chore: update flake.lock

script: https://gist.github.com/lxl66566/697db0cccd04b7247dc9a0cfb96d328c

flake.nix

@@ -20,6 +20,7 @@
     nixos-wsl = {
       url = "github:nix-community/NixOS-WSL";
       inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-compat.follows = "flake-compat";
     };
 
     # Flake organization tools
@@ -40,11 +41,11 @@
 
     # Useful modules
     # keep-sorted start block=yes
-    catppuccin = {
-      url = "github:catppuccin/nix";
+    impermanence = {
+      url = "github:nix-community/impermanence";
       inputs.nixpkgs.follows = "nixpkgs";
+      inputs.home-manager.follows = "home-manager";
     };
-    impermanence.url = "github:nix-community/impermanence";
     # TODO: sops-nix: remove pr patch once merged
     # https://github.com/Mic92/sops-nix/pull/779
     sops-nix = {
@@ -54,6 +55,8 @@
     stylix = {
       url = "github:danth/stylix";
       inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-parts.follows = "flake-parts";
+      inputs.systems.follows = "systems";
     };
     system76-scheduler-niri = {
       url = "github:Kirottu/system76-scheduler-niri";
@@ -66,6 +69,9 @@
     angrr = {
       url = "github:linyinfeng/angrr";
       inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-compat.follows = "flake-compat";
+      inputs.flake-parts.follows = "flake-parts";
+      inputs.treefmt-nix.follows = "treefmt";
     };
     darkly = {
       url = "github:Bali10050/Darkly";
@@ -78,19 +84,35 @@
     go-musicfox = {
       url = "github:imxyy1soope1/go-musicfox";
       inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-parts.follows = "flake-parts";
+      inputs.devenv.follows = "devenv";
+      inputs.nix2container.inputs.flake-utils.follows = "flake-utils";
     };
     llm-agents = {
       url = "github:numtide/llm-agents.nix";
+      # Not followed intentionally (binary cache)
+      # inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-parts.follows = "flake-parts";
+      inputs.systems.follows = "systems";
+      inputs.treefmt-nix.follows = "treefmt";
+    };
+    niri = {
+      url = "github:sodiboo/niri-flake";
       inputs.nixpkgs.follows = "nixpkgs";
+      inputs.nixpkgs-stable.follows = "nixpkgs-stable";
     };
-    niri.url = "github:sodiboo/niri-flake";
     noctalia = {
       url = "github:noctalia-dev/noctalia-shell/v4.7.5";
       inputs.nixpkgs.follows = "nixpkgs";
-      inputs.noctalia-qs.inputs.treefmt-nix.follows = "";
+      inputs.noctalia-qs.inputs.nixpkgs.follows = "nixpkgs";
+      inputs.noctalia-qs.inputs.systems.follows = "systems";
+      inputs.noctalia-qs.inputs.treefmt-nix.follows = "treefmt";
+    };
+    zen = {
+      url = "github:0xc000022070/zen-browser-flake";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.home-manager.follows = "home-manager";
     };
-    zen.inputs.nixpkgs.follows = "nixpkgs";
-    zen.url = "github:0xc000022070/zen-browser-flake";
     # keep-sorted end
 
     # Misc
@@ -103,6 +125,20 @@
       flake = false;
     };
     my-templates.url = "git+https://git.imxyy.top/imxyy1soope1/flake-templates";
+
+    # Flattened indirect dependencies
+    flake-compat.url = "github:edolstra/flake-compat";
+    flake-utils = {
+      url = "github:numtide/flake-utils";
+      inputs.systems.follows = "systems";
+    };
+    systems.url = "github:nix-systems/default";
+    devenv = {
+      url = "github:cachix/devenv";
+      inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-parts.follows = "flake-parts";
+      inputs.flake-compat.follows = "flake-compat";
+    };
   };
 
   outputs =

flake/hosts.nix

@@ -126,7 +126,6 @@ in
               # Upstream modules
               # keep-sorted start
               inputs.angrr.nixosModules.angrr
-              inputs.catppuccin.nixosModules.catppuccin
               inputs.home-manager.nixosModules.default
               inputs.impermanence.nixosModules.impermanence
               inputs.niri.nixosModules.niri

flake/pkgs.nix

@@ -14,7 +14,6 @@
         inputs.fenix.overlays.default
         inputs.angrr.overlays.default
         (final: prev: {
-          darkly-qt5 = inputs.darkly.packages.${final.stdenv.hostPlatform.system}.darkly-qt5;
           darkly-qt6 = inputs.darkly.packages.${final.stdenv.hostPlatform.system}.darkly-qt6;
 
           noctalia-shell = inputs.noctalia.packages.${final.stdenv.hostPlatform.system}.default;

hosts/imxyy-nix/home.nix

@@ -78,12 +78,6 @@
   };
 
   my = {
-    autologin = {
-      enable = true;
-      user = username;
-      ttys = [ 6 ];
-    };
-
     gpg.enable = true;
     cli.all.enable = true;
     coding.all.enable = true;

modules/cli/misc.nix

@@ -67,7 +67,7 @@ in
         aria2
         bat
         comma
-        fastfetch
+        fastfetch.minimal
         fd
         fzf
         jq

modules/cli/shell/fish.nix

@@ -32,7 +32,7 @@ in
         shellAliases = {
           la = "lsd -lah";
           ls = "lsd";
-          svim = "doasedit";
+          svim = "sudoedit";
           nf = "fastfetch";
         };
         interactiveShellInit = lib.mkBefore ''

modules/cli/shell/zsh.nix

@@ -51,7 +51,7 @@ in
         };
         shellAliases = {
           ls = "lsd";
-          svim = "doasedit";
+          svim = "sudoedit";
           nf = "fastfetch";
         };
       };

modules/coding/agents.nix

@@ -15,6 +15,7 @@ in
   config = lib.mkIf cfg.enable {
     my.hm = {
       home.packages = with pkgs.llm-agents; [
+        codex
         claude-code
         opencode
       ];
@@ -25,6 +26,8 @@ in
 
