ghostty

tldr
jq
2026-04-22 09:55:16 +01:00 · 2026-04-17 11:19:44 +01:00 · 2026-04-16 16:07:34 +01:00 · 2026-04-16 10:13:43 +01:00 · 2026-04-15 13:36:36 +01:00 · 2026-04-14 19:57:28 +01:00
16 changed files with 260 additions and 470 deletions
@@ -1,20 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-: "${BRANCH:?BRANCH is required}"
-: "${FILE:?FILE is required}"
-: "${COMMIT_MESSAGE:?COMMIT_MESSAGE is required}"
-
-git config user.name "gitea actions"
-git config user.email "actions@localhost"
-
-git checkout -B "$BRANCH"
-git add "$FILE"
-
-if git diff --cached --quiet; then
-  echo "No staged changes for ${FILE}; skipping commit"
-  exit 0
-fi
-
-git commit -m "$COMMIT_MESSAGE"
-git push --force origin "$BRANCH"
@@ -1,48 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-: "${GITEA_API:?GITEA_API is required}"
-: "${GITEA_TOKEN:?GITEA_TOKEN is required}"
-: "${BRANCH:?BRANCH is required}"
-: "${TITLE:?TITLE is required}"
-: "${BODY:?BODY is required}"
-
-owner_prefix="${HEAD_OWNER_PREFIX:-thomas}"
-
-existing=$(curl -fsS \
-  -H "Authorization: token ${GITEA_TOKEN}" \
-  "${GITEA_API}/pulls?state=open" \
-  | python -c 'import json,sys,os; d=json.load(sys.stdin); b=os.environ["BRANCH"]; print(next((str(pr["number"]) for pr in d if isinstance(pr,dict) and pr.get("head",{}).get("ref")==b), ""))')
-
-if [ -n "$existing" ]; then
-  echo "PR already exists: #$existing"
-  exit 0
-fi
-
-echo "Creating PR..."
-created="false"
-for head in "${BRANCH}" "${owner_prefix}:${BRANCH}"; do
-  echo "Trying head=${head}"
-  payload=$(HEAD_REF="$head" TITLE="$TITLE" BODY="$BODY" python -c 'import json,os; print(json.dumps({"title": os.environ["TITLE"], "head": os.environ["HEAD_REF"], "base": "main", "body": os.environ["BODY"]}))')
-  response=$(curl -sS -w '\n%{http_code}' -X POST \
-    -H "Authorization: token ${GITEA_TOKEN}" \
-    -H "Content-Type: application/json" \
-    "${GITEA_API}/pulls" \
-    -d "$payload")
-
-  body=$(printf '%s\n' "$response" | sed '$d')
-  code=$(printf '%s\n' "$response" | tail -n1)
-
-  echo "Create PR status: $code"
-  echo "$body"
-
-  if [ "$code" -ge 200 ] && [ "$code" -lt 300 ]; then
-    created="true"
-    break
-  fi
-done
-
-if [ "$created" != "true" ]; then
-  echo "PR creation failed"
-  exit 1
-fi
@@ -1,72 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-: "${FILE:?FILE is required}"
-: "${LATEST_RELEASE_URL:?LATEST_RELEASE_URL is required}"
-: "${DOWNLOAD_URL_TEMPLATE:?DOWNLOAD_URL_TEMPLATE is required}"
-
-if command -v python >/dev/null 2>&1; then
-  PYTHON_BIN=python
-elif command -v python3 >/dev/null 2>&1; then
-  PYTHON_BIN=python3
-else
-  echo "python is required but was not found"
-  exit 1
-fi
-
-version_strip_prefix="${LATEST_VERSION_STRIP_PREFIX:-v}"
-release_tag_template="${RELEASE_TAG_TEMPLATE:-{version}}"
-release_tag_template="${release_tag_template//$'\r'/}"
-
-current_version=$($PYTHON_BIN - <<'PY'
-import re
-import os
-p=os.environ["FILE"]
-s=open(p).read()
-m=re.search(r'version\s*=\s*"([^"]+)";', s)
-print(m.group(1) if m else "")
-PY
-)
-
-latest_version=$(curl -fsSLI -o /dev/null -w '%{url_effective}' "$LATEST_RELEASE_URL" \
-  | sed -E 's#.*/##')
-
-if [ -n "$version_strip_prefix" ]; then
-  latest_version="${latest_version#${version_strip_prefix}}"
-fi
-
-echo "current=$current_version"
-echo "latest=$latest_version"
-
-if [ -z "$latest_version" ] || [ "$latest_version" = "$current_version" ]; then
-  echo "updated=false" >> "$GITHUB_OUTPUT"
-  exit 0
-fi
-
-download_url="${DOWNLOAD_URL_TEMPLATE//\{version\}/$latest_version}"
