feat(nix): add jj-cz to devshell

flake.lock

@@ -24,43 +24,6 @@
         "type": "github"
       }
     },
-    "cachix": {
-      "inputs": {
-        "devenv": [
-          "jj-cz",
-          "devenv"
-        ],
-        "flake-compat": [
-          "jj-cz",
-          "devenv",
-          "flake-compat"
-        ],
-        "git-hooks": [
-          "jj-cz",
-          "devenv",
-          "git-hooks"
-        ],
-        "nixpkgs": [
-          "jj-cz",
-          "devenv",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1760971495,
-        "narHash": "sha256-IwnNtbNVrlZIHh7h4Wz6VP0Furxg9Hh0ycighvL5cZc=",
-        "owner": "cachix",
-        "repo": "cachix",
-        "rev": "c5bfd933d1033672f51a863c47303fc0e093c2d2",
-        "type": "github"
-      },
-      "original": {
-        "owner": "cachix",
-        "ref": "latest",
-        "repo": "cachix",
-        "type": "github"
-      }
-    },
     "caelestia-cli": {
       "inputs": {
         "caelestia-shell": [
@@ -72,11 +35,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1778125502,
+        "lastModified": 1781930126,
-        "narHash": "sha256-QAAO9RCR6byVJi50l8RMVJWzrsNYbXonfR6tqU93vIQ=",
+        "narHash": "sha256-AopjjM6497f3Usb6IAZgensjtzGlYGGpJLw7DRtP67I=",
         "owner": "caelestia-dots",
         "repo": "cli",
-        "rev": "7b8a4281aa8b2b12745de531cce0c65d87aea2e5",
+        "rev": "b00dabaa9351d1383dfba162f5b3575b49a126e1",
         "type": "github"
       },
       "original": {
@@ -88,17 +51,18 @@
     "caelestia-shell": {
       "inputs": {
         "caelestia-cli": "caelestia-cli",
+        "m3shapes": "m3shapes",
         "nixpkgs": [
           "nixpkgs"
         ],
         "quickshell": "quickshell"
       },
       "locked": {
-        "lastModified": 1778381004,
+        "lastModified": 1782013769,
-        "narHash": "sha256-JwIlrajiY74obxyTMu/Ym6wOEQaCjpHwfziPK+E5u3Q=",
+        "narHash": "sha256-3j6GU+y8RSyRAibriCePKqqU4UPf6qjabUD9cfjehcM=",
         "owner": "caelestia-dots",
         "repo": "shell",
-        "rev": "2ca4ad4a434e91e73504debd5225e66dc5ebb2b6",
+        "rev": "74e4970ab530b3d1a5cddb8424fcf0ee96443bd9",
         "type": "github"
       },
       "original": {
@@ -115,11 +79,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1778198574,
+        "lastModified": 1781648708,
-        "narHash": "sha256-XzgYoibIH6diZoZ2GzoGeyV2xdXAwBtXdAze+Qu2kR0=",
+        "narHash": "sha256-i9ggnF31Uq3tpdp6ZMe7YAOxjTfkB7S4WjSBfXV0uMk=",
         "owner": "9001",
         "repo": "copyparty",
-        "rev": "139ef1851e5d698521a5c2078c56f951d6e54d00",
+        "rev": "d33d11321f823f58a9109298ef886044f63b02ce",
         "type": "github"
       },
       "original": {
@@ -128,33 +92,6 @@
         "type": "github"
       }
     },
-    "devenv": {
-      "inputs": {
-        "cachix": "cachix",
-        "flake-compat": "flake-compat",
-        "flake-parts": "flake-parts",
-        "git-hooks": "git-hooks",
-        "nix": "nix",
-        "nixd": "nixd",
-        "nixpkgs": [
-          "jj-cz",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1770304289,
-        "narHash": "sha256-+g+XMyB1zi50h2N38GE32l7ZONX4oW7Nw6QSXzfNiwk=",
-        "owner": "cachix",
-        "repo": "devenv",
-        "rev": "fd777e39027d393346e4df672d51ad2bf44b2a12",
-        "type": "github"
-      },
-      "original": {
-        "owner": "cachix",
-        "repo": "devenv",
-        "type": "github"
-      }
-    },
     "fenix": {
       "inputs": {
         "nixpkgs": [
@@ -178,59 +115,6 @@
         "type": "github"
       }
     },
-    "flake-compat": {
-      "flake": false,
-      "locked": {
-        "lastModified": 1761588595,
-        "narHash": "sha256-XKUZz9zewJNUj46b4AJdiRZJAvSZ0Dqj2BNfXvFlJC4=",
-        "owner": "edolstra",
-        "repo": "flake-compat",
-        "rev": "f387cd2afec9419c8ee37694406ca490c3f34ee5",
-        "type": "github"
-      },
-      "original": {
-        "owner": "edolstra",
-        "repo": "flake-compat",
-        "type": "github"
-      }
-    },
-    "flake-parts": {
-      "inputs": {
-        "nixpkgs-lib": [
-          "jj-cz",
-          "devenv",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1760948891,
-        "narHash": "sha256-TmWcdiUUaWk8J4lpjzu4gCGxWY6/Ok7mOK4fIFfBuU4=",
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "rev": "864599284fc7c0ba6357ed89ed5e2cd5040f0c04",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hercules-ci",
-        "repo": "flake-parts",
-        "type": "github"
-      }
-    },
-    "flake-root": {
-      "locked": {
-        "lastModified": 1723604017,
-        "narHash": "sha256-rBtQ8gg+Dn4Sx/s+pvjdq3CB2wQNzx9XGFq/JVGCB6k=",
-        "owner": "srid",
-        "repo": "flake-root",
-        "rev": "b759a56851e10cb13f6b8e5698af7b59c44be26e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "srid",
-        "repo": "flake-root",
-        "type": "github"
-      }
-    },
     "flake-utils": {
       "locked": {
         "lastModified": 1678901627,
@@ -316,57 +200,6 @@
         "type": "github"
       }
     },
-    "git-hooks": {
-      "inputs": {
-        "flake-compat": [
-          "jj-cz",
-          "devenv",
-          "flake-compat"
-        ],
-        "gitignore": "gitignore",
-        "nixpkgs": [
-          "jj-cz",
-          "devenv",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1760663237,
-        "narHash": "sha256-BflA6U4AM1bzuRMR8QqzPXqh8sWVCNDzOdsxXEguJIc=",
-        "owner": "cachix",
-        "repo": "git-hooks.nix",
-        "rev": "ca5b894d3e3e151ffc1db040b6ce4dcc75d31c37",
-        "type": "github"
-      },
-      "original": {
-        "owner": "cachix",
-        "repo": "git-hooks.nix",
-        "type": "github"
-      }
-    },
-    "gitignore": {
-      "inputs": {
-        "nixpkgs": [
-          "jj-cz",
-          "devenv",
-          "git-hooks",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1709087332,
-        "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
-        "owner": "hercules-ci",
-        "repo": "gitignore.nix",
-        "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
-        "type": "github"
-      },
-      "original": {
-        "owner": "hercules-ci",
-        "repo": "gitignore.nix",
-        "type": "github"
-      }
-    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -374,11 +207,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1778609305,
+        "lastModified": 1781989573,
-        "narHash": "sha256-muTc+WME6k3sfTr/Pvmw8hrK7zXrbl961TEF9wPeAnk=",
+        "narHash": "sha256-npfH7Zv7t1akX/ArqCNro4zU4ViPlghLaPnbEfHbCxk=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "5878fdadfe2cfe1b3383b38d66117f7b80696b68",
+        "rev": "78e7d8b13ecd7f5256a5c11ce216876164099d9f",
         "type": "github"
       },
       "original": {
@@ -390,7 +223,6 @@
     "jj-cz": {
       "inputs": {
         "alejandra": "alejandra",
-        "devenv": "devenv",
         "flake-utils": "flake-utils_3",
         "nixpkgs": [
           "nixpkgs"
@@ -398,11 +230,11 @@
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1777830987,
+        "lastModified": 1781867614,
-        "narHash": "sha256-fPsv7qZHb9EO04IoQ6cGAj+6/y1pSMEFWmvLCULOEuM=",
+        "narHash": "sha256-GHy8hEZtToo7FLxEZm0x/pn/fjg1w9sx7ZP9hRd1fcM=",
         "ref": "develop",
-        "rev": "bd6892d91e1a04f9b092b22831a977f08a36cbe0",
+        "rev": "d2c48605aac4ca9580d8a34aad4c65371c5a7cc1",
-        "revCount": 40,
+        "revCount": 52,
         "type": "git",
