Merge branch 'main' into b12f

.git-blame-ignore-revs

@@ -0,0 +1,2 @@
+# Formatted code using treefmt and alejandra
+73bf158392a427d188b7aad36244b94506f57a15

CHANGELOG.md

@@ -109,6 +109,4 @@
 
 ## [07092020](https://github.com/divnix/devos/tree/07092020) (2020-07-09)
 
-
+\* _This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)_
-
-\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)*

README.md

@@ -10,36 +10,36 @@ At its core, it's a NixOS installation running our configuration. The UX
 decisions and the way the project is structured are what make it
 _PubSolarOS_:
 
-* Reproducibility is king, and the future is with declarative and functional
+- Reproducibility is king, and the future is with declarative and functional
   programming. Even if Nix does not turn out to be the end-all-be-all of
   reproducible package management (Guix looks good), it has a plethora
   of packages, a very active and helpful community, and very solid
   software engineering practices.
-* Because reproducibility is king, we're using nix flakes for locking flake
+- Because reproducibility is king, we're using nix flakes for locking flake
   dependencies. [Digga](https://github.com/divnix/digga) is our flake
   utility library, made by the wonderful people of the Divnix community.
-* Physical devices are not shared anymore nowadays. Only seldomly will you
+- Physical devices are not shared anymore nowadays. Only seldomly will you
   find shared devices that need more than one user account. For this
   reason, only one user (excluding `root`) is assumed.
-* Keyboard navigation wins where it matters; ergonomics, programmability,
+- Keyboard navigation wins where it matters; ergonomics, programmability,
   efficiency, and speed. We use a tiling window manager (`sway`) and
   prioritize cli-based solutions where sensible. The editor is `neovim`
   configured to be just as opiniated as the operating system it is a part
   of. For mailing, `neomutt` is the default, but we're more divided on
   that part.
-* We like new and shiny things, so we've moved to Wayland and pipewire.
+- We like new and shiny things, so we've moved to Wayland and pipewire.
-* SICHERHEIT is written in capital letters at pub.solar, so we have first-
+- SICHERHEIT is written in capital letters at pub.solar, so we have first-
   class disk-encryption support. Currently in the works is a paranoid
   mode where the device can only hibernate (no more sleep or lockscreen)
   so your data is locked any time you leave the device.
-* Free software is better. If we can avoid it, nonfree software is avoided.
+- Free software is better. If we can avoid it, nonfree software is avoided.
   By default, `allowUnfree` is `false` so we don't ship non-free software
   in a basic PubSolarOS ISO. However, nothing prevents you from using
   as much non-free software as you like.
-* Automation is better. The reproducibility of nix feels so much more
+- Automation is better. The reproducibility of nix feels so much more
   powerful once you're deploying your new configuration from your laptop
   to all your other devices with one command. [We have an automated CI using drone](https://ci.b12f.io/pub-solar/os).
-* Community is important. We just like working on this together, and it
+- Community is important. We just like working on this together, and it
   feels really good to see our progress at the end of a
   [hakken.irl](https://pub.solar/hakken) session.
 

default.nix

@@ -9,17 +9,22 @@ let
     "x86_64-linux"
   ];
 
-  filterSystems = lib.filterAttrs
+  filterSystems =
+    lib.filterAttrs
     (system: _: lib.elem system ciSystems);
 
-  recurseIntoAttrsRecursive = lib.mapAttrs (_: v:
+  recurseIntoAttrsRecursive = lib.mapAttrs (
+    _: v:
       if lib.isAttrs v
       then recurseIntoAttrsRecursive (lib.recurseIntoAttrs v)
       else v
   );
 
-  systemOutputs = lib.filterAttrs
+  systemOutputs =
-    (name: set: lib.isAttrs set
+    lib.filterAttrs
+    (
+      name: set:
+        lib.isAttrs set
         && lib.any
         (system: set ? ${system} && name != "legacyPackages")
         ciSystems
@@ -28,4 +33,4 @@ let
 
   ciDrvs = lib.mapAttrs (_: system: filterSystems system) systemOutputs;
 in
-(recurseIntoAttrsRecursive ciDrvs) // { shell = import ./shell.nix; }
+  (recurseIntoAttrsRecursive ciDrvs) // {shell = import ./shell.nix;}

doc/CONTRIBUTING.md

@@ -1,4 +1,5 @@
 # TL;DR;
+
 - **Target Branch**: `main`
 - **Merge Policy**: green check: merge away. yellow circle: have patience. red x: try again.
 - **Docs**: every change set is expected to contain doc updates
@@ -9,5 +10,6 @@
   make use of the `./examples` & `./e2e` and wire test up in the devshell.
 
 ### Within the Devshell (`nix develop`)
+
 - **Hooks**: please `git commit` within the devshell
 - **Fail Early**: please run `check-all` from within the devshell on your local machine

doc/SUMMARY.md

@@ -28,4 +28,3 @@
   - [NixOS](./api-reference-nixos.md)
 - [Library Reference]()
 - [Contributing](./CONTRIBUTING.md)
-

doc/api-reference-channels.md

@@ -1,91 +1,76 @@
 # Channels API Container
+
 Configure your channels that you can use throughout your configurations.
 
 > #### ⚠ Gotcha ⚠
+>
 > Devshell & (non-host-specific) Home-Manager `pkgs` instances are rendered off the
 > `nixos.hostDefaults.channelName` (default) channel.
 
-
 ## channels
+
 nixpkgs channels to create
 
-
+_*Type*_:
-*_Type_*:
 attribute set of submodules or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## channels.\<name\>.config
+
 nixpkgs config for this channel
 
-
+_*Type*_:
-*_Type_*:
 attribute set or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## channels.\<name\>.input
+
 nixpkgs flake input to use for this channel
 
-
+_*Type*_:
-*_Type_*:
 nix flake
 
+_*Default*_
 
-*_Default_*
 ```
 "self.inputs.<name>"
 ```
 
-
-
-
 ## channels.\<name\>.overlays
+
 overlays to apply to this channel
 these will get exported under the 'overlays' flake output
 as \<channel\>/\<name\> and any overlay pulled from \<inputs\>
 will be filtered out
 
-
+_*Type*_:
-*_Type_*:
 list of valid Nixpkgs overlay or path convertible to its or anything convertible to it or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## channels.\<name\>.patches
+
 patches to apply to this channel
 
-
+_*Type*_:
-*_Type_*:
 list of paths
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
-
-
-
-

doc/api-reference-devshell.md

@@ -1,72 +1,59 @@
 # Devshell API Container
+
 Configure your devshell module collections of your environment.
 
-
 ## devshell
+
 Modules to include in your DevOS shell. the `modules` argument
 will be exported under the `devshellModules` output
 
-
+_*Type*_:
-*_Type_*:
 submodule or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## devshell.exportedModules
+
 modules to include in all hosts and export to devshellModules output
 
-
+_*Type*_:
-*_Type_*:
 list of valid module or path convertible to its or anything convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## devshell.externalModules
+
 The `externalModules` option has been removed.
 Any modules that should be exported should be defined with the `exportedModules`
 option and all other modules should just go into the `modules` option.
 
-
+_*Type*_:
-*_Type_*:
 list of valid modules or anything convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## devshell.modules
+
 modules to include that won't be exported
 meant importing modules from external flakes
 
-
+_*Type*_:
-*_Type_*:
 list of valid modules or anything convertible to it or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
-
-
-
-

doc/api-reference-home.md

@@ -1,119 +1,97 @@
 # Home-Manager API Container
+
 Configure your home manager modules, profiles & suites.
 
-
 ## home
+
 hosts, modules, suites, and profiles for home-manager
 
-
+_*Type*_:
-*_Type_*:
 submodule or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## home.exportedModules
+
 modules to include in all hosts and export to homeModules output
 
-
+_*Type*_:
-*_Type_*:
 list of valid modules or anything convertible to it or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## home.externalModules
+
 The `externalModules` option has been removed.
 Any modules that should be exported should be defined with the `exportedModules`
 option and all other modules should just go into the `modules` option.
 
-
+_*Type*_:
-*_Type_*:
 list of valid modules or anything convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## home.importables
+
 Packages of paths to be passed to modules as `specialArgs`.
 
-
+_*Type*_:
-*_Type_*:
 attribute set
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## home.importables.suites
+
 collections of profiles
 
-
+_*Type*_:
-*_Type_*:
 null or attribute set of list of paths or anything convertible to its or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 null
 ```
 
-
-
-
 ## home.modules
+
 modules to include that won't be exported
 meant importing modules from external flakes
 
-
+_*Type*_:
-*_Type_*:
 list of valid modules or anything convertible to it or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## home.users
+
 HM users that can be deployed portably without a host.
 
-
+_*Type*_:
-*_Type_*:
 attribute set of HM user configs
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
-
-
-
-

doc/api-reference-nixos.md

@@ -1,234 +1,191 @@
 # NixOS API Container
+
 Configure your nixos modules, profiles & suites.
 
-
 ## nixos
+
 hosts, modules, suites, and profiles for NixOS
 
-
+_*Type*_:
-*_Type_*:
 submodule or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## nixos.hostDefaults
+
 Defaults for all hosts.
 the modules passed under hostDefaults will be exported
 to the 'nixosModules' flake output.
 They will also be added to all hosts.
 
-
+_*Type*_:
-*_Type_*:
 submodule
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## nixos.hostDefaults.channelName
+
 Channel this host should follow
 
-
+_*Type*_:
-*_Type_*:
 channel defined in `channels`
 
-
-
-
-
-
 ## nixos.hostDefaults.exportedModules
+
 modules to include in all hosts and export to nixosModules output
 
-
+_*Type*_:
-*_Type_*:
 list of valid modules or anything convertible to it or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## nixos.hostDefaults.externalModules
+
 The `externalModules` option has been removed.
 Any modules that should be exported should be defined with the `exportedModules`
 option and all other modules should just go into the `modules` option.
 
-
+_*Type*_:
-*_Type_*:
 list of valid modules or anything convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## nixos.hostDefaults.modules
+
 modules to include that won't be exported
 meant importing modules from external flakes
 
-
+_*Type*_:
-*_Type_*:
 list of valid modules or anything convertible to it or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## nixos.hostDefaults.system
+
 system for this host
 
-
+_*Type*_:
-*_Type_*:
 null or system defined in `supportedSystems`
 
+_*Default*_
 
-*_Default_*
 ```
 null
 ```
 
-
-
-
 ## nixos.hosts
+
 configurations to include in the nixosConfigurations output
 
-
+_*Type*_:
-*_Type_*:
 attribute set of submodules
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## nixos.hosts.\<name\>.channelName
+
 Channel this host should follow
 
-
+_*Type*_:
-*_Type_*:
 null or channel defined in `channels`
 
+_*Default*_
 
-*_Default_*
 ```
 null
 ```
 
-
-
-
 ## nixos.hosts.\<name\>.modules
+
 modules to include
 
-
+_*Type*_:
-*_Type_*:
 list of valid modules or anything convertible to it or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
-
-
-
 ## nixos.hosts.\<name\>.system
+
 system for this host
 
-
+_*Type*_:
-*_Type_*:
 null or system defined in `supportedSystems`
 
+_*Default*_
 
-*_Default_*
 ```
 null
 ```
 
-
-
-
 ## nixos.hosts.\<name\>.tests
+
 tests to run
 
-
+_*Type*_:
-*_Type_*:
 list of valid NixOS test or path convertible to its or anything convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 []
 ```
 
+_*Example*_
 
-*_Example_*
 ```
 {"_type":"literalExpression","text":"[\n  {\n    name = \"testname1\";\n    machine = { ... };\n    testScript = ''\n      # ...\n    '';\n  }\n  ({ corutils, writers, ... }: {\n    name = \"testname2\";\n    machine = { ... };\n    testScript = ''\n      # ...\n    '';\n  })\n  ./path/to/test.nix\n];\n"}
 ```
 
-
 ## nixos.importables
+
 Packages of paths to be passed to modules as `specialArgs`.
 
-
+_*Type*_:
-*_Type_*:
 attribute set
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## nixos.importables.suites
+
 collections of profiles
 
-
+_*Type*_:
-*_Type_*:
 null or attribute set of list of paths or anything convertible to its or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 null
 ```
-
-
-
-

doc/api-reference.md

@@ -1,4 +1,5 @@
 # Top Level API
+
 `digga`'s top level API. API Containers are documented in their respective sub-chapter:
 
 - [Channels](./api-reference-channels.md)
@@ -8,73 +9,55 @@
 - [Darwin](./api-reference-darwin.md)
 
 ## channelsConfig
+
 nixpkgs config for all channels
 
-
+_*Type*_:
-*_Type_*:
 attribute set or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 {}
 ```
 
-
-
-
 ## inputs
+
 The flake's inputs
 
-*_Type_*:
+_*Type*_:
 attribute set of nix flakes
 
-
-
-
-
-
 ## outputsBuilder
+
 builder for flake system-spaced outputs
 The builder gets passed an attrset of all channels
 
-
+_*Type*_:
-*_Type_*:
 function that evaluates to a(n) attribute set or path convertible to it
 
+_*Default*_
 
-*_Default_*
 ```
 "channels: { }"
 ```
 
-
-
-
 ## self
+
 The flake to create the DevOS outputs for
 
-*_Type_*:
+_*Type*_:
 nix flake
 
-
-
-
-
-
 ## supportedSystems
+
 The systems supported by this flake
 
-
+_*Type*_:
-*_Type_*:
 list of strings
 
+_*Default*_
 
-*_Default_*
 ```
 ["aarch64-linux","aarch64-darwin","i686-linux","x86_64-darwin","x86_64-linux"]
 ```
-
-
-
-

doc/concepts/hosts.md

@@ -28,10 +28,10 @@ is best saved for [profile modules](./profiles.md).
 This is a good place to import sets of profiles, called [suites](./suites.md),
 that you intend to use on your machine.
 
