cjpalhdlnbpafiamejdnhcphjbkeiagm" # uBlock Origin
-      "iaalpfgpbocpdfblpnhhgllgbdbchmia" # asciidoctor
+      "khncfooichmfjbepaaaebmommgaepoid" # Remove YouTube Recommended Videos
     ];
   };
 
-  environment.systemPackages = [ pkgs.chromium ];
+  environment.systemPackages = [ pkgs.chromium pkgs.brave ];
 
-  niveum.applications.browser = "chromium";
+  environment.variables.BROWSER = "brave";
 }

configs/cloud.nix

@@ -1,26 +1,22 @@
-{ config, lib, pkgs, ... }:
-{
+{ config, lib, pkgs, ... }: {
   imports = [
-    <modules/seafile.nix>
-    <modules/google-drive.nix>
-    <modules/dropbox.nix>
-    <stockholm/krebs/3modules/syncthing.nix>
+    <niveum/modules/seafile.nix>
+    <niveum/modules/dropbox.nix>
   ];
 
-  niveum.dropbox = {
-    enable = true;
-    user = config.users.users.me;
+  niveum = {
+    dropbox.enable = true;
+    seafile.enable = true;
   };
 
-  niveum.seafile = {
-    enable = true;
-    user = config.users.users.me;
-  };
+  system.activationScripts.home-symlinks = ''
+    ln -sfn ${config.users.users.me.home}/cloud/syncthing/common/mahlzeit ${config.users.users.me.home}/mahlzeit
+    ln -sfn ${config.users.users.me.home}/cloud/Seafile/Wiki ${config.users.users.me.home}/notes
+    ln -sfn ${config.users.users.me.home}/cloud/Seafile/Uni ${config.users.users.me.home}/uni
+  '';
 
-  niveum.google-drive = rec {
-    enable = true;
-    directory = "${user.home}/cloud/gdrive";
-    user = config.users.users.me;
+  home-manager.users.me = {
+    services.nextcloud-client.enable = false;
   };
 
   services.syncthing = rec {
@@ -29,20 +25,22 @@
     openDefaultPorts = true;
     configDir = "/home/kfm/.config/syncthing";
     dataDir = "/home/kfm/.config/syncthing";
-  };
-
-  krebs.syncthing = rec {
-    enable = true;
-    key = toString <secrets/syncthing/key.pem>;
-    cert = toString <secrets/syncthing/cert.pem>;
-    peers = {
-      homeros.id = "HSOL72W-MMN346W-C3WCWCH-OTRKJYG-MY2WWV6-P7JUHN7-5WYYYRV-ZMH4KAA";
-      scardanelli.id = "7CZYHEX-3CSFDQU-PEEMYHG-6XGQ2ZD-KGVUWH5-GFRB2XK-FP57ERX-7APZUQU";
-      rilke.id = "NYNNHXP-7JMSTXG-SVNOPWD-RWXCCCL-CBOVBEI-X4QPLF4-NJA5G2P-RSGYRQQ";
-      wilde.id = "R6DEBD7-G5RYDKN-VFA3HPO-WX4DNVI-373F7OQ-AW5MZTT-3L4BDVW-Y6ROEAF";
+    declarative = rec {
+      cert = toString <system-secrets/syncthing/cert.pem>;
+      key = toString <system-secrets/syncthing/key.pem>;
+      inherit ((import <niveum/lib>).syncthing) devices;
+      folders =
+        let cloud-dir = "${config.users.users.me.home}/cloud";
+        in {
+          "${cloud-dir}/syncthing/common".devices = [ "wilde" "manakish" ];
+          "${cloud-dir}/syncthing/library".devices = [ "wilde" "manakish" "heym" ];
+          "${cloud-dir}/syncthing/mundoiu".devices = [ "wilde" "manakish" "heym" ];
+          "${cloud-dir}/syncthing/music".devices = [ "wilde" "manakish" "heym" ];
+          "${cloud-dir}/moodle" = {
+            devices = [ "wilde" "toum" "manakish" ];
+            id = "moodle-dl";
+          };
+        };
     };
-    folders."${config.users.users.me.home}/cloud/syncthing/common".peers = [ "homeros" "scardanelli" "wilde" ];
-    folders."${config.users.users.me.home}/cloud/syncthing/library".peers = lib.attrNames peers;
-    folders."${config.users.users.me.home}/cloud/syncthing/mundoiu".peers = lib.attrNames peers;
   };
 }

configs/compton.nix

@@ -2,7 +2,7 @@
   services.compton = {
     enable = true;
     shadow = true;
-    menuOpacity = "0.9";
-    shadowOpacity = "0.3";
+    menuOpacity = 0.9;
+    shadowOpacity = 0.3;
   };
 }

configs/default.nix

@@ -1,129 +1,46 @@
-{ pkgs, lib, config, ... }:
-{
+{ pkgs, lib, config, options, ... }:
+let
+  inherit (lib.strings) makeBinPath;
+  inherit (import <niveum/lib>) localAddresses kieran;
+in {
   imports = [
-    <modules/constants.nix>
-    {
-      services.dbus.packages = [ pkgs.gnome3.dconf ];
-    }
     <home-manager/nixos>
-    # <configs/mopidy.nix>
-    <configs/bash.nix>
-    <configs/bluetooth.nix>
-    <configs/chromium.nix>
-    <configs/cloud.nix>
-    <configs/compton.nix>
-    <configs/default.nix>
-    # <configs/home-assistant.nix>
-    <configs/distrobump.nix>
-    <configs/docker.nix>
-    <configs/dunst.nix>
-    <configs/fonts.nix>
-    <configs/git.nix>
-    <configs/haskell>
-    <configs/hledger.nix>
-    <configs/htop.nix>
-    <configs/hu-berlin.nix>
-    <configs/i3.nix>
-    <configs/kdeconnect.nix>
-    <configs/keybase.nix>
-    <configs/keyboard.nix>
-    <configs/mail.nix>
-    <configs/mpv.nix>
-    <configs/nano.nix>
-    <configs/neovim.nix>
-    <configs/nixpkgs-unstable.nix>
-    <configs/packages>
-    <configs/printing.nix>
-    <configs/python.nix>
-    <configs/random-background.nix>
-    <configs/redshift.nix>
-    <configs/retiolum.nix>
-    <configs/rofi.nix>
-    <configs/sncli.nix>
-    <configs/ssh.nix>
-    <configs/sudo.nix>
-    <configs/themes/owickstrom-dark.nix>
-    <configs/theming.nix>
-    <configs/tmux.nix>
-    <configs/todo-txt.nix>
-    <configs/traadfri.nix>
-    <configs/unclutter.nix>
-    <configs/urxvt.nix>
-    <configs/vscode.nix>
-    <configs/xautolock.nix>
-    <configs/xresources.nix>
-    <configs/zsh.nix>
+    <niveum/modules/system-dependent.nix>
     {
-      niveum.user = {
-        github = "kmein";
-        email = "kieran.meinhardt@gmail.com";
-        name = "Kierán Meinhardt";
-      };
-
-      niveum.applications = rec {
-        fileManager = "${config.niveum.applications.terminal} -e ${pkgs.ranger}/bin/ranger";
-      };
-
-      niveum.theme = {
-        gtk = { name = "Arc"; package = pkgs.arc-theme; };
-        icon = { name = "Arc"; package = pkgs.arc-icon-theme; };
-        cursor = { name = "capitaine-cursors"; package = pkgs.capitaine-cursors; };
-      };
+      boot.supportedFilesystems = [ "ntfs" ];
     }
     {
-      nixpkgs.config = {
-        allowUnfree = true;
-        packageOverrides = pkgs: {
-          python3Packages = pkgs.python3Packages.override {
-            overrides = new: old: {
-              spotify-cli-linux = new.callPackage <packages/spotify-cli-linux.nix> {};
-              instaloader = new.callPackage <packages/instaloader.nix> {};
-              sncli = new.callPackage <packages/sncli.nix> {};
-            };
-          };
-          haskellPackages = pkgs.haskellPackages.override {
-            overrides = new: old: {
-              blessings = new.callPackage <packages/blessings.nix> {};
-              scanner = new.callPackage <stockholm/krebs/5pkgs/haskell/scanner.nix> {};
-            };
-          };
-          git-quick-stats = pkgs.callPackage <packages/git-quick-stats.nix> {};
-          writeDash = pkgs.writers.writeDash;
-          writeDashBin = pkgs.writers.writeDashBin;
-          iolanguage = pkgs.callPackage <packages/iolanguage.nix> {};
-          nix-git = pkgs.callPackage <packages/nix-git.nix> {};
-
-          kmein = {
-            autorenkalender = pkgs.callPackage <packages/autorenkalender.nix> {};
-            bvg = pkgs.callPackage <packages/bvg.nix> {};
-            daybook = pkgs.callPackage <packages/daybook.nix> {};
-            font-size = pkgs.callPackage <packages/font-size.nix> { font = config.niveum.fonts.terminal; };
-            genius = pkgs.callPackage <packages/genius.nix> {};
-            instaget = pkgs.callPackage <packages/instaget.nix> {};
-            literature-quote = pkgs.callPackage <packages/literature-quote.nix> {};
-            n = pkgs.callPackage <packages/n.nix> {};
-            depp = pkgs.callPackage <packages/depp.nix> {};
-            odyssey = pkgs.callPackage <packages/odyssey.nix> {};
-            wttr = pkgs.callPackage <packages/wttr.nix> {};
-            nav = pkgs.callPackage <packages/nav.nix> {};
-            slide =
-              let slide-package = pkgs.fetchFromGitHub {
-                owner = "kmein";
-                repo = "slide";
-                rev = "0470583d22212745eab4f46076267addf4d2346c";
-                sha256 = "0skcp3va9v4hmxy5ramghpz53gnyxv10wsacgmc2jr0v1wrqlzbh";
+      nix.nixPath = [
+        "/var/src"
+        "nixpkgs-overlays=${toString ../overlays}"
+      ];
+    }
+    { services.dbus.packages = [ pkgs.gnome3.dconf ]; }
+    {
+      nixpkgs = {
+        config = {
+          allowUnfree = true;
+          packageOverrides = pkgs: {
+            nur = import (builtins.fetchTarball
+              "https://github.com/nix-community/NUR/archive/222ea29ec4afb09c5565a7e5dda14bfd65a4a9f6.tar.gz") {
+                inherit pkgs;
               };
-              in pkgs.callPackage slide-package {};
-            haskellPackages.mnemosyne =
-              let mnemosyne-package = pkgs.fetchFromGitHub {
-                repo = "mnemosyne";
-                owner = "kmein";
-                rev = "6bfa13c88db176af80be90840ff03573d67d679f";
-                sha256 = "1rimv5c5q9602y501hbkgkfbimqnmdkcr5hp1434q06gcazhjhca";
-              };
-              in pkgs.haskellPackages.callPackage mnemosyne-package {};
+            writeDashBin = pkgs.writers.writeDashBin;
+            writeDash = pkgs.writers.writeDash;
+            gfs-fonts = pkgs.callPackage <niveum/packages/gfs-fonts.nix> {};
+            iolanguage = pkgs.callPackage <niveum/packages/iolanguage.nix> { };
+            ix = pkgs.callPackage <niveum/packages/ix.nix> { };
           };
         };
+        overlays = [
+          (self: super: {
+            scripts = import <niveum/packages/scripts> { pkgs = super; lib = super.lib; };
+          })
+          (import <niveum/overlays/toml.nix>)
+          (import <stockholm/krebs/5pkgs/haskell>)
+          (import <stockholm/submodules/nix-writers/pkgs>)
+          (import <stockholm/krebs/5pkgs/override>)
+        ];
       };
     }
     {
@@ -131,28 +48,29 @@
       boot.loader.timeout = 1;
       boot.extraModulePackages = [ config.boot.kernelPackages.exfat-nofuse ];
     }
-    {
-      time.timeZone = "Europe/Berlin";
-    }
     {
       home-manager.users.me = {
         programs.zathura = {
           enable = true;
-          options.selection-clipboard = "clipboard";
+          options = {
+            selection-clipboard = "clipboard";
+            # first-page-column = "1:1"; # makes side-by-side mode start on the left side
+          };
         };
       };
     }
     {
       users.mutableUsers = false;
 
+      users.defaultUserShell = pkgs.zsh;
+
       users.users.me = {
         name = "kfm";
-        description = config.niveum.user.name;
-        home = "/home/kfm";
-        createHome = true;
-        group = "users";
-        hashedPassword = "$6$w9hXyGFl/.IZBXk$5OiWzS1G.5hImhh1YQmZiCXYNAJhi3X6Y3uSLupJNYYXPLMsQpx2fwF4Xr2uYzGMV8Foqh8TgUavx1APD9rcb/";
-        shell = pkgs.zsh;
+        description = kieran.name;
+        hashedPassword =
+          "$6$w9hXyGFl/.IZBXk$5OiWzS1G.5hImhh1YQmZiCXYNAJhi3X6Y3uSLupJNYYXPLMsQpx2fwF4Xr2uYzGMV8Foqh8TgUavx1APD9rcb/";
+        isNormalUser = true;
+        uid = 1000;
       };
     }
     {
@@ -165,94 +83,73 @@
 
       users.users.me.extraGroups = [ "audio" ];
 
-      environment.systemPackages = [ pkgs.pavucontrol pkgs.pamixer ];
+      environment.systemPackages = [ pkgs.pavucontrol pkgs.pamixer pkgs.pulsemixer ];
     }
     {
-      environment.systemPackages = [
-        (pkgs.writers.writeDashBin "niveum-deploy" ''
-          NIVEUM_DIR=/home/kfm/prog/git/niveum
-
-          [ $# -eq 1 ] || echo >&2 "Usage: niveum-deploy SYSTEM"
-
-          eval $(nix-build --no-out-link "$NIVEUM_DIR/deploy.nix" -A "$1")
-        '')
-        (pkgs.writers.writeDashBin "niveum-update" ''
-          NIVEUM_DIR=/home/kfm/prog/git/niveum
-
-          nix-prefetch-git --url https://github.com/NixOS/nixpkgs-channels --rev refs/heads/nixos-${config.system.stateVersion} > "$NIVEUM_DIR/nixpkgs.json"
-        '')
-      ];
-    }
-    {
-      environment.interactiveShellInit = "export PATH=$PATH:$HOME/.cargo/bin";
-      environment.shellAliases = {
-        clipboard = "${pkgs.xclip}/bin/xclip -se c";
-        o = "${pkgs.xdg_utils}/bin/xdg-open";
-        tmux = "${pkgs.tmux}/bin/tmux -2";
+      environment.interactiveShellInit =
+        "export PATH=$PATH:$HOME/projects/niveum";
+      environment.shellAliases = let
+        wcd = pkgs.writers.writeDash "wcd" ''
+          cd "$(readlink "$(${pkgs.which}/bin/which --skip-alias "$1")" | xargs dirname)/.."
+        '';
+        where = pkgs.writers.writeDash "where" ''
+          readlink "$(${pkgs.which}/bin/which --skip-alias "$1")" | xargs dirname
+        '';
+        take = pkgs.writers.writeDash "take" ''
+          mkdir "$1" && cd "$1"
+        '';
+        swallow = command: "${pkgs.scripts.swallow}/bin/swallow ${command}";
+      in {
+        "ß" = "${pkgs.utillinux}/bin/setsid";
+        cat = "${pkgs.bat}/bin/bat --style=plain";
+        chromium-incognito =
+          "chromium --user-data-dir=$(mktemp -d /tmp/chr.XXXXXX) --no-first-run --incognito";
+        cp = "cp --interactive";
         ip = "${pkgs.iproute}/bin/ip -c";
+        l  = "ls --color=auto --time-style=long-iso --almost-all";
+        ls = "ls --color=auto --time-style=long-iso";
+        ll = "ls --color=auto --time-style=long-iso -l";
+        la = "ls --color=auto --time-style=long-iso --almost-all -l";
+        mv = "mv --interactive";
+        nixi = "nix repl '<nixpkgs>'";
         ns = "nix-shell --run zsh";
-        nixi = ''nix repl "<nixpkgs>"'';
-        rm = "rm -i";
-        cp = "cp -i";
-        mv = "mv -i";
-        l = "${pkgs.exa}/bin/exa -a";
-        ls = "${pkgs.exa}/bin/exa";
-        ll = "${pkgs.exa}/bin/exa -l";
-        la = "${pkgs.exa}/bin/exa -la";
-        dig = "dig +short";
+        o = "${pkgs.xdg_utils}/bin/xdg-open";
+        pbcopy = "${pkgs.xclip}/bin/xclip -selection clipboard -in";
+        pbpaste = "${pkgs.xclip}/bin/xclip -selection clipboard -out";
+        rm = "rm --interactive";
+        s = "${pkgs.systemd}/bin/systemctl";
+        take = "source ${take}";
+        tmux = "${pkgs.tmux}/bin/tmux -2";
+        sxiv = swallow "${pkgs.sxiv}/bin/sxiv";
+        zathura = swallow "${pkgs.zathura}/bin/zathura";
+        us = "${pkgs.systemd}/bin/systemctl --user";
+        wcd = "source ${wcd}";
+        im = "${pkgs.openssh}/bin/ssh weechat@makanek -t tmux attach-session -t IM";
+        where = "source ${where}";
+        yt =
+          "${pkgs.youtube-dl}/bin/youtube-dl --add-metadata -ic"; # Download video link
+        yta =
+          "${pkgs.youtube-dl}/bin/youtube-dl --add-metadata -xic"; # Download with audio
       };
     }
-    {
-      networking.wireless = {
-        enable = true;
-        userControlled.enable = true;
-        networks = {
-          "Aether".pskRaw = "e1b18af54036c5c9a747fe681c6a694636d60a5f8450f7dec0d76bc93e2ec85a";
-          "Asoziales Netzwerk".pskRaw = "8e234041ec5f0cd1b6a14e9adeee9840ed51b2f18856a52137485523e46b0cb6";
-          "EasyBox-927376".pskRaw = "dbd490ab69b39bd67cfa06daf70fc3ef3ee90f482972a668ed758f90f5577c22";
-          "FlixBus Wi-Fi" = {};
-          "FlixBus" = {};
-          "FlixTrain" = {};
-          "Libertarian WiFi".pskRaw = "e9beaae6ffa55d10e80b8a2e7d997411d676a3cc6f1f29d0b080391f04555050";
-          "Ni/Schukajlow".pskRaw = "ffc47f6829da59c48aea878a32252223303f5c47a3859edc90971ffc63346781";
-          "WIFIonICE" = {};
-          "WLAN-914742".psk = "67647139648174545446";
-          "WLAN-XVMU6T".pskRaw = "46ea807283255a3d7029233bd79c18837df582666c007c86a8d591f65fae17cc";
-          "c-base-public" = {};
-          "discord".psk = "baraustrinken";
-          "security-by-obscurity".psk = "44629828256481964386";
-        };
-      };
-
-      environment.systemPackages = [ pkgs.wpa_supplicant_gui ];
-    }
-    {
-      networking.hosts = {
-        "192.168.178.1" = [ "fritz.box" ];
-        "192.168.178.21" = [ "scardanelli" ];
-        "192.168.178.22" = [ "homeros" ];
-        "192.168.178.24" = [ "catullus" ];
-      };
-    }
-    {
-      i18n.defaultLocale = "en_GB.UTF-8";
-    }
-    {
-      services.illum.enable = true;
-    }
+    { i18n.defaultLocale = "en_GB.UTF-8"; }
+    { services.illum.enable = true; }
     {
       services.xserver = {
         enable = true;
-        displayManager.lightdm = {
-          enable = true;
-          autoLogin.enable = true;
-          autoLogin.user = config.users.users.me.name;
-          greeters.gtk = {
+        displayManager = {
+          autoLogin = {
             enable = true;
-            indicators = [ "~spacer" "~host" "~spacer" "~session" "~power" ];
+            user = config.users.users.me.name;
+          };
+          lightdm = {
+            enable = true;
+            greeters.gtk = {
+              enable = true;
+              indicators = [ "~spacer" "~host" "~spacer" "~session" "~power" ];
+            };
           };
         };
-        desktopManager.default = "none";
       };
     }
     {
@@ -261,14 +158,84 @@
         pumount.source = "${pkgs.pmount}/bin/pumount";
       };
     }
+    { programs.command-not-found.enable = true; }
     {
-      programs.command-not-found.enable = true;
+      programs.gnupg.agent.enable = true;
+
+      environment.systemPackages = [
+        pkgs.gnupg
+        (pkgs.pass.withExtensions (e: [e.pass-otp]))
+      ];
     }
     {
-      programs.java = {
-        enable = true;
-        package = pkgs.openjdk;
+      services.atd.enable = true;
+    }
+    {
+      services.mingetty = {
+        greetingLine = lib.mkForce "";
+        helpLine = lib.mkForce "";
       };
     }
+    {
+      networking.hosts = lib.mapAttrs' (name: address: {
+        name = address;
+        value = [ "${name}.local" ];
+      }) localAddresses;
+    }
+    ./alacritty.nix
+    ./bash.nix
+    ./bluetooth.nix
+    ./ccc.nix
+    ./kleiter.nix
+    ./calcurse.nix
+    ./chromium.nix
+    ./cloud.nix
+    ./compton.nix
+    ./direnv.nix
+    ./distrobump.nix
+    ./docker.nix
+    ./dunst.nix
+    ./flix.nix
+    ./fonts.nix
+    ./fzf.nix
+    ./gaslight.nix
+    ./git.nix
+    ./hledger.nix
+    ./htop.nix
+    ./hu-berlin.nix
+    ./i3.nix
+    ./keybase.nix
+    ./keyboard.nix
+    ./mail/client.nix
+    ./mpv.nix
+    ./mime.nix
+    ./nano.nix
+    ./neovim.nix
+    ./nix.nix
+    ./newsboat.nix
+    ./flameshot-once.nix
+    ./packages
+    ./power-action.nix
+    ./printing.nix
+    ./wallpaper.nix
+    ./redshift.nix
+    ./retiolum.nix
+    ./rofi.nix
+    ./spacetime.nix
+    ./ssh.nix
+    ./sshd.nix
+    ./sudo.nix
+    ./sxiv.nix
+    ./theming.nix
+    ./tmux.nix
+    ./tor.nix
+    ./todo-txt.nix
+    ./traadfri.nix
+    ./unclutter.nix
+    ./version.nix
+    ./vscode.nix
+    ./watson.nix
+    ./wifi.nix
+    ./zsh.nix
   ];
 }