         "url": "https://labs.phundrak.com/phundrak/jj-cz"
       },
@@ -412,49 +244,20 @@
         "url": "https://labs.phundrak.com/phundrak/jj-cz"
       }
     },
-    "nix": {
+    "m3shapes": {
-      "inputs": {
+      "flake": false,
-        "flake-compat": [
-          "jj-cz",
-          "devenv",
-          "flake-compat"
-        ],
-        "flake-parts": [
-          "jj-cz",
-          "devenv",
-          "flake-parts"
-        ],
-        "git-hooks-nix": [
-          "jj-cz",
-          "devenv",
-          "git-hooks"
-        ],
-        "nixpkgs": [
-          "jj-cz",
-          "devenv",
-          "nixpkgs"
-        ],
-        "nixpkgs-23-11": [
-          "jj-cz",
-          "devenv"
-        ],
-        "nixpkgs-regression": [
-          "jj-cz",
-          "devenv"
-        ]
-      },
       "locked": {
-        "lastModified": 1769708679,
+        "lastModified": 1781017666,
-        "narHash": "sha256-uFKkp2/SjIqbu5HtINg/hwHN6qaqcxLIbL/om7dT3kI=",
+        "narHash": "sha256-kfHyzZaPHgqZML48OA+5JwBOsLdQJ2ci/aGPShvUB4Y=",
-        "owner": "cachix",
+        "owner": "soramanew",
-        "repo": "nix",
+        "repo": "m3shapes",
-        "rev": "72bec37fabbfe378d677868ec42eeb83acf07a4c",
+        "rev": "bdc327b29f95394a732baf3c9b19658ba23755b6",
         "type": "github"
       },
       "original": {
-        "owner": "cachix",
+        "owner": "soramanew",
-        "ref": "devenv-2.32",
+        "repo": "m3shapes",
-        "repo": "nix",
+        "rev": "bdc327b29f95394a732baf3c9b19658ba23755b6",
         "type": "github"
       }
     },
@@ -465,11 +268,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1778393439,
+        "lastModified": 1782030356,
-        "narHash": "sha256-mOtQxUjtKaPHLeoLOY/YEDctmud1X9KwJr4kE1MJ3Wc=",
+        "narHash": "sha256-h4WpMr455AfRub0FXBaon6Vcpe0waUyJ4GivIW6oyd4=",
         "owner": "nix-community",
         "repo": "nix-index-database",
-        "rev": "01466c414c7357ae2ce32be4a272a7c69e94ab5f",
+        "rev": "3017088b49efd404f78e3b104f553b97e4af786b",
         "type": "github"
       },
       "original": {
@@ -478,42 +281,13 @@
         "type": "github"
       }
     },
-    "nixd": {
-      "inputs": {
-        "flake-parts": [
-          "jj-cz",
-          "devenv",
-          "flake-parts"
-        ],
-        "flake-root": "flake-root",
-        "nixpkgs": [
-          "jj-cz",
-          "devenv",
-          "nixpkgs"
-        ],
-        "treefmt-nix": "treefmt-nix"
-      },
-      "locked": {
-        "lastModified": 1763964548,
-        "narHash": "sha256-JTRoaEWvPsVIMFJWeS4G2isPo15wqXY/otsiHPN0zww=",
-        "owner": "nix-community",
-        "repo": "nixd",
-        "rev": "d4bf15e56540422e2acc7bc26b20b0a0934e3f5e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "repo": "nixd",
-        "type": "github"
-      }
-    },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1778443072,
+        "lastModified": 1781577229,
-        "narHash": "sha256-zi7/fsqM/kFdNuED//4WOCUtezGtKKqRNORjMvfwjnA=",
+        "narHash": "sha256-lrp67w8AulE9Ks53n27I45ADSzbOCn4H+CNW1Ck8B+8=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "da5ad661ba4e5ef59ba743f0d112cbc30e474f32",
+        "rev": "567a49d1913ce81ac6e9582e3553dd90a955875f",
         "type": "github"
       },
       "original": {
@@ -525,11 +299,11 @@
     },
     "nixpkgsStable": {
       "locked": {
-        "lastModified": 1778430510,
+        "lastModified": 1781509190,
-        "narHash": "sha256-Ti+ZBvW6yrWWAg2szExVTwCd4qOJ3KlVr1tFHfyfi8Q=",
+        "narHash": "sha256-uJZs9Di8I6ciTp6jiojj0HzlNpBkud8ax5aT/O5aJkw=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "8fd9daa3db09ced9700431c5b7ad0e8ba199b575",
+        "rev": "d6df3513510aa548c83868fd22bfddd0a8c0a0d4",
         "type": "github"
       },
       "original": {
@@ -568,11 +342,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1778222427,
+        "lastModified": 1781847791,
-        "narHash": "sha256-6GFiP611nEJvtm+m03sMyfaVIJ9QOCi//hS+PPKyyPA=",
+        "narHash": "sha256-Mo2YtNEGlcySnbq0YuP3nUKMAQCMAfE+TcCffo5vzD8=",
         "ref": "refs/heads/master",
-        "rev": "d1760ed1f31c02a95b37a9bf4084129c829ebe7f",
+        "rev": "68c2c85c33845385f7ab8147b32f1450b1e468e0",
-        "revCount": 817,
+        "revCount": 824,
         "type": "git",
         "url": "https://git.outfoxxed.me/outfoxxed/quickshell"
       },
@@ -651,11 +425,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1770260791,
+        "lastModified": 1779992051,
-        "narHash": "sha256-ADTBfENFjRVDQMcCycyX/pAy6NFI/Ct6Mrar3gsmXI0=",
+        "narHash": "sha256-4YWGv/0NkAdtTW1MXfaLYpfC9BhpCy9k1pWkR0xI9uw=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "42ec85352e419e601775c57256a52f6d48a39906",
+        "rev": "e93ad0df1073b2c969a8f0c1f10b84e870469d40",
         "type": "github"
       },
       "original": {
@@ -692,11 +466,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1777944972,
+        "lastModified": 1781943681,
-        "narHash": "sha256-VfGRo1qTBKOe3s2gOv8LSoA6Fk19PvBlwQ1ECN0Evn8=",
+        "narHash": "sha256-NFHmA7H47adqiyp+0iEOyZOQhmigDqA/NBAlf4imB6U=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "c591bf665727040c6cc5cb409079acb22dcce33c",
+        "rev": "420f8d2e9882911f65cfac15cc706f639ba96cca",
         "type": "github"
       },
       "original": {
@@ -713,11 +487,11 @@
         "systems": "systems_4"
       },
       "locked": {
-        "lastModified": 1778540809,
+        "lastModified": 1782031037,
-        "narHash": "sha256-FNXls2QZTcxY0Dem3QtSewnr8vUKMDsTw9m8pLOnhTc=",
+        "narHash": "sha256-a7oWSyS7SN81UOqVt481yIEMDsMpaJ7GNdV6Eaz5Yqg=",
         "owner": "Gerg-L",
         "repo": "spicetify-nix",
-        "rev": "83939d7df4c0f1b8ee88cabde112223280a48554",
+        "rev": "9cb27462cfd20edac174353f1e95bc03aa888863",
         "type": "github"
       },
       "original": {
@@ -733,11 +507,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1778468351,
+        "lastModified": 1781754174,
-        "narHash": "sha256-A5ZdpWN5d+OmKln2EPPeMmPJaBwbugO9dEhyp3pn/X8=",
+        "narHash": "sha256-Q5hp6+DYj23gMAvhLXBYNan9EwY9C+oxyU+M1TJDwgo=",
         "owner": "nix-community",
         "repo": "srvos",
-        "rev": "23122d21dfbe00e072ce515e21af18882bc88fd7",
+        "rev": "18ae1c654f60fb8dafb40c48fe25eb09f1aaddb2",
         "type": "github"
       },
       "original": {
@@ -806,29 +580,6 @@
         "type": "github"
       }
     },
-    "treefmt-nix": {
-      "inputs": {
-        "nixpkgs": [
-          "jj-cz",
-          "devenv",
-          "nixd",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1734704479,
-        "narHash": "sha256-MMi74+WckoyEWBRcg/oaGRvXC9BVVxDZNRMpL+72wBI=",
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "rev": "65712f5af67234dad91a5a4baee986a8b62dbf8f",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "type": "github"
-      }
-    },
     "zen-browser": {
       "inputs": {
         "nixpkgs": [
@@ -836,11 +587,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1778303188,
+        "lastModified": 1781847955,
-        "narHash": "sha256-zXFSvK80qpI91B7DU9QSExAtafSrz6vzormh2kUi6kQ=",
+        "narHash": "sha256-1OSYOGuJp/NoODmSHjsz+6TB/kSilJ+BsFihjY7TTnc=",
         "owner": "youwen5",
         "repo": "zen-browser-flake",
-        "rev": "9346c84657a9cab472bc4ee5a2d65d42a72d5346",
+        "rev": "4bca251cd556677f7b765ff324d1638ae215be13",
         "type": "github"
       },
       "original": {