         ".config/opencode"
         ".local/share/opencode"
+
+        ".codex"
       ];
       homeFiles = [
         ".claude.json"

modules/coding/editor/neovim/default.nix

@@ -14,6 +14,8 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    # workaround
+    environment.sessionVariables.EDITOR = "nvim";
     my.hm = {
       xdg.configFile."nvim".source = impure.mkImpureLink ./nvim;
       programs.neovim = {
@@ -34,10 +36,11 @@ in
 
           ripgrep # telescope
 
+          # language servers
           vscode-json-languageserver
           vscode-langservers-extracted
-          taplo
           typos-lsp
+
           # render-markdown.nvim
           python3Packages.pylatexenc
         ];

modules/coding/editor/neovim/nvim/lazy-lock.json

@@ -1,43 +1,43 @@
 {
   "Comment.nvim": { "branch": "master", "commit": "e30b7f2008e52442154b66f7c519bfd2f1e32acb" },
-  "LuaSnip": { "branch": "master", "commit": "a62e1083a3cfe8b6b206e7d3d33a51091df25357" },
-  "blink.cmp": { "branch": "main", "commit": "456d38d1cd3743926f329204c2340f3e7840aad6" },
+  "LuaSnip": { "branch": "master", "commit": "0abc8f390b278c3b4aabc4c004ac8a088b65cf24" },
+  "blink.cmp": { "branch": "main", "commit": "3db7326f54b73df4789e0fd6274bedda33975fea" },
+  "blink.lib": { "branch": "main", "commit": "b127d48bf8e9ac9cf41f6e0fbead317503f76558" },
   "bufferline.nvim": { "branch": "main", "commit": "655133c3b4c3e5e05ec549b9f8cc2894ac6f51b3" },
   "friendly-snippets": { "branch": "main", "commit": "6cd7280adead7f586db6fccbd15d2cac7e2188b9" },
-  "gitsigns.nvim": { "branch": "main", "commit": "8d82c240f190fc33723d48c308ccc1ed8baad69d" },
+  "gitsigns.nvim": { "branch": "main", "commit": "25050e4ed39e628282831d4cbecb1850454ce915" },
   "glance.nvim": { "branch": "master", "commit": "bf86d8b79dce808e65fdb6e9269d0b4ed6d2eefc" },
   "guess-indent.nvim": { "branch": "main", "commit": "84a4987ff36798c2fc1169cbaff67960aed9776f" },
   "indent-blankline.nvim": { "branch": "master", "commit": "d28a3f70721c79e3c5f6693057ae929f3d9c0a03" },
-  "inlay-hints.nvim": { "branch": "master", "commit": "11be32be3761c6263df2311afb6baa0de0863967" },
+  "inlay-hints.nvim": { "branch": "master", "commit": "297a65ab9543eb0850c1a55df4bb89e22cfec504" },
   "lazy.nvim": { "branch": "main", "commit": "306a05526ada86a7b30af95c5cc81ffba93fef97" },
   "lazydev.nvim": { "branch": "main", "commit": "ff2cbcba459b637ec3fd165a2be59b7bbaeedf0d" },
-  "leap.nvim": { "branch": "main", "commit": "b960d5038c5c505c52e56a54490f9bbb1f0e6ef6" },
+  "leap.nvim": { "branch": "main", "commit": "d3641f9aa86e7460b14d9f4479e7454f88cc6b2d" },
   "lspkind.nvim": { "branch": "master", "commit": "c7274c48137396526b59d86232eabcdc7fed8a32" },
-  "lualine.nvim": { "branch": "master", "commit": "f5d2a8570f8b736ddb9bb4be504355bcd6e15ec8" },
-  "mini.nvim": { "branch": "main", "commit": "69b7433355664cf76898eb86a12a019f39bd86d1" },
-  "neo-tree.nvim": { "branch": "main", "commit": "84c75e7a7e443586f60508d12fc50f90d9aee14e" },
+  "lualine.nvim": { "branch": "master", "commit": "221ce6b2d999187044529f49da6554a92f740a96" },
+  "mini.nvim": { "branch": "main", "commit": "b2ac6522f7a54b475d9fad711b938eefc6d3d0a6" },
+  "neo-tree.nvim": { "branch": "main", "commit": "83e7a2982fd12b9c3d35bc39dd5877cd91a02a61" },
   "noice.nvim": { "branch": "main", "commit": "7bfd942445fb63089b59f97ca487d605e715f155" },
   "nui.nvim": { "branch": "main", "commit": "de740991c12411b663994b2860f1a4fd0937c130" },
-  "nvim-autopairs": { "branch": "master", "commit": "59bce2eef357189c3305e25bc6dd2d138c1683f5" },
+  "nvim-autopairs": { "branch": "master", "commit": "7b9923abad60b903ece7c52940e1321d39eccc79" },
   "nvim-colorizer.lua": { "branch": "master", "commit": "a065833f35a3a7cc3ef137ac88b5381da2ba302e" },
-  "nvim-lspconfig": { "branch": "master", "commit": "cb5bc0b2b35a6d513e3298d285db81453e791f4f" },
+  "nvim-lspconfig": { "branch": "master", "commit": "229b79051b380377664edc4cbd534930154921a1" },
   "nvim-notify": { "branch": "master", "commit": "8701bece920b38ea289b457f902e2ad184131a5d" },
-  "nvim-osc52": { "branch": "main", "commit": "04cfaba1865ae5c53b6f887c3ca7304973824fb2" },
   "nvim-tmux-navigation": { "branch": "main", "commit": "4898c98702954439233fdaf764c39636681e2861" },
   "nvim-treesitter": { "branch": "main", "commit": "4916d6592ede8c07973490d9322f187e07dfefac" },
   "nvim-treesitter-textobjects": { "branch": "main", "commit": "851e865342e5a4cb1ae23d31caf6e991e1c99f1e" },
-  "nvim-web-devicons": { "branch": "master", "commit": "c72328a5494b4502947a022fe69c0c47e53b6aa6" },
-  "outline.nvim": { "branch": "main", "commit": "c293eb56db880a0539bf9d85b4a27816960b863e" },
+  "nvim-web-devicons": { "branch": "master", "commit": "dfbfaa967a6f7ec50789bead7ef87e336c1fa63c" },
+  "outline.nvim": { "branch": "main", "commit": "2a132953b944561d45b52e4541ebfff71934a742" },
   "pest.vim": { "branch": "master", "commit": "60cae7ea1beb644ed40081a3ec213ea9061aba09" },
   "plenary.nvim": { "branch": "master", "commit": "74b06c6c75e4eeb3108ec01852001636d85a932b" },
-  "rainbow-delimiters.nvim": { "branch": "master", "commit": "aab6caaffd79b8def22ec4320a5344f7c42f58d2" },
+  "rainbow-delimiters.nvim": { "branch": "master", "commit": "a798325b7f36acc62741d1029930a7b96d4dd4bf" },
   "registers": { "branch": "main", "commit": "c217f8f369e0886776cda6c94eab839b30a8940d" },
-  "render-markdown.nvim": { "branch": "main", "commit": "54d4b5431e9634ee3d8d30784e017239b5b89d41" },
-  "ripgrep": { "branch": "master", "commit": "4519153e5e461527f4bca45b042fff45c4ec6fb9" },
-  "telescope.nvim": { "branch": "master", "commit": "f7c673b8e46e8f233ff581d3624a517d33a7e264" },
+  "render-markdown.nvim": { "branch": "main", "commit": "5adf0895310c1904e5abfaad40a2baad7fe44a07" },
+  "ripgrep": { "branch": "master", "commit": "82313cf95849bfe425109ad9506a52154879b1b1" },
+  "telescope.nvim": { "branch": "master", "commit": "7d324792b7943e4aa16ad007212e6acc6f9fe335" },
   "todo-comments.nvim": { "branch": "main", "commit": "31e3c38ce9b29781e4422fc0322eb0a21f4e8668" },
   "tokyonight.nvim": { "branch": "main", "commit": "cdc07ac78467a233fd62c493de29a17e0cf2b2b6" },
   "trouble.nvim": { "branch": "main", "commit": "bd67efe408d4816e25e8491cc5ad4088e708a69a" },
-  "vim-floaterm": { "branch": "master", "commit": "0ab5eb8135dc884bc543a819ac7033c15e72a76b" },
+  "vim-floaterm": { "branch": "master", "commit": "bb4ba7952e906408e1f83b215f55ffe57efcade6" },
   "vim-repeat": { "branch": "master", "commit": "65846025c15494983dafe5e3b46c8f88ab2e9635" }
 }