configs/direnv.nix

@@ -0,0 +1,39 @@
+{ pkgs, ... }:
+let
+  nixify = pkgs.writers.writeDashBin "nixify" ''
+    set -efuC
+
+    if [ ! -e ./.envrc ]; then
+      echo use_nix > .envrc
+      direnv allow
+    fi
+    if [ ! -e shell.nix ]; then
+      cat > shell.nix <<'EOF'
+    { pkgs ? import <nixpkgs> {} }:
+    pkgs.mkShell {
+      buildInputs = with pkgs; [];
+      shellHook = "export HISTFILE=''${toString ./.history}";
+    }
+    EOF
+      ''${EDITOR:-vim} shell.nix
+    fi
+  '';
+in {
+  environment.systemPackages = [ pkgs.direnv nixify ];
+
+  home-manager.users.me.programs.direnv = {
+    enable = true;
+    stdlib = builtins.readFile ("${
+        pkgs.fetchFromGitHub {
+          owner = "Mic92";
+          repo = "dotfiles";
+          rev = "a0a9b7e358fa70a85cd468f8ca1fbb02ae0a91df";
+          sha256 = "1y9h5s1lf59sczsm0ksq2x1yhl98ba9lwk5yil3q53rg7n4574pg";
+        }
+      }/home/.direnvrc");
+  };
+
+  programs.zsh.interactiveShellInit = ''
+    eval "$(${pkgs.direnv}/bin/direnv hook zsh)"
+  '';
+}

configs/distrobump.nix

@@ -1,13 +1,10 @@
-{ lib, config, pkgs, ... }:
-{
+{ lib, config, pkgs, ... }: {
   imports = [
     (import <stockholm/makefu/3modules/bump-distrowatch.nix> {
       inherit lib config;
-      pkgs = pkgs // {
-        writeDash = pkgs.writers.writeDash;
-      };
+      pkgs = pkgs // { writeDash = pkgs.writers.writeDash; };
     })
   ];
 
-  makefu.distrobump.enable = true;
+  makefu.distrobump.enable = false;
 }

configs/docker.nix

@@ -1,5 +1,4 @@
-{ pkgs, ... }:
-{
+{ pkgs, ... }: {
   virtualisation.docker.enable = true;
   users.users.me.extraGroups = [ "docker" ];
   environment.systemPackages = [ pkgs.docker pkgs.docker_compose ];

configs/dunst.nix

@@ -1,12 +1,14 @@
 { config, pkgs, ... }:
-with config.niveum; {
+let
+  inherit (import <niveum/lib>) defaultApplications colours theme;
+in {
   home-manager.users.me.services.dunst = {
     enable = true;
-    iconTheme = theme.icon;
+    iconTheme = (theme pkgs).icon;
     settings = {
       global = {
         transparency = 10;
-        font = "${fonts.terminal.name} ${toString fonts.terminal.size}";
+        font = "Monospace 8";
         geometry = "200x5-30+20";
         frame_color = colours.foreground;
         follow = "mouse";
@@ -18,7 +20,7 @@ with config.niveum; {
         separator_color = "auto";
         sort = true;
         markup = "full";
-        format = ''%a\n<b>%s</b>\n%b'';
+        format = "%a\\n<b>%s</b>\\n%b";
         alignment = "left";
         show_age_threshold = 60;
         bounce_freq = 0;
@@ -31,7 +33,7 @@ with config.niveum; {
         sticky_history = true;
         history_length = 20;
         dmenu = "${pkgs.rofi}/bin/rofi -display-run dunst -show run";
-        browser = applications.browser;
+        browser = (defaultApplications pkgs).browser;
         verbosity = "mesg";
         corner_radius = 0;
         mouse_left_click = "do_action";

configs/flameshot-once.nix

@@ -0,0 +1,25 @@
+{ lib, pkgs, ... }:
+let
+  inherit (import <niveum/lib>) defaultApplications;
+  flameshot-once =
+    pkgs.callPackage <stockholm/krebs/5pkgs/simple/flameshot-once> {};
+in {
+  nixpkgs.overlays = [
+    (self: super: {
+      xwaitforwindow =
+        super.callPackage <stockholm/krebs/5pkgs/simple/xwaitforwindow.nix> { };
+    })
+  ];
+
+  environment.systemPackages = [
+    (flameshot-once.override {
+      config.imgur = {
+        enable = true;
+        createUrl = "http://p.r/image";
+        deleteUrl = "http://p.r/image/delete/%1";
+        xdg-open.browser = (defaultApplications pkgs).browser;
+      };
+      config.timeout = 200;
+    })
+  ];
+}

configs/flix.nix

@@ -0,0 +1,72 @@
+{ config, pkgs, ... }:
+let
+  flixLocation = "/media/flix";
+  cacheLocation = "/var/cache/flix";
+  indexFilename = "index";
+  flixUser = "flix";
+  flixGroup = "users";
+in {
+  fileSystems.${flixLocation} = {
+    device = "prism.r:/export";
+    fsType = "nfs";
+    options = [
+      "noauto"
+      "noatime"
+      "nodiratime"
+      "x-systemd.automount"
+      "x-systemd.device-timeout=1"
+      "x-systemd.idle-timeout=1min"
+      "x-systemd.requires=tinc.retiolum.service"
+      "x-systemd.requires=wpa_supplicant.service"
+      "user"
+      "_netdev"
+    ];
+  };
+
+  systemd.tmpfiles.rules = [
+    "d '${cacheLocation}' 0750 ${flixUser} ${flixGroup} - -"
+  ];
+
+  systemd.services.flix-index = {
+    description = "Flix indexing service";
+    wants = [ "network-online.target" ];
+    script = "cp ${flixLocation}/download/index ./${indexFilename}";
+    startAt = "hourly";
+    serviceConfig = {
+      Type = "oneshot";
+      User = flixUser;
+      Group = flixGroup;
+      WorkingDirectory = cacheLocation;
+    };
+  };
+
+  users.extraUsers.${flixUser} = {
+    isSystemUser = true;
+    createHome = true;
+    home = cacheLocation;
+    extraGroups = [ flixGroup ];
+  };
+
+  environment.systemPackages = [
+    (pkgs.writeDashBin "mpv-simpsons" ''
+      set -efu
+      cd "${flixLocation}/download"
+      [ -f "${cacheLocation}/${indexFilename}" ] || exit 1
+
+      cat "${cacheLocation}/${indexFilename}" \
+        | ${pkgs.gnugrep}/bin/grep -i 'simpsons.*mkv' \
+        | shuf \
+        | ${pkgs.findutils}/bin/xargs -d '\n' ${pkgs.mpv}/bin/mpv
+    '')
+    (pkgs.writeDashBin "flixmenu" ''
+      set -efu
+      cd "${flixLocation}/download"
+
+      [ -f "${cacheLocation}/${indexFilename}" ] || exit 1
+
+      ${pkgs.dmenu}/bin/dmenu -i -p flix -l 5 "$@" < ${cacheLocation}/${indexFilename} \
+        | ${pkgs.findutils}/bin/xargs -I '{}' ${pkgs.utillinux}/bin/setsid ${pkgs.xdg_utils}/bin/xdg-open '{}'
+    '')
+  ];
+
+}

configs/fonts.nix

@@ -1,19 +1,35 @@
-{ pkgs, ... }:
-{
-  niveum.fonts = {
-    ui = {
-      name = "Sans";
-      size = 9;
-    };
-    terminal = {
-      name = "Monospace";
-      size = 9;
-    };
-  };
-
+{ pkgs, ... }: {
   fonts = {
     enableDefaultFonts = true;
     enableFontDir = true;
-    fonts = with pkgs; [ corefonts eb-garamond fira libertine lmodern noto-fonts roboto ubuntu_font_family ];
+    fonts = with pkgs; [
+      corefonts
+      eb-garamond
+      fira
+      font-awesome-ttf
+      ibm-plex
+      inconsolata
+      iosevka
+      libertine
+      lmodern
+      noto-fonts
+      roboto
+      roboto-mono
+      roboto-slab
+      source-code-pro
+      source-serif-pro
+      source-sans-pro
+      ubuntu_font_family
+      gfs-fonts
+      jetbrains-mono
+      twemoji-color-font
+      joypixels
+    ];
+    fontconfig.defaultFonts = {
+      monospace = [ "JetBrains Mono" ];
+      serif = [ "Source Serif Pro" ];
+      sansSerif = [ "Source Sans Pro" ];
+      emoji = [ "JoyPixels" ];
+    };
   };
 }

configs/fzf.nix

@@ -0,0 +1,32 @@
+{ pkgs, lib, ... }: {
+  environment = {
+    systemPackages = [ pkgs.fzf ];
+    variables = {
+      FZF_DEFAULT_OPTS =
+        lib.escapeShellArgs [ "--height=40%" "--layout=reverse" ];
+      FZF_ALT_C_COMMAND = "${pkgs.fd}/bin/fd --type d";
+      FZF_ALT_C_OPTS = lib.escapeShellArgs [
+        "--preview='${pkgs.tree}/bin/tree -L 1 \"{}\"'"
+        "--bind=space:toggle-preview"
+        "--preview-window=hidden"
+      ];
+      FZF_CTRL_T_COMMAND = "${pkgs.fd}/bin/fd --type f";
+      FZF_CTRL_T_OPTS =
+        lib.escapeShellArgs [ "--preview='${pkgs.bat}/bin/bat \"{}\"'" ];
+    };
+  };
+
+  programs.zsh.interactiveShellInit = ''
+    if [[ $options[zle] = on ]]; then
+      . ${pkgs.fzf}/share/fzf/completion.zsh
+      . ${pkgs.fzf}/share/fzf/key-bindings.zsh
+    fi
+  '';
+
+  programs.bash.interactiveShellInit = ''
+    if [[ :$SHELLOPTS: =~ :(vi|emacs): ]]; then
+      . ${pkgs.fzf}/share/fzf/completion.bash
+      . ${pkgs.fzf}/share/fzf/key-bindings.bash
+    fi
+  '';
+}

configs/gaslight.nix

@@ -0,0 +1,25 @@
+{ pkgs, ... }:
+{
+  environment.systemPackages = [
+    (pkgs.writers.writeDashBin "gaslight-stream" ''
+      ${pkgs.ffmpeg}/bin/ffmpeg -r 14 -s 640x480 -f video4linux2 -i /dev/video0 -f alsa -i default -c:v libx264 -preset ultrafast -c:a aac -f avi -
+    '')
+    (pkgs.writers.writeDashBin "gaslight-say" ''
+      voices="de
+      de+whisper"
+
+      echo "$@" | ${pkgs.espeak}/bin/espeak -v "$(echo "$voices" | ${pkgs.coreutils}/bin/shuf -n1)"
+    '')
+    (pkgs.writers.writeDashBin "gaslight-play" ''
+      set -o noglob
+      ${pkgs.mpv}/bin/mpv --no-video "$1"
+    '')
+  ];
+}
+
+/*
+
+ssh machine gaslight-stream | mpv -
+ssh machine gaslight-say "blablabla"
+
+*/

configs/git.nix

@@ -1,25 +1,64 @@
-{ pkgs, config, ... }:
+{ pkgs, config, lib, ... }:
+let
+  inherit (import <niveum/lib>) kieran ignorePaths;
+in
 {
   environment.systemPackages = [
     pkgs.mr
     pkgs.git
+    pkgs.gitAndTools.gitflow
     pkgs.gitAndTools.hub
+    pkgs.gitAndTools.gh
     pkgs.gitAndTools.git-extras
+    pkgs.gitAndTools.git-trim
     pkgs.gitstats
     pkgs.patch
     pkgs.patchutils
-    pkgs.git-quick-stats
     pkgs.git-preview
   ];
 
+  environment.shellAliases = {
+    gf = "git-flow";
+    g = "git";
+  };
+
   home-manager.users.me = {
-    home.file.".mrconfig".text = builtins.readFile <dot/mrconfig.ini>;
+    home.file.".mrconfig".text = let
+      prependPath = prefix:
+        lib.attrsets.mapAttrs'
+        (path: lib.attrsets.nameValuePair "${prefix}/${path}");
+      git = url: { checkout = "git clone ${url}"; };
+      github = owner: repo: git "git@github.com:${owner}/${repo}";
+      keybase = owner: repo: git "keybase://private/${owner}/${repo}";
+    in lib.generators.toINI { } ({
+      DEFAULT = { git_gc = ''git gc "$@"''; };
+    } // prependPath "projects" {
+      "menstruation.rs" = github "kmein" "menstruation.rs";
+      brockman = github "kmein" "brockman";
+      challenges = github "kmein" "challenges";
+      conlangs = github "kmein" "conlangs";
+      ledger = keybase "kmein" "ledger";
+      mahlzeit = github "kmein" "mahlzeit";
+      menstruation-telegram = github "kmein" "menstruation-telegram";
+      meteora = github "kmein" "meteora";
+      modernizr = github "kmein" "modernizr";
+      niveum = github "kmein" "niveum";
+      nixpkgs = github "NixOS" "nixpkgs";
+      poetry = github "kmein" "poetry";
+      quotes = github "kmein" "quotes";
+      sphinx = github "kmein" "sphinx";
+      stockholm = git "https://cgit.krebsco.de/stockholm";
+      telebots = github "kmein" "telebots";
+      traadfri = github "kmein" "traadfri";
+      wissen = github "kmein" "wissen";
+      zen = github "kmein" "zen";
+    });
 
     programs.git = {
       enable = true;
       package = pkgs.gitAndTools.gitFull;
-      userName = config.niveum.user.name;
-      userEmail = config.niveum.user.email;
+      userName = kieran.name;
+      userEmail = kieran.email;
       aliases = {
         br = "branch";
         co = "checkout";
@@ -31,9 +70,34 @@
         diffs = "diff --staged";
         last = "log -1 HEAD";
         logs = "log --pretty=oneline";
-        graph = "log --graph --abbrev-commit --decorate --date=relative --format=format:'%C(bold blue)%h%C(reset) - %C(bold green)(%ar)%C(reset) %C(white)%s%C(reset) %C(dim white)- %an%C(reset)%C(bold yellow)%d%C(reset)' --all";
+        graph =
+          "log --graph --abbrev-commit --decorate --date=relative --format=format:'%C(bold blue)%h%C(reset) - %C(bold green)(%ar)%C(reset) %C(white)%s%C(reset) %C(dim white)- %an%C(reset)%C(bold yellow)%d%C(reset)' --all";
+      };
+      ignores = ignorePaths;
+      extraConfig = {
+        pull.ff = "only";
+        rebase.autoStash = true;
+        merge.autoStash = true;
+        core.pager =
+          "${pkgs.gitAndTools.diff-so-fancy}/bin/diff-so-fancy | ${pkgs.less}/bin/less --tabs=4 -RFX";
+        color = {
+          ui = true;
+          diff = {
+            meta = "11";
+            frag = "magenta bold";
+            commit = "yellow bold";
+            old = "red bold";
+            new = "green bold";
+            whitespace = "red reverse";
+          };
+          diff-highlight = {
+            oldNormal = "red bold";
+            oldHighlight = "red bold 52";
+            newNormal = "green bold";
+            newHighlight = "green bold 22";
+          };
+        };
       };
-      ignores = config.niveum.ignore;
     };
   };
 }

configs/gitea.nix

@@ -0,0 +1,13 @@
+{
+  services.gitea = {
+    enable = true;
+    disableRegistration = true;
+    rootUrl = "https://code.xn--kiern-0qa.de";
+    appName = "code.kierán.de";
+  };
+  services.nginx.virtualHosts."code.xn--kiern-0qa.de" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/".extraConfig = "proxy_pass http://localhost:3000;";
+  };
+}

configs/gollum.nix

@@ -1,5 +0,0 @@
-{
-  services.gollum = {
-    enable = true;
-  };
-}

configs/haskell/default.nix

@@ -1,46 +0,0 @@
-{ config, pkgs, ... }:
-{
-  home-manager.users.me.home.file = {
-    ".ghc/ghci.conf".text = ''
-      :set editor vim
-      :def hoogle \s -> return $ ":!${pkgs.haskellPackages.hoogle}/bin/hoogle search --color -l --count=15 \"" ++ s ++ "\""
-      :def doc \s -> return $ ":!${pkgs.haskellPackages.hoogle}/bin/hoogle search --color -l --info \"" ++ s ++ "\""
-      :def pl \x -> return $ ":!${pkgs.haskellPackages.pointfree}/bin/pointfree -v \"" ++ x ++ "\""
-      :set prompt "\o033[1m%s\o033[1;34m λ\o033[0m "
-      :set -Wall
-    '';
-      # :def unpl \x -> return $ ":!${pkgs.haskellPackages.pointful}/bin/pointful \"" ++ x ++ "\""
-    ".stack/config.yaml".text = let user = config.niveum.user; in ''
-      templates:
-        params:
-          author-name: ${user.name}
-          author-email: ${user.email}
-          copyright: 'Copyright: (c) 2019 ${user.name}'
-          github-username: ${user.github}
-    '';
-  };
-
-  services.hoogle = {
-    enable = true;
-    packages = import ./packages.nix;
-    port = 8091;
-  };
-
-  environment.systemPackages = with pkgs; [
-    cabal2nix
-    stack2nix
-    cabal-install
-    hlint
-    # haskellPackages.brittany
-    (haskellPackages.ghcWithHoogle (import ./packages.nix))
-  ] ++ map haskell.lib.justStaticExecutables [
-    haskellPackages.ghcid
-    haskellPackages.hakyll
-    # haskellPackages.hfmt
-    haskellPackages.hasktags
-    haskellPackages.hindent
-    haskellPackages.pointfree
-    # haskellPackages.pointful
-    haskellPackages.hpack
-  ];
-}