-
 ## Example
 
 flake.nix:
+
 ```nix
 {
   nixos = {
@@ -47,6 +47,7 @@ flake.nix:
 ```
 
 hosts/librem.nix:
+
 ```nix
 { suites, ... }:
 {

doc/concepts/overrides.md

@@ -1,8 +1,10 @@
 # Overrides
+
 Each NixOS host follows one channel. But many times it is useful to get packages
 or modules from different channels.
 
 ## Packages
+
 You can make use of `overlays/overrides.nix` to override specific packages in the
 default channel to be pulled from other channels. That file is simply an example
 of how any overlay can get `channels` as their first argument.
@@ -10,6 +12,7 @@ of how any overlay can get `channels` as their first argument.
 You can add overlays to any channel to override packages from other channels.
 
 Pulling the manix package from the `latest` channel:
+
 ```nix
 channels: final: prev: {
   __dontExport = true;
@@ -28,6 +31,7 @@ You can also pull modules from other channels. All modules have access to the
 `disabledModules` to remove modules from the current channel.
 
 To pull zsh module from the `latest` channel this code can be placed in any module, whether its your host file, a profile, or a module in ./modules etc:
+
 ```nix
 { latestModulesPath }:
 {
@@ -37,6 +41,7 @@ To pull zsh module from the `latest` channel this code can be placed in any modu
 ```
 
 > ##### _Note:_
+>
 > Sometimes a modules name will change from one branch to another.
 
 [nixpkgs-modules]: https://github.com/NixOS/nixpkgs/tree/master/nixos/modules

doc/concepts/profiles.md

@@ -6,6 +6,7 @@ built into the NixOS module system for a reason: to elegantly provide a clear
 separation of concerns.
 
 ## Creation
+
 Profiles are created with the `rakeLeaves` function which recursively collects
 `.nix` files from within a folder. The recursion stops at folders with a `default.nix`
 in them. You end up with an attribute set with leaves(paths to profiles) or
@@ -14,12 +15,14 @@ nodes(attrsets leading to more nodes or leaves).
 A profile is used for quick modularization of [interelated bits](./profiles.md#subprofiles).
 
 > ##### _Notes:_
-> * For _declaring_ module options, there's the [modules](../outputs/modules.md) directory.
+>
-> * This directory takes inspiration from
+> - For _declaring_ module options, there's the [modules](../outputs/modules.md) directory.
+> - This directory takes inspiration from
 >   [upstream](https://github.com/NixOS/nixpkgs/tree/master/nixos/modules/profiles)
 >   .
 
 ### Nested profiles
+
 Profiles can be nested in attribute sets due to the recursive nature of `rakeLeaves`.
 This can be useful to have a set of profiles created for a specific purpose. It is
 sometimes useful to have a `common` profile that has high level concerns related
@@ -28,6 +31,7 @@ to all its sister profiles.
 ### Example
 
 profiles/develop/common.nix:
+
 ```nix
 {
   imports = [ ./zsh ];
@@ -36,6 +40,7 @@ profiles/develop/common.nix:
 ```
 
 profiles/develop/zsh.nix:
+
 ```nix
 {  ... }:
 {
@@ -45,6 +50,7 @@ profiles/develop/zsh.nix:
 ```
 
 The examples above will end up with a profiles set like this:
+
 ```nix
 {
   develop = {
@@ -55,6 +61,7 @@ The examples above will end up with a profiles set like this:
 ```
 
 ## Conclusion
+
 Profiles are the most important concept in DevOS. They allow us to keep our
 Nix expressions self contained and modular. This way we can maximize reuse
 across hosts while minimizing boilerplate. Remember, anything machine

doc/concepts/suites.md

@@ -1,4 +1,5 @@
 # Suites
+
 Suites provide a mechanism for users to easily combine and name collections of
 profiles.
 
@@ -8,6 +9,7 @@ argument (one that can be use in an `imports` line) to your hosts. All lists def
 in `suites` are flattened and type-checked as paths.
 
 ## Definition
+
 ```nix
 rec {
   workstation = [ profiles.develop profiles.graphical users.nixos ];
@@ -16,7 +18,9 @@ rec {
 ```
 
 ## Usage
+
 `hosts/my-laptop.nix`:
+
 ```nix
 { suites, ... }:
 {

doc/concepts/users.md

@@ -1,4 +1,5 @@
 > ##### _Note:_
+>
 > This section and its semantics need a conceptiual rework.
 > Since recently [portable home configurations][portableuser]
 > that are not bound to any specific host are a thing.
@@ -12,7 +13,9 @@ your users. For a fully fleshed out example, check out the developers personal
 [branch](https://github.com/divnix/devos/tree/nrd/users/nrd/default.nix).
 
 ## Basic Usage
+
 `users/myuser/default.nix`:
+
 ```nix
 { ... }:
 {
@@ -28,6 +31,7 @@ your users. For a fully fleshed out example, check out the developers personal
 ```
 
 ## Home Manager
+
 Home Manager support follows the same principles as regular nixos configurations,
 it even gets its own namespace in your `flake.nix` as `home`.
 
@@ -37,7 +41,9 @@ User profiles can be collected in a similar fashion as system ones into a `suite
 argument that gets passed to your home-manager users.
 
 ### Example
+
 `flake.nix`
+
 ```nix
 {
   home.users.nixos = { suites, ... }: {
@@ -46,8 +52,8 @@ argument that gets passed to your home-manager users.
 }
 ```
 
-
 ## External Usage
+
 You can easily use the defined home-manager configurations outside of NixOS
 using the `homeConfigurations` flake output.
 
@@ -55,6 +61,7 @@ This is great for keeping your environment consistent across Unix-like systems,
 including macOS.
 
 ### From within the projects devshell:
+
 ```sh
 # builds the pub-solar user defined in the PubSolarOS host
 nix build '.#homeConfigurations."pub-solar@PubSolarOS".activationPackage'
@@ -64,6 +71,7 @@ nix build '.#homeConfigurations."pub-solar@PubSolarOS".activationPackage' && ./r
 ```
 
 ### Manually from outside the project:
+
 ```sh
 # build
 nix build "github:divnix/devos#homeConfigurations.nixos@NixOS.home.activationPackage"

doc/integrations/cachix.md

@@ -1,4 +1,5 @@
 # Cachix
+
 The system will automatically pull a cachix.nix at the root if one exists.
 This is usually created automatically by a `sudo cachix use`. If you're more
 inclined to keep the root clean, you can drop any generated files in the

doc/integrations/deploy.md

@@ -1,4 +1,5 @@
 # deploy-rs
+
 [Deploy-rs][d-rs] is a tool for managing NixOS remote machines. It was
 chosen for devos after the author experienced some frustrations with the
 stateful nature of nixops' db. It was also designed from scratch to support
@@ -11,6 +12,7 @@ the command line.
 ## Usage
 
 Just add your ssh key to the host:
+
 ```nix
 { ... }:
 {
@@ -21,6 +23,7 @@ Just add your ssh key to the host:
 ```
 
 And the private key to your user:
+
 ```nix
 { ... }:
 {
@@ -39,16 +42,20 @@ And the private key to your user:
 ```
 
 And run the deployment:
+
 ```sh
 deploy '.#hostName' --hostname host.example.com
 ```
 
 > ##### _Note:_
+>
 > Your user will need **passwordless** sudo access
+
 ### Home Manager
 
 Digga's `lib.mkDeployNodes` provides only `system` profile.
 In order to deploy your `home-manager` configuration you should provide additional profile(s) to deploy-rs config:
+
 ```nix
 # Initially, this line looks like this: deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations { };
 deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations
@@ -72,5 +79,4 @@ Substitute `<HOSTNAME>`, `<HM_PROFILE>` and `<YOUR_USERNAME>` placeholders (omit
 `<ANOTHER_HM_PROFILE>` is there to illustrate deploying multiple `home-manager` configurations. Either substitute those as well,
 or remove them altogether. Don't forget the `profileOrder` variable.
 
-
 [d-rs]: https://github.com/serokell/deploy-rs

doc/integrations/hercules.md

@@ -1,4 +1,5 @@
 # Hercules CI
+
 If you start adding your own packages and configurations, you'll probably have
 at least a few binary artifacts. With hercules we can build every package in
 our configuration automatically, on every commit. Additionally, we can have it
@@ -8,6 +9,7 @@ This will work whether your copy is a fork, or a bare template, as long as your
 repo is hosted on GitHub.
 
 ## Setup
+
 Just head over to [hercules-ci.com](https://hercules-ci.com) to make an account.
 
 Then follow the docs to set up an [agent][agent], if you want to deploy to a
@@ -15,6 +17,7 @@ binary cache (and of course you do), be sure _not_ to skip the
 [binary-caches.json][cache].
 
 ## Ready to Use
+
 The repo is already set up with the proper _default.nix_ file, building all
 declared packages, checks, profiles and shells. So you can see if something
 breaks, and never build the same package twice!
@@ -23,6 +26,7 @@ If you want to get fancy, you could even have hercules
 [deploy your configuration](https://docs.hercules-ci.com/hercules-ci-effects/guide/deploy-a-nixos-machine/)!
 
 > ##### _Note:_
+>
 > Hercules doesn't have access to anything encrypted in the
 > [secrets folder](../../secrets), so none of your secrets will accidentally get
 > pushed to a cache by mistake.

doc/integrations/index.md

@@ -1,4 +1,5 @@
 # Integrations
+
 This section explores some of the optional tools included with devos to provide
 a solution to common concerns such as ci and remote deployment. An effort is
 made to choose tools that treat nix, and where possible flakes, as first class

doc/integrations/nvfetcher.md

@@ -1,4 +1,5 @@
 # nvfetcher
+
 [NvFetcher][nvf] is a workflow companion for updating nix sources.
 
 You can specify an origin source and an update configuration, and
@@ -15,6 +16,7 @@ and commit the results.
 ## Usage
 
 Statically fetching (not tracking) a particular tag from a github repo:
+
 ```toml
 [manix]
 src.manual = "v0.6.3"
@@ -22,6 +24,7 @@ fetch.github = "mlvzk/manix"
 ```
 
 Tracking the latest github _release_ from a github repo:
+
 ```toml
 [manix]
 src.github = "mlvzk/manix" # responsible for tracking
@@ -29,6 +32,7 @@ fetch.github = "mlvzk/manix" # responsible for fetching
 ```
 
 Tracking the latest commit of a git repository and fetch from a git repo:
+
 ```toml
 [manix]
 src.git = "https://github.com/mlvzk/manix.git" # responsible for tracking
@@ -36,6 +40,7 @@ fetch.git = "https://github.com/mlvzk/manix.git" # responsible for fetching
 ```
 
 > ##### _Note:_
+>
 > Please refer to the [NvFetcher Readme][nvf-readme] for more options.
 
 [nvf]: https://github.com/berberman/nvfetcher

doc/outputs/index.md

@@ -1,3 +1,4 @@
 # Layout
+
 Each of the following sections is a directory whose contents are output to the
 outside world via the flake's outputs. Check each chapter for details.

doc/outputs/modules.md

@@ -1,4 +1,5 @@
 # Modules
+
 The modules directory is a replica of nixpkg's NixOS [modules][nixpkgs-modules]
 , and follows the same semantics. This allows for trivial upstreaming into
 nixpkgs proper once your module is sufficiently stable.
@@ -6,18 +7,21 @@ nixpkgs proper once your module is sufficiently stable.
 All modules linked in _module-list.nix_ are automatically exported via
 `nixosModules.<file-basename>`, and imported into all [hosts](../concepts/hosts.md).
 
-
 > ##### _Note:_
+>
 > This is reserved for declaring brand new module options. If you just want to
 > declare a coherent configuration of already existing and related NixOS options
 > , use [profiles](../concepts/profiles.md) instead.
 
 ## Semantics
+
 In case you've never written a module for nixpkgs before, here is a brief
 outline of the process.
 
 ### Declaration
+
 modules/services/service-category/my-service.nix:
+
 ```nix
 { config, lib, ... }:
 let
@@ -37,7 +41,9 @@ in
 ```
 
 ### Import
+
 modules/module-list.nix:
+
 ```nix
 [
   ./services/service-category/my-service.nix
@@ -47,7 +53,9 @@ modules/module-list.nix:
 ## Usage
 
 ### Internal
+
 profiles/profile-category/my-profile.nix:
+
 ```nix
 { ... }:
 {
@@ -56,7 +64,9 @@ profiles/profile-category/my-profile.nix:
 ```
 
 ### External
+
 flake.nix:
+
 ```nix
 {
   # inputs omitted

doc/outputs/overlays.md

@@ -1,4 +1,5 @@
 # Overlays
+
 Writing overlays is a common occurence when using a NixOS system. Therefore,
 we want to keep the process as simple and straightforward as possible.
 
@@ -9,7 +10,9 @@ exported via `overlays.<channel>/<pkgName>` _as well as_
 write it.
 
 ## Example
+
 overlays/kakoune.nix:
+
 ```nix
 final: prev: {
   kakoune = prev.kakoune.override {

doc/outputs/pkgs.md

@@ -1,4 +1,5 @@
 # Packages
+
 Similar to [modules](./modules.md), the pkgs directory mirrors the upstream
 [nixpkgs/pkgs][pkgs], and for the same reason; if you ever want to upstream
 your package, it's as simple as dropping it into the nixpkgs/pkgs directory.
@@ -19,20 +20,24 @@ date.
 This is best understood by the simple example below.
 
 ## Example
+
 It is possible to specify sources separately to keep them up to date semi
 automatically.
 The basic rules are specified in pkgs/sources.toml:
+
 ```toml
 # nvfetcher.toml
 [libinih]
 src.github = "benhoyt/inih"
 fetch.github = "benhoyt/inih"
 ```
+
 After changes to this file as well as to update the packages specified in there run
 nvfetcher (for more details see [nvfetcher](https://github.com/berberman/nvfetcher)).
 