modules/coding/editor/neovim/nvim/lua/plugins/lsp/lspconfig.lua

@@ -80,8 +80,9 @@ local servers = {
   html = {},
   java_language_server = {},
   jsonls = {},
-  pyright = {},
-  taplo = {},
+  pyrefly = {},
+  -- taplo = {},
+  tombi = {},
   ts_ls = {},
   typos_lsp = {},
   -- keep-sorted end

modules/coding/editor/neovim/nvim/lua/plugins/plugins-setup.lua

@@ -95,14 +95,12 @@ local plugins = {
   },
   {
     url = "https://gitlab.com/HiPhish/rainbow-delimiters.nvim",
-    event = "VeryLazy",
     config = function()
       require("plugins.rainbow-delimiters")
     end,
   },
   {
     "lukas-reineke/indent-blankline.nvim",
-    event = "VeryLazy",
     dependencies = { "https://gitlab.com/HiPhish/rainbow-delimiters.nvim" },
     config = function()
       require("ibl").setup(require("plugins.indent-blankline"))
@@ -110,13 +108,11 @@ local plugins = {
   },
   {
     "norcalli/nvim-colorizer.lua",
-    event = "VeryLazy",
     opt = {},
   },
   {
     "neovim/nvim-lspconfig",
     dependencies = { "saghen/blink.cmp" },
-    event = "VeryLazy",
     config = function()
       require("plugins.lsp.lspconfig")
       require("plugins.lsp.others")
@@ -178,7 +174,6 @@ local plugins = {
   },
   {
     "saghen/blink.cmp",
-    event = "VeryLazy",
     dependencies = {
       {
         "L3MON4D3/LuaSnip",
@@ -198,6 +193,7 @@ local plugins = {
           },
         },
       },
+      "saghen/blink.lib",
     },
     config = function()
       require("blink.cmp").setup(require("plugins.cmp.cmp"))
@@ -205,7 +201,6 @@ local plugins = {
   },
   {
     "numToStr/Comment.nvim",
-    event = "VeryLazy",
     opts = {},
   },
   {
@@ -221,7 +216,6 @@ local plugins = {
   },
   {
     "lewis6991/gitsigns.nvim",
-    event = "VeryLazy",
     config = function()
       require("gitsigns").setup(require("plugins.gitsigns"))
     end,
@@ -273,7 +267,6 @@ local plugins = {
   },
   {
     "alexghergh/nvim-tmux-navigation",
-    event = "VeryLazy",
     config = function()
       require("nvim-tmux-navigation").setup(require("plugins.tmuxnav"))
     end,
@@ -299,7 +292,6 @@ local plugins = {
   },
   {
     "folke/noice.nvim",
-    event = "VeryLazy",
     dependencies = {
       "MunifTanjim/nui.nvim",
       "rcarriga/nvim-notify",
@@ -314,31 +306,14 @@ local plugins = {
   },
   {
     "voldikss/vim-floaterm",
-    event = "VeryLazy",
     config = function()
       require("plugins.floaterm")
     end,
   },
   {
     "folke/todo-comments.nvim",
-    event = "VeryLazy",
     opts = {},
   },
-  {
-    "ojroques/nvim-osc52",
-    event = "VeryLazy",
-    config = function()
-      require("osc52").setup({
-        tmux_passthrough = true,
-      })
-      local function copy()
-        if vim.v.event.operator == "y" and vim.v.event.regname == "+" then
-          require("osc52").copy_register("+")
-        end
-      end
-      vim.api.nvim_create_autocmd("TextYankPost", { callback = copy })
-    end,
-  },
   {
     "pest-parser/pest.vim",
     ft = "pest",
@@ -351,7 +326,7 @@ local plugins = {
   },
 
   {
-    "tversteeg/registers.nvim",
+    "https://codeberg.org/fosk/registers.nvim",
     cmd = "Registers",
     config = true,
     keys = {

modules/coding/editor/vscode.nix

@@ -14,10 +14,7 @@ in
 
   config = lib.mkIf cfg.enable {
     my.hm = {
-      programs.vscode = {
-        enable = true;
-        package = pkgs.vscodium-wayland or pkgs.vscodium;
-      };
+      programs.vscodium.enable = true;
     };
     my.persist.homeDirs = [
       ".config/VSCodium"

modules/coding/langs/all.nix

@@ -18,6 +18,7 @@ in
       java.enable = true;
       qml.enable = true;
       typst.enable = true;
+      toml.enable = true;
     };
   };
 }

modules/coding/langs/python.nix

@@ -16,7 +16,7 @@ in
     my.hm.home.packages = with pkgs; [
       python3
       uv
-      pyright
+      pyrefly
     ];
   };
 }

modules/coding/langs/toml.nix

@@ -0,0 +1,20 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.my.coding.langs.toml;
+in
+{
+  options.my.coding.langs.toml = {
+    enable = lib.mkEnableOption "TOML";
+  };
+
+  config = lib.mkIf cfg.enable {
+    my.hm.home.packages = with pkgs; [
+      tombi
+    ];
+  };
+}

modules/core/nix.nix

@@ -41,9 +41,13 @@ in
         "nix/nix-racer.toml".source = (pkgs.formats.toml { }).generate "nix-racer.toml" {
           listen = "127.0.0.1:2048";
           substituters = [
+            # {
+            #   penalty = 0;
+            #   url = "https://mirror.sjtu.edu.cn/nix-channels/store";
+            # }
             {
               penalty = 0;
-              url = "https://mirror.sjtu.edu.cn/nix-channels/store";
+              url = "https://mirrors.sjtug.sjtu.edu.cn/nix-channels/store";
             }
             {
               penalty = 50;
@@ -55,7 +59,7 @@ in
             }
             {
               penalty = 0;
-              url = "https://cache.garnix.io";
+              url = "https://cache.numtide.com";
             }
             {
               penalty = 100;
@@ -114,16 +118,17 @@ in
       experimental-features = "nix-command flakes pipe-operators";
       substituters = lib.mkForce [
         "http://127.0.0.1:2048"
+        "https://mirrors.sjtug.sjtu.edu.cn/nix-channels/store"
+        "https://cache.numtide.com"
+        "https://cache.nixos.org"
 
         # "https://mirrors.ustc.edu.cn/nix-channels/store"
         # "https://mirrors.sjtug.sjtu.edu.cn/nix-channels/store"
-        # "https://mirror.sjtu.edu.cn/nix-channels/store"
         # "https://nix-community.cachix.org"
-        # "https://cache.garnix.io"
       ];
       trusted-public-keys = [
         "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-        "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
+        "niks3.numtide.com-1:DTx8wZduET09hRmMtKdQDxNNthLQETkc/yaX7M4qK0g="
       ];
       download-buffer-size = 536870912; # 512 MiB
       warn-dirty = false;

modules/core/user.nix

@@ -2,6 +2,7 @@
   config,
   lib,
   pkgs,
+  hostname,
   username,
   userdesc,
   secrets,
@@ -38,67 +39,18 @@ in
     };
     users.users.root.hashedPasswordFile = lib.mkDefault config.sops.secrets.imxyy-nix-hashed-password.path;
 