flake.nix

@@ -104,6 +104,7 @@
             pkgs.nh
             pkgs.jujutsu
             pkgs.git
+            inputs.jj-cz.packages.${system}.default
           ];
         };
 
@@ -186,7 +187,7 @@
                 srvos.nixosModules.server
                 srvos.nixosModules.hardware-hetzner-cloud
                 srvos.nixosModules.mixins-terminfo
-                ./hosts/naromk3/configuration.nix
+                ./hosts/naromk3
               ];
             };
             pinetab2 = pinetabConfig "x86_64-linux" ./hosts/pinetab2/gnome.nix;

hosts/naromk3/default.nix

@@ -23,9 +23,12 @@
       id = "0003beef";
       firewall = {
         openPorts = [
-          22 # Gitea SSH
+          22  # Gitea SSH
-          80 # HTTP
+          25  # SMTP
+          80  # HTTP
           443 # HTTPS
+          465 # SMTPS
+          993 # IMAPS
         ];
       };
     };

packages/inkdrop.nix

@@ -1,149 +0,0 @@
-# https://www.inkdrop.app/
-{
-  lib,
-  fetchurl,
-  stdenv,
-  autoPatchelfHook,
-  makeWrapper,
-  wrapGAppsHook3,
-  alsa-lib,
-  at-spi2-atk,
-  at-spi2-core,
-  cairo,
-  cups,
-  dbus,
-  expat,
-  gdk-pixbuf,
-  glib,
-  gtk3,
-  libdrm,
-  libnotify,
-  libpulseaudio,
-  libsecret,
-  libuuid,
-  libxkbcommon,
-  mesa,
-  nspr,
-  nss,
-  pango,
-  systemd,
-  libx11,
-  libxscrnsaver,
-  libxcomposite,
-  libxcursor,
-  libxdamage,
-  libxext,
-  libxfixes,
-  libxi,
-  libxrandr,
-  libxrender,
-  libxtst,
-  libxcb,
-  libxkbfile,
-  libxshmfence,
-}:
-stdenv.mkDerivation rec {
-  pname = "inkdrop";
-  version = "5.11.8";
-
-  src = fetchurl {
-    url = "https://dist.inkdrop.app/v${version}/${pname}_${version}_amd64.deb";
-    hash = "sha256-8aJSeUi5K9PgNJvfYAtnRnI2t+vM10jiqVAZmX+zni0=";
-  };
-
-  nativeBuildInputs = [
-    autoPatchelfHook
-    makeWrapper
-    wrapGAppsHook3
-  ];
-
-  buildInputs = [
-    alsa-lib
-    at-spi2-atk
-    at-spi2-core
-    cairo
-    cups
-    dbus
-    expat
-    gdk-pixbuf
-    glib
-    gtk3
-    libdrm
-    libnotify
-    libpulseaudio
-    libsecret
-    libuuid
-    libxkbcommon
-    mesa
-    nspr
-    nss
-    pango
-    systemd
-    libx11
-    libxscrnsaver
-    libxcomposite
-    libxcursor
-    libxdamage
-    libxext
-    libxfixes
-    libxi
-    libxrandr
-    libxrender
-    libxtst
-    libxcb
-    libxkbfile
-    libxshmfence
-  ];
-
-  dontBuild = true;
-  dontConfigure = true;
-
-  # Ignore musl dependency since we're using glibc
-  autoPatchelfIgnoreMissingDeps = ["libc.musl-x86_64.so.1"];
-
-  unpackPhase = ''
-    runHook preUnpack
-
-    # Extract deb file manually to avoid setuid issues
-    ar x $src
-    tar xf data.tar.xz --no-same-permissions --no-same-owner
-
-    runHook postUnpack
-  '';
-
-  installPhase = ''
-    runHook preInstall
-
-    # Create output directories
-    mkdir -p $out/bin $out/share
-
-    # Copy the main application
-    cp -r usr/lib/inkdrop $out/share/inkdrop
-
-    # Copy desktop file and icon
-    cp -r usr/share/applications $out/share/
-    cp -r usr/share/pixmaps $out/share/
-
-    # Fix desktop file to use absolute paths
-    substituteInPlace $out/share/applications/inkdrop.desktop \
-      --replace-quiet "Exec=inkdrop" "Exec=$out/bin/inkdrop" \
-      --replace-quiet "Icon=inkdrop" "Icon=$out/share/pixmaps/inkdrop.png"
-
-    # Create wrapper script in bin
-    makeWrapper $out/share/inkdrop/inkdrop $out/bin/inkdrop \
-      --add-flags "\''${NIXOS_OZONE_WL:+\''${WAYLAND_DISPLAY:+--ozone-platform-hint=auto --enable-features=WaylandWindowDecorations}}" \
-      --set-default ELECTRON_IS_DEV 0 \
-      --inherit-argv0
-
-    runHook postInstall
-  '';
-
-  meta = with lib; {
-    description = "Notebook app for Markdown lovers";
-    homepage = "https://www.inkdrop.app/";
-    license = licenses.unfree;
-    maintainers = [];
-    platforms = ["x86_64-linux"];
-    mainProgram = "inkdrop";
-  };
-}

packages/obs-image-reaction.nix

@@ -0,0 +1,29 @@
+{
+  lib,
+  stdenv,
+  obs-studio,
+  fetchFromGitHub,
+  cmake,
+  ...
+}:
+stdenv.mkDerivation (finalAttrs: rec {
+  pname = "obs-image-reaction";
+  version = "0.1.0";
+  # https://github.com/scaledteam/obs-image-reaction
+  src = fetchFromGitHub {
+    owner = "scaledteam";
+    repo = pname;
+    rev = "4cd345e78c714e80e894cfb51c72b94135a6014d";
+    hash = "sha256-mC1B8tveHx35pfbAcOlosB8YKaBVg87MjXbr79sf7+k=";
+  };
+  nativeBuildInputs = [cmake];
+  buildInputs = [obs-studio];
+  postInstall = "rm -rf $out/obs-plugins $out/data";
+
+  meta = {
+    description = "OBS Plugin with image that reacts to sound source";
+    homepage = "https://github.com/scaledteam/obs-image-reaction";
+    license = lib.licenses.gpl2;
+    platforms = lib.platforms.linux;
+  };
+})