-new_hash=$(nix store prefetch-file --json "$download_url" | "$PYTHON_BIN" -c 'import json,sys; print(json.load(sys.stdin)["hash"])')
-
-export LATEST_VERSION="$latest_version"
-export NEW_HASH="$new_hash"
-
-"$PYTHON_BIN" - <<'PY'
-import os
-import re
-p=os.environ["FILE"]
-s=open(p).read()
-s=re.sub(r'version\s*=\s*"[^"]+"', f'version = "{os.environ["LATEST_VERSION"]}"', s, count=1)
-s=re.sub(r'hash\s*=\s*"[^"]+"', f'hash = "{os.environ["NEW_HASH"]}"', s, count=1)
-open(p,"w").write(s)
-PY
-
-release_tag="${release_tag_template//\{version\}/$latest_version}"
-release_tag="${release_tag#\{}"
-release_tag="${release_tag%\}}"
-release_tag="${release_tag#\'}"
-release_tag="${release_tag%\'}"
-release_url="${LATEST_RELEASE_URL%/latest}/tag/${release_tag}"
-
-echo "updated=true" >> "$GITHUB_OUTPUT"
-echo "version=$latest_version" >> "$GITHUB_OUTPUT"
-echo "previous_version=$current_version" >> "$GITHUB_OUTPUT"
-echo "release_url=$release_url" >> "$GITHUB_OUTPUT"
@@ -1,70 +0,0 @@
-name: handy update
-
-on:
-  schedule:
-    - cron: "40 6 * * *"
-  workflow_dispatch:
-
-jobs:
-  update-handy:
-    runs-on: ubuntu-latest
-    steps:
-      - name: checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: install nix
-        uses: cachix/install-nix-action@v27
-        with:
-          nix_path: nixpkgs=channel:nixos-unstable
-
-      - name: check latest handy release and update file
-        id: update
-        env:
-          FILE: modules/pkgs/handy.nix
-          LATEST_RELEASE_URL: https://github.com/cjpais/Handy/releases/latest
-          DOWNLOAD_URL_TEMPLATE: https://github.com/cjpais/Handy/releases/download/v{version}/Handy_{version}_amd64.AppImage
-          RELEASE_TAG_TEMPLATE: v{version}
-        shell: bash
-        run: bash .gitea/scripts/update-appimage-nix.sh
-
-      - name: create branch and commit
-        if: steps.update.outputs.updated == 'true'
-        shell: bash
-        run: |
-          set -euo pipefail
-          version="${{ steps.update.outputs.version }}"
-
-          BRANCH="bot/handy-${version}" \
-          FILE="modules/pkgs/handy.nix" \
-          COMMIT_MESSAGE="update handy to ${version}" \
-          bash .gitea/scripts/commit-update.sh
-
-      - name: open pull request
-        if: steps.update.outputs.updated == 'true'
-        env:
-          GITEA_TOKEN: ${{ secrets.tea_token || secrets.TEA_TOKEN }}
-        shell: bash
-        run: |
-          set -euo pipefail
-
-          version="${{ steps.update.outputs.version }}"
-          previous_version="${{ steps.update.outputs.previous_version }}"
-          release_url="${{ steps.update.outputs.release_url }}"
-
-          pr_body=$(cat <<EOF
-          automated update of handy appimage version and hash
-
-          ## changelog
-          from \`${previous_version}\` to \`${version}\`
-
-          upstream release: ${release_url}
-          EOF
-          )
-
-          GITEA_API="https://gitea.unrail.xyz/api/v1/repos/thomas/nixos-config" \
-          BRANCH="bot/handy-${version}" \
-          TITLE="update handy to ${version}" \
-          BODY="$pr_body" \
-          bash .gitea/scripts/create-gitea-pr.sh
@@ -1,70 +0,0 @@
-name: helium update
-
-on:
-  schedule:
-    - cron: "0 6 * * *"
-  workflow_dispatch:
-
-jobs:
-  update-helium:
-    runs-on: ubuntu-latest
-    steps:
-      - name: checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: install nix
-        uses: cachix/install-nix-action@v27
-        with:
-          nix_path: nixpkgs=channel:nixos-unstable
-
-      - name: check latest helium release and update file
-        id: update
-        env:
-          FILE: modules/pkgs/helium.nix