-    security.sudo.enable = false;
-    security.doas = {
+    security.sudo = {
       enable = true;
       extraRules = [
         {
-          users = [ username ];
-          noPass = true;
-          keepEnv = true;
+          users = [ "imxyy" ];
+          commands = lib.singleton {
+            command = "ALL";
+            options = lib.optionals (hostname == "imxyy-nix") [ "NOPASSWD" ];
+          };
         }
       ];
     };
-    environment.shellAliases = {
-      sudoedit = "doasedit";
-    };
-    environment.systemPackages = [
-      (pkgs.writeShellScriptBin "sudo" ''exec doas "$@"'')
-      (pkgs.writeShellScriptBin "doasedit" ''
-        if [ -n "''${2}" ]; then
-          printf 'Expected only one argument\n'
-          exit 1
-        elif [ -z "''${1}" ]; then
-          printf 'No file path provided\n'
-          exit 1
-        elif [ "$(id -u)" -eq 0 ]; then
-          printf 'Cannot be run as root\n'
-          exit 1
-        fi
-
-        set -eu
-
-        tempdir="$(mktemp -d)"
-
-        trap 'rm -rf $tempdir' EXIT
-        srcfile="$(doas realpath "$1")"
-
-        if doas [ -f "$srcfile" ]; then
-          doas cp -a "$srcfile" "$tempdir"/file
-          doas cp -a "$tempdir"/file "$tempdir"/edit
-
-          # make sure that the file is editable by user
-          doas chown "$USER":"$USER" "$tempdir"/edit
-          chmod 600 "$tempdir"/edit
-        else
-          # create file with "regular" system permissions (root:root 644)
-          touch "$tempdir"/file
-          doas chown root:root "$tempdir"/file
-        fi
-
-        $EDITOR "$tempdir"/edit
-
-        doas tee "$tempdir"/file 1>/dev/null < "$tempdir"/edit
-
-        if doas cmp -s "$tempdir/file" "$srcfile"; then
-          printf 'Skipping write; no changes.\n'
-          exit 0
-        else
-          doas mv -f "$tempdir"/file "$srcfile"
-          exit 0
-        fi
-      '')
-    ];
 
     nix.settings.trusted-users = [
       "root"

modules/desktop/browser/zen.nix

@@ -2,7 +2,6 @@
   config,
   lib,
   pkgs,
-  hostname,
   ...
 }:
 let
@@ -16,7 +15,7 @@ in
   config = lib.mkIf cfg.enable {
     my.hm.programs.zen-browser = {
       enable = true;
-      nativeMessagingHosts = [ pkgs.firefoxpwa ];
+      nativeMessagingHosts = [ pkgs.master.firefoxpwa ];
       policies = {
         # find more options here: https://mozilla.github.io/policy-templates/
         DisableAppUpdate = true;

modules/desktop/media/splayer.nix

@@ -13,7 +13,23 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    my.hm.home.packages = [ pkgs.splayer ];
+    nixpkgs.config.permittedInsecurePackages = (
+      lib.warn
+        ''
+          SPlayer still using pnpm 10.29.2. Check
+          https://github.com/NixOS/nixpkgs/issues/535580#issuecomment-4809489104
+        ''
+        [
+          "pnpm-10.29.2"
+        ]
+    );
+
+    my.hm.home.packages = [
+      # (pkgs.master.splayer.override {
+      #   pnpm_10_29_2 = pkgs.pnpm_10;
+      # })
+      pkgs.splayer
+    ];
     my.persist.homeDirs = [
       ".config/SPlayer"
     ];

modules/desktop/style/default.nix

@@ -2,6 +2,7 @@
   config,
   lib,
   pkgs,
+  impure,
   ...
 }:
 let
@@ -13,19 +14,6 @@ in
   };
 
   config = lib.mkIf cfg.enable {
-    catppuccin.sddm = {
-      enable = true;
-      font = "Jetbrains Mono";
-      fontSize = "18";
-    };
-    services.displayManager.sddm = {
-      package = pkgs.kdePackages.sddm;
-      settings.Theme = {
-        CursorTheme = "breeze-dark";
-        CursorSize = 24;
-      };
-    };
-
     my.hm = {
       stylix = {
         enable = true;
@@ -81,20 +69,21 @@ in
       #QT
       qt = {
         enable = true;
-        style.package = with pkgs; [
-          darkly-qt5
+        platformTheme.name = "kde";
+        style = {
+          package = with pkgs; [
             darkly-qt6
           ];
-        platformTheme.name = "qtct";
+          name = "Darkly";
+        };
       };
 
       xdg.configFile = {
-        "qt5ct/qt5ct.conf".source = pkgs.replaceVars ./qtct/qt5ct.conf {
-          darker = pkgs.libsForQt5.qt5ct + /share/qt5ct/colors/darker.conf;
-        };
-        "qt6ct/qt6ct.conf".source = pkgs.replaceVars ./qtct/qt6ct.conf {
-          darker = pkgs.qt6Packages.qt6ct + /share/qt6ct/colors/darker.conf;
-        };
+        kdeglobals.source = impure.mkImpureLink ./kdeglobals;
+        plasmarc.text = ''
+          [Theme]
+          name=darkly
+        '';
       };
     };
   };

