feat(opencode): add opencode configuration

flake.lock

@@ -35,11 +35,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1782533477,
+        "lastModified": 1780375472,
-        "narHash": "sha256-2enYwf3n9GUkne9v4J3Ud6LpoG4Uarl3BaSQgRAAH7o=",
+        "narHash": "sha256-Q8RAJoYlakA6B2I5DVcuxzNbhCNU1nnIjqQZYP1KGrM=",
         "owner": "caelestia-dots",
         "repo": "cli",
-        "rev": "e9e115568f818ee1df2d7a9e21925141b053ec6e",
+        "rev": "d1c8c8fc09738d1b40576e97c274b4a11a2e0ac7",
         "type": "github"
       },
       "original": {
@@ -58,11 +58,11 @@
         "quickshell": "quickshell"
       },
       "locked": {
-        "lastModified": 1782636677,
+        "lastModified": 1780839367,
-        "narHash": "sha256-u01nEjf7afRMCtRjp0LV45DmhC4/n/uPY3S/HAh/V2w=",
+        "narHash": "sha256-KAENT4Od2wwWtJzWFtR/qKzqoR673r91KLcyv4pPcNQ=",
         "owner": "caelestia-dots",
         "repo": "shell",
-        "rev": "145a6795ee41e023e863681cec6c5db3b334ffc0",
+        "rev": "3bc2bd2a5c5c886f75363211d838b749ab95137e",
         "type": "github"
       },
       "original": {
@@ -79,11 +79,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1782492933,
+        "lastModified": 1779822991,
-        "narHash": "sha256-v/BH1zfHaCFqP+4Ev9PWiGy15YrpmI9wzjxRtiFhgvA=",
+        "narHash": "sha256-r6e4eHEyQJEDhT6gkW3B9+OgB0pZebw2+du4bvN3vww=",
         "owner": "9001",
         "repo": "copyparty",
-        "rev": "4c8203016f089b38281ed922a78255146f099e7b",
+        "rev": "6e75faa62349a59f4df328a4939ba8626d89ee1a",
         "type": "github"
       },
       "original": {
@@ -207,11 +207,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1782702263,
+        "lastModified": 1780679734,
-        "narHash": "sha256-8/MG4Su7PhnynrmsVO61IeAfrK7GuUEu+E+gwbhy1QQ=",
+        "narHash": "sha256-KmRNvpNOb7QEORa06bVgjW9kITcx0VhsI7w0vhmZyD8=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "789a35fbdeb3c46b260096daa0b321c11be527ea",
+        "rev": "b2b7db486e06e098711dc291bb25db82850e1d16",
         "type": "github"
       },
       "original": {
@@ -230,11 +230,11 @@
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1781867614,
+        "lastModified": 1780841807,
-        "narHash": "sha256-GHy8hEZtToo7FLxEZm0x/pn/fjg1w9sx7ZP9hRd1fcM=",
+        "narHash": "sha256-7N3iYAUmNjt0wgfpb1ZMVP5xRcXSrihQqOxZPM5N0Tc=",
         "ref": "develop",
-        "rev": "d2c48605aac4ca9580d8a34aad4c65371c5a7cc1",
+        "rev": "0e6b559d002cc7a9bcb758384623de0e8e034bbe",
-        "revCount": 52,
+        "revCount": 45,
         "type": "git",
         "url": "https://labs.phundrak.com/phundrak/jj-cz"
       },
@@ -247,17 +247,17 @@
     "m3shapes": {
       "flake": false,
       "locked": {
-        "lastModified": 1781017666,
+        "lastModified": 1777812556,
-        "narHash": "sha256-kfHyzZaPHgqZML48OA+5JwBOsLdQJ2ci/aGPShvUB4Y=",
+        "narHash": "sha256-E5nqOucRQBWKuT31AMekmfgMywRdHgSbU86R7t4BKKA=",
         "owner": "soramanew",
         "repo": "m3shapes",
-        "rev": "bdc327b29f95394a732baf3c9b19658ba23755b6",
+        "rev": "356825d31f16052a782735cce264331cba0cb71b",
         "type": "github"
       },
       "original": {
         "owner": "soramanew",
         "repo": "m3shapes",
-        "rev": "bdc327b29f95394a732baf3c9b19658ba23755b6",
+        "rev": "356825d31f16052a782735cce264331cba0cb71b",
         "type": "github"
       }
     },
@@ -268,11 +268,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1782636943,
+        "lastModified": 1780816331,
-        "narHash": "sha256-ripjZa7BBLwL1uS5VJF3s/VpZpWt5ZIQEvkJ/FJNpQw=",
+        "narHash": "sha256-0BYqs8yKWkOz2Q7+SP18N5E5gmDKSo6LSxIVIa0wWes=",
         "owner": "nix-community",
         "repo": "nix-index-database",