-          LATEST_RELEASE_URL: https://github.com/imputnet/helium-linux/releases/latest
-          DOWNLOAD_URL_TEMPLATE: https://github.com/imputnet/helium-linux/releases/download/{version}/helium-{version}-x86_64.AppImage
-          RELEASE_TAG_TEMPLATE: '{version}'
-        shell: bash
-        run: bash .gitea/scripts/update-appimage-nix.sh
-
-      - name: create branch and commit
-        if: steps.update.outputs.updated == 'true'
-        shell: bash
-        run: |
-          set -euo pipefail
-          version="${{ steps.update.outputs.version }}"
-
-          BRANCH="bot/helium-${version}" \
-          FILE="modules/pkgs/helium.nix" \
-          COMMIT_MESSAGE="update helium to ${version}" \
-          bash .gitea/scripts/commit-update.sh
-
-      - name: open pull request
-        if: steps.update.outputs.updated == 'true'
-        env:
-          GITEA_TOKEN: ${{ secrets.tea_token || secrets.TEA_TOKEN }}
-        shell: bash
-        run: |
-          set -euo pipefail
-
-          version="${{ steps.update.outputs.version }}"
-          previous_version="${{ steps.update.outputs.previous_version }}"
-          release_url="${{ steps.update.outputs.release_url }}"
-
-          pr_body=$(cat <<EOF
-          automated update of helium appimage version and hash
-
-          ## changelog
-          from \`${previous_version}\` to \`${version}\`
-
-          upstream release: ${release_url}
-          EOF
-          )
-
-          GITEA_API="https://gitea.unrail.xyz/api/v1/repos/thomas/nixos-config" \
-          BRANCH="bot/helium-${version}" \
-          TITLE="update helium to ${version}" \
-          BODY="$pr_body" \
-          bash .gitea/scripts/create-gitea-pr.sh
@@ -1,70 +0,0 @@
-name: zen browser update
-
-on:
-  schedule:
-    - cron: "20 6 * * *"
-  workflow_dispatch:
-
-jobs:
-  update-zen-browser:
-    runs-on: ubuntu-latest
-    steps:
-      - name: checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: install nix
-        uses: cachix/install-nix-action@v27
-        with:
-          nix_path: nixpkgs=channel:nixos-unstable
-
-      - name: check latest zen browser release and update file
-        id: update
-        env:
-          FILE: modules/pkgs/zen-browser.nix
-          LATEST_RELEASE_URL: https://github.com/zen-browser/desktop/releases/latest
-          DOWNLOAD_URL_TEMPLATE: https://github.com/zen-browser/desktop/releases/download/{version}/zen-x86_64.AppImage
-          RELEASE_TAG_TEMPLATE: '{version}'
-        shell: bash
-        run: bash .gitea/scripts/update-appimage-nix.sh
-
-      - name: create branch and commit
-        if: steps.update.outputs.updated == 'true'
-        shell: bash
-        run: |
-          set -euo pipefail
-          version="${{ steps.update.outputs.version }}"
-
-          BRANCH="bot/zen-browser-${version}" \
-          FILE="modules/pkgs/zen-browser.nix" \
-          COMMIT_MESSAGE="update zen browser to ${version}" \
-          bash .gitea/scripts/commit-update.sh
-
-      - name: open pull request
-        if: steps.update.outputs.updated == 'true'
-        env:
-          GITEA_TOKEN: ${{ secrets.tea_token || secrets.TEA_TOKEN }}
-        shell: bash
-        run: |
-          set -euo pipefail
-
-          version="${{ steps.update.outputs.version }}"
-          previous_version="${{ steps.update.outputs.previous_version }}"
-          release_url="${{ steps.update.outputs.release_url }}"
-
-          pr_body=$(cat <<EOF
-          automated update of zen browser appimage version and hash
-
-          ## changelog
-          from \`${previous_version}\` to \`${version}\`
-