configs/hass/default.nix

@@ -0,0 +1,61 @@
+{ config, pkgs, lib, ... }:
+let
+  inherit (import ./lib.nix) triggers;
+  inherit (import <niveum/lib>) localAddresses;
+in
+{
+  imports = [
+    ./zigbee.nix
+    ./frontend.nix
+  ];
+
+  services.home-assistant = {
+    enable = true;
+    configWritable = true;
+    lovelaceConfigWritable = true;
+    openFirewall = true;
+    config = {
+      homeassistant = {
+        name = "Toum";
+        latitude = config.location.latitude;
+        longitude = config.location.longitude;
+        elevation = 90; # TODO find out how high I live
+        unit_system = "metric";
+        time_zone = config.time.timeZone;
+      };
+      config = {};
+      discovery = {};
+      system_health = {};
+      history = {};
+      # tradfri.host = localAddresses.tradfri; # dont use until python3Packages.pytradfri is packaged
+      sun = {};
+      mobile_app = {};
+      shopping_list = {};
+      sensor = [
+        {
+          platform = "dwd_weather_warnings";
+          region_name = "Berlin";
+        }
+      ];
+      mqtt = {
+        broker = "localhost";
+        port = 1883;
+        client_id = "home-assistant";
+        username = "albrecht";
+        password = lib.strings.fileContents <system-secrets/mosquitto>;
+        keepalive = 60;
+        protocol = "3.1";
+
+        discovery = true;
+        birth_message = {
+          topic = "/hass/status";
+          payload = "online";
+        };
+        will_message = {
+          topic = "/hass/status";
+          payload = "offline";
+        };
+      };
+    };
+  };
+}

configs/hass/frontend.nix

@@ -0,0 +1,37 @@
+let
+  inherit (import ./lib.nix) triggers;
+in
+{
+  services.home-assistant.config = {
+    frontend = {
+      themes = {
+        day_theme = import ./themes/clear.nix;
+        night_theme = import ./themes/clear-dark.nix;
+      };
+    };
+    automation = [
+      {
+        alias = "Night Theme";
+        hide_entity = true;
+        trigger = triggers.night;
+        action = [
+          {
+            service = "frontend.set_theme";
+            data.name = "night_theme";
+          }
+        ];
+      }
+      {
+        alias = "Day Theme";
+        hide_entity = true;
+        trigger = triggers.day;
+        action = [
+          {
+            service = "frontend.set_theme";
+            data.name = "day_theme";
+          }
+        ];
+      }
+    ];
+  };
+}

configs/hass/lib.nix

@@ -0,0 +1,16 @@
+{
+  triggers = {
+    night = {
+      platform = "numeric_state";
+      entity_id = "sun.sun";
+      value_template = "{{ state.attributes.elevation }}";
+      below = -4.0;
+    };
+    day = {
+      platform = "numeric_state";
+      entity_id = "sun.sun";
+      value_template = "{{ state.attributes.elevation }}";
+      above = 0;
+    };
+  };
+}

configs/hass/themes/clear-dark.nix

@@ -0,0 +1,72 @@
+rec {
+# Colors
+ text-color = "#DADADB"; # Grey text
+ text-medium-light-color = "#A0A2A8"; # Medium-light grey text
+ text-medium-color = "#80828A"; # Medium grey text
+ text-dark-color = "#6A6B74"; # Dark grey text
+ accent-color = "#008bef"; # Blue
+ accent-medium-color = "#2484C9"; # Decent blue
+ background-color = "#3b4049"; # Dark grey background
+ background-color-2 = "#484E59"; # Light grey background
+ background-card-color = "#434952"; # Grey background
+ border-color = "#383C46"; # Grey border
+
+ # Header
+ app-header-background-color = "#363941"; # Background color
+
+ # Text
+ primary-color = text-color;
+ text-primary-color = text-color;
+
+ # Left Menu
+ paper-listbox-background-color = background-color; # Background
+ sidebar-icon-color = text-medium-color; # icons
+ sidebar-selected-icon-color = text-medium-light-color; # Selected row icon and background (15%)
+ sidebar-selected-text-color = text-color; # Selected row label
+
+ # UI
+ paper-card-header-color = text-color; # Title in settings
+ primary-background-color = background-color; # Background (also title background in left menu)
+ mdc-theme-primary = accent-medium-color; # Action Buttons (save, restart etc.)
+ card-background-color = background-card-color; # Entity Registry Background
+
+ # Card
+ paper-card-background-color = background-card-color; # Background
+ dark-primary-color = text-color;
+ primary-text-color = text-color;
+ paper-listbox-color = text-color;
+ light-primary-color = text-dark-color;
+ secondary-text-color = text-medium-color;
+ disabled-text-color = text-dark-color;
+ paper-dialog-button-color = text-color;
+ secondary-background-color = background-color-2; # Background more info title
+
+ # Icons
+ paper-item-icon-color = text-dark-color; # Off
+ paper-item-icon-active-color = accent-color; # On
+
+ # Switches
+ switch-checked-button-color = text-medium-light-color; # Knob On
+ switch-unchecked-button-color = text-medium-light-color; # Knob Off
+ switch-checked-track-color = "#009FFF"; # Background On
+ switch-unchecked-track-color = "#767682"; # Background Off
+
+ # Slider
+ paper-slider-active-color = accent-color; # Line On
+ paper-slider-knob-color = text-medium-light-color; # Knob On
+ paper-slider-container-color = text-dark-color; # Line Off
+ paper-slider-knob-start-color = text-medium-light-color; # Knob Off
+
+ # Badges
+ label-badge-text-color = text-color;
+ label-badge-background-color = "rgba(54, 57, 65, 0.6)";
+
+ # Shadows
+ ha-card-box-shadow = "inset 0px 0px 0px 1px var(--border-color)";
+
+ # HACS
+ hacs-badge-color = accent-color; # New Badge
+ hacs-status-installed = text-color; # Installed Icon
+ hacs-status-pending-restart = text-dark-color; # Restart Icon
+ hacs-status-pending-update = accent-color;
+}

configs/hass/themes/clear.nix

@@ -0,0 +1,52 @@
+rec {
+  text-color = "#636B75"; # Grey text
+  text-medium-color = "#8c96a5"; # Medium grey text
+  text-light-color = "#BAC0C6"; # Light grey text
+  accent-color = "#00a1ff"; # Blue
+  background-color = "#F7F8F9"; # Light grey background
+  background-color-2 = "#F4F5F6"; # Light grey background
+  background-card-color = "rgba(255,255,255,1.0)"; # White background
+  border-color = "#E8E8E8"; # Light grey border
+
+  # Header
+  primary-color = text-color; # Background
+  text-primary-color = "#FFF"; # Text
+
+  # Left Menu
+  paper-listbox-background-color = background-color; # Background
+  # TODO = Text and Icons
+
+  # UI
+  paper-card-header-color = text-color; # Title in settings
+  primary-background-color = background-color; # Background color (also title background in left menu)
+
+  # Card
+  paper-card-background-color = background-card-color; # Background
+  dark-primary-color = text-color;
+  primary-text-color = text-color;
+  paper-listbox-color = text-color;
+  light-primary-color = text-light-color;
+  secondary-text-color = text-medium-color;
+  disabled-text-color = text-light-color;
+  paper-dialog-button-color = text-color;
+  secondary-background-color = background-color-2; # Background more info title
+
+  # Icons
+  paper-item-icon-color = text-light-color; # Off
+  paper-item-icon-active-color = accent-color; # On
+
+  # Switches
+  switch-checked-button-color = "#FFF"; # Knob On
+  switch-unchecked-button-color = "#FFF"; # Knob Off
+  switch-checked-track-color = "#0077FF"; # Background On
+  switch-unchecked-track-color = disabled-text-color; # Background Off
+
+  # Slider
+  paper-slider-active-color = accent-color; # Line On
+  paper-slider-container-color = "#e5e7ea"; # Line Off
+  paper-slider-knob-color = text-light-color; # Knob On
+  paper-slider-knob-start-color = text-light-color; # Knob Off
+
+  # Shadows
+  ha-card-box-shadow = "inset 0px 0px 0px 1px var(--border-color)";
+}

configs/hass/zigbee.nix

@@ -0,0 +1,102 @@
+{ config, pkgs, lib, ... }:
+let
+  inherit (import <niveum/lib>) localAddresses;
+in
+{
+  services.zigbee2mqtt = {
+    enable = true;
+    config = {
+      permit_join = false;
+      homeassistant = true;
+      serial = {
+        port = "/dev/ttyACM0";
+        disable_led = true;
+      };
+      mqtt = {
+        discovery = true;
+        base_topic = "zigbee";
+        server = "mqtt://${localAddresses.toum}";
+        user = "albrecht";
+        password = lib.strings.fileContents <system-secrets/mosquitto>;
+      };
+    };
+  };
+
+  services.mosquitto = {
+    enable = true;
+    host = "0.0.0.0";
+    allowAnonymous = false;
+    checkPasswords = true;
+    users."albrecht" = {
+      password = lib.strings.fileContents <system-secrets/mosquitto>;
+      acl = [ "topic readwrite #" ];
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 1883 ];
+
+  environment.systemPackages = [ pkgs.mosquitto ];
+
+  services.home-assistant = {
+    config = {
+      switch = [
+        {
+          platform = "mqtt";
+          name = "zigbee2mqtt_join";
+          state_topic = "/zigbee2mqtt/bridge/config/permit_join";
+          command_topic = "/zigbee2mqtt/bridge/config/permit_join";
+          payload_on = "true";
+          payload_off = "false";
+        }
+      ];
+      timer.zigbee_permit_join = {
+        name = "Zigbee Time remaining";
+        duration = 120;
+      };
+      automation = [
+        # Automation to start timer when enable join is turned on
+        {
+          id = "zigbee_join_enabled";
+          alias = "";
+          hide_entity = "true";
+          trigger = {
+            platform = "state";
+            entity_id = "switch.zigbee2mqtt_join";
+            to = "on";
+          };
+          action = {
+            service = "timer.start";
+            entity_id = "timer.zigbee_permit_join";
+          };
+        }
+        # Automation to stop timer when switch turned off and turn off switch when timer finished
+        {
+          id = "zigbee_join_disabled";
+          hide_entity = "true";
+          trigger = [
+            {
+              platform = "event";
+              event_type = "timer.finished";
+              event_data.entity_id = "timer.zigbee_permit_join";
+            }
+            {
+              platform = "state";
+              entity_id = "switch.zigbee2mqtt_join";
+              to = "off";
+            }
+          ];
+          action = [
+            {
+              service = "timer.cancel";
+              data.entity_id = "timer.zigbee_permit_join";
+            }
+            {
+              service = "switch.turn_off";
+              entity_id = "switch.zigbee2mqtt_join";
+            }
+          ];
+        }
+      ];
+    };
+  };
+}

configs/hedgedoc.nix

@@ -0,0 +1,25 @@
+{
+  services.nginx.virtualHosts."pad.xn--kiern-0qa.de" = {
+    enableACME = true;
+    addSSL = true;
+    locations."/".extraConfig = ''
+      client_max_body_size 4G;
+      proxy_set_header Host $host;
+      proxy_pass http://localhost:3091;
+    '';
+  };
+
+  services.hedgedoc = {
+    enable = true;
+    configuration = {
+      allowAnonymous = false;
+      allowGravatar = false;
+      db = {
+        dialect = "sqlite";
+        storage = "/var/lib/codimd/db.codimd.sqlite";
+        useCDN = false;
+      };
+      port = 3091;
+    };
+  };
+}

configs/hledger.nix

@@ -1,15 +1,14 @@
-{ config, pkgs, ... }:
-{
-  imports = [ <modules/hledger.nix> ];
+{ config, pkgs, ... }: {
+  imports = [ <niveum/modules/hledger.nix> ];
 
   niveum.hledger = {
     enable = true;
-    ledgerFile = "$HOME/prog/git/ledger/current.journal";
+    ledgerFile = "$HOME/projects/ledger/all.journal";
     server = {
       enable = false;
       user = config.users.users.me;
-      package = pkgs.unstable.hledger-web;
+      package = pkgs.hledger-web;
     };
-    package = pkgs.unstable.hledger;
+    package = pkgs.hledger;
   };
 }

configs/home-assistant.nix

@@ -1,7 +0,0 @@
-{
-  services.home-assistant = {
-    enable = true;
-    configWritable = true;
-    lovelaceConfigWritable = true;
-  };
-}

configs/htop.nix

@@ -9,24 +9,36 @@
       detailedCpuTime = false;
       headerMargin = true;
       hideKernelThreads = true;
-      hideThreads = false;
-      hideUserlandThreads = false;
+      hideThreads = true;
+      hideUserlandThreads = true;
       highlightBaseName = true;
       highlightMegabytes = true;
       highlightThreads = true;
       shadowOtherUsers = true;
       showProgramPath = false;
-      showThreadNames = true;
+      showThreadNames = false;
       sortDescending = true;
       sortKey = "PERCENT_CPU";
       treeView = true;
       updateProcessNames = false;
       meters = {
         left = [
-          { kind = "LeftCPUs2"; mode = 1; }
-          { kind = "RightCPUs2"; mode = 1; }
-          { kind = "Memory"; mode = 1; }
-          { kind = "Swap"; mode = 1; }
+          {
+            kind = "LeftCPUs2";
+            mode = 1;
+          }
+          {
+            kind = "RightCPUs2";
+            mode = 1;
+          }
+          {
+            kind = "Memory";
+            mode = 1;
+          }
+          {
+            kind = "Swap";
+            mode = 1;
+          }
         ];
         right = [ "Uptime" "Tasks" "LoadAverage" "Battery" ];
       };

configs/hu-berlin.nix

@@ -1,8 +1,10 @@
-{ pkgs, lib, ... }:
+{ config, pkgs, lib, ... }:
 let
+  inherit (lib.strings) fileContents;
+  inherit (import <niveum/lib>) sshPort;
   eduroam = {
-    identity = lib.strings.removeSuffix "\n" (builtins.readFile <shared-secrets/eduroam/identity>);
-    password = lib.strings.removeSuffix "\n" (builtins.readFile <shared-secrets/eduroam/password>);
+    identity = fileContents <secrets/eduroam/identity>;
+    password = fileContents <secrets/eduroam/password>;
   };
   eduroamAuth = ''
     key_mgmt=WPA-EAP
@@ -12,32 +14,79 @@ let
     anonymous_identity="anonymous@wlan.hu-berlin.de"
     altsubject_match="DNS:srv1-radius.cms.hu-berlin.de;DNS:srv2-radius.cms.hu-berlin.de"
     password="${eduroam.password}"
-    ca_cert="${pkgs.fetchurl {
-      url = https://www.cms.hu-berlin.de/de/dl/netze/wlan/config/eduroam/t-telesec_globalroot_class_2.pem;
-      sha256 = "0if8aqd06sid7a0vw009zpa087wxcgdd2x6z2zs4pis5kvyqj2dk";
-    }}"
+    ca_cert="${
+      pkgs.fetchurl {
+        url =
+          "https://www.cms.hu-berlin.de/de/dl/netze/wlan/config/eduroam/t-telesec_globalroot_class_2.pem";
+        sha256 = "0if8aqd06sid7a0vw009zpa087wxcgdd2x6z2zs4pis5kvyqj2dk";
+      }
+    }"
     phase2="auth=PAP"
   '';
+  hu-berlin-cifs-options = [
+    "uid=${toString config.users.users.me.uid}"
+    "gid=${toString config.users.groups.users.gid}"
+    "sec=ntlmv2"
+    "workgroup=german"
+    "username=meinhaki"
+    "password=${lib.strings.fileContents <secrets/mail/meinhaki>}"
+    "noauto"
+    "x-systemd.requires=hu-vpn.service"
+    "x-systemd.automount"
+    "x-systemd.device-timeout=1"
+    "x-systemd.idle-timeout=1min"
+  ];
 in {
   networking.wireless.networks = {
     eduroam_5GHz.auth = eduroamAuth;
     eduroam.auth = eduroamAuth;
   };
 
-  services.openvpn.servers = {
-    hu-berlin = {
-      config = ''
-        config ${pkgs.fetchurl {
-          url = https://www.cms.hu-berlin.de/de/dl/netze/vpn/openvpn/hu-berlin.ovpn;
-          sha256 = "15b55aibik5460svjq2gwxrcyh6ay4k8savd6cd5lncgndmd8p8h";
-        }}
-        # route-nopull
-        # route 141.20.0.0 255.255.0.0
-      '';
-      authUserPass = {
-        username = eduroam.identity;
-        password = eduroam.password;
-      };
+  fileSystems."/media/hu-berlin/germpro2" = {
+    device = "//hugerm31c.user.hu-berlin.de/germpro2/ling";
+    fsType = "cifs";
+    options = hu-berlin-cifs-options;
+  };
+
+  fileSystems."/media/hu-berlin/germhome" = {
+    device = "//hugerm31c.user.hu-berlin.de/germhome/ling/meinhaki";
+    fsType = "cifs";
+    options = hu-berlin-cifs-options;
+  };
+
+  environment.systemPackages = [
+    (pkgs.writers.writeDashBin "hu-ip" ''
+      ${pkgs.w3m}/bin/w3m -dump meineip.hu-berlin.de | head --lines=-4 | tail --lines=+3
+    '')
+  ];
+
+  systemd.services.hu-vpn = {
+    enable = true;
+    wants = [ "network-online.target" ];
+    conflicts = [ "openvpn-hu-berlin.service" ];
+    script = ''
+      ${pkgs.openfortivpn}/bin/openfortivpn -c ${pkgs.writeText "hu-berlin.config" ''
+        host = forti-ssl.vpn.hu-berlin.de
+        port = 443
+        trusted-cert = 42193a913d276d9eb86217612956e1e6464d6f07bed5393a4787c87adc4bd359
+        username = ${eduroam.identity}
+        password = ${eduroam.password}
+      ''}
+    '';
+  };
+
+  systemd.services.openvpn-hu-berlin.conflicts = [ "hu-vpn.service" ];
+
+  services.openvpn.servers.hu-berlin = {
+    autoStart = false;
+    authUserPass = {
+      username = eduroam.identity;
+      password = eduroam.password;
     };
+    config = fileContents (pkgs.fetchurl {
+      url =
+        "https://www.cms.hu-berlin.de/de/dl/netze/vpn/openvpn/hu-berlin.ovpn";
+      sha256 = "15b55aibik5460svjq2gwxrcyh6ay4k8savd6cd5lncgndmd8p8h";
+    });
   };
 }

