undo accidental closing bracket removal

.gitignore

@@ -0,0 +1 @@
+.vscode/settings.json

.sops.yaml

@@ -3,9 +3,11 @@ keys:
     - &andreas age19j24x89dfh4f7v58c8k64yupqas4f7qkkyper7yj9dd7vqwvvq0qkyvhxk # generated using cli
   - hosts:
     - &th0nkpad-nixos age1ma8x6wugvc40mkst33mejq0m6r44jk6zwjjun3znyer5nztgn9vs0nwjx4 # derived from ssh host key
+    - &drivebystation-nix age1s5qwsuc3e4m3c4w5hl6tyja70w273gr60j9j9dcpc6mz69lemg3qpwud3h #derived from ssh host key
 creation_rules:
  - path_regex: secrets.yaml$
    key_groups:
    - age:
      - *andreas
      - *th0nkpad-nixos
+     - *drivebystation-nix

flake.lock

@@ -1,17 +1,107 @@
 {
   "nodes": {
-    "flake-compat": {
+    "aagl": {
-      "flake": false,
+      "inputs": {
+        "flake-compat": "flake-compat",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "rust-overlay": "rust-overlay"
+      },
       "locked": {
-        "lastModified": 1717312683,
+        "lastModified": 1767520119,
-        "narHash": "sha256-FrlieJH50AuvagamEvWMIE6D2OAnERuDboFDYAED/dE=",
+        "narHash": "sha256-+OmNQLA9Fv5WBaxYHlPghS9XmnYWDaLt+AatCGhG+hc=",
-        "owner": "nix-community",
+        "owner": "ezKEa",
-        "repo": "flake-compat",
+        "repo": "aagl-gtk-on-nix",
-        "rev": "38fd3954cf65ce6faf3d0d45cd26059e059f07ea",
+        "rev": "5720d3282844b6b23b26dfac075a5f1f58ea8844",
         "type": "github"
       },
       "original": {
-        "owner": "nix-community",
+        "owner": "ezKEa",
+        "repo": "aagl-gtk-on-nix",
+        "type": "github"
+      }
+    },
+    "anikki": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1766470910,
+        "narHash": "sha256-iY0vJAAjY5ZveB6JIAQDHq7lFrkAVGnO0tC7YOYDFsg=",
+        "owner": "Hion-V",
+        "repo": "Anikki-flake",
+        "rev": "95d15448466142126c7fc13ac1dbdaf58a36a3a5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Hion-V",
+        "repo": "Anikki-flake",
+        "type": "github"
+      }
+    },
+    "cachyos-kernel": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1769201405,
+        "narHash": "sha256-k/KQL7J9ZnLlF28E6ywGpfo5dxkuxCcEtJ/XEZDTw3M=",
+        "owner": "CachyOS",
+        "repo": "linux-cachyos",
+        "rev": "ff53672af48a106f52857d62c9275b165cc452ef",
+        "type": "github"
+      },
+      "original": {
+        "owner": "CachyOS",
+        "repo": "linux-cachyos",
+        "type": "github"
+      }
+    },
+    "cachyos-kernel-patches": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1769199354,
+        "narHash": "sha256-y1DKMryOr1w4xcZnDkaZjvENIPmr3j/YB4Srtfd3I2Y=",
+        "owner": "CachyOS",
+        "repo": "kernel-patches",
+        "rev": "c8b990198baf3c34b64e4e5c5ffeb7c068eede1a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "CachyOS",
+        "repo": "kernel-patches",
+        "type": "github"
+      }
+    },
+    "crane": {
+      "locked": {
+        "lastModified": 1754269165,
+        "narHash": "sha256-0tcS8FHd4QjbCVoxN9jI+PjHgA4vc/IjkUSp+N3zy0U=",
+        "owner": "ipetkov",
+        "repo": "crane",
+        "rev": "444e81206df3f7d92780680e45858e31d2f07a08",
+        "type": "github"
+      },
+      "original": {
+        "owner": "ipetkov",
+        "repo": "crane",
+        "type": "github"
+      }
+    },
+    "flake-compat": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1761588595,
+        "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",
+        "owner": "edolstra",
+        "repo": "flake-compat",
+        "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "edolstra",
         "repo": "flake-compat",
         "type": "github"
       }
@@ -19,11 +109,11 @@
     "flake-compat_2": {
       "flake": false,
       "locked": {
-        "lastModified": 1696426674,
+        "lastModified": 1747046372,
-        "narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=",
+        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
         "owner": "edolstra",
         "repo": "flake-compat",
-        "rev": "0f9255e01c2351cc7d116c072cb317785dd33b33",
+        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
         "type": "github"
       },
       "original": {
@@ -35,11 +125,27 @@
     "flake-compat_3": {
       "flake": false,
       "locked": {
-        "lastModified": 1696426674,
+        "lastModified": 1767039857,
-        "narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=",
+        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "repo": "flake-compat",
+        "type": "github"
+      }
+    },
+    "flake-compat_4": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1767039857,
+        "narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
         "owner": "edolstra",
         "repo": "flake-compat",
-        "rev": "0f9255e01c2351cc7d116c072cb317785dd33b33",
+        "rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
         "type": "github"
       },
       "original": {
@@ -48,16 +154,71 @@
         "type": "github"
       }
     },
+    "flake-compat_5": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1650374568,
+        "narHash": "sha256-Z+s0J8/r907g149rllvwhb4pKi8Wam5ij0st8PwAh+E=",
+        "owner": "edolstra",
+        "repo": "flake-compat",
+        "rev": "b4a34015c698c7793d592d66adbab377907a2be8",
+        "type": "github"
+      },
+      "original": {
+        "owner": "edolstra",
+        "repo": "flake-compat",
+        "type": "github"
+      }
+    },
+    "flake-parts": {
+      "inputs": {
+        "nixpkgs-lib": [
+          "lanzaboote",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1754091436,
+        "narHash": "sha256-XKqDMN1/Qj1DKivQvscI4vmHfDfvYR2pfuFOJiCeewM=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "67df8c627c2c39c41dbec76a1f201929929ab0bd",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
+    "flake-parts_2": {
+      "inputs": {
+        "nixpkgs-lib": "nixpkgs-lib"
+      },
+      "locked": {
+        "lastModified": 1768135262,
+        "narHash": "sha256-PVvu7OqHBGWN16zSi6tEmPwwHQ4rLPU9Plvs8/1TUBY=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "80daad04eddbbf5a4d883996a73f3f542fa437ac",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
     "flake-utils": {
       "inputs": {
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1710146030,
+        "lastModified": 1731533236,
-        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
         "owner": "numtide",
         "repo": "flake-utils",
-        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
         "type": "github"
       },
       "original": {
@@ -87,7 +248,7 @@
     },
     "flake-utils_2": {
       "inputs": {
-        "systems": "systems_2"
+        "systems": "systems_3"
       },
       "locked": {
         "lastModified": 1694529238,
@@ -105,7 +266,9 @@
     },
     "game-of-life": {
       "inputs": {
-        "nixpkgs": "nixpkgs"
+        "nixpkgs": [
+          "nixpkgs"
+        ]
       },
       "locked": {
         "lastModified": 1728511087,
@@ -121,6 +284,28 @@
         "type": "github"
       }
     },
+    "gitignore": {
+      "inputs": {
+        "nixpkgs": [
+          "lanzaboote",
+          "pre-commit-hooks-nix",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1709087332,
+        "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -128,11 +313,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1730837930,
+        "lastModified": 1769450270,
-        "narHash": "sha256-0kZL4m+bKBJUBQse0HanewWO0g8hDdCvBhudzxgehqc=",
+        "narHash": "sha256-pdVm/zJazDUAasTyHFX/Pbrlk9Upjxi0yzgn7GjGe4g=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "2f607e07f3ac7e53541120536708e824acccfaa8",
+        "rev": "a10c1e8f5ad2589414407f4851c221cb66270257",
         "type": "github"
       },
       "original": {
@@ -141,39 +326,110 @@
         "type": "github"
       }
     },
-    "nixos-cosmic": {
+    "home-manager_2": {
       "inputs": {
-        "flake-compat": "flake-compat",
+        "nixpkgs": [
-        "nixpkgs": "nixpkgs_2",
+          "zen-browser",
-        "nixpkgs-stable": "nixpkgs-stable",
+          "nixpkgs"
-        "rust-overlay": "rust-overlay"
+        ]
       },
       "locked": {
-        "lastModified": 1730776371,
+        "lastModified": 1768434960,
-        "narHash": "sha256-qLH/qtoBoKZJ5I2Ry312jCVJTfXu6XcCdcXPPAyJhBM=",
+        "narHash": "sha256-cJbFn17oyg6qAraLr+NVeNJrXsrzJdrudkzI4H2iTcg=",
-        "owner": "lilyinstarlight",
+        "owner": "nix-community",
-        "repo": "nixos-cosmic",
+        "repo": "home-manager",
-        "rev": "c62f5e8c7a9a1ebc4013b617e0e054011c747d49",
+        "rev": "b4d88c9ac42ae1a745283f6547701da43b6e9f9b",
         "type": "github"
       },
       "original": {
-        "owner": "lilyinstarlight",
+        "owner": "nix-community",
-        "repo": "nixos-cosmic",
+        "repo": "home-manager",
+        "type": "github"
+      }
+    },
+    "kwin-effects-forceblur": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "utils": "utils"
+      },
+      "locked": {
+        "lastModified": 1755098995,
+        "narHash": "sha256-6FN7XEf27DenQHDIKjrjOW3tGIaJlyqRlXarmt1v+M0=",
+        "owner": "taj-ny",
+        "repo": "kwin-effects-forceblur",
+        "rev": "51a1d49d7fd7df3ce40ccf6ba4c4410cf6f510e1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "taj-ny",
+        "repo": "kwin-effects-forceblur",
+        "type": "github"
+      }
+    },
+    "lanzaboote": {
+      "inputs": {
+        "crane": "crane",
+        "flake-compat": "flake-compat_2",
+        "flake-parts": "flake-parts",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "pre-commit-hooks-nix": "pre-commit-hooks-nix",
+        "rust-overlay": "rust-overlay_2"
+      },
+      "locked": {
+        "lastModified": 1762205063,
+        "narHash": "sha256-If6vQ+KvtKs3ARBO9G3l+4wFSCYtRBrwX1z+I+B61wQ=",
+        "owner": "nix-community",
+        "repo": "lanzaboote",
+        "rev": "88b8a563ff5704f4e8d8e5118fb911fa2110ca05",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-community",
+        "ref": "v0.4.3",
+        "repo": "lanzaboote",
+        "type": "github"
+      }
+    },
+    "nix-cachyos-kernel": {
+      "inputs": {
+        "cachyos-kernel": "cachyos-kernel",
+        "cachyos-kernel-patches": "cachyos-kernel-patches",
+        "flake-compat": "flake-compat_3",
+        "flake-parts": "flake-parts_2",
+        "nixpkgs": "nixpkgs_2"
+      },
+      "locked": {
+        "lastModified": 1769363279,
+        "narHash": "sha256-XJCuB8GWkFLRFBR6GQoxRB9/lobB45ERp0JN0Lo2nvs=",
+        "owner": "xddxdd",
+        "repo": "nix-cachyos-kernel",
+        "rev": "4aa98db78c1d663c3dad59775e95ad93fe58a844",
+        "type": "github"
+      },
+      "original": {
+        "owner": "xddxdd",
+        "ref": "release",
+        "repo": "nix-cachyos-kernel",
         "type": "github"
       }
     },
     "nixos-wsl": {
       "inputs": {
-        "flake-compat": "flake-compat_2",
+        "flake-compat": "flake-compat_4",
-        "flake-utils": "flake-utils",
+        "nixpkgs": [
-        "nixpkgs": "nixpkgs_3"
+          "nixpkgs"
+        ]
       },
       "locked": {
-        "lastModified": 1726981058,
+        "lastModified": 1769217863,
-        "narHash": "sha256-065MWSg1xhMdYun53S7mWKUEDviAEyxT/kl6JrjZwe4=",
+        "narHash": "sha256-RY9kJDXD6+2Td/59LkZ0PFSereCXHdBX9wIkbYjRKCY=",
         "owner": "nix-community",
         "repo": "NixOS-WSL",
-        "rev": "f9f28d8ff5288f821f1e64ec03185a9bb0edb0d0",
+        "rev": "38a5250e57f583662eac3b944830e4b9e169e965",
         "type": "github"
       },
       "original": {
@@ -185,91 +441,58 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1717179513,
+        "lastModified": 1744536153,
-        "narHash": "sha256-vboIEwIQojofItm2xGCdZCzW96U85l9nDW3ifMuAIdM=",
+        "narHash": "sha256-awS2zRgF4uTwrOKwwiJcByDzDOdo3Q1rPZbiHQg/N38=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "63dacb46bf939521bdc93981b4cbb7ecb58427a0",
+        "rev": "18dd725c29603f582cf1900e0d25f9f1063dbf11",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
-        "ref": "24.05",
+        "ref": "nixpkgs-unstable",
         "repo": "nixpkgs",
         "type": "github"
       }
     },
-    "nixpkgs-stable": {
+    "nixpkgs-lib": {
       "locked": {
-        "lastModified": 1730602179,
+        "lastModified": 1765674936,
-        "narHash": "sha256-efgLzQAWSzJuCLiCaQUCDu4NudNlHdg2NzGLX5GYaEY=",
+        "narHash": "sha256-k00uTP4JNfmejrCLJOwdObYC9jHRrr/5M/a/8L2EIdo=",
-        "owner": "NixOS",
+        "owner": "nix-community",
-        "repo": "nixpkgs",
+        "repo": "nixpkgs.lib",
-        "rev": "3c2f1c4ca372622cb2f9de8016c9a0b1cbd0f37c",
+        "rev": "2075416fcb47225d9b68ac469a5c4801a9c4dd85",
         "type": "github"
       },
       "original": {
-        "owner": "NixOS",
+        "owner": "nix-community",
-        "ref": "nixos-24.05",
+        "repo": "nixpkgs.lib",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs-stable_2": {
-      "locked": {
-        "lastModified": 1730602179,
-        "narHash": "sha256-efgLzQAWSzJuCLiCaQUCDu4NudNlHdg2NzGLX5GYaEY=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "3c2f1c4ca372622cb2f9de8016c9a0b1cbd0f37c",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "release-24.05",
-        "repo": "nixpkgs",
         "type": "github"
       }
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1730531603,
+        "lastModified": 1769300497,
-        "narHash": "sha256-Dqg6si5CqIzm87sp57j5nTaeBbWhHFaVyG7V6L8k3lY=",
+        "narHash": "sha256-W7NbQnQGqUPRnpHOlLXk3g52TSQDkFVzhax9YNv9K+U=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "7ffd9ae656aec493492b44d0ddfb28e79a1ea25d",
+        "rev": "60f9d776547020ff3be5a2cfbd0a457fddd88ecc",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
-        "ref": "nixos-unstable",
+        "ref": "nixos-unstable-small",
         "repo": "nixpkgs",
         "type": "github"
       }
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1726320982,
+        "lastModified": 1769170682,
-        "narHash": "sha256-RuVXUwcYwaUeks6h3OLrEmg14z9aFXdWppTWPMTwdQw=",
+        "narHash": "sha256-oMmN1lVQU0F0W2k6OI3bgdzp2YOHWYUAw79qzDSjenU=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "8f7492cce28977fbf8bd12c72af08b1f6c7c3e49",
+        "rev": "c5296fdd05cfa2c187990dd909864da9658df755",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-24.05",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_4": {
-      "locked": {
-        "lastModified": 1728241625,
-        "narHash": "sha256-yumd4fBc/hi8a9QgA9IT8vlQuLZ2oqhkJXHPKxH/tRw=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "c31898adf5a8ed202ce5bea9f347b1c6871f32d1",
         "type": "github"
       },
       "original": {
@@ -279,30 +502,80 @@
         "type": "github"
       }
     },
-    "root": {
+    "pre-commit-hooks-nix": {
-      "inputs": {
-        "game-of-life": "game-of-life",
-        "home-manager": "home-manager",
-        "nixos-cosmic": "nixos-cosmic",
-        "nixos-wsl": "nixos-wsl",
-        "nixpkgs": "nixpkgs_4",
-        "snowfall-lib": "snowfall-lib",
-        "sops-nix": "sops-nix"
-      }
-    },
-    "rust-overlay": {
       "inputs": {
+        "flake-compat": [
+          "lanzaboote",
+          "flake-compat"
+        ],
+        "gitignore": "gitignore",
         "nixpkgs": [
-          "nixos-cosmic",
+          "lanzaboote",
           "nixpkgs"
         ]
       },
       "locked": {
-        "lastModified": 1730687492,
+        "lastModified": 1750779888,
-        "narHash": "sha256-xQVadjquBA/tFxDt5A55LJ1D1AvkVWsnrKC2o+pr8F4=",
+        "narHash": "sha256-wibppH3g/E2lxU43ZQHC5yA/7kIKLGxVEnsnVK1BtRg=",
+        "owner": "cachix",
+        "repo": "pre-commit-hooks.nix",
+        "rev": "16ec914f6fb6f599ce988427d9d94efddf25fe6d",
+        "type": "github"
+      },
+      "original": {
+        "owner": "cachix",
+        "repo": "pre-commit-hooks.nix",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "aagl": "aagl",
+        "anikki": "anikki",
+        "game-of-life": "game-of-life",
+        "home-manager": "home-manager",
+        "kwin-effects-forceblur": "kwin-effects-forceblur",
+        "lanzaboote": "lanzaboote",
+        "nix-cachyos-kernel": "nix-cachyos-kernel",
+        "nixos-wsl": "nixos-wsl",
+        "nixpkgs": "nixpkgs_3",
+        "snowfall-lib": "snowfall-lib",
+        "sops-nix": "sops-nix",
+        "trilium-next-pr": "trilium-next-pr",
+        "zen-browser": "zen-browser"
+      }
+    },
+    "rust-overlay": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      },
+      "locked": {
+        "lastModified": 1764470739,
+        "narHash": "sha256-sa9f81B1dWO16QtgDTWHX8DQbiHKzHndpaunY5EQtwE=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "41814763a2c597755b0755dbe3e721367a5e420f",
+        "rev": "3bfa664055e1a09c6aedab5533c5fc8d6ca5741a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "oxalica",
+        "repo": "rust-overlay",
+        "type": "github"
+      }
+    },
+    "rust-overlay_2": {
+      "inputs": {
+        "nixpkgs": [
+          "lanzaboote",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1761791894,
+        "narHash": "sha256-myRIDh+PxaREz+z9LzbqBJF+SnTFJwkthKDX9zMyddY=",
+        "owner": "oxalica",
+        "repo": "rust-overlay",
+        "rev": "59c45eb69d9222a4362673141e00ff77842cd219",
         "type": "github"
       },
       "original": {
@@ -313,18 +586,18 @@
     },
     "snowfall-lib": {
       "inputs": {
-        "flake-compat": "flake-compat_3",
+        "flake-compat": "flake-compat_5",
         "flake-utils-plus": "flake-utils-plus",
         "nixpkgs": [
           "nixpkgs"
         ]
       },
       "locked": {
-        "lastModified": 1719005984,
+        "lastModified": 1765361626,
-        "narHash": "sha256-mpFl3Jv4fKnn+5znYXG6SsBjfXHJdRG5FEqNSPx0GLA=",
+        "narHash": "sha256-kX0Dp/kYSRbQ+yd9e3lmmUWdNbipufvKfL2IzbrSpnY=",
         "owner": "snowfallorg",
         "repo": "lib",
-        "rev": "c6238c83de101729c5de3a29586ba166a9a65622",
+        "rev": "c566ad8b7352c30ec3763435de7c8f1c46ebb357",
         "type": "github"
       },
       "original": {
@@ -337,15 +610,14 @@
       "inputs": {
         "nixpkgs": [
           "nixpkgs"
-        ],
+        ]
-        "nixpkgs-stable": "nixpkgs-stable_2"
       },
       "locked": {
-        "lastModified": 1730883027,
+        "lastModified": 1769469829,
-        "narHash": "sha256-pvXMOJIqRW0trsW+FzRMl6d5PbsM4rWfD5lcKCOrrwI=",
+        "narHash": "sha256-wFcr32ZqspCxk4+FvIxIL0AZktRs6DuF8oOsLt59YBU=",
         "owner": "mic92",
         "repo": "sops-nix",
-        "rev": "c5ae1e214ff935f2d3593187a131becb289ea639",
+        "rev": "c5eebd4eb2e3372fe12a8d70a248a6ee9dd02eff",
         "type": "github"
       },
       "original": {
@@ -383,6 +655,76 @@
         "repo": "default",
         "type": "github"
       }
+    },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "trilium-next-pr": {
+      "locked": {
+        "lastModified": 1736678965,
+        "narHash": "sha256-2A687i3Rq0/wqJVvpgaiRPWcfnBBuBhPjKaT8cnd7o0=",
+        "owner": "FliegendeWurst",
+        "repo": "nixpkgs",
+        "rev": "4fcdf706929246476e52e960760b6643cb8395c4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "FliegendeWurst",
+        "ref": "trilium-next",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "utils": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1726560853,
+        "narHash": "sha256-X6rJYSESBVr3hBoH0WbKE5KvhPU5bloyZ2L4K60/fPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "c1dfcf08411b08f6b8615f7d8971a2bfa81d5e8a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "zen-browser": {
+      "inputs": {
+        "home-manager": "home-manager_2",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1769431876,
+        "narHash": "sha256-FnOW+ulwocxfYGVKV2H/7MlSbn52+hfX9oaRR6FClZ4=",
+        "owner": "0xc000022070",
+        "repo": "zen-browser-flake",
+        "rev": "d5ef79d18dca7617aefe511db8267d47f7cf953f",
+        "type": "github"
+      },
+      "original": {
+        "owner": "0xc000022070",
+        "repo": "zen-browser-flake",
+        "type": "github"
+      }
     }
   },
   "root": "root",