secrets/secrets.yaml

@@ -8,6 +8,8 @@ elcafe:
         dynamic: ENC[AES256_GCM,data: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,iv:3G3geSZRziwGiKcUMVNZ7j5s/4YA6Uk7wCSb4aFNSMo=,tag:FxARskR9+wdV7/xCKP8UdA==,type:str]
 marpa:
     nix-cache-priv-key: ENC[AES256_GCM,data:H5VsN0nOogvgxWHXHF66BbzJe17zelZCG6mU4vmVJqBoi7a5cQxzU7WnV4k1EOpMJPDj6floVmrsG4DM86FthxcTwixCNDINmaemwAXQnUkgWXFKYY7Ovzten81UVKrtkN4n1S8=,iv:pxnHD5YqyTeNZnxyEJeXAUixZEz8Uq9b2HFZZBsMOzk=,tag:xI+4tFG+Q4Z5IVxlATayJA==,type:str]
+opencode:
+    cors: ENC[AES256_GCM,data:ubvZLYOSbwUSlpyO+1R1BvgxI17gBTNmN3dK9as=,iv:vPEZPvrber41NdOFB299fpIH7o2IFsSdA5EhIdw4CNk=,tag:KufSrvozf0ov7VBpMz/Bfg==,type:str]
 extraHosts: ENC[AES256_GCM,data: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,iv:5A3jCWLkooCkuOMiybbeQ9+TRA7CoiW3qbzmJLVarSc=,tag:qLsGhrFHs65Vesj4Ot4I/g==,type:str]
 mopidy:
     spotify: ENC[AES256_GCM,data:6i9BzQmlndnROuT1H2zgN/3I6hBiFf14BlcS+XL2PbTiiEQZe2yE3tnZo3KXU9S5CjS3MwxsVdytKOFMQt2s1bVjcibBhJzoKEQByaapdzn1mK3kQLdJfhPf4Hf9YZV9Dlc60ngS7ESLZakdFVlj4rlbV5XReLhK,iv:fYd78r4U0kTyq1TZjBVXkjdNiOQ29gLJ53kwTXsi8W0=,tag:oWaeOuzdHWS4joZAdeA2pg==,type:str]
@@ -17,8 +19,7 @@ ssh:
     hosts: ENC[AES256_GCM,data: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,iv:Gf2f71TluSEQtiHf7CIHE2tFX8N4Y17AjP1PnNuWuNA=,tag:sGmZR1lKbbOeEhPvrHHO8Q==,type:str]
 sops:
     age:
-        - recipient: age1ajemtm502nn2n4q7v4j8meyd5mxtcqngkkedxq2pqzuwu78zp93qnw8q48
+        - enc: |
-          enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2S3VaTmg3b2QxMGtVeStr
             WWRpb0RhVFNWM3RJNEV4ZTdRVmJUa2d6YVZrCnFTOWwwTlNhc2hqM2pwZ1hkcWd1
@@ -26,8 +27,8 @@ sops:
             blMrcWVSVFB3TVc0aTQ0RUYvbDFJS0kKmGisf9VDK2RPA1uQCK5udt7sdeDyh344
             IKhPHzEHAHjKEkE6sWc6TB/l8K3IfL9zdHQZ9ZqTvCiS8CBZOwPQeg==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age197lfdanym647wdaz9uy8hrfqjwj9fs8rm7vs3fsrctceu8mr9gms2jedhz
+          recipient: age1ajemtm502nn2n4q7v4j8meyd5mxtcqngkkedxq2pqzuwu78zp93qnw8q48
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTRzRqTzlzVWpGMVFEbjV5
             R1RXS1RBMzZGaGZjUkFZc3RLb2JkSzlRQlJZCnp5c0pMOHBZUkhralArcUhLSmx5
@@ -35,8 +36,8 @@ sops:
             eHRMV2o0TXhoVkcyaXZqU0tsR0o2eDQKdYwEuPeQ1fntKQKIlOlxet+SJ0rT5I1y
             WDpfGZUVvghx5dwdd6EMq3sQUeoFSfjrlgIAwNtHRwMC19A68ubzhQ==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age17pn6suvz2f7zmrm9zxj5hr0putvcvdamqxqt7ewhncgg6ccgmp2qr00xm2
+          recipient: age197lfdanym647wdaz9uy8hrfqjwj9fs8rm7vs3fsrctceu8mr9gms2jedhz
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxUEtOZ3Zac01HTjVZVXNF
             endFNVprclpJMmh1eTA2ZmVJRTJlbjI3dEVNCjA4K2U5QWlOdkI0R3JwbVpNRWJG
@@ -44,8 +45,8 @@ sops:
             YURQR2kxdExKR00vYVJMVVQxekdVOE0KDkPOMeCo1MoM5R89t1rsMWR/bGIx592Z
             wvbVmE/El4Z0QzuvXl0XK3CFlKGuwgNw5TvtQ9QZP1aAL3yN0+T5oQ==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1cnnpnglkvgw5ffv8qpgwpqvj203lh4uwt698y9mxjwklxt8nysmsa8hepn
+          recipient: age17pn6suvz2f7zmrm9zxj5hr0putvcvdamqxqt7ewhncgg6ccgmp2qr00xm2
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQQTV1dkxMK3dxbGhiTGJG
             bkVQTUFOU1I4SXAyV21PdThSZFNOTTA0cmpFCkpXcmRXdlE0eVRYWWErQUxSWFN4
@@ -53,8 +54,8 @@ sops:
             M25EQU5zckVMa1VSK29iYW5PbHRJcVEK6+gstHbcPBdeRNvZa21nZB5sT1SdHWHs
             8St5tYl5I3CxNWFgFjOrHqteRKc+ZTcj3euAJ6Wathbw0YMiA3gz0Q==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1g68hxv73llkyc7etzh499ztcrt93pwawy0n8p93px4taqu58mehsp88vjq
+          recipient: age1cnnpnglkvgw5ffv8qpgwpqvj203lh4uwt698y9mxjwklxt8nysmsa8hepn
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYRGYyUGhlL2NJelZTQ1g0
             UEhJMFlkVmdlU1E2cGE2UHF2dytVYmhQMlIwCmdrOEZjUUFrQjMzK2FxVjF0NGY1