-          upstream release: ${release_url}
-          EOF
-          )
-
-          GITEA_API="https://gitea.unrail.xyz/api/v1/repos/thomas/nixos-config" \
-          BRANCH="bot/zen-browser-${version}" \
-          TITLE="update zen browser to ${version}" \
-          BODY="$pr_body" \
-          bash .gitea/scripts/create-gitea-pr.sh
@@ -50,11 +50,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1772408722,
-        "narHash": "sha256-rHuJtdcOjK7rAHpHphUb1iCvgkU3GpfvicLMwwnfMT0=",
+        "lastModified": 1775087534,
+        "narHash": "sha256-91qqW8lhL7TLwgQWijoGBbiD4t7/q75KTi8NxjVmSmA=",
        "owner": "hercules-ci",
        "repo": "flake-parts",
-        "rev": "f20dc5d9b8027381c474144ecabc9034d6a839a3",
+        "rev": "3107b77cd68437b9a76194f0f7f9c55f2329ca5b",
        "type": "github"
      },
      "original": {
@@ -63,6 +63,43 @@
        "type": "github"
      }
    },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "gsf": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": "nixpkgs_2"
+      },
+      "locked": {
+        "lastModified": 1774464988,
+        "narHash": "sha256-F0pVG3ou+yN+jqQlFXMf27BCeShDuZcpoeHFSord8xk=",
+        "ref": "refs/heads/main",
+        "rev": "3bccad3870d1f7220c423f06d21ed9b91d1b90d1",
+        "revCount": 10,
+        "type": "git",
+        "url": "https://gitea.unrail.xyz/thomas/gotta-scroll-fast"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://gitea.unrail.xyz/thomas/gotta-scroll-fast"
+      }
+    },
    "home-manager": {
      "inputs": {
        "nixpkgs": [
@@ -86,11 +123,11 @@
    },
    "import-tree": {
      "locked": {
-        "lastModified": 1772999353,
-        "narHash": "sha256-dPb0WxUhFaz6wuR3B6ysqFJpsu8txKDPZvS47AT2XLI=",
+        "lastModified": 1773693634,
+        "narHash": "sha256-BtZ2dtkBdSUnFPPFc+n0kcMbgaTxzFNPv2iaO326Ffg=",
        "owner": "vic",
        "repo": "import-tree",
-        "rev": "545a4df146fce44d155573e47f5a777985acf912",
+        "rev": "c41e7d58045f9057880b0d85e1152d6a4430dbf1",
        "type": "github"
      },
      "original": {
@@ -99,6 +136,21 @@
        "type": "github"
      }
    },
+    "maccel": {
+      "locked": {
+        "lastModified": 1771614512,
+        "narHash": "sha256-KzvNWDGVpoNcR9wcIOlwxr6Nwtgt9Hicck/0fswhi7U=",
+        "owner": "Gnarus-G",
+        "repo": "maccel",
+        "rev": "c7c1369d4bd4f240b38365cd43bd696d06635e4d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Gnarus-G",
+        "repo": "maccel",
+        "type": "github"
+      }
+    },
    "nixpkgs": {
      "locked": {
        "lastModified": 1754028485,
@@ -117,11 +169,27 @@
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1772773019,
-        "narHash": "sha256-E1bxHxNKfDoQUuvriG71+f+s/NT0qWkImXsYZNFFfCs=",
+        "lastModified": 1774106199,
+        "narHash": "sha256-US5Tda2sKmjrg2lNHQL3jRQ6p96cgfWh3J1QBliQ8Ws=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "aca4d95fce4914b3892661bcb80b8087293536c6",
+        "rev": "6c9a78c09ff4d6c21d0319114873508a6ec01655",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_3": {
+      "locked": {
+        "lastModified": 1775710090,
+        "narHash": "sha256-ar3rofg+awPB8QXDaFJhJ2jJhu+KqN/PRCXeyuXR76E=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "4c1018dae018162ec878d42fec712642d214fdfa",
        "type": "github"
      },
      "original": {
@@ -135,8 +203,11 @@
      "inputs": {
        "agenix": "agenix",
        "flake-parts": "flake-parts",
+        "gsf": "gsf",
        "import-tree": "import-tree",
-        "nixpkgs": "nixpkgs_2"
+        "maccel": "maccel",
+        "nixpkgs": "nixpkgs_3",