 The pkgs overlay is managed in
 pkgs/default.nix:
+
 ```nix
 final: prev: {
   # keep sources first, this makes sources available to the pkgs
@@ -45,6 +50,7 @@ final: prev: {
 
 Lastly the example package is in
 pkgs/development/libraries/libinih/default.nix:
+
 ```nix
 { stdenv, meson, ninja, lib, sources, ... }:
 stdenv.mkDerivation {
@@ -59,8 +65,8 @@ stdenv.mkDerivation {
 }
 ```
 
-
 ## Migration from flake based approach
+
 Previous to nvfetcher it was possible to manage sources via a pkgs/flake.nix, the main changes from there are that sources where in the attribute "srcs" (now "sources") and the contents of the sources where slightly different.
 In order to switch to the new system, rewrite pkgs/flake.nix to a pkgs/sources.toml file using the documentation of nvfetcher,
 add the line that calls the sources at the beginning of pkgs/default.nix, and
@@ -69,6 +75,7 @@ accomodate the small changes in the packages as can be seen from the example.
 The example package looked like:
 
 pkgs/flake.nix:
+
 ```nix
 {
   description = "Package sources";
@@ -81,6 +88,7 @@ pkgs/flake.nix:
 ```
 
 pkgs/default.nix:
+
 ```nix
 final: prev: {
   # then, call packages with `final.callPackage`
@@ -89,6 +97,7 @@ final: prev: {
 ```
 
 pkgs/development/libraries/libinih/default.nix:
+
 ```nix
 { stdenv, meson, ninja, lib, srcs, ... }:
 let inherit (srcs) libinih; in

doc/secrets.md

@@ -1,9 +1,11 @@
 # Secrets
+
 Secrets are managed using [agenix][agenix]
 so you can keep your flake in a public repository like GitHub without
 exposing your password or other sensitive data.
 
 ## Agenix
+
 Currently, there is [no mechanism][secrets-issue] in nix itself to deploy secrets
 within the nix store because it is world-readable.
 
@@ -17,6 +19,7 @@ matching ssh private key can read the data. The [age module][age module] will ad
 encrypted files to the nix store and decrypt them on activation to `/run/agenix`.
 
 ### Setup
+
 All hosts must have openssh enabled, this is done by default in the core profile.
 
 You need to populate your `secrets/secrets.nix` with the proper ssh public keys.
@@ -24,6 +27,7 @@ Be extra careful to make sure you only add public keys, you should never share a
 private key!!
 
 secrets/secrets.nix:
+
 ```nix
 let
   system = "<system ssh key>";
@@ -37,22 +41,25 @@ this file doesn't exist you likely need to enable openssh and rebuild your syste
 
 Your users ssh public key is probably stored in `~/.ssh/id_ed25519.pub` or
 `~/.ssh/id_rsa.pub`. If you haven't generated a ssh key yet, be sure do so:
+
 ```sh
 ssh-keygen -t ed25519
 ```
 
 > ##### _Note:_
+>
 > The underlying tool used by agenix, rage, doesn't work well with password protected
 > ssh keys. So if you have lots of secrets you might have to type in your password many
 > times.
 
-
 ### Secrets
+
 You will need the `agenix` command to create secrets. DevOS conveniently provides that
 in the devShell, so just run `nix develop` whenever you want to edit secrets. Make sure
 to always run `agenix` while in the `secrets/` folder, so it can pick up your `secrets.nix`.
 
 To create secrets, simply add lines to your `secrets/secrets.nix`:
+
 ```
 let
   ...
@@ -62,21 +69,26 @@ in
   "secret.age".publicKeys = allKeys;
 }
 ```
+
 That would tell agenix to create a `secret.age` file that is encrypted with the `system`
 and `user` ssh public key.
 
 Then go into the `secrets` folder and run:
+
 ```sh
 agenix -e secret.age
 ```
+
 This will create the `secret.age`, if it doesn't already exist, and allow you to edit it.
 
 If you ever change the `publicKeys` entry of any secret make sure to rekey the secrets:
+
 ```sh
 agenix --rekey
 ```
 
 ### Usage
+
 Once you have your secret file encrypted and ready to use, you can utilize the [age module][age module]
 to ensure that your secrets end up in `/run/secrets`.
 
@@ -89,15 +101,14 @@ In any profile that uses a NixOS module that requires a secret you can enable a
 }
 ```
 
-
 Then you can just pass the path `/run/agenix/mysecret` to the module.
 
 You can make use of the many options provided by the age module to customize where and how
 secrets get decrypted. You can learn about them by looking at the
 [age module][age module].
 
-
 > ##### _Note:_
+>
 > You can take a look at the [agenix repository][agenix] for more information
 > about the tool.
 

doc/start/index.md

@@ -1,18 +1,24 @@
 # Quick Start
+
 The only dependency is nix, so make sure you have it [installed][install-nix].
 
 ## Get the Template
+
 If you currently don't have flakes setup, you can utilize the digga shell to pull the template:
+
 ```sh
 nix-shell "https://github.com/divnix/digga/archive/main.tar.gz" \
   --run "nix flake init -t github:divnix/digga"
 ```
+
 If you already have flakes support, you can directly pull the template:
+
 ```sh
 nix flake init -t github:divnix/digga
 ```
 
 Then make sure to create the git repository:
+
 ```sh
 git init
 git add .
@@ -20,11 +26,14 @@ git commit -m init
 ```
 
 To drop into a nix-shell, if you don't have flakes setup, use the digga shell to create a `flake.lock`:
+
 ```sh
 nix-shell "https://github.com/divnix/digga/archive/main.tar.gz" \
   --run "nix flake lock"
 ```
+
 Or if you do have flakes support, just run:
+
 ```sh
 nix flake lock
 ```
@@ -35,6 +44,7 @@ version required. You can run `menu` to confirm that you are using digga (expect
 In addition, the [binary cache](../integrations/cachix.md) is added for faster deployment.
 
 > ##### _Notes:_
+>
 > - Flakes ignore files that have not been added to git, so be sure to stage new
 >   files before building the system.
 > - You can choose to simply clone the repo with git if you want to follow
@@ -46,5 +56,4 @@ In addition, the [binary cache](../integrations/cachix.md) is added for faster d
 
 - [Make installable ISO](./iso.md)
 
-
 [install-nix]: https://nixos.org/manual/nix/stable/#sect-multi-user-installation

doc/tests.md

@@ -6,12 +6,14 @@ configuration, and, optionally, run them in
 [CI](./integrations/hercules.md).
 
 ## Unit Tests
+
 Unit tests can be created from regular derivations, and they can do
 almost anything you can imagine. By convention, it is best to test your
 packages during their [check phase][check]. All packages and their tests will
 be built during CI.
 
 ## Integration Tests
+
 All your profiles defined in suites will be tested in a NixOS VM.
 
 You can write integration tests for one or more NixOS VMs that can,

flake.lock

@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1665870395,
+        "lastModified": 1673301561,
-        "narHash": "sha256-Tsbqb27LDNxOoPLh0gw2hIb6L/6Ow/6lIBvqcHzEKBI=",
+        "narHash": "sha256-gRUWHbBAtMuPDJQXotoI8u6+3DGBIUZHkyQWpIv7WpM=",
         "owner": "ryantm",
         "repo": "agenix",
-        "rev": "a630400067c6d03c9b3e0455347dc8559db14288",
+        "rev": "42d371d861a227149dc9a7e03350c9ab8b8ddd68",
         "type": "github"
       },
       "original": {
@@ -42,11 +42,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1671891118,
+        "lastModified": 1673295039,
-        "narHash": "sha256-+GJYiT7QbfA306ex4sGMlFB8Ts297pn3OdQ9kTd4aDw=",
+        "narHash": "sha256-AsdYgE8/GPwcelGgrntlijMg4t3hLFJFCRF3tL5WVjA=",
         "owner": "LnL7",
         "repo": "nix-darwin",
-        "rev": "267040e7a2b8644f1fdfcf57b7e808c286dbdc7b",
+        "rev": "87b9d090ad39b25b2400029c64825fc2a8868943",
         "type": "github"
       },
       "original": {
@@ -85,11 +85,11 @@
         "utils": "utils"
       },
       "locked": {
-        "lastModified": 1672327199,
+        "lastModified": 1674127017,
-        "narHash": "sha256-pFlngSHXKBhAmbaKZ4FYtu57LLunG+vWdL7a5vw1RvQ=",
+        "narHash": "sha256-QO1xF7stu5ZMDLbHN30LFolMAwY6TVlzYvQoUs1RD68=",
         "owner": "serokell",
         "repo": "deploy-rs",
-        "rev": "a5619f5660a00f58c2b7c16d89058e92327ac9b8",
+        "rev": "8c9ea9605eed20528bf60fae35a2b613b901fd77",
         "type": "github"
       },
       "original": {
@@ -192,27 +192,11 @@
     "flake-compat_3": {
       "flake": false,
       "locked": {
-        "lastModified": 1668681692,
+        "lastModified": 1673956053,
-        "narHash": "sha256-Ht91NGdewz8IQLtWZ9LCeNXMSXHUss+9COoqu6JLmXU=",
+        "narHash": "sha256-4gtG9iQuiKITOjNQQeQIpoIB6b16fm+504Ch3sNKLd8=",
         "owner": "edolstra",
         "repo": "flake-compat",
-        "rev": "009399224d5e398d03b22badca40a37ac85412a1",
+        "rev": "35bb57c0c8d8b62bbfd284272c928ceb64ddbde9",
-        "type": "github"
-      },
-      "original": {
-        "owner": "edolstra",
-        "repo": "flake-compat",
-        "type": "github"
-      }
-    },
-    "flake-compat_4": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1650374568,
-        "narHash": "sha256-Z+s0J8/r907g149rllvwhb4pKi8Wam5ij0st8PwAh+E=",
-        "owner": "edolstra",
-        "repo": "flake-compat",
-        "rev": "b4a34015c698c7793d592d66adbab377907a2be8",
         "type": "github"
       },
       "original": {
@@ -270,38 +254,24 @@
         "type": "github"
       }
     },
-    "flake-utils_3": {
-      "locked": {
-        "lastModified": 1667077288,
-        "narHash": "sha256-bdC8sFNDpT0HK74u9fUkpbf1MEzVYJ+ka7NXCdgBoaA=",
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "rev": "6ee9ebb6b1ee695d2cacc4faa053a7b9baa76817",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "type": "github"
-      }
-    },
     "home": {
       "inputs": {
         "nixpkgs": [
           "nixos"
-        ]
+        ],
+        "utils": "utils_2"
       },
       "locked": {
-        "lastModified": 1667907331,
+        "lastModified": 1674440933,
-        "narHash": "sha256-bHkAwkYlBjkupPUFcQjimNS8gxWSWjOTevEuwdnp5m0=",
+        "narHash": "sha256-CASRcD/rK3fn5vUCti3jzry7zi0GsqRsBohNq9wPgLs=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "6639e3a837fc5deb6f99554072789724997bc8e5",
+        "rev": "65c47ced082e3353113614f77b1bc18822dc731f",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-22.05",
+        "ref": "release-22.11",
         "repo": "home-manager",
         "type": "github"
       }
@@ -324,11 +294,11 @@
     },
     "latest_2": {
       "locked": {
-        "lastModified": 1672350804,
+        "lastModified": 1674641431,
-        "narHash": "sha256-jo6zkiCabUBn3ObuKXHGqqORUMH27gYDIFFfLq5P4wg=",
+        "narHash": "sha256-qfo19qVZBP4qn5M5gXc/h1MDgAtPA5VxJm9s8RUAkVk=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "677ed08a50931e38382dbef01cba08a8f7eac8f6",
+        "rev": "9b97ad7b4330aacda9b2343396eb3df8a853b4fc",
         "type": "github"
       },
       "original": {
@@ -338,22 +308,6 @@
         "type": "github"
       }
     },
-    "master": {
-      "locked": {
-        "lastModified": 1672686111,
-        "narHash": "sha256-7otTe3dIGdqBiK9f6LEi+fgWUbIxMLd06phv1NyNb8I=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "9f5839a6ea0e62a85c8ed35eb6b665fe778c3b4a",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "master",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
     "naersk": {
       "inputs": {
         "nixpkgs": [
@@ -391,16 +345,16 @@
     },
     "nixos": {
       "locked": {
-        "lastModified": 1672441599,
+        "lastModified": 1674868155,
-        "narHash": "sha256-5s/aa/0cpw6MNXQSiUedDnnMVleL/WThL8Q8jYNcc+g=",
+        "narHash": "sha256-eFNm2h6fNbgD7ZpO4MHikCB5pSnCJ7DTmwPisjetmwc=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "0c5a734cdeadc39d253018ad0f83fb77eac7ab08",
+        "rev": "ce20e9ebe1903ea2ba1ab006ec63093020c761cb",
         "type": "github"
       },
       "original": {
         "owner": "nixos",
-        "ref": "nixos-22.05",
+        "ref": "nixos-22.11",
         "repo": "nixpkgs",
         "type": "github"
       }
@@ -411,11 +365,11 @@
         "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1672682641,
+        "lastModified": 1674666581,
-        "narHash": "sha256-940TLvtdT8YKuP5nXcPhUfNeK0A/leSjjG8hfqvWM84=",
+        "narHash": "sha256-KNI2s/xrL7WOYaPJAWKBtb7cCH3335rLfsL+B+ssuGY=",
         "owner": "nix-community",
         "repo": "nixos-generators",
-        "rev": "30516cb2b01896e14ce66893e414b6e3eec71cac",
+        "rev": "6a5dc1d3d557ea7b5c19b15ff91955124d0400fa",
         "type": "github"
       },
       "original": {
@@ -426,11 +380,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1672644464,
+        "lastModified": 1674550793,
-        "narHash": "sha256-RYlvRMcQNT7FDoDkViijQBHg9g+blsB+U6AvL/gAsPI=",
+        "narHash": "sha256-ljJlIFQZwtBbzWqWTmmw2O5BFmQf1A/DspwMOQtGXHk=",
         "owner": "nixos",
         "repo": "nixos-hardware",
-        "rev": "ca29e25c39b8e117d4d76a81f1e229824a9b3a26",
+        "rev": "b7ac0a56029e4f9e6743b9993037a5aaafd57103",
         "type": "github"
       },
       "original": {
@@ -483,44 +437,6 @@
         "type": "indirect"
       }
     },
-    "nvfetcher": {
-      "inputs": {
-        "flake-compat": "flake-compat_4",
-        "flake-utils": "flake-utils_3",
-        "nixpkgs": [
-          "nixos"
-        ]
-      },
-      "locked": {
-        "lastModified": 1667620329,
-        "narHash": "sha256-v1Zk7rtEbAGpevBGPZvZBKpwbmw4I+uVwxvd+pBlp3o=",
-        "owner": "berberman",
-        "repo": "nvfetcher",
-        "rev": "294826951113dcd3aa9abbcacfb1aa5b95a19116",
-        "type": "github"
-      },
-      "original": {
-        "owner": "berberman",
-        "repo": "nvfetcher",
-        "type": "github"
-      }
-    },
-    "pub-solar": {
-      "locked": {
-        "lastModified": 1654372286,
-        "narHash": "sha256-z1WrQkL67Sosz1VnuKQLpzEkEl4ianeLpWJX8Q6bVQY=",
-        "owner": "pub-solar",
-        "repo": "nixpkgs",
-        "rev": "4995a873a796c54cc49e5dca9e1d20350eceec7b",
-        "type": "github"
-      },
-      "original": {
-        "owner": "pub-solar",
-        "ref": "fix/use-latest-unstable-yubikey-agent",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
     "root": {
       "inputs": {
         "agenix": "agenix",
@@ -530,14 +446,11 @@
         "flake-compat": "flake-compat_3",
         "home": "home",
         "latest": "latest_2",
-        "master": "master",
         "naersk": "naersk",
         "nixos": "nixos",
         "nixos-generators": "nixos-generators",
         "nixos-hardware": "nixos-hardware",
-        "nur": "nur",
+        "nur": "nur"
-        "nvfetcher": "nvfetcher",
-        "pub-solar": "pub-solar"
       }
     },
     "utils": {
@@ -554,6 +467,21 @@
         "repo": "flake-utils",
         "type": "github"
       }
+    },
+    "utils_2": {
+      "locked": {
+        "lastModified": 1667395993,
+        "narHash": "sha256-nuEHfE/LcWyuSWnS8t12N1wc105Qtau+/OdUAjtQ0rA=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "5aed5285a952e0b949eb3ba02c12fa4fcfef535f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
     }
   },
   "root": "root",