@@ -62,8 +63,8 @@ sops:
             cUFid1RwRXA4cExWd3poK2hEaVd5Q00KjjiEiQw2OxcGv/qDudLmbM6aysYhLTxi
             Qjmh133pyznFs+pLVLdYnId42zvojAeuJD9cJYxuwwgPA2ZlKdSVrg==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1awytvphvty4f9wmdn86xnjg9kgetqjx8qlwj5d2882t4fyyzy58s3vg5k4
+          recipient: age1g68hxv73llkyc7etzh499ztcrt93pwawy0n8p93px4taqu58mehsp88vjq
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRbUs1Qm1hUnJldDNZNUR0
             N3d0YXp5NWtjV0xvc1ZrM3ArZllIbmJtRXpnCnp2TVRyQVFqNC9kWXpBa0NnbW9X
@@ -71,8 +72,8 @@ sops:
             bkdsaXNINEZpZjdMdHAwdElpWFQ0aW8K0guO/BF8hp1LDToVBFY5JKdz8WXOwK2P
             prGKdxPsTAfW8xTq97LHHRsLC7+4TVXnjF4LS4SM8EXIX9KCl5FIGA==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1erkn7dd022e90ktyj66aux9j9xvl0uzd6ru5cmrjsvcm5rtr5pfs7q6k9h
+          recipient: age1awytvphvty4f9wmdn86xnjg9kgetqjx8qlwj5d2882t4fyyzy58s3vg5k4
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4ZEVtVzM0dFhJYWd5UXZO
             ajIzSFp1VENuSjlaYSs4ZUdBSS90aEoyM25JCnhrd0lyUVN0dEV5a2tQUjZwSlFx
@@ -80,8 +81,8 @@ sops:
             NU1vREt6SXBWYU1xdW1JSm1uUGZQRVEKtaDeDNo817rXXoMkBHo0MZWtm4LayqwC
             NN8vbhGcgT+M+ehnmZ1HdPk8VWRvlQ+SMpG+a6DjK8BjYtAWcO16RQ==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age16crkeglm3j3f6rveylytuerptjf9mwtv3hl89ywkmnnvdkntfchsuvrsk5
+          recipient: age1erkn7dd022e90ktyj66aux9j9xvl0uzd6ru5cmrjsvcm5rtr5pfs7q6k9h
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6eUFYSC82YVM1WVEwc2Fz
             aEl3TG5oOFU5MUFhQ0JhbC9yRVYxOFo0bUVJCnpwQzMyZmN4ZTlNVW5pZTY5bkdY
@@ -89,8 +90,8 @@ sops:
             ZW1hTUFtVE15QzVIVU93ZExlUWZjYzAKUZj+/NtMHCPjFFqbJ/8b2ASljV6GEk6p
             FbqV9LezRZrfl9GXBVUpB4Oeb9v2yp151aSda07/AG5YO0/jRAV/Bg==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age1tkywsvddjj6r6ukuqgz9aql92jfx85rz57dhmkkndysh6yx6p5rs0zj0qr
+          recipient: age16crkeglm3j3f6rveylytuerptjf9mwtv3hl89ywkmnnvdkntfchsuvrsk5
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxdjFYN01HcXZMNVBJckVm
             eklKZHAxeWgvVlcwWk9yWUJpcFFBUnpUV0FZCi85dGE2L3d3OS9CdW5sL0pZTTM2
@@ -98,8 +99,8 @@ sops:
             bk04K1luNnJVTjZQY25KRXNSVG0venMK7uM4tqqmq/o4QgMlE/x/FXkQsPRkofNO
             I6C93RYgp1OcGPH14Kmp5lXtK4/pdToaRnVXPGenDQJsFhwWCEI+Fg==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: age17p69ktg7yfzgdsk00f32mupe4n4fevdpw2wsv7ft30yvpeseau6s7t0zdg
+          recipient: age1tkywsvddjj6r6ukuqgz9aql92jfx85rz57dhmkkndysh6yx6p5rs0zj0qr
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsOTFXaHE0SDRCTnE4di9N
             S2JIbHF2a1pzNzU4UFIvQmpZMVpOUjJqd0RJClVxcTd3d05aRDN1RGVmWVpQS2lI
@@ -107,7 +108,8 @@ sops:
             dUpXZis2N2VyN0ZFbjlPRXdwRFQ1aHMKm1Mk6MPKxFmwdATCYUANRSY5rHKgmQer
             LBlqqWKt1JiIUAYtazQeQ6KYxmjVlQPY7AZw2t+EhBEPrqbTL3vOiw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-05-01T13:20:34Z"
+          recipient: age17p69ktg7yfzgdsk00f32mupe4n4fevdpw2wsv7ft30yvpeseau6s7t0zdg
-    mac: ENC[AES256_GCM,data:OueL0eHYmFKWfSyCZxburRJ2FS1xkowx7ha/Zv7r++26D85GSHDeIL9HdfByI5a1OhH90rH3WLxZrJgT3FiwBw27HhhHtS7Fs6MBFvTuPmSA7ZtMeGMWBRVjwbGAWN17BZAhJzMlZHq2nPX0xXIKT0HuTLVRPLuVCSlvDzMXsTE=,iv:+JN4Vzs8o8PJAam/uKBbUXt3ArxC88D6xR7rMeeGglg=,tag:S+OtbxLhVKFnqBZtyKDGyA==,type:str]
+    lastmodified: "2026-06-07T11:56:26Z"
+    mac: ENC[AES256_GCM,data:kQv2go+ITBpkicwlcy5OIFdU7DrSZCqGFKqmdHJN0hGYzGrabgiomBI7r2bqQPrzlvXNL/GSp9yv2cBO3nlgLdRakXB2ubZ+xGDkarErxuT4B1wG3ps8DaZzdG+Ed9aiHhhM3Fo5tzjF8CAFUAbIy+K45691lP/aXns2slQWVg8=,iv:PZBL1RQ4243vwlbrhRtAG7wt5i1TomQZ4mFy7bjjKRU=,tag:62St2XZxDh0kGd2OupnFPA==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.12.2
+    version: 3.13.0

