blake quote

README.md

@@ -1,5 +1,7 @@
 # niveum
 
+> I must Create a System, or be enslav'd by another Man's. —William Blake
+
 > [nĭvĕus](https://logeion.uchicago.edu/niveus), a, um, adj. [nix], _of_ or _from snow, snowy, snow-_ (poet.)
 >
 > 1. Lit.: aggeribus niveis informis, Verg. G. 3, 354: aqua, _cooled with snow_, Mart. 12, 17, 6; cf. id. 14, 104 and 117: mons, _covered with snow_, Cat. 64, 240.—

configs/browser.nix

@@ -82,5 +82,9 @@
     };
   };
 
+  home-manager.users.me = {
+    stylix.targets.firefox.profileNames = ["default"];
+  };
+
   environment.variables.BROWSER = "firefox";
 }

configs/i3.nix

@@ -113,6 +113,7 @@ in {
     '';
   };
 
+
   home-manager.users.me = let
     modifier = "Mod4";
     infoWorkspace = "ℹ";
@@ -269,32 +270,7 @@ in {
         # XF86Launch1 (thinkvantage)
       };
   in {
-    wayland.windowManager.sway = {
-      enable = true;
-      config = {
-        menu = "rofi -modi run,ssh,window -show run";
-        inherit modifier modes gaps bars floating window colors keybindings;
-        input = {
-          "*" = {
-            xkb_layout = "de";
-            xkb_variant = "T3";
-          };
-        };
-        terminal = (defaultApplications pkgs).terminal;
-        up = "k";
-        down = "j";
-        left = "h";
-        right = "l";
-        seat = {
-          "*" = {
-            hide_cursor = "when-typing enable";
-          };
-        };
-        startup = [
-          {command = "echo hello";}
-        ];
-      };
-    };
+    stylix.targets.i3.enable = true;
 
     xsession.windowManager.i3 = {
       enable = true;
@@ -311,19 +287,9 @@ in {
         assign [class="dashboard"] ${infoWorkspace}
         exec ${dashboard}/bin/dashboard
       '';
-      config = lib.mkMerge [
-        {
-          inherit modifier gaps modes bars floating window colors keybindings;
-        }
-        {
-          keybindings = let
-            new-workspace = pkgs.writers.writeDash "new-workspace" ''
-              i3-msg workspace $(($(i3-msg -t get_workspaces | tr , '\n' | grep '"num":' | cut -d : -f 2 | sort -rn | head -1) + 1))
-            '';
-            move-to-new-workspace = pkgs.writers.writeDash "new-workspace" ''
-              i3-msg move container to workspace $(($(i3-msg -t get_workspaces | tr , '\n' | grep '"num":' | cut -d : -f 2 | sort -rn | head -1) + 1))
-            '';
-          in {
+      config = {
+          inherit modifier gaps modes bars floating window colors;
+          keybindings = keybindings // {
             "${modifier}+ß" = "exec ${niveumPackages.menu-calc}/bin/=";
             "${modifier}+F6" = "exec ${pkgs.xorg.xkill}/bin/xkill";
             "${modifier}+F9" = "exec ${pkgs.redshift}/bin/redshift -O 4000 -b 0.85";
@@ -334,8 +300,7 @@ in {
             # "${modifier}+x" = "exec ${new-workspace}";
             "XF86Display" = "exec ${niveumPackages.dmenu-randr}/bin/dmenu-randr";
           };
-        }
-      ];
+      };
     };
   };
 }

configs/keyboard.nix

@@ -2,27 +2,63 @@
   pkgs,
   lib,
   ...
-}: let
+}:
+let
 
   commaSep = builtins.concatStringsSep ",";
-  xkbOptions = ["compose:caps" "terminate:ctrl_alt_bksp" "grp:ctrls_toggle"];
+  xkbOptions = [
+    "compose:caps"
+    "terminate:ctrl_alt_bksp"
+    "grp:ctrls_toggle"
+  ];
   languages = {
-    deutsch = { code = "de"; variant = "T3"; };
-    greek = { code = "gr"; variant = "polytonic"; };
-    russian = { code = "ru"; variant = "phonetic"; };
-    arabic = { code = "ara"; variant = "buckwalter"; }; # ../lib/keyboards/arabic;
+    deutsch = {
+      code = "de";
+      variant = "T3";
+    };
+    greek = {
+      code = "gr";
+      variant = "polytonic";
+    };
+    russian = {
+      code = "ru";
+      variant = "phonetic";
+    };
+    arabic = {
+      code = "ara";
+      variant = "buckwalter";
+    }; # ../lib/keyboards/arabic;
     coptic = ../lib/keyboards/coptic;
     avestan = ../lib/keyboards/avestan;
     gothic = ../lib/keyboards/gothic;
-    farsi = { code = "ir"; variant = "qwerty"; };
-    syriac = { code = "sy"; variant = "syc_phonetic"; };
-    sanskrit = { code = "in"; variant = "san-kagapa"; };
-    gujarati = {code = "in"; variant = "guj-kagapa"; };
-    urdu = {code = "in"; variant = "urd-phonetic"; };
-    hebrew = {code = "il"; variant = "phonetic";};
+    farsi = {
+      code = "ir";
+      variant = "qwerty";
+    };
+    syriac = {
+      code = "sy";
+      variant = "syc_phonetic";
+    };
+    sanskrit = {
+      code = "in";
+      variant = "san-kagapa";
+    };
+    gujarati = {
+      code = "in";
+      variant = "guj-kagapa";
+    };
+    urdu = {
+      code = "in";
+      variant = "urd-phonetic";
+    };
+    hebrew = {
+      code = "il";
+      variant = "phonetic";
+    };
   };
   defaultLanguage = languages.deutsch;
-in {
+in
+{
   services.libinput.enable = true;
 