flake.nix

@@ -5,13 +5,10 @@
   nixConfig.extra-substituters = "https://nix-dram.cachix.org https://dram.cachix.org  https://nrdxp.cachix.org https://nix-community.cachix.org";
   nixConfig.extra-trusted-public-keys = "nix-dram.cachix.org-1:CKjZ0L1ZiqH3kzYAZRt8tg8vewAx5yj8Du/+iR8Efpg= dram.cachix.org-1:baoy1SXpwYdKbqdTbfKGTKauDDeDlHhUpC+QuuILEMY= nrdxp.cachix.org-1:Fc5PSqY2Jm1TrWfm88l6cvGWwz3s93c6IOifQWnhNW4= nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=";
 
-  inputs =
+  inputs = {
-    {
     # Track channels with commits tested and built by hydra
-      nixos.url = "github:nixos/nixpkgs/nixos-22.05";
+    nixos.url = "github:nixos/nixpkgs/nixos-22.11";
     latest.url = "github:nixos/nixpkgs/nixos-unstable";
-      master.url = "github:nixos/nixpkgs/master";
-      pub-solar.url = "github:pub-solar/nixpkgs/fix/use-latest-unstable-yubikey-agent";
 
     flake-compat.url = "github:edolstra/flake-compat";
     flake-compat.flake = false;
@@ -22,7 +19,7 @@
     digga.inputs.home-manager.follows = "home";
     digga.inputs.deploy.follows = "deploy";
 
-      home.url = "github:nix-community/home-manager/release-22.05";
+    home.url = "github:nix-community/home-manager/release-22.11";
     home.inputs.nixpkgs.follows = "nixos";
 
     darwin.url = "github:LnL7/nix-darwin";
@@ -34,9 +31,6 @@
     agenix.url = "github:ryantm/agenix";
     agenix.inputs.nixpkgs.follows = "nixos";
 
-      nvfetcher.url = "github:berberman/nvfetcher";
-      nvfetcher.inputs.nixpkgs.follows = "nixos";
-
     naersk.url = "github:nmattia/naersk";
     naersk.inputs.nixpkgs.follows = "nixos";
 
@@ -45,38 +39,36 @@
     nixos-generators.url = "github:nix-community/nixos-generators";
   };
 
-  outputs =
+  outputs = {
-    { self
+    self,
-    , digga
+    digga,
-    , nixos
+    nixos,
-    , home
+    home,
-    , nixos-hardware
+    nixos-hardware,
-    , nur
+    nur,
-    , agenix
+    agenix,
-    , nvfetcher
+    deploy,
-    , deploy
+    ...
-    , ...
   } @ inputs:
     digga.lib.mkFlake
     {
       inherit self inputs;
 
       channelsConfig = {
-          allowUnfree = true;
+        # allowUnfree = true;
       };
 
-        supportedSystems = [ "x86_64-linux" "aarch64-linux" ];
+      supportedSystems = ["x86_64-linux" "aarch64-linux"];
 
       channels = {
         nixos = {
-            imports = [ (digga.lib.importOverlays ./overlays) ];
+          imports = [(digga.lib.importOverlays ./overlays)];
-            overlays = [ ];
+          overlays = [];
         };
-          latest = { };
+        latest = {};
-          master = { };
       };
 
-        lib = import ./lib { lib = digga.lib // nixos.lib; };
+      lib = import ./lib {lib = digga.lib // nixos.lib;};
 
       sharedOverlays = [
         (final: prev: {
@@ -95,9 +87,9 @@
         hostDefaults = {
           system = "x86_64-linux";
           channelName = "nixos";
-            imports = [ (digga.lib.importExportableModules ./modules) ];
+          imports = [(digga.lib.importExportableModules ./modules)];
           modules = [
-              { lib.our = self.lib; }
+            {lib.our = self.lib;}
             # FIXME: upstream module causes a huge number of unnecessary
             # dependencies to be pulled in for all systems -- many of them are
             # graphical. should only be imported as needed.
@@ -108,9 +100,11 @@
           ];
         };
 
-          imports = [ (digga.lib.importHosts ./hosts) ];
+        imports = [(digga.lib.importHosts ./hosts)];
         hosts = {
-            /* set host specific properties here */
+          /*
+          set host specific properties here
+          */
           bootstrap = {
             modules = [
               digga.nixosModules.bootstrapIso
@@ -118,43 +112,40 @@
           };
           PubSolarOS = {
             tests = [
-                (import ./tests/first-test.nix { pkgs = nixos.legacyPackages.x86_64-linux; lib = nixos.lib; })
+              (import ./tests/first-test.nix {
+                pkgs = nixos.legacyPackages.x86_64-linux;
+                lib = nixos.lib;
+              })
             ];
           };
         };
         importables = rec {
-            profiles = digga.lib.rakeLeaves ./profiles // {
+          profiles =
+            digga.lib.rakeLeaves ./profiles
+            // {
               users = digga.lib.rakeLeaves ./users;
             };
+
           suites = with profiles; rec {
-              base = [ users.pub-solar users.root ];
+            base = [users.pub-solar users.root];
-              iso = base ++ [ base-user graphical pub-solar-iso ];
+            iso = base ++ [base-user graphical pub-solar-iso];
-              pubsolaros = [ full-install base-user users.root ];
+            pubsolaros = [full-install base-user users.root];
-              anonymous = [ pubsolaros users.pub-solar ];
+            anonymous = [pubsolaros users.pub-solar];
-
-              b12f = pubsolaros ++ [ users.ben social gaming mobile ];
-              biolimo = b12f ++ [ graphical ];
-              chocolatebar = b12f ++ [ graphical virtualisation ];
-
-              yule = pubsolaros ++ [ users.yule ];
-              droppie = yule ++ [ ];
           };
         };
       };
 
       home = {
-          imports = [ (digga.lib.importExportableModules ./users/modules) ];
+        imports = [(digga.lib.importExportableModules ./users/modules)];
-          modules = [ ];
+        modules = [];
         importables = rec {
           profiles = digga.lib.rakeLeaves ./users/profiles;
           suites = with profiles; rec {
-              base = [ direnv ];
+            base = [direnv git];
           };
         };
         users = {
-            pub-solar = { suites, ... }: { imports = suites.base; };
+          pub-solar = {suites, ...}: {imports = suites.base;};
-            ben = { suites, ... }: { imports = suites.base; };
-            yule = { suites, ... }: { imports = suites.base; };
         }; # digga.lib.importers.rakeLeaves ./users/hm;
       };
 
@@ -162,10 +153,6 @@
 
       homeConfigurations = digga.lib.mkHomeConfigurations self.nixosConfigurations;
 
-        deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations {
+      deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations {};
-          droppie = {
-            sshUser = "yule";
-          };
-        };
     };
 }

hosts/PubSolarOS.nix

@@ -1,17 +1,15 @@
-{ suites, ... }:
+{suites, ...}: {
-{
   ### root password is empty by default ###
   ### default password: pub-solar, optional: add your SSH keys
   imports =
-    suites.iso
+    suites.iso;
-  ;
 
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
   networking.networkmanager.enable = true;
 
-  fileSystems."/" = { device = "/dev/disk/by-label/nixos"; };
+  fileSystems."/" = {device = "/dev/disk/by-label/nixos";};
 
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions

hosts/biolimo/biolimo.nix

@@ -1,10 +1,13 @@
-{ config, pkgs, lib, ... }:
+{
-with lib;
+  config,
-let
+  pkgs,
+  lib,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
-in
+in {
-{
   imports = [
     ./configuration.nix
   ];
@@ -16,11 +19,12 @@ in
 
     hardware.cpu.intel.updateMicrocode = true;
 
-    networking.firewall.allowedTCPPorts = [ 5000 ];
+    networking.firewall.allowedTCPPorts = [5000];
 
     networking.networkmanager.wifi.backend = mkForce "wpa_supplicant";
 
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
+      pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
         xdg.configFile = mkIf psCfg.sway.enable {
           "sway/config.d/10-screens.conf".source = ./.config/sway/config.d/screens.conf;
           "sway/config.d/10-autostart.conf".source = ./.config/sway/config.d/autostart.conf;

hosts/biolimo/configuration.nix

@@ -1,12 +1,12 @@
 # Edit this configuration file to define what should be installed on
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
-
-{ config, pkgs, ... }:
-
 {
-  imports =
+  config,
-    [
+  pkgs,
+  ...
+}: {
+  imports = [
     # Include the results of the hardware scan.
     ./hardware-configuration.nix
   ];
@@ -23,4 +23,3 @@
   # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
   system.stateVersion = "20.09"; # Did you read the comment?
 }
-

hosts/biolimo/default.nix

@@ -1,6 +1,7 @@
-{ suites, ... }:
+{suites, ...}: {
-{
+  imports =
-  imports = [
+    [
       ./biolimo.nix
-  ] ++ suites.biolimo;
+    ]
+    ++ suites.biolimo;
 }

hosts/biolimo/hardware-configuration.nix

@@ -1,17 +1,21 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
-
 {
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}: {
   imports = [
     (modulesPath + "/installer/scan/not-detected.nix")
   ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
+  boot.initrd.availableKernelModules = ["xhci_pci" "nvme" "usbhid" "usb_storage" "sd_mod"];
-  boot.initrd.kernelModules = [ ];
+  boot.initrd.kernelModules = [];
-  boot.kernelModules = [ "kvm-intel" ];
+  boot.kernelModules = ["kvm-intel"];
-  boot.extraModulePackages = [ ];
+  boot.extraModulePackages = [];
 
   fileSystems."/" = {
     device = "/dev/disk/by-uuid/abc3fe04-368e-46eb-8c7a-3a829bb2deab";

hosts/bootstrap.nix

@@ -1,10 +1,14 @@
-{ config, lib, pkgs, profiles, ... }:
+{
-with lib;
+  config,
-let
+  lib,
+  pkgs,
+  profiles,
+  ...
+}:
+with lib; let
   # Gets hostname of host to be bundled inside iso
   # Copied from https://github.com/divnix/digga/blob/30ffa0b02272dc56c94fd3c7d8a5a0f07ca197bf/modules/bootstrap-iso.nix#L3-L11
-  getFqdn = config:
+  getFqdn = config: let
-    let
     net = config.networking;
     fqdn =
       if (net ? domain) && (net.domain != null)
@@ -12,8 +16,7 @@ let
       else net.hostName;
   in
     fqdn;
-in
+in {
-{
   # build with: `nix build ".#nixosConfigurations.bootstrap.config.system.build.isoImage"`
   imports = [
     # profiles.networking
@@ -28,7 +31,7 @@ in
     boot.loader.systemd-boot.enable = true;
 
     # will be overridden by the bootstrapIso instrumentation
-    fileSystems."/" = { device = "/dev/disk/by-label/nixos"; };
+    fileSystems."/" = {device = "/dev/disk/by-label/nixos";};
 
     system.nixos.label = "PubSolarOS-" + config.system.nixos.version;
 

hosts/chocolatebar/chocolatebar.nix

@@ -1,10 +1,14 @@
-{ config, pkgs, lib, self, ... }:
+{
-with lib;
+  config,
-let
+  pkgs,
+  lib,
+  self,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
-in
+in {
-{
   imports = [
     ./configuration.nix
     ./virtualisation
@@ -23,8 +27,14 @@ in
     pub-solar.core.hibernation.resumeOffset = 115075072;
 
     services.openssh.openFirewall = true;
-    networking.firewall.allowedTCPPorts = [ 443 ] ++ (if psCfg.sway.vnc.enable then [ 5901 ] else [ ]);
+    networking.firewall.allowedTCPPorts =
-    networking.firewall.allowedUDPPorts = [ 43050 ];
+      [443]
+      ++ (
+        if psCfg.sway.vnc.enable
+        then [5901]
+        else []
+      );
+    networking.firewall.allowedUDPPorts = [43050];
 
     environment.systemPackages = with pkgs; [
       wayvnc

hosts/chocolatebar/configuration.nix

@@ -1,12 +1,12 @@
 # Edit this configuration file to define what should be installed on
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
-
-{ config, pkgs, ... }:
-
 {
-  imports =
+  config,
-    [
+  pkgs,
+  ...
+}: {
+  imports = [
     # Include the results of the hardware scan.
     ./hardware-configuration.nix
   ];

hosts/chocolatebar/default.nix

@@ -1,6 +1,7 @@
-{ suites, ... }:
+{suites, ...}: {
-{
+  imports =
-  imports = [
+    [
       ./chocolatebar.nix
-  ] ++ suites.chocolatebar;
+    ]
+    ++ suites.chocolatebar;
 }

hosts/chocolatebar/factorio/default.nix

@@ -1,6 +1,11 @@
-{ config, pkgs, lib, self, ... }:
+{
-with lib;
+  config,
-let
+  pkgs,
+  lib,
+  self,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
 