flake.nix

@@ -3,24 +3,54 @@
 
   inputs = {
     # nixpkgs.url = "github:nixos/nixpkgs/nixos-24.05";
-    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable"; # Use nixos-unstable for latest kernel and packages
-    nixos-wsl.url = "github:nix-community/NixOS-WSL/main";
+    nixos-wsl = {
+      url = "github:nix-community/NixOS-WSL/main";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     # Snowfallorg's Flake utility
     snowfall-lib = {
       url = "github:snowfallorg/lib";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    game-of-life.url = "github:local-interloper/game-of-life";
+    game-of-life = {
-    nixos-cosmic.url = "github:lilyinstarlight/nixos-cosmic";
+      url = "github:local-interloper/game-of-life";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     # Add sops-nix for secrets management
     sops-nix = {
       url = "github:mic92/sops-nix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    zen-browser = {
+      url = "github:0xc000022070/zen-browser-flake";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     home-manager = {
       url = "github:nix-community/home-manager";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    trilium-next-pr = {
+      url = "github:FliegendeWurst/nixpkgs/trilium-next";
+      # Don't follow nixpkgs as this repo has its own pinned nixpkgs
+    };
+    anikki = {
+      url = "github:Hion-V/Anikki-flake";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    lanzaboote = {
+      url = "github:nix-community/lanzaboote/v0.4.3";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    kwin-effects-forceblur = {
+      url = "github:taj-ny/kwin-effects-forceblur";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    aagl = {
+      url = "github:ezKEa/aagl-gtk-on-nix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    nix-cachyos-kernel.url = "github:xddxdd/nix-cachyos-kernel/release";
   };
 
   outputs = inputs:
@@ -60,7 +90,20 @@
       inherit inputs;
       src = ./.;
       