configs/i3.nix

@@ -1,56 +1,180 @@
 { config, pkgs, lib, ... }:
 let
-  new-workspace = pkgs.unstable.writers.writeDash "new-workspace" ''
+  inherit (import <niveum/lib>) defaultApplications colours;
+  klem = import <niveum/packages/scripts/klem.nix> {
+    inherit pkgs lib;
+    config.scripts = {
+      "p.r" = pkgs.writers.writeDash "p.r" ''
+        ${pkgs.curl}/bin/curl -fSs http://p.r --data-binary @- \
+          | ${pkgs.coreutils}/bin/tail --lines=1 \
+          | ${pkgs.gnused}/bin/sed 's/\\<r\\>/krebsco.de/'
+      '';
+      "ix.io" = pkgs.writers.writeDash "ix.io" ''
+        ${pkgs.curl}/bin/curl -fSs -F 'f:1=<-' ix.io
+      '';
+      "go.r" = pkgs.writers.writeDash "go.r" ''
+        ${pkgs.curl}/bin/curl -fSs http://go.r -F "uri=$(${pkgs.coreutils}/bin/cat)"
+      '';
+      "0x0.st" = pkgs.writers.writeDash "0x0.st" ''
+        ${pkgs.curl}/bin/curl -fSs https://0x0.st -F "shorten=$(${pkgs.coreutils}/bin/cat)"
+      '';
+      "rot13" = pkgs.writers.writeDash "rot13" ''
+        ${pkgs.coreutils}/bin/tr '[A-Za-z]' '[N-ZA-Mn-za-m]'
+      '';
+      "ipa" = pkgs.writers.writeDash "ipa" ''
+        ${pkgs.scripts.ipa}/bin/ipa
+      '';
+      "betacode" = pkgs.writers.writeDash "betacode" ''
+        ${pkgs.scripts.betacode}/bin/betacode
+      '';
+      "devanagari" = pkgs.writers.writeDash "devanagari" ''
+        ${pkgs.scripts.devanagari}/bin/devanagari
+      '';
+    };
+  };
+
+  new-workspace = pkgs.writers.writeDash "new-workspace" ''
     i3-msg workspace $(($(i3-msg -t get_workspaces | tr , '\n' | grep '"num":' | cut -d : -f 2 | sort -rn | head -1) + 1))
   '';
-  move-to-new-workspace = pkgs.unstable.writers.writeDash "new-workspace" ''
+  move-to-new-workspace = pkgs.writers.writeDash "new-workspace" ''
     i3-msg move container to workspace $(($(i3-msg -t get_workspaces | tr , '\n' | grep '"num":' | cut -d : -f 2 | sort -rn | head -1) + 1))
   '';
-in with config.niveum; {
+
+  # https://github.com/LukeSmithxyz/voidrice/blob/9fe6802122f6e0392c7fe20eefd30437771d7f8e/.local/bin/dmenuunicode
+  emoji-menu = let
+    emoji-file = pkgs.fetchurl {
+      url =
+        "https://raw.githubusercontent.com/LukeSmithxyz/voidrice/master/.local/share/larbs/emoji";
+      sha256 = "03fv69ah8msh2j6i3lm4sdkckqq8jwn1kj43j98dh0xjpzazsy46";
+    };
+    kaomoji-file = pkgs.writeText "kaomoji.txt" ''
+      ¯\(°_o)/¯ dunno lol shrug dlol
+      ¯\_(ツ)_/¯ dunno lol shrug dlol
+      ( ͡° ͜ʖ ͡°) lenny
+      ¯\_( ͡° ͜ʖ ͡°)_/¯ lenny shrug dlol
+      ( ﾟдﾟ) aaah sad noo
+      ヽ(^o^)丿 hi yay hello
+      (^o^: ups hehe
+      (^∇^) yay
+      ┗(｀皿´)┛ angry argh
+      ヾ(^_^) byebye!! bye
+      <(^.^<) <(^.^)> (>^.^)> (7^.^)7 (>^.^<) dance
+      (-.-)Zzz... sleep
+      (∩╹□╹∩) oh noes woot
+      (╯°□°）╯ ┻━┻ table flip
+      (」゜ロ゜)」 why woot
+      (_゜_゜_) gloom I see you
+      ༼ ༎ຶ ෴ ༎ຶ༽ sad
+      (\/) (°,,,,°) (\/) krebs
+    '';
+  in with pkgs;
+  writers.writeDashBin "emoji-menu" ''
+    PATH=${lib.makeBinPath [ coreutils dmenu gnused libnotify xclip xdotool ]}
+    chosen=$(cat ${emoji-file} ${kaomoji-file} | cut -d ';' -f1 | dmenu -i -l 10 | sed "s/ .*//")
+
+    [ "$chosen" != "" ] || exit
+
+    echo "$chosen" | tr -d '\n' | xclip -selection clipboard
+
+    if [ -n "$1" ]; then
+      xdotool key Shift+Insert
+    else
+      notify-send --app-name="emoji-menu" "'$chosen' copied to clipboard." &
+    fi
+  '';
+
+in {
   services.xserver = {
-    windowManager.default = "i3";
-    windowManager.i3.enable = true;
+    displayManager.defaultSession = "none+i3";
+    windowManager.i3 = {
+      enable = true;
+      package = pkgs.i3-gaps;
+    };
+  };
+
+  services.xserver = {
+    monitorSection = ''Option "DPMS" "false"'';
+    serverFlagsSection = ''
+      Option "BlankTime" "0"
+      Option "StandbyTime" "0"
+      Option "SuspendTime" "0"
+      Option "OffTime" "0"
+    '';
+    extraConfig = ''
+      Section "Extensions"
+        Option "DPMS" "Disable"
+      EndSection
+    '';
   };
 
   home-manager.users.me.xsession.windowManager.i3 = {
     enable = true;
     config = rec {
-      fonts = [ "${config.niveum.fonts.ui.name} ${toString config.niveum.fonts.ui.size}" ];
+      fonts = [ "Monospace 10" ];
       modifier = "Mod4";
       window = {
         titlebar = false;
         border = 1;
         hideEdgeBorders = "smart";
+        commands = [
+          {
+            criteria = { class = "floating"; };
+            command = "floating enable";
+          }
+          {
+            criteria = { class = "fzfmenu"; };
+            command = "floating enable";
+          }
+          {
+            criteria = { class = "mpv"; };
+            command = lib.strings.concatStringsSep ", " [
+              "floating enable"
+              "sticky enable"
+              "fullscreen disable"
+              "resize set 640 480"
+              "move position mouse"
+            ];
+          }
+        ];
       };
+      gaps.inner = 4;
       floating = {
         titlebar = false;
         border = 1;
       };
-      colors =
-        let scheme = { background = colours.background; text = colours.foreground; };
-        in rec {
-          focused = scheme // {
-            border = colours.background;
-            indicator = colours.background;
-            childBorder = colours.background;
-          };
-          focusedInactive = focused;
-          unfocused = focused;
-          urgent = scheme // {
-            border = colours.red.bright;
-            indicator = colours.red.bright;
-            childBorder = colours.red.bright;
-          };
-          placeholder = scheme // {
-            border = colours.green.bright;
-            indicator = colours.green.bright;
-            childBorder = colours.green.bright;
-          };
+      colors = let
+        scheme = {
+          background = colours.background;
+          text = colours.foreground;
         };
+      in rec {
+        focused = scheme // {
+          border = colours.foreground;
+          indicator = colours.foreground;
+          childBorder = colours.foreground;
+        };
+        unfocused = scheme // {
+          border = colours.background;
+          indicator = colours.background;
+          childBorder = colours.background;
+        };
+        focusedInactive = unfocused;
+        urgent = scheme // {
+          border = colours.red.bright;
+          indicator = colours.red.bright;
+          childBorder = colours.red.bright;
+        };
+        placeholder = scheme // {
+          border = colours.green.bright;
+          indicator = colours.green.bright;
+          childBorder = colours.green.bright;
+        };
+      };
       bars = [{
         workspaceButtons = false;
-        fonts = [ "${config.niveum.fonts.terminal.name} ${toString config.niveum.fonts.terminal.size}" ];
-        mode = "hide";
+        fonts = [ "Monospace 8" ];
+        mode = "hide"; # "dock"
+        position = "bottom";
         colors = rec {
           background = colours.background;
           separator = background;
@@ -61,108 +185,120 @@ in with config.niveum; {
             text = colours.foreground;
           };
         };
-        statusCommand = "${pkgs.i3status}/bin/i3status -c ${pkgs.writeText "i3status.conf" ''
-          general {
-            colors = true
-            color_good = "${colours.green.dark}"
-            color_bad = "${colours.red.dark}"
-            color_degraded = "${colours.white.dark}"
-            interval = 5
-            separator = " "
-          }
-
-          # order += "run_watch retiolum"
-          order += "path_exists openvpn"
-          order += "wireless ${networkInterfaces.wireless}"
-          order += "battery all"
-          order += "volume master"
-          order += "load"
-          order += "tztime local"
-
-          wireless ${networkInterfaces.wireless} {
-            format_up = "%essid"
-            format_down = "offline"
-          }
-
-          # run_watch retiolum {
-          #   pidfile = "/var/run/tinc.retiolum.pid"
-          #   format = "%title"
-          # }
-
-          path_exists openvpn {
-            path = "/proc/sys/net/ipv4/conf/tun0"
-            format = "%title"
-          }
-
-          battery all {
-            format = "%status%percentage"
-            format_down = "No battery"
-            status_chr = "↑"
-            status_bat = "↓"
-            status_unk = ""
-            status_full = "↯"
-            path = "/sys/class/power_supply/BAT%d/uevent"
-            low_threshold = 15
-            threshold_type = "percentage"
-            integer_battery_capacity = true
-          }
-
-          volume master {
-            format = "%volume"
-            format_muted = "%volume"
-            device = "default"
-            mixer = "Master"
-            mixer_idx = 0
-          }
-
-          tztime local {
-            format = "%Y-%m-%d %H:%M"
-          }
-
-          load {
-            format = "%1min"
-          }''}";
+        statusCommand = "${pkgs.i3status-rust}/bin/i3status-rs ${
+            pkgs.writeTOML (import <niveum/lib/i3status-rust.nix> {
+              inherit (config.niveum) batteryName wirelessInterface;
+              inherit colours;
+              inherit pkgs;
+            })
+          }";
       }];
+      modes.resize = {
+        "Escape" = ''mode "default"'';
+        "Return" = ''mode "default"'';
+        "h" = "resize shrink width 10 px or 5 ppt";
+        "j" = "resize grow height 10 px or 5 ppt";
+        "k" = "resize shrink height 10 px or 5 ppt";
+        "l" = "resize grow width 10 px or 5 ppt";
+      };
       keybindings = {
-        "${modifier}+Down" = "focus down";
-        "${modifier}+Left" = "focus left";
-        "${modifier}+Return" = "exec ${applications.terminal}";
-        "${modifier}+Right" = "focus right";
-        "${modifier}+Shift+Down" = "move down";
-        "${modifier}+Shift+Left" = "move left";
-        "${modifier}+Shift+Right" = "move right";
-        "${modifier}+Shift+Up" = "move up";
-        "${modifier}+Shift+b" = "move window to workspace prev";
-        "${modifier}+Shift+c" = "reload";
-        "${modifier}+Shift+n" = "move window to workspace next";
-        "${modifier}+Shift+q" = "kill";
-        "${modifier}+Shift+r" = "restart";
-        "${modifier}+Shift+w" = "exec ${pkgs.xautolock}/bin/xautolock -locknow";
-        "${modifier}+Shift+x" = "exec --no-startup-id ${move-to-new-workspace}";
-        "${modifier}+Shift+z" = "floating toggle";
-        "${modifier}+Up" = "focus up";
-        "${modifier}+a" = "exec ${pkgs.rofi}/bin/rofi -display-window — -show window";
-        "${modifier}+b" = "workspace prev";
-        "${modifier}+c" = "split h";
-        "${modifier}+d" = "exec ${pkgs.rofi}/bin/rofi -display-run — -show run";
-        "${modifier}+e" = "layout toggle split";
-        "${modifier}+f" = "fullscreen toggle";
+        "${modifier}+Shift+h" = "move left 25 px";
+        "${modifier}+Shift+j" = "move down 25 px";
+        "${modifier}+Shift+k" = "move up 25 px";
+        "${modifier}+Shift+l" = "move right 25 px";
         "${modifier}+h" = "focus left";
         "${modifier}+j" = "focus down";
         "${modifier}+k" = "focus up";
         "${modifier}+l" = "focus right";
+
+        "${modifier}+Shift+b" = "move window to workspace prev";
+        "${modifier}+Shift+n" = "move window to workspace next";
+        "${modifier}+Shift+x" = "exec --no-startup-id ${move-to-new-workspace}";
+        "${modifier}+b" = "workspace prev";
         "${modifier}+n" = "workspace next";
-        "${modifier}+p" = "exec ${pkgs.rofi-pass}/bin/rofi-pass";
+        "${modifier}+x" = "exec --no-startup-id ${new-workspace}";
+
+        "${modifier}+Shift+c" = "reload";
+        "${modifier}+Shift+q" = "kill";
+        "${modifier}+Shift+r" = "restart";
+
+        "${modifier}+Shift+s" = "sticky toggle";
+        "${modifier}+Shift+z" = "floating toggle";
+        "${modifier}+c" = "split h";
+        "${modifier}+e" = "layout toggle split";
+        "${modifier}+f" = "fullscreen toggle";
         "${modifier}+r" = "mode resize";
         "${modifier}+s" = "layout stacking";
-        "${modifier}+t" = "exec ${applications.fileManager}";
         "${modifier}+v" = "split v";
         "${modifier}+w" = "layout tabbed";
-        "${modifier}+x" = "exec --no-startup-id ${new-workspace}";
-        "${modifier}+y" = "exec ${applications.browser}";
-        "XF86AudioLowerVolume" = "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -d 5";
+
+        # "${modifier}+Shift+y" = "exec ${pkgs.qutebrowser}/bin/qutebrowser";
+        "${modifier}+Return" = "exec ${(defaultApplications pkgs).terminal}";
+        "${modifier}+t" = "exec ${(defaultApplications pkgs).fileManager}";
+        "${modifier}+y" = "exec ${(defaultApplications pkgs).browser}";
+
+        "${modifier}+Shift+w" = "exec ${pkgs.scripts.k-lock}/bin/k-lock";
+        "${modifier}+a" =
+          "exec --no-startup-id ${pkgs.rofi}/bin/rofi -display-window — -show window";
+        "${modifier}+d" = "exec --no-startup-id ${pkgs.dmenu}/bin/dmenu_run";
+        "${modifier}+Shift+d" = "exec ${
+            pkgs.writers.writeDash "notemenu" ''
+              set -efu
+              PATH=$PATH:${
+                lib.makeBinPath [ pkgs.dmenu pkgs.findutils pkgs.coreutils ]
+              }
+
+              cd ~/notes
+              note_file=$(find . -type f -printf "%T@ %p\n" | sort --reverse --numeric-sort | cut --delimiter=" " --fields=2 | dmenu -i)
+              if test "$note_file"
+              then
+                i3-sensible-terminal -e "$EDITOR" "$note_file"
+              fi
+            ''
+          }";
+        "${modifier}+p" = "exec --no-startup-id ${pkgs.pass}/bin/passmenu -l 5";
+        "${modifier}+u" = "exec ${emoji-menu}/bin/emoji-menu";
+
+        "${modifier}+F7" = "exec ${pkgs.scripts.showkeys-toggle}/bin/showkeys-toggle";
+        "${modifier}+F8" = "exec ${pkgs.xorg.xkill}/bin/xkill";
+        "${modifier}+F9" = "exec ${pkgs.redshift}/bin/redshift -O 4000 -b 0.85";
+        "${modifier}+F10" = "exec ${pkgs.redshift}/bin/redshift -x";
+        "${modifier}+F11" = "exec ${pkgs.xcalib}/bin/xcalib -invert -alter";
+        "${modifier}+F12" = "exec ${klem}/bin/klem";
+
+        "Print" = "exec flameshot-once";
+        "XF86AudioLowerVolume" =
+          "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -d 5";
         "XF86AudioMute" = "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -t";
-        "XF86AudioRaiseVolume" = "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -i 5";
+        "XF86AudioRaiseVolume" =
+          "exec --no-startup-id ${pkgs.pamixer}/bin/pamixer -i 5";
+        "XF86Calculator" =
+          "exec ${pkgs.st}/bin/st -c floating -e ${pkgs.bc}/bin/bc";
+        "XF86AudioPause" =
+          "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl pause";
+        "XF86AudioPlay" =
+          "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl play-pause";
+        "XF86AudioNext" =
+          "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl next";
+        "XF86AudioPrev" =
+          "exec --no-startup-id ${pkgs.playerctl}/bin/playerctl previous";
+        "XF86ScreenSaver" = "exec ${pkgs.scripts.k-lock}/bin/k-lock";
+
+        "XF86Display" = "exec ${pkgs.scripts.dmenurandr}/bin/dmenurandr";
+
+        # key names detected with xorg.xev:
+        # XF86WakeUp (fn twice)
+        # XF86Battery (fn f3)
+        # XF86Sleep (fn f4) - actually suspends
+        # XF86WLAN
+        # XF86WebCam (fn f6)
+        # XF86TouchpadToggle (fn f8)
+        # XF86Suspend (fn f12) - actually suspends to disk
+        # Num_Lock (fn Roll) - numlocks
+        # XF86Audio{Prev,Next,Mute,Play,Stop}
+        # XF86Forward
+        # XF86Back
+        # XF86Launch1 (thinkvantage)
       };
     };
   };

configs/kdeconnect.nix

@@ -1,7 +1,13 @@
 {
   networking.firewall = {
-    allowedTCPPortRanges = [ { from = 1714; to = 1764; } ];
-    allowedUDPPortRanges = [ { from = 1714; to = 1764; } ];
+    allowedTCPPortRanges = [{
+      from = 1714;
+      to = 1764;
+    }];
+    allowedUDPPortRanges = [{
+      from = 1714;
+      to = 1764;
+    }];
   };
 
   home-manager.users.me = {

configs/keybase.nix

@@ -1,5 +1,4 @@
-{ config, ... }:
-{
+{ config, ... }: {
   services.keybase.enable = true;
 
   services.kbfs = {

configs/keyboard.nix

@@ -1,11 +1,17 @@
-with import <lib>;
-{
+{ pkgs, lib, ... }:
+let commaSep = builtins.concatStringsSep ",";
+in {
   services.xserver = {
-    layout = commaSep [ "de" "gr" "ru" ];
-    xkbVariant = commaSep [ "T3" "polytonic" "phonetic_winkeys" ];
-    xkbOptions = commaSep [ "compose:caps" "terminate:ctrl_alt_bksp" "grp:ctrls_toggle" ];
+    layout = commaSep [ "de" "gr" ];
+    xkbVariant = commaSep [ "T3" "polytonic" ];
+    xkbOptions =
+      commaSep [ "compose:caps" "terminate:ctrl_alt_bksp" "grp:ctrls_toggle" ];
     libinput.enable = true;
   };
 