modules/desktop/style/kdeglobals

@@ -0,0 +1,140 @@
+[ColorEffects:Disabled]
+ChangeSelectionColor=
+Color=36,36,36
+ColorAmount=0.5
+ColorEffect=3
+ContrastAmount=0.5
+ContrastEffect=0
+Enable=
+IntensityAmount=0
+IntensityEffect=0
+
+[ColorEffects:Inactive]
+ChangeSelectionColor=true
+Color=51,51,51
+ColorAmount=0.4
+ColorEffect=3
+ContrastAmount=0.4
+ContrastEffect=0
+Enable=true
+IntensityAmount=-0.2
+IntensityEffect=0
+
+[Colors:Button]
+BackgroundAlternate=77,77,77
+BackgroundNormal=50,50,50
+DecorationFocus=52,120,218
+DecorationHover=0,161,236
+ForegroundActive=61,174,233
+ForegroundInactive=199,199,199
+ForegroundLink=0,100,255
+ForegroundNegative=218,68,83
+ForegroundNeutral=246,116,0
+ForegroundNormal=241,241,241
+ForegroundPositive=36,173,89
+ForegroundVisited=115,115,158
+
+[Colors:Complementary]
+BackgroundAlternate=59,64,69
+BackgroundNormal=49,54,59
+DecorationFocus=30,146,255
+DecorationHover=61,174,230
+ForegroundActive=246,116,0
+ForegroundInactive=175,176,179
+ForegroundLink=61,174,230
+ForegroundNegative=237,21,21
+ForegroundNeutral=201,206,59
+ForegroundNormal=239,240,241
+ForegroundPositive=17,209,22
+ForegroundVisited=61,174,230
+
+[Colors:Selection]
+BackgroundAlternate=29,153,243
+BackgroundNormal=27,145,213
+DecorationFocus=52,120,218
+DecorationHover=0,161,236
+ForegroundActive=252,252,252
+ForegroundInactive=241,241,241
+ForegroundLink=0,100,255
+ForegroundNegative=218,68,83
+ForegroundNeutral=246,116,0
+ForegroundNormal=241,241,241
+ForegroundPositive=36,173,89
+ForegroundVisited=115,115,158
+
+[Colors:Tooltip]
+BackgroundAlternate=77,77,77
+BackgroundNormal=59,59,59
+DecorationFocus=52,120,218
+DecorationHover=0,161,236
+ForegroundActive=61,174,233
+ForegroundInactive=199,199,199
+ForegroundLink=0,100,255
+ForegroundNegative=218,68,83
+ForegroundNeutral=246,116,0
+ForegroundNormal=239,240,241
+ForegroundPositive=36,173,89
+ForegroundVisited=115,115,158
+
+[Colors:View]
+BackgroundAlternate=54,54,54
+BackgroundNormal=44,44,44
+DecorationFocus=52,120,218
+DecorationHover=0,161,236
+ForegroundActive=61,174,233
+ForegroundInactive=199,199,199
+ForegroundLink=0,100,255
+ForegroundNegative=218,68,83
+ForegroundNeutral=246,116,0
+ForegroundNormal=241,241,241
+ForegroundPositive=36,173,89
+ForegroundVisited=115,115,158
+
+[Colors:Window]
+BackgroundAlternate=77,77,77
+BackgroundNormal=34,34,34
+DecorationFocus=52,120,218
+DecorationHover=0,161,236
+ForegroundActive=61,174,233
+ForegroundInactive=199,199,199
+ForegroundLink=0,100,255
+ForegroundNegative=218,68,83
+ForegroundNeutral=246,116,0
+ForegroundNormal=239,240,241
+ForegroundPositive=36,173,89
+ForegroundVisited=115,115,158
+
+[General]
+ColorScheme=Darkly
+
+[Icons]
+Theme=Papirus-Dark
+
+[KDE]
+contrast=0
+frameContrast=0.2
+
+[KFileDialog Settings]
+Allow Expansion=false
+Automatically select filename extension=true
+Breadcrumb Navigation=true
+Decoration position=2
+Show Full Path=false
+Show Inline Previews=true
+Show Preview=false
+Show Speedbar=true
+Show hidden files=false
+Sort by=Name
+Sort directories first=true
+Sort hidden files last=false
+Sort reversed=false
+Speedbar Width=154
+View Style=DetailTree
+
+[WM]
+activeBackground=34,34,34
+activeBlend=255,255,255
+activeForeground=204,204,204
+inactiveBackground=44,44,44
+inactiveBlend=44,44,44
+inactiveForeground=144,144,144

modules/desktop/wm/niri/config.nix

@@ -119,12 +119,8 @@ in
               "cliphist"
               "store"
             ]
-            # TODO: Is there a better way?
             [
-              "systemctl"
-              "restart"
-              "--user"
-              "noctalia-shell.service"
+              "noctalia-shell"
             ]
           ]
         );

modules/desktop/wm/niri/default.nix

@@ -15,14 +15,19 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    niri-flake.cache.enable = false;
     programs.niri = {
       enable = true;
       package = pkg;
     };
     services.displayManager = {
-      sddm = {
+      ly = {
         enable = true;
-        wayland.enable = true;
+        settings = {
+          animation = "matrix";
+          session_log = ".local/state/ly-session.log";
+          shell = false;
+        };
       };
     };
 