+      overlays = with inputs; [
+        # Use the exact kernel versions as defined in this repo.
+        # Guarantees you have binary cache.
+        nix-cachyos-kernel.overlays.pinned
+
+        # Alternatively, build the kernels on top of nixpkgs version in your flake.
+        # This might cause version mismatch/build failures!
+        # nix-cachyos-kernel.overlays.default
+
+        # Only use one of the two overlays!
+      ];
+      
       nixos = with inputs; [
+        
         # disko.nixosModules.disko
         # impermanence.nixosModules.impermanence
         home-manager.nixosModules.home-manager
@@ -77,6 +120,25 @@
 
       systems.modules.nixos = with inputs; [
         # my-input.nixosModules.my-module
+        lanzaboote.nixosModules.lanzaboote ({ pkgs, lib, ... }: {
+          environment.systemPackages = [
+            # For debugging and troubleshooting Secure Boot.
+            pkgs.sbctl
+          ];
+
+
+          boot.loader.systemd-boot.configurationLimit = 4;
+          # Lanzaboote currently replaces the systemd-boot module.
+          # This setting is usually set to true in configuration.nix
+          # generated at installation time. So we force it to false
+          # for now.
+          boot.loader.systemd-boot.enable = lib.mkForce false;
+
+          boot.lanzaboote = {
+            enable = true;
+            pkiBundle = "/var/lib/sbctl";
+          };
+        })
       ];
 
       # The attribute set specified here will be passed directly to NixPkgs when
@@ -84,7 +146,9 @@
       channels-config = {
         # Allow unfree packages.
         allowUnfree = true;
-
+        permittedInsecurePackages = [
+          "mbedtls-2.28.10" # needed for haxe 4.3.6
+        ];
         # # Allow certain insecure packages
         # permittedInsecurePackages = [
         #   "firefox-100.0.0"

homes/x86_64-linux/andreas@drivebystation-nix/default.nix

@@ -1,5 +1,6 @@
 { config
 , lib
+, inputs
 , pkgs
 , ...
 }:
@@ -13,6 +14,7 @@ in
   my-namespace.home = {
     stream-tools = enabled;
     gnome-customizations = enabled;
+    vesktop-appimage = enabled;
     # networking = enabled;
     # personal-apps = enabled;
     # suites.laptop = enabled;
@@ -20,13 +22,26 @@ in
   home = {
     packages = [
       pkgs.nil
-      pkgs.steam
-      pkgs.gamemode
       pkgs.beeper
       pkgs.my-namespace.udev-steelseries
       pkgs.qbittorrent
-      pkgs.vesktop
+      pkgs.hyfetch
+      pkgs.libreoffice
+      pkgs.localsend
+      # pkgs.vesktop
       pkgs.obsidian
+      inputs.zen-browser.packages.x86_64-linux.default    
+      inputs.kwin-effects-forceblur.packages.${pkgs.stdenv.hostPlatform.system}.default
     ];
   };
+  
+  # Auto-start linux-wallpaperengine for dual monitors via XDG autostart
+  xdg.configFile."autostart/linux-wallpaperengine.desktop".text = ''
+    [Desktop Entry]
+    Type=Application
+    Name=Wallpaper Engine
+    Exec=${pkgs.my-namespace.linux-wallpaperengine}/bin/linux-wallpaperengine --screen-root DP-1 --bg 2935872330 -f 12 --screen-root DP-2 --bg 2935872330 -f 12
+    X-KDE-autostart-after=panel
+    X-KDE-StartupNotify=false
+  '';
 }

homes/x86_64-linux/gaming@drivebystation-nix/default.nix

@@ -20,12 +20,10 @@ in
   home = {
     packages = [
       pkgs.nil
-      pkgs.steam
-      pkgs.gamemode
       pkgs.beeper
       pkgs.my-namespace.udev-steelseries
       pkgs.qbittorrent
-      pkgs.vesktop
+      #pkgs.vesktop
     ];
   };
 }

modules/home/home/default.nix

@@ -1,21 +1,42 @@
 {
-  config,
+  # Snowfall Lib provides a customized `lib` instance with access to your flake's library
-  lib,
+  # as well as the libraries available from your flake's inputs.
-  pkgs,
+  lib
-  ...
+, # An instance of `pkgs` with your overlays and packages applied is also available.
-}: let
+  pkgs
+, # You also have access to your flake's inputs.
+  inputs
+, # Additional metadata is provided by Snowfall Lib.
+  namespace
+, # The namespace used for your flake, defaulting to "internal" if not set.
+  system
+, # The system architecture for this host (eg. `x86_64-linux`).
+  target
+, # The Snowfall Lib target for this system (eg. `x86_64-iso`).
+  format
+, # A normalized name for the system target (eg. `iso`).
+  virtual
+, # A boolean to determine whether this system is a virtual target using nixos-generators.
+  systems
+, # An attribute map of your defined hosts.
+  # All other arguments come from the module system.
+  config
+, ...
+}:
+let
   inherit (lib) mkIf;
   inherit (lib.my-namespace) enabled;
 
   imp = config.my-namespace.home.impermanence.enable;
-in {
+in
+{
   config = {
     home = {
       packages = with pkgs; [
         inetutils
         neofetch
         tmux
-        nerdfonts
+        # nerdfonts
         p7zip
         rclone
         ripgrep
@@ -52,8 +73,6 @@ in {
       };
       home-manager = enabled;
     };
-    services = {
+    services = { };
-      
-    };
   };
 }

modules/home/stream-tools/default.nix

@@ -16,11 +16,19 @@ in {
   config = mkIf cfg.enable {
     programs.obs-studio = {
       enable = true;
-      plugins = [ pkgs.obs-studio-plugins.droidcam-obs ];
+      plugins = with pkgs.obs-studio-plugins; [
+        wlrobs
+        obs-backgroundremoval
+        obs-pipewire-audio-capture
+        obs-vaapi #optional AMD hardware acceleration
+        obs-gstreamer
+        obs-vkcapture
+        pkgs.my-namespace.droidcam-obs  # Custom override with FFmpeg 6
+      ];
     };
     home = {
       packages = with pkgs; [
-        # obs-studio
+        config.programs.obs-studio.finalPackage
         droidcam
       ];
     };

modules/home/vesktop-appimage/default.nix

@@ -0,0 +1,49 @@
+{ config, pkgs, lib, ... }:
+let
+  inherit (lib) mkEnableOption mkIf;
+  cfg = config.my-namespace.home.vesktop-appimage;
+  vesktopVersion = "1.6.4";
+
+  vesktopAppImage = pkgs.runCommand "vesktop-appimage" { } ''
+    cp ${pkgs.fetchurl {
+      url = "https://github.com/Vencord/Vesktop/releases/download/v${vesktopVersion}/Vesktop-${vesktopVersion}.AppImage";
+      sha256 = "sha256-o7A8DBQyutONeLp5rstq9hQko2xxbvYZvGGM8/YOQ8s=";      
+    }} $out
+    chmod +x $out
+  '';
+
+  vesktopWrapped = pkgs.writeShellScriptBin "vesktop" ''
+    exec ${pkgs.appimage-run}/bin/appimage-run ${vesktopAppImage} "$@"
+  '';
+
+  vesktopIcon = pkgs.fetchurl {
+    url = "https://raw.githubusercontent.com/Vencord/Vesktop/main/build/icon.svg";
+    sha256 = "sha256-fQ+dvbPIb4AFd9f7JqIt7+twJdEMQF9jTTwrk5p1vn8=";
+  };
+
+in
+{
+  options.my-namespace.home.vesktop-appimage = {
+    enable = mkEnableOption "Install Vesktop (AppImage) with Vencord support";
+  };
+
+  config = mkIf cfg.enable {
+
+    xdg.dataFile."icons/hicolor/scalable/apps/vesktop.svg".source = vesktopIcon;
+
+    home.packages = [
+      pkgs.appimage-run
+      vesktopWrapped
+    ];
+
+    xdg.desktopEntries.vesktop = {
+      name = "Vesktop";
+      comment = "Discord client with Vencord (AppImage)";
+      exec = "${vesktopWrapped}/bin/vesktop";
+      icon = "vesktop";
+      terminal = false;
+      type = "Application";
+      categories = [ "Network" "Chat" ];
+    };
+  };
+}

modules/nixos/desktop-environment/default.nix

@@ -0,0 +1,98 @@
+{ config, lib, pkgs, namespace, ... }:
+
+let
+  cfg = config.${namespace}.desktop-environment;
+in {
+
+  options.${namespace}.desktop-environment = {
+    xfce = {
+      enable = lib.mkEnableOption "XFCE desktop environment";
+    };
+    gnome = {
+      enable = lib.mkEnableOption "GNOME desktop environment";
+    };
+    kde = {
+      enable = lib.mkEnableOption "KDE Plasma desktop environment";
+    };
+    cosmic = {
+      enable = lib.mkEnableOption "Cosmic desktop environment";
+    };
+    hyprland = {
+      enable = lib.mkEnableOption "hyprland Wayland shell";
+    };
+  };
+
+  config = lib.mkMerge [
+    (lib.mkIf cfg.xfce.enable {
+      services.xserver = {
+        enable = true;
+        desktopManager = {
+          xfce.enable = true;
+        };
+      };
+      environment.systemPackages = with pkgs; [
+        xfce4-pulseaudio-plugin
+        xfce4-clipman-plugin
+        xfce4-screenshooter
+        xfce4-whiskermenu-plugin
+        thunar-archive-plugin
+        thunar-volman
+        gvfs
+        gnome-keyring
+        libgnome-keyring
+      ];
+    })
+
+    (lib.mkIf cfg.gnome.enable {
+      services.xserver = {
+        enable = true;
+      };
+      services.desktopManager.gnome.enable = true;
+      environment.systemPackages = with pkgs; [
+        gnome-tweaks
+        gnome-software
+        gnomeExtensions.pop-shell
+        gnome-remote-desktop
+      ];
+    })
+
+    (lib.mkIf cfg.kde.enable {
+      services.xserver.enable = true;
+      services.desktopManager.plasma6.enable = true;
+      environment.systemPackages = with pkgs; [
+        kdePackages.qtwebsockets
+        kdePackages.qtwebchannel
+        kdePackages.korganizer
+        kdePackages.akonadi
+        kdePackages.akonadi-calendar
+        kdePackages.akonadi-contacts
+        kdePackages.kaddressbook
+        kdePackages.kmail
+        kdePackages.kdepim-runtime
+        kdePackages.kontact
+        kdePackages.kidentitymanagement
+        kdePackages.libkdepim
+        kdePackages.kwin
+        kdePackages.plasma-workspace
+        gnome-keyring
+        libgnome-keyring
+      ];
+    })
+    (lib.mkIf cfg.cosmic.enable {
+      services.desktopManager.cosmic.enable = true;
+      services.desktopManager.cosmic.xwayland.enable = true;
+      environment.systemPackages = with pkgs; [
+        
+        gnome-keyring
+        libgnome-keyring
+      ];
+    })
+    (lib.mkIf cfg.hyprland.enable {
+      programs.hyprland.enable = true; # enable Hyprland
+      environment.systemPackages = with pkgs; [
+        pkgs.kitty # required for the default Hyprland config
+      ];
+    })
+  ];
+
+}