-        "rev": "058b1f9381fa79fcda49982370a750ff92dbba43",
+        "rev": "1a2ea89c917781e88508d9fd2b507f2d2a0e173c",
         "type": "github"
       },
       "original": {
@@ -283,11 +283,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1782467914,
+        "lastModified": 1780243769,
-        "narHash": "sha256-pGvFkM8N0xEkIIXDe5YYfbEAvHrk4IxBrjB/x8OomhE=",
+        "narHash": "sha256-x5UQuRsH3MqI0U9afaXSNqzTPSeZlRLvFAav2Ux1pNw=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "e73de5be04e0eff4190a1432b946d469c794e7b4",
+        "rev": "331800de5053fcebacf6813adb5db9c9dca22a0c",
         "type": "github"
       },
       "original": {
@@ -299,11 +299,11 @@
     },
     "nixpkgsStable": {
       "locked": {
-        "lastModified": 1782498288,
+        "lastModified": 1780511130,
-        "narHash": "sha256-8/X3yyTXiE82b38n32ItbOqfWOVBl+gKa8fILyZfR4Q=",
+        "narHash": "sha256-2v9lT4ya59Lh1FqPeLnz1MoX9y/wz2huqfe9RtQZITk=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "3cac626ec5e3703e835f227687e88aa9e2f25701",
+        "rev": "535f3e6942cb1cead3929c604320d3db54b542b9",
         "type": "github"
       },
       "original": {
@@ -342,11 +342,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1781847791,
+        "lastModified": 1780303737,
-        "narHash": "sha256-Mo2YtNEGlcySnbq0YuP3nUKMAQCMAfE+TcCffo5vzD8=",
+        "narHash": "sha256-7HgdJBG4BgAPDyHKKxWtxj7nziqsQo6zQCXtwy+L9fs=",
         "ref": "refs/heads/master",
-        "rev": "68c2c85c33845385f7ab8147b32f1450b1e468e0",
+        "rev": "b66495fcc5022681b56b61f928c7acbe910e722c",
-        "revCount": 824,
+        "revCount": 821,
         "type": "git",
         "url": "https://git.outfoxxed.me/outfoxxed/quickshell"
       },
@@ -466,11 +466,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1782165805,
+        "lastModified": 1780547341,
-        "narHash": "sha256-478kKQBvK6SYTOdN2h9jhKJv94nbXRbFMfuL1WshErg=",
+        "narHash": "sha256-Gq8KNx5A7hBB3uGJaj6eQfLDIz5YdLu92gqBcvHvoUo=",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "56b24064fdcaedca53553b1a6d607fd23b613a24",
+        "rev": "9ed65852b6257fbeae4355bc24ecfea307ca759a",
         "type": "github"
       },
       "original": {
@@ -487,11 +487,11 @@
         "systems": "systems_4"
       },
       "locked": {
-        "lastModified": 1782633406,
+        "lastModified": 1780422259,
-        "narHash": "sha256-JOSMk12GgnTLVlUSCuKkqyUF6cw82wl7t7e1WuFfg5s=",
+        "narHash": "sha256-dWGk4SEdI189kQW5cE4Uo1Mc+P+kQEdgMcyMgTtmQOA=",
         "owner": "Gerg-L",
         "repo": "spicetify-nix",
-        "rev": "5ff9a6ca9dcbad7cccea2c97d30237468b16feda",
+        "rev": "8414bbf2fcc7bc0a22c675e498e3c7365c1aec0a",
         "type": "github"
       },
       "original": {
@@ -507,11 +507,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1782700116,
+        "lastModified": 1780545143,
-        "narHash": "sha256-E63+nvH3jkAt/hBxhMa5aykstXdqRvBSeqNRDpQNv78=",
+        "narHash": "sha256-y9aFcK8A3pctkW9G9LdppzPDsuBa3VzToADnacjir/A=",
         "owner": "nix-community",
         "repo": "srvos",
-        "rev": "d45cf79058f2d42c0b0dd7912bedb5d14faa00ed",
+        "rev": "bc0ca7b0f7c8ca9dc55166438fec4dc2dd74f8a4",
         "type": "github"
       },
       "original": {
@@ -587,11 +587,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1782624757,
+        "lastModified": 1780637620,
-        "narHash": "sha256-pqFaCAV+g8H+p0kE4vYn9ZgcEFvt644zGy7SyCdf9c8=",
+        "narHash": "sha256-ngPdHinPyF0AMxRr32qt+TZCv0sagmooBW14u6DfjSU=",
         "owner": "youwen5",
         "repo": "zen-browser-flake",
-        "rev": "907465791e7064d86d37964dd95e23280dfb68da",
+        "rev": "8c62bc6a72ac5a5b8d1b41b2b88dfed9d9932c48",
         "type": "github"
       },
       "original": {