   # man 7 xkeyboard-config
@@ -41,7 +77,8 @@ in {
           lib.mapAttrsToList (name: value: {
             name = "symbols/${name}";
             path = value;
-          }) (lib.filterAttrs (_: value: !(value ? "code")) languages) ++ [
+          }) (lib.filterAttrs (_: value: !(value ? "code")) languages)
+          ++ [
             {
               name = "symbols/ir";
               path = ../lib/keyboards/farsi;
@@ -54,25 +91,40 @@ in {
 
   environment.etc."x11-locale".source = toString pkgs.xorg.libX11 + "share/X11/locale";
 
+  home-manager.users.me = {
+    home.file =
+      lib.mapAttrs' (name: path: lib.nameValuePair ".xkb/symbols/${name}" { source = path; })
+        (lib.filterAttrs (_: value: !(value ? "code")) languages) // {
+          ".xkb/symbols/ir".source = ../lib/keyboards/farsi;
+        };
+  };
+
   console.keyMap = "de";
 
-  environment.systemPackages =
-    lib.mapAttrsToList
-    (language: settings:
+  environment.systemPackages = lib.mapAttrsToList (
+    language: settings:
     let
       code = if settings ? "code" then settings.code else language;
       variant = if settings ? "variant" then settings.variant else "";
     in
-      pkgs.writers.writeDashBin "kb-${language}" ''
-        ${pkgs.xorg.setxkbmap}/bin/setxkbmap ${defaultLanguage.code},${code} ${defaultLanguage.variant},${variant} ${toString (map (option: "-option ${option}") xkbOptions)}
-      '')
-    languages;
+    pkgs.writers.writeDashBin "kb-${language}" ''
+      if [ -z $SWAYSOCK ]; then
+        ${pkgs.xorg.setxkbmap}/bin/setxkbmap ${defaultLanguage.code},${code} ${defaultLanguage.variant},${variant} ${
+          toString (map (option: "-option ${option}") xkbOptions)
+        }
+      else
+        swaymsg -s $SWAYSOCK 'input * xkb_layout "${defaultLanguage.code},${code}"'
+        swaymsg -s $SWAYSOCK 'input * xkb_variant "${defaultLanguage.variant},${variant}"'
+        swaymsg -s $SWAYSOCK 'input * xkb_options "${lib.concatStringsSep "," xkbOptions}"'
+      fi
+    ''
+  ) languages;
 
   # improve held key rate
   services.xserver.displayManager.sessionCommands = "${pkgs.xorg.xset}/bin/xset r rate 300 50";
 
   systemd.user.services.gxkb = {
-    wantedBy = ["graphical-session.target"];
+    wantedBy = [ "graphical-session.target" ];
     serviceConfig = {
       SyslogIdentifier = "gxkb";
       ExecStart = "${pkgs.gxkb}/bin/gxkb";

configs/packages.nix

@@ -94,6 +94,7 @@ in {
     # HARDWARE TOOLS
     gnome-disk-utility
     arandr # xrandr for noobs
+    wdisplays
     libnotify # for notify-send
     xclip # clipboard CLI
     xdragon # drag and drop

configs/spacetime.nix

@@ -3,5 +3,6 @@
   location = {
     latitude = 52.517;
     longitude = 13.3872;
+    provider = "geoclue2";
   };
 }

configs/stylix.nix

@@ -26,6 +26,9 @@ in {
     size = 12;
   };
 
+  home-manager.users.me = {
+    stylix.autoEnable = true;
+  };
 
   # environment.etc."stylix/wallpaper.png".source = generatedWallpaper;
 

configs/tmux.nix

@@ -13,7 +13,7 @@
     aggressiveResize = true;
     escapeTime = 50;
     historyLimit = 7000;
-    shortcut = "a";
+    shortcut = "b";
     extraConfig = ''
       set -g mouse on
 
@@ -37,15 +37,6 @@
       set -g status-left-length 32
       set -g status-right-length 150
 