modules/nixos/gnome-keyring/default.nix

@@ -0,0 +1,30 @@
+{ config, lib, pkgs, namespace, options, ... }:
+
+let
+  cfg = config.${namespace}.gnome-keyring;
+in {
+  options.${namespace}.gnome-keyring = {
+    enable = lib.mkEnableOption "Enable GNOME Keyring integration";    
+  };
+  
+  config = lib.mkIf cfg.enable {
+    services.gnome.gnome-keyring.enable = true;
+    
+    # PAM configuration for automatic keyring unlock
+    security.pam.services.sddm.enableGnomeKeyring = true;
+    security.pam.services.login.enableGnomeKeyring = true;
+    security.pam.services.gdm.enableGnomeKeyring = true;
+
+    # Make KDE apps use GNOME Keyring as the Secret Service backend
+    environment.variables = {
+      # Set GNOME Keyring as the SSH agent
+      SSH_AUTH_SOCK = "$XDG_RUNTIME_DIR/keyring/ssh";
+    };
+
+    environment.systemPackages = with pkgs; [
+      seahorse # GUI for managing the keyring
+      gcr # Keyring integration
+      libsecret # Secret Service API library for KDE apps
+    ];
+  };
+}

modules/nixos/hardware/graphics-nvidia-prime-amd/default.nix

@@ -1,131 +0,0 @@
-{ config
-, lib
-, pkgs
-, ...
-}:
-let
-  inherit (lib) mkEnableOption mkIf;
-  inherit (lib.my-namespace) disabled enabled;
-
-  cfg = config.my-namespace.hardware.graphics-nvidia-prime-amd;
-in
-{
-  options.my-namespace.hardware.graphics-nvidia-prime-amd = {
-    enable = mkEnableOption "Enable nvidia";
-  };
-  config = mkIf cfg.enable {
-
-    # Enable NVIDIA driver for X11 and Wayland
-    services.xserver.videoDrivers = [ "amdgpu" "nvidia" ];
-
-    # Enable OpenGL
-    hardware.graphics = {
-      enable = true;
-      extraPackages = with pkgs; [ nvidia-vaapi-driver ];
-    };
-
-    # Use Beta Driver Package
-    boot.extraModulePackages = [ config.boot.kernelPackages.nvidia_x11_beta ];
-
-
-
-    boot.loader.systemd-boot.consoleMode = "max";
-
-    # Enable required Kernel Modules
-    boot.initrd.kernelModules = [
-      "amdgpu"
-      "nvidia"
-      # "nvidia-drm"
-      "nvidiafb"
-      # "nvidia-uvm"
-      # "nvidia-modeset"
-      # "i2c-nvidia_gpu"    
-    ];
-
-
-    boot.kernelParams = [
-      "amdgpu.modeset=1"
-      "nvidia-drm.fbdev=1"
-      "nvidia-drm.modeset=0"
-      #  "nvidia.NVreg_PreserveVideoMemoryAllocations=0"
-      "amd_iommu=on"
-      # "vfio-pci.ids=\"10de:2489,10de:228b\""
-      # "nomodeset"
-      #  "nvidia_drm.modeset=1"
-    ];
-
-
-    # Blacklist intel and nouveau
-    boot.blacklistedKernelModules = [
-      "i915"
-      "nouveau"
-      # "nvidia"
-      # "nvidia-drm"
-      # "nvidia-uvm"
-      # "nvidiafb"
-      # "nvidia_drm"
-      # "nvidia_modeset"
-    ];
-
-    # Extra blacklist nouveau
-    boot.extraModprobeConfig = ''
-      blacklist nouveau
-      options nouveau modeset=0
-    '';
-
-    # Configure NVIDIA driver
-    hardware.nvidia = {
-      # Modesetting is required.
-      modesetting.enable = true;
-
-      # Nvidia power management. Experimental, and can cause sleep/suspend to fail.
-      # Enable this if you have graphical corruption issues or application crashes after waking
-      # up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead 
-      # of just the bare essentials.
-      powerManagement.enable = true;
-
-      # Fine-grained power management. Turns off GPU when not in use.
-      # Experimental and only works on modern Nvidia GPUs (Turing or newer).
-      powerManagement.finegrained = false;
-
-      # Use the NVidia open source kernel module (not to be confused with the
-      # independent third-party "nouveau" open source driver).
-      # Support is limited to the Turing and later architectures. Full list of 
-      # supported GPUs is at: 
-      # https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus 
-      # Only available from driver 515.43.04+
-      # Currently alpha-quality/buggy, so false is currently the recommended setting.
-      open = false;
-
-      # Enable the Nvidia settings menu,
-      # accessible via `nvidia-settings`.
-      nvidiaSettings = true;
-
-      # Optionally, you may need to select the appropriate driver version for your specific GPU.
-      package = config.boot.kernelPackages.nvidiaPackages.beta;
-      # package = config.boot.kernelPackages.nvidiaPackages.none;
-      # package = config.boot.kernelPackages.nvidiaPackages.production;
-
-      forceFullCompositionPipeline = false;
-
-      prime = {
-        offload = {
-          enable = true;
-          enableOffloadCmd = true;
-        };
-        reverseSync.enable = false;
-        # Make sure to use the correct Bus ID values for your system!
-        # intelBusId = "PCI:0:2:0";
-        nvidiaBusId = "PCI:01:0:0";
-        amdgpuBusId = "PCI:50:0:0"; #For AMD GPU
-      };
-
-    };
-
-    # Add user to extra groups
-    users.users.andreas = {
-      extraGroups = [ "video" "render" ];
-    };
-
-  };
-}

modules/nixos/keychron-keyboard/default.nix

@@ -0,0 +1,120 @@
+{ config, lib, pkgs, namespace, ... }:
+
+let
+  cfg = config.${namespace}.keychron-keyboard;
+in {
+  options.${namespace}.keychron-keyboard = {
+    enable = lib.mkEnableOption "Enable Keychron keyboard configuration";
+    # Add additional options here, e.g. vendor/product IDs, keymaps, etc.
+  };
+
+  config = lib.mkIf cfg.enable {
+
+    # Create the plugdev group and ensure users can access HID devices
+    users.groups.plugdev = {};
+
+    hardware.keyboard.qmk.keychronSupport = true;
+    services.udev.packages = with pkgs; [ qmk qmk-udev-rules ];
+
+
+    # Example udev rule or keychron-specific settings
+    services.udev.extraRules = ''
+      # Atmel DFU
+      ### ATmega16U2
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="03eb", ATTRS{idProduct}=="2fef", TAG+="uaccess"
+      ### ATmega32U2
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="03eb", ATTRS{idProduct}=="2ff0", TAG+="uaccess"
+      ### ATmega16U4
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="03eb", ATTRS{idProduct}=="2ff3", TAG+="uaccess"
+      ### ATmega32U4
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="03eb", ATTRS{idProduct}=="2ff4", TAG+="uaccess"
+      ### AT90USB64
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="03eb", ATTRS{idProduct}=="2ff9", TAG+="uaccess"
+      ### AT90USB162
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="03eb", ATTRS{idProduct}=="2ffa", TAG+="uaccess"
+      ### AT90USB128
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="03eb", ATTRS{idProduct}=="2ffb", TAG+="uaccess"
+
+      # Input Club
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="1c11", ATTRS{idProduct}=="b007", TAG+="uaccess"
+
+      # STM32duino
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="1eaf", ATTRS{idProduct}=="0003", TAG+="uaccess"
+      # STM32 DFU
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="0483", ATTRS{idProduct}=="df11", TAG+="uaccess"
+
+      # BootloadHID
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="16c0", ATTRS{idProduct}=="05df", TAG+="uaccess"
+
+      # USBAspLoader
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="16c0", ATTRS{idProduct}=="05dc", TAG+="uaccess"
+
+      # USBtinyISP
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="1782", ATTRS{idProduct}=="0c9f", TAG+="uaccess"
+
+      # ModemManager should ignore the following devices
+      # Atmel SAM-BA (Massdrop)
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="03eb", ATTRS{idProduct}=="6124", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+
+      # Caterina (Pro Micro)
+      ## pid.codes shared PID
+      ### Keyboardio Atreus 2 Bootloader
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="1209", ATTRS{idProduct}=="2302", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ## Spark Fun Electronics
+      ### Pro Micro 3V3/8MHz
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b4f", ATTRS{idProduct}=="9203", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ### Pro Micro 5V/16MHz
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b4f", ATTRS{idProduct}=="9205", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ### LilyPad 3V3/8MHz (and some Pro Micro clones)
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="1b4f", ATTRS{idProduct}=="9207", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ## Pololu Electronics
+      ### A-Star 32U4
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="1ffb", ATTRS{idProduct}=="0101", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ## Arduino SA
+      ### Leonardo
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="2341", ATTRS{idProduct}=="0036", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ### Micro
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="2341", ATTRS{idProduct}=="0037", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ## Adafruit Industries LLC
+      ### Feather 32U4
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="239a", ATTRS{idProduct}=="000c", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ### ItsyBitsy 32U4 3V3/8MHz
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="239a", ATTRS{idProduct}=="000d", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ### ItsyBitsy 32U4 5V/16MHz
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="239a", ATTRS{idProduct}=="000e", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ## dog hunter AG
+      ### Leonardo
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="2a03", ATTRS{idProduct}=="0036", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+      ### Micro
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="2a03", ATTRS{idProduct}=="0037", TAG+="uaccess", ENV{ID_MM_DEVICE_IGNORE}="1"
+
+      # hid_listen
+      KERNEL=="hidraw*", MODE="0666", TAG+="uaccess", TAG+="udev-acl"
+
+      # hidraw devices for WebHID (Keychron Launcher, VIA)
+      SUBSYSTEM=="hidraw", MODE="0666", TAG+="uaccess", TAG+="udev-acl"
+
+      # hid bootloaders
+      ## QMK HID
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="03eb", ATTRS{idProduct}=="2067", TAG+="uaccess"
+      ## PJRC's HalfKay
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="16c0", ATTRS{idProduct}=="0478", TAG+="uaccess"
+
+      # APM32 DFU
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="314b", ATTRS{idProduct}=="0106", TAG+="uaccess"
+
+      # GD32V DFU
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="28e9", ATTRS{idProduct}=="0189", TAG+="uaccess"
+
+      # WB32 DFU
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="342d", ATTRS{idProduct}=="dfa0", TAG+="uaccess"
+
+      # AT32 DFU
+      SUBSYSTEMS=="usb", ATTRS{idVendor}=="2e3c", ATTRS{idProduct}=="df11", TAG+="uaccess"
+    '';
+    #
+    # home.file.".config/some-config".text = ''
+    #   # keyboard-related configuration
+    # '';
+  };
+}

modules/nixos/nixos/default.nix

@@ -0,0 +1,53 @@
+############################################
+#
+#   Shared System Configuration module that's always enabled by default courtesy of snowfall lib
+#
+############################################
+{
+  # Snowfall Lib provides a customized `lib` instance with access to your flake's library
+  # as well as the libraries available from your flake's inputs.
+  lib
+, # An instance of `pkgs` with your overlays and packages applied is also available.
+  pkgs
+, # You also have access to your flake's inputs.
+  inputs
+, # Additional metadata is provided by Snowfall Lib.
+  namespace
+, # The namespace used for your flake, defaulting to "internal" if not set.
+  system
+, # The system architecture for this host (eg. `x86_64-linux`).
+  target
+, # The Snowfall Lib target for this system (eg. `x86_64-iso`).
+  format
+, # A normalized name for the system target (eg. `iso`).
+  virtual
+, # A boolean to determine whether this system is a virtual target using nixos-generators.
+  systems
+, # An attribute map of your defined hosts.
+
+  # All other arguments come from the module system.
+  config
+, ...
+}:
+let
+  inherit (lib) mkIf;
+  inherit (lib.my-namespace) enabled;
+in
+{
+  config = {
+    boot = { };
+    console = { };
+    environment = {
+      systemPackages =
+        (with pkgs; [
+          age
+          wget
+          sops
+          bitwarden-desktop #replaced bitwarden
+          bitwarden-cli
+          cowsay
+          remmina
+        ]);
+    };
+  };
+}