@@ -8,15 +13,14 @@ let
     pname = "factorio-far-reach";
     version = "1.1.2";
     src = ./far-reach_1.1.2.zip;
-    phases = [ "installPhase" ];
+    phases = ["installPhase"];
-    deps = [ ];
+    deps = [];
     installPhase = ''
       mkdir -p $out
       cp $src far-reach_1.1.2.zip
     '';
   };
-in
+in {
-{
   config = {
     services.factorio = {
       enable = true;
@@ -37,7 +41,7 @@ in
       ];
     };
 
-    networking.firewall.allowedUDPPorts = [ 34197 ];
+    networking.firewall.allowedUDPPorts = [34197];
-    networking.firewall.allowedTCPPorts = [ 34197 ];
+    networking.firewall.allowedTCPPorts = [34197];
   };
 }

hosts/chocolatebar/hardware-configuration.nix

@@ -1,29 +1,30 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
-
 {
-  imports =
+  config,
-    [
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}: {
+  imports = [
     (modulesPath + "/installer/scan/not-detected.nix")
   ];
 
-  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbcore" "usbhid" "sd_mod" ];
+  boot.initrd.availableKernelModules = ["nvme" "xhci_pci" "ahci" "usbcore" "usbhid" "sd_mod"];
-  boot.initrd.kernelModules = [ "dm-snapshot" ];
+  boot.initrd.kernelModules = ["dm-snapshot"];
-  boot.kernelModules = [ "kvm-amd" ];
+  boot.kernelModules = ["kvm-amd"];
-  boot.extraModulePackages = [ ];
+  boot.extraModulePackages = [];
 
-  fileSystems."/" =
+  fileSystems."/" = {
-    {
     device = "/dev/disk/by-uuid/a3a74208-b244-4268-b374-e58265810fce";
     fsType = "ext4";
   };
 
   boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-uuid/afcde41f-9811-4ac8-bb7b-a683844acc5c";
 
-  fileSystems."/boot" =
+  fileSystems."/boot" = {
-    {
     device = "/dev/disk/by-uuid/12FD-62A8";
     fsType = "vfat";
   };
@@ -34,5 +35,4 @@
       size = 68 * 1024; # 68 GB
     }
   ];
-
 }

hosts/chocolatebar/virtualisation/create-service.nix

@@ -1,23 +1,35 @@
-{ config, pkgs, lib, vm, ... }:
+{
-let
+  config,
+  pkgs,
+  lib,
+  vm,
+  ...
+}: let
   psCfg = config.pub-solar;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
   varsFile = "${xdg.dataHome}/libvirt/OVMF_VARS_${vm.name}.fd";
   generateXML = import ./guest-xml.nix;
-in
+in {
-{
   serviceConfig = {
     Type = "oneshot";
     RemainAfterExit = "yes";
     Restart = "no";
   };
 
-  script =
+  script = let
-    let
+    networkXML = pkgs.writeText "network.xml" (import ./network-xml.nix {
-      networkXML = pkgs.writeText "network.xml" (import ./network-xml.nix { inherit config; inherit pkgs; inherit lib; });
+      inherit config;
-      machineXML = pkgs.writeText "${vm.name}.xml" (vm.generateXML { inherit config; inherit pkgs; inherit lib; inherit vm; varsFile = varsFile; });
+      inherit pkgs;
-    in
+      inherit lib;
-    ''
+    });
+    machineXML = pkgs.writeText "${vm.name}.xml" (vm.generateXML {
+      inherit config;
+      inherit pkgs;
+      inherit lib;
+      inherit vm;
+      varsFile = varsFile;
+    });
+  in ''
     echo "Checking if ${vm.name} is already running"
     STATUS=$(${pkgs.libvirt}/bin/virsh list --all | grep "${vm.name}" | ${pkgs.gawk}/bin/awk '{ print $3 " " $4 }' )
     if [[ $STATUS != "shut off" && $STATUS != "" ]]; then
@@ -51,7 +63,9 @@ in
     UUID="$(${pkgs.libvirt}/bin/virsh domuuid '${vm.name}' || true)"
     sed -i "s/UUID/''${UUID}/" "$TMP_FILE"
 
-      ${if vm.handOverUSBDevices then ''
+    ${
+      if vm.handOverUSBDevices
+      then ''
         # Hand over mouse
         USB_BUS=3
         USB_DEV=$(${pkgs.usbutils}/bin/lsusb | grep 046d:c52b | grep "Bus 00''${USB_BUS}" | cut -b 18)
@@ -63,7 +77,9 @@ in
         USB_DEV=$(${pkgs.usbutils}/bin/lsusb | grep 046d:c328 | cut -b 18)
         LINE_NUMBER=$(cat $TMP_FILE | grep -n -A 1 0xc328 | tail -n 1 | cut -b 1,2,3)
         sed -i "''${LINE_NUMBER}s/.*/<address bus=\"''${USB_BUS}\" device=\"''${USB_DEV}\" \/>/" "$TMP_FILE"
-      '' else ""}
+      ''
+      else ""
+    }
 
     # TODO: Set correct pci address for the GPU too
 
@@ -78,8 +94,7 @@ in
     ${pkgs.libvirt}/bin/virsh start '${vm.name}'
   '';
 
-  preStop =
+  preStop = ''
-    ''
     ${pkgs.libvirt}/bin/virsh shutdown '${vm.name}'
     let "timeout = $(date +%s) + 10"
     while [ "$(${pkgs.libvirt}/bin/virsh list --name | grep --count '^${vm.name}$')" -gt 0 ]; do

hosts/chocolatebar/virtualisation/default.nix

@@ -1,6 +1,10 @@
-{ config, pkgs, lib, ... }:
+{
-with lib;
+  config,
-let
+  pkgs,
+  lib,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
   createService = import ./create-service.nix;
@@ -12,12 +16,12 @@ let
   handOverUSBDevices = false;
 
   isolateAnyGPU = isolateGPU != null;
-in
+in {
-{
   config = mkIf psCfg.virtualisation.enable {
     boot.extraModprobeConfig = mkIf isolateAnyGPU (concatStringsSep "\n" [
       "softdep amdgpu pre: vfio vfio_pci"
-      (if isolateGPU == "rx5700xt"
+      (
+        if isolateGPU == "rx5700xt"
         then "options vfio-pci ids=1002:731f,1002:ab38"
         else "options vfio-pci ids=1002:699f,1002:aae0"
       )

hosts/chocolatebar/virtualisation/guest-xml.nix

@@ -1,10 +1,15 @@
-{ config, pkgs, lib, vm, varsFile, ... }:
+{
-let
+  config,
+  pkgs,
+  lib,
+  vm,
+  varsFile,
+  ...
+}: let
   psCfg = config.pub-solar;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
   home = config.home-manager.users."${psCfg.user.name}".home;
-in
+in ''
-''
   <domain type='kvm' xmlns:qemu='http://libvirt.org/schemas/domain/qemu/1.0'>
     <name>${vm.name}</name>
     <uuid>UUID</uuid>
@@ -156,13 +161,17 @@ in
       <controller type='virtio-serial' index='0'>
         <address type='pci' domain='0x0000' bus='0x03' slot='0x00' function='0x0'/>
       </controller>
-      ${if vm.mountHome then ''
+      ${
+    if vm.mountHome
+    then ''
       <filesystem type='mount' accessmode='mapped'>
         <source dir='/home/${psCfg.user.name}'/>
         <target dir='/media/home'/>
         <address type='pci' domain='0x0000' bus='0x07' slot='0x00' function='0x0'/>
       </filesystem>
-      '' else ""}
+    ''
+    else ""
+  }
       <interface type='network'>
         <mac address='52:54:00:44:cd:ac'/>
         <source network='default'/>
@@ -185,7 +194,9 @@ in
         <model type='cirrus' vram='16384' heads='1' primary='yes'/>
         <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x0'/>
       </video>
-      ${if vm.handOverUSBDevices then ''
+      ${
+    if vm.handOverUSBDevices
+    then ''
       <hostdev mode='subsystem' type='usb' managed='yes'>
         <source>
           <vendor id='0x046d'/>
@@ -202,8 +213,12 @@ in
         </source>
         <address type='usb' bus='0' port='5'/>
       </hostdev>
-      '' else ""}
+    ''
-      ${if vm.gpu && vm.isolateGPU != null then ''
+    else ""
+  }
+      ${
+    if vm.gpu && vm.isolateGPU != null
+    then ''
       <hostdev mode='subsystem' type='pci' managed='yes'>
         <driver name='vfio'/>
         <source>
@@ -219,7 +234,9 @@ in
         </source>
         <address type='pci' domain='0x0000' bus='0x06' slot='0x00' function='0x1'/>
       </hostdev>
-      '' else ""}
+    ''
+    else ""
+  }
       <redirdev bus='usb' type='spicevmc'>
         <address type='usb' bus='0' port='2'/>
       </redirdev>

hosts/chocolatebar/virtualisation/network-xml.nix

@@ -1,5 +1,9 @@
-{ config, pkgs, lib, ... }:
+{
-''
+  config,
+  pkgs,
+  lib,
+  ...
+}: ''
   <network>
     <name>default</name>
     <uuid>UUID</uuid>

hosts/chocolatebar/virtualisation/tails-xml.nix

@@ -1,10 +1,15 @@
-{ config, pkgs, lib, vm, varsFile, ... }:
+{
-let
+  config,
+  pkgs,
+  lib,
+  vm,
+  varsFile,
+  ...
+}: let
   psCfg = config.pub-solar;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
   home = config.home-manager.users."${psCfg.user.name}".home;
-in
+in ''
-''
     <domain type='kvm' xmlns:qemu='http://libvirt.org/schemas/domain/qemu/1.0'>
       <name>${vm.name}</name>
       <uuid>UUID</uuid>

hosts/droppie/configuration.nix

@@ -1,11 +1,13 @@
 # Edit this configuration file to define what should be installed on
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
-
-{ config, pkgs, lib, ... }:
 {
-  imports =
+  config,
-    [
+  pkgs,
+  lib,
+  ...
+}: {
+  imports = [
     # Include the results of the hardware scan.
     ./hardware-configuration.nix
   ];
@@ -26,4 +28,3 @@
   # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
   system.stateVersion = "21.11"; # Did you read the comment?
 }
-

hosts/droppie/default.nix

@@ -1,6 +1,7 @@
-{ suites, ... }:
+{suites, ...}: {
-{
+  imports =
-  imports = [
+    [
       ./droppie.nix
-  ] ++ suites.droppie;
+    ]
+    ++ suites.droppie;
 }

hosts/droppie/droppie.nix

@@ -1,10 +1,14 @@
-{ config, pkgs, lib, self, ... }:
+{
-with lib;
+  config,
-let
+  pkgs,
+  lib,
+  self,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
-in
+in {
-{
   imports = [
     ./configuration.nix
     ./nextcloud-web-tunnel.nix
@@ -19,11 +23,11 @@ in
 
     security.sudo.extraRules = [
       {
-        users = [ "${psCfg.user.name}" ];
+        users = ["${psCfg.user.name}"];
         commands = [
           {
             command = "ALL";
-            options = [ "NOPASSWD" ];
+            options = ["NOPASSWD"];
           }
         ];
       }
@@ -32,7 +36,7 @@ in
     services.ddclient = {
       enable = true;
       ipv6 = true;
-      domains = [ "backup.b12f.io" ];
+      domains = ["backup.b12f.io"];
       server = "ddns.hosting.de";
       username = "b12f";
       use = "web, web=http://checkip6.spdyn.de/, web-skip=''";

hosts/droppie/hardware-configuration.nix

@@ -1,45 +1,43 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
-
 {
-  imports =
+  config,
-    [
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}: {
+  imports = [
     (modulesPath + "/installer/scan/not-detected.nix")
   ];
 
-  boot.initrd.availableKernelModules = [ "ahci" "usbhid" "uas" ];
+  boot.initrd.availableKernelModules = ["ahci" "usbhid" "uas"];
-  boot.initrd.kernelModules = [ "dm-snapshot" ];
+  boot.initrd.kernelModules = ["dm-snapshot"];
-  boot.kernelModules = [ "kvm-amd" ];
+  boot.kernelModules = ["kvm-amd"];
-  boot.extraModulePackages = [ ];
+  boot.extraModulePackages = [];
 
-  fileSystems."/" =
+  fileSystems."/" = {
-    {
     device = "/dev/disk/by-uuid/1dca9d02-555c-4b23-9450-8f3413fa7694";
     fsType = "xfs";
   };
 
-  fileSystems."/boot" =
+  fileSystems."/boot" = {
-    {
     device = "/dev/disk/by-uuid/A24C-F252";
     fsType = "vfat";
   };
 
-  fileSystems."/media/internal" =
+  fileSystems."/media/internal" = {
-    {
     device = "/dev/disk/by-uuid/5cf314a8-82f4-4037-a724-62d2ff226cff";
     fsType = "ext4";
   };
 
-  fileSystems."/home" =
+  fileSystems."/home" = {
-    {
     device = "/dev/disk/by-uuid/2ef980f1-1f27-4d2a-9789-00f45e791fcc";
     fsType = "xfs";
   };
 
