.sops.yaml

@@ -7,17 +7,27 @@ keys:
     - &rackserv age1zutg3s4nth679a6av9xqw4km0ezmfkxlnusu78demf0rzazqn3pqk9exgj
 
 creation_rules:
-  - path_regex: secrets/nixdesk
+  - path_regex: home/profiles/secrets
+    key_groups:
+      - age:
+        - *xun
+  - path_regex: sys/profiles/secrets/global
     key_groups:
       - age:
         - *xun
         - *nixdesk
-  - path_regex: secrets/hopper
+        - *hopper
+  - path_regex: sys/profiles/secrets/nixdesk
+    key_groups:
+      - age:
+        - *xun
+        - *nixdesk
+  - path_regex: sys/profiles/secrets/hopper
     key_groups:
       - age:
         - *xun
         - *hopper
-  - path_regex: secrets/rackserv
+  - path_regex: sys/profiles/secrets/rackserv
     key_groups:
       - age:
         - *xun

Justfile

@@ -7,8 +7,13 @@ local OPERATION *FLAGS:
   {{FLAGS}} \
   {{OPERATION}}
 
+
+buildiso *FLAGS:
+  nix build .#nixosConfigurations.liveiso.config.system.build.isoImage {{FLAGS}}
+
 updatekeys:
-  fd . secrets -E '*.nix' -t f -x sops updatekeys -y
+  fd . sys/profiles/secrets -E '*.nix' -t f -x sops updatekeys -y
+
 
 remote OPERATION HOST REMOTEHOST *FLAGS:
   nixos-rebuild \

flake.nix

@@ -6,13 +6,11 @@
     haumea,
     ...
   } @ inputs: let
-    _load = path:
+    systemProfiles = haumea.lib.load {
-      haumea.lib.load {
+      src = ./sys/profiles;
-        src = path;
+      loader = haumea.lib.loaders.path;
-        loader = haumea.lib.loaders.path;
+    };
-      };
+    homeProfiles = ./home;
-    systemProfiles = _load ./sys/profiles;
-    homeProfiles = _load ./home;
     vars = import ./vars;
     l = nixpkgs.lib;
     b = builtins;

home/cli/gpg.nix

@@ -1,5 +0,0 @@
-{
-  programs.gpg = {
-    enable = true;
-  };
-}

home/desktop/sway/default.nix

@@ -6,10 +6,10 @@
   ...
 }: {
   imports = [
-    ../__common/fuzzel.nix
+    ../common/fuzzel.nix
-    ../__common/wob.nix
+    ../common/wob.nix
-    ../__common/wl-clipboard.nix
+    ../common/wl-clipboard.nix
-    ./__waybar.nix
+    ./waybar.nix
   ];
 
   # services.gnome-keyring = {

home/programs/firefox/search-engines.nix

@@ -3,7 +3,9 @@
   pkgs,
   ...
 }: {
-  programs.firefox.profiles.xun.search = {
+  programs.firefox.profiles.xun.search = let
+    inherit (lib) attrsToList singleton;
+  in {
     force = true;
     default = "google";
     order = [
@@ -45,11 +47,6 @@
         icon = "https://github.githubassets.com/favicons/favicon-dark.svg";
         definedAliases = ["@ghn"];
       };
-      "nixpkgs github" = {
-        urls = mkUrl "https://github.com/search?type=code&q=repo:NixOS/nixpkgs {searchTerms}";
-        icon = "https://github.githubassets.com/favicons/favicon-dark.svg";
-        definedAliases = ["@nixpkgs"];
-      };
       "Brave" = {
         urls = mkUrl "https://search.brave.com/search?q={searchTerms}";
         icon = "https://brave.com/static-assets/images/brave-favicon.png";
@@ -60,19 +57,21 @@
         icon = "https://www.youtube.com/favicon.ico";
         definedAliases = ["@yt"];
       };
+
       "crates.io" = {
         urls = mkUrl "https://crates.io/search?q={searchTerms}";
         icon = "https://crates.io/favicon.ico";
         definedAliases = ["@cr"];
       };
       "noogle" = {
-        urls = mkUrl "https://noogle.dev/q?term={searchTerms}";
+        url = mkUrl "https://noogle.dev/q?term={searchTerms}";
         icon = "https://noogle.dev/favicon.png";
-        definedAliases = ["@nog"];
+        definedAliases = ["@noogle"];
       };
 
       "google".metaData.alias = "@go";
       "ddb".metaData.alias = "@ddg";
+      "wikipedia".metaData.alias = "@wiki";
       "bing".metaData.alias = "@bi";
     };
   };

hosts/hopper/home.nix

@@ -4,20 +4,20 @@
   pkgs,
   ...
 }: {
-  imports = with homeProfiles; [
+  imports = map (x: homeProfiles + x) [
-    cli.xdg
+    /cli/xdg.nix
-    cli.comma
+    /cli/comma.nix
 
-    programs.nvim
+    /programs/nvim.nix
-    programs.foot
+    /programs/foot.nix
 
-    desktop.xdg-portals
+    /desktop/xdg-portals.nix
-    desktop.sway.default
+    /desktop/sway/default.nix
 