modules/nixos/performance-tuning/default.nix

@@ -0,0 +1,23 @@
+{ config, lib, pkgs, namespace, ... }:
+
+let
+  cfg = config.${namespace}.performance-tuning;
+in {
+  options.${namespace}.performance-tuning.enable = lib.mkEnableOption "XFCE desktop environment";
+  config = lib.mkIf cfg.enable {
+    boot.kernelParams = [
+      "nvme_core.default_ps_max_latency_us=0"
+    ];
+
+    boot.kernel.sysctl = {
+      "vm.swappiness" = 10;
+      "vm.dirty_ratio" = 10;
+      "vm.dirty_background_ratio" = 5;
+    };
+
+    services.pipewire.extraConfig.pipewire."context.properties" = {
+      "default.clock.quantum" = 256;
+      "default.clock.min-quantum" = 128;
+    };
+  };
+}

modules/nixos/steam/default.nix

@@ -28,8 +28,27 @@
     #   enable = true;
     #   capSysNice = true;
     # };
+    environment.systemPackages = with pkgs; [
+      protonup-ng  # Tool to install and manage Proton-GE
+      lutris
+      vkd3d
+      dxvk
+      corefonts
+      protontricks
+      mangohud
+      vkbasalt
+      gamescope
+    ];
     programs.steam = {
       enable = true;
+      package = pkgs.steam.override {
+        extraPkgs = pkgs: with pkgs; [
+          gamemode
+        ];
+        extraEnv = {
+          SDL_VIDEODRIVER = "wayland";
+        };
+      };
       remotePlay.openFirewall = true; # Open ports in the firewall for Steam Remote Play
       dedicatedServer.openFirewall = true; # Open ports in the firewall for Source Dedicated Server
       localNetworkGameTransfers.openFirewall = true; # Open ports in the firewall for Steam Local Network Game Transfers

modules/nixos/wallpaper-engine-kde-plugin/default.nix

@@ -0,0 +1,71 @@
+{ lib, pkgs, inputs, config, namespace, ... }:
+
+let
+  # Import the plugin as a package derivation from your local repo
+  # Pass the 'inputs' parameter explicitly to make wallpaper-engine-plugin-src available
+  wallpaperEnginePkg = pkgs.callPackage ../../../packages/wallpaper-engine-kde-plugin/default.nix { inherit inputs; };
+in {
+  options.${namespace}.wallpaper-engine-kde-plugin.enable =
+    lib.mkEnableOption "Enable Wallpaper Engine KDE plugin";
+
+  config = lib.mkIf config.${namespace}.wallpaper-engine-kde-plugin.enable {
+    # Add the imported package and helper script to systemPackages
+    environment.systemPackages = [ 
+      wallpaperEnginePkg 
+      (pkgs.writeShellScriptBin "wallpaper-engine-kde-setup" ''
+        #!/usr/bin/env bash
+        set -e
+        
+        STEAM_DIR="$HOME/.local/share/Steam"
+        WORKSHOP_PATH="$STEAM_DIR/steamapps/workshop/content/431960"
+        
+        echo "Wallpaper Engine KDE Plugin Setup Helper"
+        echo "========================================"
+        
+        # Check if Steam directory exists
+        if [ -d "$STEAM_DIR" ]; then
+          echo "✅ Steam directory found at: $STEAM_DIR"
+          
+          if [ -d "$WORKSHOP_PATH" ]; then
+            echo "✅ Workshop content directory found at: $WORKSHOP_PATH"
+            echo "   You can use this path in the wallpaper settings."
+          else
+            echo "⚠️  Workshop content directory not found at the expected location."
+            echo "   Please locate your Steam workshop content for Wallpaper Engine (app ID 431960)"
+          fi
+        else
+          echo "⚠️  Steam directory not found at: $STEAM_DIR"
+          echo "   Please install Steam and Wallpaper Engine first."
+        fi
+        
+        # Check symlinks
+        if [ -L "$HOME/.local/share/plasma/wallpapers/com.github.catsout.wallpaperEngineKde" ]; then
+          echo "✅ Plugin symlink is correctly set up"
+        else
+          echo "⚠️  Plugin symlink not found, attempting to create it..."
+          mkdir -p "$HOME/.local/share/plasma/wallpapers"
+          ln -sf /run/current-system/sw/share/plasma/wallpapers/com.github.catsout.wallpaperEngineKde \
+                "$HOME/.local/share/plasma/wallpapers/com.github.catsout.wallpaperEngineKde"
+          echo "   Done! Symlink created."
+        fi
+        
+        echo ""
+        echo "To use Wallpaper Engine wallpapers in KDE:"
+        echo "1. Right-click on desktop → Configure Desktop and Wallpaper"
+        echo "2. Select 'Wallpaper Engine' from the wallpaper type list"
+        echo "3. Set the path to your workshop content directory"
+      '')
+    ];
+
+    systemd.user.services.wallpaperEngineSymlink = {
+      description = "Symlink Wallpaper Engine plugin for Plasma";
+      wantedBy = [ "graphical-session.target" ];
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStartPre = "${pkgs.coreutils}/bin/mkdir -p %h/.local/share/plasma/wallpapers";
+        ExecStart = "${pkgs.coreutils}/bin/ln -sfn /run/current-system/sw/share/plasma/wallpapers/com.github.catsout.wallpaperEngineKde %h/.local/share/plasma/wallpapers/com.github.catsout.wallpaperEngineKde";
+        RemainAfterExit = true;
+      };
+    };
+  };
+}

overlays/mbedtls-fix/default.nix

@@ -0,0 +1,11 @@
+{ ... }:
+
+final: prev: {
+  mbedtls_2 = prev.mbedtls_2.overrideAttrs (oldAttrs: {
+    doCheck = false;  # Skip failing PSA crypto tests
+  });
+  
+  haxe = prev.haxe.overrideAttrs (oldAttrs: {
+    buildInputs = (oldAttrs.buildInputs or []) ++ [ final.mbedtls_2 ];
+  });
+}

overlays/synergy-fix/default.nix

@@ -0,0 +1,17 @@
+{ ... }:
+
+final: prev: {
+  synergy = prev.synergy.overrideAttrs (oldAttrs: {
+    postPatch = (oldAttrs.postPatch or "") + ''
+      # Fix deprecated Qt endl usage in QTextStream contexts only
+      # Don't touch cerr/cout which use std::endl
+      find . -name "*.cpp" -type f -exec sed -i \
+        's/\(outStream.*<<.*\)endl/\1Qt::endl/g; s/\(QTextStream.*<<.*\)endl/\1Qt::endl/g' {} +
+      find . -name "*.h" -type f -exec sed -i \
+        's/\(outStream.*<<.*\)endl/\1Qt::endl/g; s/\(QTextStream.*<<.*\)endl/\1Qt::endl/g' {} +
+      
+      # Fix missing SIZE_MAX include
+      sed -i '/#include <cstring>/a#include <cstdint>' src/lib/server/InputFilter.cpp
+    '';
+  });
+}

packages/droidcam-obs/default.nix

@@ -0,0 +1,46 @@
+{
+  lib,
+  pkgs,
+  stdenv,
+  fetchurl,
+  autoPatchelfHook,
+  namespace,
+  ...
+}:
+
+stdenv.mkDerivation rec {
+  pname = "droidcam-obs";
+  version = "2.4.1";
+
+  src = fetchurl {
+    url = "https://github.com/dev47apps/droidcam-obs-plugin/releases/download/${version}/droidcam_obs_${version}_linux_x86_64.zip";
+    sha256 = "sha256-18IjC3+WR5XLo464RuwAtWRNSpQcsnarXu56CrxCMhM=";
+  };
+
+  nativeBuildInputs = [ pkgs.unzip autoPatchelfHook ];
+  
+  buildInputs = with pkgs; [
+    stdenv.cc.cc.lib
+    obs-studio
+  ];
+
+  dontBuild = true;
+
+  installPhase = ''
+    runHook preInstall
+    mkdir -p $out/lib/obs-plugins
+    mkdir -p $out/share/obs/obs-plugins/droidcam-obs
+    
+    cp bin/64bit/*.so $out/lib/obs-plugins/
+    cp -r data/* $out/share/obs/obs-plugins/droidcam-obs/
+    
+    runHook postInstall
+  '';
+
+  meta = with lib; {
+    description = "DroidCam OBS Plugin - Use your phone as a camera in OBS (FFmpeg 7 compatible)";
+    homepage = "https://www.dev47apps.com/obs/";
+    license = licenses.unfree;
+    platforms = platforms.linux;
+  };
+}

packages/linux-wallpaperengine/default.nix

@@ -0,0 +1,135 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  autoPatchelfHook,
+  cmake,
+  file,
+  pkg-config,
+  python3,
+  SDL2,
+  SDL2_mixer,
+  cef-binary,
+  egl-wayland,
+  ffmpeg,
+  fftw,
+  glew,
+  glfw,
+  glm,
+  gmp,
+  kissfftFloat,
+  libxau,
+  libxdmcp,
+  libxpm,
+  libxrandr,
+  libxxf86vm,
+  libdecor,
+  libffi,
+  libglut,
+  libpng,
+  libpulseaudio,
+  lz4,
+  mpv,
+  wayland,
+  wayland-protocols,
+  wayland-scanner,
+  zlib,
+  nix-update-script,
+  inputs,
+  namespace, ...
+}:
+
+let
+  cef = cef-binary.override {
+    version = "135.0.17"; # follow upstream. https://github.com/Almamu/linux-wallpaperengine/blob/b39f12757908eda9f4c1039613b914606568bb84/CMakeLists.txt#L47
+    gitRevision = "cbc1c5b";
+    chromiumVersion = "135.0.7049.52";
+
+    srcHashes = {
+      aarch64-linux = "sha256-LK5JvtcmuwCavK7LnWmMF2UDpM5iIZOmsuZS/t9koDs=";
+      x86_64-linux = "sha256-JKwZgOYr57GuosM31r1Lx3DczYs35HxtuUs5fxPsTcY=";
+    };
+  };
+in
+stdenv.mkDerivation (finalAttrs: {
+  pname = "linux-wallpaperengine";
+  version = "0-unstable-2025-12-19";
+
+  src = fetchFromGitHub {
+    owner = "Almamu";
+    repo = "linux-wallpaperengine";
+    rev = "f79c29f067b2613895419e351033582464577154";
+    fetchSubmodules = true;
+    hash = "sha256-AISdouVqMXTYErQoT7oM5H+vlrw03NtpI9FqDwZ0J9A=";
+  };
+
+  nativeBuildInputs = [
+    autoPatchelfHook
+    cmake
+    file
+    pkg-config
+    python3
+  ];
+
+  buildInputs = [
+    SDL2
+    SDL2_mixer
+    egl-wayland
+    ffmpeg
+    fftw
+    glew
+    glfw
+    glm
+    gmp
+    kissfftFloat
+    libxau
+    libxdmcp
+    libxpm
+    libxrandr
+    libxxf86vm
+    libdecor
+    libffi
+    libglut
+    libpng
+    libpulseaudio
+    lz4
+    mpv
+    wayland
+    wayland-protocols
+    wayland-scanner
+    zlib
+  ];
+
+  cmakeFlags = [
+    "-DCEF_ROOT=${cef}"
+    "-DCMAKE_INSTALL_PREFIX=${placeholder "out"}/share/linux-wallpaperengine"
+  ];
+
+  postInstall = ''
+    rm -rf $out/bin $out/lib $out/include
+    chmod 755 $out/share/linux-wallpaperengine/linux-wallpaperengine
+    mkdir $out/bin
+    ln -s $out/share/linux-wallpaperengine/linux-wallpaperengine $out/bin/linux-wallpaperengine
+  '';
+
+  preFixup = ''
+    find $out/share/linux-wallpaperengine -type f -exec file {} \; | grep 'ELF' | cut -d: -f1 | while read -r elf_file; do
+      patchelf --shrink-rpath --allowed-rpath-prefixes "$NIX_STORE" "$elf_file"
+    done
+  '';
+
+  passthru.updateScript = nix-update-script { extraArgs = [ "--version=branch" ]; };
+
+  meta = {
+    description = "Wallpaper Engine backgrounds for Linux";
+    homepage = "https://github.com/Almamu/linux-wallpaperengine";
+    license = lib.licenses.gpl3Plus;
+    mainProgram = "linux-wallpaperengine";
+    maintainers = [ ];
+    platforms = [
+      "x86_64-linux"
+      "aarch64-linux"
+    ];
+    hydraPlatforms = [ "x86_64-linux" ]; # Hydra "aarch64-linux" fails with "Output limit exceeded"
+  };
+})