-  swapDevices =
+  swapDevices = [{device = "/dev/disk/by-uuid/0203b641-280f-4a3d-971d-fd32a666c852";}];
-    [{ device = "/dev/disk/by-uuid/0203b641-280f-4a3d-971d-fd32a666c852"; }];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

hosts/droppie/nextcloud-web-tunnel.nix

@@ -1,8 +1,10 @@
-{ pkgs, config, ... }:
-let
-  psCfg = config.pub-solar;
-in
 {
+  pkgs,
+  config,
+  ...
+}: let
+  psCfg = config.pub-solar;
+in {
   config = {
     services.openssh.knownHosts = {
       "cloud.pub.solar".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIABPJSwr9DfnqV0KoL23BcxlWtRxuOqQpnFnCv4SG/LW";
@@ -11,7 +13,7 @@ in
     systemd.services.ssh-tunnel-cloud-pub-solar = {
       unitConfig = {
         Description = "Reverse SSH connection to enable backups from IPv4-only to IPv6-only host";
-        After = [ "network.target" ];
+        After = ["network.target"];
       };
       serviceConfig = {
         Type = "simple";
@@ -21,7 +23,7 @@ in
         Restart = "always";
         RestartSec = "5s";
       };
-      wantedBy = [ "default.target" ];
+      wantedBy = ["default.target"];
     };
   };
 }

hosts/droppie/restic-backup.nix

@@ -1,6 +1,4 @@
-{ pkgs, ... }:
+{pkgs, ...}: let
-
-let
   shutdownWaitMinutes = 15;
   shutdownScript = pkgs.writeShellScriptBin "shutdown-wait" ''
     STATUS_FILES="/media/internal/backups-pub-solar/status"
@@ -32,8 +30,7 @@ let
 
     shutdown -P +${builtins.toString shutdownWaitMinutes}
   '';
-in
+in {
-{
   systemd.services."shutdown-after-backup" = {
     enable = true;
     serviceConfig = {
@@ -47,7 +44,7 @@ in
     timerConfig = {
       OnCalendar = "3..9:* Etc/UTC";
     };
-    wantedBy = [ "timers.target" ];
+    wantedBy = ["timers.target"];
-    partOf = [ "shutdown-after-backup.service" ];
+    partOf = ["shutdown-after-backup.service"];
   };
 }

lib/compat/default.nix

@@ -1,6 +1,10 @@
 let
-  lock = builtins.fromJSON (builtins.readFile builtins.path { path = ../../flake.lock; name = "lockPath"; });
+  lock = builtins.fromJSON (builtins.readFile builtins.path {
-  flake = (import
+    path = ../../flake.lock;
+    name = "lockPath";
+  });
+  flake =
+    import
     (
       fetchTarball {
         url = "https://github.com/edolstra/flake-compat/archive/${lock.nodes.flake-compat.locked.rev}.tar.gz";
@@ -8,7 +12,10 @@ let
       }
     )
     {
-      src = builtins.path { path = ../../.; name = "projectRoot"; };
+      src = builtins.path {
-    });
+        path = ../../.;
+        name = "projectRoot";
+      };
+    };
 in
-flake
+  flake

lib/compat/nixos/default.nix

@@ -1,5 +1,4 @@
-{ ... }:
+{...}: let
-let
   inherit (default.inputs.nixos) lib;
 
   host = configs.${hostname} or configs.PubSolarOS;
@@ -7,4 +6,4 @@ let
   default = (import ../.).defaultNix;
   hostname = lib.fileContents /etc/hostname;
 in
-host
+  host

lib/default.nix

@@ -1,2 +1,2 @@
-{ lib }:
+{lib}:
-lib.makeExtensible (self: { })
+lib.makeExtensible (self: {})

modules/arduino/default.nix

@@ -1,19 +1,23 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.devops;
-in
+in {
-{
   options.pub-solar.arduino = {
     enable = mkEnableOption "Life with home automation";
   };
   config = mkIf cfg.enable {
-    users.users = pkgs.lib.setAttrByPath [ psCfg.user.name ] {
+    users.users = pkgs.lib.setAttrByPath [psCfg.user.name] {
-      extraGroups = [ "dialout" ];
+      extraGroups = ["dialout"];
     };
 
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
+      pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
         home.packages = [
           arduino
           arduino-cli

modules/audio/default.nix

@@ -1,11 +1,14 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.audio;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
-in
+in {
-{
   options.pub-solar.audio = {
     enable = mkEnableOption "Life in highs and lows";
     mopidy.enable = mkEnableOption "Life with mopidy";
@@ -20,12 +23,14 @@ in
   };
 
   config = mkIf cfg.enable {
-    users.users = pkgs.lib.setAttrByPath [ psCfg.user.name ] {
+    users.users = pkgs.lib.setAttrByPath [psCfg.user.name] {
-      extraGroups = [ "audio" ];
+      extraGroups = ["audio"];
     };
 
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
-      home.packages = [
+      pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
+        home.packages =
+          [
             # easyeffects, e.g. for microphone noise filtering
             easyeffects
             mu
@@ -35,7 +40,12 @@ in
             # Needed for pactl cmd, until pw-cli is more mature (vol up/down hotkeys?)
             pulseaudio
             vimpc
-      ] ++ (if cfg.spotify.enable then [ pkgs.spotify-tui ] else [ ]);
+          ]
+          ++ (
+            if cfg.spotify.enable
+            then [pkgs.spotify-tui]
+            else []
+          );
         xdg.configFile."vimpc/vimpcrc".source = ./.config/vimpc/vimpcrc;
         systemd.user.services.easyeffects = import ./easyeffects.service.nix pkgs;
 
@@ -54,6 +64,8 @@ in
         };
       };
 
+    # rtkit is optional but recommended
+    security.rtkit.enable = true;
     # Enable sound using pipewire-pulse
     services.pipewire = {
       enable = true;
@@ -63,7 +75,7 @@ in
 
       config.pipewire = {
         context.default.clock = {
-          allowed-rates = [ 44100 48000 88200 96000 ];
+          allowed-rates = [44100 48000 88200 96000];
           rate = 44100;
         };
       };

modules/audio/easyeffects.service.nix

@@ -1,5 +1,4 @@
-pkgs:
+pkgs: {
-{
   Service = {
     Type = "dbus";
     BusName = "com.github.wwmm.easyeffects";

modules/audio/pipewire-pulse.conf.json

@@ -8,10 +8,7 @@
     {
       "name": "libpipewire-module-rtkit",
       "args": {},
-      "flags": [
+      "flags": ["ifexists", "nofail"]
-        "ifexists",
-        "nofail"
-      ]
     },
     {
       "name": "libpipewire-module-protocol-native"
@@ -28,10 +25,7 @@
     {
       "name": "libpipewire-module-protocol-pulse",
       "args": {
-        "server.address": [
+        "server.address": ["unix:native", "tcp:4713"],
-          "unix:native",
-          "tcp:4713"
-        ],
         "vm.overrides": {
           "pulse.min.quantum": "1024/48000"
         }

modules/ci-runner/default.nix

@@ -1,10 +1,14 @@
-{ lib, config, pkgs, self, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  self,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.ci-runner;
-in
+in {
-{
   options.pub-solar.ci-runner = {
     enable = mkEnableOption "Enables a systemd service that runs drone-ci-runner";
   };
@@ -26,8 +30,8 @@ in
         pkgs.libvirt
       ];
 
-      wantedBy = [ "multi-user.target" ];
+      wantedBy = ["multi-user.target"];
-      after = [ "network.target" "libvirtd.service" ];
+      after = ["network.target" "libvirtd.service"];
 
       script = ''${pkgs.drone-runner-exec}/bin/drone-runner-exec daemon /run/agenix/drone-runner-exec-config'';
     };

modules/compat/default.nix

@@ -1,6 +1,12 @@
-{ config, pkgs, lib, ... }: with lib; {
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+with lib; {
   # Both things below are for
   # https://github.com/NixOS/nixpkgs/issues/124215
   documentation.info.enable = lib.mkForce false;
-  nix.sandboxPaths = [ "/bin/sh=${pkgs.bash}/bin/sh" ];
+  nix.settings.extra-sandbox-paths = ["/bin/sh=${pkgs.bash}/bin/sh"];
 }

modules/core/boot.nix

@@ -1,9 +1,12 @@
-{ config, pkgs, lib, ... }:
-let
-  cfg = config.pub-solar.core;
-in
-with lib;
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+with lib; let
+  cfg = config.pub-solar.core;
+in {
   options.pub-solar.core.iso-options.enable = mkOption {
     type = types.bool;
     default = false;
@@ -36,7 +39,7 @@ with lib;
       kernelPackages = pkgs.linuxPackages_5_15;
 
       # Support ntfs drives
-      supportedFilesystems = [ "ntfs" ];
+      supportedFilesystems = ["ntfs"];
     };
   };
 }

modules/core/default.nix

@@ -1,10 +1,11 @@
-{ config, lib, ... }:
-
-with lib;
-let
-  cfg = config.pub-solar.core;
-in
 {
+  config,
+  lib,
+  ...
+}:
+with lib; let
+  cfg = config.pub-solar.core;
+in {
   imports = [
     ./boot.nix
     ./hibernation.nix

modules/core/fonts.nix

@@ -1,12 +1,14 @@
-{ config, pkgs, lib, ... }:
-
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
   fonts = {
-    fonts = with pkgs; [ powerline-fonts dejavu_fonts ];
+    fonts = with pkgs; [powerline-fonts dejavu_fonts];
     fontconfig.defaultFonts = {
-      monospace = [ "DejaVu Sans Mono for Powerline" ];
+      monospace = ["DejaVu Sans Mono for Powerline"];
-      sansSerif = [ "DejaVu Sans" ];
+      sansSerif = ["DejaVu Sans"];
     };
   };
 }
-

modules/core/hibernation.nix

@@ -1,9 +1,12 @@
-{ config, pkgs, lib, ... }:
-with lib;
-let
-  cfg = config.pub-solar.core.hibernation;
-in
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+with lib; let
+  cfg = config.pub-solar.core.hibernation;
+in {
   options.pub-solar.core.hibernation = {
     enable = mkOption {
       type = types.bool;
@@ -27,7 +30,7 @@ in
   config = {
     boot = mkIf cfg.enable {
       resumeDevice = cfg.resumeDevice;
-      kernelParams = mkIf (cfg.resumeOffset != null) [ "resume_offset=${builtins.toString cfg.resumeOffset}" ];
+      kernelParams = mkIf (cfg.resumeOffset != null) ["resume_offset=${builtins.toString cfg.resumeOffset}"];
     };
   };
 }

modules/core/i18n.nix

@@ -1,6 +1,10 @@
-{ config, pkgs, lib, ... }:
-with lib;
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+with lib; {
   config = {
     # Set your time zone.
     time.timeZone = "Europe/Berlin";

modules/core/networking.nix

@@ -1,10 +1,12 @@
-{ config, pkgs, lib, ... }:
-
-with lib;
-
-let cfg = config.pub-solar.core;
-in
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+with lib; let
+  cfg = config.pub-solar.core;
+in {
   options.pub-solar.core = {
     enableCaddy = mkOption {
       type = types.bool;
@@ -17,18 +19,19 @@ in
 
     binaryCaches = mkOption {
       type = types.listOf types.str;
-      default = [ ];
+      default = [];
       description = "Binary caches to use.";
     };
     publicKeys = mkOption {
       type = types.listOf types.str;
-      default = [ ];
+      default = [];
       description = "Public keys of binary caches.";
     };
   };
   config = {
-    # disable NetworkManager-wait-online by default
+    # disable NetworkManager and systemd-networkd -wait-online by default
     systemd.services.NetworkManager-wait-online.enable = lib.mkDefault false;
+    systemd.services.systemd-networkd-wait-online.enable = lib.mkDefault false;
 
     networking.networkmanager = {
       # Enable networkmanager. REMEMBER to add yourself to group in order to use nm related stuff.
@@ -39,19 +42,18 @@ in
     networking.firewall.enable = true;
 
     # Customized binary caches list (with fallback to official binary cache)
-    nix.binaryCaches = cfg.binaryCaches;
+    nix.settings.substituters = cfg.binaryCaches;
-    nix.binaryCachePublicKeys = cfg.publicKeys;
+    nix.settings.trusted-public-keys = cfg.publicKeys;
 
     # These entries get added to /etc/hosts
-    networking.hosts =
+    networking.hosts = let
-      let
+      hostnames =
-        hostnames = [ ]
+        []
-          ++ lib.optionals cfg.enableCaddy [ "caddy.local" ]
+        ++ lib.optionals cfg.enableCaddy ["caddy.local"]
-          ++ lib.optionals config.pub-solar.printing.enable [ "cups.local" ]
+        ++ lib.optionals config.pub-solar.printing.enable ["cups.local"]
-          ++ lib.optionals config.pub-solar.paperless.enable [ "paperless.local" ]
+        ++ lib.optionals config.pub-solar.paperless.enable ["paperless.local"]
-          ++ lib.optionals cfg.enableHelp [ "help.local" ];
+        ++ lib.optionals cfg.enableHelp ["help.local"];
-      in
+    in {
-      {
       "127.0.0.1" = hostnames;
       "::1" = hostnames;
     };

modules/core/nix.nix

@@ -1,19 +1,25 @@
-{ config, pkgs, lib, inputs, ... }:
-
 {
+  config,
+  pkgs,
+  lib,
+  inputs,
+  ...
+}: {
   nix = {
     # Use default version alias for nix package
     package = pkgs.nix;
-    # Improve nix store disk usage
-    autoOptimiseStore = true;
     gc.automatic = true;
     optimise.automatic = true;
+    settings = {
+      # Improve nix store disk usage
+      auto-optimise-store = true;
       # Prevents impurities in builds
-    useSandbox = true;
+      sandbox = true;
       # give root and @wheel special privileges with nix
-    trustedUsers = [ "root" "@wheel" ];
+      trusted-users = ["root" "@wheel"];
       # This is just a representation of the nix default
-    systemFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
+      system-features = ["nixos-test" "benchmark" "big-parallel" "kvm"];
+    };
     # Generally useful nix option defaults
     extraOptions = ''
       min-free = 536870912

modules/core/packages.nix

@@ -1,13 +1,16 @@
-{ config, pkgs, lib, ... }:
+{
-
+  config,
-with lib;
+  pkgs,
-let
+  lib,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.core;
-in
+in {
-{
   environment = {
-    systemPackages = with pkgs; [
+    systemPackages = with pkgs;
+      [
         # Core unix utility packages
         coreutils-full
         dnsutils
@@ -34,7 +37,6 @@ in
         croc
         jq
       ]
-
       ++ lib.optionals (!cfg.lite) [
         mtr
 