+        "thomas-pkgs": "thomas-pkgs"
      }
    },
    "systems": {
@@ -153,6 +224,47 @@
        "repo": "default",
        "type": "github"
      }
+    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "thomas-pkgs": {
+      "inputs": {
+        "flake-parts": [
+          "flake-parts"
+        ],
+        "import-tree": [
+          "import-tree"
+        ],
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1776256561,
+        "narHash": "sha256-Nd4NEBweLpk9xhw6YT97moPRw72TqUkYLkqF3Q6EdPU=",
+        "ref": "refs/heads/main",
+        "rev": "a7195da8e85f8b965f81e082b243f8f038482de2",
+        "revCount": 7,
+        "type": "git",
+        "url": "https://gitea.unrail.xyz/thomas/thomas-likes-nix-pkgs"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://gitea.unrail.xyz/thomas/thomas-likes-nix-pkgs"
+      }
    }
  },
  "root": "root",
@@ -10,6 +10,15 @@

    import-tree.url = "github:vic/import-tree";
    agenix.url = "github:ryantm/agenix";
+    maccel.url = "github:Gnarus-G/maccel";
+    gsf.url = "git+https://gitea.unrail.xyz/thomas/gotta-scroll-fast";
+
+    thomas-pkgs = {
+      url = "git+https://gitea.unrail.xyz/thomas/thomas-likes-nix-pkgs";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-parts.follows = "flake-parts";
+      inputs.import-tree.follows = "import-tree";
+    };
  };

  outputs =
@@ -1,14 +1,13 @@
 {
  inputs,
-  self,
  ...
 }: {
  flake.nixosModules.browsers = {pkgs, ...}: {
    programs.firefox.enable = true;

    environment.systemPackages = [
-      self.packages.${pkgs.stdenv.hostPlatform.system}.zen-browser
-      self.packages.${pkgs.stdenv.hostPlatform.system}.helium
+      inputs.thomas-pkgs.packages.${pkgs.stdenv.hostPlatform.system}.zen-browser
+      inputs.thomas-pkgs.packages.${pkgs.stdenv.hostPlatform.system}.helium
    ];
  };
 }
@@ -1,5 +1,11 @@
-{inputs, ...}: {
+{config, ...}: let
+  flakeConfig = config;
+in {
  flake.nixosModules.development = {pkgs, ...}: {
+    virtualisation.docker.enable = true;
+
+    users.users.${flakeConfig.username}.extraGroups = ["docker"];
+
    environment.systemPackages = with pkgs; [
      nodejs_24
      go
@@ -12,7 +18,11 @@
      lazygit
      pnpm
      ni
+
+      # AI
      code-cursor-fhs
+      codex
+      cursor-cli

      # LSPs and formatters (previously via Mason)
      stylua
@@ -1,10 +1,11 @@
-{ inputs, ... }: {
-	flake.nixosModules.fonts = {pkgs, ...}: {
-		fonts.packages = with pkgs; [
-			nerd-fonts.iosevka-term-slab
-			nerd-fonts.iosevka
-			nerd-fonts.fira-mono
-			nerd-fonts.fira-code
-		];
-	};
+{...}: {
+  flake.nixosModules.fonts = {pkgs, ...}: {
+    fonts.packages = with pkgs; [
+      nerd-fonts.iosevka-term-slab
+      nerd-fonts.iosevka
+      nerd-fonts.fira-mono
+      nerd-fonts.fira-code
+      nerd-fonts.proggy-clean-tt
+    ];
+  };
 }
@@ -14,9 +14,13 @@ in {
  }: let
    smbSecretFile = ../../secrets/smb-credentials.age;
    hasSmbSecret = builtins.pathExists smbSecretFile;
+
+    gsfDevice = "/dev/input/by-id/usb-Ploopy_Corporation_Ploopy_Adept_Trackball_E6626067D39C532A0000000000000000-if02-event-mouse";
  in {
    imports = [
      inputs.agenix.nixosModules.default
+      inputs.maccel.nixosModules.default
+      inputs.gsf.nixosModules.default
      ../../hardware-configuration.nix
    ];

@@ -28,7 +32,18 @@ in {
    boot.kernelPackages = pkgs.linuxPackages_latest;

    # Custom EDID override for Samsung 240Hz on DP-1
-    boot.kernelParams = ["drm.edid_firmware=DP-1:edid/g80.bin"];
+    # Extreme mt7921e fallback: disable PCIe ASPM globally
+    boot.kernelParams = [
+      "drm.edid_firmware=DP-1:edid/g80.bin"