-  i18n.consoleKeyMap = "de";
+  console.keyMap = "de";
+
+  # improve held key rate
+  services.xserver.displayManager.sessionCommands =
+    "${pkgs.xorg.xset}/bin/xset r rate 300 50";
 }

configs/kleiter.nix

@@ -0,0 +1,13 @@
+{ ... }:
+let ssid = "Kleiter Gast";
+in {
+  networking.wireless.networks.${ssid}.psk = "Kleiter-Gast";
+
+  # fix dns
+  systemd.network.networks.kleiter = {
+    dns = [ "8.8.8.8" "8.8.4.4" ];
+    networkConfig.DHCP = "yes";
+    matchConfig.Name = "wlp3s0";
+    matchConfig.SSID = ssid;
+  };
+}

configs/mail.nix

@@ -1,58 +0,0 @@
-{ config, pkgs, ... }:
-{
-  environment.systemPackages = [
-    pkgs.notmuch
-    pkgs.offlineimap
-    pkgs.msmtp
-    pkgs.neomutt
-  ];
-  home-manager.users.me = {
-    programs.astroid = {
-      enable = true;
-      externalEditor = "urxvt -embed %3 -e nvim %1";
-      pollScript = "offlineimap";
-    };
-
-    accounts.email.maildirBasePath = "${config.users.users.me.home}/mail";
-
-    accounts.email.accounts.amroplay = {
-      astroid.enable = true;
-      address = "amroplay@gmail.com";
-      userName = "amroplay";
-      flavor = "gmail.com";
-      realName = config.niveum.user.name;
-      msmtp.enable = true;
-      notmuch.enable = true;
-      offlineimap = {
-        enable = true;
-        postSyncHookCommand = "notmuch new";
-      };
-    };
-
-    accounts.email.accounts.hu-berlin = {
-      astroid.enable = true;
-      address = "meinhark@hu-berlin.de";
-      userName = "meinhark";
-      realName = config.niveum.user.name;
-      imap = {
-        host = "mailbox.cms.hu-berlin.de";
-        port = 993;
-        tls.enable = true;
-      };
-      smtp = {
-        host = "mailhost.cms.hu-berlin.de";
-        port = 25;
-        tls.enable = true;
-      };
-      msmtp.enable = true;
-      notmuch.enable = true;
-      offlineimap = {
-        enable = true;
-        postSyncHookCommand = "notmuch new";
-      };
-      primary = true;
-    };
-
-    programs.offlineimap.enable = true;
-  };
-}

configs/mail/accounts.nix

@@ -0,0 +1,145 @@
+{ lib, ... }:
+let
+  inherit (import <niveum/lib>) kieran;
+
+  enableDefaults = lib.recursiveUpdate {
+    mbsync = {
+      enable = true;
+      create = "both";
+      expunge = "both";
+    };
+    msmtp.enable = true;
+    notmuch.enable = true;
+  };
+
+  settings = {
+    fastmail = {
+      smtp = {
+        host = "smtp.fastmail.com";
+        port = 465;
+        tls.enable = true;
+      };
+      imap = {
+        host = "imap.fastmail.com";
+        port = 993;
+        tls.enable = true;
+      };
+    };
+    cock = {
+      smtp = {
+        host = "mail.cock.li";
+        port = 587;
+        tls = {
+          enable = true;
+          useStartTls = true;
+        };
+      };
+      imap = {
+        host = "mail.cock.li";
+        port = 993;
+        tls.enable = true;
+      };
+    };
+    posteo = {
+      smtp = {
+        host = "posteo.de";
+        port = 587;
+        tls = {
+          enable = true;
+          useStartTls = true;
+        };
+      };
+      imap = {
+        host = "posteo.de";
+        port = 993;
+        tls.enable = true;
+      };
+    };
+    hu-berlin = {
+      smtp = {
+        host = "mailhost.cms.hu-berlin.de";
+        port = 25;
+        tls = {
+          enable = true;
+          useStartTls = true;
+        };
+      };
+      imap = {
+        host = "mailbox.cms.hu-berlin.de";
+        port = 993;
+        tls.enable = true;
+      };
+    };
+  };
+
+  # turns out we have to escape $ because, if the password contains a $, it will get interpolated as a variable by the msmtp `passwordeval` which does: `bash -c "COMMAND; echo"`
+  pass_ = file: "echo ${lib.escape ["$"] (lib.escapeShellArg (lib.strings.fileContents file))}";
+in
+{
+  fysi = enableDefaults {
+    primary = false;
+    userName = "kieran@fysi.tech";
+    address = "kieran@fysi.tech";
+    realName = kieran.name;
+    passwordCommand = pass_ <secrets/mail/fastmail>;
+    inherit (settings.fastmail) imap smtp;
+  };
+  cock = enableDefaults {
+    primary = false;
+    userName = "2210@cock.li";
+    address = "2210@cock.li";
+    realName = "2210";
+    passwordCommand = pass_ <secrets/mail/cock>;
+    inherit (settings.cock) imap smtp;
+  };
+  kieran-gmail = enableDefaults {
+    primary = false;
+    flavor = "gmail.com";
+    address = "kieran.meinhardt@gmail.com";
+    realName = kieran.name;
+    userName = "kieran.meinhardt";
+    passwordCommand = pass_ <secrets/mail/gmail/kieran.meinhardt>;
+    folders = {
+      drafts = "[Gmail]/Entw&APw-rfe";
+      sent = "[Gmail]/Gesendet";
+      trash = "[Gmail]/Papierkorb";
+    };
+  };
+  amroplay = enableDefaults {
+    primary = false;
+    flavor = "gmail.com";
+    address = "amroplay@gmail.com";
+    realName = kieran.name;
+    userName = "amroplay";
+    passwordCommand = pass_ <secrets/mail/gmail/amroplay>;
+    folders = {
+      drafts = "[Gmail]/Drafts";
+      sent = "[Gmail]/Sent Mail";
+      trash = "[Gmail]/Bin";
+    };
+  };
+  posteo = enableDefaults {
+    primary = true;
+    address = "kieran.meinhardt@posteo.net";
+    realName = kieran.name;
+    userName = "kieran.meinhardt@posteo.net";
+    passwordCommand = pass_ <secrets/mail/posteo>;
+    inherit (settings.posteo) imap smtp;
+  };
+  hu-berlin = enableDefaults {
+    primary = false;
+    address = "meinhark@hu-berlin.de";
+    realName = kieran.name;
+    userName = "meinhark";
+    passwordCommand = pass_ <secrets/eduroam/password>;
+    inherit (settings.hu-berlin) imap smtp;
+  };
+  hu-berlin-work = enableDefaults {
+    primary = false;
+    address = "meinhaki@hu-berlin.de";
+    realName = kieran.name;
+    userName = "meinhaki";
+    passwordCommand = pass_ <secrets/mail/meinhaki>;
+    inherit (settings.hu-berlin) imap smtp;
+  };
+}

configs/mail/client.nix

@@ -0,0 +1,56 @@
+{ config, pkgs, lib, ... }:
+let
+  much =
+    let
+      nixpkgs-much = import (pkgs.fetchFromGitHub {
+        owner = "NixOS";
+        repo = "nixpkgs";
+        rev = "7c2a362b58a1c2ba72d24aa3869da3b1a91d39e1";
+        sha256 = "0gl4xndyahasa9dv5mi3x9w8s457wl2xh9lcldizcn1irjvkrzs4";
+      }) {
+        overlays = [
+          (import <stockholm/krebs/5pkgs/haskell>)
+        ];
+      };
+      much-pkg = nixpkgs-much.haskellPackages.callCabal2nix "much" <niveum/submodules/much> {};
+    in nixpkgs-much.haskell.lib.dontHaddock much-pkg;
+in {
+  environment.variables.NOTMUCH_CONFIG = config.home-manager.users.me.home.sessionVariables.NOTMUCH_CONFIG;
+
+  environment.systemPackages = [
+    pkgs.notmuch-addrlookup
+
+    pkgs.muchsync
+
+    (pkgs.writers.writeDashBin "mua" ''
+      if [ $# -eq 0 ]; then
+        ${much}/bin/much-kmein
+      else
+        ${much}/bin/much-kmein -q "$*"
+      fi
+    '')
+
+    (pkgs.writers.writeDashBin "mail-clean" ''
+      ${pkgs.notmuch}/bin/notmuch search --output files --format=text0 tag:deleted | ${pkgs.findutils}/bin/xargs -r0 rm
+      ${pkgs.notmuch}/bin/notmuch new
+    '')
+  ];
+
+  home-manager.users.me = {
+    services.muchsync.remotes.zaatar = {
+      frequency = "*:0/10";
+      remote.host = "email@zaatar";
+      remote.importNew = false;
+    };
+
+    programs.notmuch = {
+      enable = true;
+      search.excludeTags = [ "deleted" "spam" ];
+      # extraConfig.muchsync.and_tags = "inbox;unread";
+    };
+
+    programs.msmtp.enable = true;
+
+    accounts.email.accounts = import ./accounts.nix { inherit lib; };
+  };
+}

configs/mail/fetcher.nix

@@ -0,0 +1,68 @@
+{ config, pkgs, lib, ... }:
+let
+  inherit (import <niveum/lib>) kieran;
+
+  tagRules = [
+    {
+      query = "to:miaengiadina-pwa@noreply.github.com AND subject:\"PR run failed\"";
+      tags = [ "-new" "+deleted" ];
+    }
+    {
+      query = lib.concatStringsSep " OR " [
+        "from:noreply-local-guides@google.com"
+        "from:google-maps-noreply@google.com"
+        "subject:fd-noti"
+        "from:nebenan.de"
+        "to:miaengiadina-pwa@noreply.github.com"
+      ];
+      tags = [ "-new" ];
+    }
+    {
+      query = "tag:new";
+      tags = [ "-new" "+inbox" ];
+    }
+  ];
+
+  generateTaggingScript = filters:
+    let
+      template = { tags, query, message ? "tagging ${query} -> ${lib.concatStringsSep " " tags}", ... }: ''
+        echo '${message}'
+        ${pkgs.notmuch}/bin/notmuch tag ${lib.concatStringsSep " " tags} -- "${query}"
+      '';
+    in lib.concatStringsSep "\n" (map template filters);
+in
+{
+  users.users.email = {
+    isNormalUser = true;
+    description = "fetching mails since 2021";
+    openssh.authorizedKeys.keys = kieran.sshKeys pkgs;
+    packages = [ pkgs.muchsync ];
+  };
+
+  environment.variables.NOTMUCH_CONFIG = config.home-manager.users.email.home.sessionVariables.NOTMUCH_CONFIG;
+
+  systemd.services.mail-sync = {
+    enable = true;
+    wants = [ "network-online.target" ];
+    startAt = "*:0/15";
+    serviceConfig.User = config.users.users.email.name;
+    serviceConfig.Type = "oneshot";
+    environment.NOTMUCH_CONFIG = config.home-manager.users.email.home.sessionVariables.NOTMUCH_CONFIG;
+    script = ''
+      ${pkgs.isync}/bin/mbsync --all
+      ${pkgs.notmuch}/bin/notmuch new
+    '';
+  };
+
+  home-manager.users.email = {
+    programs.mbsync.enable = true;
+
+    accounts.email.accounts = import ./accounts.nix { inherit lib; };
+
+    programs.notmuch = {
+      enable = true;
+      new.tags = [ "new" ];
+      hooks.postNew = generateTaggingScript tagRules;
+    };
+  };
+}

configs/matterbridge.nix

@@ -0,0 +1,72 @@
+{ pkgs, lib, ... }:
+let
+  bridgeBotToken = lib.strings.fileContents <system-secrets/telegram/kmein.token>;
+  config = {
+    general = {
+      RemoteNickFormat = "[{NICK}] ";
+      Charset = "utf-8";
+    };
+    telegram.kmein.Token = bridgeBotToken;
+    irc.freenode = {
+      Server = "irc.freenode.net:6667";
+      Nick = "ponte";
+    };
+    mumble.lassulus = {
+      Server = "lassul.us:64738";
+      Nick = "krebs_bridge";
+      SkipTLSVerify = true;
+    };
+    gateway = [
+      {
+        name = "krebs-bridge";
+        enable = true;
+        inout = [
+          {
+            account = "irc.freenode";
+            channel = "#krebs";
+          }
+          {
+            account = "telegram.kmein";
+            channel = "-330372458";
+          }
+          {
+            account = "mumble.lassulus";
+            channel = 6; # "nixos"
+          }
+        ];
+      }
+      {
+        name = "myengadin-bridge";
+        enable = true;
+        inout = [
+          {
+            account = "irc.freenode";
+            channel = "##myengadin";
+          }
+          {
+            account = "telegram.kmein";
+            channel = "-425759153";
+          }
+        ];
+      }
+    ];
+  };
+in
+{
+  nixpkgs.overlays = [
+    (import <niveum/overlays/toml.nix>)
+    (self: super: {
+      matterbridge = (import (super.fetchFromGitHub {
+        owner = "NixOS";
+        repo = "nixpkgs";
+        rev = "e45d91ee65db293a172ec506759d1248e40c35f5";
+        sha256 = "03cjs5xcx09lw0djyrx2kfakw7gkg4iqmy9w25azai62im39l30k";
+      }) {}).matterbridge;
+    })
+  ];
+
+  services.matterbridge = {
+    enable = true;
+    configPath = toString (pkgs.writeTOML config);
+  };
+}

configs/mime.nix

@@ -0,0 +1,27 @@
+{
+  home-manager.users.me = {
+    xdg.mimeApps = {
+      enable = true;
+      defaultApplications = {
+        "application/epub+zip" = "org.pwmt.zathura.desktop";
+        "application/pdf" = "org.pwmt.zathura.desktop";
+        "application/vnd.oasis.opendocument.text" = "writer.desktop";
+        "application/vnd.openxmlformats-officedocument.wordprocessingml.document" = "writer.desktop";
+        "image/jpeg" = "sxiv.desktop";
+        "image/png" = "sxiv.desktop";
+        "image/vnd.djvu+multipage" = "org.pwmt.zathura.desktop";
+        "text/html" = "brave-browser.desktop";
+        "text/markdown" = "nvim.desktop";
+        "text/plain" = "nvim.desktop";
+        "x-scheme-handler/about" = "brave-browser.desktop";
+        "x-scheme-handler/http" = "brave-browser.desktop";
+        "x-scheme-handler/https" = "brave-browser.desktop";
+        "x-scheme-handler/mailto" = "brave-browser.desktop";
+        "x-scheme-handler/unknown" = "brave-browser.desktop";
+        "x-scheme-handler/webcal" = "brave-browser.desktop";
+        "inode/directory" = "pcmanfm.desktop";
+      };
+
+    };
+  };
+}

configs/moodle-dl.nix

@@ -0,0 +1,86 @@
+{ config, pkgs, lib, ... }:
+let
+  inherit (import <niveum/lib>) kieran;
+
+  moodle-dl = pkgs.callPackage <niveum/packages/moodle-dl> {};
+
+  moodle-dl-config = {
+    telegram = {
+      token = lib.strings.fileContents <system-secrets/telegram/moodle-dl.token>;
+      chat_id = "18980945";
+      send_error_msg = true;
+    };
+    token = lib.strings.fileContents <system-secrets/moodle.token>;
+    moodle_domain = "moodle.hu-berlin.de";
+    moodle_path = "/";
+    download_course_ids = [
+      99881 # Dialektologie
+      100183 # Onomastik
+      100353 # Sanskrit I
+      100692 # Sanskrit Tutorium
+      99832 # Germanisch
+      99823 # Gotisch
+      99813 # Altalbanisch
+      98681 # Geistliche Lyrik von Luther bis Lehnert
+      99667 # Antike Mythologie
+      # 52365 # FSR KlassPhil
+    ];
+    download_submissions = true;
+    download_descriptions = true;
+    download_links_in_descriptions = false;
+    download_databases = false;
+    download_forums = false;
+    download_linked_files = false;
+    download_also_with_cookie = false;
+  };
+
+  moodle-dl-json = pkgs.writeText "moodle-dl.json" (builtins.toJSON moodle-dl-config);
+
+  moodle-dl-directory = "/var/lib/moodle";
+in
+{
+  users.extraUsers.moodle = {
+    isNormalUser = false;
+    home = moodle-dl-directory;
+    createHome = true;
+    openssh.authorizedKeys.keys = [
+      # for sshfs mount
+      "ssh-rsa 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 root@wilde"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFFPHt+FPQ6gq8Ev65YsBZrafdtpWGpCNnlVvy67S1BK root@manakish"
+    ];
+    useDefaultShell = true;
+  };
+
+  system.activationScripts.moodle-dl-config = "ln -sfn ${toString moodle-dl-json} ${config.users.extraUsers.moodle.home}/config.json";
+
+  services.syncthing = {
+    enable = true;
+    user = "moodle"; # config.users.extraUsers.moodle.name;
+    openDefaultPorts = true;
+    configDir = "${moodle-dl-directory}/.config/syncthing";
+    dataDir = "${moodle-dl-directory}/.config/syncthing";
+    declarative = rec {
+      cert = toString <system-secrets/syncthing/cert.pem>;
+      key = toString <system-secrets/syncthing/key.pem>;
+      devices = {
+        inherit ((import <niveum/lib>).syncthing.devices) wilde manakish toum;
+      };
+      folders.${moodle-dl-directory} = {
+        devices = [ "toum" "wilde" "manakish" ];
+        id = "moodle-dl";
+      };
+    };
+  };
+
+  systemd.services.moodle-dl = {
+    enable = true;
+    startAt = "hourly";
+    serviceConfig = {
+      Type = "oneshot";
+      User = config.users.extraUsers.moodle.name;
+      WorkingDirectory = config.users.extraUsers.moodle.home;
+    };
+    wants = [ "network-online.target" ];
+    script = "${moodle-dl}/bin/moodle-dl";
+  };
+}

configs/mopidy.nix

@@ -1,30 +0,0 @@
-{ pkgs, ... }:
-let secrets = import <dot/secrets.nix>;
-in {
-  services.mopidy = {
-    enable = true;
-    extensionPackages = [
-      pkgs.mopidy-gmusic
-      pkgs.mopidy-iris
-      pkgs.mopidy-moped
-      pkgs.mopidy-mopify
-      pkgs.mopidy-soundcloud
-      pkgs.mopidy-spotify
-      pkgs.mopidy-spotify-tunigo
-      pkgs.mopidy-youtube
-    ];
-    configuration = ''
-      [mpd]
-      hostname = ::
-
-      [spotify]
-      username = ${secrets.spotify.username}
-      password = ${secrets.spotify.password}
-      client_id = ${secrets.spotify.clientId}
-      client_secret = ${secrets.spotify.clientSecret}
-
-      [soundcloud]
-      auth_token = ${secrets.soundcloud.authToken}
-    '';
-  };
-}

configs/mpd-fm.nix

@@ -0,0 +1,83 @@
+{ config, pkgs, lib, ... }:
+let
+  streams = import <niveum/lib/streams.nix> {
+    di-fm-key = lib.strings.fileContents <secrets/di.fm/key>;
+  };
+  multi-room-audio-port = 8000;
+in
+{
+  imports = [
+    <niveum/modules/mpd-fm.nix>
+  ];
+
+  services.mpd = {
+    enable = true;
+    extraConfig = ''
+      log_level "default"
+      auto_update "yes"
+
+      audio_output {
+        type "alsa"
+        name "zaatar single room audio system"
+      }
+
+      audio_output {
+        type "httpd"
+        name "zaatar multi room audio system"
+        encoder "vorbis" # optional
+        port "${toString multi-room-audio-port}"
+        quality "5.0" # do not define if bitrate is defined
+        # bitrate "128" # do not define if quality is defined
+        format "44100:16:2"
+        always_on "yes" # prevent MPD from disconnecting all listeners when playback is stopped.
+        tags "yes" # httpd supports sending tags to listening streams.
+      }
+    '';
+  };
+
+  environment.systemPackages = [ pkgs.mpc_cli ];
+
+  services.mpd-fm = {
+    enable = true;
+    # stationsFile = "/etc/mpd-fm/stations.json";
+    stations = lib.lists.imap0 (id: {desc ? "", logo ? "https://picsum.photos/seed/${builtins.hashString "md5" stream}/300", stream, station}: { inherit id desc logo stream station; }) streams;
+    webPort = 8080;
+  };
+
+  systemd.services.mpd-fm-stations =
+  let
+    stations = lib.lists.imap0 (id: {desc ? "", logo ? "https://picsum.photos/seed/${builtins.hashString "md5" stream}/300", stream, station}: { inherit id desc logo stream station; }) streams;
+    stationsJson = pkgs.writeText "stations.json" (builtins.toJSON stations);
+  in {
+    wantedBy = [ "mpd-fm.service" ];
+    startAt = "hourly";
+    script = ''
+      mkdir -p /etc/mpd-fm
+      antenne_asb_url=$(
+        ${pkgs.curl}/bin/curl -sS 'https://www.caster.fm/widgets/em_player.php?jsinit=true&uid=529295&t=blue&c=' \
+          | grep streamUrl \
+          | sed ${lib.escapeShellArg "s/^.*'\\([^']*\\)'.*/\\1/"}
+      )
+      ${pkgs.jq}/bin/jq "map(if .station == \"Antenne ASB\" then .stream |= \"$antenne_asb_url\" else . end)" < ${stationsJson} > /etc/mpd-fm/stations.json
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 ];
+  services.nginx = {
+    enable = true;
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+    virtualHosts.default = {
+      basicAuth.dj = lib.strings.fileContents <system-secrets/mpd-web.key>;
+      locations."= /listen.ogg" = {
+        proxyPass = "http://127.0.0.1:${toString multi-room-audio-port}";
+      };
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:${toString config.services.mpd-fm.webPort}";
+        proxyWebsockets = true;
+      };
+    };
+  };
+}

configs/mpv.nix

@@ -1,17 +1,24 @@
-{ pkgs, ... }:
-{
-  environment.systemPackages = [ pkgs.mpv pkgs.mpv-poll ];
+{ pkgs, ... }: let
+  swallow = command: "${pkgs.scripts.swallow}/bin/swallow ${command}";
+in {
+  environment.shellAliases.smpv = swallow "mpv";
 