-      set -g status-bg colour242
-
-      setw -g window-status-format "#[fg=colour12,bg=colour233] #I #[fg=white,bg=colour237] #W "
-      setw -g window-status-current-format "#[fg=colour12,bg=colour233] * #[fg=white,bg=colour237,bold] #W "
-
-      set -g status-left ""
-      set -g status-right "#[fg=colour255,bg=colour237,bold] #(hostname -I) #[default]#[fg=colour12,bg=colour233] %FT%R "
-      set -g status-justify left
-
       set -g status-position bottom
     '';
   };

flake.lock

@@ -90,11 +90,11 @@
     "base16-helix": {
       "flake": false,
       "locked": {
-        "lastModified": 1736852337,
-        "narHash": "sha256-esD42YdgLlEh7koBrSqcT7p2fsMctPAcGl/+2sYJa2o=",
+        "lastModified": 1748408240,
+        "narHash": "sha256-9M2b1rMyMzJK0eusea0x3lyh3mu5nMeEDSc4RZkGm+g=",
         "owner": "tinted-theming",
         "repo": "base16-helix",
-        "rev": "03860521c40b0b9c04818f2218d9cc9efc21e7a5",
+        "rev": "6c711ab1a9db6f51e2f6887cc3345530b33e152e",
         "type": "github"
       },
       "original": {
@@ -307,11 +307,11 @@
     "firefox-gnome-theme": {
       "flake": false,
       "locked": {
-        "lastModified": 1744642301,
-        "narHash": "sha256-5A6LL7T0lttn1vrKsNOKUk9V0ittdW0VEqh6AtefxJ4=",
+        "lastModified": 1748383148,
+        "narHash": "sha256-pGvD/RGuuPf/4oogsfeRaeMm6ipUIznI2QSILKjKzeA=",
         "owner": "rafaelmardojai",
         "repo": "firefox-gnome-theme",
-        "rev": "59e3de00f01e5adb851d824cf7911bd90c31083a",
+        "rev": "4eb2714fbed2b80e234312611a947d6cb7d70caf",
         "type": "github"
       },
       "original": {
@@ -338,11 +338,11 @@
     },
     "flake-compat_2": {
       "locked": {
-        "lastModified": 1733328505,
-        "narHash": "sha256-NeCCThCEP3eCl2l/+27kNNK7QrwZB1IJCrXfrbv5oqU=",
+        "lastModified": 1747046372,
+        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
         "owner": "edolstra",
         "repo": "flake-compat",
-        "rev": "ff81ac966bb2cae68946d5ed5fc4994f96d0ffec",
+        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
         "type": "github"
       },
       "original": {
@@ -402,11 +402,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1733312601,
-        "narHash": "sha256-4pDvzqnegAfRkPwO3wmwBhVi/Sye1mzps0zHWYnP88c=",
+        "lastModified": 1749398372,
+        "narHash": "sha256-tYBdgS56eXYaWVW3fsnPQ/nFlgWi/Z2Ymhyu21zVM98=",
         "owner": "hercules-ci",
         "repo": "flake-parts",
-        "rev": "205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9",
+        "rev": "9305fe4e5c2a6fcf5ba6a3ff155720fbe4076569",
         "type": "github"
       },
       "original": {
@@ -544,11 +544,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1742649964,
-        "narHash": "sha256-DwOTp7nvfi8mRfuL1escHDXabVXFGT1VlPD1JHrtrco=",
+        "lastModified": 1750779888,
+        "narHash": "sha256-wibppH3g/E2lxU43ZQHC5yA/7kIKLGxVEnsnVK1BtRg=",
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "dcf5072734cb576d2b0c59b2ac44f5050b5eac82",
+        "rev": "16ec914f6fb6f599ce988427d9d94efddf25fe6d",
         "type": "github"
       },
       "original": {
@@ -653,11 +653,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1749154018,
-        "narHash": "sha256-gjN3j7joRvT3a8Zgcylnd4NFsnXeDBumqiu4HmY1RIg=",
+        "lastModified": 1751468302,
+        "narHash": "sha256-tWosziZTT039x6PgEZUhzGlV8oLvdDmIgKTE8ESMaEA=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "7aae0ee71a17b19708b93b3ed448a1a0952bf111",
+        "rev": "501cfec8277f931a9c9af9f23d3105c537faeafe",
         "type": "github"
       },
       "original": {
@@ -1108,11 +1108,11 @@
     },
     "nixpkgs-unstable_2": {
       "locked": {
-        "lastModified": 1750553127,
-        "narHash": "sha256-zgPnxYqkf/CEl5m/lx02D+FaLWPRUM/RLo/qekTuu8Q=",
+        "lastModified": 1751704732,
+        "narHash": "sha256-30JXBxkJD3pxBBGQwl/DDwxxJDGQ1nvkvWwEtTsmhA8=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "ba476a871a35075644c3340b3651101ddf77ee0d",
+        "rev": "07c3e0e2be593551abdccacabe29cc57206b396f",
         "type": "github"
       },
       "original": {
@@ -1230,11 +1230,11 @@
     },
     "nixpkgs_7": {
       "locked": {
-        "lastModified": 1750400657,
-        "narHash": "sha256-3vkjFnxCOP6vm5Pm13wC/Zy6/VYgei/I/2DWgW4RFeA=",
+        "lastModified": 1751582995,