@@ -77,7 +82,6 @@ in
 
       programs.noctalia-shell = {
         enable = true;
-        systemd.enable = true;
         # modified from official Tokyo-Night theme
         colors = {
           mError = "#f7768e";

modules/getty-autologin.nix

@@ -1,77 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  ...
-}:
-
-with lib;
-
-let
-  cfg = config.my.autologin;
-  gettycfg = config.services.getty;
-
-  baseArgs = [
-    "--login-program"
-    "${gettycfg.loginProgram}"
-  ]
-  ++ optionals (gettycfg.loginOptions != null) [
-    "--login-options"
-    gettycfg.loginOptions
-  ]
-  ++ gettycfg.extraArgs;
-
-  gettyCmd = args: "@${pkgs.util-linux}/sbin/agetty agetty ${escapeShellArgs baseArgs} ${args}";
-
-  forAllAutologinTTYs =
-    config:
-    attrsets.mergeAttrsList (map (ttynum: { "getty@tty${toString ttynum}" = config; }) cfg.ttys);
-
-  autologinModule = types.submodule {
-    options = {
-      enable = mkEnableOption "autologin";
-      user = mkOption {
-        type = types.str;
-        default = "";
-        example = "foo";
-        description = mdDoc ''
-          Username of the account that will be automatically logged in at the console.
-        '';
-      };
-      ttys = mkOption {
-        type = types.listOf types.int;
-        default = [ 6 ];
-        description = mdDoc ''
-          TTY numbers for autologin.user to login to.
-        '';
-      };
-    };
-  };
-
-in
-
-{
-  ###### interface
-
-  options = {
-
-    my.autologin = mkOption {
-      type = autologinModule;
-      default = { };
-    };
-
-  };
-
-  ###### implementation
-
-  config = mkIf cfg.enable {
-    systemd.services = forAllAutologinTTYs {
-      overrideStrategy = "asDropin"; # needed for templates to work
-      serviceConfig.ExecStart = [
-        ""
-        (gettyCmd "--noclear --keep-baud %I 115200,38400,9600 -a ${cfg.user} $TERM")
-      ];
-    };
-  };
-
-}

overlays/default.nix

@@ -20,10 +20,6 @@ in
         bottles.__input.removeWarningPopup.__assign = true;
 
         easytier.__assign = final.stable.easytier;
-
-        openldap.__output.doCheck.__assign =
-          builtins.warn "doCheck disabled for openldap, check https://github.com/NixOS/nixpkgs/issues/514113"
-            (!prev.stdenv.hostPlatform.isi686);
       };
   }
   //

profiles/desktop.nix

@@ -10,6 +10,9 @@
     grub.enable = false;
     timeout = 0;
   };
+  boot.kernel.sysctl = {
+    "kernel.printk" = "3 4 1 3";
+  };
 