secrets.yaml

@@ -20,23 +20,32 @@ sops:
         - recipient: age19j24x89dfh4f7v58c8k64yupqas4f7qkkyper7yj9dd7vqwvvq0qkyvhxk
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdGZlV3R4eW5FYS9HZGYr
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4U204eXIyaDJFMXIweXp1
-            N3VSR0tIbzUrL0RsUEw2NkZtUWcxVG55bEIwCjQ5U0Ztd1luUEQ2SEg4RHA2RWRK
+            NEhoYU5qa3B5Q1VpODNsSEpuT0txRWpuVDM0CmptVHNFQkpWTkJ2M3B4dWpWN0s4
-            K3dhN2liMDYyZElhbkZEUC9namhrc2MKLS0tIEhYTEYwQWduNkdKbGJQcTBRUWVG
+            ZjRuc3BhckVLSzFuOGJ3WTB0YnRRRDgKLS0tIHlaSUxITUlGU3VaRWZFbENUTVY2
-            aDMwR1I5NG13dUhwRXg1TXI4dG9nWXMKti+hv0+7/Rz0W22bToYs1/DFzoMllHpB
+            SWVwUGVxcGJscG5PalphZFVIS1ZjY2MKi4VvrNW1AH+fJaI/rzOltPylSiY1z3nS
-            7uuVpUFDuC2D40ize0UX4rJ8Yo63lhJrRpsxIhzkP/vq+wMAFrKKLg==
+            ebrYdpyM5KKQ46uezvU4J3Qau/Inv8CkZ72vHlQ6EK2kmmZZLszwJg==
             -----END AGE ENCRYPTED FILE-----
         - recipient: age1ma8x6wugvc40mkst33mejq0m6r44jk6zwjjun3znyer5nztgn9vs0nwjx4
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnK0dSTTVJWmt3aS91UmFm
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyVHVwMEZjVk8xMTNIekF1
-            Ui9zT3VpMlBybWJXOVdKdU5mTkprdU5WRm00CktHd2g4M1VldHhTQyszRTVTOUtt
+            ZFlZbFhvOTJSbVN4ZmorSmFCbkxBUUxOOERJCjBjMkdxQ0V4OXEwdGF2Sno4VTh2
-            Mld4a3lYSHF2SytIc0RjQ1RoODQvaE0KLS0tIGN3SlpMeTEvNktNSm5oT0dXRVFr
+            MURQMUhQV083M3lpREFRM2Qza3JLN0kKLS0tIEFoeUVsL3poajljMDEwTCtWcXRD
-            UmZrTXhyM2hYWW1kY05xa01PM1MzUDAK67AkP1XE445RXbVxcksRXL7MYHFjLPLV
+            Y3NHNmVDZFZuNjlUUDdMa3N3ZVNTWkUKeO4sT0ZyTAyrMKj27fbFhQZ+bDMru6Bk
-            ITL404AabakBeOX9yixwymzkD1BbUYEdW6N28ntqdH5cZZfVteYdMA==
+            j4Im41l9ClpIVQt8iz61mwKrm+QmBA9r1aL34u3lGQyKBOk4vq/m9A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-07T10:47:23Z"
+        - recipient: age1s5qwsuc3e4m3c4w5hl6tyja70w273gr60j9j9dcpc6mz69lemg3qpwud3h
-    mac: ENC[AES256_GCM,data:zqkbmx7XIHQnOVkozPLiBzsNhACbGwvWiFcFlEHhlyEeQ7rvltLlUlgivb7aawwG1RuxCwshHwLfuKRQ/iGJcXjFO4UM5VER6CAA/88UrpgXW8VBw8iuchr+Y58lu0s+98fj7VffcuWjhJ1AYvBxFaTZA6DjxFjv3l1Gyxtw6kM=,iv:XG9Qb61INy1OJZjI3cDbY9fswLqf8+QvcUMrmtKGtuQ=,tag:+JacTF/+qU+j/cm8Wn1c8g==,type:str]
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUT3dKNk4rSVZUck5LZ2t1
+            eUhPSXBURUFGbnU4NUtjMVVpeGI5eVI1SVc4CkdTY25jTy91VFhLS1F3V3ZzM1A4
+            OGMxWmtWd1lVU3dZcG8xWlRwYkorSU0KLS0tIE12WlFyUWZ0dHYvTEd0N0tPWUt1
+            bldpMnp5cnpXN2J5MEc5cC9DZktEekUKC6sei7v252fZyW8sd1xuZDjwoJFCKGot
+            t9f+jUDOx5wGlH53Fd2jCRArKZkQ850sFj79Lh2Rx6wbDj1Ks5XcVA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-12-10T04:12:19Z"
+    mac: ENC[AES256_GCM,data:AcuCxKGm9xLgn/gnk0XDVtLM5PWQvgGd+qXusuvwCUV4ln1//Lpwpp3TL0mEMdwEcFOdCasW4A10rGpCoBqKsckroiUSEB0G2p0vrD3b3Vmo804JYcKmSZ85InZCXUWenfOTEzx/A1ruqSBSkRYro+NdyZ/+JXQVXnTLCPesgwE=,iv:UPRNsfeUKnml9OFkkqrI0fI4f/RWN2ovTsaItwT8Y0c=,tag:75NEPjeAXUwlCPGbLPhPFg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.1

shell.nix

@@ -0,0 +1,29 @@
+let
+  nixpkgs = fetchTarball "https://github.com/NixOS/nixpkgs/tarball/nixos-24.05";
+  pkgs = import nixpkgs { config = { }; overlays = [ ]; };
+in
+
+pkgs.mkShellNoCC {
+  packages = with pkgs; [
+    cowsay
+    lolcat
+    bitwarden-desktop #replaced bitwarden
+    bitwarden-cli
+    sops
+  ];
+
+  GREETING = "Hello, Nix!";
+
+  shellHook = ''
+    echo $GREETING | cowsay | lolcat
+    bw config server https://vault.subsonics.nl
+    echo "please enter bitwarden email"
+    read BW_USER
+    echo "please enter bitwarden password"
+    read -s BW_PASSWORD
+    bw login $BW_USER $BW_PASSWORD
+    BW_SESSION="$(bw unlock $BW_PASSWORD --raw)"
+    mkdir -p ~/.config/sops/age
+    bw get attachment keys.txt --itemid ee6a90b0-4120-46f7-a1c6-9648316e43d5 --output ~/.config/sops/age/keys.txt
+  '';
+}

systems/x86_64-linux/drivebystation-nix/configuration.nix

@@ -5,11 +5,11 @@
 { config, pkgs, ... }:
 
 {
-  imports =
+  imports = [
-    [ 
     ./hardware/hardware-configuration.nix
   ];
 
+
   # Bootloader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
@@ -42,28 +42,37 @@
     LC_TIME = "nl_NL.UTF-8";
   };
 
-  # Enable the X11 windowing system.
+  services = {
-  services.xserver.enable = true;
+    # Enable Gnome Session
+    displayManager.gdm.enable = false;
+    displayManager.sddm.enable = false;
+    # displayManager.sddm.wayland.enable = true;
+    displayManager.cosmic-greeter.enable = true;
+    displayManager.defaultSession = "gnome";
     
-  # Enable the GNOME Desktop Environment.
+    xserver = {
-  services.xserver.displayManager.gdm.enable = true; 
+      enable = true; # Enable the deprecated X11 teletype terminal connection system. 
-  # services.xserver.displayManager.lightdm.enable = true;
+      # Configure Display Manager
-  # services.xserver.displayManager.autoLogin.enable = true;
+      displayManager = {
+        lightdm.enable = false;
+      };
+      # Configure keymap in X11
+      xkb = {
+        layout = "us";
+        variant = "intl";
+      };
+      
+      # Specify first device section to use nvidia GPU
+
+    };
+  };
+  # services.xserver.displayManager.defaultSession = "gnome-x11";  # services.xserver.displayManager.autoLogin.enable = true;
   # services.xserver.displayManager.autoLogin.user = "andreas";
   # systemd.services."getty@tty1".enable = false;
   # systemd.services."autovt@tty1".enable = false;
 
-  services.xserver.desktopManager.gnome.enable = true;
-  services.desktopManager.plasma6.enable = true;
-
   programs.ssh.askPassword = "${pkgs.x11_ssh_askpass}/libexec/x11-ssh-askpass";
 
-  # Configure keymap in X11
-  services.xserver.xkb = {
-    layout = "us";
-    variant = "intl";
-  };
-
   # Configure console keymap
   console.keyMap = "us-acentos";
 
@@ -71,7 +80,7 @@
   services.printing.enable = true;
 
   # Enable sound with pipewire.
-  hardware.pulseaudio.enable = false;
+  services.pulseaudio.enable = false;
   security.rtkit.enable = true;
   services.pipewire = {
     enable = true;
@@ -86,22 +95,79 @@
     #media-session.enable = true;
   };
 
+  # Enable gamemode for game optimization
+  programs.gamemode.enable = true;
+
   # Enable touchpad support (enabled default in most desktopManager).
   # services.xserver.libinput.enable = true;
 
   # Install firefox.
   programs.firefox.enable = true;
 
+  # Enable XWayland for X11 application compatibility
+  programs.xwayland.enable = true;
+
+  # docker
+  virtualisation.docker = {
+    enable = true;
+  };
+
+
   # Allow unfree packages
   nixpkgs.config.allowUnfree = true;
 
+  # Enable --Akonadi--/ kde-pim for calendar backend
+  programs.kde-pim.enable = true;
+  services.dbus.enable = true;
+
   # List packages installed in system profile. To search, run:
   # $ nix search wget
   environment.systemPackages = with pkgs; [
     #  vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
     #  wget
+    (python312.withPackages (ps: with ps; [ websockets ]))
+    sqlite
+    javaPackages.compiler.openjdk25
+    javaPackages.compiler.openjdk21
+    qt6.qtwebengine
+    qemu
+    mpv
+    krita
+    ntfs3g
+    htop
   ];
+  environment.etc."xdg/autostart/xwaylandvideobridge.desktop".text = ''
+    [Desktop Entry]
+    Hidden=true
+  '';
 