+        "narHash": "sha256-u7ubvtxdTnFPpV27AHpgoKn7qHuE7sgWgza/1oj5nzA=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b2485d56967598da068b5a6946dadda8bfcbcd37",
+        "rev": "7a732ed41ca0dd64b4b71b563ab9805a80a7d693",
         "type": "github"
       },
       "original": {
@@ -1246,11 +1246,11 @@
     },
     "nixpkgs_8": {
       "locked": {
-        "lastModified": 1750365781,
-        "narHash": "sha256-XE/lFNhz5lsriMm/yjXkvSZz5DfvKJLUjsS6pP8EC50=",
+        "lastModified": 1751271578,
+        "narHash": "sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU+tt4YY=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "08f22084e6085d19bcfb4be30d1ca76ecb96fe54",
+        "rev": "3016b4b15d13f3089db8a41ef937b13a9e33a8df",
         "type": "github"
       },
       "original": {
@@ -1394,11 +1394,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1750553086,
-        "narHash": "sha256-rtItxhQM+Zkd2ys/lT2MoXCUVEhyj51Em5o9Wd6qqGU=",
+        "lastModified": 1751701159,
+        "narHash": "sha256-iDjz1tBd/ibtmZZse4k1NBxfPR8g9K5W4sRgCyOnrj0=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "8d68e170fd6f9e8b8921db79419c209a1aeabc36",
+        "rev": "a26411970baba3604e425f23e5293da492069e4a",
         "type": "github"
       },
       "original": {
@@ -1420,11 +1420,11 @@
         "treefmt-nix": "treefmt-nix_3"
       },
       "locked": {
-        "lastModified": 1746056780,
-        "narHash": "sha256-/emueQGaoT4vu0QjU9LDOG5roxRSfdY0K2KkxuzazcM=",
+        "lastModified": 1751320053,
+        "narHash": "sha256-3m6RMw0FbbaUUa01PNaMLoO7D99aBClmY5ed9V3vz+0=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "d476cd0972dd6242d76374fcc277e6735715c167",
+        "rev": "cbde1735782f9c2bb2c63d5e05fba171a14a4670",
         "type": "github"
       },
       "original": {
@@ -1593,11 +1593,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1750473400,
-        "narHash": "sha256-wiW2j63MyGQyyijRF25hf7Ab7vx4G8pCiGjUe3OGV4c=",
+        "lastModified": 1751683029,
+        "narHash": "sha256-dYO5X5jK8bpQOeRAo8R5aUt6M/+Ji1cZgstZI7SQ2IA=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "3d7d4c4e284f26d6dc4840491c66884912be0062",
+        "rev": "9e5e62a33a929a67a5427fb7324a6f583dced0b2",
         "type": "github"
       },
       "original": {
@@ -1740,11 +1740,11 @@
         "tinted-zed": "tinted-zed"
       },
       "locked": {
-        "lastModified": 1750370365,
-        "narHash": "sha256-Yblt2LusglzBXlg+ekckztIUgvl1WQwJ7gLRJEt/IHE=",
+        "lastModified": 1751658706,
+        "narHash": "sha256-jqRbWjB8aH2qzq6nMQpwkzVBR4o9lNxAHFmRgGwnJ94=",
         "owner": "danth",
         "repo": "stylix",
-        "rev": "cc82dae884f45ffeb996d2b5116afa70933e507f",
+        "rev": "5dd301b72207d4fd8d8b929abd88ba1c486d1744",
         "type": "github"
       },
       "original": {
@@ -1961,11 +1961,11 @@
     "tinted-schemes": {
       "flake": false,
       "locked": {
-        "lastModified": 1744974599,
-        "narHash": "sha256-Fg+rdGs5FAgfkYNCs74lnl8vkQmiZVdBsziyPhVqrlY=",
+        "lastModified": 1750770351,
+        "narHash": "sha256-LI+BnRoFNRa2ffbe3dcuIRYAUcGklBx0+EcFxlHj0SY=",
         "owner": "tinted-theming",
         "repo": "schemes",
-        "rev": "28c26a621123ad4ebd5bbfb34ab39421c0144bdd",
+        "rev": "5a775c6ffd6e6125947b393872cde95867d85a2a",
         "type": "github"
       },
       "original": {
@@ -1977,11 +1977,11 @@
     "tinted-tmux": {
       "flake": false,
       "locked": {
-        "lastModified": 1745111349,
-        "narHash": "sha256-udV+nHdpqgkJI9D0mtvvAzbqubt9jdifS/KhTTbJ45w=",
+        "lastModified": 1751159871,
+        "narHash": "sha256-UOHBN1fgHIEzvPmdNMHaDvdRMgLmEJh2hNmDrp3d3LE=",
         "owner": "tinted-theming",
         "repo": "tinted-tmux",
-        "rev": "e009f18a01182b63559fb28f1c786eb027c3dee9",
+        "rev": "bded5e24407cec9d01bd47a317d15b9223a1546c",
         "type": "github"
       },
       "original": {
@@ -1993,11 +1993,11 @@
     "tinted-zed": {
       "flake": false,
       "locked": {
-        "lastModified": 1725758778,
-        "narHash": "sha256-8P1b6mJWyYcu36WRlSVbuj575QWIFZALZMTg5ID/sM4=",
+        "lastModified": 1751158968,
+        "narHash": "sha256-ksOyv7D3SRRtebpXxgpG4TK8gZSKFc4TIZpR+C98jX8=",
         "owner": "tinted-theming",
         "repo": "base16-zed",
-        "rev": "122c9e5c0e6f27211361a04fae92df97940eccf9",
+        "rev": "86a470d94204f7652b906ab0d378e4231a5b3384",
         "type": "github"
       },
       "original": {