@@ -58,6 +60,7 @@ in
         exfat
 
         # Nix specific utilities
+        alejandra
         niv
         manix
         nix-index

modules/core/services.nix

@@ -1,6 +1,9 @@
-{ config, pkgs, lib, ... }:
-
 {
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
   # For rage encryption, all hosts need a ssh key pair
   services.openssh = {
     enable = true;

modules/crypto/default.nix

@@ -1,22 +1,26 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.crypto;
-in
+in {
-{
   options.pub-solar.crypto = {
     enable = mkEnableOption "Life in private";
   };
 
   config = mkIf cfg.enable {
-    services.udev.packages = [ pkgs.yubikey-personalization ];
+    services.udev.packages = [pkgs.yubikey-personalization];
-    services.dbus.packages = [ pkgs.gcr ];
+    services.dbus.packages = [pkgs.gcr];
     services.pcscd.enable = true;
 
     services.gnome.gnome-keyring.enable = true;
 
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
+      pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
         systemd.user.services.polkit-gnome-authentication-agent = import ./polkit-gnome-authentication-agent.service.nix pkgs;
 
         services.gpg-agent = {

modules/crypto/polkit-gnome-authentication-agent.service.nix

@@ -1,16 +1,15 @@
-pkgs:
+pkgs: {
-{
   Unit = {
     Description = "Legacy polkit authentication agent for GNOME";
-    Documentation = [ "https://gitlab.freedesktop.org/polkit/polkit/" ];
+    Documentation = ["https://gitlab.freedesktop.org/polkit/polkit/"];
-    BindsTo = [ "sway-session.target" ];
+    BindsTo = ["sway-session.target"];
-    After = [ "sway-session.target" ];
+    After = ["sway-session.target"];
   };
   Service = {
     Type = "simple";
     ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
   };
   Install = {
-    WantedBy = [ "sway-session.target" ];
+    WantedBy = ["sway-session.target"];
   };
 }

modules/devops/default.nix

@@ -1,16 +1,20 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.devops;
-in
+in {
-{
   options.pub-solar.devops = {
     enable = mkEnableOption "Life automated";
   };
 
   config = mkIf cfg.enable {
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
+      pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
         home.packages = [
           croc
           drone-cli

modules/docker/default.nix

@@ -1,18 +1,22 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.docker;
-in
+in {
-{
   options.pub-solar.docker = {
     enable = mkEnableOption "Life in metal boxes";
   };
 
   config = mkIf cfg.enable {
     virtualisation.docker.enable = true;
-    users.users = with pkgs; pkgs.lib.setAttrByPath [ psCfg.user.name ] {
+    users.users = with pkgs;
-      extraGroups = [ "docker" ];
+      pkgs.lib.setAttrByPath [psCfg.user.name] {
+        extraGroups = ["docker"];
       };
 
     environment.systemPackages = with pkgs; [

modules/email/default.nix

@@ -1,16 +1,20 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.email;
-in
+in {
-{
   options.pub-solar.email = {
     enable = mkEnableOption "Life in headers";
   };
 
   config = mkIf cfg.enable {
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
+      pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
         home.packages = [
           w3m
           urlscan

modules/email/offlineimap.nix

@@ -1 +0,0 @@
-

modules/gaming/default.nix

@@ -1,10 +1,13 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.gaming;
-in
+in {
-{
   options.pub-solar.gaming = {
     enable = mkEnableOption "Life in shooters";
   };
@@ -12,11 +15,11 @@ in
   config = mkIf cfg.enable {
     programs.steam.enable = true;
     nixpkgs.config.packageOverrides = pkgs: {
-      steam = pkgs.steam.override { };
+      steam = pkgs.steam.override {};
     };
 
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager.users = pkgs.lib.setAttrByPath [psCfg.user.name] {
-      home.packages = [
+      home.packages = with pkgs; [
         playonlinux
         godot
         obs-studio

modules/gaming/steam.nix

@@ -1 +0,0 @@
-

modules/graphical/alacritty.nix

@@ -66,29 +66,97 @@
       x = 0;
       y = 0;
     };
-
-    use_thin_strokes = true;
   };
 
   key_bindings = [
-    { key = "V"; mods = "Control|Alt"; action = "Paste"; }
+    {
-    { key = "C"; mods = "Control|Alt"; action = "Copy"; }
+      key = "V";
-    { key = "Paste"; action = "Paste"; }
+      mods = "Control|Alt";
-    { key = "Copy"; action = "Copy"; }
+      action = "Paste";
-    { key = "Q"; mods = "Command"; action = "Quit"; }
+    }
-    { key = "W"; mods = "Command"; action = "Quit"; }
+    {
-    { key = "Insert"; mods = "Shift"; action = "PasteSelection"; }
+      key = "C";
-    { key = "Key0"; mods = "Control"; action = "ResetFontSize"; }
+      mods = "Control|Alt";
-    { key = "Equals"; mods = "Control"; action = "IncreaseFontSize"; }
+      action = "Copy";
-    { key = "PageUp"; mods = "Shift"; action = "ScrollPageUp"; }
+    }
-    { key = "PageDown"; mods = "Shift"; action = "ScrollPageDown"; }
+    {
-    { key = "Minus"; mods = "Control"; action = "DecreaseFontSize"; }
+      key = "Paste";
-    { key = "H"; mode = "Vi|~Search"; action = "ScrollToBottom"; }
+      action = "Paste";
-    { key = "H"; mode = "Vi|~Search"; action = "ToggleViMode"; }
+    }
-    { key = "I"; mode = "Vi|~Search"; action = "Up"; }
+    {
-    { key = "K"; mode = "Vi|~Search"; action = "Down"; }
+      key = "Copy";
-    { key = "J"; mode = "Vi|~Search"; action = "Left"; }
+      action = "Copy";
-    { key = "L"; mode = "Vi|~Search"; action = "Right"; }
+    }
+    {
+      key = "Q";
+      mods = "Command";
+      action = "Quit";
+    }
+    {
+      key = "W";
+      mods = "Command";
+      action = "Quit";
+    }
+    {
+      key = "Insert";
+      mods = "Shift";
+      action = "PasteSelection";
+    }
+    {
+      key = "Key0";
+      mods = "Control";
+      action = "ResetFontSize";
+    }
+    {
+      key = "Equals";
+      mods = "Control";
+      action = "IncreaseFontSize";
+    }
+    {
+      key = "PageUp";
+      mods = "Shift";
+      action = "ScrollPageUp";
+    }
+    {
+      key = "PageDown";
+      mods = "Shift";
+      action = "ScrollPageDown";
+    }
+    {
+      key = "Minus";
+      mods = "Control";
+      action = "DecreaseFontSize";
+    }
+    {
+      key = "H";
+      mode = "Vi|~Search";
+      action = "ScrollToBottom";
+    }
+    {
+      key = "H";
+      mode = "Vi|~Search";
+      action = "ToggleViMode";
+    }
+    {
+      key = "I";
+      mode = "Vi|~Search";
+      action = "Up";
+    }
+    {
+      key = "K";
+      mode = "Vi|~Search";
+      action = "Down";
+    }
+    {
+      key = "J";
+      mode = "Vi|~Search";
+      action = "Left";
+    }
+    {
+      key = "L";
+      mode = "Vi|~Search";
+      action = "Right";
+    }
   ];
 
   # Base16 Burn 256 - alacritty color config
@@ -164,12 +232,30 @@
     };
 
     indexed_colors = [
-      { index = 16; color = "0xdf5923"; }
+      {
-      { index = 17; color = "0xd70000"; }
+        index = 16;
-      { index = 18; color = "0x2d2a2e"; }
+        color = "0xdf5923";
-      { index = 19; color = "0x303030"; }
+      }
-      { index = 20; color = "0xd3d1d4"; }
+      {
-      { index = 21; color = "0x303030"; }
+        index = 17;
+        color = "0xd70000";
+      }
+      {
+        index = 18;
+        color = "0x2d2a2e";
+      }
+      {
+        index = 19;
+        color = "0x303030";
+      }
+      {
+        index = 20;
+        color = "0xd3d1d4";
+      }
+      {
+        index = 21;
+        color = "0x303030";
+      }
     ];
   };
 }

modules/graphical/default.nix

@@ -1,31 +1,34 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.graphical;
-  yamlFormat = pkgs.formats.yaml { };
+  yamlFormat = pkgs.formats.yaml {};
-  recursiveMerge = attrList:
+  recursiveMerge = attrList: let
-    let
     f = attrPath:
-        zipAttrsWith (n: values:
+      zipAttrsWith (
-          if tail values == [ ]
+        n: values:
+          if tail values == []
           then head values
           else if all isList values
           then unique (concatLists values)
           else if all isAttrs values
-          then f (attrPath ++ [ n ]) values
+          then f (attrPath ++ [n]) values
           else last values
       );
   in
-    f [ ] attrList;
+    f [] attrList;
-in
+in {
-{
   options.pub-solar.graphical = {
     enable = mkEnableOption "Life in color";
     alacritty = {
       settings = mkOption {
         type = yamlFormat.type;
-        default = { };
+        default = {};
       };
     };
     autologin.enable = mkOption {
@@ -71,7 +74,7 @@ in
 
     # Required for running Gnome apps outside the Gnome DE, see https://nixos.wiki/wiki/GNOME#Running_GNOME_programs_outside_of_GNOME
     programs.dconf.enable = true;
-    services.udev.packages = with pkgs; [ gnome3.gnome-settings-daemon ];
+    services.udev.packages = with pkgs; [gnome3.gnome-settings-daemon];
     # Enable Sushi, a quick previewer for nautilus
     services.gnome.sushi.enable = true;
     # Enable GVfs, a userspace virtual filesystem
@@ -92,7 +95,8 @@ in
       source-sans-pro
     ];
 
-    home-manager = with pkgs; setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
+      setAttrByPath ["users" psCfg.user.name] {
         home.packages = [
           alacritty
           foot
@@ -119,7 +123,7 @@ in
         ];
 
         xdg.configFile."alacritty/alacritty.yml" = {
-        source = yamlFormat.generate "alacritty.yml" (recursiveMerge [ (import ./alacritty.nix) cfg.alacritty.settings ]);
+          source = yamlFormat.generate "alacritty.yml" (recursiveMerge [(import ./alacritty.nix) cfg.alacritty.settings]);
         };
 
         gtk = {
@@ -141,7 +145,6 @@ in
             gtk-xft-rgba = "rgb";
             gtk-application-prefer-dark-theme = "true";
           };
-
         };
 
         # Fix KeepassXC rendering issue

modules/graphical/network-manager-applet.service.nix

@@ -1,16 +1,15 @@
-pkgs:
+pkgs: {
-{
   Unit = {
     Description = "Lightweight Wayland notification daemon";
-    BindsTo = [ "sway-session.target" ];
+    BindsTo = ["sway-session.target"];
-    After = [ "sway-session.target" ];
+    After = ["sway-session.target"];
     # ConditionEnvironment requires systemd v247 to work correctly
-    ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
+    ConditionEnvironment = ["WAYLAND_DISPLAY"];
   };
   Service = {
     ExecStart = "${pkgs.networkmanagerapplet}/bin/nm-applet --sm-disable --indicator";
   };
   Install = {
-    WantedBy = [ "sway-session.target" ];
+    WantedBy = ["sway-session.target"];
   };
 }

modules/hm-system-defaults.nix

@@ -1,4 +1,4 @@
-{ config, ... }: {
+{config, ...}: {
   home-manager.sharedModules = [
     {
       home.sessionVariables = {

modules/mobile/default.nix

@@ -1,10 +1,13 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.mobile;
-in
+in {
-{
   options.pub-solar.mobile = {
     enable = mkEnableOption "Add android adb and tooling";
   };
@@ -12,8 +15,9 @@ in
   config = mkIf cfg.enable {
     programs.adb.enable = true;
 
-    users.users = with pkgs; lib.setAttrByPath [ psCfg.user.name ] {
+    users.users = with pkgs;
-      extraGroups = [ "adbusers" ];
+      lib.setAttrByPath [psCfg.user.name] {
+        extraGroups = ["adbusers"];
       };
   };
 }

modules/nextcloud/default.nix

@@ -1,16 +1,20 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.nextcloud;
-in
+in {
-{
   options.pub-solar.nextcloud = {
     enable = mkEnableOption "Life in sync";
   };
 
   config = mkIf cfg.enable {
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
+      pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
         systemd.user.services.nextcloud-client = import ./nextcloud.service.nix pkgs;
       };
   };

modules/nextcloud/nextcloud.service.nix

@@ -1,12 +1,11 @@
-pkgs:
+pkgs: {
-{
   Unit = {
     Description = "Nextcloud Client";
-    BindsTo = [ "sway-session.target" ];
+    BindsTo = ["sway-session.target"];
-    Wants = [ "graphical-session-pre.target" ];
+    Wants = ["graphical-session-pre.target"];
-    After = [ "graphical-session-pre.target" ];
+    After = ["graphical-session-pre.target"];
     # ConditionEnvironment requires systemd v247 to work correctly
-    ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
+    ConditionEnvironment = ["WAYLAND_DISPLAY"];
   };
   Service = {
     Type = "simple";
@@ -16,6 +15,6 @@ pkgs:
     Restart = "on-failure";
   };
   Install = {
-    WantedBy = [ "sway-session.target" ];
+    WantedBy = ["sway-session.target"];
   };
 }

modules/nix-path.nix

@@ -1,4 +1,8 @@
-{ channel, inputs, ... }: {
+{
+  channel,
+  inputs,
+  ...
+}: {
   nix.nixPath = [
     "nixpkgs=${channel.input}"
     "nixos-config=${../lib/compat/nixos}"

modules/office/default.nix

@@ -1,10 +1,13 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.office;
-in
+in {
-{
   options.pub-solar.office = {
     enable = mkEnableOption "Install office programs, also enables printing server";
   };
@@ -14,7 +17,8 @@ in
 