-    programs.mpv
+    /programs/mpv.nix
 
-    services.playerctl
+    /services/playerctl.nix
-    services.polkit-agent
+    /services/polkit-agent.nix
   ];
 
   wayland.windowManager.sway.config.output."HDMI-A-1".scale = "2.0";

hosts/hopper/profiles/lab/caddy.nix

@@ -20,12 +20,7 @@ in {
 
   services.caddy = {
     enable = true;
-    globalConfig = ''
+    globalConfig = "metrics";
-      metrics
-      servers {
-        trusted_proxies static 10.0.0.1
-      }
-    '';
     virtualHosts = let
       mkPublicEntry = name: destination: {
         hostName = "${name}.${domain}:80";
@@ -48,7 +43,6 @@ in {
       navidrome = mkPublicEntry "navidrome" "${bridge}:${toString config.services.navidrome.settings.Port}";
       vaultwarden = mkPublicEntry "vw" "${bridge}:${toString config.services.vaultwarden.config.ROCKET_PORT}";
       abs = mkPublicEntry "abs" "${bridge}:${toString config.services.audiobookshelf.port}";
-      miniflux = mkPublicEntry "rss" "${bridge}:18632";
 
       navidrome2 = mkPrivateEntry "navidrome" "${bridge}:${toString config.services.navidrome.settings.Port}";
       slskd = mkPrivateEntry "slskd" "localhost:${toString config.services.slskd.settings.web.port}";

hosts/hopper/profiles/lab/default.nix

@@ -9,7 +9,6 @@
     ./glances.nix
     ./homepage.nix
     ./minecraft.nix
-    ./miniflux.nix
     ./navidrome
     ./prometheus.nix
     ./restic.nix

hosts/hopper/profiles/lab/homepage.nix

@@ -79,12 +79,6 @@ in {
               icon = "vaultwarden";
             };
           }
-          {
-            "miniflux" = {
-              href = "https://rss.${domain}";
-              icon = "miniflux";
-            };
-          }
         ];
       }
     ];

hosts/hopper/profiles/lab/miniflux.nix

@@ -1,14 +0,0 @@
-{
-  vars,
-  config,
-  ...
-}: {
-  services.miniflux = {
-    enable = true;
-    adminCredentialsFile = config.sops.secrets.miniflux.path;
-    config = {
-      BASE_URL = "https://miniflux.${vars.domain}";
-      LISTEN_ADDR = "${config.vpnNamespaces."wg".bridgeAddress}:18632";
-    };
-  };
-}

hosts/hopper/profiles/lab/vpn-namespace.nix

@@ -11,7 +11,6 @@
       config.services.audiobookshelf.port
       config.services.navidrome.settings.Port
       config.services.glances.port
-      18632
     ];
   in {
     extraCommands = builtins.concatStringsSep "\n" (map

hosts/hopper/profiles/persistent.nix

@@ -8,7 +8,6 @@
       "/var/log"
       "/var/lib/nixos"
       "/var/lib/bluetooth"
-      "/var/lib/postgresql"
     ];
     files = [
       "/etc/machine-id"

hosts/nixdesk/default.nix

@@ -65,7 +65,6 @@
       programs.home-manager
       # programs.qt
       programs.adb
-      programs.gpg
       programs.openrgb
       programs.tools
       programs.thunar

hosts/nixdesk/home.nix

@@ -6,64 +6,63 @@
   homeProfiles,
   ...
 }: {
-  imports = with homeProfiles; [
+  imports = map (x: homeProfiles + x) [
-    cli.zsh
+    /cli/zsh.nix
-    cli.fish
+    /cli/fish.nix
 
-    cli.xdg
+    /cli/xdg.nix
-    cli.direnv
+    /cli/direnv.nix
-    cli.tmux
+    /cli/tmux.nix
-    cli.comma
+    /cli/comma.nix
-    cli.irssi
+    /cli/irssi.nix
-    cli.gpg
+    /cli/git.nix
-    cli.git
+    /cli/github.nix
-    cli.github
+    /cli/jujutsu.nix
-    cli.jujutsu
 
-    programs.nvim
+    /programs/nvim.nix
 
-    programs.firefox.default
+    /programs/firefox/default.nix
-    programs.tor
+    /programs/tor.nix
-    programs.chromium
+    /programs/chromium.nix
 
-    programs.foot
+    /programs/foot.nix
 
-    themes.dark.default
+    /themes/dark/default.nix
 
     # desktop
-    desktop.xdg-portals
+    /desktop/xdg-portals.nix
-    desktop.sway.default
+    /desktop/sway/default.nix
 
     # development
-    develop.common
+    /develop/common.nix
-    develop.docs
+    /develop/docs.nix
 
-    develop.langs.haskell
+    /develop/langs/haskell.nix
-    develop.langs.go
+    /develop/langs/go.nix
-    develop.langs.js
+    /develop/langs/js.nix
-    develop.langs.rust
+    /develop/langs/rust.nix
-    develop.langs.elixir
+    /develop/langs/elixir.nix
-    develop.langs.nix
+    /develop/langs/nix.nix
-    develop.langs.zig
+    /develop/langs/zig.nix
-    develop.langs.lua
+    /develop/langs/lua.nix
-    develop.langs.c
+    /develop/langs/c.nix
-    develop.langs.csharp
+    /develop/langs/csharp.nix
 
     # programs
-    programs.discord
+    /programs/discord.nix
-    programs.obs
+    /programs/obs.nix
 
-    programs.beets
+    /programs/beets.nix
-    programs.cmus
+    /programs/cmus.nix
 
-    programs.mpv
+    /programs/mpv.nix
 
     # gaming
-    programs.mangohud
+    /programs/mangohud.nix
-    programs.jc141
+    /programs/jc141.nix
 
-    services.playerctl
+    /services/playerctl.nix
-    services.polkit-agent
+    /services/polkit-agent.nix
   ];
 
   wayland.windowManager.sway.extraConfig = ''

sys/profiles/programs/gpg.nix

@@ -1,5 +0,0 @@
-{
-  programs.gnupg.agent = {
-    enable = true;
-  };
-}