flake.nix

@@ -314,6 +314,7 @@
     // flake-utils.lib.eachSystem [flake-utils.lib.system.x86_64-linux flake-utils.lib.system.x86_64-darwin flake-utils.lib.system.aarch64-linux] (system: let
       pkgs = import nixpkgs {
         inherit system;
+        config.allowUnfree = true;
         overlays = [
           nur.overlays.default
           (self: super: {
@@ -418,6 +419,8 @@
         vimPlugins-icalendar-vim = pkgs.callPackage packages/vimPlugins/icalendar-vim.nix {};
         vimPlugins-jq-vim = pkgs.callPackage packages/vimPlugins/jq-vim.nix {};
         vimPlugins-typst-vim = pkgs.callPackage packages/vimPlugins/typst-vim.nix {};
+        vimPlugins-mdwa-nvim = pkgs.callPackage packages/vimPlugins/mdwa-nvim.nix {};
+        vimPlugins-vim-ernest = pkgs.callPackage packages/vimPlugins/vim-ernest.nix {};
         vimPlugins-vim-256noir = pkgs.callPackage packages/vimPlugins/vim-256noir.nix {};
         vimPlugins-vim-colors-paramount = pkgs.callPackage packages/vimPlugins/vim-colors-paramount.nix {};
         vimPlugins-vim-fetch = pkgs.callPackage packages/vimPlugins/vim-fetch.nix {};

lib/vim/init.vim

@@ -124,3 +124,14 @@ set complete+=kspell
 let g:pandoc#syntax#conceal#use = 0
 let g:pandoc#modules#disabled = []
 let g:pandoc#spell#default_langs = ['en', 'de']
+
+autocmd! User GoyoEnter Limelight | Ernest
+autocmd! User ErnestLeave Limelight! | Goyo!
+
+
+" Disable Copilot for files larger than 100kb
+autocmd BufReadPre *
+    \ let f=getfsize(expand("<afile>"))
+    \ | if f > 100000 || f == -2
+    \ | let b:copilot_enabled = v:false
+    \ | endif

packages/vim.nix

@@ -40,6 +40,13 @@
 
         editorconfig-vim
 
+        copilot-vim
+
+        goyo
+        limelight-vim
+        niveumPackages.vimPlugins-mdwa-nvim
+        niveumPackages.vimPlugins-vim-ernest
+
         fzf-vim
         fzfWrapper
         supertab

packages/vimPlugins/mdwa-nvim.nix

@@ -0,0 +1,14 @@
+{
+  vimUtils,
+  fetchFromGitHub,
+  lib,
+}: (vimUtils.buildVimPluginFrom2Nix {
+  pname = "mdwa.nvim";
+  version = "9f37270";
+  src = fetchFromGitHub {
+    owner = "tihawk";
+    repo = "mdwa.nvim";
+    rev = "9f3727037e0d85fd0930334b91b9687a5a880192";
+    hash = "sha256-h2jy2E+pN2Ma/5n9Eq2oXr9xHma2OxxVvx9EJ+bIYxA=";
+  };
+})

packages/vimPlugins/vim-ernest.nix

@@ -0,0 +1,14 @@
+{
+  vimUtils,
+  fetchFromGitHub,
+  lib,
+}: (vimUtils.buildVimPluginFrom2Nix {
+  pname = "vim-ernest";
+  version = "4b99bc3";
+  src = fetchFromGitHub {
+    owner = "lgalke";
+    repo = "vim-ernest";
+    rev = "4b99bc3fe3deb7bb958ad2f64cad93569eeb50d7";
+    hash = "sha256-AUuRnnZU39XUerBxNelEqVyDAalRm3VGNUQb15fjXjM=";
+  };
+})

systems/makanek/monitoring/default.nix

@@ -3,11 +3,13 @@
   config,
   pkgs,
   ...
-}: let
+}:
+let
   lokiConfig = import ./loki.nix;
   blackboxConfig = import ./blackbox.nix;
   inherit (import ../../../lib) restic;
-in {
+in
+{
   services.grafana = {
     enable = true;
     settings = {
@@ -80,143 +82,150 @@ in {
     }
   ];
 