system/dev/docker.nix

@@ -20,7 +20,7 @@ in {
   };
 
   config = mkIf cfg.enable {
-    mySystem.users.phundrak = mkIf cfg.mySystem.users.phundrak.enable {
+    mySystem.users.phundrak = mkIf config.mySystem.users.phundrak.enable {
       extraGroups = ["docker"] ++ lists.optional cfg.podman.enable "podman";
     };
     environment.systemPackages = with pkgs;

system/users/phundrak.nix

@@ -23,7 +23,7 @@ in {
       description = "Lucien Cartier-Tilet";
       extraGroups =
         ["networkmanager" "wheel" "dialout" "plugdev" "games" "audio" "input"]
-        ++ extraGroups;
+        ++ cfg.extraGroups;
       shell = pkgs.zsh;
       openssh.authorizedKeys.keyFiles = lib.filesystem.listFilesRecursive ../../users/phundrak/keys;
     };

users/modules/desktop/caelestia.nix

@@ -68,6 +68,11 @@ in {
         hibernate = ["systemctl" "hibernate"];
         reboot = ["systemctl" "reboot"];
       };
+      utilities.toasts = {
+        capsLockChanged = false;
+        numLockChanged = false;
+        kbLayoutChanged = false;
+      };
     };
     cli = {
       enable = true;

users/modules/desktop/default.nix

@@ -8,7 +8,6 @@ with lib; let
 in {
   imports = [
     ./caelestia.nix
-    ./eww.nix
     ./firefox.nix
     ./hyprland.nix
     ./kdeconnect.nix
@@ -26,7 +25,6 @@ in {
 
   options.home.desktop.fullDesktop = mkEnableOption "Enable options for graphical environments";
   config.home.desktop = {
-    eww.enable = mkDefault cfg.fullDesktop;
     firefox.enable = mkDefault cfg.fullDesktop;
     hyprland.enable = mkDefault cfg.fullDesktop;
     kdeconnect.enable = mkDefault cfg.fullDesktop;

users/modules/desktop/eww-config/eww.yuck

@@ -1,12 +0,0 @@
-(defwindow example
-           :monitor 0
-           :geometry (geometry :x "0%"
-                               :y "20%"
-                               :width "90%"
-                               :height "30px"
-                               :anchor "top center")
-           :stacking "fg"
-           :reserve (struts :distance "40px" :side "top")
-           :windowtype "dock"
-           :wm-ignore false
-           "example content")

users/modules/desktop/eww.nix

@@ -1,14 +0,0 @@
-{
-  lib,
-  config,
-  ...
-}:
-with lib; let
-  cfg = config.home.desktop.eww;
-in {
-  options.home.desktop.eww.enable = mkEnableOption "Enable eww support";
-  config.programs.eww = mkIf cfg.enable {
-    inherit (cfg) enable;
-    configDir = ./eww-config;
-  };
-}

users/modules/desktop/hyprland.nix

@@ -70,6 +70,7 @@ in {
           {
             "marpa" = [
               "DP-1, 3440x1440@144, 1080x550, 1"
+              # "DP-1, 2560x1440@144, 1080x550, 1" # streaming
               "DP-2, 2560x1080@60, 0x0, 1, transform, 1"
             ];
             "gampo" = [];
@@ -87,8 +88,9 @@ in {
           new_status = "inherit";
         };
         workspace = [
-          "10, layoutopt:orientation:bottom"
           "1, layoutopt:orientation:bottom"
+          "9, layoutopt:orientation:bottom"
+          "10, layoutopt:orientation:bottom"
         ];
         decoration = {
           rounding = 20;
@@ -104,10 +106,7 @@ in {
             "workspaces, 1, 6, default"
           ];
         };
-        dwindle = {
+        dwindle.preserve_split = true;
-          pseudotile = true;
-          preserve_split = true;
-        };
         exec-once =
           [
             "pactl load-module module-switch-on-connect"

users/modules/desktop/obs.nix

@@ -6,6 +6,7 @@
 }:
 with lib; let
   cfg = config.home.desktop.obs;
+  obs-image-reaction = pkgs.callPackage ../../../packages/obs-image-reaction.nix {};
 in {
   options.home.desktop.obs.enable = mkEnableOption "Enables OBS Studio";
   config.programs.obs-studio = mkIf cfg.enable {
@@ -13,11 +14,14 @@ in {
     plugins = with pkgs.obs-studio-plugins; [
       input-overlay
       obs-backgroundremoval
+      obs-markdown
       obs-mute-filter
       obs-pipewire-audio-capture
+      obs-scale-to-sound
       obs-source-clone
       obs-source-record
       obs-tuna
+      obs-image-reaction
     ];
   };
 }