flake.nix

@@ -96,8 +96,7 @@
     flake-utils.lib.eachDefaultSystem (
       system: let
         inherit (self) outputs;
-
+        pkgs = nixpkgs.legacyPackages.${system};
-        pkgs = import nixpkgs {inherit system;};
       in {
         formatter = pkgs.alejandra;
         devShells.default = pkgs.mkShell {
@@ -105,14 +104,13 @@
             pkgs.nh
             pkgs.jujutsu
             pkgs.git
-            inputs.jj-cz.packages.${system}.default
           ];
         };
 
         packages = {
           homeConfigurations = let
             extraSpecialArgs = {inherit inputs outputs system;};
-            pkgs = import nixpkgs {inherit system;};
+            pkgs = nixpkgs.legacyPackages.x86_64-linux;
             defaultUserModules = [
               inputs.sops-nix.homeManagerModules.sops
               inputs.spicetify.homeManagerModules.default
@@ -188,7 +186,7 @@
                 srvos.nixosModules.server
                 srvos.nixosModules.hardware-hetzner-cloud
                 srvos.nixosModules.mixins-terminfo
-                ./hosts/naromk3
+                ./hosts/naromk3/configuration.nix
               ];
             };
             pinetab2 = pinetabConfig "x86_64-linux" ./hosts/pinetab2/gnome.nix;

hosts/naromk3/configuration.nix

@@ -24,11 +24,8 @@
       firewall = {
         openPorts = [
           22 # Gitea SSH
-          25 # SMTP
           80 # HTTP
           443 # HTTPS
-          465 # SMTPS
-          993 # IMAPS
         ];
       };
     };

packages/bun-baseline.nix

@@ -1,70 +0,0 @@
-# Baseline variant of Bun for x86_64-linux CPUs without AVX2 support.
-# The regular `bun` from nixpkgs requires AVX2 and crashes with SIGILL on older hardware.
-#
-# Version is typically kept in sync with nixpkgs's `bun` (passed via `callPackage`).
-{
-  lib,
-  stdenvNoCC,
-  fetchurl,
-  autoPatchelfHook,
-  unzip,
-  makeBinaryWrapper,
-  glibc,
-  stdenv,
-  version ? "1.3.13",
-}: let
-  # When updating `version`, compute the new hash with:
-  #   nix store prefetch-file  "https://github.com/oven-sh/bun/releases/download/bun-v${version}/bun-linux-x64-baseline.zip"
-  hash = {
-    "1.3.13" = "sha256-nYokKSpwaAkCBdqsCloiP19pc29Sh+N7+I07QDHtx1A=";
-  };
-in
-  stdenvNoCC.mkDerivation {
-    pname = "bun-baseline";
-    inherit version;
-
-    src = fetchurl {
-      url = "https://github.com/oven-sh/bun/releases/download/bun-v${version}/bun-linux-x64-baseline.zip";
-      hash = hash.${version};
-    };
-
-    nativeBuildInputs =
-      [unzip]
-      ++ lib.optionals stdenvNoCC.hostPlatform.isLinux [
-        autoPatchelfHook
-        makeBinaryWrapper
-      ];
-
-    buildInputs = lib.optionals stdenvNoCC.hostPlatform.isLinux [
-      glibc
-      (lib.getLib stdenv.cc.cc)
-    ];
-
-    dontConfigure = true;
-    dontBuild = true;
-
-    unpackPhase = ''
-      runHook preUnpack
-      mkdir -p source
-      cd source
-      ${lib.getExe unzip} -q $src
-      runHook postUnpack
-    '';
-
-    installPhase = ''
-      runHook preInstall
-      mkdir -p $out/bin
-      find . -type f -name "bun" -not -path "./__MACOSX/*" -exec cp {} $out/bin/bun \;
-      chmod +x $out/bin/bun
-      ln -s $out/bin/bun $out/bin/bunx
-      runHook postInstall
-    '';
-
-    meta = {
-      description = "Bun JavaScript runtime (baseline variant, works without AVX2)";
-      homepage = "https://bun.sh";
-      license = lib.licenses.mit;
-      platforms = ["x86_64-linux"];
-      mainProgram = "bun";
-    };
-  }