+      "pcie_aspm=off"
+    ];
+
+    # mt7921e stability tweaks
+    boot.extraModprobeConfig = ''
+      options mt7921e disable_aspm=Y
+      options mt7921e disable_clc=Y
+    '';
+
    hardware.firmware = [
      (pkgs.runCommand "g80-edid-firmware" {} ''
        install -Dm444 ${../assets/edid/g80.bin} $out/lib/firmware/edid/g80.bin
@@ -39,7 +54,39 @@ in {
    networking.hostName = "nixos";

    # Networking
-    networking.networkmanager.enable = true;
+    networking.networkmanager = {
+      enable = true;
+      wifi.powersave = false;
+      settings.device."wifi.scan-rand-mac-address" = "no";
+    };
+
+    # Work around mt7921e getting stuck after suspend/resume
+    environment.etc."systemd/system-sleep/99-mt7921e-reset" = {
+      text = ''
+        #!/bin/sh
+        case "$1" in
+          post)
+            ${pkgs.kmod}/bin/modprobe -r mt7921e || true
+            ${pkgs.kmod}/bin/modprobe mt7921e
+            ;;
+        esac
+      '';
+      mode = "0755";
+    };
+
+    # LocalSend
+    networking.firewall = {
+      allowedTCPPorts = [53317];
+      allowedUDPPorts = [53317];
+    };
+
+    # WebHID/VIA access on Linux (VIA needs hidraw access)
+    services.udev.extraRules = ''
+      # General VIA rule (matches vial docs/reddit workaround)
+      KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0660", GROUP="users", TAG+="uaccess", TAG+="udev-acl"
+      # Explicit Ploopy Adept (VID:PID 5043:5c47)
+      KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="5043", ATTRS{idProduct}=="5c47", MODE="0660", GROUP="users", TAG+="uaccess", TAG+="udev-acl"
+    '';

    # Time zone
    time.timeZone = "Europe/Lisbon";
@@ -86,13 +133,42 @@ in {
      extraGroups = ["networkmanager" "wheel"];
    };

+    users.groups.maccel.members = [flakeConfig.username];
+
+    hardware.maccel = {
+      enable = true;
+      enableCli = true;
+      parameters = {
+        mode = "linear";
+        sensMultiplier = 1.0;
+        yxRatio = 1.0;
+        inputDpi = 1000.0;
+        angleRotation = 0.0;
+        acceleration = 0.3;
+        offset = 2.0;
+        outputCap = 2.0;
+      };
+    };
+
+    hardware.gsf = {
+      enable = true;
+      device = gsfDevice;
+      inputGroupUsers = [flakeConfig.username];
+    };
+
    # Programs

    # Allow unfree
    nixpkgs.config.allowUnfree = true;

-    # Enable flakes
-    nix.settings.experimental-features = ["nix-command" "flakes"];
+    # Use Lix as the system Nix implementation
+    nix.package = pkgs.lixPackageSets.stable.lix;
+
+    # Enable flakes + restrict who can submit builds to the daemon
+    nix.settings = {
+      experimental-features = ["nix-command" "flakes"];
+      allowed-users = ["root" flakeConfig.username];
+    };

    # Auto-unlock gnome-keyring on login
    security.pam.services.login.enableGnomeKeyring = true;
@@ -1,4 +1,4 @@
-{self, ...}: {
+{inputs, ...}: {
  flake.nixosModules.packages = {pkgs, ...}: {
    environment.systemPackages = with pkgs; [
      fd
@@ -6,6 +6,8 @@
      nerdfetch
      libnotify
      alacritty
+      ghostty
+      foot
      fzf
      autojump
      yazi
@@ -19,13 +21,35 @@
      slack
      feishin
      obsidian
-      self.packages.${pkgs.stdenv.hostPlatform.system}.handy
+      nextcloud-client
+      inputs.thomas-pkgs.packages.${pkgs.stdenv.hostPlatform.system}.handy
+      inputs.thomas-pkgs.packages.${pkgs.stdenv.hostPlatform.system}.t3code
      mpv
      ffmpeg
      tmux
      obs-studio
      jjui
      bat
+      localsend
+      # postman
+      bruno
+      bruno-cli
+      tenacity