+  services.udisks2.settings = { # Should fix mounting ntfs system partition - Did not work
+    "udisks2.conf" = {
+      defaults = {
+        allow_mount_internal = true;
+        allow_mount_system = true;
+      };
+    };
+  };
+
+  services.gvfs.enable = true; # For file manager integration
+
+  # Disable iBus (not needed unless using Asian input methods)
+  i18n.inputMethod = {
+    enable = false;
+  };
+
+  virtualisation.libvirtd = {
+    enable = true;
+    qemu = {
+      package = pkgs.qemu_kvm;
+      runAsRoot = true;
+      swtpm.enable = true;
+    };
+  };
+
+
+  systemd.tmpfiles.rules = [ "L+ /var/lib/qemu/firmware - - - - ${pkgs.qemu}/share/qemu/firmware" ];
   # Some programs need SUID wrappers, can be configured further or are
   # started in user sessions.
   # programs.mtr.enable = true;
@@ -113,11 +179,17 @@
   # List services that you want to enable:
 
   # Enable the OpenSSH daemon.
-  # services.openssh.enable = true;
+  services.openssh.enable = true;
 
   # Open ports in the firewall.
-  # networking.firewall.allowedTCPPorts = [ ... ];
+  networking.firewall.allowedTCPPorts = [
-  # networking.firewall.allowedUDPPorts = [ ... ];
+    24800 #Synergy
+    53317 #localsend
+  ];
+  networking.firewall.allowedUDPPorts = [
+    24800 #Synergy
+    53317 #localsend
+  ];
   # Or disable the firewall altogether.
   # networking.firewall.enable = false;
 

systems/x86_64-linux/drivebystation-nix/default.nix

@@ -26,6 +26,7 @@
 , ...
 }:
 let
+  inherit (lib.my-namespace) enabled;
   inherit pkgs;
   installedPackages = lib.my-namespace.mkPackages pkgs;
 in
@@ -33,76 +34,133 @@ in
   # inherit system;
   imports = [
     ./configuration.nix
-    ./steam.nix
     ./video.nix
+    inputs.aagl.nixosModules.default
   ];
   config = {
       system.stateVersion = "24.05";
       nix.settings.experimental-features = [ "nix-command" "flakes" ];
       # Define a user account. Don't forget to set a password with ‘passwd’.
+      # Desktops
+      my-namespace.desktop-environment.xfce.enable = true;
+      my-namespace.desktop-environment.gnome.enable = true;
+      my-namespace.desktop-environment.kde.enable = true;
+      my-namespace.desktop-environment.cosmic.enable = true;
+      my-namespace.performance-tuning.enable = true;
+      # GNOME-keyring
+      my-namespace.gnome-keyring.enable = true;
+
       users.users.andreas = {
         isNormalUser = true;
         description = "Andreas Schaafsma";
-        extraGroups = [ "networkmanager" "wheel" ]    ;
+        extraGroups = [ 
+          "networkmanager" 
+          "wheel" 
+          "libvirtd" 
+          "plugdev" 
+          "docker" 
+          "gamemode"
+        ];
         packages = with pkgs; [
+          # Packages from inputs
+          inputs.game-of-life.packages.x86_64-linux.default
+          inputs.zen-browser.packages.x86_64-linux.default
+          inputs.trilium-next-pr.legacyPackages.x86_64-linux.trilium-next-desktop
+          inputs.anikki.packages.x86_64-linux.default
+          # We want flatpak support
           flatpak
-          gnome-software
+          # GNOME shit
+          thunderbird
           soundwireserver
           vscode  
           spotify
           appimage-run  
-          inputs.game-of-life.packages.x86_64-linux.default
+          prismlauncher #replaces broken minecraft package
-          inputs.nixos-cosmic
-          minecraft
           trilium-desktop
           terraform
+          virt-manager
           #  thunderbird
         ];
       };
+
+      programs.anime-game-launcher.enable = true; # Adds launcher and /etc/hosts rules
+      programs.anime-games-launcher.enable = true;
+
+      services.gnome.gnome-remote-desktop.enable = true;
+      my-namespace.keychron-keyboard.enable = true;
+
       # lib.my-namespace.home.stream-tools.enable = true;
 
       # Open ports in the firewall.
       networking.firewall.allowedTCPPorts = [
         59010 #SoundWireServer
         3389 #RDP
+        22 #ssh
       ];
       networking.firewall.allowedUDPPorts = [
         59010 #SoundWireServer
         3389 #RDP
+        22 #ssh
       ];
       # Or disable the firewall altogether.
       # networking.firewall.enable = false;
+      programs.gamescope.enable = true;
+      programs.steam.gamescopeSession = {
+        enable = true;
+        args = [
+          "-w" "1920"
+          "-h" "1080"
+          "-r" "172"
 
+        ];
+      };
 
       # Install firefox.
       programs.firefox.enable = true;
       nixpkgs.config.allowBroken = true;
+      powerManagement.cpuFreqGovernor = "performance";
       # Set up system Packages
       environment.systemPackages = with pkgs; [
         git
-        pkgs.wine
+        wine
-        pkgs.bottles
+        # bottles
-        pkgs.gparted
+        gparted
-        pkgs.ntfs3g 
+        ntfs3g 
-        pkgs.ntfsprogs
+        ntfsprogs
-        pkgs.my-namespace.udev-steelseries
+        synergy
-        pkgs.my-namespace.hello
+        mangohud
+        my-namespace.udev-steelseries
+        my-namespace.hello
+        kde-rounded-corners
+        my-namespace.linux-wallpaperengine
 
-        # stuff I installed to try to get gamescope to work to no avail Gamescope is just broken it seems.
+        (pkgs.writeShellScriptBin "switch-to-desktop" ''
-          # pkgs.mesa
+          #!/bin/sh
-          # pkgs.vulkan-loader
+          # Kill Steam and return to display manager
-          # pkgs.vulkan-validation-layers
+          pkill steam || true
-          # pkgs.vulkan-extension-layer
+          pkill gamescope || true
-          # pkgs.vulkan-tools
+          # End the session cleanly
-          # pkgs.libva
+          loginctl terminate-session "$XDG_SESSION_ID"
-          # pkgs.libva-utils
+        '')
+        (pkgs.writeShellScriptBin "steamos-session-select" ''
+          #!/bin/sh
+          exec switch-to-desktop
+        '')
+        # Vulkan packages for Steam
+        pkgs.mesa
+        pkgs.vulkan-loader
+        pkgs.vulkan-validation-layers
+        pkgs.vulkan-extension-layer
+        pkgs.vulkan-tools
+        pkgs.libva
+        pkgs.libva-utils
         #  vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
         #  wget
       ]
       ++  installedPackages.packages;
       programs.nix-ld = {
         enable = true;
-        package = pkgs.nix-ld-rs;
+        package = pkgs.nix-ld; #replaces nix-ld-rs
       };
       services.flatpak.enable = true;
       systemd.services.flatpak-repo = {
@@ -124,14 +182,16 @@ in
 
       # services.xrdp.enable = true;
       # services.xrdp.defaultWindowManager = "${pkgs.gnome-session}/bin/gnome-session";
+      # services.xrdp.defaultWindowManager = "startxfce4";
       # services.xrdp.openFirewall = true;
+      # services.xrdp.audio.enable = false;
 
 
       # Disable the GNOME3/GDM auto-suspend feature that cannot be disabled in GUI!
       # If no user is logged in, the machine will power down after 20 minutes.
-      systemd.targets.sleep.enable = true;
+      systemd.targets.sleep.enable = false;
-      systemd.targets.suspend.enable = true;
+      systemd.targets.suspend.enable = false;
-      systemd.targets.hibernate.enable = true;
+      systemd.targets.hibernate.enable = false;
-      systemd.targets.hybrid-sleep.enable = true;
+      systemd.targets.hybrid-sleep.enable = false;
     };
 }

systems/x86_64-linux/drivebystation-nix/hardware/acer-monitor-edid.nix

@@ -1,6 +1,8 @@
 { config, lib, pkgs, ... }:
 {
-  boot.kernelParams = [ "drm.edid_firmware=DP-6:edid/edid.bin" ];
+  # boot.kernelParams = [ "drm.edid_firmware=DP-1:edid/edid.bin,DP-2:edid/edid.bin,DP-3:edid/edid.bin,DP-4:edid/edid.bin" ];
+  boot.kernelParams = [ "drm.edid_firmware=DP-2:edid/edid.bin" ];
+
 
   hardware.firmware = [
   (

systems/x86_64-linux/drivebystation-nix/hardware/graphics/intel.nix

@@ -0,0 +1,82 @@
+{ config, lib, pkgs, ... }:
+
+{
+  ############################
+  ## Display + Mesa Settings
+  ############################
+
+  # hardware.enableRedistributableFirmware = true;
+
+  hardware.firmware = [
+    pkgs.linux-firmware
+    # pkgs.firmwareLinuxNonfree
+    # pkgs.firmwareLinuxStrict
+    # pkgs.firmwareLinuxLatest
+  ];
+
+  # boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelParams = [
+    "console=tty0"
+    # "efifb=off"
+    # "xe.force_probe=*"
+    "module_blacklist=nouveau,nvidia,nvidia_drm,nvidia_modeset,nvidia_uvm"
+  ];
+
+  environment.variables.VK_ICD_FILENAMES = "/run/opengl-driver/share/vulkan/icd.d/intel_icd.x86_64.json";
+  hardware.intel-gpu-tools.enable = true;
+  hardware.graphics = {
+    enable = true;
+    enable32Bit = true;
+
+    extraPackages = with pkgs; [
+      intel-media-driver     # Intel VAAPI
+      vpl-gpu-rt             # oneVPL runtime
+      intel-vaapi-driver     # fallback
+      intel-compute-runtime # OpenCL/Level Zero
+    ];
+  };
+
+  # Ensure Arc driver is available (usually auto-loaded)
+  boot.kernelModules = [ "xe" "i915" ];
+  # Blacklist everything for nvidia
+  boot.blacklistedKernelModules = [
+    "nouveau"
+    "nvidia"
+    "nvidia_drm"
+    "nvidia_modeset"
+    "nvidia_uvm"
+  ];
+
+  environment.variables = {
+    KWIN_DRM_DEVICES = "/dev/dri/card0";
+  };
+
+
+
+  ############################
+  ## X / Wayland GPU Drivers
+  ############################
+  
+  # Enable modesetting driver for X11 (required for Intel Xe)
+  services.xserver.videoDrivers = [ 
+    "modesetting"
+    #"intel"
+  ];
+
+  services.xserver.enable = true;
+  services.xserver.autorun = false;
+  services.xserver.displayManager.startx.enable = true;
+
+  # Xorg configuration for Intel Arc Battlemage (xe driver)
+  # Based on: https://www.reddit.com/r/crtgaming/comments/1knom2t/guide_intel_arc_b580_arch_linux_xorg/
+  # Intel Arc B-series at PCI 0000:03:00.0
+  #services.xserver.deviceSection = ''
+  #  Option "AccelMethod" "glamor"
+  #  BusID "PCI:3:0:0"
+  #'';
+
+  ############################
+  ## User Access
+  ############################
+  users.users.andreas.extraGroups = [ "video" "render" ];
+}