-  home-manager.users.me.xdg.configFile = {
-    "mpv/input.conf".text = ''
-      Alt+RIGHT add video-rotate 90
-      Alt+LEFT add video-rotate -90
-      Alt+- add video-zoom -0.25
-      Alt+= add video-zoom 0.25
-      Alt+l add video-pan-x -0.05
-      Alt+h add video-pan-x 0.05
-      Alt+k add video-pan-y 0.05
-      Alt+j add video-pan-y -0.05
-    '';
+  home-manager.users.me = {
+    programs.mpv = {
+      enable = true;
+      config = {
+        ytdl-format = "bestvideo+bestaudio/best";
+      };
+      bindings = {
+        "Alt+RIGHT" = "add video-rotate 90";
+        "Alt+LEFT" = "add video-rotate -90";
+        "Alt+-" = "add video-zoom -0.25";
+        "Alt+=" = "add video-zoom 0.25";
+        "Alt+l" = "add video-pan-x -0.05";
+        "Alt+h" = "add video-pan-x 0.05";
+        "Alt+k" = "add video-pan-y 0.05";
+        "Alt+j" = "add video-pan-y -0.05";
+      };
+    };
   };
 }

configs/neovim.nix

@@ -1,109 +1,79 @@
-{ pkgs, ... }:
-{
+{ pkgs, ... }: {
   environment.variables.EDITOR = pkgs.lib.mkForce "nvim";
   environment.shellAliases.vi = "nvim";
   environment.shellAliases.vim = "nvim";
   environment.shellAliases.view = "nvim -R";
 
+  nixpkgs.config.packageOverrides = pkgs: {
+    vimPlugins = pkgs.vimPlugins // {
+      cheat-sh-vim = pkgs.callPackage <niveum/packages/vimPlugins/cheat-sh.nix> { };
+      vim-fetch = pkgs.callPackage <niveum/packages/vimPlugins/vim-fetch.nix> { };
+      vim-colors-paramount = pkgs.callPackage <niveum/packages/vimPlugins/vim-colors-paramount.nix> { };
+      vim-256noir = pkgs.callPackage <niveum/packages/vimPlugins/vim-256noir.nix> { };
+      icalendar-vim = pkgs.callPackage <niveum/packages/vimPlugins/icalendar-vim.nix> { };
+      todo-txt-vim = pkgs.callPackage <niveum/packages/vimPlugins/todo-txt-vim.nix> { };
+      jq-vim = pkgs.callPackage <niveum/packages/vimPlugins/jq-vim.nix> { };
+      vim-fsharp = pkgs.callPackage <niveum/packages/vimPlugins/vim-fsharp.nix> { };
+      vim-reason-plus = pkgs.callPackage <niveum/packages/vimPlugins/vim-reason-plus.nix> { };
+      vim-mail = pkgs.callPackage <niveum/packages/vimPlugins/vim-mail.nix> { };
+    };
+  };
+
   environment.systemPackages = [
+    (pkgs.writers.writeDashBin "vim" ''neovim "$@"'')
     (pkgs.neovim.override {
       configure = {
-        customRC = builtins.readFile <dot/vimrc>;
+        customRC = builtins.readFile <niveum/lib/vim/init.vim>;
         packages.nvim = with pkgs.vimPlugins; {
-          start = with pkgs.vimPlugins; [
+          start = [
+            # cheat-sh-vim
+            # deoplete-nvim
+            # vim-abolish
             ale
-            deoplete-nvim
             fzf-vim
             fzfWrapper
+            goyo
             supertab
+            undotree
             tabular
-            vim-abolish
+            vimwiki
+            vim-256noir
+            vim-colors-paramount
             vim-commentary
+            vim-css-color
             vim-eunuch
+            vim-fetch
             vim-fugitive
             vim-gitgutter
-            vim-pandoc vim-pandoc-after vim-pandoc-syntax
+            vim-pandoc
+            vim-pandoc-syntax # vim-pandoc-after
             vim-repeat
             vim-sensible
-            vim-startify
+            # vim-startify
             vim-surround
-            (pkgs.vimUtils.buildVimPluginFrom2Nix rec {
-              name = "vim-fetch";
-              src = pkgs.fetchFromGitHub {
-                owner = "wsdjeg";
-                repo = "vim-fetch";
-                rev = "76c08586e15e42055c9c21321d9fca0677442ecc";
-                sha256 = "0avcqjcqvxgj00r477ps54rjrwvmk5ygqm3qrzghbj9m1gpyp2kz";
-              };
-            })
-            (pkgs.vimUtils.buildVimPluginFrom2Nix rec {
-              name = "vim-colors-paramount";
-              src = pkgs.fetchFromGitHub {
-                owner = "owickstrom";
-                repo = "vim-colors-paramount";
-                rev = "a5601d36fb6932e8d1a6f8b37b179a99b1456798";
-                sha256 = "0rjn9vjb0xrxbiqyfclda2ridcbl3nfn4svs32mvmv8als6crncg";
-              };
-            })
-            (pkgs.vimUtils.buildVimPluginFrom2Nix {
-              name = "vim-256noir";
-              src = pkgs.fetchFromGitHub {
-                owner = "andreasvc";
-                repo = "vim-256noir";
-                rev = "e8668a18a4a90272c1cae87e655f8bddc5ac3665";
-                sha256 = "1kpn379f5dgbsgb73g6d1nlmz9vz0j3ihi500mcdx4yg56fvkr0x";
-              };
-            })
+            vim-mail
           ];
           opt = [
             csv
             dhall-vim
             elm-vim
+            emmet-vim
             haskell-vim
+            icalendar-vim
             idris-vim
+            nim-vim
+            jq-vim
+            purescript-vim
             rust-vim
+            todo-txt-vim
             typescript-vim
+            vim-fsharp
             vim-javascript
+            vim-ledger
             vim-nix
+            vim-reason-plus
             vim-toml
             vimtex
-            vim-ledger
-            (pkgs.vimUtils.buildVimPluginFrom2Nix {
-              name = "todo.txt-vim";
-              src = pkgs.fetchFromGitHub {
-                owner = "freitass";
-                repo = "todo.txt-vim";
-                rev = "6845221d45bd62e604c2024bc511a56e79d1118b";
-                sha256 = "08m9q5f2pz6gjp0vkmm7glfsrbnldxi1j59dm5d7any6y96xxd6v";
-              };
-            })
-            (pkgs.vimUtils.buildVimPluginFrom2Nix {
-              name = "jq.vim";
-              src = pkgs.fetchFromGitHub {
-                owner = "vito-c";
-                repo = "jq.vim";
-                rev = "5baf8ed192cf267d30b84e3243d9aab3d4912e60";
-                sha256 = "1ykaxlli7b9wmhr8lpdalqxh7l4940jwhwm9pwlraga425h4r6z4";
-              };
-            })
-            (pkgs.vimUtils.buildVimPluginFrom2Nix {
-              name = "vim-fsharp";
-              src = pkgs.fetchFromGitHub {
-                owner = "fsharp";
-                repo = "vim-fsharp";
-                rev = "627db7d701747e8fd7924b6505c61e16a369fb72";
-                sha256 = "00hhgn2p54faysx1ddccyhl9jnvddgxsczhv0np3mgzza6ls4838";
-              };
-            })
-            (pkgs.vimUtils.buildVimPluginFrom2Nix {
-              name = "emmet-vim";
-              src = pkgs.fetchFromGitHub {
-                owner = "mattn";
-                repo = "emmet-vim";
-                rev = "d698f1658770ca5fa58c87e80421c8d65bbe9065";
-                sha256 = "0vl4267hh8g1vkvc3awlqyypgz4m1r43d47sldl80yamiafiviaj";
-              };
-            })
           ];
         };
       };

configs/newsboat.nix

@@ -0,0 +1,73 @@
+{ pkgs, config, ... }:
+let
+  ytdl-format = "'bestvideo[height<=?720][fps<=?30][vcodec!=?vp9]+bestaudio/best'";
+
+  newsboat-home =
+    "${config.users.users.me.home}/cloud/syncthing/common/newsboat";
+  linkhandler-bin = "${pkgs.scripts.linkhandler}/bin/linkhandler";
+
+  newsboat-config = pkgs.writeText "config" ''
+    auto-reload no
+    prepopulate-query-feeds yes
+
+    # dont keep a search history
+    history-limit 0
+
+    datetime-format %F
+
+    text-width 85
+
+    external-url-viewer "${pkgs.urlscan}/bin/urlscan -dc -r '${linkhandler-bin} {}'"
+    browser ${linkhandler-bin}
+    macro , open-in-browser
+    macro c set browser "${pkgs.xsel}/bin/xsel -b <<<" ; open-in-browser ; set browser ${linkhandler-bin}
+    macro v set browser "${pkgs.utillinux}/bin/setsid -f ${pkgs.mpv}/bin/mpv" ; open-in-browser ; set browser ${linkhandler-bin}
+    macro y set browser "${pkgs.ts}/bin/ts ${pkgs.youtube-dl}/bin/youtube-dl -f ${ytdl-format} --add-metadata" ; open-in-browser ; set browser ${linkhandler-bin}
+
+    bind-key j down
+    bind-key k up
+    bind-key j next articlelist
+    bind-key k prev articlelist
+    bind-key J next-feed articlelist
+    bind-key K prev-feed articlelist
+    bind-key G end
+    bind-key g home
+    bind-key d pagedown
+    bind-key u pageup
+    bind-key l open
+    bind-key h quit
+    bind-key a toggle-article-read
+    bind-key n next-unread
+    bind-key N prev-unread
+    bind-key D pb-download
+    bind-key U show-urls
+    bind-key x pb-delete
+
+    save-path ${newsboat-home}/saved/
+
+    highlight all "---.*---" yellow default
+    highlight feedlist ".*(0/0))" black default
+    highlight article "^Title:.*" yellow default bold
+    highlight article "^Author:.*" yellow default
+    highlight article "^Flags:.*" red default
+    highlight article "\\[[0-9][0-9]*\\]" color66 default bold
+    highlight article "\\[image [0-9][0-9]*\\]" color109 default bold
+    highlight article "\\[embedded flash: [0-9][0-9]*\\]" color66 default bold
+
+    color background white default
+    color listnormal white default
+    color listnormal_unread white default bold
+    color listfocus blue default
+    color listfocus_unread blue default bold
+    color info red default bold
+    color article white default
+  '';
+in {
+  nixpkgs.config.packageOverrides = pkgs: {
+    newsboat = pkgs.writers.writeDashBin "newsboat" ''
+      ${pkgs.newsboat}/bin/newsboat -C ${newsboat-config} -c ${newsboat-home}/cache.db -u ${newsboat-home}/urls "$@"
+    '';
+  };
+
+  environment.systemPackages = [ pkgs.newsboat ];
+}

configs/nextcloud.nix

@@ -0,0 +1,55 @@
+{ pkgs, lib, ... }:
+let
+  inherit (import <niveum/lib>) localAddresses;
+in
+{
+  services.nextcloud = {
+    enable = true;
+    package = pkgs.nextcloud20;
+
+    https = true;
+
+    autoUpdateApps = {
+      enable = true;
+      startAt = "05:00:00";
+    };
+
+    hostName = "cloud.xn--kiern-0qa.de";
+
+    config = {
+      overwriteProtocol = "https";
+
+      dbtype = "pgsql";
+      dbuser = "nextcloud";
+      dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
+      dbname = "nextcloud";
+      dbpass = lib.strings.fileContents <system-secrets/nextcloud/database>;
+      adminpass = lib.strings.fileContents <system-secrets/nextcloud/admin>;
+      adminuser = "admin";
+      # extraTrustedDomains = [ "toum.r" ];
+    };
+  };
+
+  services.postgresql = {
+    enable = true;
+    ensureDatabases = [ "nextcloud" ];
+    ensureUsers = [
+      {
+        name = "nextcloud";
+        ensurePermissions."DATABASE nextcloud" = "ALL PRIVILEGES";
+      }
+    ];
+  };
+
+
+  services.nginx.virtualHosts."cloud.xn--kiern-0qa.de" = {
+    enableACME = true;
+    forceSSL = true;
+  };
+
+  # Ensure that postgres is running before running the setup
+  systemd.services."nextcloud-setup" = {
+    requires = ["postgresql.service"];
+    after = ["postgresql.service"];
+  };
+}

configs/nix.nix

@@ -0,0 +1,10 @@
+{ pkgs, ... }:
+{
+  # enable `nix flake`
+  nix = {
+    package = pkgs.nix;
+    # extraOptions = ''
+    #   experimental-features = nix-command
+    # '';
+  };
+}

configs/nixpkgs-unstable.nix

@@ -1,8 +0,0 @@
-{ config, ... }:
-{
-  nixpkgs.config.packageOverrides = pkgs: {
-    unstable = import <nixos-unstable> {
-      config = config.nixpkgs.config;
-    };
-  };
-}

configs/packages/default.nix

@@ -1,107 +1,157 @@
-{ pkgs, ... }:
-{
+{ pkgs, lib, ... }:
+let
+  hc = pkgs.callPackage <stockholm/tv/5pkgs/simple/hc.nix> {};
+  inherit (import <niveum/lib>) nixpkgs-unstable;
+in {
   imports = [
     ./krebs.nix
-    ./programming.nix
     ./writing.nix
+    ./python.nix
+    ./haskell
     {
-      environment.systemPackages = with pkgs; [
-      ] ++ [ # internet
-        aria2
-        firefox
-        tor-browser-bundle-bin
-        thunderbird
-        tdesktop
-        w3m
-        wget
-        httpie
-        whois
-        ddgr
-        python3Packages.instaloader
-        mtr # my traceroute
-      ] ++ [ # media
-        ffmpeg
-        imagemagick
-        sxiv
-      ] ++ [ # archive
-        unzip
-        unrar
-        p7zip
-        zip
-      ] ++ [ # monitor
-        htop
-        iotop
-        iftop
-        lsof
-        psmisc
-      ] ++ [ # shell
-        bat
-        dos2unix
-        ncdu
-        du-dust
-        fd
-        file
-        jq # json manipulation
-        jo # json creation
-        kmein.nav # json navigation
-        xsv
-        xmlstarlet
-        manpages
-        posix_man_pages
-        moreutils
-        ranger
-        ripgrep
-        rlwrap
-        progress # display progress bars for pipes
-        up # universal plumber (piping tool)
-      ] ++ [ # hardware
-        usbutils
-        pciutils
-        lshw
-      ] ++ [ # graphical
-        arandr
-        libnotify
-        xclip
-        xorg.xkill
-      ] ++ [ # programming
-        nix-prefetch-git
-      ] ++ [ # media
-        audacity
-        calibre
-        inkscape
-        xpdf
-        pdfgrep
-        pdftk
-        spotify
-        python3Packages.spotify-cli-linux
-        youtubeDL
-      ] ++ [ # math
-        bc
-      ] ++ [ # shell
-        (pass.withExtensions (ext: [ext.pass-otp]))
-        fzf
-        gnupg
-        kmein.haskellPackages.mnemosyne
-        kmein.autorenkalender
-        kmein.bvg
-        kmein.daybook
-        kmein.depp
-        kmein.font-size
-        kmein.genius
-        kmein.instaget
-        kmein.literature-quote
-        kmein.n
-        kmein.odyssey
-        kmein.wttr
-        kmein.slide
-        memo
-        nix-git
-        par
-        qrencode
-        unstable.hugo
-        unstable.zola
-        wtf
+      environment.systemPackages = let
+        # nightly = pkgs.rustChannelOf {
+        #   date = "2019-12-27";
+        #   channel = "nightly";
+        # };
+      in with pkgs; [
+        htmlTidy
+        nodePackages.csslint
+        nodePackages.jsonlint
+        nodePackages.prettier
+        nodePackages.typescript
+        nodePackages.yarn
+        nodejs
+        nodePackages.javascript-typescript-langserver
+
+        tokei # count lines of code
+        gnumake
+        binutils # for strip, ld, ...
+        # nightly.rust
+        shellcheck
       ];
     }
   ];
+
+  environment.systemPackages = with pkgs; [
+    # INTERNET
+    aria2
+    # firefox
+    tdesktop
+    w3m
+    wget
+    httpie
+    whois
+    ddgr
+    ix
+    nur.repos.kmein.python3Packages.instaloader
+    dnsutils
+    # mtr # my traceroute
+    # FILE MANAGERS
+    ranger
+    pcmanfm
+    # MEDIA
+    ffmpeg
+    imagemagick
+    scrot
+    # ARCHIVE TOOLS
+    unzip
+    unrar
+    p7zip
+    zip
+    # MONITORS
+    htop
+    iotop # I/O load monitor
+    iftop # interface bandwidth monitor
+    lsof # list open files
+    psmisc # for killall, pstree
+    # SHELL
+    bat # better cat
+    du-dust # better du
+    fd # better find
+    file # determine file type
+    dos2unix
+    trash-cli
+    ncdu # ncurses disk usage
+    python3Packages.jsonschema # json validation
+    jq # json toolkit
+    pup # html toolkit
+    jo # json creation
+    xsv # csv toolkit
+    xmlstarlet # xml toolkit
+    manpages
+    posix_man_pages
+    # moreutils # for parallel, sponge, combine
+    tree
+    parallel # for parallel, since moreutils shadows task spooler
+    ripgrep # better grep
+    rlwrap
+    progress # display progress bars for pipes
+    up # universal plumber (piping tool)
+    # HARDWARE TOOLS
+    usbutils # for lsusb
+    pciutils # for lspci
+    lshw # for lshw
+    arandr # xrandr for noobs
+    libnotify # for notify-send
+    xclip # clipboard CLI
+    dragon-drop # drag and drop
+    xorg.xkill # kill by clicking
+    audacity
+    calibre
+    inkscape
+    nixpkgs-unstable.zoom-us # video conferencing
+    pdfgrep # search in pdf
+    pdftk # pdf toolkit
+    evince # for viewing pdf annotations
+    xournalpp # for annotating pdfs
+    hc # print files as qr codes
+    youtubeDL
+    bc # calculator
+    scripts.infschmv
+    scripts.default-gateway
+    scripts.showkeys-toggle
+    scripts.favicon
+    scripts.ipa # XSAMPA to IPA converter
+    scripts.playlist
+    scripts.devanagari
+    scripts.betacode # ancient greek betacode to unicode converter
+    nur.repos.kmein.mahlzeit
+    # nur.repos.kmein.slide
+    nur.repos.kmein.vimv
+    scripts.swallow # window swallowing
+    scripts.genius
+    scripts.instaget
+    scripts.literature-quote
+    scripts.nav # json navigation
+    scripts.n
+    scripts.notetags
+    scripts.booksplit
+    scripts.dmenurandr
+    scripts.interdimensional-cable
+    scripts.dmenubluetooth
+    scripts.manual-sort
+    scripts.much-scripts
+    scripts.dns-sledgehammer
+    ts
+    scripts.vg
+    scripts.fkill
+    scripts.wttr
+    scripts.boetlingk
+    scripts.trans
+    scripts.liddel-scott-jones
+    # kmein.slide
+    scripts.tolino-screensaver
+    nix-prefetch-git
+    scripts.nix-git
+    nixfmt
+    par
+    qrencode
+    wtf
+
+    spotify
+    spotify-tui
+    playerctl
+  ];
+
 }