+      inputs.thomas-pkgs.packages.${pkgs.stdenv.hostPlatform.system}.ocenaudio
+      jq
+      tldr
    ];
+
+    systemd.user.services.handy = {
+      description = "Handy";
+      wantedBy = ["graphical-session.target"];
+      partOf = ["graphical-session.target"];
+      after = ["graphical-session.target"];
+      serviceConfig = {
+        ExecStart = "${inputs.thomas-pkgs.packages.${pkgs.stdenv.hostPlatform.system}.handy}/bin/handy";
+        Restart = "on-failure";
+        RestartSec = 5;
+      };
+    };
  };
 }
@@ -1,28 +0,0 @@
-{...}: {
-  perSystem = {pkgs, ...}: {
-    packages.handy = pkgs.appimageTools.wrapType2 rec {
-      pname = "handy";
-      version = "0.7.12";
-
-      src = pkgs.fetchurl {
-        url = "https://github.com/cjpais/Handy/releases/download/v${version}/Handy_${version}_amd64.AppImage";
-        hash = "sha256-Qh82PvZErWWhARs7ZzoGFllQXKsF63GUGqG5taT+kV8=";
-      };
-
-      extraInstallCommands = let
-        contents = pkgs.appimageTools.extract {inherit pname version src;};
-      in ''
-        desktop_file=$(find ${contents} -name "*.desktop" | head -n1)
-        if [ -n "$desktop_file" ]; then
-          install -m 444 -D "$desktop_file" "$out/share/applications/${pname}.desktop"
-          substituteInPlace "$out/share/applications/${pname}.desktop" \
-            --replace 'Exec=AppRun' 'Exec=${pname}' || true
-        fi
-
-        if [ -d ${contents}/usr/share/icons ]; then
-          cp -r ${contents}/usr/share/icons $out/share
-        fi
-      '';
-    };
-  };
-}
@@ -1,22 +0,0 @@
-{ ... }: {
-  perSystem = { pkgs, ... }: {
-    packages.helium = pkgs.appimageTools.wrapType2 rec {
-      pname = "helium";
-      version = "0.10.6.1";
-
-      src = pkgs.fetchurl {
-        url = "https://github.com/imputnet/helium-linux/releases/download/${version}/${pname}-${version}-x86_64.AppImage";
-        hash = "sha256-6xqNRaP3aqitEseexRVEEjKkJClC0j1HHZoRGQanhSk=";
-      };
-
-      extraInstallCommands = let
-        contents = pkgs.appimageTools.extract { inherit pname version src; };
-      in ''
-        install -m 444 -D ${contents}/${pname}.desktop -t $out/share/applications
-        substituteInPlace $out/share/applications/${pname}.desktop \
-          --replace 'Exec=AppRun' 'Exec=${pname}'
-        cp -r ${contents}/usr/share/icons $out/share
-      '';
-    };
-  };
-}
@@ -1,41 +0,0 @@
-{lib, ...}: {
-  perSystem = {pkgs, ...}: let
-    pname = "zen-browser";
-    version = "1.19.3b";
-
-    src = pkgs.fetchurl {
-      url = "https://github.com/zen-browser/desktop/releases/download/${version}/zen-x86_64.AppImage";
-      hash = "sha256-p00Irv2z6brDXMx3cr0234lOZZ2a7FmJMDzN494nzMw=";
-    };
-
-    appimageContents = pkgs.appimageTools.extract {inherit pname version src;};
-  in {
-    packages.zen-browser = pkgs.appimageTools.wrapType2 {
-      inherit pname version src;
-
-      extraPkgs = pkgs: [pkgs.ffmpeg-full];
-
-      extraInstallCommands = ''
-        desktop_file=$(find ${appimageContents} -name "*.desktop" | head -n1)
-        if [ -n "$desktop_file" ]; then
-          install -m 444 -D "$desktop_file" "$out/share/applications/${pname}.desktop"
-          substituteInPlace "$out/share/applications/${pname}.desktop" \
-            --replace 'Exec=zen' 'Exec=${pname}'
-        fi
-
-        if [ -d ${appimageContents}/usr/share/icons ]; then
-          cp -r ${appimageContents}/usr/share/icons $out/share
-        fi
-
-        ln -s $out/bin/${pname} $out/bin/zen
-      '';
-
-      meta = {
-        description = "Experience tranquillity while browsing the web without people tracking you!";