systems/x86_64-linux/drivebystation-nix/hardware/graphics/intel_nvidia.nix

@@ -0,0 +1,74 @@
+{ config, lib, pkgs, ... }:
+
+{
+  ############################
+  ## Display + Mesa Settings
+  ############################
+
+  # hardware.enableRedistributableFirmware = true;
+
+  hardware.firmware = [
+    pkgs.linux-firmware
+    # pkgs.firmwareLinuxNonfree
+    # pkgs.firmwareLinuxStrict
+    # pkgs.firmwareLinuxLatest
+  ];
+
+  # boot.kernelPackages = pkgs.linuxPackages_latest;
+
+  boot.kernelParams = [
+    "console=tty0"
+    "efifb=off"
+    "xe.force_probe=*"
+    "nvidia-drm.modeset=1"
+  ];
+
+  hardware.graphics = {
+    enable = true;
+
+    extraPackages = with pkgs; [
+      intel-media-driver     # Intel VAAPI
+      vpl-gpu-rt             # oneVPL runtime
+      intel-vaapi-driver     # fallback
+    ];
+  };
+
+  # Ensure Arc driver is available (usually auto-loaded)
+  boot.kernelModules = [ "xe" ];
+  boot.blacklistedKernelModules = [ "nouveau" ];
+
+  ############################
+  ## X / Wayland GPU Drivers
+  ############################
+  # Only specify NVIDIA. Intel Arc uses the modesetting driver automatically.
+  services.xserver.videoDrivers = [ "nvidia" ];
+
+  ############################
+  ## NVIDIA Configuration
+  ############################
+  hardware.nvidia = {
+    modesetting.enable = true;   # REQUIRED if any displays are on NVIDIA
+
+    open = false;                # GTX 1070 → must be the proprietary driver
+    nvidiaSettings = true;
+
+    powerManagement.enable = false;
+    powerManagement.finegrained = false;
+
+    prime = {
+      offload.enable = false;    # not a laptop, must be disabled
+      sync.enable = false;
+    };
+
+    # Correct way to pick the driver
+    package = config.boot.kernelPackages.nvidiaPackages.production;
+  };
+
+  # Remove → hardware.nvidia handles module packages
+  # boot.extraModulePackages = [ config.boot.kernelPackages.nvidia_x11 ];
+
+  ############################
+  ## User Access
+  ############################
+  users.users.andreas.extraGroups = [ "video" "render" ];
+}

systems/x86_64-linux/drivebystation-nix/hardware/graphics/nvidia-stable.nix

@@ -1,9 +0,0 @@
-{ config, lib, pkgs, ... }:
-let
-  inherit (lib.my-namespace) enabled;
-in
-{
-  my-namespace.hardware = {
-    graphics-nvidia-prime-amd = enabled;
-  };
-}

systems/x86_64-linux/drivebystation-nix/hardware/graphics/nvidia.nix

@@ -1,126 +0,0 @@
-{ config, lib, pkgs, ... }:
-{
-
-  # Enable OpenGL
-  hardware.graphics = {
-    enable = true;  
-    extraPackages = with pkgs; [ nvidia-vaapi-driver ];
-  };
-
-  # Load nvidia driver for Xorg and Wayland
-  # boot.extraModulePackages = [ config.boot.kernelPackages.nvidia_x11 ];
-  boot.extraModulePackages = [ config.boot.kernelPackages.nvidia_x11_beta ];
-  # boot.extraModulePackages = [ config.boot.kernelPackages.nvidia_x11 ];
-
-
-  boot.loader.systemd-boot.consoleMode = "max";
-
-  boot.kernelParams = [
-    "amdgpu.modeset=1"
-    "nvidia-drm.fbdev=1"
-    "nvidia-drm.modeset=0"
-  #  "nvidia.NVreg_PreserveVideoMemoryAllocations=0"
-    "amd_iommu=on"
-    # "vfio-pci.ids=\"10de:2489,10de:228b\""
-    # "nomodeset"
-  #  "nvidia_drm.modeset=1"
-  ];
-  boot.blacklistedKernelModules = [ 
-    "i915" 
-    "nouveau"
-    # "nvidia"
-    # "nvidia-drm"
-    # "nvidia-uvm"
-    # "nvidiafb"
-    # "nvidia_drm"
-    # "nvidia_modeset"
-  ];
-  # boot.extraModprobeConfig = ''
-    # blacklist nvidia
-    # blacklist nvidia-drm
-    # blacklist nvidia_drm
-    # blacklist nvidia-uvm
-    # blacklist nvidia_uvm
-    # blacklist nvidia_modeset
-    # blacklist nvidiafb
-    # blacklist nouveau
-    # options nouveau modeset=0
-  # '';
-  boot.extraModprobeConfig = ''
-    blacklist nouveau
-    options nouveau modeset=0
-  '';
-  # services.xserver.videoDrivers = [ "nvidia" ];
-  services.xserver.videoDrivers = [ "amdgpu" "nvidia" ];
-
-  # services.udev.extraRules = ''
-  #   # Remove NVIDIA USB xHCI Host Controller devices, if present
-  #   ACTION=="add", SUBSYSTEM=="pci", ATTR{vendor}=="0x10de", ATTR{class}=="0x0c0330", ATTR{power/control}="auto", ATTR{remove}="1"
-  #   # Remove NVIDIA USB Type-C UCSI devices, if present
-  #   ACTION=="add", SUBSYSTEM=="pci", ATTR{vendor}=="0x10de", ATTR{class}=="0x0c8000", ATTR{power/control}="auto", ATTR{remove}="1"
-  #   # Remove NVIDIA Audio devices, if present
-  #   ACTION=="add", SUBSYSTEM=="pci", ATTR{vendor}=="0x10de", ATTR{class}=="0x040300", ATTR{power/control}="auto", ATTR{remove}="1"
-  #   # Remove NVIDIA VGA/3D controller devices
-  #   ACTION=="add", SUBSYSTEM=="pci", ATTR{vendor}=="0x10de", ATTR{class}=="0x03[0-9]*", ATTR{power/control}="auto", ATTR{remove}="1"
-  # '';
-
-  boot.initrd.kernelModules = [ 
-    "amdgpu"
-    "nvidia"  
-    # "nvidia-drm"
-    "nvidiafb"
-    # "nvidia-uvm"
-    # "nvidia-modeset"
-    # "i2c-nvidia_gpu"    
-  ];  
-  hardware.nvidia = {
-    # Modesetting is required.
-    modesetting.enable = true;
-
-    # Nvidia power management. Experimental, and can cause sleep/suspend to fail.
-    # Enable this if you have graphical corruption issues or application crashes after waking
-    # up from sleep. This fixes it by saving the entire VRAM memory to /tmp/ instead 
-    # of just the bare essentials.
-    powerManagement.enable = true;
-
-    # Fine-grained power management. Turns off GPU when not in use.
-    # Experimental and only works on modern Nvidia GPUs (Turing or newer).
-    powerManagement.finegrained = false;
-
-    # Use the NVidia open source kernel module (not to be confused with the
-    # independent third-party "nouveau" open source driver).
-    # Support is limited to the Turing and later architectures. Full list of 
-    # supported GPUs is at: 
-    # https://github.com/NVIDIA/open-gpu-kernel-modules#compatible-gpus 
-    # Only available from driver 515.43.04+
-    # Currently alpha-quality/buggy, so false is currently the recommended setting.
-    open = false;
-
-    # Enable the Nvidia settings menu,
-	  # accessible via `nvidia-settings`.
-    nvidiaSettings = true;
-
-    # Optionally, you may need to select the appropriate driver version for your specific GPU.
-    package = config.boot.kernelPackages.nvidiaPackages.beta;
-    # package = config.boot.kernelPackages.nvidiaPackages.none;
-    # package = config.boot.kernelPackages.nvidiaPackages.production;
-    
-    forceFullCompositionPipeline = false;
-
-    prime = {
-      offload = {
-        enable = true;
-        enableOffloadCmd = true;
-      };
-      reverseSync.enable = false;
-      # Make sure to use the correct Bus ID values for your system!
-      # intelBusId = "PCI:0:2:0";
-      nvidiaBusId = "PCI:01:0:0";
-      amdgpuBusId = "PCI:50:0:0"; #For AMD GPU
-    };
-
-  };
-  users.users.andreas = {
-   extraGroups = [ "video" "render" ];
-  };
-}

systems/x86_64-linux/drivebystation-nix/hardware/hardware-configuration.nix

@@ -7,30 +7,54 @@
   imports = 
     [ 
       (modulesPath + "/installer/scan/not-detected.nix")
-      ./graphics/nvidia-stable.nix  
+      ./graphics/intel.nix  
       # ./graphics/nvidia.nix
       ./acer-monitor-edid.nix
     ];
   # boot.kernelPackages = pkgs.linuxPackages_latest;
+  boot.kernelPackages = pkgs.cachyosKernels.linuxPackages-cachyos-latest;
+  hardware.enableRedistributableFirmware = true;
   # boot.kernelPackages = pkgs.linuxKernel.packages.linux_xanmod_latest;
-  boot.kernelPackages = pkgs.linuxPackages;
+  # boot.kernelPackages = pkgs.linuxPackages;
-  
+  boot.loader.efi.canTouchEfiVariables = true;  
   boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
-  boot.kernelModules = [ "kvm-amd" "4vl2loopback" ];
+  boot.kernelModules = [ "kvm-amd" "r8125" "4vl2loopback" ];
-  boot.extraModulePackages = [ pkgs.linuxPackages.v4l2loopback ];
+  boot.extraModulePackages = with config.boot.kernelPackages; [ v4l2loopback r8125 ];
-
+  boot.supportedFilesystems = [ "ntfs" ];
-  boot.blacklistedKernelModules = [ ];
+  boot.blacklistedKernelModules = [ "r8169" ];
-  fileSystems."/" =
+  fileSystems."/" = {
-    { device = "/dev/disk/by-uuid/563805a1-5277-4488-bbdd-c1a7ed37be76";
+    device = "/dev/disk/by-uuid/563805a1-5277-4488-bbdd-c1a7ed37be76";
     fsType = "ext4";
   };
 
-  fileSystems."/boot" =
+  fileSystems."/boot" = { 
-    { device = "/dev/disk/by-uuid/E846-D998";
+    #device = "/dev/disk/by-uuid/E846-D998";
+    device = "/dev/disk/by-uuid/19BE-8BAA";
     fsType = "vfat";
     options = [ "fmask=0077" "dmask=0077" ];
   };
 
+  # Mount ntfs partition
+  # fileSystems."/run/media/627C3BDF7C3BAD23" = {
+  #   device = "/dev/disk/by-uuid/627C3BDF7C3BAD23";
+  #   fsType = "ntfs-3g";
+  #   options = [ "rw" "uid=1000"];
+  # };
+
+  # # Mount ntfs oldfiles drive partition
+  # fileSystems."/run/media/oldfiles" = {
+  #   device = "/dev/disk/by-uuid/E2E26FFFE26FD677";
+  #   fsType = "ntfs-3g";
+  #   options = [ "rw" "uid=1000"];
+  # };
+
+  # # Mount The Vault
+  # fileSystems."/run/media/vault" = {
+  #   device = "/dev/disk/by-uuid/3470646370642DB4";
+  #   fsType = "ntfs-3g";
+  #   options = [ "rw" "uid=1000"];
+  # };
+
 
 
   # Try to fix hibernation
@@ -43,6 +67,7 @@
   boot.resumeDevice = "/dev/disk/by-uuid/563805a1-5277-4488-bbdd-c1a7ed37be76";  # the unlocked drive mapping
   boot.kernelParams = [
     "resume_offset=78399488"  #sudo filefrag -v /var/lib/swapfile|awk 'NR==4{gsub(/\./,"");print $4;}'
+    "r8125.aspm=0" # realtek network adapter fix
   ];
   security.protectKernelImage = false;
 

systems/x86_64-linux/drivebystation-nix/video.nix

@@ -5,7 +5,7 @@
   ];
   
   boot.extraModulePackages = [
-    pkgs.linuxPackages.v4l2loopback # Webcam loopback
+    config.boot.kernelPackages.v4l2loopback # Webcam loopback
   ];
 
   boot.extraModprobeConfig = ''