users/modules/desktop/caelestia.nix

@@ -44,7 +44,7 @@ in {
       };
       launcher = {
         enabled = true;
-        showOnHover = false;
+        showOnHover = true;
         useFuzzy = {
           apps = true;
           schemes = true;

users/modules/desktop/hyprland.nix

@@ -106,7 +106,10 @@ in {
             "workspaces, 1, 6, default"
           ];
         };
-        dwindle.preserve_split = true;
+        dwindle = {
+          pseudotile = true;
+          preserve_split = true;
+        };
         exec-once =
           [
             "pactl load-module module-switch-on-connect"

users/modules/dev/ai/default.nix

@@ -16,11 +16,6 @@ in {
 
   options.home.dev.ai = {
     enable = mkEnableOption "Enables AI features";
-    lmStudio = mkOption {
-      default = cfg.enable;
-      example = true;
-      description = "Enables LM Studio. Enabled by default when AI is enabled.";
-    };
     mcpServers = mkOption {
       inherit (jsonFormat) type;
       default = {};
@@ -36,7 +31,7 @@ in {
         ollama.enable = mkDefault cfg.enable;
         opencode.enable = mkDefault cfg.enable;
       };
-      packages = lists.optional cfg.lmStudio pkgs.lmstudio;
+      packages = [pkgs.lmstudio];
     };
     programs.mcp = mkIf (cfg.mcpServers != {}) {
       enable = true;

users/modules/dev/ai/opencode.nix

@@ -1,31 +1,34 @@
 {
   config,
   lib,
+  inputs,
   pkgs,
   ...
 }:
 with lib; let
+  inherit (pkgs.stdenv.hostPlatform) system;
   cfg = config.home.dev.ai.opencode;
-
+  defaultPackageCli = inputs.opencode.packages.${system}.opencode;
-  # On x86_64-linux CPUs without AVX2, use the baseline bun variant
+  defaultPackageDesktop = inputs.opencode.packages.${system}.desktop;
-  # when building opencode - the regular `bun` from nixpkgs requires
+  corsString = cors:
-  # AVX2 and crashes on older hardware, such as my Thinkpad x220’s
+    {
-  # Intel Core i5 2640M.
+      null = "";
-  needsBaselineBun =
+      string = v: trim v;
-    pkgs.stdenv.hostPlatform.isx86_64 && !pkgs.stdenv.hostPlatform.avx2Support;
+      path = v: trim (readFile v);
-  bunBaseline = pkgs.callPackage ../../../../packages/bun-baseline.nix {};
+    }
-
+    .${
-  defaultPackageCli =
+      if cors == null
-    if needsBaselineBun
+      then "null"
-    then pkgs.opencode.override {bun = bunBaseline;}
+      else typeOf cors
-    else pkgs.opencode;
+    };
-
-  defaultPackageDesktop =
-    if needsBaselineBun
-    then pkgs.opencode-desktop.override {bun = bunBaseline;}
-    else pkgs.opencode-desktop;
-
   corsList = domains: lists.remove "" (lists.forEach (strings.splitString "," domains) trim);
+  corsDomains = domains:
+    lists.flatten (
+      lists.forEach (lists.remove "" (lists.forEach (strings.splitString "," domains) trim)) (domain: [
+        "--cors"
+        domain
+      ])
+    );
 in {
   options.home.dev.ai.opencode = {
     enable = mkEnableOption "Enables OpenCode";
@@ -81,10 +84,12 @@ in {
     };
   };
   config.programs.opencode = mkIf cfg.enable {
-    inherit (cfg) enable tui package;
+    inherit (cfg) enable tui;
     enableMcpIntegration = true;
-    extraPackages = with pkgs; [uv] ++ lists.optional cfg.desktop.enable cfg.desktop.package;
+    extraPackages = with pkgs; [uv];
-    settings =
+    settings = let
+      cors = corsString cfg.web.cors;
+    in
       {
         server = mkIf cfg.web.mdns.enable {
           mdns = true;