-        homepage = "https://zen-browser.app";
-        license = lib.licenses.mpl20;
-        platforms = ["x86_64-linux"];
-      };
-    };
-  };
-}
Author	SHA1	Message	Date
thomas	ca7a254a45	ghostty	2026-04-22 09:55:16 +01:00
thomas	b887dcf9a2	tldr	2026-04-17 11:19:44 +01:00
thomas	752c69d313	jq	2026-04-16 16:07:34 +01:00
thomas	3cdef5f330	cursor cli	2026-04-16 10:13:43 +01:00
thomas	515519d8e3	fix ocenaudio	2026-04-15 13:36:36 +01:00
thomas	2f77549285	flake update	2026-04-14 19:57:28 +01:00
thomas	4aa6aa5f1c	ocenaudio and tenacity	2026-04-14 19:49:48 +01:00
thomas	3bd14b4479	separate custom pkgs into its own repo	2026-04-13 16:24:34 +01:00
thomas	51b9d97cd1	foot helium update / update-helium (push) Successful in 12s Details zen browser update / update-zen-browser (push) Successful in 9s Details handy update / update-handy (push) Successful in 10s Details t3code update / update-t3code (push) Successful in 10s Details	2026-04-09 14:14:38 +01:00
thomas	f5646aa790	bruno better	2026-04-09 14:07:05 +01:00
thomas	d74ff3fb05	postman	2026-04-09 14:06:56 +01:00
thomas	5bfb471047	proggy clean	2026-04-08 11:03:48 +01:00
thomas	5e21664124	lix	2026-04-08 00:52:28 +01:00
thomas	6f4e3d6444	attempt wifi fix	2026-04-08 00:16:35 +01:00
thomas	6efa23d145	fix handy helium update / update-helium (push) Successful in 13s Details zen browser update / update-zen-browser (push) Successful in 14s Details handy update / update-handy (push) Successful in 9s Details t3code update / update-t3code (push) Successful in 12s Details	2026-04-01 14:49:46 +01:00
thomas	2ebdafd916	add localsend	2026-03-29 11:42:19 +01:00
thomas	0a625747e5	wifi fixes	2026-03-26 23:33:23 +00:00
thomas	38ee805597	start handy on startup helium update / update-helium (push) Successful in 12s Details zen browser update / update-zen-browser (push) Successful in 11s Details handy update / update-handy (push) Successful in 9s Details t3code update / update-t3code (push) Successful in 11s Details	2026-03-25 19:31:24 +00:00
thomas	a6d9984871	nextcloud-client	2026-03-25 19:23:47 +00:00
thomas	e0b3b8e35c	update flake	2026-03-25 18:58:59 +00:00
thomas	71a7e9e349	update gsf input and remove host-specific gsfd service overrides	2026-03-25 18:57:20 +00:00
thomas	1117fe32e7	set gsfd stats path in nixos service env	2026-03-25 17:29:37 +00:00
thomas	1e226ddeb6	restore maccel declarative parameters	2026-03-25 17:29:37 +00:00
thomas	4551e5134e	integrate gsf via flake input and hardware.gsf module	2026-03-25 17:29:37 +00:00
thomas	ead8ff2afd	stop declarative maccel parameter tuning in nixos	2026-03-25 17:29:37 +00:00
thomas	e4b4fbd13a	add maccel	2026-03-25 17:29:37 +00:00
thomas	c176a082c8	via rules	2026-03-25 17:29:37 +00:00
thomas	c14a95e58e	docker	2026-03-25 17:29:37 +00:00
thomas	b917372b8a	add t3 code pkg	2026-03-25 17:29:37 +00:00
thomas	2568471aa6	update handy to 0.8.0 (#18 ) automated update of handy appimage version and hash ## changelog from `0.7.12` to `0.8.0` upstream release: https://github.com/cjpais/Handy/releases/tag/v0.8.0 Co-authored-by: gitea actions <actions@localhost> Reviewed-on: #18	2026-03-25 13:21:07 +00:00
thomas	896247d7ba	update helium to 0.10.6.1 (#17 ) helium update / update-helium (push) Successful in 9s Details zen browser update / update-zen-browser (push) Successful in 5s Details handy update / update-handy (push) Successful in 9s Details automated update of helium appimage version and hash ## changelog from `0.10.5.1` to `0.10.6.1` upstream release: https://github.com/imputnet/helium-linux/releases/tag/0.10.6.1 Co-authored-by: gitea actions <actions@localhost> Reviewed-on: #17	2026-03-22 16:03:47 +00:00