   security.pam.loginLimits = [
     {

secrets/mihomo.yaml

@@ -9,6 +9,14 @@ external-controller-cors:
     allow-origins:
         - ENC[AES256_GCM,data:Ow==,iv:C2R4gooPGj4lranMXP6Uu+nCbGhVk1S37dBKbYgdsRU=,tag:onXhjT4c/qMoayForPKwEQ==,type:str]
     allow-private-network: ENC[AES256_GCM,data:mxDrog==,iv:L4hT2zLieK7nQnp5GvdHTsnSkeTz61v77nr281lAcag=,tag:jCQgs+0aDrl7BSZYxI7qUw==,type:bool]
+dns:
+    enable: ENC[AES256_GCM,data:Rp3LZg==,iv:NHk64bGDFmimNmXDk9n9ZqLFVbO8cyWVqivRSDxUowk=,tag:Y5IhMI7n2JtcXfFnEY77PQ==,type:bool]
+    default-nameserver:
+        - ENC[AES256_GCM,data:eEwdzhx+ysGj,iv:FZ6vsFPP5dnfcImydU46J8vA9GYbejP3zEXHA6D+6J0=,tag:lmG+OzJwFtBKHraF4PsCjQ==,type:str]
+    proxy-server-nameserver:
+        - ENC[AES256_GCM,data:n3PMmscYUm2eXFe3/uNsKPF0rwyQBtGTsA==,iv:FMOP4qohNNqfLIo7U6mk5qxBm0eXVFCbI0KD7kfw1/Y=,tag:N6H/gESlK1Cr5J2T3Mxldg==,type:str]
+        - ENC[AES256_GCM,data:G5eodgYoIwtWDMnuEg2srdwCJqQi+OAsyPtp4OvT,iv:5maumIhsmc/QE1ey4rufm6Y8G4OqG3qyY0Ybv/24LoI=,tag:heYvV2IVsIMRBEwQwlJlWg==,type:str]
+        - ENC[AES256_GCM,data:3CbO5pelMlvJxgoawFkEmARs8Xwgw87eKg==,iv:A21aiwBT98NT0VQ2vaepx/F8AG8rWawNWdch+yVDYCM=,tag:OkTMbH5QnXbxf8NQyer8pA==,type:str]
 proxies:
     - type: ENC[AES256_GCM,data:82CKWRU=,iv:MmoXN4hqcC2BE93Tfex3swEj50XK6jmjLIWAyRs8WRI=,tag:faiVNIHjq0fRMLiiJoWamg==,type:str]
       name: ENC[AES256_GCM,data:mLelhl+5dSLY5TIjoTw=,iv:cJtCH/fMib1KapWVQGsRgy5yRCUC5EZq4RdahEb7NyQ=,tag:ree+OgPt6ixLigZVo06dwQ==,type:str]
@@ -32,6 +40,7 @@ proxy-providers:
         url: ENC[AES256_GCM,data:aTVsXCfaCkdZes1CW8SJVQFiTZ/KbYky6ei0FKSmeCF8/TbaLIKKR46FX2yQ8682fdcLGcAB8ekblQ==,iv:7OQ69sjVWNyOrPVlA8DWTAbw/LIVzFFm5dK4FBcwvyk=,tag:gLVzTM5PypNLpaIOiPYc/Q==,type:str]
         proxy: ENC[AES256_GCM,data:BIEXrZQ=,iv:ZzEEJmLgbOhBTcZEgPfsL0AC72GpydlFTKhJ4+fgTec=,tag:v8URxwAU5wSHD5GPr/sTfw==,type:str]
         exclude-filter: ENC[AES256_GCM,data:Uc9L0zm7TWGAgIQq6thwK4evIuYoEJyRJ2M=,iv:CbJp7BcobOfkxyY7/fvaECif57yhPZ1/IuPjLwYUwUQ=,tag:xtGissYFtBX3OVinstWRug==,type:str]
+        interval: ENC[AES256_GCM,data:fNfSoA==,iv:wYzKqRsdez6gUGQJOgRnqjOzKtNidMKHYNBBrYtPWfk=,tag:woWqs7uC2nSEkvnROTVFRA==,type:int]
 proxy-groups:
     - name: ENC[AES256_GCM,data:O6LAzFQ=,iv:a+dfdy14adLlYbJQ5wAQLsD5hxuEXKW8Y/erhBVAREE=,tag:79++dpg2E2Mtc8y63nRcHw==,type:str]
       type: ENC[AES256_GCM,data:JR3d3D1p,iv:n0u8vayA0PVDM7yvh2pk36S8EeqMnZRN8TZlwNnEC3U=,tag:ZmxXOralviL2xyd8+hN3ZA==,type:str]
@@ -43,8 +52,7 @@ rules:
     - ENC[AES256_GCM,data:S6yGMmG4UUUWE04=,iv:FWz0kNu0hhQ+PyIMSxl6NPX/INluS7jAO9loX+E+jlE=,tag:tXK35hMiYDU8X0yl+0PRuQ==,type:str]