     # Gnome PDF viewer
     programs.evince.enable = true;
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
+      pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
         home.packages = [
           libreoffice-fresh
           gnome.simple-scan

modules/paperless/default.nix

@@ -1,11 +1,14 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.paperless;
   xdg = config.home-manager.users."${psCfg.user.name}".xdg;
-in
+in {
-{
   options.pub-solar.paperless = {
     enable = mkEnableOption "All you need to go paperless";
     ocrLanguage = mkOption {

modules/paranoia/default.nix

@@ -1,11 +1,12 @@
-{ config, lib, ... }:
+{
-
+  config,
-with lib;
+  lib,
-let
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.paranoia;
-in
+in {
-{
   options.pub-solar.paranoia = {
     enable = mkOption {
       description = ''
@@ -38,7 +39,7 @@ in
 
     # Remove the complete default environment of packages like
     # nano, perl and rsync
-    environment.defaultPackages = lib.mkForce [ ];
+    environment.defaultPackages = lib.mkForce [];
 
     # fileSystems."/".options = [ "noexec" ];
 

modules/printing/default.nix

@@ -1,10 +1,13 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.printing;
-in
+in {
-{
   options.pub-solar.printing = {
     enable = mkEnableOption "CUPSSSss";
   };
@@ -16,8 +19,8 @@ in
     services.avahi.publish.userServices = true;
     services.printing.enable = true;
     services.printing.browsing = true;
-    services.printing.listenAddresses = [ "localhost:631" ];
+    services.printing.listenAddresses = ["localhost:631"];
-    services.printing.allowFrom = [ "all" ];
+    services.printing.allowFrom = ["all"];
     services.printing.defaultShared = false;
     services.printing.drivers = [
       pkgs.gutenprint
@@ -25,7 +28,7 @@ in
     hardware.sane = {
       enable = true;
       brscan4.enable = true;
-      extraBackends = [ pkgs.hplipWithPlugin ];
+      extraBackends = [pkgs.hplipWithPlugin];
     };
   };
 }

modules/social/default.nix

@@ -1,16 +1,20 @@
-{ lib, config, pkgs, ... }:
+{
-with lib;
+  lib,
-let
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
   psCfg = config.pub-solar;
   cfg = config.pub-solar.social;
-in
+in {
-{
   options.pub-solar.social = {
     enable = mkEnableOption "Life with others";
   };
 
   config = mkIf cfg.enable {
-    home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+    home-manager = with pkgs;
+      pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
         home.packages = [
           signal-desktop
           tdesktop

modules/sway/config/config.d/mode_system.conf.nix

@@ -1,23 +1,45 @@
-{ pkgs, psCfg, ... }: ''
+{
+  pkgs,
+  psCfg,
+  ...
+}:
+''
   # Set shut down, restart and locking features
-'' + (if psCfg.core.hibernation.enable && !psCfg.paranoia.enable then ''
+''
++ (
+  if psCfg.core.hibernation.enable && !psCfg.paranoia.enable
+  then ''
     set $mode_system (e)xit, (h)ibernate, (l)ock, (s)uspend, (r)eboot, (Shift+s)hutdown
-'' else if psCfg.paranoia.enable then ''
+  ''
+  else if psCfg.paranoia.enable
+  then ''
     set $mode_system (e)xit, (h)ibernate, (r)eboot, (Shift+s)hutdown
-'' else ''
+  ''
+  else ''
     set $mode_system (e)xit, (l)ock, (s)uspend, (r)eboot, (Shift+s)hutdown
-'')
+  ''
+)
 + ''
   bindsym $mod+0 mode "$mode_system"
   mode "$mode_system" {
       bindsym e exec swaymsg exit, mode "default"
-'' + (if psCfg.core.hibernation.enable then ''
+''
++ (
+  if psCfg.core.hibernation.enable
+  then ''
     bindsym h exec systemctl hibernate, mode "default"
-'' else "")
+  ''
-+ (if !psCfg.paranoia.enable then ''
+  else ""
+)
++ (
+  if !psCfg.paranoia.enable
+  then ''
     bindsym l exec ${pkgs.swaylock-bg}/bin/swaylock-bg, mode "default"
     bindsym s exec systemctl suspend, mode "default"
-'' else "") + ''
+  ''
+  else ""
+)
++ ''
       bindsym r exec systemctl reboot, mode "default"
       bindsym Shift+s exec systemctl poweroff, mode "default"
 

modules/sway/config/config.nix

@@ -1,5 +1,8 @@
-{ config, pkgs, ... }:
+{
-''
+  config,
+  pkgs,
+  ...
+}: ''
   # Default config for sway
   #
   # Copy this to ~/.config/sway/config and edit it to your liking.

modules/sway/config/wayvnc/config.nix

@@ -1,4 +1,7 @@
-{ psCfg, pkgs }: "
+{
+  psCfg,
+  pkgs,
+}: "
 address=0.0.0.0
 enable_auth=true
 username=${psCfg.user.name}

modules/sway/default.nix

@@ -1,9 +1,12 @@
-{ lib, config, pkgs, ... }:
-with lib;
-let
-  psCfg = config.pub-solar;
-in
 {
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
+  psCfg = config.pub-solar;
+in {
   options.pub-solar.sway = {
     enable = mkEnableOption "Life in boxes";
 
@@ -24,14 +27,14 @@ in
 
   config = mkIf psCfg.sway.enable (mkMerge [
     (mkIf (psCfg.sway.v4l2loopback.enable) {
-      boot.extraModulePackages = with config.boot.kernelPackages; [ v4l2loopback ];
+      boot.extraModulePackages = with config.boot.kernelPackages; [v4l2loopback];
-      boot.kernelModules = [ "v4l2loopback" ];
+      boot.kernelModules = ["v4l2loopback"];
       boot.extraModprobeConfig = ''
         options v4l2loopback exclusive_caps=1 devices=3
       '';
     })
 
-    ({
+    {
       environment.systemPackages = with pkgs; [
         linuxPackages.v4l2loopback
       ];
@@ -50,13 +53,13 @@ in
             };
           };
         };
-        extraPortals = with pkgs; [ xdg-desktop-portal-gtk ];
+        extraPortals = with pkgs; [xdg-desktop-portal-gtk];
-        gtkUsePortal = true;
       };
 
       services.pipewire.enable = true;
 
-      home-manager = with pkgs; pkgs.lib.setAttrByPath [ "users" psCfg.user.name ] {
+      home-manager = with pkgs;
+        pkgs.lib.setAttrByPath ["users" psCfg.user.name] {
           home.packages = with pkgs; [
             sway
             grim
@@ -88,25 +91,28 @@ in
           programs.waybar.enable = true;
           #programs.waybar.systemd.enable = true;
 
-        systemd.user.services.mako = import ./mako.service.nix { inherit pkgs psCfg; };
+          systemd.user.services.mako = import ./mako.service.nix {inherit pkgs psCfg;};
-        systemd.user.services.sway = import ./sway.service.nix { inherit pkgs psCfg; };
+          systemd.user.services.sway = import ./sway.service.nix {inherit pkgs psCfg;};
-        systemd.user.services.swayidle = import ./swayidle.service.nix { inherit pkgs psCfg; };
+          systemd.user.services.swayidle = import ./swayidle.service.nix {inherit pkgs psCfg;};
-        systemd.user.services.xsettingsd = import ./xsettingsd.service.nix { inherit pkgs psCfg; };
+          systemd.user.services.xsettingsd = import ./xsettingsd.service.nix {inherit pkgs psCfg;};
-        systemd.user.services.waybar = import ./waybar.service.nix { inherit pkgs psCfg; };
+          systemd.user.services.waybar = import ./waybar.service.nix {inherit pkgs psCfg;};
-        systemd.user.targets.sway-session = import ./sway-session.target.nix { inherit pkgs psCfg; };
+          systemd.user.targets.sway-session = import ./sway-session.target.nix {inherit pkgs psCfg;};
 
           systemd.user.services.wayvnc = mkIf psCfg.sway.vnc.enable (import ./wayvnc.service.nix pkgs);
+          xdg.configFile."wayvnc/config".text = import ./config/wayvnc/config.nix {
+            inherit psCfg;
+            inherit pkgs;
+          };
 
-        xdg.configFile."sway/config".text = import ./config/config.nix { inherit config pkgs; };
+          xdg.configFile."sway/config".text = import ./config/config.nix {inherit config pkgs;};
           xdg.configFile."sway/config.d/colorscheme.conf".source = ./config/config.d/colorscheme.conf;
           xdg.configFile."sway/config.d/theme.conf".source = ./config/config.d/theme.conf;
           xdg.configFile."sway/config.d/gaps.conf".source = ./config/config.d/gaps.conf;
           xdg.configFile."sway/config.d/custom-keybindings.conf".source = ./config/config.d/custom-keybindings.conf;
-        xdg.configFile."sway/config.d/mode_system.conf".text = import ./config/config.d/mode_system.conf.nix { inherit pkgs psCfg; };
+          xdg.configFile."sway/config.d/mode_system.conf".text = import ./config/config.d/mode_system.conf.nix {inherit pkgs psCfg;};
           xdg.configFile."sway/config.d/applications.conf".source = ./config/config.d/applications.conf;
           xdg.configFile."sway/config.d/systemd.conf".source = ./config/config.d/systemd.conf;
-        xdg.configFile."wayvnc/config".text = import ./config/wayvnc/config.nix { inherit psCfg; inherit pkgs; };
         };
-    })
+    }
   ]);
 }

modules/sway/gammastep.service.nix

@@ -1,18 +1,17 @@
-{ pkgs, ... }:
+{pkgs, ...}: {
-{
   Unit = {
     Description = "set color temperature of display according to time of day";
-    Documentation = [ "man:gammastep(1)" ];
+    Documentation = ["man:gammastep(1)"];
-    BindsTo = [ "sway-session.target" ];
+    BindsTo = ["sway-session.target"];
-    After = [ "sway-session.target" ];
+    After = ["sway-session.target"];
     # ConditionEnvironment requires systemd v247 to work correctly
-    ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
+    ConditionEnvironment = ["WAYLAND_DISPLAY"];
   };
   Service = {
     Type = "simple";
     ExecStart = "${pkgs.gammastep}/bin/gammastep -l geoclue2 -m wayland -v";
   };
   Install = {
-    WantedBy = [ "sway-session.target" ];
+    WantedBy = ["sway-session.target"];
   };
 }

modules/sway/libinput-gestures.service.nix

@@ -1,10 +1,9 @@
-{ pkgs, ... }:
+{pkgs, ...}: {
-{
   Unit = {
     Description = "Actions gestures on your touchpad using libinput";
-    Documentation = [ "https://github.com/bulletmark/libinput-gestures" ];
+    Documentation = ["https://github.com/bulletmark/libinput-gestures"];
-    BindsTo = [ "sway-session.target" ];
+    BindsTo = ["sway-session.target"];
-    After = [ "sway-session.target" ];
+    After = ["sway-session.target"];
   };
   Service = {
     Type = "simple";
@@ -14,6 +13,6 @@
     TimeoutStopSec = "10";
   };
   Install = {
-    WantedBy = [ "sway-session.target" ];
+    WantedBy = ["sway-session.target"];
   };
 }

modules/sway/mako.service.nix

@@ -1,11 +1,10 @@
-{ pkgs, ... }:
+{pkgs, ...}: {
-{
   Unit = {
     Description = "Lightweight Wayland notification daemon";
-    Documentation = [ "man:mako(1)" ];
+    Documentation = ["man:mako(1)"];
-    BindsTo = [ "sway-session.target" ];
+    BindsTo = ["sway-session.target"];
-    After = [ "sway-session.target" ];
+    After = ["sway-session.target"];
-    ConditionEnvironment = [ "WAYLAND_DISPLAY" ];
+    ConditionEnvironment = ["WAYLAND_DISPLAY"];
   };
   Service = {
     Type = "dbus";
@@ -14,6 +13,6 @@
     ExecReload = "${pkgs.mako}/bin/makoctl reload";
   };
   Install = {
-    WantedBy = [ "sway-session.target" ];
+    WantedBy = ["sway-session.target"];
   };
 }

modules/sway/sway-session.target.nix

@@ -1,10 +1,9 @@
-{ pkgs, ... }:
+{pkgs, ...}: {
-{
   Unit = {
     Description = "sway compositor session";
-    Documentation = [ "man:systemd.special(7)" ];
+    Documentation = ["man:systemd.special(7)"];
-    BindsTo = [ "graphical-session.target" ];
+    BindsTo = ["graphical-session.target"];
-    Wants = [ "graphical-session-pre.target" ];
+    Wants = ["graphical-session-pre.target"];
-    After = [ "graphical-session-pre.target" ];
+    After = ["graphical-session-pre.target"];
   };
 }

modules/sway/sway.service.nix

@@ -1,11 +1,10 @@
-{ pkgs, ... }:
+{pkgs, ...}: {
-{
   Unit = {
     Description = "sway - SirCmpwn's Wayland window manager";
-    Documentation = [ "man:sway(5)" ];
+    Documentation = ["man:sway(5)"];
-    BindsTo = [ "graphical-session.target" ];
+    BindsTo = ["graphical-session.target"];
-    Wants = [ "graphical-session-pre.target" ];
+    Wants = ["graphical-session-pre.target"];
-    After = [ "graphical-session-pre.target" ];
+    After = ["graphical-session-pre.target"];
   };
   Service = {
     Type = "simple";