users/modules/dev/ai/default.nix

@@ -2,7 +2,6 @@
   config,
   lib,
   pkgs,
-  inputs,
   ...
 }:
 with lib; let
@@ -12,6 +11,7 @@ in {
   imports = [
     ./claude.nix
     ./ollama.nix
+    ./opencode.nix
   ];
 
   options.home.dev.ai = {
@@ -29,8 +29,9 @@ in {
           mcpServers = mkDefault cfg.mcpServers;
         };
         ollama.enable = mkDefault cfg.enable;
+        opencode.enable = mkDefault cfg.enable;
       };
-      packages = [pkgs.lmstudio pkgs.opencode];
+      packages = [pkgs.lmstudio];
     };
     programs.mcp = mkIf (cfg.mcpServers != {}) {
       enable = true;

users/modules/dev/ai/opencode.nix

@@ -0,0 +1,85 @@
+{
+  config,
+  lib,
+  inputs,
+  pkgs,
+  ...
+}:
+with lib; let
+  inherit (pkgs.stdenv.hostPlatform) system;
+  cfg = config.home.dev.ai.opencode;
+  defaultPackageCli = inputs.opencode.packages.${system}.opencode;
+  defaultPackageDesktop = inputs.opencode.packages.${system}.desktop;
+  corsList = domains: lists.remove "" (lists.forEach (strings.splitString "," domains) trim);
+in {
+  options.home.dev.ai.opencode = {
+    enable = mkEnableOption "Enables OpenCode";
+    package = mkOption {
+      type = types.package;
+      default = defaultPackageCli;
+      description = "The CLI package for OpenCode";
+    };
+    settings = mkOption {
+      type = types.json;
+      default = {};
+    };
+    tui = mkOption {
+      type = types.json;
+      default = {};
+    };
+    desktop = {
+      enable = mkEnableOption "Enables the desktop app";
+      package = mkOption {
+        type = types.package;
+        default = defaultPackageDesktop;
+        description = "The desktop package for OpenCode";
+      };
+    };
+    web = {
+      enable = mkEnableOption "Enables OpenCode web";
+      extraArgs = mkOption {
+        type = types.listOf types.str;
+        default = [];
+        example = [
+          "--hostname"
+          "0.0.0.0"
+        ];
+      };
+      cors = mkOption {
+        type = types.nullOr (types.either types.str types.path);
+        default = null;
+        example = "opencode.example.com,code.example.com";
+        description = ''
+          Either a string containing the domain allowed to connect to OpenCode’s web instance, or a file containing the target value. The latter is useful when using secret management if you don’t want to publicize the hostname of your OpenCode instance.
+
+          If you want to use multiple domains, you can separate them with a comma.
+        '';
+      };
+      mdns = {
+        enable = mkEnableOption "Enables mDNS with OpenCode";
+        hostname = mkOption {
+          type = types.nullOr types.str;
+          default = null;
+          example = "opencode.local";
+        };
+      };
+    };
+  };
+  config.programs.opencode = mkIf cfg.enable {
+    inherit (cfg) enable tui;
+    enableMcpIntegration = true;
+    extraPackages = with pkgs; [uv];
+    settings =
+      {
+        server = mkIf cfg.web.mdns.enable {
+          mdns = true;
+          mdnsDomain = mkIf (cfg.web.mdns.hostname != null) cfg.web.mdns.hostname;
+          cors = corsList cfg.web.cors;
+        };
+      }
+      // cfg.settings;
+    web = {
+      inherit (cfg.web) enable extraArgs;
+    };
+  };
+}

users/modules/media/default.nix

@@ -11,6 +11,8 @@ in {
     ./mpd.nix
     ./mpd-mpris.nix
     ./mpv.nix
+    ./ncmpcpp.nix
+    ./streamlink.nix
   ];
 
   options.home.media.fullDesktop = mkEnableOption "Enables everything";
@@ -18,5 +20,7 @@ in {
     mopidy.enable = mkDefault cfg.fullDesktop;
     mpd.enable = mkDefault (cfg.fullDesktop or cfg.mpd-mpris.enable);
     mpv.enable = mkDefault cfg.fullDesktop;
+    ncmpcpp.enable = mkDefault config.home.media.mpd.enable;
+    streamlink.enable = mkDefault config.home.media.mpv.enable;
   };
 }

users/modules/media/mpd.nix

@@ -19,6 +19,11 @@ in {
       bind_to_address "localhost"
       auto_update "yes"
 
+      audio_output {
+        type "pipewire"
+        name "PipeWire"
+      }
+
       audio_output {
         type "fifo"
         name "my_fifo"

users/modules/media/ncmpcpp.nix

@@ -0,0 +1,87 @@
+{
+  lib,
+  config,
+  ...
+}:
+with lib; let
+  cfg = config.home.media.ncmpcpp;
+in {
+  options.home.media.ncmpcpp.enable = mkEnableOption "Enable ncmpcpp";
+  config.programs.ncmpcpp = let
+    musicDir = config.services.mpd.musicDirectory;
+  in
+    mkIf cfg.enable {
+      inherit (cfg) enable;
+      mpdMusicDir = musicDir;
+      settings = {
+        # directories
+        ncmpcpp_directory = "${config.home.homeDirectory}/.config/ncmpcpp";
+        lyrics_directory = "${musicDir}/.lyrics";
+
+        # MPD
+        mpd_host = "localhost";
+        mpd_port = 6600;
+        mpd_connection_timeout = 5;
+        mpd_crossfade_time = 0;
+
+        # music visualizer
+        visualizer_output_name = "my_fifo";
+        visualizer_in_stereo = "yes";
+        # visualizer_type = "spectrum";
+        visualizer_look = "+|";
+        visualizer_color = "blue, cyan, green, yellow, magenta, red";
+
+        system_encoding = "UTF-8";
+
+        # song format
+        song_list_format = "(6)[]{} (23)[red]{a} (26)[yellow]{t|f} (40)[green]{b} (4)[blue]{l}";
+        now_playing_prefix = "$b";
+        now_playing_suffix = "$8$/b";
+
+        # columns settings
+        song_columns_list_format = "(6)[]{} (23)[red]{a} (26)[yellow]{t|f} (40)[green]{b} (4)[blue]{l}";
+
+        playlist_shorten_total_times = "yes";
+        playlist_display_mode = "columns";
+        browser_display_mode = "columns";
+        search_engine_display_mode = "columns";
+        playlist_editor_display_mode = "columns";
+        autocenter_mode = "yes";
+        centered_cursor = "yes";
+
+        progressbar_look = "─> ";
+        header_visibility = "no";
+        statusbar_visibility = "no";
+        titles_visibility = "no";
+        allow_for_physical_item_deletion = "yes";
+
+        lastfm_preferred_language = "en";
+        space_add_mode = "add_remove";
+
+        locked_screen_width_part = "50";
+        ask_for_locked_screen_width_part = "yes";
+        jump_to_now_playing_song_at_start = "yes";
+        ask_before_clearing_playlists = "yes";
+        clock_display_seconds = "no";
+        display_volume_level = "yes";
+        display_bitrate = "no";
+        display_remaining_time = "yes";
+        regular_expressions = "extended";
+        ignore_leading_the = "yes";
+        ignore_diacritics = "yes";
+        mouse_support = "no";
+        tags_separator = ";";
+        enable_window_title = "yes";
+        search_engine_default_search_mode = 1;
+        external_editor = "emacsclient -c";
+        use_console_editor = "yes";
+
+        # colours
+        colors_enabled = "yes";
+        volume_color = "default";
+        progressbar_color = "black";
+        progressbar_elapsed_color = "white";
+        statusbar_color = "white";
+      };
+    };
+}