 sops:
     age:
-        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEFLUkyeaK8ZPPZdVNEmtx8zvoxi7xqS2Z6oxRBuUPO
-          enc: |
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDltTWRrUSA2Zkxs
             SGh4Ulp1UklKeDU4M2xtcWZPRGxNUGt4eGVQQ29LcjB2YXJGRVVnClZLSmRra0Qx
@@ -53,8 +61,8 @@ sops:
             sF/MYEjihktzyngzTLyuwHYYb1xqTbpmjFNzJfbW7+LJJSPQ9cu6W7DcZGIsSe0e
             VNycmg==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB28jpN+h5euh3NtdN+A+EtqgIatC22e4i1TPTioKire
-          enc: |
+          recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEFLUkyeaK8ZPPZdVNEmtx8zvoxi7xqS2Z6oxRBuUPO
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IHJNY1d1ZyBXVDk0
             bjZhMnRabGVLSHorWmRhd0NjTVF2VTZQVzZSeEkzK3c5WDBoM0FVCjB3cTB6NTYy
@@ -63,8 +71,8 @@ sops:
             dQxXWnexmkLryDtddH1sdCdQh8e9D1IJFjuOD8JzsyWToWFuo01Cw27VLWGAGnFD
             GZpp+A==
             -----END AGE ENCRYPTED FILE-----
-        - recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMb5G/ieEYBOng66YeyttBQLThyM6W//z2POsNyq4Rw/
-          enc: |
+          recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB28jpN+h5euh3NtdN+A+EtqgIatC22e4i1TPTioKire
+        - enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFhGYmtrZyBzVFdr
             TTNiK1VIRUk4N2l6TDcyMmw5U3ZRMzR2QlMrcy9XL1RLOCtzNUdnCnkvRmdmZ2gz
@@ -73,7 +81,8 @@ sops:
             FY9SvbPWXVTcJiLwjpcD8tSMdqcTHTJXcLAWSCjyFF91ihBUanQ7TcdXvZTGfdY0
             pOoJmg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-02-11T03:50:06Z"
-    mac: ENC[AES256_GCM,data:SqQbTjyvC7ev2egnq9swpQcLjVW1yZ0Yiv6DzNTupUVkl8yP4L6pGJ9P0EiuX/JFPFhAv+x61uudGNUUEu2pPdgHO80glBriATM54o7KILVkrm5TYQVZbD9YsAQsmPw3etVeaMk1a6dgIExW8+DG+KLq/qI/fJk1K0mWv9RR940=,iv:fwqW6E9vVFcLVm4mdI/zZlNeq55yz2AyKKvvx9D1nFA=,tag:qoyhpooNb/taN64s926nRw==,type:str]
+          recipient: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMb5G/ieEYBOng66YeyttBQLThyM6W//z2POsNyq4Rw/
+    lastmodified: "2026-06-13T04:02:11Z"
+    mac: ENC[AES256_GCM,data:VWXa9HdGyPBkLQH5lgqioYbd3VxvL7PjuwiHrX353W+G4Lu/VaMHAz9AFN495cLyCm1dB4VwC773JmLNYKbCzHswQr4tpkp7AlIhvCbt+S0L5ZXLxOlVMd0vONGxQOQHhxQnRONXg9K2i7rTfTjGBdY1o/alswfsNrhaL7g/+OY=,iv:Z3MNOcTU9AQ8yEQgYxXKmv+09cXbF1RalrNXqJYTGUs=,tag:K1kps0EPAKYbQradY02yOQ==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.11.0
+    version: 3.13.1

typos.toml

@@ -1,3 +1,5 @@
+#:schema https://raw.githubusercontent.com/crate-ci/typos/refs/heads/master/config.schema.json
+
 [files]
 extend-exclude = [
     "secrets"