-  services.prometheus.rules = let
-    diskFreeThreshold = 10;
-  in [
-    (builtins.toJSON {
-      groups = [
-        {
-          name = "niveum";
-          rules = [
-            {
-              alert = "HostSystemdServiceCrashed";
-              expr = ''(node_systemd_unit_state{state="failed"} == 1) * on(instance) group_left (nodename) node_uname_info{nodename=~".+"}'';
-              annotations = {
-                description = "{{$labels.name}} failed on {{$labels.instance}}";
-              };
-            }
-            {
-              alert = "RootPartitionFull";
-              for = "10m";
-              expr = ''(node_filesystem_free_bytes{mountpoint="/"} * 100) / node_filesystem_size_bytes{mountpoint="/"} < ${toString diskFreeThreshold}'';
-              annotations = {
-                description = ''{{ $labels.instance }} running out of space: {{ $value | printf "%.2f" }}% < ${toString diskFreeThreshold}%'';
-              };
-            }
-            {
-              alert = "RootPartitionFullWeek";
-              for = "1h";
-              expr =
-                ''node_filesystem_free_bytes{mountpoint="/"} ''
-                + ''and predict_linear(node_filesystem_free_bytes{mountpoint="/"}[2d], 7*24*3600) <= 0'';
-              annotations = {
-                description = "{{$labels.instance}} running out of space in 7 days";
-              };
-            }
-            {
-              alert = "HighLoad";
-              expr = ''node_load15 / on(job) count(node_cpu_seconds_total{mode="system"}) by (job) >= 1.0'';
-              for = "10m";
-              annotations = {
-                description = "{{$labels.instance}} running on high load: {{$value}}";
-              };
-            }
-            {
-              alert = "HostUnusualNetworkThroughputIn";
-              expr = ''(rate(node_network_receive_bytes_total[2m])) / 1024 / 1024 > 100'';
-              for = "5m";
-              annotations.description = "Host unusual network throughput in (instance {{ $labels.instance }})";
-            }
-            {
-              alert = "HostUnusualNetworkThroughputOut";
-              expr = ''(rate(node_network_transmit_bytes_total[2m])) / 1024 / 1024 > 100'';
-              for = "5m";
-              annotations.description = "Host unusual network throughput out (instance {{ $labels.instance }})";
-            }
-            {
-              alert = "HostUnusualDiskReadRate";
-              expr = ''(rate(node_disk_read_bytes_total[2m])) / 1024 / 1024 > 50'';
-              for = "5m";
-              annotations.description = "Host unusual disk read rate (instance {{ $labels.instance }})";
-            }
-            {
-              alert = "HostUnusualDiskWriteRate";
-              expr = ''(rate(node_disk_written_bytes_total[2m])) / 1024 / 1024 > 50'';
-              for = "2m";
-              annotations.description = "Host unusual disk write rate (instance {{ $labels.instance }})";
-            }
-            {
-              alert = "HostOutOfInodes";
-              expr = ''node_filesystem_files_free{fstype!="msdosfs"} / node_filesystem_files{fstype!="msdosfs"} * 100 < 10 and ON (instance, device, mountpoint) node_filesystem_readonly == 0'';
-              for = "2m";
-              annotations.description = "Host out of inodes (instance {{ $labels.instance }})";
-            }
-            {
-              alert = "HostInodesWillFillIn24Hours";
-              expr = ''node_filesystem_files_free{fstype!="msdosfs"} / node_filesystem_files{fstype!="msdosfs"} * 100 < 10 and predict_linear(node_filesystem_files_free{fstype!="msdosfs"}[1h], 24 * 3600) < 0 and ON (instance, device, mountpoint) node_filesystem_readonly{fstype!="msdosfs"} == 0'';
-              for = "2m";
-              annotations.description = "Host inodes will fill in 24 hours (instance {{ $labels.instance }})";
-            }
-            {
-              alert = "HighRAM";
-              expr = "node_memory_MemFree_bytes + node_memory_Buffers_bytes + node_memory_Cached_bytes < node_memory_MemTotal_bytes * 0.1";
-              for = "1h";
-              annotations.description = "{{$labels.instance}} using lots of RAM";
-            }
-            {
-              alert = "UptimeMonster";
-              expr = "time() - node_boot_time_seconds > 2592000";
-              annotations.description = "uptime monster {{$labels.instance}} up for more than 30 days";
-            }
-            {
-              alert = "HostDown";
-              expr = ''up == 0'';
-              for = "5m";
-              annotations = {
-                description = "{{ $labels.instance }} seeming down since 5 minutes";
-              };
-            }
-            {
-              alert = "Reboot";
-              expr = "time() - node_boot_time_seconds < 300";
-              annotations.description = "{{$labels.instance}} rebooted";
-            }
-            {
-              alert = "ProbeFailed";
-              expr = "probe_success == 0";
-              for = "5m";
-              annotations.description = "HTTP probe failed for {{$labels.instance}}";
-            }
-            {
-              alert = "SlowProbe";
-              expr = "avg_over_time(probe_http_duration_seconds[1m]) > 1";
-              for = "5m";
-              annotations.description = "HTTP probe slow for {{$labels.instance}}";
-            }
-            {
-              alert = "HttpStatusCode";
-              expr = "probe_http_status_code != 0 AND (probe_http_status_code <= 199 OR probe_http_status_code >= 400)";
-              for = "5m";
-              annotations.description = "status code {{$value}} for {{$labels.instance}}";
-            }
-            {
-              alert = "SslExpirySoon";
-              expr = "probe_ssl_earliest_cert_expiry - time() < 86400 * 30";
-              for = "5m";
-              annotations.description = "SSL certificate for {{$labels.instance}} expires in 30 days";
-            }
-            {
-              alert = "SslExpiry";
-              expr = "probe_ssl_earliest_cert_expiry - time()  <= 0";
-              for = "5m";
-              annotations.description = "SSL certificate for {{$labels.instance}} has expired";
-            }
-          ];
-        }
-      ];
-    })
-  ];
-
+  services.prometheus.rules =
+    let
+      diskFreeThreshold = 10;
+    in
+    [
+      (builtins.toJSON {
+        groups = [
+          {
+            name = "niveum";
+            rules = [
+              {
+                alert = "HostSystemdServiceCrashed";