users/modules/media/streamlink.nix

@@ -0,0 +1,17 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+with lib; let
+  cfg = config.home.media.streamlink;
+in {
+  options.home.media.streamlink.enable = mkEnableOption "Enable Streamlink";
+  config.programs.streamlink = mkIf cfg.enable {
+    enable = true;
+    settings = {
+      player = "${pkgs.mpv}/bin/mpv";
+    };
+  };
+}

users/phundrak/ai.nix

@@ -0,0 +1,54 @@
+{config, ...}: {
+  home.dev.ai = {
+    enable = true;
+    opencode = {
+      tui = {
+        mouse = true;
+        theme = "nord";
+        attention = {
+          enabled = true;
+          notifications = true;
+        };
+        keybinds = {
+          leader = "ctrl+x";
+          "command_list" = "<leader><leader>";
+        };
+      };
+      settings = {
+        autoupdate = false;
+        provider = {
+          ollama = {
+            npm = "@ai-sdk/openai-compatible";
+            name = "Ollama (marpa)";
+            options.baseURL = "http://marpa:11434/v1";
+          };
+          models = {
+            "qwen3.5:9b".name = "Qwen 3.5 Medium";
+            "gemma4:e4b".name = "Gemma E4B";
+            "qwen2.5-coder:1.5b-base".name = "Qwen 2.5 Coder Light";
+          };
+        };
+        permission = {
+          "*" = "ask";
+          glob = "allow";
+          grep = "allow";
+          read = {
+            "*" = "allow";
+            "*.env" = "deny";
+            "*.env.*" = "deny";
+            "*.env.example" = "allow";
+          };
+        };
+        formatter.nixfmt = {
+          command = ["nix" "fmt" "$FILE"];
+          extensions = [".nix"];
+        };
+      };
+      web = {
+        enable = true;
+        cors = config.sops.secrets."opencode/cors".path;
+        mdns.enable = true;
+      };
+    };
+  };
+}

users/phundrak/firefox.nix

@@ -1,4 +1,4 @@
-{
+{pkgs, ...}: {
   config.home.desktop.firefox = {
     enable = true;
     useZen = true;
@@ -13,6 +13,16 @@
         smothscroll = "true";
       };
       extraConfig = ''
+        command openTwitchInMpv js -d@\
+          const url = new URL(document.location.href);\
+          const cleanUrl = url.hostname + url.pathname;\
+          const token = document.cookie.split("; ")\
+                                .find(item => item.startsWith("auth-token="))?.split("=")[1];\
+          const auth = "--twitch-api-header=Authorization=OAuth " + token;\
+          const cmd = `${pkgs.streamlink}/bin/streamlink "''${auth}" "''${cleanUrl}" best`;\
+          tri.native.run(cmd)\
+        @
+
         unbind h
         unbind j
         unbind k
@@ -69,6 +79,7 @@
 
         bind < urlincrement -1
         bind > urlincrement 1
+        bind ypt openTwitchInMpv
         bind ypv js tri.native.run(`mpv --ytdl-format="[height >=? 480]" --ontop --fs "''${document.location.href}"`)
         bind ypm hint -JF e => tri.native.run(`mpv --ytdl-format="[height >=? 480]" --ontop --fs "''${e.href}"`)
       '';

users/phundrak/home.nix

@@ -5,6 +5,7 @@
   ...
 }: {
   imports = [
+    ./ai.nix
     ./light-home.nix
     ./packages.nix
     ./email.nix
@@ -56,6 +57,7 @@
       emailPassword = {};
       "mopidy/bandcamp" = {};
       "mopidy/spotify" = {};
+      "opencode/cors" = {};
     };
 
     home = {
@@ -77,14 +79,15 @@
             general = {
               # first eight chars to select areas, last three chars
               # for left, right, middle click
+              # First eigh chars to select areas: auiectsr
+              # last three chars for left, right, and middle click: tsr
               home_row_keys = "auiectsrtsr";
-              modes = "tile,bisect";
+              modes = "tile,bisect,click";
             };
           };
         };
       };
       dev = {
-        ai.claude.enable = true;
         editors.emacs.package = emacsPackage;
         vcs.jj.signing.enable = true;
       };

users/phundrak/packages.nix

@@ -7,7 +7,6 @@
 with lib; let
   inherit (pkgs.stdenv.hostPlatform) system;
   handy = pkgs.callPackage ../../packages/handy.nix {};
-  inkdrop = pkgs.callPackage ../../packages/inkdrop.nix {};
   pumo-system-info = inputs.pumo-system-info.packages.${system}.default;
 in {
   programs.bun.enable = true;
@@ -40,6 +39,7 @@ in {
 
     # Misc
     # gplates
+    kicad-small
     qgis
     handy
     libnotify
@@ -49,6 +49,7 @@ in {
     scrcpy
     syncthing
     watchmate
+    chatterino7
 
     # Games
     atlauncher
@@ -69,12 +70,12 @@ in {
     # Dev
     dbeaver-bin
     devenv
-    inkdrop
     nodejs
     sqlite
     tectonic # better LaTeX engine
     wakatime-cli
     zeal
+    pandoc
 
     ## LSP servers
     bash-language-server

users/phundrak/wlr-which-key/default.nix

@@ -242,10 +242,18 @@
           ];
         }
       ]
-      ++ lib.lists.optional config.home.desktop.wl-kbptr.enable {
+      ++ lib.lists.optionals config.home.desktop.wl-kbptr.enable [
-        key = "m";
+        {
-        desc = "Mouse Warp";
+          key = "m";
-        cmd = "wl-kbptr";
+          desc = "Mouse Warp";
-      };
+          cmd = "wl-kbptr";
+        }
+        {
+          key = "M";
+          desc = "Mouse click";
+          # cmd = "wl-kbptr -o modes=floating,click";
+          cmd = "wl-kbptr -o modes=floating,click -o mode_floating.source=detect";
+        }
+      ];
   };
 }