users/modules/media/default.nix

@@ -12,7 +12,6 @@ in {
     ./mpd-mpris.nix
     ./mpv.nix
     ./ncmpcpp.nix
-    ./streamlink.nix
   ];
 
   options.home.media.fullDesktop = mkEnableOption "Enables everything";
@@ -21,6 +20,5 @@ in {
     mpd.enable = mkDefault (cfg.fullDesktop or cfg.mpd-mpris.enable);
     mpv.enable = mkDefault cfg.fullDesktop;
     ncmpcpp.enable = mkDefault config.home.media.mpd.enable;
-    streamlink.enable = mkDefault config.home.media.mpv.enable;
   };
 }

users/modules/media/streamlink.nix

@@ -1,17 +0,0 @@
-{
-  lib,
-  config,
-  pkgs,
-  ...
-}:
-with lib; let
-  cfg = config.home.media.streamlink;
-in {
-  options.home.media.streamlink.enable = mkEnableOption "Enable Streamlink";
-  config.programs.streamlink = mkIf cfg.enable {
-    enable = true;
-    settings = {
-      player = "${pkgs.mpv}/bin/mpv";
-    };
-  };
-}

users/phundrak/ai.nix

@@ -30,8 +30,6 @@
         };
         permission = {
           "*" = "ask";
-          glob = "allow";
-          grep = "allow";
           read = {
             "*" = "allow";
             "*.env" = "deny";

users/phundrak/firefox.nix

@@ -1,4 +1,4 @@
-{pkgs, ...}: {
+{
   config.home.desktop.firefox = {
     enable = true;
     useZen = true;
@@ -13,16 +13,6 @@
         smothscroll = "true";
       };
       extraConfig = ''
-        command openTwitchInMpv js -d@\
-          const url = new URL(document.location.href);\
-          const cleanUrl = url.hostname + url.pathname;\
-          const token = document.cookie.split("; ")\
-                                .find(item => item.startsWith("auth-token="))?.split("=")[1];\
-          const auth = "--twitch-api-header=Authorization=OAuth " + token;\
-          const cmd = `${pkgs.streamlink}/bin/streamlink "''${auth}" "''${cleanUrl}" best`;\
-          tri.native.run(cmd)\
-        @
-
         unbind h
         unbind j
         unbind k
@@ -79,7 +69,6 @@
 
         bind < urlincrement -1
         bind > urlincrement 1
-        bind ypt openTwitchInMpv
         bind ypv js tri.native.run(`mpv --ytdl-format="[height >=? 480]" --ontop --fs "''${document.location.href}"`)
         bind ypm hint -JF e => tri.native.run(`mpv --ytdl-format="[height >=? 480]" --ontop --fs "''${e.href}"`)
       '';

users/phundrak/home.nix

@@ -106,7 +106,6 @@
           );
         };
       };
-      media.mopidy.enable = false;
     };
 
     manual = {

users/phundrak/host/gampo.nix

@@ -2,7 +2,6 @@
   imports = [../home.nix];
   home = {
     cli.nh.flake = "${config.home.homeDirectory}/.dotfiles";
-    dev.ai.lmStudio = false;
     desktop.hyprland.host = "gampo";
     phundrak.sshKey.content = builtins.readFile ../keys/id_gampo.pub;
   };

users/phundrak/packages.nix

@@ -49,7 +49,6 @@ in {
     scrcpy
     syncthing
     watchmate
-    chatterino7
 
     # Games
     atlauncher
@@ -75,7 +74,6 @@ in {
     tectonic # better LaTeX engine
     wakatime-cli
     zeal
-    pandoc
 
     ## LSP servers
     bash-language-server