configs/packages/haskell/default.nix

@@ -0,0 +1,45 @@
+{ config, pkgs, ... }: {
+  home-manager.users.me.home.file = {
+    ".ghc/ghci.conf".text = ''
+      :set editor vim
+      :def hoogle \s -> return $ ":!${pkgs.haskellPackages.hoogle}/bin/hoogle search --color -l --count=15 \"" ++ s ++ "\""
+      :def doc \s -> return $ ":!${pkgs.haskellPackages.hoogle}/bin/hoogle search --color -l --info \"" ++ s ++ "\""
+      :set prompt "\o033[1m%s\o033[1;34m λ\o033[0m "
+      :set -Wall
+      :set -XOverloadedStrings
+    '';
+    # :def unpl \x -> return $ ":!${pkgs.haskellPackages.pointful}/bin/pointful \"" ++ x ++ "\""
+      # :def pl \x -> return $ ":!${pkgs.haskellPackages.pointfree}/bin/pointfree -v \"" ++ x ++ "\""
+    ".stack/config.yaml".text = let inherit (import <niveum/lib>) kieran;
+    in builtins.toJSON {
+      templates.params = {
+        author-name = kieran.name;
+        author-email = kieran.email;
+        copyright = "Copyright: (c) 2020 ${kieran.name}";
+        github-username = kieran.github;
+      };
+    };
+  };
+
+  services.hoogle = {
+    enable = false;
+    packages = import ./packages.nix;
+    port = 8091;
+  };
+
+  environment.systemPackages = with pkgs;
+    [
+      cabal2nix
+      cabal-install
+      hlint
+      haskellPackages.ormolu
+      (haskellPackages.ghcWithHoogle (import ./packages.nix))
+    ] ++ map haskell.lib.justStaticExecutables [
+      haskellPackages.ghcid
+      haskellPackages.hasktags
+      # haskellPackages.hindent
+      # haskellPackages.pointfree
+      # haskellPackages.pointful
+      haskellPackages.hpack
+    ];
+}

configs/packages/haskell/packages.nix

@@ -1,7 +1,5 @@
 haskellPackages:
 with haskellPackages; [
-  blessings
-  scanner
   HTTP
   HUnit
   MissingH
@@ -59,13 +57,14 @@ with haskellPackages; [
   mono-traversable
   mtl
   network
-  pandoc
   parallel
   parsec
   persistent
   pipes
   pointed
+  pretty
   pretty-show
+  prettyprinter
   primitive
   process
   profunctors
@@ -92,7 +91,6 @@ with haskellPackages; [
   unix-time
   unordered-containers
   vector
-  vinyl
   void
   vty
   warp

configs/packages/krebs.nix

@@ -1,19 +1,24 @@
 { lib, pkgs, ... }:
-let krebs-packages = pkgs: {
-  dic = pkgs.callPackage <stockholm/krebs/5pkgs/simple/dic> {};
-  yt-next = pkgs.callPackage <stockholm/lass/5pkgs/yt-next> {};
-  acronym = pkgs.callPackage <stockholm/lass/5pkgs/acronym> {};
-  urban = pkgs.callPackage <stockholm/lass/5pkgs/urban> {};
-  mpv-poll = pkgs.callPackage <stockholm/lass/5pkgs/mpv-poll> {};
-  untilport = pkgs.callPackage <stockholm/krebs/5pkgs/simple/untilport> {};
-  kpaste = pkgs.callPackage <stockholm/krebs/5pkgs/simple/kpaste> {};
-  krebspaste = pkgs.callPackage <stockholm/krebs/5pkgs/simple/krebspaste> {};
-  bepasty-client-cli = pkgs.callPackage <stockholm/krebs/5pkgs/simple/bepasty-client-cli> {};
-  irc-announce = pkgs.callPackage <stockholm/krebs/5pkgs/simple/irc-announce> {};
-  git-preview = pkgs.callPackage <stockholm/krebs/5pkgs/simple/git-preview> {};
-};
+let
+  krebs-packages = pkgs: {
+    dic = pkgs.callPackage <stockholm/krebs/5pkgs/simple/dic> { };
+    yt-next = pkgs.callPackage <stockholm/lass/5pkgs/yt-next> { };
+    acronym = pkgs.callPackage <stockholm/lass/5pkgs/acronym> { };
+    urban = pkgs.callPackage <stockholm/lass/5pkgs/urban> { };
+    mpv-poll = pkgs.callPackage <stockholm/lass/5pkgs/mpv-poll> { };
+    untilport = pkgs.callPackage <stockholm/krebs/5pkgs/simple/untilport> { };
+    kpaste = pkgs.callPackage <stockholm/krebs/5pkgs/simple/kpaste> { };
+    krebspaste = pkgs.callPackage <stockholm/krebs/5pkgs/simple/krebspaste> { };
+    bepasty-client-cli =
+      pkgs.callPackage <stockholm/krebs/5pkgs/simple/bepasty-client-cli> { };
+    irc-announce =
+      pkgs.callPackage <stockholm/krebs/5pkgs/simple/irc-announce> { };
+    git-preview =
+      pkgs.callPackage <stockholm/krebs/5pkgs/simple/git-preview> { };
+  };
 in {
   nixpkgs.config.packageOverrides = krebs-packages;
 
-  environment.systemPackages = map (name: pkgs.${name}) (lib.attrNames (krebs-packages pkgs));
+  environment.systemPackages =
+    map (name: pkgs.${name}) (lib.attrNames (krebs-packages pkgs));
 }

configs/packages/programming.nix

@@ -1,28 +0,0 @@
-{ pkgs, ... }:
-{
-  imports = [
-    {
-      environment.systemPackages = with pkgs; [
-        htmlTidy
-        nodePackages_10_x.csslint
-        nodePackages_10_x.jsonlint
-        nodePackages_10_x.prettier
-        nodePackages_10_x.typescript
-        nodePackages_10_x.yarn
-        nodejs-10_x
-      ];
-    }
-  ];
-
-  environment.systemPackages = with pkgs; [
-    tokei # count lines of code
-    gnumake
-    gcc
-    binutils # strip, ld, ...
-    iolanguage
-    ruby
-    rubocop
-    rustup
-    shellcheck
-  ];
-}

configs/packages/python.nix

@@ -0,0 +1,23 @@
+{ pkgs, ... }: {
+  environment.systemPackages = [
+    (pkgs.python3.withPackages (py: [
+      py.black
+      py.python-language-server
+      py.pyls-mypy
+      py.pyls-black
+      py.pyls-isort
+      py.flake8
+      py.flask
+      py.pygments
+      py.docopt
+      py.schema
+      py.ansicolors
+      py.virtualenv
+    ]))
+  ];
+
+  home-manager.users.me.xdg.configFile."pycodestyle".text = ''
+    [pycodestyle]
+    max-line-length = 110
+  '';
+}

configs/packages/writing.nix

@@ -1,17 +1,77 @@
-{ pkgs, ... }:
-{
-  environment.systemPackages = with pkgs; [
-    (texlive.combine {
-      inherit (pkgs.texlive) scheme-full texdoc latex2e-help-texinfo;
-      pkgFilter = pkg: pkg.tlType == "run" || pkg.tlType == "bin" || pkg.pname == "latex2e-help-texinfo";
+{ pkgs, lib, config, ... }:
+let
+  inherit (import <niveum/lib>) nixpkgs-unstable;
+
+  zoteroStyle = { name, sha256 }: {
+    name = "${name}.csl";
+    path = pkgs.fetchurl {
+      url = "https://www.zotero.org/styles/${name}";
+      inherit sha256;
+    };
+  };
+
+  cslDirectory = pkgs.linkFarm "citation-styles" [
+    (zoteroStyle {
+      name = "chicago-author-date-de";
+      sha256 = "0fz0xn46rkciblr34a7x2v60j0lbq9l3fmzi43iphph27m0czn6s";
     })
-    # haskellPackages.patat
-    (aspellWithDicts (dict: [dict.de dict.en dict.la dict.en-computers dict.ru]))
+    (zoteroStyle {
+      name = "din-1505-2";
+      sha256 = "1pvy1b7qm13mnph7z365rrz1j082bl2y8ih73rhzd0zd6dz1jyjq";
+    })
+    (zoteroStyle {
+      name = "apa";
+      sha256 = "1878vxp0y0h05yzaghnd51n981623mxskw3lsdyzmffqhihvv111";
+    })
+  ];
+
+  makeStardictDataDir = dicts:
+    pkgs.linkFarm "dictionaries" (map ({ name, path }: {
+      name = "dic/${name}";
+      inherit path;
+    }) dicts);
+in {
+  environment.variables.STARDICT_DATA_DIR = toString (makeStardictDataDir [
+    {
+      name = "gr-de";
+      path = pkgs.fetchurl {
+        url = "http://tovotu.de/data/stardict/pape_gr-de.zip";
+        sha256 = "1d705y47b40vp0mg79vbwasw4y0i8fmnlwvf4x4ri0dkfqng9sky";
+      };
+    }
+    {
+      name = "la-de";
+      path = pkgs.fetchurl {
+        url = "http://tovotu.de/data/stardict/georges_lat-de.zip";
+        sha256 = "12n26nzwg28wn4zwv45mv0wkgy1jh1d8p0k6haamz9601cqq7hkj";
+      };
+    }
+    {
+      name = "de-la";
+      path = pkgs.fetchurl {
+        url = "http://tovotu.de/data/stardict/georges_de-lat.zip";
+        sha256 = "0inm6xn1lcnb851cj329n0v2vbfc1z1bxwhgsd8fnm0zxy3f3ifq";
+      };
+    }
+  ]);
+
+  home-manager.users.me.home.file = {
+    ".csl".source = cslDirectory;
+    ".local/share/pandoc/csl".source = cslDirectory; # as of pandoc 2.11, it includes citeproc
+  };
+
+  environment.systemPackages = with pkgs; [
+    texlive.combined.scheme-full
+    (aspellWithDicts (dict: [ dict.de dict.en dict.en-computers ]))
     haskellPackages.pandoc-citeproc
+    nur.repos.kmein.text2pdf
     libreoffice
-    pandoc
-    proselint
-    unstable.asciidoctor
+    # gnumeric
+    dia
+    nixpkgs-unstable.pandoc
+    # proselint
+    asciidoctor
     wordnet
+    sdcv # stardict cli
   ];
 }

configs/power-action.nix

@@ -0,0 +1,24 @@
+{ pkgs, config, ... }:
+let
+  suspend = pkgs.writers.writeDash "suspend" "${pkgs.systemd}/bin/systemctl suspend";
+in
+{
+  imports = [ <stockholm/krebs/3modules/power-action.nix> ];
+
+  krebs.power-action = {
+    enable = true;
+    plans.suspend = {
+      upperLimit = 7;
+      lowerLimit = 0;
+      charging = false;
+      action = pkgs.writeDash "suspend-wrapper" ''
+        /run/wrappers/bin/sudo ${suspend}
+      '';
+    };
+    user = config.users.users.me.name;
+  };
+
+  security.sudo.extraConfig = ''
+    ${config.krebs.power-action.user} ALL= (root) NOPASSWD: ${suspend}
+  '';
+}

configs/printing.nix

@@ -1,9 +1,35 @@
 { pkgs, ... }:
-{
+let
+  inherit (import <niveum/lib>) localAddresses;
+  hp-driver = pkgs.hplipWithPlugin;
+in {
   services.printing = {
     enable = true;
-    drivers = [ pkgs.hplipWithPlugin ];
+    drivers = [ hp-driver ];
   };
 
-  networking.hosts."192.168.178.27" = [ "officejet" ];
+  hardware.sane = {
+    enable = true;
+    extraBackends = [ hp-driver ];
+  };
+
+  users.users.me.extraGroups = [ "scanner" ];
+
+  hardware.printers.ensurePrinters = [{
+    name = "OfficeJet";
+    location = "Zimmer";
+    deviceUri = "https://${localAddresses.officejet}";
+    model = "drv:///hp/hpcups.drv/hp-officejet_4650_series.ppd";
+    ppdOptions = {
+      Duplex = "DuplexNoTumble"; # DuplexNoTumble DuplexTumble None
+      PageSize = "A4"; # A4 A4.FB A4.Duplex
+      MediaType = "Plain";
+      OutputMode = "Normal";
+      ColorModel = "KGray"; # RGB CMYGray KGray
+    };
+  }];
 }
+
+/* HP/hp-officejet_4650_series.ppd.gz
+   drv:///hp/hpcups.drv/hp-officejet_4650_series.ppd
+*/

configs/python.nix

@@ -1,28 +0,0 @@
-{ pkgs, ... }:
-{
-  environment.systemPackages = [
-    (pkgs.python3.withPackages
-      (py: [
-        py.black
-        py.python-language-server
-        py.pyls-mypy
-        py.pyls-black
-        py.pyls-isort
-        py.flake8
-        py.flask
-        py.pygments
-        py.docopt
-        py.schema
-        py.ansicolors
-        py.virtualenv
-        py.spacy
-        py.spacy_models
-      ])
-    )
-  ];
-
-  home-manager.users.me.xdg.configFile."pycodestyle".text = ''
-    [pycodestyle]
-    max-line-length = 110
-  '';
-}

configs/radio.nix

@@ -0,0 +1,295 @@
+{ lib, pkgs, config, ... }:
+let
+  inherit (import <niveum/lib>) nixpkgs-unstable;
+  radioStore = "/var/lib/radio";
+  htgenPort = 8080;
+  meddl = { streamPort = 8000; mpdPort = 6600; };
+  lyrikline = { streamPort = 8001; mpdPort = 6601; };
+  lyrik = { streamPort = 8002; mpdPort = 6602; };
+  mpd-add-with-tags = pkgs.writers.writeHaskell "mpd-add-with-tags" {
+    libraries = with pkgs.haskellPackages; [ optparse-generic libmpd ];
+  } ''
+    {-# LANGUAGE DeriveGeneric, OverloadedStrings #-}
+    import Control.Monad (void)
+    import Data.String
+    import Network.MPD
+    import Options.Generic
+
+    data Options = Options { url :: String, artist :: Maybe String, title :: Maybe String }
+      deriving (Generic)
+
+    instance ParseRecord Options
+
+    main :: IO ()
+    main = do
+      options <- getRecord "Add to MPD with tags"
+      void $ withMPD $ do
+        songId <- addId (fromString $ url options) Nothing
+        maybe (pure ()) (addTagId songId Artist . fromString) $ artist options
+        maybe (pure ()) (addTagId songId Title . fromString) $ title options
+  '';
+
+  mpc-lyrikline = pkgs.writers.writeDashBin "mpc-lyrikline" ''MPD_PORT=${toString lyrikline.mpdPort} ${pkgs.mpc_cli}/bin/mpc "$@"'';
+  mpc-meddl = pkgs.writers.writeDashBin "mpc-meddl" ''MPD_PORT=${toString meddl.mpdPort} ${pkgs.mpc_cli}/bin/mpc "$@"'';
+  mpc-lyrik = pkgs.writers.writeDashBin "mpc-lyrik" ''MPD_PORT=${toString lyrik.mpdPort} ${pkgs.mpc_cli}/bin/mpc "$@"'';
+in
+{
+  imports = [ <stockholm/krebs/3modules/htgen.nix> ];
+  nixpkgs.overlays = [
+    (self: super: { htgen = super.callPackage <stockholm/krebs/5pkgs/simple/htgen> {}; })
+  ];
+
+  systemd.tmpfiles.rules = [
+    "d '${radioStore}' 0755 ${config.users.extraUsers.radio.name} - 1d -"
+  ];
+
+  users.extraUsers.radio.isSystemUser = true;
+
+  containers.lyrik = {
+    autoStart = true;
+    config = {config, pkgs, ...}: {
+      services.mpd = {
+        enable = true;
+        network.port = lyrik.mpdPort;
+        extraConfig = ''
+          log_level "default"
+
+          audio_output {
+            name "Lyrik-Radio"
+            type "httpd"
+            encoder "vorbis"
+            port "${toString lyrik.streamPort}"
+            bitrate "128"
+            format "44100:16:2"
+            always_on "yes"
+            tags "yes"
+          }
+        '';
+      };
+    };
+  };
+
+  krebs.htgen.radio = {
+    port = htgenPort;
+    user.name = "radio";
+    script = ''. ${pkgs.writers.writeDash "meinskript" ''
+      case "$Method $Request_URI" in
+        "GET /lyrik/status")
+          printf 'HTTP/1.1 200 OK\r\n'
+          printf 'Content-Type: text/html; charset=UTF-8\r\n'
+          printf 'Connection: close\r\n'
+          printf '\r\n'
+
+          video_id="$(
+            MPD_PORT=${toString lyrik.mpdPort} ${pkgs.mpc_cli}/bin/mpc status -f %file% \
+              | head -n1 \
+              | grep -o 'id=[^&]*' \
+              | sed 's/^id=//g'
+          )"
+
+          ${pkgs.youtube-dl}/bin/youtube-dl -j "https://www.youtube.com/watch?v=$video_id" \
+            | ${pkgs.jq}/bin/jq -r '"% [\(.title)](\(.webpage_url))\n\n\(.description)"' \
+            | sed 's/$/  /g' \
+            | ${nixpkgs-unstable.pandoc}/bin/pandoc -s
+
+          exit
+        ;;
+        "GET /lyrikline/status")
+          printf 'HTTP/1.1 200 OK\r\n'
+          printf 'Content-Type: text/html; charset=UTF-8\r\n'
+          printf 'Connection: close\r\n'
+          printf '\r\n'
+
+          hash="$(
+            MPD_PORT=${toString lyrikline.mpdPort} ${pkgs.mpc_cli}/bin/mpc status -f '%file%' \
+              | head -n 1 \
+              | md5sum \
+              | cut -d' ' -f 1
+          )"
+          url="$(cat ${radioStore}/$hash)"
+
+          echo "<html><body style='margin:0'><iframe style='width:100%;height:100%;border:0' src="$url"></iframe></body></html>"
+          exit
+        ;;
+        "POST /meddl/skip")
+          printf 'HTTP/1.1 200 OK\r\n'
+          printf 'Content-Type: text/html; charset=UTF-8\r\n'
+          printf 'Connection: close\r\n'
+          printf '\r\n'
+          ${mpc-meddl}/bin/mpc-meddl next
+          exit
+        ;;
+        "GET /meddl/status")
+          printf 'HTTP/1.1 200 OK\r\n'
+          printf 'Content-Type: text/html; charset=UTF-8\r\n'
+          printf 'Connection: close\r\n'
+          printf '\r\n'
+
+          hash="$(
+            MPD_PORT=${toString meddl.mpdPort} ${pkgs.mpc_cli}/bin/mpc status -f '%file%' \
+              | head -n 1 \
+              | md5sum \
+              | cut -d' ' -f 1
+          )"
+          url="$(cat ${radioStore}/$hash)"
+
+          echo "<html><body style='margin:0'><iframe style='width:100%;height:100%;border:0' src="$url"></iframe></body></html>"
+          exit
+        ;;
+      esac
+    ''}'';
+  };
+
+  containers.meddl = {
+    autoStart = true;
+    config = {config, pkgs, ...}: {
+      services.mpd = {
+        enable = true;
+        network.port = meddl.mpdPort;
+        extraConfig = ''
+          log_level "default"
+          volume_normalization "yes"
+
+          audio_output {
+            name "DrachenLord Radio"
+            type "httpd"
+            encoder "vorbis"
+            port "${toString meddl.streamPort}"
+            bitrate "128"
+            format "44100:16:2"
+            always_on "yes"
+            tags "yes"
+          }
+        '';
+      };
+
+    };
+  };
+
+  containers.lyrikline = {
+    autoStart = true;
+    config = {config, pkgs, ...}: {
+      services.mpd = {
+        enable = true;
+        network.port = lyrikline.mpdPort;
+        extraConfig = ''
+          log_level "default"
+
+          audio_output {
+            name "lyrikline.org Radio"
+            type "httpd"
+            encoder "vorbis"
+            port "${toString lyrikline.streamPort}"
+            bitrate "128"
+            format "44100:16:2"
+            always_on "yes"
+            tags "yes"
+          }
+        '';
+      };
+    };
+  };
+
+  systemd.services.lyrikline = {
+    after = [ "container@lyrikline.service" ];
+    wantedBy = [ "container@lyrikline.service" ];
+    startAt = "*:00/5";
+    serviceConfig.User = config.users.extraUsers.radio.name;
+    preStart = "${mpc-lyrikline}/bin/mpc-lyrikline crop || :";
+    script = ''
+      set -efu
+
+      lyrikline=https://www.lyrikline.org
+      for _ in $(seq 1 10); do
+        random_route="$(${pkgs.curl}/bin/curl -sSL "$lyrikline/index.php/tools/getrandompoem" --data-raw 'lang=de' --compressed | ${pkgs.jq}/bin/jq -r .link)"
+        poem_url="$lyrikline$random_route"
+
+        poem_file="$(
+          ${pkgs.curl}/bin/curl -sSL "$poem_url" \
+            | grep -o 'https://.*\.mp3' \
+            | head -n1
+        )"
+
+        hash="$(echo "$poem_file" | md5sum | cut -d' ' -f 1)"
+        echo "$poem_file ($hash) -> $poem_url"
+        echo "$poem_url" > "${radioStore}/$hash"
+
+        ${mpc-lyrikline}/bin/mpc-lyrikline add "$poem_file"
+      done
+
+      ${mpc-lyrikline}/bin/mpc-lyrikline play
+    '';
+  };
+
+  systemd.services.lyrik = {
+    after = [ "container@lyrik.service" ];
+    wantedBy = [ "container@lyrik.service" ];
+    preStart = "${mpc-lyrik}/bin/mpc-lyrik crop || :";
+    restartIfChanged = true;
+    serviceConfig.User = config.users.extraUsers.radio.name;
+    script =
+      let
+        videoIds = import <niveum/lib/hot-rotation/lyrik.nix>;
+        streams = lib.concatMapStringsSep "\n" (id: "https://au.ytprivate.com/latest_version?id=${id}&itag=251") videoIds;
+        streamsFile = pkgs.writeText "hotrot" streams;
+      in ''
+        set -efu
+        ${mpc-lyrik}/bin/mpc-lyrik add < ${toString streamsFile}
+
+        ${mpc-lyrik}/bin/mpc-lyrik crossfade 5
+        ${mpc-lyrik}/bin/mpc-lyrik random on
+        ${mpc-lyrik}/bin/mpc-lyrik repeat on
+        ${mpc-lyrik}/bin/mpc-lyrik play
+      '';
+  };
+
+
+  systemd.services.meddl = {
+    after = [ "container@meddl.service" ];
+    wantedBy = [ "container@meddl.service" ];
+    startAt = "*:00/10";
+    serviceConfig.User = config.users.extraUsers.radio.name;
+    preStart = "${mpc-meddl}/bin/mpc-meddl crop || :";
+    script = ''
+      set -efu
+      host=http://antenne-asb.ga
+
+      prepend_host() {
+        sed "s#^#$host/#"
+      }
+
+      ${pkgs.curl}/bin/curl -sSL "$host" \
+        | ${pkgs.pup}/bin/pup 'li a attr{href}' \
+        | prepend_host \
+        | while read -r song; do
+          song_url="$(${pkgs.curl}/bin/curl -sSL "$song" \
+            | ${pkgs.pup}/bin/pup 'audio source attr{src}' \
+            | prepend_host
+          )"
+
+          hash="$(echo "$song_url" | md5sum | cut -d' ' -f 1)"
+          echo "$song_url ($hash) -> $song"
+          echo "$song" > "${radioStore}/$hash"
+
+          ${mpc-meddl}/bin/mpc-meddl add "$song_url"
+        done
+
+      ${mpc-meddl}/bin/mpc-meddl play
+    '';
+  };
+
+  environment.systemPackages = [ mpc-lyrikline mpc-lyrik mpc-meddl ];
+
+  services.nginx.virtualHosts."radio.xn--kiern-0qa.de".locations = {
+    "= /meddl/status".proxyPass = "http://127.0.0.1:${toString htgenPort}";
+    "= /meddl/listen.ogg".proxyPass = "http://127.0.0.1:${toString meddl.streamPort}";
+    "= /meddl/skip".proxyPass = "http://127.0.0.1:${toString htgenPort}";
+    "= /lyrikline/status".proxyPass = "http://127.0.0.1:${toString htgenPort}";
+    "= /lyrikline/listen.ogg".proxyPass = "http://127.0.0.1:${toString lyrikline.streamPort}";
+    "= /lyrik/status".proxyPass = "http://127.0.0.1:${toString htgenPort}";
+    "= /lyrik/listen.ogg".proxyPass = "http://127.0.0.1:${toString lyrik.streamPort}";
+    "= /lyrik.ogg".return = "301 http://radio.xn--kiern-0qa.de/lyrik/listen.ogg";
+    "= /meddl.ogg".return = "301 http://radio.xn--kiern-0qa.de/meddl/listen.ogg";
+    "= /lyrikline.ogg".return = "301 http://radio.xn--kiern-0qa.de/lyrikline/listen.ogg";
+  };
+}