+                expr = ''(node_systemd_unit_state{state="failed"} == 1) * on(instance) group_left (nodename) node_uname_info{nodename=~".+"}'';
+                annotations = {
+                  description = "{{$labels.name}} failed on {{$labels.instance}}";
+                };
+              }
+              {
+                alert = "RootPartitionFull";
+                for = "10m";
+                expr = ''(node_filesystem_free_bytes{mountpoint="/"} * 100) / node_filesystem_size_bytes{mountpoint="/"} < ${toString diskFreeThreshold}'';
+                annotations = {
+                  description = ''{{ $labels.instance }} running out of space: {{ $value | printf "%.2f" }}% < ${toString diskFreeThreshold}%'';
+                };
+              }
+              {
+                alert = "RootPartitionFullWeek";
+                for = "1h";
+                expr =
+                  ''node_filesystem_free_bytes{mountpoint="/"} ''
+                  + ''and predict_linear(node_filesystem_free_bytes{mountpoint="/"}[2d], 7*24*3600) <= 0'';
+                annotations = {
+                  description = "{{$labels.instance}} running out of space in 7 days";
+                };
+              }
+              {
+                alert = "HighLoad";
+                expr = ''node_load15 / on(job) count(node_cpu_seconds_total{mode="system"}) by (job) >= 1.0'';
+                for = "10m";
+                annotations = {
+                  description = "{{$labels.instance}} running on high load: {{$value}}";
+                };
+              }
+              {
+                alert = "HostUnusualNetworkThroughputIn";
+                expr = ''(rate(node_network_receive_bytes_total[2m])) / 1024 / 1024 > 100'';
+                for = "5m";
+                annotations.description = "Host unusual network throughput in (instance {{ $labels.instance }})";
+              }
+              {
+                alert = "HostUnusualNetworkThroughputOut";
+                expr = ''(rate(node_network_transmit_bytes_total[2m])) / 1024 / 1024 > 100'';
+                for = "5m";
+                annotations.description = "Host unusual network throughput out (instance {{ $labels.instance }})";
+              }
+              {
+                alert = "HostUnusualDiskReadRate";
+                expr = ''(rate(node_disk_read_bytes_total[2m])) / 1024 / 1024 > 50'';
+                for = "5m";
+                annotations.description = "Host unusual disk read rate (instance {{ $labels.instance }})";
+              }
+              {
+                alert = "HostUnusualDiskWriteRate";
+                expr = ''(rate(node_disk_written_bytes_total[2m])) / 1024 / 1024 > 50'';
+                for = "2m";
+                annotations.description = "Host unusual disk write rate (instance {{ $labels.instance }})";
+              }
+              {
+                alert = "HostOutOfInodes";
+                expr = ''node_filesystem_files_free{fstype!="msdosfs"} / node_filesystem_files{fstype!="msdosfs"} * 100 < 10 and ON (instance, device, mountpoint) node_filesystem_readonly == 0'';
+                for = "2m";
+                annotations.description = "Host out of inodes (instance {{ $labels.instance }})";
+              }
+              {
+                alert = "HostInodesWillFillIn24Hours";
+                expr = ''node_filesystem_files_free{fstype!="msdosfs"} / node_filesystem_files{fstype!="msdosfs"} * 100 < 10 and predict_linear(node_filesystem_files_free{fstype!="msdosfs"}[1h], 24 * 3600) < 0 and ON (instance, device, mountpoint) node_filesystem_readonly{fstype!="msdosfs"} == 0'';
+                for = "2m";
+                annotations.description = "Host inodes will fill in 24 hours (instance {{ $labels.instance }})";
+              }
+              {
+                alert = "HighRAM";
+                expr = "node_memory_MemFree_bytes + node_memory_Buffers_bytes + node_memory_Cached_bytes < node_memory_MemTotal_bytes * 0.1";
+                for = "1h";
+                annotations.description = "{{$labels.instance}} using lots of RAM";
+              }
+              {
+                alert = "UptimeMonster";
+                expr = "time() - node_boot_time_seconds > 2592000";
+                annotations.description = "uptime monster {{$labels.instance}} up for more than 30 days";
+              }
+              {
+                alert = "HostDown";
+                expr = ''up == 0'';
+                for = "5m";
+                annotations = {
+                  description = "{{ $labels.instance }} seeming down since 5 minutes";
+                };
+              }
+              {
+                alert = "Reboot";
+                expr = "time() - node_boot_time_seconds < 300";
+                annotations.description = "{{$labels.instance}} rebooted";
+              }
+              {
+                alert = "Mastodon";
+                expr = ''probe_success{instance="https://social.krebsco.de"}'';
+                for = "5m";
+                annotations.description = "Mastodon instance {{$labels.instance}} is down";
+              }
+              {
+                alert = "ProbeFailed";
+                expr = "probe_success == 0";
+                for = "5m";
+                annotations.description = "HTTP probe failed for {{$labels.instance}}";
+              }
+              {
+                alert = "SlowProbe";
+                expr = "avg_over_time(probe_http_duration_seconds[1m]) > 1";
+                for = "5m";
+                annotations.description = "HTTP probe slow for {{$labels.instance}}";
+              }
+              {
+                alert = "HttpStatusCode";
+                expr = "probe_http_status_code != 0 AND (probe_http_status_code <= 199 OR probe_http_status_code >= 400)";
+                for = "5m";
+                annotations.description = "status code {{$value}} for {{$labels.instance}}";
+              }
+              {
+                alert = "SslExpirySoon";
+                expr = "probe_ssl_earliest_cert_expiry - time() < 86400 * 30";
+                for = "5m";
+                annotations.description = "SSL certificate for {{$labels.instance}} expires in 30 days";
+              }
+              {
+                alert = "SslExpiry";
+                expr = "probe_ssl_earliest_cert_expiry - time()  <= 0";
+                for = "5m";
+                annotations.description = "SSL certificate for {{$labels.instance}} has expired";
+              }
+            ];
+          }
+        ];
+      })
+    ];
 