configs/random-background.nix

@@ -1,9 +0,0 @@
-{
-  home-manager.users.me = {
-    services.random-background = {
-      enable = true;
-      imageDirectory = toString <art>;
-      interval = "2h";
-    };
-  };
-}

configs/redshift.nix

@@ -1,7 +1 @@
-{
-  services.redshift = {
-    enable = true;
-    latitude = "52";
-    longitude = "13";
-  };
-}
+{ services.redshift.enable = false; }

configs/retiolum.nix

@@ -1,37 +1,7 @@
-{ config, pkgs, ... }:
-{
-  imports = [ <modules/retiolum.nix> ];
+{ config, pkgs, ... }: {
+  imports = [
+    <niveum/modules/retiolum.nix>
+  ];
 
-  fileSystems."/mnt/lassulusflix" = {
-    device = "prism.r:/export";
-    fsType = "nfs";
-  };
-
-  networking.hosts = {
-    "42:0:ca48:f98f:63d7:31ce:922b:245d" = [ "go" ];
-  };
-
-  networking.retiolum = {
-    scardanelli = {
-      ipv4 = "10.243.2.2";
-      ipv6 = "42:0:3c46:4007:5bce:f1bc:606b:2b18";
-    };
-    homeros = {
-      ipv4 = "10.243.2.1";
-      ipv6 = "42:0:3c46:53e:e63d:e62a:56ea:c705";
-    };
-    catullus = {
-      ipv4 = "10.243.2.3";
-      ipv6 = "42:0:3c46:3ec0:7aad:d1d5:9842:da4c";
-    };
-    wilde = {
-      ipv4 = "10.243.2.4";
-      ipv6 = "42:0:3c46:907c:1fb8:b74f:c59b:1ee3";
-    };
-  }.${config.networking.hostName};
-
-  environment.etc."tinc/retiolum/rsa_key.priv" = {
-    text = builtins.readFile <secrets/retiolum.key>;
-    mode = "400";
-  };
+  networking.hosts = { "42:0:ca48:f98f:63d7:31ce:922b:245d" = [ "go" ]; };
 }

configs/rofi.nix

@@ -1,13 +1,14 @@
 { config, ... }:
-with config.niveum; {
+let
+  inherit (import <niveum/lib>) colours;
+in{
   home-manager.users.me.programs.rofi = {
     enable = true;
     separator = "solid";
     scrollbar = false;
-    terminal = applications.terminal;
     borderWidth = 0;
     lines = 5;
-    font = "${fonts.terminal.name} ${toString (fonts.terminal.size + 1)}";
+    font = "Monospace 10";
     colors = rec {
       window = rec {
         background = colours.foreground;
@@ -19,19 +20,28 @@ with config.niveum; {
           background = window.background;
           backgroundAlt = window.background;
           foreground = colours.background;
-          highlight = { foreground = colours.cyan.dark; inherit (window) background; };
+          highlight = {
+            foreground = colours.cyan.dark;
+            inherit (window) background;
+          };
         };
         active = {
           background = window.background;
           backgroundAlt = window.background;
           foreground = colours.yellow.dark;
-          highlight = { foreground = colours.green.dark; inherit (window) background; };
+          highlight = {
+            foreground = colours.green.dark;
+            inherit (window) background;
+          };
         };
         urgent = {
           background = window.background;
           backgroundAlt = window.background;
           foreground = colours.red.dark;
-          highlight = { foreground = colours.magenta.dark; inherit (window) background; };
+          highlight = {
+            foreground = colours.magenta.dark;
+            inherit (window) background;
+          };
         };
       };
     };

configs/save-space.nix

@@ -3,6 +3,7 @@
   documentation.enable = false;
   documentation.info.enable = false;
   documentation.man.enable = false;
+  documentation.man.generateCaches = false;
   fonts.fontconfig.enable = false;
   nix.gc.automatic = true;
   nix.optimise.automatic = true;

configs/sncli.nix

@@ -1,13 +0,0 @@
-{ pkgs, ... }:
-let secrets = import <dot/secrets.nix>;
-in {
-  environment.systemPackages = [ pkgs.python3Packages.sncli ];
-
-  home-manager.users.me = {
-    home.file.".snclirc".text = ''
-      [sncli]
-      cfg_sn_username = ${secrets.simplenote.username}
-      cfg_sn_password = ${secrets.simplenote.password}
-    '';
-  };
-}

configs/spacetime.nix

@@ -0,0 +1,7 @@
+{
+  time.timeZone = "Europe/Berlin";
+  location = {
+    latitude = 52.517;
+    longitude = 13.3872;
+  };
+}

configs/spotifyd.nix

@@ -0,0 +1,14 @@
+{ lib, ... }:
+{
+  services.spotifyd = {
+    enable = true;
+    config = lib.generators.toINI { } {
+      global = {
+        username = lib.strings.fileContents <secrets/spotify/username>;
+        password = lib.strings.fileContents <secrets/spotify/password>;
+      };
+    };
+  };
+
+  systemd.services.spotifyd.serviceConfig.Restart = "always";
+}

configs/ssh.nix

@@ -1,52 +1,38 @@
-{ pkgs, config, ... }:
+{ pkgs, config, lib, ... }:
 let
-  sshPort = 22022;
-  sshKey = {
-    homeros = "ssh-rsa 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 kieran.meinhardt@gmail.com";
-    scardanelli = "ssh-rsa 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 kieran.meinhardt@gmail.com";
-    wilde = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDyTnGhFq0Q+vghNhrqNrAyY+CsN7nNz8bPfiwIwNpjk kfm@wilde";
-  };
+  inherit (import <niveum/lib>) sshPort kieran;
 in {
   services.xserver.displayManager.sessionCommands = "${pkgs.openssh}/bin/ssh-add";
 
   programs.ssh.startAgent = true;
 
-  services.openssh = {
-    ports = [ sshPort ];
-    enable = true;
-    passwordAuthentication = false;
-  };
-
-  users.motd = "Welcome to ${config.networking.hostName}!";
-
-  users.users.root.openssh.authorizedKeys.keys = [
-    sshKey.homeros
-    sshKey.scardanelli
-    sshKey.wilde
-  ];
-
-  users.users.me.openssh.authorizedKeys.keys = [
-    sshKey.homeros
-    sshKey.scardanelli
-    sshKey.wilde
-  ];
+  users.users.me.openssh.authorizedKeys.keys = kieran.sshKeys pkgs;
 
   home-manager.users.me.programs.ssh = {
     enable = true;
     matchBlocks = {
-      scardanelli = {
-        hostname = "scardanelli.r";
+      "github.com" = {
+        hostname = "ssh.github.com";
+        port = 443;
+      };
+      zaatar = {
+        hostname = "zaatar.r";
+        user = "root";
+        port = sshPort;
+      };
+      makanek = {
+        hostname = "makanek.r";
+        user = "root";
+        port = sshPort;
+      };
+      manakish = {
+        hostname = "manakish.r";
         user = "kfm";
         port = sshPort;
       };
-      homeros = {
-        hostname = "homeros.r";
-        user = "kfm";
-        port = sshPort;
-      };
-      catullus = {
-        hostname = "catullus.r";
-        user = "kfm";
+      toum = {
+        hostname = "toum.r";
+        user = "root";
         port = sshPort;
       };
       wilde = {
@@ -54,17 +40,6 @@ in {
         user = "kfm";
         port = sshPort;
       };
-      menstruation-logs = {
-        user = "root";
-        hostname = "v22017123717457389.megasrv.de";
-        port = 49123;
-      };
-      irc = {
-        user = "kmein";
-        hostname = "prism.r";
-        extraOptions.RemoteCommand = "tmux a";
-      };
-      "gitlab.peixdev.net".port = 999;
     };
   };
 }

configs/sshd.nix

@@ -0,0 +1,16 @@
+{ config, lib, pkgs, ... }:
+let
+  inherit (import <niveum/lib>) sshPort kieran;
+in
+{
+  users.motd = "Welcome to ${config.networking.hostName}!";
+
+  services.openssh = {
+    enable = true;
+    ports = [ sshPort ];
+    passwordAuthentication = false;
+    forwardX11 = true;
+  };
+
+  users.users.root.openssh.authorizedKeys.keys = kieran.sshKeys pkgs;
+}

configs/sway.nix

@@ -1,3 +0,0 @@
-{
-  programs.sway.enable = true;
-}

configs/sxiv.nix

@@ -0,0 +1,64 @@
+{ pkgs, lib, ... }:
+let
+  important-directories = pkgs.writeText "directories" ''
+    h	~/
+    d	~/cloud/Dropbox/
+    g	~/cloud/gdrive/
+    s	~/cloud/Seafile/
+    kk	~/cloud/keybase/private/kmein/
+    kp	~/cloud/keybase/public/kmein/
+    t	/tmp
+    D	~/Downloads
+    cf	''${XDG_CONFIG_HOME:-$HOME/.config}
+  '';
+in {
+  environment.systemPackages = [ pkgs.sxiv ];
+
+  # TODO fix
+  home-manager.users.me.xdg.configFile."sxiv/exec/key-handler".source =
+    pkgs.writers.writeDash "key-handler" ''
+      PATH=$PATH:${
+        lib.makeBinPath [
+          pkgs.gnused
+          pkgs.gawk
+          pkgs.dmenu
+          pkgs.coreutils
+          pkgs.libnotify
+          pkgs.imagemagick
+          pkgs.xclip
+        ]
+      }
+
+      echo >&2 key "$1" pressed
+      while read file; do
+          case "$1" in
+          "c")
+            [ -z "$destdir" ] && destdir="$(sed "s/\s.*#.*$//;/^\s*$/d" ${important-directories} | awk '{print $2}' | dmenu -l 20 -i -p "Copy file(s) to where?" | sed "s|~|$HOME|g")"
+            [ -z "$destdir" ] && exit
+            [ ! -d "$destdir" ] && notify-send "$destdir is not a directory, cancelled." && exit
+            cp "$file" "$destdir" && notify-send -i "$(readlink -f "$file")" "$file copied to $destdir." &
+            ;;
+          "m")
+            [ -z "$destdir" ] && destdir="$(sed "s/\s.*#.*$//;/^\s*$/d" ${important-directories} | awk '{print $2}' | dmenu -l 20 -i -p "Move file(s) to where?" | sed "s|~|$HOME|g")"
+            [ -z "$destdir" ] && exit
+            [ ! -d "$destdir" ] && notify-send "$destdir is not a directory, cancelled." && exit
+            mv "$file" "$destdir" && notify-send -i "$(readlink -f "$file")" "$file moved to $destdir." &
+            ;;
+          "r")
+            convert -rotate 90 "$file" "$file" ;;
+          "R")
+            convert -rotate -90 "$file" "$file" ;;
+          "f")
+            convert -flop "$file" "$file" ;;
+          "y")
+            echo -n "$file" | xclip -selection clipboard &&
+            notify-send "$file copied to clipboard" & ;;
+          "Y")
+            readlink -f "$file" | xclip -selection clipboard &&
+              notify-send "$(readlink -f "$file") copied to clipboard" & ;;
+          "d")
+            [ "$(printf "No\\nYes" | dmenu -i -p "Really delete $file?")" = "Yes" ] && rm "$file" && notify-send "$file deleted." ;;
+          esac
+        done
+    '';
+}

configs/telegram-bots/autorenkalender.nix

@@ -0,0 +1,20 @@
+{ pkgs, lib, ... }:
+let
+  autorenkalender-package = pkgs.fetchFromGitHub {
+    owner = "kmein";
+    repo = "autorenkalender";
+    rev = "cf49a7b057301332d980eb47042a626add93db66";
+    sha256 = "1pa7sjg33vdnjianrqldv445jdzzv3mn231ljk1j58hs0cd505gs";
+  };
+  autorenkalender =
+    pkgs.python3Packages.callPackage autorenkalender-package { };
+in {
+  niveum.telegramBots.autorenkalender = {
+    enable = true;
+    time = "07:00";
+    token = lib.strings.fileContents <system-secrets/telegram/kmein.token>;
+    chatIds = [ "@autorenkalender" ];
+    parseMode = "Markdown";
+    command = "${autorenkalender}/bin/autorenkalender";
+  };
+}

configs/telegram-bots/default.nix

@@ -0,0 +1,60 @@
+{ config, pkgs, lib, ... }:
+let
+  telebots = let
+    telebots-package = pkgs.fetchFromGitHub {
+      owner = "kmein";
+      repo = "telebots";
+      rev = "b4276155114ee96cd3f320e361e52952ea700db6";
+      sha256 = "08rp1pcisk4zzhxdlgrlhxa0sbza5qhxa70rjycg4r7fmixkkbz2";
+    };
+  in {
+    reverse =
+      pkgs.python3Packages.callPackage "${telebots-package}/telegram-reverse"
+      { };
+    odyssey =
+      pkgs.python3Packages.callPackage "${telebots-package}/telegram-odyssey"
+      { };
+    betacode =
+      pkgs.python3Packages.callPackage "${telebots-package}/telegram-betacode"
+      { };
+  };
+in {
+  imports = [
+    ./literature-quote.nix
+    ./autorenkalender.nix
+    ./proverb.nix
+    ./nachtischsatan.nix
+    <niveum/modules/telegram-bot.nix>
+  ];
+
+  systemd.services.telegram-odyssey = {
+    wantedBy = [ "multi-user.target" ];
+    description = "Telegram bot reciting the Odyssey to you";
+    environment.TELEGRAM_ODYSSEY_TOKEN =
+      lib.strings.fileContents <system-secrets/telegram/odyssey.token>;
+    enable = true;
+    script = "${telebots.odyssey}/bin/telegram-odyssey";
+    serviceConfig.Restart = "always";
+  };
+
+  systemd.services.telegram-reverse = {
+    wantedBy = [ "multi-user.target" ];
+    description = "Telegram bot for reversing things";
+    environment.TELEGRAM_REVERSE_TOKEN =
+      lib.strings.fileContents <system-secrets/telegram/reverse.token>;
+    enable = true;
+    script = "${telebots.reverse}/bin/telegram-reverse";
+    serviceConfig.Restart = "always";
+  };
+
+  systemd.services.telegram-betacode = {
+    wantedBy = [ "multi-user.target" ];
+    description =
+      "Telegram bot for converting Ancient Greek betacode into unicode";
+    environment.TELEGRAM_BETACODE_TOKEN =
+      lib.strings.fileContents <system-secrets/telegram/betacode.token>;
+    enable = true;
+    script = "${telebots.betacode}/bin/telegram-betacode";
+    serviceConfig.Restart = "always";
+  };
+}