   # ref https://github.com/Mic92/dotfiles/blob/f44bac5dd6970ed3fbb4feb906917331ec3c2be5/machines/eva/modules/prometheus/default.nix
   systemd.services.matrix-hook = {
@@ -246,6 +255,33 @@ in {
     };
   };
 
+  systemd.services.matrix-hook-lassulus = {
+    description = "Matrix Hook";
+    after = [ "network.target" ];
+    wantedBy = [ "multi-user.target" ];
+    environment = {
+      HTTP_ADDRESS = "[::1]";
+      HTTP_PORT = "9089";
+      MX_HOMESERVER = "https://matrix.4d2.org";
+      MX_ID = "@lakai:4d2.org";
+      MX_ROOMID = "!MJAGqBAOKZGMywzwkI:lassul.us";
+      MX_MSG_TEMPLATE = "${pkgs.matrix-hook}/message.html.tmpl";
+    };
+    serviceConfig = {
+      EnvironmentFile = [
+        # format: MX_TOKEN=<token>
+        config.age.secrets.matrix-token-lakai-env.path
+      ];
+      Type = "simple";
+      ExecStart = "${pkgs.matrix-hook}/bin/matrix-hook";
+      Restart = "always";
+      RestartSec = "10";
+      DynamicUser = true;
+      User = "matrix-hook";
+      Group = "matrix-hook";
+    };
+  };
+
   age.secrets = {
     matrix-token-lakai-env.file = ../../../secrets/matrix-token-lakai-env.age;
   };
@@ -260,8 +296,23 @@ in {
         group_wait = "30s";
         repeat_interval = "24h";
         receiver = "matrix";
+        routes = [
+          {
+            receiver = "lassulus";
+            matchers = [ "alertname = \"Mastodon\"" ];
+          }
+        ];
       };
       receivers = [
+        {
+          name = "lassulus";
+          webhook_configs = [
+            {
+              url = "http://localhost:9089/alert";
+              max_alerts = 5;
+            }
+          ];
+        }
         {
           name = "matrix";
           webhook_configs = [
@@ -306,13 +357,21 @@ in {
     {
       scheme = "http";
       path_prefix = "/";
-      static_configs = [{targets = ["localhost:${toString config.services.prometheus.alertmanager.port}"];}];
+      static_configs = [
+        { targets = [ "localhost:${toString config.services.prometheus.alertmanager.port}" ]; }
+      ];
     }
   ];
 
   # otherwise bearer_token_file will fail
   services.prometheus.checkConfig = "syntax-only";
 
+  services.prometheus.extraFlags = [
+    "--storage.tsdb.retention.time=7d"
+    "--storage.tsdb.retention.size=2GB"
+    "--storage.tsdb.wal-compression"
+  ];
+
   services.prometheus.scrapeConfigs = [
     {
       job_name = "makanek";
@@ -328,14 +387,14 @@ in {
       scrape_interval = "5m";
       job_name = "blackbox";
       metrics_path = "/probe";
-      params.module = ["http_2xx"];
+      params.module = [ "http_2xx" ];
       relabel_configs = [
         {
-          source_labels = ["__address__"];
+          source_labels = [ "__address__" ];
           target_label = "__param_target";
         }
         {
-          source_labels = ["__param_target"];
+          source_labels = [ "__param_target" ];
           target_label = "instance";
         }
         {
@@ -393,7 +452,7 @@ in {
       scrape_interval = "60s";
       metrics_path = "/api/prometheus";
       scheme = "http";
-      static_configs = [{targets = ["zaatar.r:8123"];}];
+      static_configs = [ { targets = [ "zaatar.r:8123" ]; } ];
       bearer_token_file = config.age.secrets.home-assistant-token.path;
     }
     {
@@ -410,7 +469,7 @@ in {
 
   services.prometheus.exporters.blackbox = {
     enable = true;
-    configFile = (pkgs.formats.yaml {}).generate "blackbox.yaml" blackboxConfig;
+    configFile = (pkgs.formats.yaml { }).generate "blackbox.yaml" blackboxConfig;
   };
 
   networking.firewall.allowedTCPPorts = [
@@ -419,6 +478,6 @@ in {
 
   services.loki = {
     enable = true;
-    configFile = (pkgs.formats.yaml {}).generate "loki.yaml" lokiConfig;
+    configFile = (pkgs.formats.yaml { }).generate "loki.yaml" lokiConfig;
   };
 }